drivers/net/wireless/rockchip_wlan/rtl8723ds/os_dep/linux/ioctl_linux.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of version 2 of the GNU General Public License as
   7  * published by the Free Software Foundation.
   8  *
   9  * This program is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  12  * more details.
  13  *
  14  * You should have received a copy of the GNU General Public License along with
  15  * this program; if not, write to the Free Software Foundation, Inc.,
  16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  17  *
  18  *
  19  ******************************************************************************/
  20 #define _IOCTL_LINUX_C_
  21
  22 #include <drv_types.h>
  23 #include <rtw_mp.h>
  24 #include <rtw_mp_ioctl.h>
  25 #include "../../hal/phydm/phydm_precomp.h"
  26
  27 #if (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 27))
  28 #define  iwe_stream_add_event(a, b, c, d, e)  iwe_stream_add_event(b, c, d, e)
  29 #define  iwe_stream_add_point(a, b, c, d, e)  iwe_stream_add_point(b, c, d, e)
  30 #endif
  31
  32 #ifdef CONFIG_80211N_HT
  33 extern int rtw_ht_enable;
  34 #endif
  35
  36
  37 #define RTL_IOCTL_WPA_SUPPLICANT        (SIOCIWFIRSTPRIV+30)
  38
  39 #define SCAN_ITEM_SIZE 768
  40 #define MAX_CUSTOM_LEN 64
  41 #define RATE_COUNT 4
  42
  43 #ifdef CONFIG_GLOBAL_UI_PID
  44 extern int ui_pid[3];
  45 #endif
  46
  47 /* combo scan */
  48 #define WEXT_CSCAN_AMOUNT 9
  49 #define WEXT_CSCAN_BUF_LEN              360
  50 #define WEXT_CSCAN_HEADER               "CSCAN S\x01\x00\x00S\x00"
  51 #define WEXT_CSCAN_HEADER_SIZE          12
  52 #define WEXT_CSCAN_SSID_SECTION         'S'
  53 #define WEXT_CSCAN_CHANNEL_SECTION      'C'
  54 #define WEXT_CSCAN_NPROBE_SECTION       'N'
  55 #define WEXT_CSCAN_ACTV_DWELL_SECTION   'A'
  56 #define WEXT_CSCAN_PASV_DWELL_SECTION   'P'
  57 #define WEXT_CSCAN_HOME_DWELL_SECTION   'H'
  58 #define WEXT_CSCAN_TYPE_SECTION         'T'
  59
  60
  61 extern u8 key_2char2num(u8 hch, u8 lch);
  62 extern u8 str_2char2num(u8 hch, u8 lch);
  63 extern void macstr2num(u8 *dst, u8 *src);
  64 extern u8 convert_ip_addr(u8 hch, u8 mch, u8 lch);
  65
  66 u32 rtw_rates[] = {1000000, 2000000, 5500000, 11000000,
  67         6000000, 9000000, 12000000, 18000000, 24000000, 36000000, 48000000, 54000000};
  68
  69 static const char *const iw_operation_mode[] = {
  70         "Auto", "Ad-Hoc", "Managed",  "Master", "Repeater", "Secondary", "Monitor"
  71 };
  72
  73 static int hex2num_i(char c)
  74 {
  75         if (c >= '0' && c <= '9')
  76                 return c - '0';
  77         if (c >= 'a' && c <= 'f')
  78                 return c - 'a' + 10;
  79         if (c >= 'A' && c <= 'F')
  80                 return c - 'A' + 10;
  81         return -1;
  82 }
  83
  84 static int hex2byte_i(const char *hex)
  85 {
  86         int a, b;
  87         a = hex2num_i(*hex++);
  88         if (a < 0)
  89                 return -1;
  90         b = hex2num_i(*hex++);
  91         if (b < 0)
  92                 return -1;
  93         return (a << 4) | b;
  94 }
  95
  96 /**
  97  * hwaddr_aton - Convert ASCII string to MAC address
  98  * @txt: MAC address as a string (e.g., "00:11:22:33:44:55")
  99  * @addr: Buffer for the MAC address (ETH_ALEN = 6 bytes)
 100  * Returns: 0 on success, -1 on failure (e.g., string not a MAC address)
 101  */
 102 static int hwaddr_aton_i(const char *txt, u8 *addr)
 103 {
 104         int i;
 105
 106         for (i = 0; i < 6; i++) {
 107                 int a, b;
 108
 109                 a = hex2num_i(*txt++);
 110                 if (a < 0)
 111                         return -1;
 112                 b = hex2num_i(*txt++);
 113                 if (b < 0)
 114                         return -1;
 115                 *addr++ = (a << 4) | b;
 116                 if (i < 5 && *txt++ != ':')
 117                         return -1;
 118         }
 119
 120         return 0;
 121 }
 122
 123 static void indicate_wx_custom_event(_adapter *padapter, char *msg)
 124 {
 125         u8 *buff, *p;
 126         union iwreq_data wrqu;
 127
 128         if (strlen(msg) > IW_CUSTOM_MAX) {
 129                 RTW_INFO("%s strlen(msg):%zu > IW_CUSTOM_MAX:%u\n", __FUNCTION__ , strlen(msg), IW_CUSTOM_MAX);
 130                 return;
 131         }
 132
 133         buff = rtw_zmalloc(IW_CUSTOM_MAX + 1);
 134         if (!buff)
 135                 return;
 136
 137         _rtw_memcpy(buff, msg, strlen(msg));
 138
 139         _rtw_memset(&wrqu, 0, sizeof(wrqu));
 140         wrqu.data.length = strlen(msg);
 141
 142         RTW_INFO("%s %s\n", __FUNCTION__, buff);
 143 #ifndef CONFIG_IOCTL_CFG80211
 144         wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
 145 #endif
 146
 147         rtw_mfree(buff, IW_CUSTOM_MAX + 1);
 148
 149 }
 150
 151
 152 static void request_wps_pbc_event(_adapter *padapter)
 153 {
 154         u8 *buff, *p;
 155         union iwreq_data wrqu;
 156
 157
 158         buff = rtw_malloc(IW_CUSTOM_MAX);
 159         if (!buff)
 160                 return;
 161
 162         _rtw_memset(buff, 0, IW_CUSTOM_MAX);
 163
 164         p = buff;
 165
 166         p += sprintf(p, "WPS_PBC_START.request=TRUE");
 167
 168         _rtw_memset(&wrqu, 0, sizeof(wrqu));
 169
 170         wrqu.data.length = p - buff;
 171
 172         wrqu.data.length = (wrqu.data.length < IW_CUSTOM_MAX) ? wrqu.data.length : IW_CUSTOM_MAX;
 173
 174         RTW_INFO("%s\n", __FUNCTION__);
 175
 176 #ifndef CONFIG_IOCTL_CFG80211
 177         wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
 178 #endif
 179
 180         if (buff)
 181                 rtw_mfree(buff, IW_CUSTOM_MAX);
 182
 183 }
 184
 185 #ifdef CONFIG_SUPPORT_HW_WPS_PBC
 186 void rtw_request_wps_pbc_event(_adapter *padapter)
 187 {
 188 #ifdef RTK_DMP_PLATFORM
 189 #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 12))
 190         kobject_uevent(&padapter->pnetdev->dev.kobj, KOBJ_NET_PBC);
 191 #else
 192         kobject_hotplug(&padapter->pnetdev->class_dev.kobj, KOBJ_NET_PBC);
 193 #endif
 194 #else
 195
 196         if (padapter->pid[0] == 0) {
 197                 /*      0 is the default value and it means the application monitors the HW PBC doesn't privde its pid to driver. */
 198                 return;
 199         }
 200
 201         rtw_signal_process(padapter->pid[0], SIGUSR1);
 202
 203 #endif
 204
 205         rtw_led_control(padapter, LED_CTL_START_WPS_BOTTON);
 206 }
 207 #endif/* #ifdef CONFIG_SUPPORT_HW_WPS_PBC */
 208
 209 void indicate_wx_scan_complete_event(_adapter *padapter)
 210 {
 211         union iwreq_data wrqu;
 212         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
 213
 214         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
 215
 216         /* RTW_INFO("+rtw_indicate_wx_scan_complete_event\n"); */
 217 #ifndef CONFIG_IOCTL_CFG80211
 218         wireless_send_event(padapter->pnetdev, SIOCGIWSCAN, &wrqu, NULL);
 219 #endif
 220 }
 221
 222
 223 void rtw_indicate_wx_assoc_event(_adapter *padapter)
 224 {
 225         union iwreq_data wrqu;
 226         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
 227         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
 228         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
 229         WLAN_BSSID_EX           *pnetwork = (WLAN_BSSID_EX *)(&(pmlmeinfo->network));
 230
 231         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
 232
 233         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 234
 235         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)
 236                 _rtw_memcpy(wrqu.ap_addr.sa_data, pnetwork->MacAddress, ETH_ALEN);
 237         else
 238                 _rtw_memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
 239
 240         RTW_PRINT("assoc success\n");
 241 #ifndef CONFIG_IOCTL_CFG80211
 242         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
 243 #endif
 244 }
 245
 246 void rtw_indicate_wx_disassoc_event(_adapter *padapter)
 247 {
 248         union iwreq_data wrqu;
 249
 250         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
 251
 252         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 253         _rtw_memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
 254
 255 #ifndef CONFIG_IOCTL_CFG80211
 256         RTW_PRINT("indicate disassoc\n");
 257         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
 258 #endif
 259 }
 260
 261 /*
 262 uint    rtw_is_cckrates_included(u8 *rate)
 263 {
 264                 u32     i = 0;
 265
 266                 while(rate[i]!=0)
 267                 {
 268                         if  (  (((rate[i]) & 0x7f) == 2)        || (((rate[i]) & 0x7f) == 4) ||
 269                         (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )
 270                         return _TRUE;
 271                         i++;
 272                 }
 273
 274                 return _FALSE;
 275 }
 276
 277 uint    rtw_is_cckratesonly_included(u8 *rate)
 278 {
 279         u32 i = 0;
 280
 281         while(rate[i]!=0)
 282         {
 283                         if  (  (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
 284                                 (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
 285                         return _FALSE;
 286                         i++;
 287         }
 288
 289         return _TRUE;
 290 }
 291 */
 292
 293 static int search_p2p_wfd_ie(_adapter *padapter,
 294                 struct iw_request_info *info, struct wlan_network *pnetwork,
 295                 char *start, char *stop)
 296 {
 297 #ifdef CONFIG_P2P
 298         struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
 299 #ifdef CONFIG_WFD
 300         if (SCAN_RESULT_ALL == pwdinfo->wfd_info->scan_result_type) {
 301
 302         } else if ((SCAN_RESULT_P2P_ONLY == pwdinfo->wfd_info->scan_result_type) ||
 303                 (SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type))
 304 #endif /* CONFIG_WFD */
 305         {
 306                 if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
 307                         u32     blnGotP2PIE = _FALSE;
 308
 309                         /*      User is doing the P2P device discovery */
 310                         /*      The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE. */
 311                         /*      If not, the driver should ignore this AP and go to the next AP. */
 312
 313                         /*      Verifying the SSID */
 314                         if (_rtw_memcmp(pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN)) {
 315                                 u32     p2pielen = 0;
 316
 317                                 /*      Verifying the P2P IE */
 318                                 if (rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen))
 319                                         blnGotP2PIE = _TRUE;
 320                         }
 321
 322                         if (blnGotP2PIE == _FALSE)
 323                                 return _FALSE;
 324
 325                 }
 326         }
 327
 328 #ifdef CONFIG_WFD
 329         if (SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type) {
 330                 u32     blnGotWFD = _FALSE;
 331                 u8 *wfd_ie;
 332                 uint wfd_ielen = 0;
 333
 334                 wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
 335                 if (wfd_ie) {
 336                         u8 *wfd_devinfo;
 337                         uint wfd_devlen;
 338
 339                         wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
 340                         if (wfd_devinfo) {
 341                                 if (pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_PSINK) {
 342                                         /*      the first two bits will indicate the WFD device type */
 343                                         if ((wfd_devinfo[1] & 0x03) == WFD_DEVINFO_SOURCE) {
 344                                                 /*      If this device is Miracast PSink device, the scan reuslt should just provide the Miracast source. */
 345                                                 blnGotWFD = _TRUE;
 346                                         }
 347                                 } else if (pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_SOURCE) {
 348                                         /*      the first two bits will indicate the WFD device type */
 349                                         if ((wfd_devinfo[1] & 0x03) == WFD_DEVINFO_PSINK) {
 350                                                 /*      If this device is Miracast source device, the scan reuslt should just provide the Miracast PSink. */
 351                                                 /*      Todo: How about the SSink?! */
 352                                                 blnGotWFD = _TRUE;
 353                                         }
 354                                 }
 355                         }
 356                 }
 357
 358                 if (blnGotWFD == _FALSE)
 359                         return _FALSE;
 360         }
 361 #endif /* CONFIG_WFD */
 362
 363 #endif /* CONFIG_P2P */
 364         return _TRUE;
 365 }
 366 static inline char *iwe_stream_mac_addr_proess(_adapter *padapter,
 367                 struct iw_request_info *info, struct wlan_network *pnetwork,
 368                 char *start, char *stop, struct iw_event *iwe)
 369 {
 370         /*  AP MAC address */
 371         iwe->cmd = SIOCGIWAP;
 372         iwe->u.ap_addr.sa_family = ARPHRD_ETHER;
 373
 374         _rtw_memcpy(iwe->u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
 375         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_ADDR_LEN);
 376         return start;
 377 }
 378 static inline char *iwe_stream_essid_proess(_adapter *padapter,
 379                 struct iw_request_info *info, struct wlan_network *pnetwork,
 380                 char *start, char *stop, struct iw_event *iwe)
 381 {
 382
 383         /* Add the ESSID */
 384         iwe->cmd = SIOCGIWESSID;
 385         iwe->u.data.flags = 1;
 386         iwe->u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
 387         start = iwe_stream_add_point(info, start, stop, iwe, pnetwork->network.Ssid.Ssid);
 388         return start;
 389 }
 390
 391 static inline char *iwe_stream_chan_process(_adapter *padapter,
 392                 struct iw_request_info *info, struct wlan_network *pnetwork,
 393                 char *start, char *stop, struct iw_event *iwe)
 394 {
 395         if (pnetwork->network.Configuration.DSConfig < 1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
 396                 pnetwork->network.Configuration.DSConfig = 1;
 397
 398         /* Add frequency/channel */
 399         iwe->cmd = SIOCGIWFREQ;
 400         iwe->u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
 401         iwe->u.freq.e = 1;
 402         iwe->u.freq.i = pnetwork->network.Configuration.DSConfig;
 403         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_FREQ_LEN);
 404         return start;
 405 }
 406 static inline char *iwe_stream_mode_process(_adapter *padapter,
 407                 struct iw_request_info *info, struct wlan_network *pnetwork,
 408                 char *start, char *stop, struct iw_event *iwe, u16 cap)
 409 {
 410         /* Add mode */
 411         if (cap & (WLAN_CAPABILITY_IBSS | WLAN_CAPABILITY_BSS)) {
 412                 iwe->cmd = SIOCGIWMODE;
 413                 if (cap & WLAN_CAPABILITY_BSS)
 414                         iwe->u.mode = IW_MODE_MASTER;
 415                 else
 416                         iwe->u.mode = IW_MODE_ADHOC;
 417
 418                 start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_UINT_LEN);
 419         }
 420         return start;
 421 }
 422 static inline char *iwe_stream_encryption_process(_adapter *padapter,
 423                 struct iw_request_info *info, struct wlan_network *pnetwork,
 424                 char *start, char *stop, struct iw_event *iwe, u16 cap)
 425 {
 426
 427         /* Add encryption capability */
 428         iwe->cmd = SIOCGIWENCODE;
 429         if (cap & WLAN_CAPABILITY_PRIVACY)
 430                 iwe->u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
 431         else
 432                 iwe->u.data.flags = IW_ENCODE_DISABLED;
 433         iwe->u.data.length = 0;
 434         start = iwe_stream_add_point(info, start, stop, iwe, pnetwork->network.Ssid.Ssid);
 435         return start;
 436
 437 }
 438
 439 static inline char *iwe_stream_protocol_process(_adapter *padapter,
 440                 struct iw_request_info *info, struct wlan_network *pnetwork,
 441                 char *start, char *stop, struct iw_event *iwe)
 442 {
 443         u16 ht_cap = _FALSE, vht_cap = _FALSE;
 444         u32 ht_ielen = 0, vht_ielen = 0;
 445         char *p;
 446         u8 ie_offset = (pnetwork->network.Reserved[0] == 2 ? 0 : 12); /* Probe Request   */
 447
 448         /* parsing HT_CAP_IE     */
 449         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength - ie_offset);
 450         if (p && ht_ielen > 0)
 451                 ht_cap = _TRUE;
 452
 453 #ifdef CONFIG_80211AC_VHT
 454         /* parsing VHT_CAP_IE */
 455         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], EID_VHTCapability, &vht_ielen, pnetwork->network.IELength - ie_offset);
 456         if (p && vht_ielen > 0)
 457                 vht_cap = _TRUE;
 458 #endif
 459         /* Add the protocol name */
 460         iwe->cmd = SIOCGIWNAME;
 461         if ((rtw_is_cckratesonly_included((u8 *)&pnetwork->network.SupportedRates)) == _TRUE) {
 462                 if (ht_cap == _TRUE)
 463                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11bn");
 464                 else
 465                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11b");
 466         } else if ((rtw_is_cckrates_included((u8 *)&pnetwork->network.SupportedRates)) == _TRUE) {
 467                 if (ht_cap == _TRUE)
 468                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11bgn");
 469                 else
 470                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11bg");
 471         } else {
 472                 if (pnetwork->network.Configuration.DSConfig > 14) {
 473                         #ifdef CONFIG_80211AC_VHT
 474                         if (vht_cap == _TRUE)
 475                                 snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11AC");
 476                         else
 477                         #endif
 478                         {
 479                                 if (ht_cap == _TRUE)
 480                                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11an");
 481                                 else
 482                                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11a");
 483                         }
 484                 } else {
 485                         if (ht_cap == _TRUE)
 486                                 snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11gn");
 487                         else
 488                                 snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11g");
 489                 }
 490         }
 491         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_CHAR_LEN);
 492         return start;
 493 }
 494
 495 static inline char *iwe_stream_rate_process(_adapter *padapter,
 496                 struct iw_request_info *info, struct wlan_network *pnetwork,
 497                 char *start, char *stop, struct iw_event *iwe)
 498 {
 499         u32 ht_ielen = 0, vht_ielen = 0;
 500         char *p;
 501         u16 max_rate = 0, rate, ht_cap = _FALSE, vht_cap = _FALSE;
 502         u32 i = 0;
 503         u8 bw_40MHz = 0, short_GI = 0, bw_160MHz = 0, vht_highest_rate = 0;
 504         u16 mcs_rate = 0, vht_data_rate = 0;
 505         char custom[MAX_CUSTOM_LEN] = {0};
 506         u8 ie_offset = (pnetwork->network.Reserved[0] == 2 ? 0 : 12); /* Probe Request   */
 507
 508         /* parsing HT_CAP_IE     */
 509         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength - ie_offset);
 510         if (p && ht_ielen > 0) {
 511                 struct rtw_ieee80211_ht_cap *pht_capie;
 512                 ht_cap = _TRUE;
 513                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p + 2);
 514                 _rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
 515                 bw_40MHz = (pht_capie->cap_info & IEEE80211_HT_CAP_SUP_WIDTH) ? 1 : 0;
 516                 short_GI = (pht_capie->cap_info & (IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40)) ? 1 : 0;
 517         }
 518
 519 #ifdef CONFIG_80211AC_VHT
 520         /* parsing VHT_CAP_IE */
 521         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], EID_VHTCapability, &vht_ielen, pnetwork->network.IELength - ie_offset);
 522         if (p && vht_ielen > 0) {
 523                 u8      mcs_map[2];
 524
 525                 vht_cap = _TRUE;
 526                 bw_160MHz = GET_VHT_CAPABILITY_ELE_CHL_WIDTH(p + 2);
 527                 if (bw_160MHz)
 528                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI160M(p + 2);
 529                 else
 530                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI80M(p + 2);
 531
 532                 _rtw_memcpy(mcs_map, GET_VHT_CAPABILITY_ELE_TX_MCS(p + 2), 2);
 533
 534                 vht_highest_rate = rtw_get_vht_highest_rate(mcs_map);
 535                 vht_data_rate = rtw_vht_mcs_to_data_rate(CHANNEL_WIDTH_80, short_GI, vht_highest_rate);
 536         }
 537 #endif
 538
 539         /*Add basic and extended rates */
 540         p = custom;
 541         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
 542         while (pnetwork->network.SupportedRates[i] != 0) {
 543                 rate = pnetwork->network.SupportedRates[i] & 0x7F;
 544                 if (rate > max_rate)
 545                         max_rate = rate;
 546                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
 547                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
 548                 i++;
 549         }
 550 #ifdef CONFIG_80211AC_VHT
 551         if (vht_cap == _TRUE)
 552                 max_rate = vht_data_rate;
 553         else
 554 #endif
 555                 if (ht_cap == _TRUE) {
 556                         if (mcs_rate & 0x8000) /* MCS15 */
 557                                 max_rate = (bw_40MHz) ? ((short_GI) ? 300 : 270) : ((short_GI) ? 144 : 130);
 558
 559                         else if (mcs_rate & 0x0080) /* MCS7 */
 560                                 max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);
 561                         else { /* default MCS7 */
 562                                 /* RTW_INFO("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate); */
 563                                 max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);
 564                         }
 565
 566                         max_rate = max_rate * 2; /* Mbps/2;              */
 567                 }
 568
 569         iwe->cmd = SIOCGIWRATE;
 570         iwe->u.bitrate.fixed = iwe->u.bitrate.disabled = 0;
 571         iwe->u.bitrate.value = max_rate * 500000;
 572         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_PARAM_LEN);
 573         return start ;
 574 }
 575
 576 static inline char *iwe_stream_wpa_wpa2_process(_adapter *padapter,
 577                 struct iw_request_info *info, struct wlan_network *pnetwork,
 578                 char *start, char *stop, struct iw_event *iwe)
 579 {
 580         int buf_size = MAX_WPA_IE_LEN * 2;
 581         /* u8 pbuf[buf_size]={0};        */
 582         u8 *pbuf = rtw_zmalloc(buf_size);
 583
 584         u8 wpa_ie[255] = {0}, rsn_ie[255] = {0};
 585         u16 i, wpa_len = 0, rsn_len = 0;
 586         u8 *p;
 587         sint out_len = 0;
 588
 589
 590         if (pbuf) {
 591                 p = pbuf;
 592
 593                 /* parsing WPA/WPA2 IE */
 594                 if (pnetwork->network.Reserved[0] != 2) { /* Probe Request */
 595                         out_len = rtw_get_sec_ie(pnetwork->network.IEs , pnetwork->network.IELength, rsn_ie, &rsn_len, wpa_ie, &wpa_len);
 596
 597                         if (wpa_len > 0) {
 598
 599                                 _rtw_memset(pbuf, 0, buf_size);
 600                                 p += sprintf(p, "wpa_ie=");
 601                                 for (i = 0; i < wpa_len; i++)
 602                                         p += sprintf(p, "%02x", wpa_ie[i]);
 603
 604                                 if (wpa_len > 100) {
 605                                         printk("-----------------Len %d----------------\n", wpa_len);
 606                                         for (i = 0; i < wpa_len; i++)
 607                                                 printk("%02x ", wpa_ie[i]);
 608                                         printk("\n");
 609                                         printk("-----------------Len %d----------------\n", wpa_len);
 610                                 }
 611
 612                                 _rtw_memset(iwe, 0, sizeof(*iwe));
 613                                 iwe->cmd = IWEVCUSTOM;
 614                                 iwe->u.data.length = strlen(pbuf);
 615                                 start = iwe_stream_add_point(info, start, stop, iwe, pbuf);
 616
 617                                 _rtw_memset(iwe, 0, sizeof(*iwe));
 618                                 iwe->cmd = IWEVGENIE;
 619                                 iwe->u.data.length = wpa_len;
 620                                 start = iwe_stream_add_point(info, start, stop, iwe, wpa_ie);
 621                         }
 622                         if (rsn_len > 0) {
 623
 624                                 _rtw_memset(pbuf, 0, buf_size);
 625                                 p += sprintf(p, "rsn_ie=");
 626                                 for (i = 0; i < rsn_len; i++)
 627                                         p += sprintf(p, "%02x", rsn_ie[i]);
 628                                 _rtw_memset(iwe, 0, sizeof(*iwe));
 629                                 iwe->cmd = IWEVCUSTOM;
 630                                 iwe->u.data.length = strlen(pbuf);
 631                                 start = iwe_stream_add_point(info, start, stop, iwe, pbuf);
 632
 633                                 _rtw_memset(iwe, 0, sizeof(*iwe));
 634                                 iwe->cmd = IWEVGENIE;
 635                                 iwe->u.data.length = rsn_len;
 636                                 start = iwe_stream_add_point(info, start, stop, iwe, rsn_ie);
 637                         }
 638                 }
 639
 640                 rtw_mfree(pbuf, buf_size);
 641         }
 642         return start;
 643 }
 644
 645 static inline char *iwe_stream_wps_process(_adapter *padapter,
 646                 struct iw_request_info *info, struct wlan_network *pnetwork,
 647                 char *start, char *stop, struct iw_event *iwe)
 648 {
 649         /* parsing WPS IE */
 650         uint cnt = 0, total_ielen;
 651         u8 *wpsie_ptr = NULL;
 652         uint wps_ielen = 0;
 653         u8 ie_offset = (pnetwork->network.Reserved[0] == 2 ? 0 : 12);
 654
 655         u8 *ie_ptr = pnetwork->network.IEs + ie_offset;
 656         total_ielen = pnetwork->network.IELength - ie_offset;
 657
 658         if (pnetwork->network.Reserved[0] == 2) { /* Probe Request */
 659                 ie_ptr = pnetwork->network.IEs;
 660                 total_ielen = pnetwork->network.IELength;
 661         } else { /* Beacon or Probe Respones */
 662                 ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
 663                 total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
 664         }
 665         while (cnt < total_ielen) {
 666                 if (rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen > 2)) {
 667                         wpsie_ptr = &ie_ptr[cnt];
 668                         iwe->cmd = IWEVGENIE;
 669                         iwe->u.data.length = (u16)wps_ielen;
 670                         start = iwe_stream_add_point(info, start, stop, iwe, wpsie_ptr);
 671                 }
 672                 cnt += ie_ptr[cnt + 1] + 2; /* goto next */
 673         }
 674         return start;
 675 }
 676
 677 static inline char *iwe_stream_wapi_process(_adapter *padapter,
 678                 struct iw_request_info *info, struct wlan_network *pnetwork,
 679                 char *start, char *stop, struct iw_event *iwe)
 680 {
 681 #ifdef CONFIG_WAPI_SUPPORT
 682         char *p;
 683
 684         if (pnetwork->network.Reserved[0] != 2) { /* Probe Request */
 685                 sint out_len_wapi = 0;
 686                 /* here use static for stack size */
 687                 static u8 buf_wapi[MAX_WAPI_IE_LEN * 2] = {0};
 688                 static u8 wapi_ie[MAX_WAPI_IE_LEN] = {0};
 689                 u16 wapi_len = 0;
 690                 u16  i;
 691
 692                 out_len_wapi = rtw_get_wapi_ie(pnetwork->network.IEs , pnetwork->network.IELength, wapi_ie, &wapi_len);
 693
 694                 RTW_INFO("rtw_wx_get_scan: %s ", pnetwork->network.Ssid.Ssid);
 695                 RTW_INFO("rtw_wx_get_scan: ssid = %d ", wapi_len);
 696
 697
 698                 if (wapi_len > 0) {
 699                         p = buf_wapi;
 700                         /* _rtw_memset(buf_wapi, 0, MAX_WAPI_IE_LEN*2); */
 701                         p += sprintf(p, "wapi_ie=");
 702                         for (i = 0; i < wapi_len; i++)
 703                                 p += sprintf(p, "%02x", wapi_ie[i]);
 704
 705                         _rtw_memset(iwe, 0, sizeof(*iwe));
 706                         iwe->cmd = IWEVCUSTOM;
 707                         iwe->u.data.length = strlen(buf_wapi);
 708                         start = iwe_stream_add_point(info, start, stop, iwe, buf_wapi);
 709
 710                         _rtw_memset(iwe, 0, sizeof(*iwe));
 711                         iwe->cmd = IWEVGENIE;
 712                         iwe->u.data.length = wapi_len;
 713                         start = iwe_stream_add_point(info, start, stop, iwe, wapi_ie);
 714                 }
 715         }
 716 #endif/* #ifdef CONFIG_WAPI_SUPPORT */
 717         return start;
 718 }
 719
 720 static inline char   *iwe_stream_rssi_process(_adapter *padapter,
 721                 struct iw_request_info *info, struct wlan_network *pnetwork,
 722                 char *start, char *stop, struct iw_event *iwe)
 723 {
 724         u8 ss, sq;
 725         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
 726
 727         /* Add quality statistics */
 728         iwe->cmd = IWEVQUAL;
 729         iwe->u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED
 730 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
 731                               | IW_QUAL_NOISE_UPDATED
 732 #else
 733                               | IW_QUAL_NOISE_INVALID
 734 #endif
 735 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 736                               | IW_QUAL_DBM
 737 #endif
 738                               ;
 739
 740         if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE &&
 741             is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network, 0)) {
 742                 ss = padapter->recvpriv.signal_strength;
 743                 sq = padapter->recvpriv.signal_qual;
 744         } else {
 745                 ss = pnetwork->network.PhyInfo.SignalStrength;
 746                 sq = pnetwork->network.PhyInfo.SignalQuality;
 747         }
 748
 749
 750 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 751         iwe->u.qual.level = (u8) translate_percentage_to_dbm(ss); /* dbm */
 752 #else
 753 #ifdef CONFIG_SIGNAL_SCALE_MAPPING
 754         iwe->u.qual.level = (u8)ss; /* % */
 755 #else
 756         {
 757                 /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
 758
 759                 HAL_DATA_TYPE *pHal = GET_HAL_DATA(padapter);
 760
 761                 iwe->u.qual.level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, ss);
 762         }
 763 #endif
 764 #endif
 765
 766         iwe->u.qual.qual = (u8)sq;   /* signal quality */
 767
 768 #ifdef CONFIG_PLATFORM_ROCKCHIPS
 769         iwe->u.qual.noise = -100; /* noise level suggest by zhf@rockchips */
 770 #else
 771 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
 772         {
 773                 s16 tmp_noise = 0;
 774                 rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR, &(pnetwork->network.Configuration.DSConfig), &(tmp_noise));
 775                 iwe->u.qual.noise = tmp_noise ;
 776         }
 777 #else
 778         iwe->u.qual.noise = 0; /* noise level */
 779 #endif
 780 #endif /* CONFIG_PLATFORM_ROCKCHIPS */
 781
 782         /* RTW_INFO("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated); */
 783
 784         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_QUAL_LEN);
 785         return start;
 786 }
 787
 788 static inline char   *iwe_stream_net_rsv_process(_adapter *padapter,
 789                 struct iw_request_info *info, struct wlan_network *pnetwork,
 790                 char *start, char *stop, struct iw_event *iwe)
 791 {
 792         u8 buf[32] = {0};
 793         u8 *p, *pos;
 794         int len;
 795         p = buf;
 796         pos = pnetwork->network.Reserved;
 797
 798         p += sprintf(p, "fm=%02X%02X", pos[1], pos[0]);
 799         _rtw_memset(iwe, 0, sizeof(*iwe));
 800         iwe->cmd = IWEVCUSTOM;
 801         iwe->u.data.length = strlen(buf);
 802         start = iwe_stream_add_point(info, start, stop, iwe, buf);
 803         return start;
 804 }
 805
 806 #if 1
 807 static char *translate_scan(_adapter *padapter,
 808                 struct iw_request_info *info, struct wlan_network *pnetwork,
 809                 char *start, char *stop)
 810 {
 811         struct iw_event iwe;
 812         u16 cap = 0;
 813         _rtw_memset(&iwe, 0, sizeof(iwe));
 814
 815         if (_FALSE == search_p2p_wfd_ie(padapter, info, pnetwork, start, stop))
 816                 return start;
 817
 818         start = iwe_stream_mac_addr_proess(padapter, info, pnetwork, start, stop, &iwe);
 819         start = iwe_stream_essid_proess(padapter, info, pnetwork, start, stop, &iwe);
 820         start = iwe_stream_protocol_process(padapter, info, pnetwork, start, stop, &iwe);
 821         if (pnetwork->network.Reserved[0] == 2) /* Probe Request */
 822                 cap = 0;
 823         else {
 824                 _rtw_memcpy((u8 *)&cap, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
 825                 cap = le16_to_cpu(cap);
 826         }
 827
 828         start = iwe_stream_mode_process(padapter, info, pnetwork, start, stop, &iwe, cap);
 829         start = iwe_stream_chan_process(padapter, info, pnetwork, start, stop, &iwe);
 830         start = iwe_stream_encryption_process(padapter, info, pnetwork, start, stop, &iwe, cap);
 831         start = iwe_stream_rate_process(padapter, info, pnetwork, start, stop, &iwe);
 832         start = iwe_stream_wpa_wpa2_process(padapter, info, pnetwork, start, stop, &iwe);
 833         start = iwe_stream_wps_process(padapter, info, pnetwork, start, stop, &iwe);
 834         start = iwe_stream_wapi_process(padapter, info, pnetwork, start, stop, &iwe);
 835         start = iwe_stream_rssi_process(padapter, info, pnetwork, start, stop, &iwe);
 836         start = iwe_stream_net_rsv_process(padapter, info, pnetwork, start, stop, &iwe);
 837
 838         return start;
 839 }
 840 #else
 841 static char *translate_scan(_adapter *padapter,
 842                 struct iw_request_info *info, struct wlan_network *pnetwork,
 843                 char *start, char *stop)
 844 {
 845         struct iw_event iwe;
 846         u16 cap;
 847         u32 ht_ielen = 0, vht_ielen = 0;
 848         char custom[MAX_CUSTOM_LEN];
 849         char *p;
 850         u16 max_rate = 0, rate, ht_cap = _FALSE, vht_cap = _FALSE;
 851         u32 i = 0;
 852         char    *current_val;
 853         long rssi;
 854         u8 bw_40MHz = 0, short_GI = 0, bw_160MHz = 0, vht_highest_rate = 0;
 855         u16 mcs_rate = 0, vht_data_rate = 0;
 856         u8 ie_offset = (pnetwork->network.Reserved[0] == 2 ? 0 : 12);
 857         struct registry_priv *pregpriv = &padapter->registrypriv;
 858
 859         if (_FALSE == search_p2p_wfd_ie(padapter, info, pnetwork, start, stop))
 860                 return start;
 861
 862         /*  AP MAC address */
 863         iwe.cmd = SIOCGIWAP;
 864         iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
 865
 866         _rtw_memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
 867         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
 868
 869         /* Add the ESSID */
 870         iwe.cmd = SIOCGIWESSID;
 871         iwe.u.data.flags = 1;
 872         iwe.u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
 873         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 874
 875         /* parsing HT_CAP_IE */
 876         if (pnetwork->network.Reserved[0] == 2) /* Probe Request */
 877                 p = rtw_get_ie(&pnetwork->network.IEs[0], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength);
 878         else
 879                 p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength - 12);
 880         if (p && ht_ielen > 0) {
 881                 struct rtw_ieee80211_ht_cap *pht_capie;
 882                 ht_cap = _TRUE;
 883                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p + 2);
 884                 _rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
 885                 bw_40MHz = (pht_capie->cap_info & IEEE80211_HT_CAP_SUP_WIDTH) ? 1 : 0;
 886                 short_GI = (pht_capie->cap_info & (IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40)) ? 1 : 0;
 887         }
 888
 889 #ifdef CONFIG_80211AC_VHT
 890         /* parsing VHT_CAP_IE */
 891         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], EID_VHTCapability, &vht_ielen, pnetwork->network.IELength - ie_offset);
 892         if (p && vht_ielen > 0) {
 893                 u8      mcs_map[2];
 894
 895                 vht_cap = _TRUE;
 896                 bw_160MHz = GET_VHT_CAPABILITY_ELE_CHL_WIDTH(p + 2);
 897                 if (bw_160MHz)
 898                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI160M(p + 2);
 899                 else
 900                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI80M(p + 2);
 901
 902                 _rtw_memcpy(mcs_map, GET_VHT_CAPABILITY_ELE_TX_MCS(p + 2), 2);
 903
 904                 vht_highest_rate = rtw_get_vht_highest_rate(mcs_map);
 905                 vht_data_rate = rtw_vht_mcs_to_data_rate(CHANNEL_WIDTH_80, short_GI, vht_highest_rate);
 906         }
 907 #endif
 908
 909         /* Add the protocol name */
 910         iwe.cmd = SIOCGIWNAME;
 911         if ((rtw_is_cckratesonly_included((u8 *)&pnetwork->network.SupportedRates)) == _TRUE) {
 912                 if (ht_cap == _TRUE)
 913                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
 914                 else
 915                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
 916         } else if ((rtw_is_cckrates_included((u8 *)&pnetwork->network.SupportedRates)) == _TRUE) {
 917                 if (ht_cap == _TRUE)
 918                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
 919                 else
 920                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
 921         } else {
 922                 if (pnetwork->network.Configuration.DSConfig > 14) {
 923                         if (vht_cap == _TRUE)
 924                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11AC");
 925                         else if (ht_cap == _TRUE)
 926                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
 927                         else
 928                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
 929                 } else {
 930                         if (ht_cap == _TRUE)
 931                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
 932                         else
 933                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
 934                 }
 935         }
 936
 937         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
 938
 939         /* Add mode */
 940         if (pnetwork->network.Reserved[0] == 2) /* Probe Request */
 941                 cap = 0;
 942         else {
 943                 iwe.cmd = SIOCGIWMODE;
 944                 _rtw_memcpy((u8 *)&cap, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
 945                 cap = le16_to_cpu(cap);
 946         }
 947
 948         if (cap & (WLAN_CAPABILITY_IBSS | WLAN_CAPABILITY_BSS)) {
 949                 if (cap & WLAN_CAPABILITY_BSS)
 950                         iwe.u.mode = IW_MODE_MASTER;
 951                 else
 952                         iwe.u.mode = IW_MODE_ADHOC;
 953
 954                 start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
 955         }
 956
 957         if (pnetwork->network.Configuration.DSConfig < 1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
 958                 pnetwork->network.Configuration.DSConfig = 1;
 959
 960         /* Add frequency/channel */
 961         iwe.cmd = SIOCGIWFREQ;
 962         iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
 963         iwe.u.freq.e = 1;
 964         iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
 965         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
 966
 967         /* Add encryption capability */
 968         iwe.cmd = SIOCGIWENCODE;
 969         if (cap & WLAN_CAPABILITY_PRIVACY)
 970                 iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
 971         else
 972                 iwe.u.data.flags = IW_ENCODE_DISABLED;
 973         iwe.u.data.length = 0;
 974         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 975
 976         /*Add basic and extended rates */
 977         max_rate = 0;
 978         p = custom;
 979         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
 980         while (pnetwork->network.SupportedRates[i] != 0) {
 981                 rate = pnetwork->network.SupportedRates[i] & 0x7F;
 982                 if (rate > max_rate)
 983                         max_rate = rate;
 984                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
 985                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
 986                 i++;
 987         }
 988
 989         if (vht_cap == _TRUE)
 990                 max_rate = vht_data_rate;
 991         else if (ht_cap == _TRUE) {
 992                 if (mcs_rate & 0x8000) /* MCS15 */
 993                         max_rate = (bw_40MHz) ? ((short_GI) ? 300 : 270) : ((short_GI) ? 144 : 130);
 994
 995                 else if (mcs_rate & 0x0080) /* MCS7 */
 996                         max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);
 997                 else { /* default MCS7 */
 998                         /* RTW_INFO("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate); */
 999                         max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);
1000                 }
1001
1002                 max_rate = max_rate * 2; /* Mbps/2;              */
1003         }
1004
1005         iwe.cmd = SIOCGIWRATE;
1006         iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
1007         iwe.u.bitrate.value = max_rate * 500000;
1008         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
1009
1010         /* parsing WPA/WPA2 IE */
1011         if (pnetwork->network.Reserved[0] != 2) { /* Probe Request */
1012                 u8 buf[MAX_WPA_IE_LEN * 2];
1013                 u8 wpa_ie[255], rsn_ie[255];
1014                 u16 wpa_len = 0, rsn_len = 0;
1015                 u8 *p;
1016                 sint out_len = 0;
1017                 out_len = rtw_get_sec_ie(pnetwork->network.IEs , pnetwork->network.IELength, rsn_ie, &rsn_len, wpa_ie, &wpa_len);
1018
1019                 if (wpa_len > 0) {
1020                         p = buf;
1021                         _rtw_memset(buf, 0, MAX_WPA_IE_LEN * 2);
1022                         p += sprintf(p, "wpa_ie=");
1023                         for (i = 0; i < wpa_len; i++)
1024                                 p += sprintf(p, "%02x", wpa_ie[i]);
1025
1026                         if (wpa_len > 100) {
1027                                 printk("-----------------Len %d----------------\n", wpa_len);
1028                                 for (i = 0; i < wpa_len; i++)
1029                                         printk("%02x ", wpa_ie[i]);
1030                                 printk("\n");
1031                                 printk("-----------------Len %d----------------\n", wpa_len);
1032                         }
1033
1034                         _rtw_memset(&iwe, 0, sizeof(iwe));
1035                         iwe.cmd = IWEVCUSTOM;
1036                         iwe.u.data.length = strlen(buf);
1037                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
1038
1039                         _rtw_memset(&iwe, 0, sizeof(iwe));
1040                         iwe.cmd = IWEVGENIE;
1041                         iwe.u.data.length = wpa_len;
1042                         start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
1043                 }
1044                 if (rsn_len > 0) {
1045                         p = buf;
1046                         _rtw_memset(buf, 0, MAX_WPA_IE_LEN * 2);
1047                         p += sprintf(p, "rsn_ie=");
1048                         for (i = 0; i < rsn_len; i++)
1049                                 p += sprintf(p, "%02x", rsn_ie[i]);
1050                         _rtw_memset(&iwe, 0, sizeof(iwe));
1051                         iwe.cmd = IWEVCUSTOM;
1052                         iwe.u.data.length = strlen(buf);
1053                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
1054
1055                         _rtw_memset(&iwe, 0, sizeof(iwe));
1056                         iwe.cmd = IWEVGENIE;
1057                         iwe.u.data.length = rsn_len;
1058                         start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
1059                 }
1060         }
1061
1062         { /* parsing WPS IE */
1063                 uint cnt = 0, total_ielen;
1064                 u8 *wpsie_ptr = NULL;
1065                 uint wps_ielen = 0;
1066
1067                 u8 *ie_ptr = pnetwork->network.IEs + ie_offset;
1068                 total_ielen = pnetwork->network.IELength - ie_offset;
1069
1070                 if (pnetwork->network.Reserved[0] == 2) { /* Probe Request */
1071                         ie_ptr = pnetwork->network.IEs;
1072                         total_ielen = pnetwork->network.IELength;
1073                 } else { /* Beacon or Probe Respones */
1074                         ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
1075                         total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
1076                 }
1077
1078                 while (cnt < total_ielen) {
1079                         if (rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen > 2)) {
1080                                 wpsie_ptr = &ie_ptr[cnt];
1081                                 iwe.cmd = IWEVGENIE;
1082                                 iwe.u.data.length = (u16)wps_ielen;
1083                                 start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
1084                         }
1085                         cnt += ie_ptr[cnt + 1] + 2; /* goto next */
1086                 }
1087         }
1088
1089 #ifdef CONFIG_WAPI_SUPPORT
1090         if (pnetwork->network.Reserved[0] != 2) { /* Probe Request */
1091                 sint out_len_wapi = 0;
1092                 /* here use static for stack size */
1093                 static u8 buf_wapi[MAX_WAPI_IE_LEN * 2];
1094                 static u8 wapi_ie[MAX_WAPI_IE_LEN];
1095                 u16 wapi_len = 0;
1096                 u16  i;
1097
1098                 _rtw_memset(buf_wapi, 0, MAX_WAPI_IE_LEN);
1099                 _rtw_memset(wapi_ie, 0, MAX_WAPI_IE_LEN);
1100
1101                 out_len_wapi = rtw_get_wapi_ie(pnetwork->network.IEs , pnetwork->network.IELength, wapi_ie, &wapi_len);
1102
1103                 RTW_INFO("rtw_wx_get_scan: %s ", pnetwork->network.Ssid.Ssid);
1104                 RTW_INFO("rtw_wx_get_scan: ssid = %d ", wapi_len);
1105
1106
1107                 if (wapi_len > 0) {
1108                         p = buf_wapi;
1109                         _rtw_memset(buf_wapi, 0, MAX_WAPI_IE_LEN * 2);
1110                         p += sprintf(p, "wapi_ie=");
1111                         for (i = 0; i < wapi_len; i++)
1112                                 p += sprintf(p, "%02x", wapi_ie[i]);
1113
1114                         _rtw_memset(&iwe, 0, sizeof(iwe));
1115                         iwe.cmd = IWEVCUSTOM;
1116                         iwe.u.data.length = strlen(buf_wapi);
1117                         start = iwe_stream_add_point(info, start, stop, &iwe, buf_wapi);
1118
1119                         _rtw_memset(&iwe, 0, sizeof(iwe));
1120                         iwe.cmd = IWEVGENIE;
1121                         iwe.u.data.length = wapi_len;
1122                         start = iwe_stream_add_point(info, start, stop, &iwe, wapi_ie);
1123                 }
1124         }
1125 #endif
1126
1127         {
1128                 struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1129                 u8 ss, sq;
1130
1131                 /* Add quality statistics */
1132                 iwe.cmd = IWEVQUAL;
1133                 iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED
1134 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
1135                                      | IW_QUAL_NOISE_UPDATED
1136 #else
1137                                      | IW_QUAL_NOISE_INVALID
1138 #endif
1139 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
1140                                      | IW_QUAL_DBM
1141 #endif
1142                                      ;
1143
1144                 if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE &&
1145                     is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network, 0)) {
1146                         ss = padapter->recvpriv.signal_strength;
1147                         sq = padapter->recvpriv.signal_qual;
1148                 } else {
1149                         ss = pnetwork->network.PhyInfo.SignalStrength;
1150                         sq = pnetwork->network.PhyInfo.SignalQuality;
1151                 }
1152
1153
1154 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
1155                 iwe.u.qual.level = (u8) translate_percentage_to_dbm(ss); /* dbm */
1156 #else
1157 #ifdef CONFIG_SIGNAL_SCALE_MAPPING
1158                 iwe.u.qual.level = (u8)ss; /* % */
1159 #else
1160                 {
1161                         /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
1162
1163                         HAL_DATA_TYPE *pHal = GET_HAL_DATA(padapter);
1164
1165                         iwe.u.qual.level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, ss);
1166                 }
1167 #endif
1168 #endif
1169
1170                 iwe.u.qual.qual = (u8)sq;   /* signal quality */
1171
1172 #ifdef CONFIG_PLATFORM_ROCKCHIPS
1173                 iwe.u.qual.noise = -100; /* noise level suggest by zhf@rockchips */
1174 #else
1175 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
1176                 {
1177                         s16 tmp_noise = 0;
1178                         rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR, &(pnetwork->network.Configuration.DSConfig), &(tmp_noise));
1179                         iwe.u.qual.noise = tmp_noise ;
1180                 }
1181 #else
1182                 iwe.u.qual.noise = 0; /* noise level */
1183 #endif
1184 #endif /* CONFIG_PLATFORM_ROCKCHIPS */
1185
1186                 /* RTW_INFO("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated); */
1187
1188                 start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
1189         }
1190
1191         {
1192                 u8 buf[MAX_WPA_IE_LEN];
1193                 u8 *p, *pos;
1194                 int len;
1195                 p = buf;
1196                 pos = pnetwork->network.Reserved;
1197                 _rtw_memset(buf, 0, MAX_WPA_IE_LEN);
1198                 p += sprintf(p, "fm=%02X%02X", pos[1], pos[0]);
1199                 _rtw_memset(&iwe, 0, sizeof(iwe));
1200                 iwe.cmd = IWEVCUSTOM;
1201                 iwe.u.data.length = strlen(buf);
1202                 start = iwe_stream_add_point(info, start, stop, &iwe, buf);
1203         }
1204
1205         return start;
1206 }
1207 #endif
1208
1209 static int wpa_set_auth_algs(struct net_device *dev, u32 value)
1210 {
1211         _adapter *padapter = (_adapter *) rtw_netdev_priv(dev);
1212         int ret = 0;
1213
1214         if ((value & AUTH_ALG_SHARED_KEY) && (value & AUTH_ALG_OPEN_SYSTEM)) {
1215                 RTW_INFO("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n", value);
1216                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1217                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
1218                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
1219         } else if (value & AUTH_ALG_SHARED_KEY) {
1220                 RTW_INFO("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n", value);
1221                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1222
1223 #ifdef CONFIG_PLATFORM_MT53XX
1224                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
1225                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
1226 #else
1227                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
1228                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
1229 #endif
1230         } else if (value & AUTH_ALG_OPEN_SYSTEM) {
1231                 RTW_INFO("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
1232                 /* padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled; */
1233                 if (padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK) {
1234 #ifdef CONFIG_PLATFORM_MT53XX
1235                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
1236                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
1237 #else
1238                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
1239                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
1240 #endif
1241                 }
1242
1243         } else if (value & AUTH_ALG_LEAP)
1244                 RTW_INFO("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
1245         else {
1246                 RTW_INFO("wpa_set_auth_algs, error!\n");
1247                 ret = -EINVAL;
1248         }
1249
1250         return ret;
1251
1252 }
1253
1254 static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
1255 {
1256         int ret = 0;
1257         u32 wep_key_idx, wep_key_len, wep_total_len;
1258         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1259         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
1260         struct security_priv *psecuritypriv = &padapter->securitypriv;
1261 #ifdef CONFIG_P2P
1262         struct wifidirect_info *pwdinfo = &padapter->wdinfo;
1263 #endif /* CONFIG_P2P */
1264
1265
1266         param->u.crypt.err = 0;
1267         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
1268
1269         if (param_len < (u32)((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len) {
1270                 ret =  -EINVAL;
1271                 goto exit;
1272         }
1273
1274         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
1275             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
1276             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
1277
1278                 if (param->u.crypt.idx >= WEP_KEYS
1279 #ifdef CONFIG_IEEE80211W
1280                     && param->u.crypt.idx > BIP_MAX_KEYID
1281 #endif /* CONFIG_IEEE80211W */
1282                    ) {
1283                         ret = -EINVAL;
1284                         goto exit;
1285                 }
1286         } else {
1287 #ifdef CONFIG_WAPI_SUPPORT
1288                 if (strcmp(param->u.crypt.alg, "SMS4"))
1289 #endif
1290                 {
1291                         ret = -EINVAL;
1292                         goto exit;
1293                 }
1294         }
1295
1296         if (strcmp(param->u.crypt.alg, "WEP") == 0) {
1297                 RTW_INFO("wpa_set_encryption, crypt.alg = WEP\n");
1298
1299                 wep_key_idx = param->u.crypt.idx;
1300                 wep_key_len = param->u.crypt.key_len;
1301
1302                 if ((wep_key_idx > WEP_KEYS) || (wep_key_len <= 0)) {
1303                         ret = -EINVAL;
1304                         goto exit;
1305                 }
1306
1307                 if (psecuritypriv->bWepDefaultKeyIdxSet == 0) {
1308                         /* wep default key has not been set, so use this key index as default key.*/
1309
1310                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
1311
1312                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
1313                         psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
1314                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
1315
1316                         if (wep_key_len == 13) {
1317                                 psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
1318                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
1319                         }
1320
1321                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
1322                 }
1323
1324                 _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), param->u.crypt.key, wep_key_len);
1325
1326                 psecuritypriv->dot11DefKeylen[wep_key_idx] = wep_key_len;
1327
1328                 psecuritypriv->key_mask |= BIT(wep_key_idx);
1329
1330                 goto exit;
1331         }
1332
1333         if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) { /* 802_1x */
1334                 struct sta_info *psta, *pbcmc_sta;
1335                 struct sta_priv *pstapriv = &padapter->stapriv;
1336
1337                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == _TRUE) { /* sta mode */
1338                         psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
1339                         if (psta == NULL) {
1340                                 /* DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail\n")); */
1341                         } else {
1342                                 /* Jeff: don't disable ieee8021x_blocked while clearing key */
1343                                 if (strcmp(param->u.crypt.alg, "none") != 0)
1344                                         psta->ieee8021x_blocked = _FALSE;
1345
1346                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled) ||
1347                                     (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
1348                                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
1349
1350                                 if (param->u.crypt.set_tx == 1) { /* pairwise key */
1351                                         _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
1352
1353                                         if (strcmp(param->u.crypt.alg, "TKIP") == 0) { /* set mic key */
1354                                                 /* DEBUG_ERR(("\nset key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len)); */
1355                                                 _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
1356                                                 _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
1357
1358                                                 padapter->securitypriv.busetkipkey = _FALSE;
1359                                                 /* _set_timer(&padapter->securitypriv.tkip_timer, 50);                                           */
1360                                         }
1361
1362                                         /* DEBUG_ERR((" param->u.crypt.key_len=%d\n",param->u.crypt.key_len)); */
1363                                         RTW_INFO(" ~~~~set sta key:unicastkey\n");
1364
1365                                         rtw_setstakey_cmd(padapter, psta, UNICAST_KEY, _TRUE);
1366
1367                                         psta->bpairwise_key_installed = _TRUE;
1368
1369                                 } else { /* group key */
1370                                         if (strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0) {
1371                                                 _rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,
1372                                                         (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
1373                                                 /* only TKIP group key need to install this */
1374                                                 if (param->u.crypt.key_len > 16) {
1375                                                         _rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
1376                                                         _rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
1377                                                 }
1378                                                 padapter->securitypriv.binstallGrpkey = _TRUE;
1379                                                 /* DEBUG_ERR((" param->u.crypt.key_len=%d\n", param->u.crypt.key_len)); */
1380                                                 RTW_INFO(" ~~~~set sta key:groupkey\n");
1381
1382                                                 padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
1383
1384                                                 rtw_set_key(padapter, &padapter->securitypriv, param->u.crypt.idx, 1, _TRUE);
1385                                         }
1386 #ifdef CONFIG_IEEE80211W
1387                                         else if (strcmp(param->u.crypt.alg, "BIP") == 0) {
1388                                                 int no;
1389                                                 /* printk("BIP key_len=%d , index=%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx); */
1390                                                 /* save the IGTK key, length 16 bytes */
1391                                                 _rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key,
1392                                                         (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
1393                                                 /*printk("IGTK key below:\n");
1394                                                 for(no=0;no<16;no++)
1395                                                         printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
1396                                                 printk("\n");*/
1397                                                 padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
1398                                                 padapter->securitypriv.binstallBIPkey = _TRUE;
1399                                                 RTW_INFO(" ~~~~set sta key:IGKT\n");
1400                                         }
1401 #endif /* CONFIG_IEEE80211W */
1402
1403 #ifdef CONFIG_P2P
1404                                         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
1405                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
1406 #endif /* CONFIG_P2P */
1407
1408                                 }
1409                         }
1410
1411                         pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
1412                         if (pbcmc_sta == NULL) {
1413                                 /* DEBUG_ERR( ("Set OID_802_11_ADD_KEY: bcmc stainfo is null\n")); */
1414                         } else {
1415                                 /* Jeff: don't disable ieee8021x_blocked while clearing key */
1416                                 if (strcmp(param->u.crypt.alg, "none") != 0)
1417                                         pbcmc_sta->ieee8021x_blocked = _FALSE;
1418
1419                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled) ||
1420                                     (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
1421                                         pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
1422                         }
1423                 } else if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) { /* adhoc mode */
1424                 }
1425         }
1426
1427 #ifdef CONFIG_WAPI_SUPPORT
1428         if (strcmp(param->u.crypt.alg, "SMS4") == 0) {
1429                 PRT_WAPI_T                      pWapiInfo = &padapter->wapiInfo;
1430                 PRT_WAPI_STA_INFO       pWapiSta;
1431                 u8                                      WapiASUEPNInitialValueSrc[16] = {0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C} ;
1432                 u8                                      WapiAEPNInitialValueSrc[16] = {0x37, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C} ;
1433                 u8                                      WapiAEMultiCastPNInitialValueSrc[16] = {0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C} ;
1434
1435                 if (param->u.crypt.set_tx == 1) {
1436                         list_for_each_entry(pWapiSta, &pWapiInfo->wapiSTAUsedList, list) {
1437                                 if (_rtw_memcmp(pWapiSta->PeerMacAddr, param->sta_addr, 6)) {
1438                                         _rtw_memcpy(pWapiSta->lastTxUnicastPN, WapiASUEPNInitialValueSrc, 16);
1439
1440                                         pWapiSta->wapiUsk.bSet = true;
1441                                         _rtw_memcpy(pWapiSta->wapiUsk.dataKey, param->u.crypt.key, 16);
1442                                         _rtw_memcpy(pWapiSta->wapiUsk.micKey, param->u.crypt.key + 16, 16);
1443                                         pWapiSta->wapiUsk.keyId = param->u.crypt.idx ;
1444                                         pWapiSta->wapiUsk.bTxEnable = true;
1445
1446                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNBEQueue, WapiAEPNInitialValueSrc, 16);
1447                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNBKQueue, WapiAEPNInitialValueSrc, 16);
1448                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNVIQueue, WapiAEPNInitialValueSrc, 16);
1449                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNVOQueue, WapiAEPNInitialValueSrc, 16);
1450                                         _rtw_memcpy(pWapiSta->lastRxUnicastPN, WapiAEPNInitialValueSrc, 16);
1451                                         pWapiSta->wapiUskUpdate.bTxEnable = false;
1452                                         pWapiSta->wapiUskUpdate.bSet = false;
1453
1454                                         if (psecuritypriv->sw_encrypt == false || psecuritypriv->sw_decrypt == false) {
1455                                                 /* set unicast key for ASUE */
1456                                                 rtw_wapi_set_key(padapter, &pWapiSta->wapiUsk, pWapiSta, false, false);
1457                                         }
1458                                 }
1459                         }
1460                 } else {
1461                         list_for_each_entry(pWapiSta, &pWapiInfo->wapiSTAUsedList, list) {
1462                                 if (_rtw_memcmp(pWapiSta->PeerMacAddr, get_bssid(pmlmepriv), 6)) {
1463                                         pWapiSta->wapiMsk.bSet = true;
1464                                         _rtw_memcpy(pWapiSta->wapiMsk.dataKey, param->u.crypt.key, 16);
1465                                         _rtw_memcpy(pWapiSta->wapiMsk.micKey, param->u.crypt.key + 16, 16);
1466                                         pWapiSta->wapiMsk.keyId = param->u.crypt.idx ;
1467                                         pWapiSta->wapiMsk.bTxEnable = false;
1468                                         if (!pWapiSta->bSetkeyOk)
1469                                                 pWapiSta->bSetkeyOk = true;
1470                                         pWapiSta->bAuthenticateInProgress = false;
1471
1472                                         _rtw_memcpy(pWapiSta->lastRxMulticastPN, WapiAEMultiCastPNInitialValueSrc, 16);
1473
1474                                         if (psecuritypriv->sw_decrypt == false) {
1475                                                 /* set rx broadcast key for ASUE */
1476                                                 rtw_wapi_set_key(padapter, &pWapiSta->wapiMsk, pWapiSta, true, false);
1477                                         }
1478                                 }
1479
1480                         }
1481                 }
1482         }
1483 #endif
1484
1485 exit:
1486
1487
1488         return ret;
1489 }
1490
1491 static int rtw_set_wpa_ie(_adapter *padapter, char *pie, unsigned short ielen)
1492 {
1493         u8 *buf = NULL, *pos = NULL;
1494         u32 left;
1495         int group_cipher = 0, pairwise_cipher = 0;
1496         int ret = 0;
1497         u8 null_addr[] = {0, 0, 0, 0, 0, 0};
1498 #ifdef CONFIG_P2P
1499         struct wifidirect_info *pwdinfo = &padapter->wdinfo;
1500 #endif /* CONFIG_P2P */
1501
1502         if ((ielen > MAX_WPA_IE_LEN) || (pie == NULL)) {
1503                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
1504                 if (pie == NULL)
1505                         return ret;
1506                 else
1507                         return -EINVAL;
1508         }
1509
1510         if (ielen) {
1511                 buf = rtw_zmalloc(ielen);
1512                 if (buf == NULL) {
1513                         ret =  -ENOMEM;
1514                         goto exit;
1515                 }
1516
1517                 _rtw_memcpy(buf, pie , ielen);
1518
1519                 /* dump */
1520                 {
1521                         int i;
1522                         RTW_INFO("\n wpa_ie(length:%d):\n", ielen);
1523                         for (i = 0; i < ielen; i = i + 8)
1524                                 RTW_INFO("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x\n", buf[i], buf[i + 1], buf[i + 2], buf[i + 3], buf[i + 4], buf[i + 5], buf[i + 6], buf[i + 7]);
1525                 }
1526
1527                 pos = buf;
1528                 if (ielen < RSN_HEADER_LEN) {
1529                         ret  = -1;
1530                         goto exit;
1531                 }
1532
1533 #if 0
1534                 pos += RSN_HEADER_LEN;
1535                 left  = ielen - RSN_HEADER_LEN;
1536
1537                 if (left >= RSN_SELECTOR_LEN) {
1538                         pos += RSN_SELECTOR_LEN;
1539                         left -= RSN_SELECTOR_LEN;
1540                 } else if (left > 0) {
1541                         ret = -1;
1542                         goto exit;
1543                 }
1544 #endif
1545
1546                 if (rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
1547                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
1548                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK;
1549                         _rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
1550                 }
1551
1552                 if (rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
1553                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
1554                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK;
1555                         _rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
1556                 }
1557
1558                 if (group_cipher == 0)
1559                         group_cipher = WPA_CIPHER_NONE;
1560                 if (pairwise_cipher == 0)
1561                         pairwise_cipher = WPA_CIPHER_NONE;
1562
1563                 switch (group_cipher) {
1564                 case WPA_CIPHER_NONE:
1565                         padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1566                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
1567                         break;
1568                 case WPA_CIPHER_WEP40:
1569                         padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
1570                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1571                         break;
1572                 case WPA_CIPHER_TKIP:
1573                         padapter->securitypriv.dot118021XGrpPrivacy = _TKIP_;
1574                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
1575                         break;
1576                 case WPA_CIPHER_CCMP:
1577                         padapter->securitypriv.dot118021XGrpPrivacy = _AES_;
1578                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
1579                         break;
1580                 case WPA_CIPHER_WEP104:
1581                         padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
1582                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1583                         break;
1584                 }
1585
1586                 switch (pairwise_cipher) {
1587                 case WPA_CIPHER_NONE:
1588                         padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1589                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
1590                         break;
1591                 case WPA_CIPHER_WEP40:
1592                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
1593                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1594                         break;
1595                 case WPA_CIPHER_TKIP:
1596                         padapter->securitypriv.dot11PrivacyAlgrthm = _TKIP_;
1597                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
1598                         break;
1599                 case WPA_CIPHER_CCMP:
1600                         padapter->securitypriv.dot11PrivacyAlgrthm = _AES_;
1601                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
1602                         break;
1603                 case WPA_CIPHER_WEP104:
1604                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
1605                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1606                         break;
1607                 }
1608
1609                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
1610                 {/* set wps_ie   */
1611                         u16 cnt = 0;
1612                         u8 eid, wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};
1613
1614                         while (cnt < ielen) {
1615                                 eid = buf[cnt];
1616
1617                                 if ((eid == _VENDOR_SPECIFIC_IE_) && (_rtw_memcmp(&buf[cnt + 2], wps_oui, 4) == _TRUE)) {
1618                                         RTW_INFO("SET WPS_IE\n");
1619
1620                                         padapter->securitypriv.wps_ie_len = ((buf[cnt + 1] + 2) < MAX_WPS_IE_LEN) ? (buf[cnt + 1] + 2) : MAX_WPS_IE_LEN;
1621
1622                                         _rtw_memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
1623
1624                                         set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
1625
1626 #ifdef CONFIG_P2P
1627                                         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
1628                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
1629 #endif /* CONFIG_P2P */
1630                                         cnt += buf[cnt + 1] + 2;
1631
1632                                         break;
1633                                 } else {
1634                                         cnt += buf[cnt + 1] + 2; /* goto next    */
1635                                 }
1636                         }
1637                 }
1638         }
1639
1640         /* TKIP and AES disallow multicast packets until installing group key */
1641         if (padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
1642             || padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
1643             || padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
1644                 /* WPS open need to enable multicast
1645                  * || check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == _TRUE) */
1646                 rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
1647
1648
1649 exit:
1650
1651         if (buf)
1652                 rtw_mfree(buf, ielen);
1653
1654         return ret;
1655 }
1656
1657 static int rtw_wx_get_name(struct net_device *dev,
1658                            struct iw_request_info *info,
1659                            union iwreq_data *wrqu, char *extra)
1660 {
1661         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1662         u16 cap;
1663         u32 ht_ielen = 0;
1664         char *p;
1665         u8 ht_cap = _FALSE, vht_cap = _FALSE;
1666         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1667         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
1668         NDIS_802_11_RATES_EX *prates = NULL;
1669
1670
1671
1672         if (check_fwstate(pmlmepriv, _FW_LINKED | WIFI_ADHOC_MASTER_STATE) == _TRUE) {
1673                 /* parsing HT_CAP_IE */
1674                 p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength - 12);
1675                 if (p && ht_ielen > 0)
1676                         ht_cap = _TRUE;
1677
1678 #ifdef CONFIG_80211AC_VHT
1679                 if (pmlmepriv->vhtpriv.vht_option == _TRUE)
1680                         vht_cap = _TRUE;
1681 #endif
1682
1683                 prates = &pcur_bss->SupportedRates;
1684
1685                 if (rtw_is_cckratesonly_included((u8 *)prates) == _TRUE) {
1686                         if (ht_cap == _TRUE)
1687                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
1688                         else
1689                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
1690                 } else if ((rtw_is_cckrates_included((u8 *)prates)) == _TRUE) {
1691                         if (ht_cap == _TRUE)
1692                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
1693                         else
1694                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
1695                 } else {
1696                         if (pcur_bss->Configuration.DSConfig > 14) {
1697 #ifdef CONFIG_80211AC_VHT
1698                                 if (vht_cap == _TRUE)
1699                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11AC");
1700                                 else
1701 #endif
1702                                 {
1703                                         if (ht_cap == _TRUE)
1704                                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
1705                                         else
1706                                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
1707                                 }
1708                         } else {
1709                                 if (ht_cap == _TRUE)
1710                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
1711                                 else
1712                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
1713                         }
1714                 }
1715         } else {
1716                 /* prates = &padapter->registrypriv.dev_network.SupportedRates; */
1717                 /* snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g"); */
1718                 snprintf(wrqu->name, IFNAMSIZ, "unassociated");
1719         }
1720
1721
1722         return 0;
1723 }
1724
1725 static int rtw_wx_set_freq(struct net_device *dev,
1726                            struct iw_request_info *info,
1727                            union iwreq_data *wrqu, char *extra)
1728 {
1729
1730         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1731         HAL_DATA_TYPE *hal_data = GET_HAL_DATA(padapter);
1732         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1733         struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
1734         int exp = 1, freq = 0, div = 0;
1735
1736
1737
1738         if (wrqu->freq.m <= 1000) {
1739                 if (wrqu->freq.flags == IW_FREQ_AUTO) {
1740                         if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, wrqu->freq.m) > 0) {
1741                                 padapter->mlmeextpriv.cur_channel = wrqu->freq.m;
1742                                 RTW_INFO("%s: channel is auto, set to channel %d\n", __func__, wrqu->freq.m);
1743                         } else {
1744                                 padapter->mlmeextpriv.cur_channel = 1;
1745                                 RTW_INFO("%s: channel is auto, Channel Plan don't match just set to channel 1\n", __func__);
1746                         }
1747                 } else {
1748                         padapter->mlmeextpriv.cur_channel = wrqu->freq.m;
1749                         RTW_INFO("%s: set to channel %d\n", __func__, padapter->mlmeextpriv.cur_channel);
1750                 }
1751         } else {
1752                 while (wrqu->freq.e) {
1753                         exp *= 10;
1754                         wrqu->freq.e--;
1755                 }
1756
1757                 freq = wrqu->freq.m;
1758
1759                 while (!(freq % 10)) {
1760                         freq /= 10;
1761                         exp *= 10;
1762                 }
1763
1764                 /* freq unit is MHz here */
1765                 div = 1000000 / exp;
1766
1767                 if (div)
1768                         freq /= div;
1769                 else {
1770                         div = exp / 1000000;
1771                         freq *= div;
1772                 }
1773
1774                 /* If freq is invalid, rtw_freq2ch() will return channel 1 */
1775                 padapter->mlmeextpriv.cur_channel = rtw_freq2ch(freq);
1776                 RTW_INFO("%s: set to channel %d\n", __func__, padapter->mlmeextpriv.cur_channel);
1777         }
1778
1779         set_channel_bwmode(padapter, padapter->mlmeextpriv.cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
1780
1781
1782         return 0;
1783 }
1784
1785 static int rtw_wx_get_freq(struct net_device *dev,
1786                            struct iw_request_info *info,
1787                            union iwreq_data *wrqu, char *extra)
1788 {
1789         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1790         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1791         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
1792
1793         if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE && check_fwstate(pmlmepriv, WIFI_MONITOR_STATE) != _TRUE) {
1794
1795                 wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
1796                 wrqu->freq.e = 1;
1797                 wrqu->freq.i = pcur_bss->Configuration.DSConfig;
1798
1799         } else {
1800                 wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
1801                 wrqu->freq.e = 1;
1802                 wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
1803         }
1804
1805         return 0;
1806 }
1807
1808 static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
1809                            union iwreq_data *wrqu, char *b)
1810 {
1811         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1812         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1813         NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
1814         int ret = 0;
1815
1816
1817         if (_FAIL == rtw_pwr_wakeup(padapter)) {
1818                 ret = -EPERM;
1819                 goto exit;
1820         }
1821
1822         if (!rtw_is_hw_init_completed(padapter)) {
1823                 ret = -EPERM;
1824                 goto exit;
1825         }
1826
1827         /* initial default type */
1828         dev->type = ARPHRD_ETHER;
1829
1830         switch (wrqu->mode) {
1831         case IW_MODE_MONITOR:
1832                 networkType = Ndis802_11Monitor;
1833 #if 0
1834                 dev->type = ARPHRD_IEEE80211; /* IEEE 802.11 : 801 */
1835 #endif
1836
1837 #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 24))
1838                 dev->type = ARPHRD_IEEE80211_RADIOTAP; /* IEEE 802.11 + radiotap header : 803 */
1839                 RTW_INFO("set_mode = IW_MODE_MONITOR\n");
1840 #else
1841                 RTW_INFO("kernel version < 2.6.24 not support IW_MODE_MONITOR\n");
1842 #endif
1843                 break;
1844
1845         case IW_MODE_AUTO:
1846                 networkType = Ndis802_11AutoUnknown;
1847                 RTW_INFO("set_mode = IW_MODE_AUTO\n");
1848                 break;
1849         case IW_MODE_ADHOC:
1850                 networkType = Ndis802_11IBSS;
1851                 RTW_INFO("set_mode = IW_MODE_ADHOC\n");
1852                 break;
1853         case IW_MODE_MASTER:
1854                 networkType = Ndis802_11APMode;
1855                 RTW_INFO("set_mode = IW_MODE_MASTER\n");
1856                 /* rtw_setopmode_cmd(padapter, networkType,_TRUE);       */
1857                 break;
1858         case IW_MODE_INFRA:
1859                 networkType = Ndis802_11Infrastructure;
1860                 RTW_INFO("set_mode = IW_MODE_INFRA\n");
1861                 break;
1862
1863         default:
1864                 ret = -EINVAL;;
1865                 goto exit;
1866         }
1867
1868         /*
1869                 if(Ndis802_11APMode == networkType)
1870                 {
1871                         rtw_setopmode_cmd(padapter, networkType,_TRUE);
1872                 }
1873                 else
1874                 {
1875                         rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown,_TRUE);
1876                 }
1877         */
1878
1879         if (rtw_set_802_11_infrastructure_mode(padapter, networkType) == _FALSE) {
1880
1881                 ret = -EPERM;
1882                 goto exit;
1883
1884         }
1885
1886         rtw_setopmode_cmd(padapter, networkType, _TRUE);
1887
1888         if (check_fwstate(pmlmepriv, WIFI_MONITOR_STATE) == _TRUE)
1889                 rtw_indicate_connect(padapter);
1890
1891 exit:
1892
1893
1894         return ret;
1895
1896 }
1897
1898 static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
1899                            union iwreq_data *wrqu, char *b)
1900 {
1901         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1902         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1903
1904
1905
1906         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
1907                 wrqu->mode = IW_MODE_INFRA;
1908         else if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
1909                  (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
1910
1911                 wrqu->mode = IW_MODE_ADHOC;
1912         else if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
1913                 wrqu->mode = IW_MODE_MASTER;
1914         else if (check_fwstate(pmlmepriv, WIFI_MONITOR_STATE) == _TRUE)
1915                 wrqu->mode = IW_MODE_MONITOR;
1916         else
1917                 wrqu->mode = IW_MODE_AUTO;
1918
1919
1920         return 0;
1921
1922 }
1923
1924
1925 static int rtw_wx_set_pmkid(struct net_device *dev,
1926                             struct iw_request_info *a,
1927                             union iwreq_data *wrqu, char *extra)
1928 {
1929         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1930         u8          j, blInserted = _FALSE;
1931         int         intReturn = _FALSE;
1932         struct mlme_priv  *pmlmepriv = &padapter->mlmepriv;
1933         struct security_priv *psecuritypriv = &padapter->securitypriv;
1934         struct iw_pmksa  *pPMK = (struct iw_pmksa *) extra;
1935         u8     strZeroMacAddress[ETH_ALEN] = { 0x00 };
1936         u8     strIssueBssid[ETH_ALEN] = { 0x00 };
1937
1938 #if 0
1939         struct iw_pmksa {
1940                 __u32   cmd;
1941                 struct sockaddr bssid;
1942                 __u8    pmkid[IW_PMKID_LEN];   /* IW_PMKID_LEN=16 */
1943         }
1944         There are the BSSID information in the bssid.sa_data array.
1945         If cmd is IW_PMKSA_FLUSH, it means the wpa_suppplicant wants to clear all the PMKID information.
1946         If cmd is IW_PMKSA_ADD, it means the wpa_supplicant wants to add a PMKID / BSSID to driver.
1947         If cmd is IW_PMKSA_REMOVE, it means the wpa_supplicant wants to remove a PMKID / BSSID from driver.
1948 #endif
1949
1950         _rtw_memcpy(strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
1951         if (pPMK->cmd == IW_PMKSA_ADD) {
1952                 RTW_INFO("[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n");
1953                 if (_rtw_memcmp(strIssueBssid, strZeroMacAddress, ETH_ALEN) == _TRUE)
1954                         return intReturn ;
1955                 else
1956                         intReturn = _TRUE;
1957                 blInserted = _FALSE;
1958
1959                 /* overwrite PMKID */
1960                 for (j = 0 ; j < NUM_PMKID_CACHE; j++) {
1961                         if (_rtw_memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) == _TRUE) {
1962                                 /* BSSID is matched, the same AP => rewrite with new PMKID. */
1963
1964                                 RTW_INFO("[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n");
1965
1966                                 _rtw_memcpy(psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
1967                                 psecuritypriv->PMKIDList[j].bUsed = _TRUE;
1968                                 psecuritypriv->PMKIDIndex = j + 1;
1969                                 blInserted = _TRUE;
1970                                 break;
1971                         }
1972                 }
1973
1974                 if (!blInserted) {
1975                         /* Find a new entry */
1976                         RTW_INFO("[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
1977                                  psecuritypriv->PMKIDIndex);
1978
1979                         _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
1980                         _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
1981
1982                         psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].bUsed = _TRUE;
1983                         psecuritypriv->PMKIDIndex++ ;
1984                         if (psecuritypriv->PMKIDIndex == 16)
1985                                 psecuritypriv->PMKIDIndex = 0;
1986                 }
1987         } else if (pPMK->cmd == IW_PMKSA_REMOVE) {
1988                 RTW_INFO("[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n");
1989                 intReturn = _TRUE;
1990                 for (j = 0 ; j < NUM_PMKID_CACHE; j++) {
1991                         if (_rtw_memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) == _TRUE) {
1992                                 /* BSSID is matched, the same AP => Remove this PMKID information and reset it. */
1993                                 _rtw_memset(psecuritypriv->PMKIDList[j].Bssid, 0x00, ETH_ALEN);
1994                                 psecuritypriv->PMKIDList[j].bUsed = _FALSE;
1995                                 break;
1996                         }
1997                 }
1998         } else if (pPMK->cmd == IW_PMKSA_FLUSH) {
1999                 RTW_INFO("[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n");
2000                 _rtw_memset(&psecuritypriv->PMKIDList[0], 0x00, sizeof(RT_PMKID_LIST) * NUM_PMKID_CACHE);
2001                 psecuritypriv->PMKIDIndex = 0;
2002                 intReturn = _TRUE;
2003         }
2004         return intReturn ;
2005 }
2006
2007 static int rtw_wx_get_sens(struct net_device *dev,
2008                            struct iw_request_info *info,
2009                            union iwreq_data *wrqu, char *extra)
2010 {
2011 #ifdef CONFIG_PLATFORM_ROCKCHIPS
2012         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2013         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2014
2015         /*
2016         *  20110311 Commented by Jeff
2017         *  For rockchip platform's wpa_driver_wext_get_rssi
2018         */
2019         if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
2020                 /* wrqu->sens.value=-padapter->recvpriv.signal_strength; */
2021                 wrqu->sens.value = -padapter->recvpriv.rssi;
2022                 /* RTW_INFO("%s: %d\n", __FUNCTION__, wrqu->sens.value); */
2023                 wrqu->sens.fixed = 0; /* no auto select */
2024         } else
2025 #endif
2026         {
2027                 wrqu->sens.value = 0;
2028                 wrqu->sens.fixed = 0;   /* no auto select */
2029                 wrqu->sens.disabled = 1;
2030         }
2031         return 0;
2032 }
2033
2034 static int rtw_wx_get_range(struct net_device *dev,
2035                             struct iw_request_info *info,
2036                             union iwreq_data *wrqu, char *extra)
2037 {
2038         struct iw_range *range = (struct iw_range *)extra;
2039         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2040         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
2041
2042         u16 val;
2043         int i;
2044
2045
2046
2047         wrqu->data.length = sizeof(*range);
2048         _rtw_memset(range, 0, sizeof(*range));
2049
2050         /* Let's try to keep this struct in the same order as in
2051          * linux/include/wireless.h
2052          */
2053
2054         /* TODO: See what values we can set, and remove the ones we can't
2055          * set, or fill them with some default data.
2056          */
2057
2058         /* ~5 Mb/s real (802.11b) */
2059         range->throughput = 5 * 1000 * 1000;
2060
2061         /* TODO: Not used in 802.11b?
2062         *       range->min_nwid;         Minimal NWID we are able to set  */
2063         /* TODO: Not used in 802.11b?
2064         *       range->max_nwid;         Maximal NWID we are able to set  */
2065
2066         /* Old Frequency (backward compat - moved lower ) */
2067         /*      range->old_num_channels;
2068          *      range->old_num_frequency;
2069          *      range->old_freq[6];  Filler to keep "version" at the same offset  */
2070
2071         /* signal level threshold range */
2072
2073         /* Quality of link & SNR stuff */
2074         /* Quality range (link, level, noise)
2075          * If the quality is absolute, it will be in the range [0 ; max_qual],
2076          * if the quality is dBm, it will be in the range [max_qual ; 0].
2077          * Don't forget that we use 8 bit arithmetics...
2078          *
2079          * If percentage range is 0~100
2080          * Signal strength dbm range logical is -100 ~ 0
2081          * but usually value is -90 ~ -20
2082          * When CONFIG_SIGNAL_SCALE_MAPPING is defined, dbm range is -95 ~ -45
2083          */
2084         range->max_qual.qual = 100;
2085 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
2086         range->max_qual.level = (u8)-100;
2087         range->max_qual.noise = (u8)-100;
2088         range->max_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2089         range->max_qual.updated |= IW_QUAL_DBM;
2090 #else /* !CONFIG_SIGNAL_DISPLAY_DBM */
2091         /* percent values between 0 and 100. */
2092         range->max_qual.level = 100;
2093         range->max_qual.noise = 100;
2094         range->max_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2095 #endif /* !CONFIG_SIGNAL_DISPLAY_DBM */
2096
2097         /* This should contain the average/typical values of the quality
2098          * indicator. This should be the threshold between a "good" and
2099          * a "bad" link (example : monitor going from green to orange).
2100          * Currently, user space apps like quality monitors don't have any
2101          * way to calibrate the measurement. With this, they can split
2102          * the range between 0 and max_qual in different quality level
2103          * (using a geometric subdivision centered on the average).
2104          * I expect that people doing the user space apps will feedback
2105          * us on which value we need to put in each driver... */
2106         range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
2107 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
2108         /* TODO: Find real 'good' to 'bad' threshold value for RSSI */
2109         range->avg_qual.level = (u8)-70;
2110         range->avg_qual.noise = 0;
2111         range->avg_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2112         range->avg_qual.updated |= IW_QUAL_DBM;
2113 #else /* !CONFIG_SIGNAL_DISPLAY_DBM */
2114         /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
2115         range->avg_qual.level = 30;
2116         range->avg_qual.noise = 100;
2117         range->avg_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2118 #endif /* !CONFIG_SIGNAL_DISPLAY_DBM */
2119
2120         range->num_bitrates = RATE_COUNT;
2121
2122         for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++)
2123                 range->bitrate[i] = rtw_rates[i];
2124
2125         range->min_frag = MIN_FRAG_THRESHOLD;
2126         range->max_frag = MAX_FRAG_THRESHOLD;
2127
2128         range->pm_capa = 0;
2129
2130         range->we_version_compiled = WIRELESS_EXT;
2131         range->we_version_source = 16;
2132
2133         /*      range->retry_capa;       What retry options are supported
2134          *      range->retry_flags;      How to decode max/min retry limit
2135          *      range->r_time_flags;     How to decode max/min retry life
2136          *      range->min_retry;        Minimal number of retries
2137          *      range->max_retry;        Maximal number of retries
2138          *      range->min_r_time;       Minimal retry lifetime
2139          *      range->max_r_time;       Maximal retry lifetime  */
2140
2141         for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
2142
2143                 /* Include only legal frequencies for some countries */
2144                 if (pmlmeext->channel_set[i].ChannelNum != 0) {
2145                         range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
2146                         range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
2147                         range->freq[val].e = 1;
2148                         val++;
2149                 }
2150
2151                 if (val == IW_MAX_FREQUENCIES)
2152                         break;
2153         }
2154
2155         range->num_channels = val;
2156         range->num_frequency = val;
2157
2158         /* Commented by Albert 2009/10/13
2159          * The following code will proivde the security capability to network manager.
2160          * If the driver doesn't provide this capability to network manager,
2161          * the WPA/WPA2 routers can't be choosen in the network manager. */
2162
2163         /*
2164         #define IW_SCAN_CAPA_NONE               0x00
2165         #define IW_SCAN_CAPA_ESSID              0x01
2166         #define IW_SCAN_CAPA_BSSID              0x02
2167         #define IW_SCAN_CAPA_CHANNEL    0x04
2168         #define IW_SCAN_CAPA_MODE               0x08
2169         #define IW_SCAN_CAPA_RATE               0x10
2170         #define IW_SCAN_CAPA_TYPE               0x20
2171         #define IW_SCAN_CAPA_TIME               0x40
2172         */
2173
2174 #if WIRELESS_EXT > 17
2175         range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
2176                           IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
2177 #endif
2178
2179 #ifdef IW_SCAN_CAPA_ESSID /* WIRELESS_EXT > 21 */
2180         range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE | IW_SCAN_CAPA_BSSID |
2181                    IW_SCAN_CAPA_CHANNEL | IW_SCAN_CAPA_MODE | IW_SCAN_CAPA_RATE;
2182 #endif
2183
2184
2185
2186         return 0;
2187
2188 }
2189
2190 /* set bssid flow
2191  * s1. rtw_set_802_11_infrastructure_mode()
2192  * s2. rtw_set_802_11_authentication_mode()
2193  * s3. set_802_11_encryption_mode()
2194  * s4. rtw_set_802_11_bssid() */
2195 static int rtw_wx_set_wap(struct net_device *dev,
2196                           struct iw_request_info *info,
2197                           union iwreq_data *awrq,
2198                           char *extra)
2199 {
2200         _irqL   irqL;
2201         uint ret = 0;
2202         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2203         struct sockaddr *temp = (struct sockaddr *)awrq;
2204         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2205         _list   *phead;
2206         u8 *dst_bssid, *src_bssid;
2207         _queue  *queue  = &(pmlmepriv->scanned_queue);
2208         struct  wlan_network    *pnetwork = NULL;
2209         NDIS_802_11_AUTHENTICATION_MODE authmode;
2210
2211         /*
2212         #ifdef CONFIG_CONCURRENT_MODE
2213                 if(padapter->adapter_type > PRIMARY_IFACE)
2214                 {
2215                         ret = -EINVAL;
2216                         goto exit;
2217                 }
2218         #endif
2219         */
2220
2221 #ifdef CONFIG_CONCURRENT_MODE
2222         if (rtw_mi_buddy_check_fwstate(padapter, _FW_UNDER_SURVEY | _FW_UNDER_LINKING) == _TRUE) {
2223                 RTW_INFO("set bssid, but buddy_intf is under scanning or linking\n");
2224
2225                 ret = -EINVAL;
2226
2227                 goto exit;
2228         }
2229 #endif
2230
2231         rtw_ps_deny(padapter, PS_DENY_JOIN);
2232         if (_FAIL == rtw_pwr_wakeup(padapter)) {
2233                 ret = -1;
2234                 goto cancel_ps_deny;
2235         }
2236
2237         if (!padapter->bup) {
2238                 ret = -1;
2239                 goto cancel_ps_deny;
2240         }
2241
2242
2243         if (temp->sa_family != ARPHRD_ETHER) {
2244                 ret = -EINVAL;
2245                 goto cancel_ps_deny;
2246         }
2247
2248         authmode = padapter->securitypriv.ndisauthtype;
2249         _enter_critical_bh(&queue->lock, &irqL);
2250         phead = get_list_head(queue);
2251         pmlmepriv->pscanned = get_next(phead);
2252
2253         while (1) {
2254
2255                 if ((rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) == _TRUE) {
2256 #if 0
2257                         ret = -EINVAL;
2258                         goto cancel_ps_deny;
2259
2260                         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) {
2261                                 rtw_set_802_11_bssid(padapter, temp->sa_data);
2262                                 goto cancel_ps_deny;
2263                         } else {
2264                                 ret = -EINVAL;
2265                                 goto cancel_ps_deny;
2266                         }
2267 #endif
2268
2269                         break;
2270                 }
2271
2272                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
2273
2274                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
2275
2276                 dst_bssid = pnetwork->network.MacAddress;
2277
2278                 src_bssid = temp->sa_data;
2279
2280                 if ((_rtw_memcmp(dst_bssid, src_bssid, ETH_ALEN)) == _TRUE) {
2281                         if (!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode)) {
2282                                 ret = -1;
2283                                 _exit_critical_bh(&queue->lock, &irqL);
2284                                 goto cancel_ps_deny;
2285                         }
2286
2287                         break;
2288                 }
2289
2290         }
2291         _exit_critical_bh(&queue->lock, &irqL);
2292
2293         rtw_set_802_11_authentication_mode(padapter, authmode);
2294         /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
2295         if (rtw_set_802_11_bssid(padapter, temp->sa_data) == _FALSE) {
2296                 ret = -1;
2297                 goto cancel_ps_deny;
2298         }
2299
2300 cancel_ps_deny:
2301         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
2302
2303 exit:
2304         return ret;
2305 }
2306
2307 static int rtw_wx_get_wap(struct net_device *dev,
2308                           struct iw_request_info *info,
2309                           union iwreq_data *wrqu, char *extra)
2310 {
2311
2312         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2313         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2314         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
2315
2316         wrqu->ap_addr.sa_family = ARPHRD_ETHER;
2317
2318         _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
2319
2320
2321
2322         if (((check_fwstate(pmlmepriv, _FW_LINKED)) == _TRUE) ||
2323             ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE) ||
2324             ((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == _TRUE))
2325
2326                 _rtw_memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
2327         else
2328                 _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
2329
2330
2331         return 0;
2332
2333 }
2334
2335 static int rtw_wx_set_mlme(struct net_device *dev,
2336                            struct iw_request_info *info,
2337                            union iwreq_data *wrqu, char *extra)
2338 {
2339 #if 0
2340         /* SIOCSIWMLME data */
2341         struct  iw_mlme {
2342                 __u16           cmd; /* IW_MLME_* */
2343                 __u16           reason_code;
2344                 struct sockaddr addr;
2345         };
2346 #endif
2347
2348         int ret = 0;
2349         u16 reason;
2350         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2351         struct iw_mlme *mlme = (struct iw_mlme *) extra;
2352
2353
2354         if (mlme == NULL)
2355                 return -1;
2356
2357         RTW_INFO("%s\n", __FUNCTION__);
2358
2359         reason = cpu_to_le16(mlme->reason_code);
2360
2361
2362         RTW_INFO("%s, cmd=%d, reason=%d\n", __FUNCTION__, mlme->cmd, reason);
2363
2364
2365         switch (mlme->cmd) {
2366         case IW_MLME_DEAUTH:
2367                 if (!rtw_set_802_11_disassociate(padapter))
2368                         ret = -1;
2369                 break;
2370
2371         case IW_MLME_DISASSOC:
2372                 if (!rtw_set_802_11_disassociate(padapter))
2373                         ret = -1;
2374
2375                 break;
2376
2377         default:
2378                 return -EOPNOTSUPP;
2379         }
2380
2381         return ret;
2382 }
2383
2384 static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
2385                            union iwreq_data *wrqu, char *extra)
2386 {
2387         u8 _status = _FALSE;
2388         int ret = 0;
2389         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2390         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2391         NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
2392
2393 #ifdef CONFIG_P2P
2394         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2395 #endif /* CONFIG_P2P */
2396
2397
2398 #ifdef DBG_IOCTL
2399         RTW_INFO("DBG_IOCTL %s:%d\n", __FUNCTION__, __LINE__);
2400 #endif
2401
2402 #ifdef CONFIG_MP_INCLUDED
2403         if (rtw_mi_mp_mode_check(padapter)) {
2404                 RTW_INFO("MP mode block Scan request\n");
2405                 ret = -EPERM;
2406                 goto exit;
2407         }
2408 #endif
2409         if (rtw_is_scan_deny(padapter)) {
2410                 indicate_wx_scan_complete_event(padapter);
2411                 goto exit;
2412         }
2413
2414         rtw_ps_deny(padapter, PS_DENY_SCAN);
2415         if (_FAIL == rtw_pwr_wakeup(padapter)) {
2416                 ret = -1;
2417                 goto cancel_ps_deny;
2418         }
2419
2420         if (!rtw_is_adapter_up(padapter)) {
2421                 ret = -1;
2422                 goto cancel_ps_deny;
2423         }
2424
2425 #ifndef CONFIG_DOSCAN_IN_BUSYTRAFFIC
2426         /* When Busy Traffic, driver do not site survey. So driver return success. */
2427         /* wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout. */
2428         /* modify by thomas 2011-02-22. */
2429         if (rtw_mi_busy_traffic_check(padapter, _FALSE)) {
2430                 indicate_wx_scan_complete_event(padapter);
2431                 goto cancel_ps_deny;
2432         }
2433 #endif
2434
2435         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) && check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
2436                 RTW_INFO("AP mode process WPS\n");
2437                 indicate_wx_scan_complete_event(padapter);
2438                 goto cancel_ps_deny;
2439         }
2440
2441         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY | _FW_UNDER_LINKING) == _TRUE) {
2442                 indicate_wx_scan_complete_event(padapter);
2443                 goto cancel_ps_deny;
2444         }
2445
2446 #ifdef CONFIG_CONCURRENT_MODE
2447         if (rtw_mi_buddy_check_fwstate(padapter,
2448                        _FW_UNDER_SURVEY | _FW_UNDER_LINKING | WIFI_UNDER_WPS)) {
2449
2450                 indicate_wx_scan_complete_event(padapter);
2451                 goto cancel_ps_deny;
2452         }
2453 #endif
2454
2455 #ifdef CONFIG_P2P
2456         if (pwdinfo->p2p_state != P2P_STATE_NONE) {
2457                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
2458                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
2459                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_FULL);
2460                 rtw_free_network_queue(padapter, _TRUE);
2461         }
2462 #endif /* CONFIG_P2P */
2463
2464         _rtw_memset(ssid, 0, sizeof(NDIS_802_11_SSID) * RTW_SSID_SCAN_AMOUNT);
2465
2466 #if WIRELESS_EXT >= 17
2467         if (wrqu->data.length == sizeof(struct iw_scan_req)) {
2468                 struct iw_scan_req *req = (struct iw_scan_req *)extra;
2469
2470                 if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
2471                         int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
2472
2473                         _rtw_memcpy(ssid[0].Ssid, req->essid, len);
2474                         ssid[0].SsidLength = len;
2475
2476                         RTW_INFO("IW_SCAN_THIS_ESSID, ssid=%s, len=%d\n", req->essid, req->essid_len);
2477
2478                         _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, 1, NULL, 0);
2479
2480                 } else if (req->scan_type == IW_SCAN_TYPE_PASSIVE)
2481                         RTW_INFO("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
2482
2483         } else
2484 #endif
2485
2486                 if (wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE
2487                     && _rtw_memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
2488                    ) {
2489                         int len = wrqu->data.length - WEXT_CSCAN_HEADER_SIZE;
2490                         char *pos = extra + WEXT_CSCAN_HEADER_SIZE;
2491                         char section;
2492                         char sec_len;
2493                         int ssid_index = 0;
2494
2495                         /* RTW_INFO("%s COMBO_SCAN header is recognized\n", __FUNCTION__); */
2496
2497                         while (len >= 1) {
2498                                 section = *(pos++);
2499                                 len -= 1;
2500
2501                                 switch (section) {
2502                                 case WEXT_CSCAN_SSID_SECTION:
2503                                         /* RTW_INFO("WEXT_CSCAN_SSID_SECTION\n"); */
2504                                         if (len < 1) {
2505                                                 len = 0;
2506                                                 break;
2507                                         }
2508
2509                                         sec_len = *(pos++);
2510                                         len -= 1;
2511
2512                                         if (sec_len > 0 && sec_len <= len) {
2513                                                 ssid[ssid_index].SsidLength = sec_len;
2514                                                 _rtw_memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
2515                                                 /* RTW_INFO("%s COMBO_SCAN with specific ssid:%s, %d\n", __FUNCTION__ */
2516                                                 /*      , ssid[ssid_index].Ssid, ssid[ssid_index].SsidLength); */
2517                                                 ssid_index++;
2518                                         }
2519
2520                                         pos += sec_len;
2521                                         len -= sec_len;
2522                                         break;
2523
2524
2525                                 case WEXT_CSCAN_CHANNEL_SECTION:
2526                                         /* RTW_INFO("WEXT_CSCAN_CHANNEL_SECTION\n"); */
2527                                         pos += 1;
2528                                         len -= 1;
2529                                         break;
2530                                 case WEXT_CSCAN_ACTV_DWELL_SECTION:
2531                                         /* RTW_INFO("WEXT_CSCAN_ACTV_DWELL_SECTION\n"); */
2532                                         pos += 2;
2533                                         len -= 2;
2534                                         break;
2535                                 case WEXT_CSCAN_PASV_DWELL_SECTION:
2536                                         /* RTW_INFO("WEXT_CSCAN_PASV_DWELL_SECTION\n"); */
2537                                         pos += 2;
2538                                         len -= 2;
2539                                         break;
2540                                 case WEXT_CSCAN_HOME_DWELL_SECTION:
2541                                         /* RTW_INFO("WEXT_CSCAN_HOME_DWELL_SECTION\n"); */
2542                                         pos += 2;
2543                                         len -= 2;
2544                                         break;
2545                                 case WEXT_CSCAN_TYPE_SECTION:
2546                                         /* RTW_INFO("WEXT_CSCAN_TYPE_SECTION\n"); */
2547                                         pos += 1;
2548                                         len -= 1;
2549                                         break;
2550 #if 0
2551                                 case WEXT_CSCAN_NPROBE_SECTION:
2552                                         RTW_INFO("WEXT_CSCAN_NPROBE_SECTION\n");
2553                                         break;
2554 #endif
2555
2556                                 default:
2557                                         /* RTW_INFO("Unknown CSCAN section %c\n", section); */
2558                                         len = 0; /* stop parsing */
2559                                 }
2560                                 /* RTW_INFO("len:%d\n", len); */
2561
2562                         }
2563
2564                         /* jeff: it has still some scan paramater to parse, we only do this now... */
2565                         _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT, NULL, 0);
2566
2567                 } else
2568
2569                         _status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0, NULL, 0);
2570
2571         if (_status == _FALSE)
2572                 ret = -1;
2573
2574 cancel_ps_deny:
2575         rtw_ps_deny_cancel(padapter, PS_DENY_SCAN);
2576
2577 exit:
2578 #ifdef DBG_IOCTL
2579         RTW_INFO("DBG_IOCTL %s:%d return %d\n", __FUNCTION__, __LINE__, ret);
2580 #endif
2581
2582         return ret;
2583 }
2584
2585 static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
2586                            union iwreq_data *wrqu, char *extra)
2587 {
2588         _irqL   irqL;
2589         _list                                   *plist, *phead;
2590         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2591         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2592         _queue                          *queue  = &(pmlmepriv->scanned_queue);
2593         struct  wlan_network    *pnetwork = NULL;
2594         char *ev = extra;
2595         char *stop = ev + wrqu->data.length;
2596         u32 ret = 0;
2597         u32 cnt = 0;
2598         u32 wait_for_surveydone;
2599         sint wait_status;
2600
2601 #ifdef CONFIG_P2P
2602         struct  wifidirect_info *pwdinfo = &padapter->wdinfo;
2603 #endif /* CONFIG_P2P */
2604
2605
2606 #ifdef DBG_IOCTL
2607         RTW_INFO("DBG_IOCTL %s:%d\n", __FUNCTION__, __LINE__);
2608 #endif
2609
2610         if (adapter_to_pwrctl(padapter)->brfoffbyhw && rtw_is_drv_stopped(padapter)) {
2611                 ret = -EINVAL;
2612                 goto exit;
2613         }
2614
2615 #ifdef CONFIG_P2P
2616         if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
2617                 wait_for_surveydone = 200;
2618         else {
2619                 /*      P2P is disabled */
2620                 wait_for_surveydone = 100;
2621         }
2622 #else
2623         {
2624                 wait_for_surveydone = 100;
2625         }
2626 #endif /* CONFIG_P2P */
2627
2628 #if 1 /* Wireless Extension use EAGAIN to try */
2629         wait_status = _FW_UNDER_SURVEY
2630 #ifndef CONFIG_ANDROID
2631                       | _FW_UNDER_LINKING
2632 #endif
2633                       ;
2634
2635         while (check_fwstate(pmlmepriv, wait_status) == _TRUE)
2636                 return -EAGAIN;
2637 #else
2638         wait_status = _FW_UNDER_SURVEY
2639 #ifndef CONFIG_ANDROID
2640                       | _FW_UNDER_LINKING
2641 #endif
2642                       ;
2643
2644         while (check_fwstate(pmlmepriv, wait_status) == _TRUE) {
2645                 rtw_msleep_os(30);
2646                 cnt++;
2647                 if (cnt > wait_for_surveydone)
2648                         break;
2649         }
2650 #endif
2651         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2652
2653         phead = get_list_head(queue);
2654         plist = get_next(phead);
2655
2656         while (1) {
2657                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
2658                         break;
2659
2660                 if ((stop - ev) < SCAN_ITEM_SIZE) {
2661                         ret = -E2BIG;
2662                         break;
2663                 }
2664
2665                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
2666
2667                 /* report network only if the current channel set contains the channel to which this network belongs */
2668                 if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
2669                     && rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == _TRUE
2670                     && _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
2671                    )
2672                         ev = translate_scan(padapter, a, pnetwork, ev, stop);
2673
2674                 plist = get_next(plist);
2675
2676         }
2677
2678         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2679
2680         wrqu->data.length = ev - extra;
2681         wrqu->data.flags = 0;
2682
2683 exit:
2684
2685
2686 #ifdef DBG_IOCTL
2687         RTW_INFO("DBG_IOCTL %s:%d return %d\n", __FUNCTION__, __LINE__, ret);
2688 #endif
2689
2690         return ret ;
2691
2692 }
2693
2694 /* set ssid flow
2695  * s1. rtw_set_802_11_infrastructure_mode()
2696  * s2. set_802_11_authenticaion_mode()
2697  * s3. set_802_11_encryption_mode()
2698  * s4. rtw_set_802_11_ssid() */
2699 static int rtw_wx_set_essid(struct net_device *dev,
2700                             struct iw_request_info *a,
2701                             union iwreq_data *wrqu, char *extra)
2702 {
2703         _irqL irqL;
2704         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2705         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2706         _queue *queue = &pmlmepriv->scanned_queue;
2707         _list *phead;
2708         s8 status = _TRUE;
2709         struct wlan_network *pnetwork = NULL;
2710         NDIS_802_11_AUTHENTICATION_MODE authmode;
2711         NDIS_802_11_SSID ndis_ssid;
2712         u8 *dst_ssid, *src_ssid;
2713
2714         uint ret = 0, len;
2715
2716
2717 #ifdef DBG_IOCTL
2718         RTW_INFO("DBG_IOCTL %s:%d\n", __FUNCTION__, __LINE__);
2719 #endif
2720 #ifdef CONFIG_WEXT_DONT_JOIN_BYSSID
2721         RTW_INFO("%s: CONFIG_WEXT_DONT_JOIN_BYSSID be defined!! only allow bssid joining\n", __func__);
2722         return -EPERM;
2723 #endif
2724
2725 #if WIRELESS_EXT <= 20
2726         if ((wrqu->essid.length - 1) > IW_ESSID_MAX_SIZE) {
2727 #else
2728         if (wrqu->essid.length > IW_ESSID_MAX_SIZE) {
2729 #endif
2730                 ret = -E2BIG;
2731                 goto exit;
2732         }
2733
2734
2735
2736         rtw_ps_deny(padapter, PS_DENY_JOIN);
2737         if (_FAIL == rtw_pwr_wakeup(padapter)) {
2738                 ret = -1;
2739                 goto cancel_ps_deny;
2740         }
2741
2742         if (!padapter->bup) {
2743                 ret = -1;
2744                 goto cancel_ps_deny;
2745         }
2746
2747         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
2748                 ret = -1;
2749                 goto cancel_ps_deny;
2750         }
2751
2752 #ifdef CONFIG_CONCURRENT_MODE
2753         if (rtw_mi_buddy_check_fwstate(padapter, _FW_UNDER_SURVEY | _FW_UNDER_LINKING)) {
2754                 RTW_INFO("set ssid, but buddy_intf is under scanning or linking\n");
2755                 ret = -EINVAL;
2756                 goto cancel_ps_deny;
2757         }
2758 #endif
2759         authmode = padapter->securitypriv.ndisauthtype;
2760         RTW_INFO("=>%s\n", __FUNCTION__);
2761         if (wrqu->essid.flags && wrqu->essid.length) {
2762                 /* Commented by Albert 20100519 */
2763                 /* We got the codes in "set_info" function of iwconfig source code. */
2764                 /*      ========================================= */
2765                 /*      wrq.u.essid.length = strlen(essid) + 1; */
2766                 /*      if(we_kernel_version > 20) */
2767                 /*              wrq.u.essid.length--; */
2768                 /*      ========================================= */
2769                 /*      That means, if the WIRELESS_EXT less than or equal to 20, the correct ssid len should subtract 1. */
2770 #if WIRELESS_EXT <= 20
2771                 len = ((wrqu->essid.length - 1) < IW_ESSID_MAX_SIZE) ? (wrqu->essid.length - 1) : IW_ESSID_MAX_SIZE;
2772 #else
2773                 len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
2774 #endif
2775
2776                 if (wrqu->essid.length != 33)
2777                         RTW_INFO("ssid=%s, len=%d\n", extra, wrqu->essid.length);
2778
2779                 _rtw_memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));
2780                 ndis_ssid.SsidLength = len;
2781                 _rtw_memcpy(ndis_ssid.Ssid, extra, len);
2782                 src_ssid = ndis_ssid.Ssid;
2783
2784                 _enter_critical_bh(&queue->lock, &irqL);
2785                 phead = get_list_head(queue);
2786                 pmlmepriv->pscanned = get_next(phead);
2787
2788                 while (1) {
2789                         if (rtw_end_of_queue_search(phead, pmlmepriv->pscanned) == _TRUE) {
2790 #if 0
2791                                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) {
2792                                         rtw_set_802_11_ssid(padapter, &ndis_ssid);
2793
2794                                         goto cancel_ps_deny;
2795                                 } else {
2796                                         ret = -EINVAL;
2797                                         goto cancel_ps_deny;
2798                                 }
2799 #endif
2800
2801                                 break;
2802                         }
2803
2804                         pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
2805
2806                         pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
2807
2808                         dst_ssid = pnetwork->network.Ssid.Ssid;
2809
2810
2811                         if ((_rtw_memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength) == _TRUE) &&
2812                             (pnetwork->network.Ssid.SsidLength == ndis_ssid.SsidLength)) {
2813
2814                                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) {
2815                                         if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
2816                                                 continue;
2817                                 }
2818
2819                                 if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == _FALSE) {
2820                                         ret = -1;
2821                                         _exit_critical_bh(&queue->lock, &irqL);
2822                                         goto cancel_ps_deny;
2823                                 }
2824
2825                                 break;
2826                         }
2827                 }
2828                 _exit_critical_bh(&queue->lock, &irqL);
2829                 rtw_set_802_11_authentication_mode(padapter, authmode);
2830                 /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
2831                 if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == _FALSE) {
2832                         ret = -1;
2833                         goto cancel_ps_deny;
2834                 }
2835         }
2836
2837 cancel_ps_deny:
2838         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
2839
2840 exit:
2841         RTW_INFO("<=%s, ret %d\n", __FUNCTION__, ret);
2842
2843 #ifdef DBG_IOCTL
2844         RTW_INFO("DBG_IOCTL %s:%d return %d\n", __FUNCTION__, __LINE__, ret);
2845 #endif
2846
2847
2848         return ret;
2849 }
2850
2851 static int rtw_wx_get_essid(struct net_device *dev,
2852                             struct iw_request_info *a,
2853                             union iwreq_data *wrqu, char *extra)
2854 {
2855         u32 len, ret = 0;
2856         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2857         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2858         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
2859
2860
2861
2862         if ((check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
2863             (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)) {
2864                 len = pcur_bss->Ssid.SsidLength;
2865
2866                 wrqu->essid.length = len;
2867
2868                 _rtw_memcpy(extra, pcur_bss->Ssid.Ssid, len);
2869
2870                 wrqu->essid.flags = 1;
2871         } else {
2872                 ret = -1;
2873                 goto exit;
2874         }
2875
2876 exit:
2877
2878
2879         return ret;
2880
2881 }
2882
2883 static int rtw_wx_set_rate(struct net_device *dev,
2884                            struct iw_request_info *a,
2885                            union iwreq_data *wrqu, char *extra)
2886 {
2887         int     i, ret = 0;
2888         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2889         u8      datarates[NumRates];
2890         u32     target_rate = wrqu->bitrate.value;
2891         u32     fixed = wrqu->bitrate.fixed;
2892         u32     ratevalue = 0;
2893         u8 mpdatarate[NumRates] = {11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
2894
2895
2896
2897         if (target_rate == -1) {
2898                 ratevalue = 11;
2899                 goto set_rate;
2900         }
2901         target_rate = target_rate / 100000;
2902
2903         switch (target_rate) {
2904         case 10:
2905                 ratevalue = 0;
2906                 break;
2907         case 20:
2908                 ratevalue = 1;
2909                 break;
2910         case 55:
2911                 ratevalue = 2;
2912                 break;
2913         case 60:
2914                 ratevalue = 3;
2915                 break;
2916         case 90:
2917                 ratevalue = 4;
2918                 break;
2919         case 110:
2920                 ratevalue = 5;
2921                 break;
2922         case 120:
2923                 ratevalue = 6;
2924                 break;
2925         case 180:
2926                 ratevalue = 7;
2927                 break;
2928         case 240:
2929                 ratevalue = 8;
2930                 break;
2931         case 360:
2932                 ratevalue = 9;
2933                 break;
2934         case 480:
2935                 ratevalue = 10;
2936                 break;
2937         case 540:
2938                 ratevalue = 11;
2939                 break;
2940         default:
2941                 ratevalue = 11;
2942                 break;
2943         }
2944
2945 set_rate:
2946
2947         for (i = 0; i < NumRates; i++) {
2948                 if (ratevalue == mpdatarate[i]) {
2949                         datarates[i] = mpdatarate[i];
2950                         if (fixed == 0)
2951                                 break;
2952                 } else
2953                         datarates[i] = 0xff;
2954
2955         }
2956
2957         if (rtw_setdatarate_cmd(padapter, datarates) != _SUCCESS) {
2958                 ret = -1;
2959         }
2960
2961
2962         return ret;
2963 }
2964
2965 static int rtw_wx_get_rate(struct net_device *dev,
2966                            struct iw_request_info *info,
2967                            union iwreq_data *wrqu, char *extra)
2968 {
2969         u16 max_rate = 0;
2970
2971         max_rate = rtw_get_cur_max_rate((_adapter *)rtw_netdev_priv(dev));
2972
2973         if (max_rate == 0)
2974                 return -EPERM;
2975
2976         wrqu->bitrate.fixed = 0;        /* no auto select */
2977         wrqu->bitrate.value = max_rate * 100000;
2978
2979         return 0;
2980 }
2981
2982 static int rtw_wx_set_rts(struct net_device *dev,
2983                           struct iw_request_info *info,
2984                           union iwreq_data *wrqu, char *extra)
2985 {
2986         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2987
2988
2989         if (wrqu->rts.disabled)
2990                 padapter->registrypriv.rts_thresh = 2347;
2991         else {
2992                 if (wrqu->rts.value < 0 ||
2993                     wrqu->rts.value > 2347)
2994                         return -EINVAL;
2995
2996                 padapter->registrypriv.rts_thresh = wrqu->rts.value;
2997         }
2998
2999         RTW_INFO("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
3000
3001
3002         return 0;
3003
3004 }
3005
3006 static int rtw_wx_get_rts(struct net_device *dev,
3007                           struct iw_request_info *info,
3008                           union iwreq_data *wrqu, char *extra)
3009 {
3010         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3011
3012
3013         RTW_INFO("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
3014
3015         wrqu->rts.value = padapter->registrypriv.rts_thresh;
3016         wrqu->rts.fixed = 0;    /* no auto select */
3017         /* wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD); */
3018
3019
3020         return 0;
3021 }
3022
3023 static int rtw_wx_set_frag(struct net_device *dev,
3024                            struct iw_request_info *info,
3025                            union iwreq_data *wrqu, char *extra)
3026 {
3027         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3028
3029
3030         if (wrqu->frag.disabled)
3031                 padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
3032         else {
3033                 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
3034                     wrqu->frag.value > MAX_FRAG_THRESHOLD)
3035                         return -EINVAL;
3036
3037                 padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
3038         }
3039
3040         RTW_INFO("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
3041
3042
3043         return 0;
3044
3045 }
3046
3047 static int rtw_wx_get_frag(struct net_device *dev,
3048                            struct iw_request_info *info,
3049                            union iwreq_data *wrqu, char *extra)
3050 {
3051         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3052
3053
3054         RTW_INFO("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
3055
3056         wrqu->frag.value = padapter->xmitpriv.frag_len;
3057         wrqu->frag.fixed = 0;   /* no auto select */
3058         /* wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FRAG_THRESHOLD); */
3059
3060
3061         return 0;
3062 }
3063
3064 static int rtw_wx_get_retry(struct net_device *dev,
3065                             struct iw_request_info *info,
3066                             union iwreq_data *wrqu, char *extra)
3067 {
3068         /* _adapter *padapter = (_adapter *)rtw_netdev_priv(dev); */
3069
3070
3071         wrqu->retry.value = 7;
3072         wrqu->retry.fixed = 0;  /* no auto select */
3073         wrqu->retry.disabled = 1;
3074
3075         return 0;
3076
3077 }
3078
3079 #if 0
3080         #define IW_ENCODE_INDEX         0x00FF  /* Token index (if needed) */
3081         #define IW_ENCODE_FLAGS         0xFF00  /* Flags defined below */
3082         #define IW_ENCODE_MODE          0xF000  /* Modes defined below */
3083         #define IW_ENCODE_DISABLED      0x8000  /* Encoding disabled */
3084         #define IW_ENCODE_ENABLED       0x0000  /* Encoding enabled */
3085         #define IW_ENCODE_RESTRICTED    0x4000  /* Refuse non-encoded packets */
3086         #define IW_ENCODE_OPEN          0x2000  /* Accept non-encoded packets */
3087         #define IW_ENCODE_NOKEY         0x0800  /* Key is write only, so not present */
3088         #define IW_ENCODE_TEMP          0x0400  /* Temporary key */
3089         /*
3090         iwconfig wlan0 key on->flags = 0x6001->maybe it means auto
3091         iwconfig wlan0 key off->flags = 0x8800
3092         iwconfig wlan0 key open->flags = 0x2800
3093         iwconfig wlan0 key open 1234567890->flags = 0x2000
3094         iwconfig wlan0 key restricted->flags = 0x4800
3095         iwconfig wlan0 key open [3] 1234567890->flags = 0x2003
3096         iwconfig wlan0 key restricted [2] 1234567890->flags = 0x4002
3097         iwconfig wlan0 key open [3] -> flags = 0x2803
3098         iwconfig wlan0 key restricted [2] -> flags = 0x4802
3099         */
3100 #endif
3101
3102 static int rtw_wx_set_enc(struct net_device *dev,
3103                           struct iw_request_info *info,
3104                           union iwreq_data *wrqu, char *keybuf)
3105 {
3106         u32 key, ret = 0;
3107         u32 keyindex_provided;
3108         NDIS_802_11_WEP  wep;
3109         NDIS_802_11_AUTHENTICATION_MODE authmode;
3110
3111         struct iw_point *erq = &(wrqu->encoding);
3112         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3113         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
3114         RTW_INFO("+rtw_wx_set_enc, flags=0x%x\n", erq->flags);
3115
3116         _rtw_memset(&wep, 0, sizeof(NDIS_802_11_WEP));
3117
3118         key = erq->flags & IW_ENCODE_INDEX;
3119
3120
3121         if (erq->flags & IW_ENCODE_DISABLED) {
3122                 RTW_INFO("EncryptionDisabled\n");
3123                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
3124                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3125                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
3126                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
3127                 authmode = Ndis802_11AuthModeOpen;
3128                 padapter->securitypriv.ndisauthtype = authmode;
3129
3130                 goto exit;
3131         }
3132
3133         if (key) {
3134                 if (key > WEP_KEYS)
3135                         return -EINVAL;
3136                 key--;
3137                 keyindex_provided = 1;
3138         } else {
3139                 keyindex_provided = 0;
3140                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
3141                 RTW_INFO("rtw_wx_set_enc, key=%d\n", key);
3142         }
3143
3144         /* set authentication mode       */
3145         if (erq->flags & IW_ENCODE_OPEN) {
3146                 RTW_INFO("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
3147                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
3148
3149 #ifdef CONFIG_PLATFORM_MT53XX
3150                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
3151 #else
3152                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
3153 #endif
3154
3155                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3156                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
3157                 authmode = Ndis802_11AuthModeOpen;
3158                 padapter->securitypriv.ndisauthtype = authmode;
3159         } else if (erq->flags & IW_ENCODE_RESTRICTED) {
3160                 RTW_INFO("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
3161                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
3162
3163 #ifdef CONFIG_PLATFORM_MT53XX
3164                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
3165 #else
3166                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
3167 #endif
3168
3169                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
3170                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
3171                 authmode = Ndis802_11AuthModeShared;
3172                 padapter->securitypriv.ndisauthtype = authmode;
3173         } else {
3174                 RTW_INFO("rtw_wx_set_enc():erq->flags=0x%x\n", erq->flags);
3175
3176                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
3177                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
3178                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3179                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
3180                 authmode = Ndis802_11AuthModeOpen;
3181                 padapter->securitypriv.ndisauthtype = authmode;
3182         }
3183
3184         wep.KeyIndex = key;
3185         if (erq->length > 0) {
3186                 wep.KeyLength = erq->length <= 5 ? 5 : 13;
3187
3188                 wep.Length = wep.KeyLength + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
3189         } else {
3190                 wep.KeyLength = 0 ;
3191
3192                 if (keyindex_provided == 1) { /* set key_id only, no given KeyMaterial(erq->length==0). */
3193                         padapter->securitypriv.dot11PrivacyKeyIndex = key;
3194
3195                         RTW_INFO("(keyindex_provided == 1), keyid=%d, key_len=%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
3196
3197                         switch (padapter->securitypriv.dot11DefKeylen[key]) {
3198                         case 5:
3199                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
3200                                 break;
3201                         case 13:
3202                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
3203                                 break;
3204                         default:
3205                                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3206                                 break;
3207                         }
3208
3209                         goto exit;
3210
3211                 }
3212
3213         }
3214
3215         wep.KeyIndex |= 0x80000000;
3216
3217         _rtw_memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
3218
3219         if (rtw_set_802_11_add_wep(padapter, &wep) == _FALSE) {
3220                 if (rf_on == pwrpriv->rf_pwrstate)
3221                         ret = -EOPNOTSUPP;
3222                 goto exit;
3223         }
3224
3225 exit:
3226
3227
3228         return ret;
3229
3230 }
3231
3232 static int rtw_wx_get_enc(struct net_device *dev,
3233                           struct iw_request_info *info,
3234                           union iwreq_data *wrqu, char *keybuf)
3235 {
3236         uint key, ret = 0;
3237         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3238         struct iw_point *erq = &(wrqu->encoding);
3239         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
3240
3241
3242         if (check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE) {
3243                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != _TRUE) {
3244                         erq->length = 0;
3245                         erq->flags |= IW_ENCODE_DISABLED;
3246                         return 0;
3247                 }
3248         }
3249
3250
3251         key = erq->flags & IW_ENCODE_INDEX;
3252
3253         if (key) {
3254                 if (key > WEP_KEYS)
3255                         return -EINVAL;
3256                 key--;
3257         } else
3258                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
3259
3260         erq->flags = key + 1;
3261
3262         /* if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen) */
3263         /* { */
3264         /* erq->flags |= IW_ENCODE_OPEN; */
3265         /* }      */
3266
3267         switch (padapter->securitypriv.ndisencryptstatus) {
3268         case Ndis802_11EncryptionNotSupported:
3269         case Ndis802_11EncryptionDisabled:
3270
3271                 erq->length = 0;
3272                 erq->flags |= IW_ENCODE_DISABLED;
3273
3274                 break;
3275
3276         case Ndis802_11Encryption1Enabled:
3277
3278                 erq->length = padapter->securitypriv.dot11DefKeylen[key];
3279
3280                 if (erq->length) {
3281                         _rtw_memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
3282
3283                         erq->flags |= IW_ENCODE_ENABLED;
3284
3285                         if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
3286                                 erq->flags |= IW_ENCODE_OPEN;
3287                         else if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
3288                                 erq->flags |= IW_ENCODE_RESTRICTED;
3289                 } else {
3290                         erq->length = 0;
3291                         erq->flags |= IW_ENCODE_DISABLED;
3292                 }
3293
3294                 break;
3295
3296         case Ndis802_11Encryption2Enabled:
3297         case Ndis802_11Encryption3Enabled:
3298
3299                 erq->length = 16;
3300                 erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
3301
3302                 break;
3303
3304         default:
3305                 erq->length = 0;
3306                 erq->flags |= IW_ENCODE_DISABLED;
3307
3308                 break;
3309
3310         }
3311
3312
3313         return ret;
3314
3315 }
3316
3317 static int rtw_wx_get_power(struct net_device *dev,
3318                             struct iw_request_info *info,
3319                             union iwreq_data *wrqu, char *extra)
3320 {
3321         /* _adapter *padapter = (_adapter *)rtw_netdev_priv(dev); */
3322
3323         wrqu->power.value = 0;
3324         wrqu->power.fixed = 0;  /* no auto select */
3325         wrqu->power.disabled = 1;
3326
3327         return 0;
3328
3329 }
3330
3331 static int rtw_wx_set_gen_ie(struct net_device *dev,
3332                              struct iw_request_info *info,
3333                              union iwreq_data *wrqu, char *extra)
3334 {
3335         int ret;
3336         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3337
3338         ret = rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
3339
3340         return ret;
3341 }
3342
3343 static int rtw_wx_set_auth(struct net_device *dev,
3344                            struct iw_request_info *info,
3345                            union iwreq_data *wrqu, char *extra)
3346 {
3347         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3348         struct iw_param *param = (struct iw_param *)&(wrqu->param);
3349         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
3350         struct security_priv *psecuritypriv = &padapter->securitypriv;
3351         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
3352         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
3353         u32 value = param->value;
3354         int ret = 0;
3355
3356         switch (param->flags & IW_AUTH_INDEX) {
3357
3358         case IW_AUTH_WPA_VERSION:
3359 #ifdef CONFIG_WAPI_SUPPORT
3360 #ifndef CONFIG_IOCTL_CFG80211
3361                 padapter->wapiInfo.bWapiEnable = false;
3362                 if (value == IW_AUTH_WAPI_VERSION_1) {
3363                         padapter->wapiInfo.bWapiEnable = true;
3364                         psecuritypriv->dot11PrivacyAlgrthm = _SMS4_;
3365                         psecuritypriv->dot118021XGrpPrivacy = _SMS4_;
3366                         psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_WAPI;
3367                         pmlmeinfo->auth_algo = psecuritypriv->dot11AuthAlgrthm;
3368                         padapter->wapiInfo.extra_prefix_len = WAPI_EXT_LEN;
3369                         padapter->wapiInfo.extra_postfix_len = SMS4_MIC_LEN;
3370                 }
3371 #endif
3372 #endif
3373                 break;
3374         case IW_AUTH_CIPHER_PAIRWISE:
3375
3376                 break;
3377         case IW_AUTH_CIPHER_GROUP:
3378
3379                 break;
3380         case IW_AUTH_KEY_MGMT:
3381 #ifdef CONFIG_WAPI_SUPPORT
3382 #ifndef CONFIG_IOCTL_CFG80211
3383                 RTW_INFO("rtw_wx_set_auth: IW_AUTH_KEY_MGMT case\n");
3384                 if (value == IW_AUTH_KEY_MGMT_WAPI_PSK)
3385                         padapter->wapiInfo.bWapiPSK = true;
3386                 else
3387                         padapter->wapiInfo.bWapiPSK = false;
3388                 RTW_INFO("rtw_wx_set_auth: IW_AUTH_KEY_MGMT bwapipsk %d\n", padapter->wapiInfo.bWapiPSK);
3389 #endif
3390 #endif
3391                 /*
3392                  *  ??? does not use these parameters
3393                  */
3394                 break;
3395
3396         case IW_AUTH_TKIP_COUNTERMEASURES: {
3397                 if (param->value) {
3398                         /* wpa_supplicant is enabling the tkip countermeasure. */
3399                         padapter->securitypriv.btkip_countermeasure = _TRUE;
3400                 } else {
3401                         /* wpa_supplicant is disabling the tkip countermeasure. */
3402                         padapter->securitypriv.btkip_countermeasure = _FALSE;
3403                 }
3404                 break;
3405         }
3406         case IW_AUTH_DROP_UNENCRYPTED: {
3407                 /* HACK:
3408                  *
3409                  * wpa_supplicant calls set_wpa_enabled when the driver
3410                  * is loaded and unloaded, regardless of if WPA is being
3411                  * used.  No other calls are made which can be used to
3412                  * determine if encryption will be used or not prior to
3413                  * association being expected.  If encryption is not being
3414                  * used, drop_unencrypted is set to false, else true -- we
3415                  * can use this to determine if the CAP_PRIVACY_ON bit should
3416                  * be set.
3417                  */
3418
3419                 if (padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled) {
3420                         break;/* it means init value, or using wep, ndisencryptstatus = Ndis802_11Encryption1Enabled, */
3421                         /* then it needn't reset it; */
3422                 }
3423
3424                 if (param->value) {
3425                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
3426                         padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3427                         padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
3428                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
3429                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
3430                 }
3431
3432                 break;
3433         }
3434
3435         case IW_AUTH_80211_AUTH_ALG:
3436
3437 #if defined(CONFIG_ANDROID) || 1
3438                 /*
3439                  *  It's the starting point of a link layer connection using wpa_supplicant
3440                 */
3441                 if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
3442                         LeaveAllPowerSaveMode(padapter);
3443                         rtw_disassoc_cmd(padapter, 500, _FALSE);
3444                         RTW_INFO("%s...call rtw_indicate_disconnect\n ", __FUNCTION__);
3445                         rtw_indicate_disconnect(padapter, 0, _FALSE);
3446                         rtw_free_assoc_resources(padapter, 1);
3447                 }
3448 #endif
3449
3450
3451                 ret = wpa_set_auth_algs(dev, (u32)param->value);
3452
3453                 break;
3454
3455         case IW_AUTH_WPA_ENABLED:
3456
3457                 /* if(param->value) */
3458                 /* padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; */ /* 802.1x */
3459                 /* else */
3460                 /* padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; */ /* open system */
3461
3462                 /* _disassociate(priv); */
3463
3464                 break;
3465
3466         case IW_AUTH_RX_UNENCRYPTED_EAPOL:
3467                 /* ieee->ieee802_1x = param->value; */
3468                 break;
3469
3470         case IW_AUTH_PRIVACY_INVOKED:
3471                 /* ieee->privacy_invoked = param->value; */
3472                 break;
3473
3474 #ifdef CONFIG_WAPI_SUPPORT
3475 #ifndef CONFIG_IOCTL_CFG80211
3476         case IW_AUTH_WAPI_ENABLED:
3477                 break;
3478 #endif
3479 #endif
3480
3481         default:
3482                 return -EOPNOTSUPP;
3483
3484         }
3485
3486         return ret;
3487
3488 }
3489
3490 static int rtw_wx_set_enc_ext(struct net_device *dev,
3491                               struct iw_request_info *info,
3492                               union iwreq_data *wrqu, char *extra)
3493 {
3494         char *alg_name;
3495         u32 param_len;
3496         struct ieee_param *param = NULL;
3497         struct iw_point *pencoding = &wrqu->encoding;
3498         struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
3499         int ret = 0;
3500
3501         param_len = sizeof(struct ieee_param) + pext->key_len;
3502         param = (struct ieee_param *)rtw_malloc(param_len);
3503         if (param == NULL)
3504                 return -1;
3505
3506         _rtw_memset(param, 0, param_len);
3507
3508         param->cmd = IEEE_CMD_SET_ENCRYPTION;
3509         _rtw_memset(param->sta_addr, 0xff, ETH_ALEN);
3510
3511
3512         switch (pext->alg) {
3513         case IW_ENCODE_ALG_NONE:
3514                 /* todo: remove key */
3515                 /* remove = 1;   */
3516                 alg_name = "none";
3517                 break;
3518         case IW_ENCODE_ALG_WEP:
3519                 alg_name = "WEP";
3520                 break;
3521         case IW_ENCODE_ALG_TKIP:
3522                 alg_name = "TKIP";
3523                 break;
3524         case IW_ENCODE_ALG_CCMP:
3525                 alg_name = "CCMP";
3526                 break;
3527 #ifdef CONFIG_IEEE80211W
3528         case IW_ENCODE_ALG_AES_CMAC:
3529                 alg_name = "BIP";
3530                 break;
3531 #endif /* CONFIG_IEEE80211W */
3532 #ifdef CONFIG_WAPI_SUPPORT
3533 #ifndef CONFIG_IOCTL_CFG80211
3534         case IW_ENCODE_ALG_SM4:
3535                 alg_name = "SMS4";
3536                 _rtw_memcpy(param->sta_addr, pext->addr.sa_data, ETH_ALEN);
3537                 RTW_INFO("rtw_wx_set_enc_ext: SMS4 case\n");
3538                 break;
3539 #endif
3540 #endif
3541         default:
3542                 ret = -1;
3543                 goto exit;
3544         }
3545
3546         strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
3547
3548         if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
3549                 param->u.crypt.set_tx = 1;
3550
3551         /* cliW: WEP does not have group key
3552          * just not checking GROUP key setting
3553          */
3554         if ((pext->alg != IW_ENCODE_ALG_WEP) &&
3555             ((pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
3556 #ifdef CONFIG_IEEE80211W
3557              || (pext->ext_flags & IW_ENCODE_ALG_AES_CMAC)
3558 #endif /* CONFIG_IEEE80211W */
3559             ))
3560                 param->u.crypt.set_tx = 0;
3561
3562         param->u.crypt.idx = (pencoding->flags & 0x00FF) - 1 ;
3563
3564         if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID) {
3565 #ifdef CONFIG_WAPI_SUPPORT
3566 #ifndef CONFIG_IOCTL_CFG80211
3567                 if (pext->alg == IW_ENCODE_ALG_SM4)
3568                         _rtw_memcpy(param->u.crypt.seq, pext->rx_seq, 16);
3569                 else
3570 #endif /* CONFIG_IOCTL_CFG80211 */
3571 #endif /* CONFIG_WAPI_SUPPORT */
3572                         _rtw_memcpy(param->u.crypt.seq, pext->rx_seq, 8);
3573         }
3574
3575         if (pext->key_len) {
3576                 param->u.crypt.key_len = pext->key_len;
3577                 /* _rtw_memcpy(param + 1, pext + 1, pext->key_len); */
3578                 _rtw_memcpy(param->u.crypt.key, pext + 1, pext->key_len);
3579         }
3580
3581         if (pencoding->flags & IW_ENCODE_DISABLED) {
3582                 /* todo: remove key */
3583                 /* remove = 1; */
3584         }
3585
3586         ret =  wpa_set_encryption(dev, param, param_len);
3587
3588 exit:
3589         if (param)
3590                 rtw_mfree((u8 *)param, param_len);
3591
3592         return ret;
3593 }
3594
3595
3596 static int rtw_wx_get_nick(struct net_device *dev,
3597                            struct iw_request_info *info,
3598                            union iwreq_data *wrqu, char *extra)
3599 {
3600         /* _adapter *padapter = (_adapter *)rtw_netdev_priv(dev); */
3601         /* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
3602         /* struct security_priv *psecuritypriv = &padapter->securitypriv; */
3603
3604         if (extra) {
3605                 wrqu->data.length = 14;
3606                 wrqu->data.flags = 1;
3607                 _rtw_memcpy(extra, "<WIFI@REALTEK>", 14);
3608         }
3609
3610         /* rtw_signal_process(pid, SIGUSR1); */ /* for test */
3611
3612         /* dump debug info here  */
3613 #if 0
3614         u32 dot11AuthAlgrthm;           /*  802.11 auth, could be open, shared, and 8021x */
3615         u32 dot11PrivacyAlgrthm;        /*  This specify the privacy for shared auth. algorithm. */
3616         u32 dot118021XGrpPrivacy;       /*  This specify the privacy algthm. used for Grp key */
3617         u32 ndisauthtype;
3618         u32 ndisencryptstatus;
3619 #endif
3620
3621         /* RTW_INFO("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",  */
3622         /*              psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm, */
3623         /*              psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus); */
3624
3625         /* RTW_INFO("enc_alg=0x%x\n", psecuritypriv->dot11PrivacyAlgrthm); */
3626         /* RTW_INFO("auth_type=0x%x\n", psecuritypriv->ndisauthtype); */
3627         /* RTW_INFO("enc_type=0x%x\n", psecuritypriv->ndisencryptstatus); */
3628
3629 #if 0
3630         RTW_INFO("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
3631         RTW_INFO("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
3632         RTW_INFO("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
3633         RTW_INFO("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
3634         RTW_INFO("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
3635
3636         RTW_INFO("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
3637
3638
3639         RTW_INFO("\n");
3640
3641         RTW_INFO("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
3642         RTW_INFO("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
3643
3644         RTW_INFO("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
3645
3646         RTW_INFO("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
3647
3648         RTW_INFO("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
3649         RTW_INFO("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
3650
3651         RTW_INFO("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
3652         RTW_INFO("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
3653         RTW_INFO("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
3654         RTW_INFO("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
3655 #endif
3656
3657         return 0;
3658
3659 }
3660
3661 static int rtw_wx_read32(struct net_device *dev,
3662                          struct iw_request_info *info,
3663                          union iwreq_data *wrqu, char *extra)
3664 {
3665         PADAPTER padapter;
3666         struct iw_point *p;
3667         u16 len;
3668         u32 addr;
3669         u32 data32;
3670         u32 bytes;
3671         u8 *ptmp;
3672         int ret;
3673
3674
3675         ret = 0;
3676         padapter = (PADAPTER)rtw_netdev_priv(dev);
3677         p = &wrqu->data;
3678         len = p->length;
3679         if (0 == len)
3680                 return -EINVAL;
3681
3682         ptmp = (u8 *)rtw_malloc(len);
3683         if (NULL == ptmp)
3684                 return -ENOMEM;
3685
3686         if (copy_from_user(ptmp, p->pointer, len)) {
3687                 ret = -EFAULT;
3688                 goto exit;
3689         }
3690
3691         bytes = 0;
3692         addr = 0;
3693         sscanf(ptmp, "%d,%x", &bytes, &addr);
3694
3695         switch (bytes) {
3696         case 1:
3697                 data32 = rtw_read8(padapter, addr);
3698                 sprintf(extra, "0x%02X", data32);
3699                 break;
3700         case 2:
3701                 data32 = rtw_read16(padapter, addr);
3702                 sprintf(extra, "0x%04X", data32);
3703                 break;
3704         case 4:
3705                 data32 = rtw_read32(padapter, addr);
3706                 sprintf(extra, "0x%08X", data32);
3707                 break;
3708
3709         #if defined(CONFIG_SDIO_HCI) && defined(CONFIG_SDIO_INDIRECT_ACCESS) && defined(DBG_SDIO_INDIRECT_ACCESS)
3710         case 11:
3711                 data32 = rtw_sd_iread8(padapter, addr);
3712                 sprintf(extra, "0x%02X", data32);
3713                 break;
3714         case 12:
3715                 data32 = rtw_sd_iread16(padapter, addr);
3716                 sprintf(extra, "0x%04X", data32);
3717                 break;
3718         case 14:
3719                 data32 = rtw_sd_iread32(padapter, addr);
3720                 sprintf(extra, "0x%08X", data32);
3721                 break;
3722         #endif
3723         default:
3724                 RTW_INFO("%s: usage> read [bytes],[address(hex)]\n", __func__);
3725                 ret = -EINVAL;
3726                 goto exit;
3727         }
3728         RTW_INFO("%s: addr=0x%08X data=%s\n", __func__, addr, extra);
3729
3730 exit:
3731         rtw_mfree(ptmp, len);
3732
3733         return 0;
3734 }
3735
3736 static int rtw_wx_write32(struct net_device *dev,
3737                           struct iw_request_info *info,
3738                           union iwreq_data *wrqu, char *extra)
3739 {
3740         PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
3741
3742         u32 addr;
3743         u32 data32;
3744         u32 bytes;
3745
3746
3747         bytes = 0;
3748         addr = 0;
3749         data32 = 0;
3750         sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
3751
3752         switch (bytes) {
3753         case 1:
3754                 rtw_write8(padapter, addr, (u8)data32);
3755                 RTW_INFO("%s: addr=0x%08X data=0x%02X\n", __func__, addr, (u8)data32);
3756                 break;
3757         case 2:
3758                 rtw_write16(padapter, addr, (u16)data32);
3759                 RTW_INFO("%s: addr=0x%08X data=0x%04X\n", __func__, addr, (u16)data32);
3760                 break;
3761         case 4:
3762                 rtw_write32(padapter, addr, data32);
3763                 RTW_INFO("%s: addr=0x%08X data=0x%08X\n", __func__, addr, data32);
3764                 break;
3765         default:
3766                 RTW_INFO("%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
3767                 return -EINVAL;
3768         }
3769
3770         return 0;
3771 }
3772
3773 static int rtw_wx_read_rf(struct net_device *dev,
3774                           struct iw_request_info *info,
3775                           union iwreq_data *wrqu, char *extra)
3776 {
3777         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3778         u32 path, addr, data32;
3779
3780
3781         path = *(u32 *)extra;
3782         addr = *((u32 *)extra + 1);
3783         data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
3784         /*      RTW_INFO("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32); */
3785         /*
3786          * IMPORTANT!!
3787          * Only when wireless private ioctl is at odd order,
3788          * "extra" would be copied to user space.
3789          */
3790         sprintf(extra, "0x%05x", data32);
3791
3792         return 0;
3793 }
3794
3795 static int rtw_wx_write_rf(struct net_device *dev,
3796                            struct iw_request_info *info,
3797                            union iwreq_data *wrqu, char *extra)
3798 {
3799         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3800         u32 path, addr, data32;
3801
3802
3803         path = *(u32 *)extra;
3804         addr = *((u32 *)extra + 1);
3805         data32 = *((u32 *)extra + 2);
3806         /*      RTW_INFO("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32); */
3807         rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
3808
3809         return 0;
3810 }
3811
3812 static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
3813                             union iwreq_data *wrqu, char *b)
3814 {
3815         return -1;
3816 }
3817
3818 static int dummy(struct net_device *dev, struct iw_request_info *a,
3819                  union iwreq_data *wrqu, char *b)
3820 {
3821         /* _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);        */
3822         /* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
3823
3824         /* RTW_INFO("cmd_code=%x, fwstate=0x%x\n", a->cmd, get_fwstate(pmlmepriv)); */
3825
3826         return -1;
3827
3828 }
3829
3830 static int rtw_wx_set_channel_plan(struct net_device *dev,
3831                                    struct iw_request_info *info,
3832                                    union iwreq_data *wrqu, char *extra)
3833 {
3834         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3835         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3836         u8 channel_plan_req = (u8)(*((int *)wrqu));
3837
3838         if (_SUCCESS != rtw_set_channel_plan(padapter, channel_plan_req))
3839                 return -EPERM;
3840
3841         return 0;
3842 }
3843
3844 static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
3845                                        struct iw_request_info *a,
3846                                        union iwreq_data *wrqu, char *b)
3847 {
3848 #ifdef CONFIG_PLATFORM_MT53XX
3849         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3850         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3851
3852 #endif
3853         return 0;
3854 }
3855
3856 static int rtw_wx_get_sensitivity(struct net_device *dev,
3857                                   struct iw_request_info *info,
3858                                   union iwreq_data *wrqu, char *buf)
3859 {
3860 #ifdef CONFIG_PLATFORM_MT53XX
3861         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3862
3863         /*      Modified by Albert 20110914 */
3864         /*      This is in dbm format for MTK platform. */
3865         wrqu->qual.level = padapter->recvpriv.rssi;
3866         RTW_INFO(" level = %u\n",  wrqu->qual.level);
3867 #endif
3868         return 0;
3869 }
3870
3871 static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
3872                                  struct iw_request_info *info,
3873                                  union iwreq_data *wrqu, char *extra)
3874 {
3875 #ifdef CONFIG_PLATFORM_MT53XX
3876         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3877
3878         return rtw_set_wpa_ie(padapter, wrqu->data.pointer, wrqu->data.length);
3879 #else
3880         return 0;
3881 #endif
3882 }
3883
3884 /*
3885 typedef int (*iw_handler)(struct net_device *dev, struct iw_request_info *info,
3886                           union iwreq_data *wrqu, char *extra);
3887 */
3888 /*
3889  *      For all data larger than 16 octets, we need to use a
3890  *      pointer to memory allocated in user space.
3891  */
3892 static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
3893                            union iwreq_data *wrqu, char *extra)
3894 {
3895
3896 #if 0
3897         struct  iw_point {
3898                 void __user     *pointer;       /* Pointer to the data  (in user space) */
3899                 __u16           length;         /* number of fields or size in bytes */
3900                 __u16           flags;          /* Optional params */
3901         };
3902 #endif
3903
3904 #ifdef CONFIG_DRVEXT_MODULE
3905         u8 res;
3906         struct drvext_handler *phandler;
3907         struct drvext_oidparam *poidparam;
3908         int ret;
3909         u16 len;
3910         u8 *pparmbuf, bset;
3911         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3912         struct iw_point *p = &wrqu->data;
3913
3914         if ((!p->length) || (!p->pointer)) {
3915                 ret = -EINVAL;
3916                 goto _rtw_drvext_hdl_exit;
3917         }
3918
3919
3920         bset = (u8)(p->flags & 0xFFFF);
3921         len = p->length;
3922         pparmbuf = (u8 *)rtw_malloc(len);
3923         if (pparmbuf == NULL) {
3924                 ret = -ENOMEM;
3925                 goto _rtw_drvext_hdl_exit;
3926         }
3927
3928         if (bset) { /* set info */
3929                 if (copy_from_user(pparmbuf, p->pointer, len)) {
3930                         rtw_mfree(pparmbuf, len);
3931                         ret = -EFAULT;
3932                         goto _rtw_drvext_hdl_exit;
3933                 }
3934         } else { /* query info */
3935
3936         }
3937
3938
3939         /*  */
3940         poidparam = (struct drvext_oidparam *)pparmbuf;
3941
3942
3943
3944         /* check subcode         */
3945         if (poidparam->subcode >= MAX_DRVEXT_HANDLERS) {
3946                 ret = -EINVAL;
3947                 goto _rtw_drvext_hdl_exit;
3948         }
3949
3950
3951         if (poidparam->subcode >= MAX_DRVEXT_OID_SUBCODES) {
3952                 ret = -EINVAL;
3953                 goto _rtw_drvext_hdl_exit;
3954         }
3955
3956
3957         phandler = drvextoidhandlers + poidparam->subcode;
3958
3959         if (poidparam->len != phandler->parmsize) {
3960                 ret = -EINVAL;
3961                 goto _rtw_drvext_hdl_exit;
3962         }
3963
3964
3965         res = phandler->handler(&padapter->drvextpriv, bset, poidparam->data);
3966
3967         if (res == 0) {
3968                 ret = 0;
3969
3970                 if (bset == 0x00) {/* query info */
3971                         /* _rtw_memcpy(p->pointer, pparmbuf, len); */
3972                         if (copy_to_user(p->pointer, pparmbuf, len))
3973                                 ret = -EFAULT;
3974                 }
3975         } else
3976                 ret = -EFAULT;
3977
3978
3979 _rtw_drvext_hdl_exit:
3980
3981         return ret;
3982
3983 #endif
3984
3985         return 0;
3986
3987 }
3988
3989 static void rtw_dbg_mode_hdl(_adapter *padapter, u32 id, u8 *pdata, u32 len)
3990 {
3991         pRW_Reg RegRWStruct;
3992         struct rf_reg_param *prfreg;
3993         u8 path;
3994         u8 offset;
3995         u32 value;
3996
3997         RTW_INFO("%s\n", __FUNCTION__);
3998
3999         switch (id) {
4000         case GEN_MP_IOCTL_SUBCODE(MP_START):
4001                 RTW_INFO("871x_driver is only for normal mode, can't enter mp mode\n");
4002                 break;
4003         case GEN_MP_IOCTL_SUBCODE(READ_REG):
4004                 RegRWStruct = (pRW_Reg)pdata;
4005                 switch (RegRWStruct->width) {
4006                 case 1:
4007                         RegRWStruct->value = rtw_read8(padapter, RegRWStruct->offset);
4008                         break;
4009                 case 2:
4010                         RegRWStruct->value = rtw_read16(padapter, RegRWStruct->offset);
4011                         break;
4012                 case 4:
4013                         RegRWStruct->value = rtw_read32(padapter, RegRWStruct->offset);
4014                         break;
4015                 default:
4016                         break;
4017                 }
4018
4019                 break;
4020         case GEN_MP_IOCTL_SUBCODE(WRITE_REG):
4021                 RegRWStruct = (pRW_Reg)pdata;
4022                 switch (RegRWStruct->width) {
4023                 case 1:
4024                         rtw_write8(padapter, RegRWStruct->offset, (u8)RegRWStruct->value);
4025                         break;
4026                 case 2:
4027                         rtw_write16(padapter, RegRWStruct->offset, (u16)RegRWStruct->value);
4028                         break;
4029                 case 4:
4030                         rtw_write32(padapter, RegRWStruct->offset, (u32)RegRWStruct->value);
4031                         break;
4032                 default:
4033                         break;
4034                 }
4035
4036                 break;
4037         case GEN_MP_IOCTL_SUBCODE(READ_RF_REG):
4038
4039                 prfreg = (struct rf_reg_param *)pdata;
4040
4041                 path = (u8)prfreg->path;
4042                 offset = (u8)prfreg->offset;
4043
4044                 value = rtw_hal_read_rfreg(padapter, path, offset, 0xffffffff);
4045
4046                 prfreg->value = value;
4047
4048                 break;
4049         case GEN_MP_IOCTL_SUBCODE(WRITE_RF_REG):
4050
4051                 prfreg = (struct rf_reg_param *)pdata;
4052
4053                 path = (u8)prfreg->path;
4054                 offset = (u8)prfreg->offset;
4055                 value = prfreg->value;
4056
4057                 rtw_hal_write_rfreg(padapter, path, offset, 0xffffffff, value);
4058
4059                 break;
4060         case GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO):
4061                 RTW_INFO("==> trigger gpio 0\n");
4062                 rtw_hal_set_hwreg(padapter, HW_VAR_TRIGGER_GPIO_0, 0);
4063                 break;
4064 #ifdef CONFIG_BT_COEXIST
4065         case GEN_MP_IOCTL_SUBCODE(SET_DM_BT):
4066                 RTW_INFO("==> set dm_bt_coexist:%x\n", *(u8 *)pdata);
4067                 rtw_hal_set_hwreg(padapter, HW_VAR_BT_SET_COEXIST, pdata);
4068                 break;
4069         case GEN_MP_IOCTL_SUBCODE(DEL_BA):
4070                 RTW_INFO("==> delete ba:%x\n", *(u8 *)pdata);
4071                 rtw_hal_set_hwreg(padapter, HW_VAR_BT_ISSUE_DELBA, pdata);
4072                 break;
4073 #endif
4074 #ifdef DBG_CONFIG_ERROR_DETECT
4075         case GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS):
4076                 *pdata = rtw_hal_sreset_get_wifi_status(padapter);
4077                 break;
4078 #endif
4079
4080         default:
4081                 break;
4082         }
4083
4084 }
4085 #ifdef MP_IOCTL_HDL
4086 static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
4087                             union iwreq_data *wrqu, char *extra)
4088 {
4089         int ret = 0;
4090         u32 BytesRead, BytesWritten, BytesNeeded;
4091         struct oid_par_priv     oid_par;
4092         struct mp_ioctl_handler *phandler;
4093         struct mp_ioctl_param   *poidparam;
4094         uint status = 0;
4095         u16 len;
4096         u8 *pparmbuf = NULL, bset;
4097         PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
4098         struct iw_point *p = &wrqu->data;
4099
4100         /* RTW_INFO("+rtw_mp_ioctl_hdl\n"); */
4101
4102         /* mutex_lock(&ioctl_mutex); */
4103
4104         if ((!p->length) || (!p->pointer)) {
4105                 ret = -EINVAL;
4106                 goto _rtw_mp_ioctl_hdl_exit;
4107         }
4108
4109         pparmbuf = NULL;
4110         bset = (u8)(p->flags & 0xFFFF);
4111         len = p->length;
4112         pparmbuf = (u8 *)rtw_malloc(len);
4113         if (pparmbuf == NULL) {
4114                 ret = -ENOMEM;
4115                 goto _rtw_mp_ioctl_hdl_exit;
4116         }
4117
4118         if (copy_from_user(pparmbuf, p->pointer, len)) {
4119                 ret = -EFAULT;
4120                 goto _rtw_mp_ioctl_hdl_exit;
4121         }
4122
4123         poidparam = (struct mp_ioctl_param *)pparmbuf;
4124
4125         if (poidparam->subcode >= MAX_MP_IOCTL_SUBCODE) {
4126                 ret = -EINVAL;
4127                 goto _rtw_mp_ioctl_hdl_exit;
4128         }
4129
4130         /* RTW_INFO("%s: %d\n", __func__, poidparam->subcode); */
4131 #ifdef CONFIG_MP_INCLUDED
4132         if (padapter->registrypriv.mp_mode == 1) {
4133                 phandler = mp_ioctl_hdl + poidparam->subcode;
4134
4135                 if ((phandler->paramsize != 0) && (poidparam->len < phandler->paramsize)) {
4136                         ret = -EINVAL;
4137                         goto _rtw_mp_ioctl_hdl_exit;
4138                 }
4139
4140                 if (phandler->handler) {
4141                         oid_par.adapter_context = padapter;
4142                         oid_par.oid = phandler->oid;
4143                         oid_par.information_buf = poidparam->data;
4144                         oid_par.information_buf_len = poidparam->len;
4145                         oid_par.dbg = 0;
4146
4147                         BytesWritten = 0;
4148                         BytesNeeded = 0;
4149
4150                         if (bset) {
4151                                 oid_par.bytes_rw = &BytesRead;
4152                                 oid_par.bytes_needed = &BytesNeeded;
4153                                 oid_par.type_of_oid = SET_OID;
4154                         } else {
4155                                 oid_par.bytes_rw = &BytesWritten;
4156                                 oid_par.bytes_needed = &BytesNeeded;
4157                                 oid_par.type_of_oid = QUERY_OID;
4158                         }
4159
4160                         status = phandler->handler(&oid_par);
4161
4162                         /* todo:check status, BytesNeeded, etc. */
4163                 } else {
4164                         RTW_INFO("rtw_mp_ioctl_hdl(): err!, subcode=%d, oid=%d, handler=%p\n",
4165                                 poidparam->subcode, phandler->oid, phandler->handler);
4166                         ret = -EFAULT;
4167                         goto _rtw_mp_ioctl_hdl_exit;
4168                 }
4169         } else
4170 #endif
4171         {
4172                 rtw_dbg_mode_hdl(padapter, poidparam->subcode, poidparam->data, poidparam->len);
4173         }
4174
4175         if (bset == 0x00) {/* query info */
4176                 if (copy_to_user(p->pointer, pparmbuf, len))
4177                         ret = -EFAULT;
4178         }
4179
4180         if (status) {
4181                 ret = -EFAULT;
4182                 goto _rtw_mp_ioctl_hdl_exit;
4183         }
4184
4185 _rtw_mp_ioctl_hdl_exit:
4186
4187         if (pparmbuf)
4188                 rtw_mfree(pparmbuf, len);
4189
4190         /* mutex_unlock(&ioctl_mutex); */
4191
4192         return ret;
4193 }
4194 #endif
4195 static int rtw_get_ap_info(struct net_device *dev,
4196                            struct iw_request_info *info,
4197                            union iwreq_data *wrqu, char *extra)
4198 {
4199         int bssid_match, ret = 0;
4200         u32 cnt = 0, wpa_ielen;
4201         _irqL   irqL;
4202         _list   *plist, *phead;
4203         unsigned char *pbuf;
4204         u8 bssid[ETH_ALEN];
4205         char data[32];
4206         struct wlan_network *pnetwork = NULL;
4207         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4208         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4209         _queue *queue = &(pmlmepriv->scanned_queue);
4210         struct iw_point *pdata = &wrqu->data;
4211
4212         RTW_INFO("+rtw_get_aplist_info\n");
4213
4214         if (rtw_is_drv_stopped(padapter) || (pdata == NULL)) {
4215                 ret = -EINVAL;
4216                 goto exit;
4217         }
4218
4219         while ((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY | _FW_UNDER_LINKING))) == _TRUE) {
4220                 rtw_msleep_os(30);
4221                 cnt++;
4222                 if (cnt > 100)
4223                         break;
4224         }
4225
4226
4227         /* pdata->length = 0; */ /* ?    */
4228         pdata->flags = 0;
4229         if (pdata->length >= 32) {
4230                 if (copy_from_user(data, pdata->pointer, 32)) {
4231                         ret = -EINVAL;
4232                         goto exit;
4233                 }
4234         } else {
4235                 ret = -EINVAL;
4236                 goto exit;
4237         }
4238
4239         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4240
4241         phead = get_list_head(queue);
4242         plist = get_next(phead);
4243
4244         while (1) {
4245                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
4246                         break;
4247
4248
4249                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4250
4251                 /* if(hwaddr_aton_i(pdata->pointer, bssid)) */
4252                 if (hwaddr_aton_i(data, bssid)) {
4253                         RTW_INFO("Invalid BSSID '%s'.\n", (u8 *)data);
4254                         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4255                         return -EINVAL;
4256                 }
4257
4258
4259                 if (_rtw_memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE) { /* BSSID match, then check if supporting wpa/wpa2 */
4260                         RTW_INFO("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
4261
4262                         pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength - 12);
4263                         if (pbuf && (wpa_ielen > 0)) {
4264                                 pdata->flags = 1;
4265                                 break;
4266                         }
4267
4268                         pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength - 12);
4269                         if (pbuf && (wpa_ielen > 0)) {
4270                                 pdata->flags = 2;
4271                                 break;
4272                         }
4273
4274                 }
4275
4276                 plist = get_next(plist);
4277
4278         }
4279
4280         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4281
4282         if (pdata->length >= 34) {
4283                 if (copy_to_user((u8 *)pdata->pointer + 32, (u8 *)&pdata->flags, 1)) {
4284                         ret = -EINVAL;
4285                         goto exit;
4286                 }
4287         }
4288
4289 exit:
4290
4291         return ret;
4292
4293 }
4294
4295 static int rtw_set_pid(struct net_device *dev,
4296                        struct iw_request_info *info,
4297                        union iwreq_data *wrqu, char *extra)
4298 {
4299
4300         int ret = 0;
4301         _adapter *padapter = rtw_netdev_priv(dev);
4302         int *pdata = (int *)wrqu;
4303         int selector;
4304
4305         if (rtw_is_drv_stopped(padapter) || (pdata == NULL)) {
4306                 ret = -EINVAL;
4307                 goto exit;
4308         }
4309
4310         selector = *pdata;
4311         if (selector < 3 && selector >= 0) {
4312                 padapter->pid[selector] = *(pdata + 1);
4313 #ifdef CONFIG_GLOBAL_UI_PID
4314                 ui_pid[selector] = *(pdata + 1);
4315 #endif
4316                 RTW_INFO("%s set pid[%d]=%d\n", __FUNCTION__, selector , padapter->pid[selector]);
4317         } else
4318                 RTW_INFO("%s selector %d error\n", __FUNCTION__, selector);
4319
4320 exit:
4321
4322         return ret;
4323
4324 }
4325
4326 static int rtw_wps_start(struct net_device *dev,
4327                          struct iw_request_info *info,
4328                          union iwreq_data *wrqu, char *extra)
4329 {
4330
4331         int ret = 0;
4332         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4333         struct iw_point *pdata = &wrqu->data;
4334         u32   u32wps_start = 0;
4335         unsigned int uintRet = 0;
4336
4337         if (RTW_CANNOT_RUN(padapter) || (NULL == pdata)) {
4338                 ret = -EINVAL;
4339                 goto exit;
4340         }
4341
4342         uintRet = copy_from_user((void *) &u32wps_start, pdata->pointer, 4);
4343         if (u32wps_start == 0)
4344                 u32wps_start = *extra;
4345
4346         RTW_INFO("[%s] wps_start = %d\n", __FUNCTION__, u32wps_start);
4347
4348         if (u32wps_start == 1)   /* WPS Start */
4349                 rtw_led_control(padapter, LED_CTL_START_WPS);
4350         else if (u32wps_start == 2)   /* WPS Stop because of wps success */
4351                 rtw_led_control(padapter, LED_CTL_STOP_WPS);
4352         else if (u32wps_start == 3)   /* WPS Stop because of wps fail */
4353                 rtw_led_control(padapter, LED_CTL_STOP_WPS_FAIL);
4354
4355 #ifdef CONFIG_INTEL_WIDI
4356         process_intel_widi_wps_status(padapter, u32wps_start);
4357 #endif /* CONFIG_INTEL_WIDI */
4358
4359 exit:
4360
4361         return ret;
4362
4363 }
4364
4365 #ifdef CONFIG_P2P
4366 static int rtw_wext_p2p_enable(struct net_device *dev,
4367                                struct iw_request_info *info,
4368                                union iwreq_data *wrqu, char *extra)
4369 {
4370
4371         int ret = 0;
4372         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4373         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4374         struct iw_point *pdata = &wrqu->data;
4375         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4376         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
4377         enum P2P_ROLE init_role = P2P_ROLE_DISABLE;
4378
4379         if (*extra == '0')
4380                 init_role = P2P_ROLE_DISABLE;
4381         else if (*extra == '1')
4382                 init_role = P2P_ROLE_DEVICE;
4383         else if (*extra == '2')
4384                 init_role = P2P_ROLE_CLIENT;
4385         else if (*extra == '3')
4386                 init_role = P2P_ROLE_GO;
4387
4388         if (_FAIL == rtw_p2p_enable(padapter, init_role)) {
4389                 ret = -EFAULT;
4390                 goto exit;
4391         }
4392
4393         /* set channel/bandwidth */
4394         if (init_role != P2P_ROLE_DISABLE) {
4395                 u8 channel, ch_offset;
4396                 u16 bwmode;
4397
4398                 if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN)) {
4399                         /*      Stay at the listen state and wait for discovery. */
4400                         channel = pwdinfo->listen_channel;
4401                         pwdinfo->operating_channel = pwdinfo->listen_channel;
4402                         ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
4403                         bwmode = CHANNEL_WIDTH_20;
4404                 }
4405 #ifdef CONFIG_CONCURRENT_MODE
4406                 else if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE)) {
4407
4408                         _set_timer(&pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_interval);
4409
4410                         channel = rtw_mi_get_union_chan(padapter);
4411                         ch_offset = rtw_mi_get_union_offset(padapter);
4412                         bwmode = rtw_mi_get_union_bw(padapter);
4413
4414                         pwdinfo->operating_channel = channel;
4415                 }
4416 #endif
4417                 else {
4418                         pwdinfo->operating_channel = pmlmeext->cur_channel;
4419
4420                         channel = pwdinfo->operating_channel;
4421                         ch_offset = pmlmeext->cur_ch_offset;
4422                         bwmode = pmlmeext->cur_bwmode;
4423                 }
4424
4425                 set_channel_bwmode(padapter, channel, ch_offset, bwmode);
4426         }
4427
4428 exit:
4429         return ret;
4430
4431 }
4432
4433 static int rtw_p2p_set_go_nego_ssid(struct net_device *dev,
4434                                     struct iw_request_info *info,
4435                                     union iwreq_data *wrqu, char *extra)
4436 {
4437
4438         int ret = 0;
4439         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4440         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4441         struct iw_point *pdata = &wrqu->data;
4442         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4443
4444         RTW_INFO("[%s] ssid = %s, len = %zu\n", __FUNCTION__, extra, strlen(extra));
4445         _rtw_memcpy(pwdinfo->nego_ssid, extra, strlen(extra));
4446         pwdinfo->nego_ssidlen = strlen(extra);
4447
4448         return ret;
4449
4450 }
4451
4452
4453 static int rtw_p2p_set_intent(struct net_device *dev,
4454                               struct iw_request_info *info,
4455                               union iwreq_data *wrqu, char *extra)
4456 {
4457         int                                                     ret = 0;
4458         _adapter                                                *padapter = (_adapter *)rtw_netdev_priv(dev);
4459         struct wifidirect_info                  *pwdinfo = &(padapter->wdinfo);
4460         u8                                                      intent = pwdinfo->intent;
4461
4462         extra[wrqu->data.length] = 0x00;
4463
4464         intent = rtw_atoi(extra);
4465
4466         if (intent <= 15)
4467                 pwdinfo->intent = intent;
4468         else
4469                 ret = -1;
4470
4471         RTW_INFO("[%s] intent = %d\n", __FUNCTION__, intent);
4472
4473         return ret;
4474
4475 }
4476
4477 static int rtw_p2p_set_listen_ch(struct net_device *dev,
4478                                  struct iw_request_info *info,
4479                                  union iwreq_data *wrqu, char *extra)
4480 {
4481
4482         int ret = 0;
4483         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4484         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4485         u8      listen_ch = pwdinfo->listen_channel;    /*      Listen channel number */
4486
4487         extra[wrqu->data.length] = 0x00;
4488         listen_ch = rtw_atoi(extra);
4489
4490         if ((listen_ch == 1) || (listen_ch == 6) || (listen_ch == 11)) {
4491                 pwdinfo->listen_channel = listen_ch;
4492                 set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
4493         } else
4494                 ret = -1;
4495
4496         RTW_INFO("[%s] listen_ch = %d\n", __FUNCTION__, pwdinfo->listen_channel);
4497
4498         return ret;
4499
4500 }
4501
4502 static int rtw_p2p_set_op_ch(struct net_device *dev,
4503                              struct iw_request_info *info,
4504                              union iwreq_data *wrqu, char *extra)
4505 {
4506         /*      Commented by Albert 20110524
4507          *      This function is used to set the operating channel if the driver will become the group owner */
4508
4509         int ret = 0;
4510         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4511         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4512         u8      op_ch = pwdinfo->operating_channel;     /*      Operating channel number */
4513
4514         extra[wrqu->data.length] = 0x00;
4515
4516         op_ch = (u8) rtw_atoi(extra);
4517         if (op_ch > 0)
4518                 pwdinfo->operating_channel = op_ch;
4519         else
4520                 ret = -1;
4521
4522         RTW_INFO("[%s] op_ch = %d\n", __FUNCTION__, pwdinfo->operating_channel);
4523
4524         return ret;
4525
4526 }
4527
4528
4529 static int rtw_p2p_profilefound(struct net_device *dev,
4530                                 struct iw_request_info *info,
4531                                 union iwreq_data *wrqu, char *extra)
4532 {
4533
4534         int ret = 0;
4535         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4536         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4537
4538         /*      Comment by Albert 2010/10/13 */
4539         /*      Input data format: */
4540         /*      Ex:  0 */
4541         /*      Ex:  1XX:XX:XX:XX:XX:XXYYSSID */
4542         /*      0 => Reflush the profile record list. */
4543         /*      1 => Add the profile list */
4544         /*      XX:XX:XX:XX:XX:XX => peer's MAC Address ( ex: 00:E0:4C:00:00:01 ) */
4545         /*      YY => SSID Length */
4546         /*      SSID => SSID for persistence group */
4547
4548         RTW_INFO("[%s] In value = %s, len = %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
4549
4550
4551         /*      The upper application should pass the SSID to driver by using this rtw_p2p_profilefound function. */
4552         if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
4553                 if (extra[0] == '0') {
4554                         /*      Remove all the profile information of wifidirect_info structure. */
4555                         _rtw_memset(&pwdinfo->profileinfo[0], 0x00, sizeof(struct profile_info) * P2P_MAX_PERSISTENT_GROUP_NUM);
4556                         pwdinfo->profileindex = 0;
4557                 } else {
4558                         if (pwdinfo->profileindex >= P2P_MAX_PERSISTENT_GROUP_NUM)
4559                                 ret = -1;
4560                         else {
4561                                 int jj, kk;
4562
4563                                 /*      Add this profile information into pwdinfo->profileinfo */
4564                                 /*      Ex:  1XX:XX:XX:XX:XX:XXYYSSID */
4565                                 for (jj = 0, kk = 1; jj < ETH_ALEN; jj++, kk += 3)
4566                                         pwdinfo->profileinfo[pwdinfo->profileindex].peermac[jj] = key_2char2num(extra[kk], extra[kk + 1]);
4567
4568                                 /* pwdinfo->profileinfo[pwdinfo->profileindex].ssidlen = ( extra[18] - '0' ) * 10 + ( extra[19] - '0' ); */
4569                                 /* _rtw_memcpy( pwdinfo->profileinfo[pwdinfo->profileindex].ssid, &extra[20], pwdinfo->profileinfo[pwdinfo->profileindex].ssidlen ); */
4570                                 pwdinfo->profileindex++;
4571                         }
4572                 }
4573         }
4574
4575         return ret;
4576
4577 }
4578
4579 static int rtw_p2p_setDN(struct net_device *dev,
4580                          struct iw_request_info *info,
4581                          union iwreq_data *wrqu, char *extra)
4582 {
4583
4584         int ret = 0;
4585         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4586         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4587
4588
4589         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
4590         _rtw_memset(pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN);
4591         _rtw_memcpy(pwdinfo->device_name, extra, wrqu->data.length - 1);
4592         pwdinfo->device_name_len = wrqu->data.length - 1;
4593
4594         return ret;
4595
4596 }
4597
4598
4599 static int rtw_p2p_get_status(struct net_device *dev,
4600                               struct iw_request_info *info,
4601                               union iwreq_data *wrqu, char *extra)
4602 {
4603
4604         int ret = 0;
4605         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4606         struct iw_point *pdata = &wrqu->data;
4607         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4608
4609         if (padapter->bShowGetP2PState) {
4610                 RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4611                         pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
4612                         pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
4613         }
4614
4615         /*      Commented by Albert 2010/10/12 */
4616         /*      Because of the output size limitation, I had removed the "Role" information. */
4617         /*      About the "Role" information, we will use the new private IOCTL to get the "Role" information. */
4618         sprintf(extra, "\n\nStatus=%.2d\n", rtw_p2p_state(pwdinfo));
4619         wrqu->data.length = strlen(extra);
4620
4621         return ret;
4622
4623 }
4624
4625 /*      Commented by Albert 20110520
4626  *      This function will return the config method description
4627  *      This config method description will show us which config method the remote P2P device is intented to use
4628  *      by sending the provisioning discovery request frame. */
4629
4630 static int rtw_p2p_get_req_cm(struct net_device *dev,
4631                               struct iw_request_info *info,
4632                               union iwreq_data *wrqu, char *extra)
4633 {
4634
4635         int ret = 0;
4636         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4637         struct iw_point *pdata = &wrqu->data;
4638         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4639
4640         sprintf(extra, "\n\nCM=%s\n", pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req);
4641         wrqu->data.length = strlen(extra);
4642         return ret;
4643
4644 }
4645
4646
4647 static int rtw_p2p_get_role(struct net_device *dev,
4648                             struct iw_request_info *info,
4649                             union iwreq_data *wrqu, char *extra)
4650 {
4651
4652         int ret = 0;
4653         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4654         struct iw_point *pdata = &wrqu->data;
4655         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4656
4657
4658         RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4659                 pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
4660                 pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
4661
4662         sprintf(extra, "\n\nRole=%.2d\n", rtw_p2p_role(pwdinfo));
4663         wrqu->data.length = strlen(extra);
4664         return ret;
4665
4666 }
4667
4668
4669 static int rtw_p2p_get_peer_ifaddr(struct net_device *dev,
4670                                    struct iw_request_info *info,
4671                                    union iwreq_data *wrqu, char *extra)
4672 {
4673
4674         int ret = 0;
4675         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4676         struct iw_point *pdata = &wrqu->data;
4677         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4678
4679
4680         RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4681                 pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
4682                 pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
4683
4684         sprintf(extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
4685                 pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
4686                 pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
4687         wrqu->data.length = strlen(extra);
4688         return ret;
4689
4690 }
4691
4692 static int rtw_p2p_get_peer_devaddr(struct net_device *dev,
4693                                     struct iw_request_info *info,
4694                                     union iwreq_data *wrqu, char *extra)
4695
4696 {
4697
4698         int ret = 0;
4699         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4700         struct iw_point *pdata = &wrqu->data;
4701         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4702
4703         RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4704                 pwdinfo->rx_prov_disc_info.peerDevAddr[0], pwdinfo->rx_prov_disc_info.peerDevAddr[1],
4705                 pwdinfo->rx_prov_disc_info.peerDevAddr[2], pwdinfo->rx_prov_disc_info.peerDevAddr[3],
4706                 pwdinfo->rx_prov_disc_info.peerDevAddr[4], pwdinfo->rx_prov_disc_info.peerDevAddr[5]);
4707         sprintf(extra, "\n%.2X%.2X%.2X%.2X%.2X%.2X",
4708                 pwdinfo->rx_prov_disc_info.peerDevAddr[0], pwdinfo->rx_prov_disc_info.peerDevAddr[1],
4709                 pwdinfo->rx_prov_disc_info.peerDevAddr[2], pwdinfo->rx_prov_disc_info.peerDevAddr[3],
4710                 pwdinfo->rx_prov_disc_info.peerDevAddr[4], pwdinfo->rx_prov_disc_info.peerDevAddr[5]);
4711         wrqu->data.length = strlen(extra);
4712         return ret;
4713
4714 }
4715
4716 static int rtw_p2p_get_peer_devaddr_by_invitation(struct net_device *dev,
4717                 struct iw_request_info *info,
4718                 union iwreq_data *wrqu, char *extra)
4719
4720 {
4721
4722         int ret = 0;
4723         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4724         struct iw_point *pdata = &wrqu->data;
4725         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4726
4727         RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4728                 pwdinfo->p2p_peer_device_addr[0], pwdinfo->p2p_peer_device_addr[1],
4729                 pwdinfo->p2p_peer_device_addr[2], pwdinfo->p2p_peer_device_addr[3],
4730                 pwdinfo->p2p_peer_device_addr[4], pwdinfo->p2p_peer_device_addr[5]);
4731         sprintf(extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
4732                 pwdinfo->p2p_peer_device_addr[0], pwdinfo->p2p_peer_device_addr[1],
4733                 pwdinfo->p2p_peer_device_addr[2], pwdinfo->p2p_peer_device_addr[3],
4734                 pwdinfo->p2p_peer_device_addr[4], pwdinfo->p2p_peer_device_addr[5]);
4735         wrqu->data.length = strlen(extra);
4736         return ret;
4737
4738 }
4739
4740 static int rtw_p2p_get_groupid(struct net_device *dev,
4741                                struct iw_request_info *info,
4742                                union iwreq_data *wrqu, char *extra)
4743
4744 {
4745
4746         int ret = 0;
4747         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4748         struct iw_point *pdata = &wrqu->data;
4749         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4750
4751         sprintf(extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X %s",
4752                 pwdinfo->groupid_info.go_device_addr[0], pwdinfo->groupid_info.go_device_addr[1],
4753                 pwdinfo->groupid_info.go_device_addr[2], pwdinfo->groupid_info.go_device_addr[3],
4754                 pwdinfo->groupid_info.go_device_addr[4], pwdinfo->groupid_info.go_device_addr[5],
4755                 pwdinfo->groupid_info.ssid);
4756         wrqu->data.length = strlen(extra);
4757         return ret;
4758
4759 }
4760
4761 static int rtw_p2p_get_op_ch(struct net_device *dev,
4762                              struct iw_request_info *info,
4763                              union iwreq_data *wrqu, char *extra)
4764
4765 {
4766
4767         int ret = 0;
4768         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4769         struct iw_point *pdata = &wrqu->data;
4770         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4771
4772
4773         RTW_INFO("[%s] Op_ch = %02x\n", __FUNCTION__, pwdinfo->operating_channel);
4774
4775         sprintf(extra, "\n\nOp_ch=%.2d\n", pwdinfo->operating_channel);
4776         wrqu->data.length = strlen(extra);
4777         return ret;
4778
4779 }
4780
4781 static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
4782                                         struct iw_request_info *info,
4783                         union iwreq_data *wrqu, char *extra, char *subcmd)
4784 {
4785
4786         int ret = 0;
4787         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4788         u8 peerMAC[ETH_ALEN] = { 0x00 };
4789         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4790         _irqL irqL;
4791         _list *plist, *phead;
4792         _queue *queue = &(pmlmepriv->scanned_queue);
4793         struct wlan_network *pnetwork = NULL;
4794         u8 blnMatch = 0;
4795         u16     attr_content = 0;
4796         uint attr_contentlen = 0;
4797         u8      attr_content_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
4798
4799         /*      Commented by Albert 20110727 */
4800         /*      The input data is the MAC address which the application wants to know its WPS config method. */
4801         /*      After knowing its WPS config method, the application can decide the config method for provisioning discovery. */
4802         /*      Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05 */
4803
4804         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
4805
4806         macstr2num(peerMAC, subcmd);
4807
4808         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4809
4810         phead = get_list_head(queue);
4811         plist = get_next(phead);
4812
4813         while (1) {
4814                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
4815                         break;
4816
4817                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4818                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
4819                         u8 *wpsie;
4820                         uint    wpsie_len = 0;
4821
4822                         /*      The mac address is matched. */
4823
4824                         wpsie = rtw_get_wps_ie_from_scan_queue(&pnetwork->network.IEs[0], pnetwork->network.IELength, NULL, &wpsie_len, pnetwork->network.Reserved[0]);
4825                         if (wpsie) {
4826                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, (u8 *)&attr_content, &attr_contentlen);
4827                                 if (attr_contentlen) {
4828                                         attr_content = be16_to_cpu(attr_content);
4829                                         sprintf(attr_content_str, "\n\nM=%.4d", attr_content);
4830                                         blnMatch = 1;
4831                                 }
4832                         }
4833
4834                         break;
4835                 }
4836
4837                 plist = get_next(plist);
4838
4839         }
4840
4841         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4842
4843         if (!blnMatch)
4844                 sprintf(attr_content_str, "\n\nM=0000");
4845
4846         wrqu->data.length = strlen(attr_content_str);
4847         _rtw_memcpy(extra, attr_content_str, wrqu->data.length);
4848
4849         return ret;
4850
4851 }
4852
4853 #ifdef CONFIG_WFD
4854 static int rtw_p2p_get_peer_wfd_port(struct net_device *dev,
4855                                      struct iw_request_info *info,
4856                                      union iwreq_data *wrqu, char *extra)
4857 {
4858
4859         int ret = 0;
4860         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4861         struct iw_point *pdata = &wrqu->data;
4862         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4863
4864         RTW_INFO("[%s] p2p_state = %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo));
4865
4866         sprintf(extra, "\n\nPort=%d\n", pwdinfo->wfd_info->peer_rtsp_ctrlport);
4867         RTW_INFO("[%s] remote port = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport);
4868
4869         wrqu->data.length = strlen(extra);
4870         return ret;
4871
4872 }
4873
4874 static int rtw_p2p_get_peer_wfd_preferred_connection(struct net_device *dev,
4875                 struct iw_request_info *info,
4876                 union iwreq_data *wrqu, char *extra)
4877 {
4878
4879         int ret = 0;
4880         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4881         struct iw_point *pdata = &wrqu->data;
4882         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4883
4884         sprintf(extra, "\n\nwfd_pc=%d\n", pwdinfo->wfd_info->wfd_pc);
4885         RTW_INFO("[%s] wfd_pc = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_pc);
4886
4887         wrqu->data.length = strlen(extra);
4888         pwdinfo->wfd_info->wfd_pc = _FALSE;     /*      Reset the WFD preferred connection to P2P */
4889         return ret;
4890
4891 }
4892
4893 static int rtw_p2p_get_peer_wfd_session_available(struct net_device *dev,
4894                 struct iw_request_info *info,
4895                 union iwreq_data *wrqu, char *extra)
4896 {
4897
4898         int ret = 0;
4899         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4900         struct iw_point *pdata = &wrqu->data;
4901         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4902
4903         sprintf(extra, "\n\nwfd_sa=%d\n", pwdinfo->wfd_info->peer_session_avail);
4904         RTW_INFO("[%s] wfd_sa = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_session_avail);
4905
4906         wrqu->data.length = strlen(extra);
4907         pwdinfo->wfd_info->peer_session_avail = _TRUE;  /*      Reset the WFD session available */
4908         return ret;
4909
4910 }
4911 #endif /* CONFIG_WFD */
4912
4913 static int rtw_p2p_get_go_device_address(struct net_device *dev,
4914                 struct iw_request_info *info,
4915                 union iwreq_data *wrqu, char *extra, char *subcmd)
4916 {
4917
4918         int ret = 0;
4919         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4920         u8 peerMAC[ETH_ALEN] = { 0x00 };
4921         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4922         _irqL irqL;
4923         _list *plist, *phead;
4924         _queue *queue   = &(pmlmepriv->scanned_queue);
4925         struct wlan_network *pnetwork = NULL;
4926         u8 blnMatch = 0;
4927         u8 *p2pie;
4928         uint p2pielen = 0, attr_contentlen = 0;
4929         u8 attr_content[100] = { 0x00 };
4930         u8 go_devadd_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
4931
4932         /*      Commented by Albert 20121209 */
4933         /*      The input data is the GO's interface address which the application wants to know its device address. */
4934         /*      Format: iwpriv wlanx p2p_get2 go_devadd=00:E0:4C:00:00:05 */
4935
4936         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
4937
4938         macstr2num(peerMAC, subcmd);
4939
4940         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4941
4942         phead = get_list_head(queue);
4943         plist = get_next(phead);
4944
4945         while (1) {
4946                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
4947                         break;
4948
4949                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4950                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
4951                         /*      Commented by Albert 2011/05/18 */
4952                         /*      Match the device address located in the P2P IE */
4953                         /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
4954
4955                         p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
4956                         if (p2pie) {
4957                                 while (p2pie) {
4958                                         /*      The P2P Device ID attribute is included in the Beacon frame. */
4959                                         /*      The P2P Device Info attribute is included in the probe response frame. */
4960
4961                                         _rtw_memset(attr_content, 0x00, 100);
4962                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
4963                                                 /*      Handle the P2P Device ID attribute of Beacon first */
4964                                                 blnMatch = 1;
4965                                                 break;
4966
4967                                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
4968                                                 /*      Handle the P2P Device Info attribute of probe response */
4969                                                 blnMatch = 1;
4970                                                 break;
4971                                         }
4972
4973                                         /* Get the next P2P IE */
4974                                         p2pie = rtw_get_p2p_ie(p2pie + p2pielen, BSS_EX_TLV_IES_LEN(&pnetwork->network) - (p2pie + p2pielen - BSS_EX_TLV_IES(&pnetwork->network)), NULL, &p2pielen);
4975                                 }
4976                         }
4977                 }
4978
4979                 plist = get_next(plist);
4980
4981         }
4982
4983         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4984
4985         if (!blnMatch)
4986                 sprintf(go_devadd_str, "\n\ndev_add=NULL");
4987         else {
4988                 sprintf(go_devadd_str, "\n\ndev_add=%.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
4989                         attr_content[0], attr_content[1], attr_content[2], attr_content[3], attr_content[4], attr_content[5]);
4990         }
4991
4992         wrqu->data.length = strlen(go_devadd_str);
4993         _rtw_memcpy(extra, go_devadd_str, wrqu->data.length);
4994
4995         return ret;
4996
4997 }
4998
4999 static int rtw_p2p_get_device_type(struct net_device *dev,
5000                                    struct iw_request_info *info,
5001                            union iwreq_data *wrqu, char *extra, char *subcmd)
5002 {
5003
5004         int ret = 0;
5005         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5006         u8 peerMAC[ETH_ALEN] = { 0x00 };
5007         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5008         _irqL irqL;
5009         _list *plist, *phead;
5010         _queue *queue = &(pmlmepriv->scanned_queue);
5011         struct wlan_network *pnetwork = NULL;
5012         u8 blnMatch = 0;
5013         u8 dev_type[8] = { 0x00 };
5014         uint dev_type_len = 0;
5015         u8 dev_type_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };    /* +9 is for the str "dev_type=", we have to clear it at wrqu->data.pointer */
5016
5017         /*      Commented by Albert 20121209 */
5018         /*      The input data is the MAC address which the application wants to know its device type. */
5019         /*      Such user interface could know the device type. */
5020         /*      Format: iwpriv wlanx p2p_get2 dev_type=00:E0:4C:00:00:05 */
5021
5022         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
5023
5024         macstr2num(peerMAC, subcmd);
5025
5026         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5027
5028         phead = get_list_head(queue);
5029         plist = get_next(phead);
5030
5031         while (1) {
5032                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5033                         break;
5034
5035                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5036                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
5037                         u8 *wpsie;
5038                         uint    wpsie_len = 0;
5039
5040                         /*      The mac address is matched. */
5041
5042                         wpsie = rtw_get_wps_ie_from_scan_queue(&pnetwork->network.IEs[0], pnetwork->network.IELength, NULL, &wpsie_len, pnetwork->network.Reserved[0]);
5043                         if (wpsie) {
5044                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_PRIMARY_DEV_TYPE, dev_type, &dev_type_len);
5045                                 if (dev_type_len) {
5046                                         u16     type = 0;
5047
5048                                         _rtw_memcpy(&type, dev_type, 2);
5049                                         type = be16_to_cpu(type);
5050                                         sprintf(dev_type_str, "\n\nN=%.2d", type);
5051                                         blnMatch = 1;
5052                                 }
5053                         }
5054                         break;
5055                 }
5056
5057                 plist = get_next(plist);
5058
5059         }
5060
5061         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5062
5063         if (!blnMatch)
5064                 sprintf(dev_type_str, "\n\nN=00");
5065
5066         wrqu->data.length = strlen(dev_type_str);
5067         _rtw_memcpy(extra, dev_type_str, wrqu->data.length);
5068
5069         return ret;
5070
5071 }
5072
5073 static int rtw_p2p_get_device_name(struct net_device *dev,
5074                                    struct iw_request_info *info,
5075                            union iwreq_data *wrqu, char *extra, char *subcmd)
5076 {
5077
5078         int ret = 0;
5079         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5080         u8 peerMAC[ETH_ALEN] = { 0x00 };
5081         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5082         _irqL irqL;
5083         _list *plist, *phead;
5084         _queue *queue = &(pmlmepriv->scanned_queue);
5085         struct wlan_network *pnetwork = NULL;
5086         u8 blnMatch = 0;
5087         u8 dev_name[WPS_MAX_DEVICE_NAME_LEN] = { 0x00 };
5088         uint dev_len = 0;
5089         u8 dev_name_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
5090
5091         /*      Commented by Albert 20121225 */
5092         /*      The input data is the MAC address which the application wants to know its device name. */
5093         /*      Such user interface could show peer device's device name instead of ssid. */
5094         /*      Format: iwpriv wlanx p2p_get2 devN=00:E0:4C:00:00:05 */
5095
5096         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
5097
5098         macstr2num(peerMAC, subcmd);
5099
5100         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5101
5102         phead = get_list_head(queue);
5103         plist = get_next(phead);
5104
5105         while (1) {
5106                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5107                         break;
5108
5109                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5110                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
5111                         u8 *wpsie;
5112                         uint    wpsie_len = 0;
5113
5114                         /*      The mac address is matched. */
5115
5116                         wpsie = rtw_get_wps_ie_from_scan_queue(&pnetwork->network.IEs[0], pnetwork->network.IELength, NULL, &wpsie_len, pnetwork->network.Reserved[0]);
5117                         if (wpsie) {
5118                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_DEVICE_NAME, dev_name, &dev_len);
5119                                 if (dev_len) {
5120                                         sprintf(dev_name_str, "\n\nN=%s", dev_name);
5121                                         blnMatch = 1;
5122                                 }
5123                         }
5124                         break;
5125                 }
5126
5127                 plist = get_next(plist);
5128
5129         }
5130
5131         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5132
5133         if (!blnMatch)
5134                 sprintf(dev_name_str, "\n\nN=0000");
5135
5136         wrqu->data.length = strlen(dev_name_str);
5137         _rtw_memcpy(extra, dev_name_str, wrqu->data.length);
5138
5139         return ret;
5140
5141 }
5142
5143 static int rtw_p2p_get_invitation_procedure(struct net_device *dev,
5144                 struct iw_request_info *info,
5145                 union iwreq_data *wrqu, char *extra, char *subcmd)
5146 {
5147
5148         int ret = 0;
5149         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5150         u8 peerMAC[ETH_ALEN] = { 0x00 };
5151         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5152         _irqL irqL;
5153         _list *plist, *phead;
5154         _queue *queue   = &(pmlmepriv->scanned_queue);
5155         struct wlan_network *pnetwork = NULL;
5156         u8 blnMatch = 0;
5157         u8 *p2pie;
5158         uint p2pielen = 0, attr_contentlen = 0;
5159         u8 attr_content[2] = { 0x00 };
5160         u8 inv_proc_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
5161
5162         /*      Commented by Ouden 20121226 */
5163         /*      The application wants to know P2P initation procedure is support or not. */
5164         /*      Format: iwpriv wlanx p2p_get2 InvProc=00:E0:4C:00:00:05 */
5165
5166         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
5167
5168         macstr2num(peerMAC, subcmd);
5169
5170         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5171
5172         phead = get_list_head(queue);
5173         plist = get_next(phead);
5174
5175         while (1) {
5176                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5177                         break;
5178
5179                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5180                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
5181                         /*      Commented by Albert 20121226 */
5182                         /*      Match the device address located in the P2P IE */
5183                         /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
5184
5185                         p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5186                         if (p2pie) {
5187                                 while (p2pie) {
5188                                         /* _rtw_memset( attr_content, 0x00, 2); */
5189                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_CAPABILITY, attr_content, &attr_contentlen)) {
5190                                                 /*      Handle the P2P capability attribute */
5191                                                 blnMatch = 1;
5192                                                 break;
5193
5194                                         }
5195
5196                                         /* Get the next P2P IE */
5197                                         p2pie = rtw_get_p2p_ie(p2pie + p2pielen, BSS_EX_TLV_IES_LEN(&pnetwork->network) - (p2pie + p2pielen - BSS_EX_TLV_IES(&pnetwork->network)), NULL, &p2pielen);
5198                                 }
5199                         }
5200                 }
5201
5202                 plist = get_next(plist);
5203
5204         }
5205
5206         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5207
5208         if (!blnMatch)
5209                 sprintf(inv_proc_str, "\nIP=-1");
5210         else {
5211                 if ((attr_content[0] & 0x20) == 0x20)
5212                         sprintf(inv_proc_str, "\nIP=1");
5213                 else
5214                         sprintf(inv_proc_str, "\nIP=0");
5215         }
5216
5217         wrqu->data.length = strlen(inv_proc_str);
5218         _rtw_memcpy(extra, inv_proc_str, wrqu->data.length);
5219
5220         return ret;
5221
5222 }
5223
5224 static int rtw_p2p_connect(struct net_device *dev,
5225                            struct iw_request_info *info,
5226                            union iwreq_data *wrqu, char *extra)
5227 {
5228
5229         int ret = 0;
5230         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5231         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
5232         u8                                      peerMAC[ETH_ALEN] = { 0x00 };
5233         int                                     jj, kk;
5234         u8                                      peerMACStr[ETH_ALEN * 2] = { 0x00 };
5235         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
5236         _irqL                           irqL;
5237         _list                                   *plist, *phead;
5238         _queue                          *queue  = &(pmlmepriv->scanned_queue);
5239         struct  wlan_network    *pnetwork = NULL;
5240         uint                                    uintPeerChannel = 0;
5241
5242         /*      Commented by Albert 20110304 */
5243         /*      The input data contains two informations. */
5244         /*      1. First information is the MAC address which wants to formate with */
5245         /*      2. Second information is the WPS PINCode or "pbc" string for push button method */
5246         /*      Format: 00:E0:4C:00:00:05 */
5247         /*      Format: 00:E0:4C:00:00:05 */
5248
5249         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5250
5251         if (pwdinfo->p2p_state == P2P_STATE_NONE) {
5252                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5253                 return ret;
5254         }
5255
5256 #ifdef CONFIG_INTEL_WIDI
5257         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
5258                 RTW_INFO("[%s] WiFi is under survey!\n", __FUNCTION__);
5259                 return ret;
5260         }
5261 #endif /* CONFIG_INTEL_WIDI      */
5262
5263         if (pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO)
5264                 return -1;
5265
5266         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
5267                 peerMAC[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5268
5269         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5270
5271         phead = get_list_head(queue);
5272         plist = get_next(phead);
5273
5274         while (1) {
5275                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5276                         break;
5277
5278                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5279                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
5280                         if (pnetwork->network.Configuration.DSConfig != 0)
5281                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5282                         else if (pwdinfo->nego_req_info.peer_ch != 0)
5283                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig = pwdinfo->nego_req_info.peer_ch;
5284                         else {
5285                                 /* Unexpected case */
5286                                 uintPeerChannel = 0;
5287                                 RTW_INFO("%s  uintPeerChannel = 0\n", __func__);
5288                         }
5289                         break;
5290                 }
5291
5292                 plist = get_next(plist);
5293
5294         }
5295
5296         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5297
5298         if (uintPeerChannel) {
5299 #ifdef CONFIG_CONCURRENT_MODE
5300                 if (rtw_mi_check_status(padapter, MI_LINKED))
5301                         _cancel_timer_ex(&pwdinfo->ap_p2p_switch_timer);
5302 #endif /* CONFIG_CONCURRENT_MODE */
5303
5304                 _rtw_memset(&pwdinfo->nego_req_info, 0x00, sizeof(struct tx_nego_req_info));
5305                 _rtw_memset(&pwdinfo->groupid_info, 0x00, sizeof(struct group_id_info));
5306
5307                 pwdinfo->nego_req_info.peer_channel_num[0] = uintPeerChannel;
5308                 _rtw_memcpy(pwdinfo->nego_req_info.peerDevAddr, pnetwork->network.MacAddress, ETH_ALEN);
5309                 pwdinfo->nego_req_info.benable = _TRUE;
5310
5311                 _cancel_timer_ex(&pwdinfo->restore_p2p_state_timer);
5312                 if (rtw_p2p_state(pwdinfo) != P2P_STATE_GONEGO_OK) {
5313                         /*      Restore to the listen state if the current p2p state is not nego OK */
5314                         rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
5315                 }
5316
5317                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
5318                 rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
5319
5320 #ifdef CONFIG_CONCURRENT_MODE
5321                 if (rtw_mi_check_status(padapter, MI_LINKED)) {
5322                         u8 union_ch = rtw_mi_get_union_chan(padapter);
5323                         u8 union_bw = rtw_mi_get_union_bw(padapter);
5324                         u8 union_offset = rtw_mi_get_union_offset(padapter);
5325                         /*      Have to enter the power saving with the AP */
5326                         set_channel_bwmode(padapter, union_ch, union_offset, union_bw);
5327
5328                         rtw_mi_buddy_issue_nulldata(padapter, NULL, 1, 3, 500);
5329                 }
5330 #endif /* CONFIG_CONCURRENT_MODE */
5331
5332                 RTW_INFO("[%s] Start PreTx Procedure!\n", __FUNCTION__);
5333                 _set_timer(&pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT);
5334 #ifdef CONFIG_CONCURRENT_MODE
5335                 if (rtw_mi_check_status(padapter, MI_LINKED))
5336                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_GO_NEGO_TIMEOUT);
5337                 else
5338                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT);
5339 #else
5340                 _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT);
5341 #endif /* CONFIG_CONCURRENT_MODE                 */
5342
5343         } else {
5344                 RTW_INFO("[%s] Not Found in Scanning Queue~\n", __FUNCTION__);
5345 #ifdef CONFIG_INTEL_WIDI
5346                 _cancel_timer_ex(&pwdinfo->restore_p2p_state_timer);
5347                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
5348                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
5349                 rtw_free_network_queue(padapter, _TRUE);
5350                 /**
5351                  * For WiDi, if we can't find candidate device in scanning queue,
5352                  * driver will do scanning itself
5353                  */
5354                 _enter_critical_bh(&pmlmepriv->lock, &irqL);
5355                 rtw_sitesurvey_cmd(padapter, NULL, 0, NULL, 0);
5356                 _exit_critical_bh(&pmlmepriv->lock, &irqL);
5357 #endif /* CONFIG_INTEL_WIDI */
5358                 ret = -1;
5359         }
5360 exit:
5361         return ret;
5362 }
5363
5364 static int rtw_p2p_invite_req(struct net_device *dev,
5365                               struct iw_request_info *info,
5366                               union iwreq_data *wrqu, char *extra)
5367 {
5368
5369         int ret = 0;
5370         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5371         struct iw_point                 *pdata = &wrqu->data;
5372         struct wifidirect_info          *pwdinfo = &(padapter->wdinfo);
5373         int                                             jj, kk;
5374         u8                                              peerMACStr[ETH_ALEN * 2] = { 0x00 };
5375         struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
5376         _list                                           *plist, *phead;
5377         _queue                                  *queue  = &(pmlmepriv->scanned_queue);
5378         struct  wlan_network            *pnetwork = NULL;
5379         uint                                            uintPeerChannel = 0;
5380         u8                                              attr_content[50] = { 0x00 }, _status = 0;
5381         u8                                              *p2pie;
5382         uint                                            p2pielen = 0, attr_contentlen = 0;
5383         _irqL                                   irqL;
5384         struct tx_invite_req_info       *pinvite_req_info = &pwdinfo->invitereq_info;
5385
5386         /*      Commented by Albert 20120321 */
5387         /*      The input data contains two informations. */
5388         /*      1. First information is the P2P device address which you want to send to.        */
5389         /*      2. Second information is the group id which combines with GO's mac address, space and GO's ssid. */
5390         /*      Command line sample: iwpriv wlan0 p2p_set invite="00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy" */
5391         /*      Format: 00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy */
5392
5393         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5394
5395         if (wrqu->data.length <=  37) {
5396                 RTW_INFO("[%s] Wrong format!\n", __FUNCTION__);
5397                 return ret;
5398         }
5399
5400         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
5401                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5402                 return ret;
5403         } else {
5404                 /*      Reset the content of struct tx_invite_req_info */
5405                 pinvite_req_info->benable = _FALSE;
5406                 _rtw_memset(pinvite_req_info->go_bssid, 0x00, ETH_ALEN);
5407                 _rtw_memset(pinvite_req_info->go_ssid, 0x00, WLAN_SSID_MAXLEN);
5408                 pinvite_req_info->ssidlen = 0x00;
5409                 pinvite_req_info->operating_ch = pwdinfo->operating_channel;
5410                 _rtw_memset(pinvite_req_info->peer_macaddr, 0x00, ETH_ALEN);
5411                 pinvite_req_info->token = 3;
5412         }
5413
5414         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
5415                 pinvite_req_info->peer_macaddr[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5416
5417         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5418
5419         phead = get_list_head(queue);
5420         plist = get_next(phead);
5421
5422         while (1) {
5423                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5424                         break;
5425
5426                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5427
5428                 /*      Commented by Albert 2011/05/18 */
5429                 /*      Match the device address located in the P2P IE */
5430                 /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
5431
5432                 p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5433                 if (p2pie) {
5434                         /*      The P2P Device ID attribute is included in the Beacon frame. */
5435                         /*      The P2P Device Info attribute is included in the probe response frame. */
5436
5437                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
5438                                 /*      Handle the P2P Device ID attribute of Beacon first */
5439                                 if (_rtw_memcmp(attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN)) {
5440                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5441                                         break;
5442                                 }
5443                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
5444                                 /*      Handle the P2P Device Info attribute of probe response */
5445                                 if (_rtw_memcmp(attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN)) {
5446                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5447                                         break;
5448                                 }
5449                         }
5450
5451                 }
5452
5453                 plist = get_next(plist);
5454
5455         }
5456
5457         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5458
5459 #ifdef CONFIG_WFD
5460         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST) && uintPeerChannel) {
5461                 struct wifi_display_info *pwfd_info = pwdinfo->wfd_info;
5462                 u8 *wfd_ie;
5463                 uint wfd_ielen = 0;
5464
5465                 wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
5466                 if (wfd_ie) {
5467                         u8 *wfd_devinfo;
5468                         uint wfd_devlen;
5469
5470                         RTW_INFO("[%s] Found WFD IE!\n", __FUNCTION__);
5471                         wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
5472                         if (wfd_devinfo) {
5473                                 u16     wfd_devinfo_field = 0;
5474
5475                                 /*      Commented by Albert 20120319 */
5476                                 /*      The first two bytes are the WFD device information field of WFD device information subelement. */
5477                                 /*      In big endian format. */
5478                                 wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
5479                                 if (wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL)
5480                                         pwfd_info->peer_session_avail = _TRUE;
5481                                 else
5482                                         pwfd_info->peer_session_avail = _FALSE;
5483                         }
5484                 }
5485
5486                 if (_FALSE == pwfd_info->peer_session_avail) {
5487                         RTW_INFO("[%s] WFD Session not avaiable!\n", __FUNCTION__);
5488                         goto exit;
5489                 }
5490         }
5491 #endif /* CONFIG_WFD */
5492
5493         if (uintPeerChannel) {
5494 #ifdef CONFIG_CONCURRENT_MODE
5495                 if (rtw_mi_check_status(padapter, MI_LINKED))
5496                         _cancel_timer_ex(&pwdinfo->ap_p2p_switch_timer);
5497 #endif /* CONFIG_CONCURRENT_MODE */
5498
5499                 /*      Store the GO's bssid */
5500                 for (jj = 0, kk = 18; jj < ETH_ALEN; jj++, kk += 3)
5501                         pinvite_req_info->go_bssid[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5502
5503                 /*      Store the GO's ssid */
5504                 pinvite_req_info->ssidlen = wrqu->data.length - 36;
5505                 _rtw_memcpy(pinvite_req_info->go_ssid, &extra[36], (u32) pinvite_req_info->ssidlen);
5506                 pinvite_req_info->benable = _TRUE;
5507                 pinvite_req_info->peer_ch = uintPeerChannel;
5508
5509                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
5510                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_INVITE_REQ);
5511
5512 #ifdef CONFIG_CONCURRENT_MODE
5513                 if (rtw_mi_check_status(padapter, MI_LINKED)) {
5514                         u8 union_ch = rtw_mi_get_union_chan(padapter);
5515                         u8 union_bw = rtw_mi_get_union_bw(padapter);
5516                         u8 union_offset = rtw_mi_get_union_offset(padapter);
5517                         /*      Have to enter the power saving with the AP */
5518                         set_channel_bwmode(padapter, union_ch, union_offset, union_bw);
5519
5520                         rtw_mi_buddy_issue_nulldata(padapter, NULL, 1, 3, 500);
5521                 } else
5522                         set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
5523 #else
5524                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
5525 #endif
5526
5527                 _set_timer(&pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT);
5528
5529 #ifdef CONFIG_CONCURRENT_MODE
5530                 if (rtw_mi_check_status(padapter, MI_LINKED))
5531                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_INVITE_TIMEOUT);
5532                 else
5533                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT);
5534 #else
5535                 _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT);
5536 #endif /* CONFIG_CONCURRENT_MODE                 */
5537
5538
5539         } else
5540                 RTW_INFO("[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__);
5541 exit:
5542
5543         return ret;
5544
5545 }
5546
5547 static int rtw_p2p_set_persistent(struct net_device *dev,
5548                                   struct iw_request_info *info,
5549                                   union iwreq_data *wrqu, char *extra)
5550 {
5551
5552         int ret = 0;
5553         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5554         struct iw_point                 *pdata = &wrqu->data;
5555         struct wifidirect_info          *pwdinfo = &(padapter->wdinfo);
5556         int                                             jj, kk;
5557         u8                                              peerMACStr[ETH_ALEN * 2] = { 0x00 };
5558         struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
5559         _list                                           *plist, *phead;
5560         _queue                                  *queue  = &(pmlmepriv->scanned_queue);
5561         struct  wlan_network            *pnetwork = NULL;
5562         uint                                            uintPeerChannel = 0;
5563         u8                                              attr_content[50] = { 0x00 }, _status = 0;
5564         u8                                              *p2pie;
5565         uint                                            p2pielen = 0, attr_contentlen = 0;
5566         _irqL                                   irqL;
5567         struct tx_invite_req_info       *pinvite_req_info = &pwdinfo->invitereq_info;
5568
5569         /*      Commented by Albert 20120328 */
5570         /*      The input data is 0 or 1 */
5571         /*      0: disable persistent group functionality */
5572         /*      1: enable persistent group founctionality */
5573
5574         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5575
5576         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
5577                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5578                 return ret;
5579         } else {
5580                 if (extra[0] == '0')    /*      Disable the persistent group function. */
5581                         pwdinfo->persistent_supported = _FALSE;
5582                 else if (extra[0] == '1')       /*      Enable the persistent group function. */
5583                         pwdinfo->persistent_supported = _TRUE;
5584                 else
5585                         pwdinfo->persistent_supported = _FALSE;
5586         }
5587         printk("[%s] persistent_supported = %d\n", __FUNCTION__, pwdinfo->persistent_supported);
5588
5589 exit:
5590
5591         return ret;
5592
5593 }
5594
5595 static int hexstr2bin(const char *hex, u8 *buf, size_t len)
5596 {
5597         size_t i;
5598         int a;
5599         const char *ipos = hex;
5600         u8 *opos = buf;
5601
5602         for (i = 0; i < len; i++) {
5603                 a = hex2byte_i(ipos);
5604                 if (a < 0)
5605                         return -1;
5606                 *opos++ = a;
5607                 ipos += 2;
5608         }
5609         return 0;
5610 }
5611
5612 static int uuid_str2bin(const char *str, u8 *bin)
5613 {
5614         const char *pos;
5615         u8 *opos;
5616
5617         pos = str;
5618         opos = bin;
5619
5620         if (hexstr2bin(pos, opos, 4))
5621                 return -1;
5622         pos += 8;
5623         opos += 4;
5624
5625         if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
5626                 return -1;
5627         pos += 4;
5628         opos += 2;
5629
5630         if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
5631                 return -1;
5632         pos += 4;
5633         opos += 2;
5634
5635         if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
5636                 return -1;
5637         pos += 4;
5638         opos += 2;
5639
5640         if (*pos++ != '-' || hexstr2bin(pos, opos, 6))
5641                 return -1;
5642
5643         return 0;
5644 }
5645
5646 static int rtw_p2p_set_wps_uuid(struct net_device *dev,
5647                                 struct iw_request_info *info,
5648                                 union iwreq_data *wrqu, char *extra)
5649 {
5650
5651         int ret = 0;
5652         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5653         struct wifidirect_info                  *pwdinfo = &(padapter->wdinfo);
5654
5655         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5656
5657         if ((36 == strlen(extra)) && (uuid_str2bin(extra, pwdinfo->uuid) == 0))
5658                 pwdinfo->external_uuid = 1;
5659         else {
5660                 pwdinfo->external_uuid = 0;
5661                 ret = -EINVAL;
5662         }
5663
5664         return ret;
5665
5666 }
5667 #ifdef CONFIG_WFD
5668 static int rtw_p2p_set_pc(struct net_device *dev,
5669                           struct iw_request_info *info,
5670                           union iwreq_data *wrqu, char *extra)
5671 {
5672
5673         int ret = 0;
5674         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5675         struct iw_point         *pdata = &wrqu->data;
5676         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
5677         u8                                      peerMAC[ETH_ALEN] = { 0x00 };
5678         int                                     jj, kk;
5679         u8                                      peerMACStr[ETH_ALEN * 2] = { 0x00 };
5680         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
5681         _list                                   *plist, *phead;
5682         _queue                          *queue  = &(pmlmepriv->scanned_queue);
5683         struct  wlan_network    *pnetwork = NULL;
5684         u8                                      attr_content[50] = { 0x00 }, _status = 0;
5685         u8 *p2pie;
5686         uint                                    p2pielen = 0, attr_contentlen = 0;
5687         _irqL                           irqL;
5688         uint                                    uintPeerChannel = 0;
5689
5690         struct wifi_display_info        *pwfd_info = pwdinfo->wfd_info;
5691
5692         /*      Commented by Albert 20120512 */
5693         /*      1. Input information is the MAC address which wants to know the Preferred Connection bit (PC bit) */
5694         /*      Format: 00:E0:4C:00:00:05 */
5695
5696         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5697
5698         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
5699                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5700                 return ret;
5701         }
5702
5703         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
5704                 peerMAC[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5705
5706         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5707
5708         phead = get_list_head(queue);
5709         plist = get_next(phead);
5710
5711         while (1) {
5712                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5713                         break;
5714
5715                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5716
5717                 /*      Commented by Albert 2011/05/18 */
5718                 /*      Match the device address located in the P2P IE */
5719                 /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
5720
5721                 p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5722                 if (p2pie) {
5723                         /*      The P2P Device ID attribute is included in the Beacon frame. */
5724                         /*      The P2P Device Info attribute is included in the probe response frame. */
5725                         printk("[%s] Got P2P IE\n", __FUNCTION__);
5726                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
5727                                 /*      Handle the P2P Device ID attribute of Beacon first */
5728                                 printk("[%s] P2P_ATTR_DEVICE_ID\n", __FUNCTION__);
5729                                 if (_rtw_memcmp(attr_content, peerMAC, ETH_ALEN)) {
5730                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5731                                         break;
5732                                 }
5733                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
5734                                 /*      Handle the P2P Device Info attribute of probe response */
5735                                 printk("[%s] P2P_ATTR_DEVICE_INFO\n", __FUNCTION__);
5736                                 if (_rtw_memcmp(attr_content, peerMAC, ETH_ALEN)) {
5737                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5738                                         break;
5739                                 }
5740                         }
5741
5742                 }
5743
5744                 plist = get_next(plist);
5745
5746         }
5747
5748         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5749         printk("[%s] channel = %d\n", __FUNCTION__, uintPeerChannel);
5750
5751         if (uintPeerChannel) {
5752                 u8 *wfd_ie;
5753                 uint wfd_ielen = 0;
5754
5755                 wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
5756                 if (wfd_ie) {
5757                         u8 *wfd_devinfo;
5758                         uint wfd_devlen;
5759
5760                         RTW_INFO("[%s] Found WFD IE!\n", __FUNCTION__);
5761                         wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
5762                         if (wfd_devinfo) {
5763                                 u16     wfd_devinfo_field = 0;
5764
5765                                 /*      Commented by Albert 20120319 */
5766                                 /*      The first two bytes are the WFD device information field of WFD device information subelement. */
5767                                 /*      In big endian format. */
5768                                 wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
5769                                 if (wfd_devinfo_field & WFD_DEVINFO_PC_TDLS)
5770                                         pwfd_info->wfd_pc = _TRUE;
5771                                 else
5772                                         pwfd_info->wfd_pc = _FALSE;
5773                         }
5774                 }
5775         } else
5776                 RTW_INFO("[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__);
5777
5778 exit:
5779
5780         return ret;
5781
5782 }
5783
5784 static int rtw_p2p_set_wfd_device_type(struct net_device *dev,
5785                                        struct iw_request_info *info,
5786                                        union iwreq_data *wrqu, char *extra)
5787 {
5788
5789         int ret = 0;
5790         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5791         struct iw_point                 *pdata = &wrqu->data;
5792         struct wifidirect_info          *pwdinfo = &(padapter->wdinfo);
5793         struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
5794
5795         /*      Commented by Albert 20120328 */
5796         /*      The input data is 0 or 1 */
5797         /*      0: specify to Miracast source device */
5798         /*      1 or others: specify to Miracast sink device (display device) */
5799
5800         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5801
5802         if (extra[0] == '0')    /*      Set to Miracast source device. */
5803                 pwfd_info->wfd_device_type = WFD_DEVINFO_SOURCE;
5804         else                                    /*      Set to Miracast sink device. */
5805                 pwfd_info->wfd_device_type = WFD_DEVINFO_PSINK;
5806
5807 exit:
5808
5809         return ret;
5810
5811 }
5812
5813 static int rtw_p2p_set_wfd_enable(struct net_device *dev,
5814                                   struct iw_request_info *info,
5815                                   union iwreq_data *wrqu, char *extra)
5816 {
5817         /*      Commented by Kurt 20121206
5818          *      This function is used to set wfd enabled */
5819
5820         int ret = 0;
5821         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5822         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
5823
5824         if (*extra == '0')
5825                 rtw_wfd_enable(padapter, 0);
5826         else if (*extra == '1')
5827                 rtw_wfd_enable(padapter, 1);
5828
5829         RTW_INFO("[%s] wfd_enable = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_enable);
5830
5831         return ret;
5832
5833 }
5834
5835 static int rtw_p2p_set_driver_iface(struct net_device *dev,
5836                                     struct iw_request_info *info,
5837                                     union iwreq_data *wrqu, char *extra)
5838 {
5839         /*      Commented by Kurt 20121206
5840          *      This function is used to set driver iface is WEXT or CFG80211 */
5841         int ret = 0;
5842         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5843         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
5844
5845         if (*extra == '1') {
5846                 pwdinfo->driver_interface = DRIVER_WEXT;
5847                 RTW_INFO("[%s] driver_interface = WEXT\n", __FUNCTION__);
5848         } else if (*extra == '2') {
5849                 pwdinfo->driver_interface = DRIVER_CFG80211;
5850                 RTW_INFO("[%s] driver_interface = CFG80211\n", __FUNCTION__);
5851         }
5852
5853         return ret;
5854
5855 }
5856
5857 /*      To set the WFD session available to enable or disable */
5858 static int rtw_p2p_set_sa(struct net_device *dev,
5859                           struct iw_request_info *info,
5860                           union iwreq_data *wrqu, char *extra)
5861 {
5862
5863         int ret = 0;
5864         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5865         struct iw_point                 *pdata = &wrqu->data;
5866         struct wifidirect_info          *pwdinfo = &(padapter->wdinfo);
5867         struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
5868
5869         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5870
5871         if (0) {
5872                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5873                 return ret;
5874         } else {
5875                 if (extra[0] == '0')    /*      Disable the session available. */
5876                         pwdinfo->session_available = _FALSE;
5877                 else if (extra[0] == '1')       /*      Enable the session available. */
5878                         pwdinfo->session_available = _TRUE;
5879                 else
5880                         pwdinfo->session_available = _FALSE;
5881         }
5882         printk("[%s] session available = %d\n", __FUNCTION__, pwdinfo->session_available);
5883
5884 exit:
5885
5886         return ret;
5887
5888 }
5889 #endif /* CONFIG_WFD */
5890
5891 static int rtw_p2p_prov_disc(struct net_device *dev,
5892                              struct iw_request_info *info,
5893                              union iwreq_data *wrqu, char *extra)
5894 {
5895         int ret = 0;
5896         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5897         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
5898         u8                                      peerMAC[ETH_ALEN] = { 0x00 };
5899         int                                     jj, kk;
5900         u8                                      peerMACStr[ETH_ALEN * 2] = { 0x00 };
5901         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
5902         _list                                   *plist, *phead;
5903         _queue                          *queue  = &(pmlmepriv->scanned_queue);
5904         struct  wlan_network    *pnetwork = NULL;
5905         uint                                    uintPeerChannel = 0;
5906         u8                                      attr_content[100] = { 0x00 }, _status = 0;
5907         u8 *p2pie;
5908         uint                                    p2pielen = 0, attr_contentlen = 0;
5909         _irqL                           irqL;
5910
5911         /*      Commented by Albert 20110301 */
5912         /*      The input data contains two informations. */
5913         /*      1. First information is the MAC address which wants to issue the provisioning discovery request frame. */
5914         /*      2. Second information is the WPS configuration method which wants to discovery */
5915         /*      Format: 00:E0:4C:00:00:05_display */
5916         /*      Format: 00:E0:4C:00:00:05_keypad */
5917         /*      Format: 00:E0:4C:00:00:05_pbc */
5918         /*      Format: 00:E0:4C:00:00:05_label */
5919
5920         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5921
5922         if (pwdinfo->p2p_state == P2P_STATE_NONE) {
5923                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5924                 return ret;
5925         } else {
5926 #ifdef CONFIG_INTEL_WIDI
5927                 if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
5928                         RTW_INFO("[%s] WiFi is under survey!\n", __FUNCTION__);
5929                         return ret;
5930                 }
5931 #endif /* CONFIG_INTEL_WIDI */
5932
5933                 /*      Reset the content of struct tx_provdisc_req_info excluded the wps_config_method_request. */
5934                 _rtw_memset(pwdinfo->tx_prov_disc_info.peerDevAddr, 0x00, ETH_ALEN);
5935                 _rtw_memset(pwdinfo->tx_prov_disc_info.peerIFAddr, 0x00, ETH_ALEN);
5936                 _rtw_memset(&pwdinfo->tx_prov_disc_info.ssid, 0x00, sizeof(NDIS_802_11_SSID));
5937                 pwdinfo->tx_prov_disc_info.peer_channel_num[0] = 0;
5938                 pwdinfo->tx_prov_disc_info.peer_channel_num[1] = 0;
5939                 pwdinfo->tx_prov_disc_info.benable = _FALSE;
5940         }
5941
5942         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
5943                 peerMAC[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5944
5945         if (_rtw_memcmp(&extra[18], "display", 7))
5946                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_DISPLYA;
5947         else if (_rtw_memcmp(&extra[18], "keypad", 7))
5948                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_KEYPAD;
5949         else if (_rtw_memcmp(&extra[18], "pbc", 3))
5950                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
5951         else if (_rtw_memcmp(&extra[18], "label", 5))
5952                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_LABEL;
5953         else {
5954                 RTW_INFO("[%s] Unknown WPS config methodn", __FUNCTION__);
5955                 return ret ;
5956         }
5957
5958         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5959
5960         phead = get_list_head(queue);
5961         plist = get_next(phead);
5962
5963         while (1) {
5964                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5965                         break;
5966
5967                 if (uintPeerChannel != 0)
5968                         break;
5969
5970                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5971
5972                 /*      Commented by Albert 2011/05/18 */
5973                 /*      Match the device address located in the P2P IE */
5974                 /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
5975
5976                 p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5977                 if (p2pie) {
5978                         while (p2pie) {
5979                                 /*      The P2P Device ID attribute is included in the Beacon frame. */
5980                                 /*      The P2P Device Info attribute is included in the probe response frame. */
5981
5982                                 if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
5983                                         /*      Handle the P2P Device ID attribute of Beacon first */
5984                                         if (_rtw_memcmp(attr_content, peerMAC, ETH_ALEN)) {
5985                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5986                                                 break;
5987                                         }
5988                                 } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
5989                                         /*      Handle the P2P Device Info attribute of probe response */
5990                                         if (_rtw_memcmp(attr_content, peerMAC, ETH_ALEN)) {
5991                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5992                                                 break;
5993                                         }
5994                                 }
5995
5996                                 /* Get the next P2P IE */
5997                                 p2pie = rtw_get_p2p_ie(p2pie + p2pielen, BSS_EX_TLV_IES_LEN(&pnetwork->network) - (p2pie + p2pielen - BSS_EX_TLV_IES(&pnetwork->network)), NULL, &p2pielen);
5998                         }
5999
6000                 }
6001
6002 #ifdef CONFIG_INTEL_WIDI
6003                 /* Some Intel WiDi source may not provide P2P IE, */
6004                 /* so we could only compare mac addr by 802.11 Source Address */
6005                 if (pmlmepriv->widi_state == INTEL_WIDI_STATE_WFD_CONNECTION
6006                     && uintPeerChannel == 0) {
6007                         if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
6008                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
6009                                 break;
6010                         }
6011                 }
6012 #endif /* CONFIG_INTEL_WIDI */
6013
6014                 plist = get_next(plist);
6015
6016         }
6017
6018         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
6019
6020         if (uintPeerChannel) {
6021 #ifdef CONFIG_WFD
6022                 if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
6023                         struct wifi_display_info *pwfd_info = pwdinfo->wfd_info;
6024                         u8 *wfd_ie;
6025                         uint wfd_ielen = 0;
6026
6027                         wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
6028                         if (wfd_ie) {
6029                                 u8 *wfd_devinfo;
6030                                 uint wfd_devlen;
6031
6032                                 RTW_INFO("[%s] Found WFD IE!\n", __FUNCTION__);
6033                                 wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
6034                                 if (wfd_devinfo) {
6035                                         u16     wfd_devinfo_field = 0;
6036
6037                                         /*      Commented by Albert 20120319 */
6038                                         /*      The first two bytes are the WFD device information field of WFD device information subelement. */
6039                                         /*      In big endian format. */
6040                                         wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
6041                                         if (wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL)
6042                                                 pwfd_info->peer_session_avail = _TRUE;
6043                                         else
6044                                                 pwfd_info->peer_session_avail = _FALSE;
6045                                 }
6046                         }
6047
6048                         if (_FALSE == pwfd_info->peer_session_avail) {
6049                                 RTW_INFO("[%s] WFD Session not avaiable!\n", __FUNCTION__);
6050                                 goto exit;
6051                         }
6052                 }
6053 #endif /* CONFIG_WFD */
6054
6055                 RTW_INFO("[%s] peer channel: %d!\n", __FUNCTION__, uintPeerChannel);
6056 #ifdef CONFIG_CONCURRENT_MODE
6057                 if (rtw_mi_check_status(padapter, MI_LINKED))
6058                         _cancel_timer_ex(&pwdinfo->ap_p2p_switch_timer);
6059 #endif /* CONFIG_CONCURRENT_MODE */
6060                 _rtw_memcpy(pwdinfo->tx_prov_disc_info.peerIFAddr, pnetwork->network.MacAddress, ETH_ALEN);
6061                 _rtw_memcpy(pwdinfo->tx_prov_disc_info.peerDevAddr, peerMAC, ETH_ALEN);
6062                 pwdinfo->tx_prov_disc_info.peer_channel_num[0] = (u16) uintPeerChannel;
6063                 pwdinfo->tx_prov_disc_info.benable = _TRUE;
6064                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
6065                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ);
6066
6067                 if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT))
6068                         _rtw_memcpy(&pwdinfo->tx_prov_disc_info.ssid, &pnetwork->network.Ssid, sizeof(NDIS_802_11_SSID));
6069                 else if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO)) {
6070                         _rtw_memcpy(pwdinfo->tx_prov_disc_info.ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN);
6071                         pwdinfo->tx_prov_disc_info.ssid.SsidLength = P2P_WILDCARD_SSID_LEN;
6072                 }
6073
6074 #ifdef CONFIG_CONCURRENT_MODE
6075                 if (rtw_mi_check_status(padapter, MI_LINKED)) {
6076                         u8 union_ch = rtw_mi_get_union_chan(padapter);
6077                         u8 union_bw = rtw_mi_get_union_bw(padapter);
6078                         u8 union_offset = rtw_mi_get_union_offset(padapter);
6079
6080                         /*      Have to enter the power saving with the AP */
6081                         set_channel_bwmode(padapter, union_ch, union_offset, union_bw);
6082
6083                         rtw_mi_buddy_issue_nulldata(padapter, NULL, 1, 3, 500);
6084                 } else
6085                         set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
6086 #else
6087                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
6088 #endif
6089
6090                 _set_timer(&pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT);
6091
6092 #ifdef CONFIG_CONCURRENT_MODE
6093                 if (rtw_mi_check_status(padapter, MI_LINKED))
6094                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_PROVISION_TIMEOUT);
6095                 else
6096                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT);
6097 #else
6098                 _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT);
6099 #endif /* CONFIG_CONCURRENT_MODE                 */
6100
6101         } else {
6102                 RTW_INFO("[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__);
6103 #ifdef CONFIG_INTEL_WIDI
6104                 _cancel_timer_ex(&pwdinfo->restore_p2p_state_timer);
6105                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
6106                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
6107                 rtw_free_network_queue(padapter, _TRUE);
6108                 _enter_critical_bh(&pmlmepriv->lock, &irqL);
6109                 rtw_sitesurvey_cmd(padapter, NULL, 0, NULL, 0);
6110                 _exit_critical_bh(&pmlmepriv->lock, &irqL);
6111 #endif /* CONFIG_INTEL_WIDI */
6112         }
6113 exit:
6114
6115         return ret;
6116
6117 }
6118
6119 /*      Added by Albert 20110328
6120  *      This function is used to inform the driver the user had specified the pin code value or pbc
6121  *      to application. */
6122
6123 static int rtw_p2p_got_wpsinfo(struct net_device *dev,
6124                                struct iw_request_info *info,
6125                                union iwreq_data *wrqu, char *extra)
6126 {
6127
6128         int ret = 0;
6129         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
6130         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
6131
6132
6133         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
6134         /*      Added by Albert 20110328 */
6135         /*      if the input data is P2P_NO_WPSINFO -> reset the wpsinfo */
6136         /*      if the input data is P2P_GOT_WPSINFO_PEER_DISPLAY_PIN -> the utility just input the PIN code got from the peer P2P device. */
6137         /*      if the input data is P2P_GOT_WPSINFO_SELF_DISPLAY_PIN -> the utility just got the PIN code from itself. */
6138         /*      if the input data is P2P_GOT_WPSINFO_PBC -> the utility just determine to use the PBC */
6139
6140         if (*extra == '0')
6141                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
6142         else if (*extra == '1')
6143                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PEER_DISPLAY_PIN;
6144         else if (*extra == '2')
6145                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_SELF_DISPLAY_PIN;
6146         else if (*extra == '3')
6147                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PBC;
6148         else
6149                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
6150
6151         return ret;
6152
6153 }
6154
6155 #endif /* CONFIG_P2P */
6156
6157 static int rtw_p2p_set(struct net_device *dev,
6158                        struct iw_request_info *info,
6159                        union iwreq_data *wrqu, char *extra)
6160 {
6161
6162         int ret = 0;
6163 #ifdef CONFIG_P2P
6164
6165         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6166         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
6167         struct iw_point *pdata = &wrqu->data;
6168         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
6169         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
6170
6171         RTW_INFO("[%s] extra = %s\n", __FUNCTION__, extra);
6172
6173         if (_rtw_memcmp(extra, "enable=", 7))
6174                 rtw_wext_p2p_enable(dev, info, wrqu, &extra[7]);
6175         else if (_rtw_memcmp(extra, "setDN=", 6)) {
6176                 wrqu->data.length -= 6;
6177                 rtw_p2p_setDN(dev, info, wrqu, &extra[6]);
6178         } else if (_rtw_memcmp(extra, "profilefound=", 13)) {
6179                 wrqu->data.length -= 13;
6180                 rtw_p2p_profilefound(dev, info, wrqu, &extra[13]);
6181         } else if (_rtw_memcmp(extra, "prov_disc=", 10)) {
6182                 wrqu->data.length -= 10;
6183                 rtw_p2p_prov_disc(dev, info, wrqu, &extra[10]);
6184         } else if (_rtw_memcmp(extra, "nego=", 5)) {
6185                 wrqu->data.length -= 5;
6186                 rtw_p2p_connect(dev, info, wrqu, &extra[5]);
6187         } else if (_rtw_memcmp(extra, "intent=", 7)) {
6188                 /*      Commented by Albert 2011/03/23 */
6189                 /*      The wrqu->data.length will include the null character */
6190                 /*      So, we will decrease 7 + 1 */
6191                 wrqu->data.length -= 8;
6192                 rtw_p2p_set_intent(dev, info, wrqu, &extra[7]);
6193         } else if (_rtw_memcmp(extra, "ssid=", 5)) {
6194                 wrqu->data.length -= 5;
6195                 rtw_p2p_set_go_nego_ssid(dev, info, wrqu, &extra[5]);
6196         } else if (_rtw_memcmp(extra, "got_wpsinfo=", 12)) {
6197                 wrqu->data.length -= 12;
6198                 rtw_p2p_got_wpsinfo(dev, info, wrqu, &extra[12]);
6199         } else if (_rtw_memcmp(extra, "listen_ch=", 10)) {
6200                 /*      Commented by Albert 2011/05/24 */
6201                 /*      The wrqu->data.length will include the null character */
6202                 /*      So, we will decrease (10 + 1)    */
6203                 wrqu->data.length -= 11;
6204                 rtw_p2p_set_listen_ch(dev, info, wrqu, &extra[10]);
6205         } else if (_rtw_memcmp(extra, "op_ch=", 6)) {
6206                 /*      Commented by Albert 2011/05/24 */
6207                 /*      The wrqu->data.length will include the null character */
6208                 /*      So, we will decrease (6 + 1)     */
6209                 wrqu->data.length -= 7;
6210                 rtw_p2p_set_op_ch(dev, info, wrqu, &extra[6]);
6211         } else if (_rtw_memcmp(extra, "invite=", 7)) {
6212                 wrqu->data.length -= 8;
6213                 rtw_p2p_invite_req(dev, info, wrqu, &extra[7]);
6214         } else if (_rtw_memcmp(extra, "persistent=", 11)) {
6215                 wrqu->data.length -= 11;
6216                 rtw_p2p_set_persistent(dev, info, wrqu, &extra[11]);
6217         } else if (_rtw_memcmp(extra, "uuid=", 5)) {
6218                 wrqu->data.length -= 5;
6219                 ret = rtw_p2p_set_wps_uuid(dev, info, wrqu, &extra[5]);
6220         }
6221
6222 #ifdef CONFIG_WFD
6223         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
6224                 if (_rtw_memcmp(extra, "sa=", 3)) {
6225                         /* sa: WFD Session Available information */
6226                         wrqu->data.length -= 3;
6227                         rtw_p2p_set_sa(dev, info, wrqu, &extra[3]);
6228                 } else if (_rtw_memcmp(extra, "pc=", 3)) {
6229                         /* pc: WFD Preferred Connection */
6230                         wrqu->data.length -= 3;
6231                         rtw_p2p_set_pc(dev, info, wrqu, &extra[3]);
6232                 } else if (_rtw_memcmp(extra, "wfd_type=", 9)) {
6233                         wrqu->data.length -= 9;
6234                         rtw_p2p_set_wfd_device_type(dev, info, wrqu, &extra[9]);
6235                 } else if (_rtw_memcmp(extra, "wfd_enable=", 11)) {
6236                         wrqu->data.length -= 11;
6237                         rtw_p2p_set_wfd_enable(dev, info, wrqu, &extra[11]);
6238                 } else if (_rtw_memcmp(extra, "driver_iface=", 13)) {
6239                         wrqu->data.length -= 13;
6240                         rtw_p2p_set_driver_iface(dev, info, wrqu, &extra[13]);
6241                 }
6242         }
6243 #endif /* CONFIG_WFD */
6244
6245 #endif /* CONFIG_P2P */
6246
6247         return ret;
6248
6249 }
6250
6251 static int rtw_p2p_get(struct net_device *dev,
6252                        struct iw_request_info *info,
6253                        union iwreq_data *wrqu, char *extra)
6254 {
6255
6256         int ret = 0;
6257
6258 #ifdef CONFIG_P2P
6259
6260         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6261         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
6262         struct iw_point *pdata = &wrqu->data;
6263         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
6264         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
6265
6266         if (padapter->bShowGetP2PState)
6267                 RTW_INFO("[%s] extra = %s\n", __FUNCTION__, (char *) wrqu->data.pointer);
6268
6269         if (_rtw_memcmp(wrqu->data.pointer, "status", 6))
6270                 rtw_p2p_get_status(dev, info, wrqu, extra);
6271         else if (_rtw_memcmp(wrqu->data.pointer, "role", 4))
6272                 rtw_p2p_get_role(dev, info, wrqu, extra);
6273         else if (_rtw_memcmp(wrqu->data.pointer, "peer_ifa", 8))
6274                 rtw_p2p_get_peer_ifaddr(dev, info, wrqu, extra);
6275         else if (_rtw_memcmp(wrqu->data.pointer, "req_cm", 6))
6276                 rtw_p2p_get_req_cm(dev, info, wrqu, extra);
6277         else if (_rtw_memcmp(wrqu->data.pointer, "peer_deva", 9)) {
6278                 /*      Get the P2P device address when receiving the provision discovery request frame. */
6279                 rtw_p2p_get_peer_devaddr(dev, info, wrqu, extra);
6280         } else if (_rtw_memcmp(wrqu->data.pointer, "group_id", 8))
6281                 rtw_p2p_get_groupid(dev, info, wrqu, extra);
6282         else if (_rtw_memcmp(wrqu->data.pointer, "inv_peer_deva", 13)) {
6283                 /*      Get the P2P device address when receiving the P2P Invitation request frame. */
6284                 rtw_p2p_get_peer_devaddr_by_invitation(dev, info, wrqu, extra);
6285         } else if (_rtw_memcmp(wrqu->data.pointer, "op_ch", 5))
6286                 rtw_p2p_get_op_ch(dev, info, wrqu, extra);
6287
6288 #ifdef CONFIG_WFD
6289         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
6290                 if (_rtw_memcmp(wrqu->data.pointer, "peer_port", 9))
6291                         rtw_p2p_get_peer_wfd_port(dev, info, wrqu, extra);
6292                 else if (_rtw_memcmp(wrqu->data.pointer, "wfd_sa", 6))
6293                         rtw_p2p_get_peer_wfd_session_available(dev, info, wrqu, extra);
6294                 else if (_rtw_memcmp(wrqu->data.pointer, "wfd_pc", 6))
6295                         rtw_p2p_get_peer_wfd_preferred_connection(dev, info, wrqu, extra);
6296         }
6297 #endif /* CONFIG_WFD */
6298
6299 #endif /* CONFIG_P2P */
6300
6301         return ret;
6302
6303 }
6304
6305 static int rtw_p2p_get2(struct net_device *dev,
6306                         struct iw_request_info *info,
6307                         union iwreq_data *wrqu, char *extra)
6308 {
6309
6310         int ret = 0;
6311
6312 #ifdef CONFIG_P2P
6313
6314         int length = wrqu->data.length;
6315         char *buffer = (u8 *)rtw_malloc(length);
6316
6317         if (buffer == NULL) {
6318                 ret = -ENOMEM;
6319                 goto bad;
6320         }
6321
6322         if (copy_from_user(buffer, wrqu->data.pointer, wrqu->data.length)) {
6323                 ret = -EFAULT;
6324                 goto bad;
6325         }
6326
6327         RTW_INFO("[%s] buffer = %s\n", __FUNCTION__, buffer);
6328
6329         if (_rtw_memcmp(buffer, "wpsCM=", 6))
6330                 ret = rtw_p2p_get_wps_configmethod(dev, info, wrqu, extra, &buffer[6]);
6331         else if (_rtw_memcmp(buffer, "devN=", 5))
6332                 ret = rtw_p2p_get_device_name(dev, info, wrqu, extra, &buffer[5]);
6333         else if (_rtw_memcmp(buffer, "dev_type=", 9))
6334                 ret = rtw_p2p_get_device_type(dev, info, wrqu, extra, &buffer[9]);
6335         else if (_rtw_memcmp(buffer, "go_devadd=", 10))
6336                 ret = rtw_p2p_get_go_device_address(dev, info, wrqu, extra, &buffer[10]);
6337         else if (_rtw_memcmp(buffer, "InvProc=", 8))
6338                 ret = rtw_p2p_get_invitation_procedure(dev, info, wrqu, extra, &buffer[8]);
6339         else {
6340                 snprintf(extra, sizeof("Command not found."), "Command not found.");
6341                 wrqu->data.length = strlen(extra);
6342         }
6343
6344 bad:
6345         if (buffer)
6346                 rtw_mfree(buffer, length);
6347
6348 #endif /* CONFIG_P2P */
6349
6350         return ret;
6351
6352 }
6353
6354 static int rtw_cta_test_start(struct net_device *dev,
6355                               struct iw_request_info *info,
6356                               union iwreq_data *wrqu, char *extra)
6357 {
6358         int ret = 0;
6359         _adapter        *padapter = (_adapter *)rtw_netdev_priv(dev);
6360         RTW_INFO("%s %s\n", __func__, extra);
6361         if (!strcmp(extra, "1"))
6362                 padapter->in_cta_test = 1;
6363         else
6364                 padapter->in_cta_test = 0;
6365
6366         if (padapter->in_cta_test) {
6367                 u32 v = rtw_read32(padapter, REG_RCR);
6368                 v &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN); /* | RCR_ADF */
6369                 rtw_write32(padapter, REG_RCR, v);
6370                 RTW_INFO("enable RCR_ADF\n");
6371         } else {
6372                 u32 v = rtw_read32(padapter, REG_RCR);
6373                 v |= RCR_CBSSID_DATA | RCR_CBSSID_BCN ;/* | RCR_ADF */
6374                 rtw_write32(padapter, REG_RCR, v);
6375                 RTW_INFO("disable RCR_ADF\n");
6376         }
6377         return ret;
6378 }
6379
6380
6381 extern int rtw_change_ifname(_adapter *padapter, const char *ifname);
6382 static int rtw_rereg_nd_name(struct net_device *dev,
6383                              struct iw_request_info *info,
6384                              union iwreq_data *wrqu, char *extra)
6385 {
6386         int ret = 0;
6387         _adapter *padapter = rtw_netdev_priv(dev);
6388         struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
6389         char new_ifname[IFNAMSIZ];
6390
6391         if (rereg_priv->old_ifname[0] == 0) {
6392                 char *reg_ifname;
6393 #ifdef CONFIG_CONCURRENT_MODE
6394                 if (padapter->isprimary)
6395                         reg_ifname = padapter->registrypriv.ifname;
6396                 else
6397 #endif
6398                         reg_ifname = padapter->registrypriv.if2name;
6399
6400                 strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
6401                 rereg_priv->old_ifname[IFNAMSIZ - 1] = 0;
6402         }
6403
6404         /* RTW_INFO("%s wrqu->data.length:%d\n", __FUNCTION__, wrqu->data.length); */
6405         if (wrqu->data.length > IFNAMSIZ)
6406                 return -EFAULT;
6407
6408         if (copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ))
6409                 return -EFAULT;
6410
6411         if (0 == strcmp(rereg_priv->old_ifname, new_ifname))
6412                 return ret;
6413
6414         RTW_INFO("%s new_ifname:%s\n", __FUNCTION__, new_ifname);
6415         ret = rtw_change_ifname(padapter, new_ifname);
6416         if (0 != ret)
6417                 goto exit;
6418
6419         if (_rtw_memcmp(rereg_priv->old_ifname, "disable%d", 9) == _TRUE) {
6420                 padapter->ledpriv.bRegUseLed = rereg_priv->old_bRegUseLed;
6421                 rtw_hal_sw_led_init(padapter);
6422                 /* rtw_ips_mode_req(&padapter->pwrctrlpriv, rereg_priv->old_ips_mode); */
6423         }
6424
6425         strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
6426         rereg_priv->old_ifname[IFNAMSIZ - 1] = 0;
6427
6428         if (_rtw_memcmp(new_ifname, "disable%d", 9) == _TRUE) {
6429
6430                 RTW_INFO("%s disable\n", __FUNCTION__);
6431                 /* free network queue for Android's timming issue */
6432                 rtw_free_network_queue(padapter, _TRUE);
6433
6434                 /* close led */
6435                 rtw_led_control(padapter, LED_CTL_POWER_OFF);
6436                 rereg_priv->old_bRegUseLed = padapter->ledpriv.bRegUseLed;
6437                 padapter->ledpriv.bRegUseLed = _FALSE;
6438                 rtw_hal_sw_led_deinit(padapter);
6439
6440                 /* the interface is being "disabled", we can do deeper IPS */
6441                 /* rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv); */
6442                 /* rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL); */
6443         }
6444 exit:
6445         return ret;
6446
6447 }
6448
6449 #ifdef CONFIG_IOL
6450 #include <rtw_iol.h>
6451 #endif
6452
6453 #ifdef DBG_CMD_QUEUE
6454 u8 dump_cmd_id = 0;
6455 #endif
6456 static int rtw_dbg_port(struct net_device *dev,
6457                         struct iw_request_info *info,
6458                         union iwreq_data *wrqu, char *extra)
6459 {
6460         _irqL irqL;
6461         int ret = 0;
6462         u8 major_cmd, minor_cmd;
6463         u16 arg;
6464         u32 extra_arg, *pdata, val32;
6465         struct sta_info *psta;
6466         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6467         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
6468         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
6469         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
6470         struct security_priv *psecuritypriv = &padapter->securitypriv;
6471         struct wlan_network *cur_network = &(pmlmepriv->cur_network);
6472         struct sta_priv *pstapriv = &padapter->stapriv;
6473
6474
6475         pdata = (u32 *)&wrqu->data;
6476
6477         val32 = *pdata;
6478         arg = (u16)(val32 & 0x0000ffff);
6479         major_cmd = (u8)(val32 >> 24);
6480         minor_cmd = (u8)((val32 >> 16) & 0x00ff);
6481
6482         extra_arg = *(pdata + 1);
6483
6484         switch (major_cmd) {
6485         case 0x70: /* read_reg */
6486                 switch (minor_cmd) {
6487                 case 1:
6488                         RTW_INFO("rtw_read8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
6489                         break;
6490                 case 2:
6491                         RTW_INFO("rtw_read16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
6492                         break;
6493                 case 4:
6494                         RTW_INFO("rtw_read32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
6495                         break;
6496                 }
6497                 break;
6498         case 0x71: /* write_reg */
6499                 switch (minor_cmd) {
6500                 case 1:
6501                         rtw_write8(padapter, arg, extra_arg);
6502                         RTW_INFO("rtw_write8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
6503                         break;
6504                 case 2:
6505                         rtw_write16(padapter, arg, extra_arg);
6506                         RTW_INFO("rtw_write16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
6507                         break;
6508                 case 4:
6509                         rtw_write32(padapter, arg, extra_arg);
6510                         RTW_INFO("rtw_write32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
6511                         break;
6512                 }
6513                 break;
6514         case 0x72: /* read_bb */
6515                 RTW_INFO("read_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
6516                 break;
6517         case 0x73: /* write_bb */
6518                 rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
6519                 RTW_INFO("write_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
6520                 break;
6521         case 0x74: /* read_rf */
6522                 RTW_INFO("read RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
6523                 break;
6524         case 0x75: /* write_rf */
6525                 rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
6526                 RTW_INFO("write RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
6527                 break;
6528
6529         case 0x76:
6530                 switch (minor_cmd) {
6531                 case 0x00: /* normal mode, */
6532                         padapter->recvpriv.is_signal_dbg = 0;
6533                         break;
6534                 case 0x01: /* dbg mode */
6535                         padapter->recvpriv.is_signal_dbg = 1;
6536                         extra_arg = extra_arg > 100 ? 100 : extra_arg;
6537                         padapter->recvpriv.signal_strength_dbg = extra_arg;
6538                         break;
6539                 }
6540                 break;
6541         case 0x78: /* IOL test */
6542                 switch (minor_cmd) {
6543                 #ifdef CONFIG_IOL
6544                 case 0x04: { /* LLT table initialization test */
6545                         u8 page_boundary = 0xf9;
6546                         {
6547                                 struct xmit_frame       *xmit_frame;
6548
6549                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6550                                 if (xmit_frame == NULL) {
6551                                         ret = -ENOMEM;
6552                                         break;
6553                                 }
6554
6555                                 rtw_IOL_append_LLT_cmd(xmit_frame, page_boundary);
6556
6557
6558                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 500, 0))
6559                                         ret = -EPERM;
6560                         }
6561                 }
6562                         break;
6563                 case 0x05: { /* blink LED test */
6564                         u16 reg = 0x4c;
6565                         u32 blink_num = 50;
6566                         u32 blink_delay_ms = 200;
6567                         int i;
6568
6569                         {
6570                                 struct xmit_frame       *xmit_frame;
6571
6572                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6573                                 if (xmit_frame == NULL) {
6574                                         ret = -ENOMEM;
6575                                         break;
6576                                 }
6577
6578                                 for (i = 0; i < blink_num; i++) {
6579                                         #ifdef CONFIG_IOL_NEW_GENERATION
6580                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00, 0xff);
6581                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6582                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08, 0xff);
6583                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6584                                         #else
6585                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00);
6586                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6587                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08);
6588                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6589                                         #endif
6590                                 }
6591                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, (blink_delay_ms * blink_num * 2) + 200, 0))
6592                                         ret = -EPERM;
6593                         }
6594                 }
6595                         break;
6596
6597                 case 0x06: { /* continuous wirte byte test */
6598                         u16 reg = arg;
6599                         u16 start_value = 0;
6600                         u32 write_num = extra_arg;
6601                         int i;
6602                         u8 final;
6603
6604                         {
6605                                 struct xmit_frame       *xmit_frame;
6606
6607                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6608                                 if (xmit_frame == NULL) {
6609                                         ret = -ENOMEM;
6610                                         break;
6611                                 }
6612
6613                                 for (i = 0; i < write_num; i++) {
6614                                         #ifdef CONFIG_IOL_NEW_GENERATION
6615                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, i + start_value, 0xFF);
6616                                         #else
6617                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, i + start_value);
6618                                         #endif
6619                                 }
6620                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000, 0))
6621                                         ret = -EPERM;
6622                         }
6623
6624                         final = rtw_read8(padapter, reg);
6625                         if (start_value + write_num - 1 == final)
6626                                 RTW_INFO("continuous IOL_CMD_WB_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
6627                         else
6628                                 RTW_INFO("continuous IOL_CMD_WB_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
6629                 }
6630                         break;
6631
6632                 case 0x07: { /* continuous wirte word test */
6633                         u16 reg = arg;
6634                         u16 start_value = 200;
6635                         u32 write_num = extra_arg;
6636
6637                         int i;
6638                         u16 final;
6639
6640                         {
6641                                 struct xmit_frame       *xmit_frame;
6642
6643                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6644                                 if (xmit_frame == NULL) {
6645                                         ret = -ENOMEM;
6646                                         break;
6647                                 }
6648
6649                                 for (i = 0; i < write_num; i++) {
6650                                         #ifdef CONFIG_IOL_NEW_GENERATION
6651                                         rtw_IOL_append_WW_cmd(xmit_frame, reg, i + start_value, 0xFFFF);
6652                                         #else
6653                                         rtw_IOL_append_WW_cmd(xmit_frame, reg, i + start_value);
6654                                         #endif
6655                                 }
6656                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000, 0))
6657                                         ret = -EPERM;
6658                         }
6659
6660                         final = rtw_read16(padapter, reg);
6661                         if (start_value + write_num - 1 == final)
6662                                 RTW_INFO("continuous IOL_CMD_WW_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
6663                         else
6664                                 RTW_INFO("continuous IOL_CMD_WW_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
6665                 }
6666                         break;
6667
6668                 case 0x08: { /* continuous wirte dword test */
6669                         u16 reg = arg;
6670                         u32 start_value = 0x110000c7;
6671                         u32 write_num = extra_arg;
6672
6673                         int i;
6674                         u32 final;
6675
6676                         {
6677                                 struct xmit_frame       *xmit_frame;
6678
6679                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6680                                 if (xmit_frame == NULL) {
6681                                         ret = -ENOMEM;
6682                                         break;
6683                                 }
6684
6685                                 for (i = 0; i < write_num; i++) {
6686                                         #ifdef CONFIG_IOL_NEW_GENERATION
6687                                         rtw_IOL_append_WD_cmd(xmit_frame, reg, i + start_value, 0xFFFFFFFF);
6688                                         #else
6689                                         rtw_IOL_append_WD_cmd(xmit_frame, reg, i + start_value);
6690                                         #endif
6691                                 }
6692                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000, 0))
6693                                         ret = -EPERM;
6694
6695                         }
6696
6697                         final = rtw_read32(padapter, reg);
6698                         if (start_value + write_num - 1 == final)
6699                                 RTW_INFO("continuous IOL_CMD_WD_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
6700                         else
6701                                 RTW_INFO("continuous IOL_CMD_WD_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
6702                 }
6703                         break;
6704                 #endif /* CONFIG_IOL */
6705                 }
6706                 break;
6707         case 0x79: {
6708                 /*
6709                 * dbg 0x79000000 [value], set RESP_TXAGC to + value, value:0~15
6710                 * dbg 0x79010000 [value], set RESP_TXAGC to - value, value:0~15
6711                 */
6712                 u8 value =  extra_arg & 0x0f;
6713                 u8 sign = minor_cmd;
6714                 u16 write_value = 0;
6715
6716                 RTW_INFO("%s set RESP_TXAGC to %s %u\n", __func__, sign ? "minus" : "plus", value);
6717
6718                 if (sign)
6719                         value = value | 0x10;
6720
6721                 write_value = value | (value << 5);
6722                 rtw_write16(padapter, 0x6d9, write_value);
6723         }
6724                 break;
6725         case 0x7a:
6726                 receive_disconnect(padapter, pmlmeinfo->network.MacAddress
6727                                    , WLAN_REASON_EXPIRATION_CHK, _FALSE);
6728                 break;
6729         case 0x7F:
6730                 switch (minor_cmd) {
6731                 case 0x0:
6732                         RTW_INFO("fwstate=0x%x\n", get_fwstate(pmlmepriv));
6733                         break;
6734                 case 0x01:
6735                         RTW_INFO("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",
6736                                 psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
6737                                 psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
6738                         break;
6739                 case 0x02:
6740                         RTW_INFO("pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
6741                         RTW_INFO("DrvBcnEarly=%d\n", pmlmeext->DrvBcnEarly);
6742                         RTW_INFO("DrvBcnTimeOut=%d\n", pmlmeext->DrvBcnTimeOut);
6743                         break;
6744                 case 0x03:
6745                         RTW_INFO("qos_option=%d\n", pmlmepriv->qospriv.qos_option);
6746 #ifdef CONFIG_80211N_HT
6747                         RTW_INFO("ht_option=%d\n", pmlmepriv->htpriv.ht_option);
6748 #endif /* CONFIG_80211N_HT */
6749                         break;
6750                 case 0x04:
6751                         RTW_INFO("cur_ch=%d\n", pmlmeext->cur_channel);
6752                         RTW_INFO("cur_bw=%d\n", pmlmeext->cur_bwmode);
6753                         RTW_INFO("cur_ch_off=%d\n", pmlmeext->cur_ch_offset);
6754
6755                         RTW_INFO("oper_ch=%d\n", rtw_get_oper_ch(padapter));
6756                         RTW_INFO("oper_bw=%d\n", rtw_get_oper_bw(padapter));
6757                         RTW_INFO("oper_ch_offet=%d\n", rtw_get_oper_choffset(padapter));
6758
6759                         break;
6760                 case 0x05:
6761                         psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
6762                         if (psta) {
6763                                 RTW_INFO("SSID=%s\n", cur_network->network.Ssid.Ssid);
6764                                 RTW_INFO("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
6765                                 RTW_INFO("cur_channel=%d, cur_bwmode=%d, cur_ch_offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
6766                                 RTW_INFO("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
6767                                 RTW_INFO("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
6768 #ifdef CONFIG_80211N_HT
6769                                 RTW_INFO("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
6770                                 RTW_INFO("bwmode=%d, ch_offset=%d, sgi_20m=%d,sgi_40m=%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
6771                                 RTW_INFO("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
6772                                 RTW_INFO("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
6773 #endif /* CONFIG_80211N_HT */
6774
6775                                 sta_rx_reorder_ctl_dump(RTW_DBGDUMP, psta);
6776                         } else
6777                                 RTW_INFO("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
6778                         break;
6779                 case 0x06: {
6780                 }
6781                         break;
6782                 case 0x07:
6783                         RTW_INFO("bSurpriseRemoved=%s, bDriverStopped=%s\n"
6784                                 , rtw_is_surprise_removed(padapter) ? "True" : "False"
6785                                 , rtw_is_drv_stopped(padapter) ? "True" : "False");
6786                         break;
6787                 case 0x08: {
6788                         struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
6789                         struct recv_priv  *precvpriv = &padapter->recvpriv;
6790
6791                         RTW_INFO("free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d"
6792                                 ", free_xmit_extbuf_cnt=%d, free_xframe_ext_cnt=%d"
6793                                  ", free_recvframe_cnt=%d\n",
6794                                 pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,
6795                                 pxmitpriv->free_xmit_extbuf_cnt, pxmitpriv->free_xframe_ext_cnt,
6796                                  precvpriv->free_recvframe_cnt);
6797 #ifdef CONFIG_USB_HCI
6798                         RTW_INFO("rx_urb_pending_cn=%d\n", ATOMIC_READ(&(precvpriv->rx_pending_cnt)));
6799 #endif
6800                 }
6801                         break;
6802                 case 0x09: {
6803                         int i;
6804                         _list   *plist, *phead;
6805
6806 #ifdef CONFIG_AP_MODE
6807                         RTW_INFO("sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
6808 #endif
6809                         _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
6810
6811                         for (i = 0; i < NUM_STA; i++) {
6812                                 phead = &(pstapriv->sta_hash[i]);
6813                                 plist = get_next(phead);
6814
6815                                 while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
6816                                         psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
6817
6818                                         plist = get_next(plist);
6819
6820                                         if (extra_arg == psta->aid) {
6821                                                 RTW_INFO("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
6822                                                 RTW_INFO("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
6823                                                 RTW_INFO("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
6824 #ifdef CONFIG_80211N_HT
6825                                                 RTW_INFO("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
6826                                                 RTW_INFO("bwmode=%d, ch_offset=%d, sgi_20m=%d,sgi_40m=%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m,
6827                                                         psta->htpriv.sgi_40m);
6828                                                 RTW_INFO("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
6829                                                 RTW_INFO("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
6830 #endif /* CONFIG_80211N_HT */
6831
6832 #ifdef CONFIG_AP_MODE
6833                                                 RTW_INFO("capability=0x%x\n", psta->capability);
6834                                                 RTW_INFO("flags=0x%x\n", psta->flags);
6835                                                 RTW_INFO("wpa_psk=0x%x\n", psta->wpa_psk);
6836                                                 RTW_INFO("wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
6837                                                 RTW_INFO("wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
6838                                                 RTW_INFO("qos_info=0x%x\n", psta->qos_info);
6839 #endif
6840                                                 RTW_INFO("dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
6841
6842                                                 sta_rx_reorder_ctl_dump(RTW_DBGDUMP, psta);
6843                                         }
6844
6845                                 }
6846                         }
6847
6848                         _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
6849
6850                 }
6851                         break;
6852
6853                 case 0x0b: { /* Enable=1, Disable=0 driver control vrtl_carrier_sense. */
6854                         /* u8 driver_vcs_en; */ /* Enable=1, Disable=0 driver control vrtl_carrier_sense. */
6855                         /* u8 driver_vcs_type; */ /* force 0:disable VCS, 1:RTS-CTS, 2:CTS-to-self when vcs_en=1. */
6856
6857                         if (arg == 0) {
6858                                 RTW_INFO("disable driver ctrl vcs\n");
6859                                 padapter->driver_vcs_en = 0;
6860                         } else if (arg == 1) {
6861                                 RTW_INFO("enable driver ctrl vcs = %d\n", extra_arg);
6862                                 padapter->driver_vcs_en = 1;
6863
6864                                 if (extra_arg > 2)
6865                                         padapter->driver_vcs_type = 1;
6866                                 else
6867                                         padapter->driver_vcs_type = extra_arg;
6868                         }
6869                 }
6870                         break;
6871                 case 0x0c: { /* dump rx/tx packet */
6872                         if (arg == 0) {
6873                                 RTW_INFO("dump rx packet (%d)\n", extra_arg);
6874                                 /* pHalData->bDumpRxPkt =extra_arg;                                              */
6875                                 rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
6876                         } else if (arg == 1) {
6877                                 RTW_INFO("dump tx packet (%d)\n", extra_arg);
6878                                 rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_TXPKT, &(extra_arg));
6879                         }
6880                 }
6881                         break;
6882                 case 0x0e: {
6883                         if (arg == 0) {
6884                                 RTW_INFO("disable driver ctrl rx_ampdu_factor\n");
6885                                 padapter->driver_rx_ampdu_factor = 0xFF;
6886                         } else if (arg == 1) {
6887
6888                                 RTW_INFO("enable driver ctrl rx_ampdu_factor = %d\n", extra_arg);
6889
6890                                 if (extra_arg > 0x03)
6891                                         padapter->driver_rx_ampdu_factor = 0xFF;
6892                                 else
6893                                         padapter->driver_rx_ampdu_factor = extra_arg;
6894                         }
6895                 }
6896                         break;
6897                 #ifdef DBG_CONFIG_ERROR_DETECT
6898                 case 0x0f: {
6899                         if (extra_arg == 0) {
6900                                 RTW_INFO("###### silent reset test.......#####\n");
6901                                 rtw_hal_sreset_reset(padapter);
6902                         } else {
6903                                 HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
6904                                 struct sreset_priv *psrtpriv = &pHalData->srestpriv;
6905                                 psrtpriv->dbg_trigger_point = extra_arg;
6906                         }
6907
6908                 }
6909                         break;
6910                 case 0x15: {
6911                         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
6912                         RTW_INFO("==>silent resete cnts:%d\n", pwrpriv->ips_enter_cnts);
6913                 }
6914                         break;
6915
6916                 #endif
6917
6918                 case 0x10: /* driver version display */
6919                         dump_drv_version(RTW_DBGDUMP);
6920                         break;
6921                 case 0x11: { /* dump linked status */
6922                         int pre_mode;
6923                         pre_mode = padapter->bLinkInfoDump;
6924                         /* linked_info_dump(padapter,extra_arg); */
6925                         if (extra_arg == 1 || (extra_arg == 0 && pre_mode == 1)) /* not consider pwr_saving 0: */
6926                                 padapter->bLinkInfoDump = extra_arg;
6927
6928                         else if ((extra_arg == 2) || (extra_arg == 0 && pre_mode == 2)) { /* consider power_saving */
6929                                 /* RTW_INFO("linked_info_dump =%s\n", (padapter->bLinkInfoDump)?"enable":"disable") */
6930                                 linked_info_dump(padapter, extra_arg);
6931                         }
6932
6933
6934
6935                 }
6936                         break;
6937 #ifdef CONFIG_80211N_HT
6938                 case 0x12: { /* set rx_stbc */
6939                         struct registry_priv    *pregpriv = &padapter->registrypriv;
6940                         /* 0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g */
6941                         /* default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ */
6942                         if (pregpriv && (extra_arg == 0 || extra_arg == 1 || extra_arg == 2 || extra_arg == 3)) {
6943                                 pregpriv->rx_stbc = extra_arg;
6944                                 RTW_INFO("set rx_stbc=%d\n", pregpriv->rx_stbc);
6945                         } else
6946                                 RTW_INFO("get rx_stbc=%d\n", pregpriv->rx_stbc);
6947
6948                 }
6949                         break;
6950                 case 0x13: { /* set ampdu_enable */
6951                         struct registry_priv    *pregpriv = &padapter->registrypriv;
6952                         /* 0: disable, 0x1:enable */
6953                         if (pregpriv && extra_arg < 2) {
6954                                 pregpriv->ampdu_enable = extra_arg;
6955                                 RTW_INFO("set ampdu_enable=%d\n", pregpriv->ampdu_enable);
6956                         } else
6957                                 RTW_INFO("get ampdu_enable=%d\n", pregpriv->ampdu_enable);
6958
6959                 }
6960                         break;
6961 #endif
6962                 case 0x14: { /* get wifi_spec */
6963                         struct registry_priv    *pregpriv = &padapter->registrypriv;
6964                         RTW_INFO("get wifi_spec=%d\n", pregpriv->wifi_spec);
6965
6966                 }
6967                         break;
6968                 case 0x16: {
6969                         if (arg == 0xff)
6970                                 rtw_odm_dbg_comp_msg(RTW_DBGDUMP, padapter);
6971                         else {
6972                                 u64 dbg_comp = (u64)extra_arg;
6973                                 rtw_odm_dbg_comp_set(padapter, dbg_comp);
6974                         }
6975                 }
6976                         break;
6977 #ifdef DBG_FIXED_CHAN
6978                 case 0x17: {
6979                         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
6980                         printk("===>  Fixed channel to %d\n", extra_arg);
6981                         pmlmeext->fixed_chan = extra_arg;
6982
6983                 }
6984                         break;
6985 #endif
6986 #ifdef CONFIG_80211N_HT
6987                 case 0x19: {
6988                         struct registry_priv    *pregistrypriv = &padapter->registrypriv;
6989                         /* extra_arg : */
6990                         /* BIT0: Enable VHT LDPC Rx, BIT1: Enable VHT LDPC Tx, */
6991                         /* BIT4: Enable HT LDPC Rx, BIT5: Enable HT LDPC Tx */
6992                         if (arg == 0) {
6993                                 RTW_INFO("driver disable LDPC\n");
6994                                 pregistrypriv->ldpc_cap = 0x00;
6995                         } else if (arg == 1) {
6996                                 RTW_INFO("driver set LDPC cap = 0x%x\n", extra_arg);
6997                                 pregistrypriv->ldpc_cap = (u8)(extra_arg & 0x33);
6998                         }
6999                 }
7000                         break;
7001                 case 0x1a: {
7002                         struct registry_priv    *pregistrypriv = &padapter->registrypriv;
7003                         /* extra_arg : */
7004                         /* BIT0: Enable VHT STBC Rx, BIT1: Enable VHT STBC Tx, */
7005                         /* BIT4: Enable HT STBC Rx, BIT5: Enable HT STBC Tx */
7006                         if (arg == 0) {
7007                                 RTW_INFO("driver disable STBC\n");
7008                                 pregistrypriv->stbc_cap = 0x00;
7009                         } else if (arg == 1) {
7010                                 RTW_INFO("driver set STBC cap = 0x%x\n", extra_arg);
7011                                 pregistrypriv->stbc_cap = (u8)(extra_arg & 0x33);
7012                         }
7013                 }
7014                         break;
7015 #endif /* CONFIG_80211N_HT */
7016                 case 0x1b: {
7017                         struct registry_priv    *pregistrypriv = &padapter->registrypriv;
7018
7019                         if (arg == 0) {
7020                                 RTW_INFO("disable driver ctrl max_rx_rate, reset to default_rate_set\n");
7021                                 init_mlme_default_rate_set(padapter);
7022 #ifdef CONFIG_80211N_HT
7023                                 pregistrypriv->ht_enable = (u8)rtw_ht_enable;
7024 #endif /* CONFIG_80211N_HT */
7025                         } else if (arg == 1) {
7026
7027                                 int i;
7028                                 u8 max_rx_rate;
7029
7030                                 RTW_INFO("enable driver ctrl max_rx_rate = 0x%x\n", extra_arg);
7031
7032                                 max_rx_rate = (u8)extra_arg;
7033
7034                                 if (max_rx_rate < 0xc) { /* max_rx_rate < MSC0->B or G -> disable HT */
7035 #ifdef CONFIG_80211N_HT
7036                                         pregistrypriv->ht_enable = 0;
7037 #endif /* CONFIG_80211N_HT */
7038                                         for (i = 0; i < NumRates; i++) {
7039                                                 if (pmlmeext->datarate[i] > max_rx_rate)
7040                                                         pmlmeext->datarate[i] = 0xff;
7041                                         }
7042
7043                                 }
7044 #ifdef CONFIG_80211N_HT
7045                                 else if (max_rx_rate < 0x1c) { /* mcs0~mcs15 */
7046                                         u32 mcs_bitmap = 0x0;
7047
7048                                         for (i = 0; i < ((max_rx_rate + 1) - 0xc); i++)
7049                                                 mcs_bitmap |= BIT(i);
7050
7051                                         set_mcs_rate_by_mask(pmlmeext->default_supported_mcs_set, mcs_bitmap);
7052                                 }
7053 #endif /* CONFIG_80211N_HT                                                       */
7054                         }
7055                 }
7056                         break;
7057                 case 0x1c: { /* enable/disable driver control AMPDU Density for peer sta's rx */
7058                         if (arg == 0) {
7059                                 RTW_INFO("disable driver ctrl ampdu density\n");
7060                                 padapter->driver_ampdu_spacing = 0xFF;
7061                         } else if (arg == 1) {
7062
7063                                 RTW_INFO("enable driver ctrl ampdu density = %d\n", extra_arg);
7064
7065                                 if (extra_arg > 0x07)
7066                                         padapter->driver_ampdu_spacing = 0xFF;
7067                                 else
7068                                         padapter->driver_ampdu_spacing = extra_arg;
7069                         }
7070                 }
7071                         break;
7072 #ifdef CONFIG_BACKGROUND_NOISE_MONITOR
7073                 case 0x1e: {
7074                         HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
7075                         PDM_ODM_T pDM_Odm = &pHalData->odmpriv;
7076                         u8 chan = rtw_get_oper_ch(padapter);
7077                         RTW_INFO("===========================================\n");
7078                         ODM_InbandNoise_Monitor(pDM_Odm, _TRUE, 0x1e, 100);
7079                         RTW_INFO("channel(%d),noise_a = %d, noise_b = %d , noise_all:%d\n",
7080                                 chan, pDM_Odm->noise_level.noise[ODM_RF_PATH_A],
7081                                 pDM_Odm->noise_level.noise[ODM_RF_PATH_B],
7082                                  pDM_Odm->noise_level.noise_all);
7083                         RTW_INFO("===========================================\n");
7084
7085                 }
7086                         break;
7087 #endif
7088
7089
7090 #if defined(CONFIG_SDIO_HCI) && defined(CONFIG_SDIO_INDIRECT_ACCESS) && defined(DBG_SDIO_INDIRECT_ACCESS)
7091                 case 0x1f:
7092                         {
7093                                 int i, j = 0, test_cnts = 0;
7094                                 static u8 test_code = 0x5A;
7095                                 static u32 data_misatch_cnt = 0, d_acc_err_cnt = 0;
7096
7097                                 u32 d_data, i_data;
7098                                 u32 imr;
7099
7100                                 test_cnts = extra_arg;
7101                                 for (i = 0; i < test_cnts; i++) {
7102                                         if (RTW_CANNOT_IO(padapter))
7103                                                 break;
7104
7105                                         rtw_write8(padapter, 0x07, test_code);
7106
7107                                         d_data = rtw_read32(padapter, 0x04);
7108                                         imr =  rtw_read32(padapter, 0x10250014);
7109                                         rtw_write32(padapter, 0x10250014, 0);
7110                                         rtw_msleep_os(50);
7111
7112                                         i_data = rtw_sd_iread32(padapter, 0x04);
7113
7114                                         rtw_write32(padapter, 0x10250014, imr);
7115
7116                                         if (d_data != i_data) {
7117                                                 data_misatch_cnt++;
7118                                                 RTW_ERR("d_data :0x%08x, i_data : 0x%08x\n", d_data, i_data);
7119                                         }
7120
7121                                         if (test_code != (i_data >> 24)) {
7122                                                 d_acc_err_cnt++;
7123                                                 rtw_write8(padapter, 0x07, 0xAA);
7124                                                 RTW_ERR("test_code :0x%02x, i_data : 0x%08x\n", test_code, i_data);
7125                                         }
7126                                         if ((j++) == 100) {
7127                                                 rtw_msleep_os(2000);
7128                                                 RTW_INFO(" Indirect access testing..........%d/%d\n", i, test_cnts);
7129                                                 j = 0;
7130                                         }
7131
7132                                         test_code = ~test_code;
7133                                         rtw_msleep_os(50);
7134                                 }
7135                                 RTW_INFO("========Indirect access test=========\n");
7136                                 RTW_INFO(" test_cnts = %d\n", test_cnts);
7137                                 RTW_INFO(" direct & indirect read32 data missatch cnts = %d\n", data_misatch_cnt);
7138                                 RTW_INFO(" indirect rdata is not equal to wdata cnts = %d\n", d_acc_err_cnt);
7139                                 RTW_INFO("========Indirect access test=========\n\n");
7140                                 data_misatch_cnt = d_acc_err_cnt = 0;
7141
7142                         }
7143                         break;
7144 #endif
7145
7146                 case 0x23: {
7147                         RTW_INFO("turn %s the bNotifyChannelChange Variable\n", (extra_arg == 1) ? "on" : "off");
7148                         padapter->bNotifyChannelChange = extra_arg;
7149                         break;
7150                 }
7151                 case 0x24: {
7152 #ifdef CONFIG_P2P
7153                         RTW_INFO("turn %s the bShowGetP2PState Variable\n", (extra_arg == 1) ? "on" : "off");
7154                         padapter->bShowGetP2PState = extra_arg;
7155 #endif /* CONFIG_P2P */
7156                         break;
7157                 }
7158 #ifdef CONFIG_GPIO_API
7159                 case 0x25: { /* Get GPIO register */
7160                         /*
7161                         * dbg 0x7f250000 [gpio_num], Get gpio value, gpio_num:0~7
7162                         */
7163
7164                         u8 value;
7165                         RTW_INFO("Read GPIO Value  extra_arg = %d\n", extra_arg);
7166                         value = rtw_hal_get_gpio(padapter, extra_arg);
7167                         RTW_INFO("Read GPIO Value = %d\n", value);
7168                         break;
7169                 }
7170                 case 0x26: { /* Set GPIO direction */
7171
7172                         /* dbg 0x7f26000x [y], Set gpio direction,
7173                         * x: gpio_num,4~7  y: indicate direction, 0~1
7174                         */
7175
7176                         int value;
7177                         RTW_INFO("Set GPIO Direction! arg = %d ,extra_arg=%d\n", arg , extra_arg);
7178                         value = rtw_hal_config_gpio(padapter, arg, extra_arg);
7179                         RTW_INFO("Set GPIO Direction %s\n", (value == -1) ? "Fail!!!" : "Success");
7180                         break;
7181                 }
7182                 case 0x27: { /* Set GPIO output direction value */
7183                         /*
7184                         * dbg 0x7f27000x [y], Set gpio output direction value,
7185                         * x: gpio_num,4~7  y: indicate direction, 0~1
7186                         */
7187
7188                         int value;
7189                         RTW_INFO("Set GPIO Value! arg = %d ,extra_arg=%d\n", arg , extra_arg);
7190                         value = rtw_hal_set_gpio_output_value(padapter, arg, extra_arg);
7191                         RTW_INFO("Set GPIO Value %s\n", (value == -1) ? "Fail!!!" : "Success");
7192                         break;
7193                 }
7194 #endif
7195 #ifdef DBG_CMD_QUEUE
7196                 case 0x28: {
7197                         dump_cmd_id = extra_arg;
7198                         RTW_INFO("dump_cmd_id:%d\n", dump_cmd_id);
7199                 }
7200                         break;
7201 #endif /* DBG_CMD_QUEUE */
7202                 case 0xaa: {
7203                         if ((extra_arg & 0x7F) > 0x3F)
7204                                 extra_arg = 0xFF;
7205                         RTW_INFO("chang data rate to :0x%02x\n", extra_arg);
7206                         padapter->fix_rate = extra_arg;
7207                 }
7208                         break;
7209                 case 0xdd: { /* registers dump , 0 for mac reg,1 for bb reg, 2 for rf reg */
7210                         if (extra_arg == 0)
7211                                 mac_reg_dump(RTW_DBGDUMP, padapter);
7212                         else if (extra_arg == 1)
7213                                 bb_reg_dump(RTW_DBGDUMP, padapter);
7214                         else if (extra_arg == 2)
7215                                 rf_reg_dump(RTW_DBGDUMP, padapter);
7216                 }
7217                         break;
7218
7219                 case 0xee: {
7220                         RTW_INFO(" === please control /proc  to trun on/off PHYDM func ===\n");
7221                 }
7222                         break;
7223
7224                 case 0xfd:
7225                         rtw_write8(padapter, 0xc50, arg);
7226                         RTW_INFO("wr(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
7227                         rtw_write8(padapter, 0xc58, arg);
7228                         RTW_INFO("wr(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
7229                         break;
7230                 case 0xfe:
7231                         RTW_INFO("rd(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
7232                         RTW_INFO("rd(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
7233                         break;
7234                 case 0xff: {
7235                         RTW_INFO("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
7236                         RTW_INFO("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
7237                         RTW_INFO("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
7238                         RTW_INFO("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
7239                         RTW_INFO("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
7240
7241                         RTW_INFO("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
7242
7243
7244                         RTW_INFO("\n");
7245
7246                         RTW_INFO("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
7247                         RTW_INFO("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
7248
7249                         RTW_INFO("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
7250
7251                         RTW_INFO("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
7252
7253                         RTW_INFO("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
7254                         RTW_INFO("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
7255
7256                         RTW_INFO("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
7257                         RTW_INFO("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
7258                         RTW_INFO("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
7259                         RTW_INFO("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
7260                 }
7261                         break;
7262                 }
7263                 break;
7264         default:
7265                 RTW_INFO("error dbg cmd!\n");
7266                 break;
7267         }
7268
7269
7270         return ret;
7271
7272 }
7273
7274 static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
7275 {
7276         uint ret = 0;
7277         u32 flags;
7278         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7279
7280         switch (name) {
7281         case IEEE_PARAM_WPA_ENABLED:
7282
7283                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; /* 802.1x */
7284
7285                 /* ret = ieee80211_wpa_enable(ieee, value); */
7286
7287                 switch ((value) & 0xff) {
7288                 case 1: /* WPA */
7289                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; /* WPA_PSK */
7290                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
7291                         break;
7292                 case 2: /* WPA2 */
7293                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; /* WPA2_PSK */
7294                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
7295                         break;
7296                 }
7297
7298
7299                 break;
7300
7301         case IEEE_PARAM_TKIP_COUNTERMEASURES:
7302                 /* ieee->tkip_countermeasures=value; */
7303                 break;
7304
7305         case IEEE_PARAM_DROP_UNENCRYPTED: {
7306                 /* HACK:
7307                  *
7308                  * wpa_supplicant calls set_wpa_enabled when the driver
7309                  * is loaded and unloaded, regardless of if WPA is being
7310                  * used.  No other calls are made which can be used to
7311                  * determine if encryption will be used or not prior to
7312                  * association being expected.  If encryption is not being
7313                  * used, drop_unencrypted is set to false, else true -- we
7314                  * can use this to determine if the CAP_PRIVACY_ON bit should
7315                  * be set.
7316                  */
7317
7318 #if 0
7319                 struct ieee80211_security sec = {
7320                         .flags = SEC_ENABLED,
7321                         .enabled = value,
7322                 };
7323                 ieee->drop_unencrypted = value;
7324                 /* We only change SEC_LEVEL for open mode. Others
7325                  * are set by ipw_wpa_set_encryption.
7326                  */
7327                 if (!value) {
7328                         sec.flags |= SEC_LEVEL;
7329                         sec.level = SEC_LEVEL_0;
7330                 } else {
7331                         sec.flags |= SEC_LEVEL;
7332                         sec.level = SEC_LEVEL_1;
7333                 }
7334                 if (ieee->set_security)
7335                         ieee->set_security(ieee->dev, &sec);
7336 #endif
7337                 break;
7338
7339         }
7340         case IEEE_PARAM_PRIVACY_INVOKED:
7341
7342                 /* ieee->privacy_invoked=value; */
7343
7344                 break;
7345
7346         case IEEE_PARAM_AUTH_ALGS:
7347
7348                 ret = wpa_set_auth_algs(dev, value);
7349
7350                 break;
7351
7352         case IEEE_PARAM_IEEE_802_1X:
7353
7354                 /* ieee->ieee802_1x=value;               */
7355
7356                 break;
7357
7358         case IEEE_PARAM_WPAX_SELECT:
7359
7360                 /* added for WPA2 mixed mode */
7361                 /*RTW_WARN("------------------------>wpax value = %x\n", value);*/
7362                 /*
7363                 spin_lock_irqsave(&ieee->wpax_suitlist_lock,flags);
7364                 ieee->wpax_type_set = 1;
7365                 ieee->wpax_type_notify = value;
7366                 spin_unlock_irqrestore(&ieee->wpax_suitlist_lock,flags);
7367                 */
7368
7369                 break;
7370
7371         default:
7372
7373
7374
7375                 ret = -EOPNOTSUPP;
7376
7377
7378                 break;
7379
7380         }
7381
7382         return ret;
7383
7384 }
7385
7386 static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
7387 {
7388         int ret = 0;
7389         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7390
7391         switch (command) {
7392         case IEEE_MLME_STA_DEAUTH:
7393
7394                 if (!rtw_set_802_11_disassociate(padapter))
7395                         ret = -1;
7396
7397                 break;
7398
7399         case IEEE_MLME_STA_DISASSOC:
7400
7401                 if (!rtw_set_802_11_disassociate(padapter))
7402                         ret = -1;
7403
7404                 break;
7405
7406         default:
7407                 ret = -EOPNOTSUPP;
7408                 break;
7409         }
7410
7411         return ret;
7412
7413 }
7414
7415 static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
7416 {
7417         struct ieee_param *param;
7418         uint ret = 0;
7419
7420         /* down(&ieee->wx_sem);  */
7421
7422         if (p->length < sizeof(struct ieee_param) || !p->pointer) {
7423                 ret = -EINVAL;
7424                 goto out;
7425         }
7426
7427         param = (struct ieee_param *)rtw_malloc(p->length);
7428         if (param == NULL) {
7429                 ret = -ENOMEM;
7430                 goto out;
7431         }
7432
7433         if (copy_from_user(param, p->pointer, p->length)) {
7434                 rtw_mfree((u8 *)param, p->length);
7435                 ret = -EFAULT;
7436                 goto out;
7437         }
7438
7439         switch (param->cmd) {
7440
7441         case IEEE_CMD_SET_WPA_PARAM:
7442                 ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
7443                 break;
7444
7445         case IEEE_CMD_SET_WPA_IE:
7446                 /* ret = wpa_set_wpa_ie(dev, param, p->length); */
7447                 ret =  rtw_set_wpa_ie((_adapter *)rtw_netdev_priv(dev), (char *)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
7448                 break;
7449
7450         case IEEE_CMD_SET_ENCRYPTION:
7451                 ret = wpa_set_encryption(dev, param, p->length);
7452                 break;
7453
7454         case IEEE_CMD_MLME:
7455                 ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
7456                 break;
7457
7458         default:
7459                 RTW_INFO("Unknown WPA supplicant request: %d\n", param->cmd);
7460                 ret = -EOPNOTSUPP;
7461                 break;
7462
7463         }
7464
7465         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
7466                 ret = -EFAULT;
7467
7468         rtw_mfree((u8 *)param, p->length);
7469
7470 out:
7471
7472         /* up(&ieee->wx_sem); */
7473
7474         return ret;
7475
7476 }
7477
7478 #ifdef CONFIG_AP_MODE
7479 static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
7480 {
7481         int ret = 0;
7482         u32 wep_key_idx, wep_key_len, wep_total_len;
7483         NDIS_802_11_WEP *pwep = NULL;
7484         struct sta_info *psta = NULL, *pbcmc_sta = NULL;
7485         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7486         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
7487         struct security_priv *psecuritypriv = &(padapter->securitypriv);
7488         struct sta_priv *pstapriv = &padapter->stapriv;
7489
7490         RTW_INFO("%s\n", __FUNCTION__);
7491
7492         param->u.crypt.err = 0;
7493         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
7494
7495         /* sizeof(struct ieee_param) = 64 bytes; */
7496         /* if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len) */
7497         if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len) {
7498                 ret =  -EINVAL;
7499                 goto exit;
7500         }
7501
7502         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7503             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7504             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
7505                 if (param->u.crypt.idx >= WEP_KEYS
7506 #ifdef CONFIG_IEEE80211W
7507                     && param->u.crypt.idx > BIP_MAX_KEYID
7508 #endif /* CONFIG_IEEE80211W */
7509                    ) {
7510                         ret = -EINVAL;
7511                         goto exit;
7512                 }
7513         } else {
7514                 psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7515                 if (!psta) {
7516                         /* ret = -EINVAL; */
7517                         RTW_INFO("rtw_set_encryption(), sta has already been removed or never been added\n");
7518                         goto exit;
7519                 }
7520         }
7521
7522         if (strcmp(param->u.crypt.alg, "none") == 0 && (psta == NULL)) {
7523                 /* todo:clear default encryption keys */
7524
7525                 psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
7526                 psecuritypriv->ndisencryptstatus = Ndis802_11EncryptionDisabled;
7527                 psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
7528                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
7529
7530                 RTW_INFO("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
7531
7532                 goto exit;
7533         }
7534
7535
7536         if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta == NULL)) {
7537                 RTW_INFO("r871x_set_encryption, crypt.alg = WEP\n");
7538
7539                 wep_key_idx = param->u.crypt.idx;
7540                 wep_key_len = param->u.crypt.key_len;
7541
7542                 RTW_INFO("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
7543
7544                 if ((wep_key_idx >= WEP_KEYS) || (wep_key_len <= 0)) {
7545                         ret = -EINVAL;
7546                         goto exit;
7547                 }
7548
7549
7550                 if (wep_key_len > 0) {
7551                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
7552                         wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
7553                         pwep = (NDIS_802_11_WEP *)rtw_malloc(wep_total_len);
7554                         if (pwep == NULL) {
7555                                 RTW_INFO(" r871x_set_encryption: pwep allocate fail !!!\n");
7556                                 goto exit;
7557                         }
7558
7559                         _rtw_memset(pwep, 0, wep_total_len);
7560
7561                         pwep->KeyLength = wep_key_len;
7562                         pwep->Length = wep_total_len;
7563
7564                 }
7565
7566                 pwep->KeyIndex = wep_key_idx;
7567
7568                 _rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
7569
7570                 if (param->u.crypt.set_tx) {
7571                         RTW_INFO("wep, set_tx=1\n");
7572
7573                         psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
7574                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
7575                         psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
7576                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
7577
7578                         if (pwep->KeyLength == 13) {
7579                                 psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
7580                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
7581                         }
7582
7583
7584                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
7585
7586                         _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
7587
7588                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
7589
7590                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 1);
7591                 } else {
7592                         RTW_INFO("wep, set_tx=0\n");
7593
7594                         /* don't update "psecuritypriv->dot11PrivacyAlgrthm" and  */
7595                         /* "psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to cam */
7596
7597                         _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
7598
7599                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
7600
7601                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 0);
7602                 }
7603
7604                 goto exit;
7605
7606         }
7607
7608
7609         if (!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) /*  */ { /* group key */
7610                 if (param->u.crypt.set_tx == 1) {
7611                         if (strcmp(param->u.crypt.alg, "WEP") == 0) {
7612                                 RTW_INFO("%s, set group_key, WEP\n", __FUNCTION__);
7613
7614                                 _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7615
7616                                 psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
7617                                 if (param->u.crypt.key_len == 13)
7618                                         psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
7619
7620                         } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
7621                                 RTW_INFO("%s, set group_key, TKIP\n", __FUNCTION__);
7622
7623                                 psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
7624
7625                                 _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7626
7627                                 /* DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len); */
7628                                 /* set mic key */
7629                                 _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
7630                                 _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
7631
7632                                 psecuritypriv->busetkipkey = _TRUE;
7633
7634                         } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
7635                                 RTW_INFO("%s, set group_key, CCMP\n", __FUNCTION__);
7636
7637                                 psecuritypriv->dot118021XGrpPrivacy = _AES_;
7638
7639                                 _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7640                         }
7641 #ifdef CONFIG_IEEE80211W
7642                         else if (strcmp(param->u.crypt.alg, "BIP") == 0) {
7643                                 int no;
7644
7645                                 RTW_INFO("BIP key_len=%d , index=%d\n", param->u.crypt.key_len, param->u.crypt.idx);
7646                                 /* save the IGTK key, length 16 bytes */
7647                                 _rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey, param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7648                                 /* RTW_INFO("IGTK key below:\n");
7649                                 for(no=0;no<16;no++)
7650                                         printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
7651                                 RTW_INFO("\n"); */
7652                                 padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
7653                                 padapter->securitypriv.binstallBIPkey = _TRUE;
7654                                 RTW_INFO(" ~~~~set sta key:IGKT\n");
7655                                 goto exit;
7656                         }
7657 #endif /* CONFIG_IEEE80211W */
7658                         else {
7659                                 RTW_INFO("%s, set group_key, none\n", __FUNCTION__);
7660
7661                                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
7662                         }
7663
7664                         psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
7665
7666                         psecuritypriv->binstallGrpkey = _TRUE;
7667
7668                         psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/* !!! */
7669
7670                         rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
7671
7672                         pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
7673                         if (pbcmc_sta) {
7674                                 pbcmc_sta->ieee8021x_blocked = _FALSE;
7675                                 pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy; /* rx will use bmc_sta's dot118021XPrivacy                   */
7676                         }
7677
7678                 }
7679
7680                 goto exit;
7681
7682         }
7683
7684         if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) { /* psk/802_1x */
7685                 if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
7686                         if (param->u.crypt.set_tx == 1) {
7687                                 _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7688
7689                                 if (strcmp(param->u.crypt.alg, "WEP") == 0) {
7690                                         RTW_INFO("%s, set pairwise key, WEP\n", __FUNCTION__);
7691
7692                                         psta->dot118021XPrivacy = _WEP40_;
7693                                         if (param->u.crypt.key_len == 13)
7694                                                 psta->dot118021XPrivacy = _WEP104_;
7695                                 } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
7696                                         RTW_INFO("%s, set pairwise key, TKIP\n", __FUNCTION__);
7697
7698                                         psta->dot118021XPrivacy = _TKIP_;
7699
7700                                         /* DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len); */
7701                                         /* set mic key */
7702                                         _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
7703                                         _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
7704
7705                                         psecuritypriv->busetkipkey = _TRUE;
7706
7707                                 } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
7708
7709                                         RTW_INFO("%s, set pairwise key, CCMP\n", __FUNCTION__);
7710
7711                                         psta->dot118021XPrivacy = _AES_;
7712                                 } else {
7713                                         RTW_INFO("%s, set pairwise key, none\n", __FUNCTION__);
7714
7715                                         psta->dot118021XPrivacy = _NO_PRIVACY_;
7716                                 }
7717
7718                                 rtw_ap_set_pairwise_key(padapter, psta);
7719
7720                                 psta->ieee8021x_blocked = _FALSE;
7721
7722                                 psta->bpairwise_key_installed = _TRUE;
7723
7724                         } else { /* group key??? */
7725                                 if (strcmp(param->u.crypt.alg, "WEP") == 0) {
7726                                         _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7727
7728                                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
7729                                         if (param->u.crypt.key_len == 13)
7730                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
7731                                 } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
7732                                         psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
7733
7734                                         _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7735
7736                                         /* DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len); */
7737                                         /* set mic key */
7738                                         _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
7739                                         _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
7740
7741                                         psecuritypriv->busetkipkey = _TRUE;
7742
7743                                 } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
7744                                         psecuritypriv->dot118021XGrpPrivacy = _AES_;
7745
7746                                         _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7747                                 } else
7748                                         psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
7749
7750                                 psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
7751
7752                                 psecuritypriv->binstallGrpkey = _TRUE;
7753
7754                                 psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/* !!! */
7755
7756                                 rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
7757
7758                                 pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
7759                                 if (pbcmc_sta) {
7760                                         pbcmc_sta->ieee8021x_blocked = _FALSE;
7761                                         pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy; /* rx will use bmc_sta's dot118021XPrivacy                   */
7762                                 }
7763
7764                         }
7765
7766                 }
7767
7768         }
7769
7770 exit:
7771
7772         if (pwep)
7773                 rtw_mfree((u8 *)pwep, wep_total_len);
7774
7775         return ret;
7776
7777 }
7778
7779 static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
7780 {
7781         int ret = 0;
7782         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7783         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7784         struct sta_priv *pstapriv = &padapter->stapriv;
7785         unsigned char *pbuf = param->u.bcn_ie.buf;
7786
7787
7788         RTW_INFO("%s, len=%d\n", __FUNCTION__, len);
7789
7790         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
7791                 return -EINVAL;
7792
7793         _rtw_memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
7794
7795         if ((pstapriv->max_num_sta > NUM_STA) || (pstapriv->max_num_sta <= 0))
7796                 pstapriv->max_num_sta = NUM_STA;
7797
7798
7799         if (rtw_check_beacon_data(padapter, pbuf, (len - 12 - 2)) == _SUCCESS) /* 12 = param header, 2:no packed */
7800                 ret = 0;
7801         else
7802                 ret = -EINVAL;
7803
7804
7805         return ret;
7806
7807 }
7808
7809 static int rtw_hostapd_sta_flush(struct net_device *dev)
7810 {
7811         /* _irqL irqL; */
7812         /* _list        *phead, *plist; */
7813         int ret = 0;
7814         /* struct sta_info *psta = NULL; */
7815         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7816         /* struct sta_priv *pstapriv = &padapter->stapriv; */
7817
7818         RTW_INFO("%s\n", __FUNCTION__);
7819
7820         flush_all_cam_entry(padapter);  /* clear CAM */
7821
7822         ret = rtw_sta_flush(padapter, _TRUE);
7823
7824         return ret;
7825
7826 }
7827
7828 static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
7829 {
7830         _irqL irqL;
7831         int ret = 0;
7832         struct sta_info *psta = NULL;
7833         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7834         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7835         struct sta_priv *pstapriv = &padapter->stapriv;
7836
7837         RTW_INFO("rtw_add_sta(aid=%d)=" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
7838
7839         if (check_fwstate(pmlmepriv, (_FW_LINKED | WIFI_AP_STATE)) != _TRUE)
7840                 return -EINVAL;
7841
7842         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7843             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7844             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
7845                 return -EINVAL;
7846
7847 #if 0
7848         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7849         if (psta) {
7850                 RTW_INFO("rtw_add_sta(), free has been added psta=%p\n", psta);
7851                 /* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);                */
7852                 rtw_free_stainfo(padapter,  psta);
7853                 /* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
7854
7855                 psta = NULL;
7856         }
7857 #endif
7858         /* psta = rtw_alloc_stainfo(pstapriv, param->sta_addr); */
7859         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7860         if (psta) {
7861                 int flags = param->u.add_sta.flags;
7862
7863                 /* RTW_INFO("rtw_add_sta(), init sta's variables, psta=%p\n", psta); */
7864
7865                 psta->aid = param->u.add_sta.aid;/* aid=1~2007 */
7866
7867                 _rtw_memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
7868
7869
7870                 /* check wmm cap. */
7871                 if (WLAN_STA_WME & flags)
7872                         psta->qos_option = 1;
7873                 else
7874                         psta->qos_option = 0;
7875
7876                 if (pmlmepriv->qospriv.qos_option == 0)
7877                         psta->qos_option = 0;
7878
7879
7880 #ifdef CONFIG_80211N_HT
7881                 /* chec 802.11n ht cap. */
7882                 if (WLAN_STA_HT & flags) {
7883                         psta->htpriv.ht_option = _TRUE;
7884                         psta->qos_option = 1;
7885                         _rtw_memcpy((void *)&psta->htpriv.ht_cap, (void *)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
7886                 } else
7887                         psta->htpriv.ht_option = _FALSE;
7888
7889                 if (pmlmepriv->htpriv.ht_option == _FALSE)
7890                         psta->htpriv.ht_option = _FALSE;
7891 #endif
7892
7893
7894                 update_sta_info_apmode(padapter, psta);
7895
7896
7897         } else
7898                 ret = -ENOMEM;
7899
7900         return ret;
7901
7902 }
7903
7904 static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
7905 {
7906         _irqL irqL;
7907         int ret = 0;
7908         struct sta_info *psta = NULL;
7909         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7910         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7911         struct sta_priv *pstapriv = &padapter->stapriv;
7912
7913         RTW_INFO("rtw_del_sta=" MAC_FMT "\n", MAC_ARG(param->sta_addr));
7914
7915         if (check_fwstate(pmlmepriv, (_FW_LINKED | WIFI_AP_STATE)) != _TRUE)
7916                 return -EINVAL;
7917
7918         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7919             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7920             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
7921                 return -EINVAL;
7922
7923         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7924         if (psta) {
7925                 u8 updated = _FALSE;
7926
7927                 /* RTW_INFO("free psta=%p, aid=%d\n", psta, psta->aid); */
7928
7929                 _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
7930                 if (rtw_is_list_empty(&psta->asoc_list) == _FALSE) {
7931                         rtw_list_delete(&psta->asoc_list);
7932                         pstapriv->asoc_list_cnt--;
7933                         updated = ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING, _TRUE);
7934
7935                 }
7936                 _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
7937
7938                 associated_clients_update(padapter, updated, STA_INFO_UPDATE_ALL);
7939
7940                 psta = NULL;
7941
7942         } else {
7943                 RTW_INFO("rtw_del_sta(), sta has already been removed or never been added\n");
7944
7945                 /* ret = -1; */
7946         }
7947
7948
7949         return ret;
7950
7951 }
7952
7953 static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
7954 {
7955         int ret = 0;
7956         struct sta_info *psta = NULL;
7957         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7958         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7959         struct sta_priv *pstapriv = &padapter->stapriv;
7960         struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
7961         struct sta_data *psta_data = (struct sta_data *)param_ex->data;
7962
7963         RTW_INFO("rtw_ioctl_get_sta_info, sta_addr: " MAC_FMT "\n", MAC_ARG(param_ex->sta_addr));
7964
7965         if (check_fwstate(pmlmepriv, (_FW_LINKED | WIFI_AP_STATE)) != _TRUE)
7966                 return -EINVAL;
7967
7968         if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
7969             param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
7970             param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff)
7971                 return -EINVAL;
7972
7973         psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
7974         if (psta) {
7975 #if 0
7976                 struct {
7977                         u16 aid;
7978                         u16 capability;
7979                         int flags;
7980                         u32 sta_set;
7981                         u8 tx_supp_rates[16];
7982                         u32 tx_supp_rates_len;
7983                         struct rtw_ieee80211_ht_cap ht_cap;
7984                         u64     rx_pkts;
7985                         u64     rx_bytes;
7986                         u64     rx_drops;
7987                         u64     tx_pkts;
7988                         u64     tx_bytes;
7989                         u64     tx_drops;
7990                 } get_sta;
7991 #endif
7992                 psta_data->aid = (u16)psta->aid;
7993                 psta_data->capability = psta->capability;
7994                 psta_data->flags = psta->flags;
7995
7996                 /*
7997                                 nonerp_set : BIT(0)
7998                                 no_short_slot_time_set : BIT(1)
7999                                 no_short_preamble_set : BIT(2)
8000                                 no_ht_gf_set : BIT(3)
8001                                 no_ht_set : BIT(4)
8002                                 ht_20mhz_set : BIT(5)
8003                 */
8004
8005                 psta_data->sta_set = ((psta->nonerp_set) |
8006                                       (psta->no_short_slot_time_set << 1) |
8007                                       (psta->no_short_preamble_set << 2) |
8008                                       (psta->no_ht_gf_set << 3) |
8009                                       (psta->no_ht_set << 4) |
8010                                       (psta->ht_20mhz_set << 5));
8011
8012                 psta_data->tx_supp_rates_len =  psta->bssratelen;
8013                 _rtw_memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
8014 #ifdef CONFIG_80211N_HT
8015                 _rtw_memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
8016 #endif /* CONFIG_80211N_HT */
8017                 psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
8018                 psta_data->rx_bytes = psta->sta_stats.rx_bytes;
8019                 psta_data->rx_drops = psta->sta_stats.rx_drops;
8020
8021                 psta_data->tx_pkts = psta->sta_stats.tx_pkts;
8022                 psta_data->tx_bytes = psta->sta_stats.tx_bytes;
8023                 psta_data->tx_drops = psta->sta_stats.tx_drops;
8024
8025
8026         } else
8027                 ret = -1;
8028
8029         return ret;
8030
8031 }
8032
8033 static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
8034 {
8035         int ret = 0;
8036         struct sta_info *psta = NULL;
8037         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8038         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8039         struct sta_priv *pstapriv = &padapter->stapriv;
8040
8041         RTW_INFO("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
8042
8043         if (check_fwstate(pmlmepriv, (_FW_LINKED | WIFI_AP_STATE)) != _TRUE)
8044                 return -EINVAL;
8045
8046         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8047             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8048             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8049                 return -EINVAL;
8050
8051         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
8052         if (psta) {
8053                 if ((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC)) {
8054                         int wpa_ie_len;
8055                         int copy_len;
8056
8057                         wpa_ie_len = psta->wpa_ie[1];
8058
8059                         copy_len = ((wpa_ie_len + 2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)) : (wpa_ie_len + 2);
8060
8061                         param->u.wpa_ie.len = copy_len;
8062
8063                         _rtw_memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
8064                 } else {
8065                         /* ret = -1; */
8066                         RTW_INFO("sta's wpa_ie is NONE\n");
8067                 }
8068         } else
8069                 ret = -1;
8070
8071         return ret;
8072
8073 }
8074
8075 static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
8076 {
8077         int ret = 0;
8078         unsigned char wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};
8079         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8080         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8081         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
8082         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
8083         int ie_len;
8084
8085         RTW_INFO("%s, len=%d\n", __FUNCTION__, len);
8086
8087         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8088                 return -EINVAL;
8089
8090         ie_len = len - 12 - 2; /* 12 = param header, 2:no packed */
8091
8092
8093         if (pmlmepriv->wps_beacon_ie) {
8094                 rtw_mfree(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
8095                 pmlmepriv->wps_beacon_ie = NULL;
8096         }
8097
8098         if (ie_len > 0) {
8099                 pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
8100                 pmlmepriv->wps_beacon_ie_len = ie_len;
8101                 if (pmlmepriv->wps_beacon_ie == NULL) {
8102                         RTW_INFO("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8103                         return -EINVAL;
8104                 }
8105
8106                 _rtw_memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
8107
8108                 update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, _TRUE);
8109
8110                 pmlmeext->bstart_bss = _TRUE;
8111
8112         }
8113
8114
8115         return ret;
8116
8117 }
8118
8119 static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
8120 {
8121         int ret = 0;
8122         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8123         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8124         int ie_len;
8125
8126         RTW_INFO("%s, len=%d\n", __FUNCTION__, len);
8127
8128         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8129                 return -EINVAL;
8130
8131         ie_len = len - 12 - 2; /* 12 = param header, 2:no packed */
8132
8133
8134         if (pmlmepriv->wps_probe_resp_ie) {
8135                 rtw_mfree(pmlmepriv->wps_probe_resp_ie, pmlmepriv->wps_probe_resp_ie_len);
8136                 pmlmepriv->wps_probe_resp_ie = NULL;
8137         }
8138
8139         if (ie_len > 0) {
8140                 pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
8141                 pmlmepriv->wps_probe_resp_ie_len = ie_len;
8142                 if (pmlmepriv->wps_probe_resp_ie == NULL) {
8143                         RTW_INFO("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8144                         return -EINVAL;
8145                 }
8146                 _rtw_memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);
8147         }
8148
8149
8150         return ret;
8151
8152 }
8153
8154 static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
8155 {
8156         int ret = 0;
8157         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8158         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8159         int ie_len;
8160
8161         RTW_INFO("%s, len=%d\n", __FUNCTION__, len);
8162
8163         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8164                 return -EINVAL;
8165
8166         ie_len = len - 12 - 2; /* 12 = param header, 2:no packed */
8167
8168
8169         if (pmlmepriv->wps_assoc_resp_ie) {
8170                 rtw_mfree(pmlmepriv->wps_assoc_resp_ie, pmlmepriv->wps_assoc_resp_ie_len);
8171                 pmlmepriv->wps_assoc_resp_ie = NULL;
8172         }
8173
8174         if (ie_len > 0) {
8175                 pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
8176                 pmlmepriv->wps_assoc_resp_ie_len = ie_len;
8177                 if (pmlmepriv->wps_assoc_resp_ie == NULL) {
8178                         RTW_INFO("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8179                         return -EINVAL;
8180                 }
8181
8182                 _rtw_memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);
8183         }
8184
8185
8186         return ret;
8187
8188 }
8189
8190 static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
8191 {
8192         int ret = 0;
8193         _adapter *adapter = (_adapter *)rtw_netdev_priv(dev);
8194         struct mlme_priv *mlmepriv = &(adapter->mlmepriv);
8195         struct mlme_ext_priv    *mlmeext = &(adapter->mlmeextpriv);
8196         struct mlme_ext_info    *mlmeinfo = &(mlmeext->mlmext_info);
8197         int ie_len;
8198         u8 *ssid_ie;
8199         char ssid[NDIS_802_11_LENGTH_SSID + 1];
8200         sint ssid_len = 0;
8201         u8 ignore_broadcast_ssid;
8202
8203         if (check_fwstate(mlmepriv, WIFI_AP_STATE) != _TRUE)
8204                 return -EPERM;
8205
8206         if (param->u.bcn_ie.reserved[0] != 0xea)
8207                 return -EINVAL;
8208
8209         mlmeinfo->hidden_ssid_mode = ignore_broadcast_ssid = param->u.bcn_ie.reserved[1];
8210
8211         ie_len = len - 12 - 2; /* 12 = param header, 2:no packed */
8212         ssid_ie = rtw_get_ie(param->u.bcn_ie.buf,  WLAN_EID_SSID, &ssid_len, ie_len);
8213
8214         if (ssid_ie && ssid_len > 0 && ssid_len <= NDIS_802_11_LENGTH_SSID) {
8215                 WLAN_BSSID_EX *pbss_network = &mlmepriv->cur_network.network;
8216                 WLAN_BSSID_EX *pbss_network_ext = &mlmeinfo->network;
8217
8218                 _rtw_memcpy(ssid, ssid_ie + 2, ssid_len);
8219                 ssid[ssid_len] = 0x0;
8220
8221                 if (0)
8222                         RTW_INFO(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
8223                                 ssid, ssid_len,
8224                                 pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
8225                                 pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
8226
8227                 _rtw_memcpy(pbss_network->Ssid.Ssid, (void *)ssid, ssid_len);
8228                 pbss_network->Ssid.SsidLength = ssid_len;
8229                 _rtw_memcpy(pbss_network_ext->Ssid.Ssid, (void *)ssid, ssid_len);
8230                 pbss_network_ext->Ssid.SsidLength = ssid_len;
8231
8232                 if (0)
8233                         RTW_INFO(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
8234                                 pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
8235                                 pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
8236         }
8237
8238         RTW_INFO(FUNC_ADPT_FMT" ignore_broadcast_ssid:%d, %s,%d\n", FUNC_ADPT_ARG(adapter),
8239                 ignore_broadcast_ssid, ssid, ssid_len);
8240
8241         return ret;
8242 }
8243
8244 #if CONFIG_RTW_MACADDR_ACL
8245 static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
8246 {
8247         int ret = 0;
8248         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8249         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8250
8251         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8252                 return -EINVAL;
8253
8254         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8255             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8256             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8257                 return -EINVAL;
8258
8259         ret = rtw_acl_remove_sta(padapter, param->sta_addr);
8260
8261         return ret;
8262
8263 }
8264
8265 static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
8266 {
8267         int ret = 0;
8268         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8269         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8270
8271         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8272                 return -EINVAL;
8273
8274         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8275             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8276             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8277                 return -EINVAL;
8278
8279         ret = rtw_acl_add_sta(padapter, param->sta_addr);
8280
8281         return ret;
8282
8283 }
8284
8285 static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
8286 {
8287         int ret = 0;
8288         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8289         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8290
8291         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8292                 return -EINVAL;
8293
8294         rtw_set_macaddr_acl(padapter, param->u.mlme.command);
8295
8296         return ret;
8297 }
8298 #endif /* CONFIG_RTW_MACADDR_ACL */
8299
8300 static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
8301 {
8302         struct ieee_param *param;
8303         int ret = 0;
8304         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8305
8306         /* RTW_INFO("%s\n", __FUNCTION__); */
8307
8308         /*
8309         * this function is expect to call in master mode, which allows no power saving
8310         * so, we just check hw_init_completed
8311         */
8312
8313         if (!rtw_is_hw_init_completed(padapter)) {
8314                 ret = -EPERM;
8315                 goto out;
8316         }
8317
8318
8319         /* if (p->length < sizeof(struct ieee_param) || !p->pointer){ */
8320         if (!p->pointer) {
8321                 ret = -EINVAL;
8322                 goto out;
8323         }
8324
8325         param = (struct ieee_param *)rtw_malloc(p->length);
8326         if (param == NULL) {
8327                 ret = -ENOMEM;
8328                 goto out;
8329         }
8330
8331         if (copy_from_user(param, p->pointer, p->length)) {
8332                 rtw_mfree((u8 *)param, p->length);
8333                 ret = -EFAULT;
8334                 goto out;
8335         }
8336
8337         /* RTW_INFO("%s, cmd=%d\n", __FUNCTION__, param->cmd); */
8338
8339         switch (param->cmd) {
8340         case RTL871X_HOSTAPD_FLUSH:
8341
8342                 ret = rtw_hostapd_sta_flush(dev);
8343
8344                 break;
8345
8346         case RTL871X_HOSTAPD_ADD_STA:
8347
8348                 ret = rtw_add_sta(dev, param);
8349
8350                 break;
8351
8352         case RTL871X_HOSTAPD_REMOVE_STA:
8353
8354                 ret = rtw_del_sta(dev, param);
8355
8356                 break;
8357
8358         case RTL871X_HOSTAPD_SET_BEACON:
8359
8360                 ret = rtw_set_beacon(dev, param, p->length);
8361
8362                 break;
8363
8364         case RTL871X_SET_ENCRYPTION:
8365
8366                 ret = rtw_set_encryption(dev, param, p->length);
8367
8368                 break;
8369
8370         case RTL871X_HOSTAPD_GET_WPAIE_STA:
8371
8372                 ret = rtw_get_sta_wpaie(dev, param);
8373
8374                 break;
8375
8376         case RTL871X_HOSTAPD_SET_WPS_BEACON:
8377
8378                 ret = rtw_set_wps_beacon(dev, param, p->length);
8379
8380                 break;
8381
8382         case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
8383
8384                 ret = rtw_set_wps_probe_resp(dev, param, p->length);
8385
8386                 break;
8387
8388         case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
8389
8390                 ret = rtw_set_wps_assoc_resp(dev, param, p->length);
8391
8392                 break;
8393
8394         case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
8395
8396                 ret = rtw_set_hidden_ssid(dev, param, p->length);
8397
8398                 break;
8399
8400         case RTL871X_HOSTAPD_GET_INFO_STA:
8401
8402                 ret = rtw_ioctl_get_sta_data(dev, param, p->length);
8403
8404                 break;
8405
8406 #if CONFIG_RTW_MACADDR_ACL
8407         case RTL871X_HOSTAPD_SET_MACADDR_ACL:
8408                 ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
8409                 break;
8410         case RTL871X_HOSTAPD_ACL_ADD_STA:
8411                 ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
8412                 break;
8413         case RTL871X_HOSTAPD_ACL_REMOVE_STA:
8414                 ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
8415                 break;
8416 #endif /* CONFIG_RTW_MACADDR_ACL */
8417
8418         default:
8419                 RTW_INFO("Unknown hostapd request: %d\n", param->cmd);
8420                 ret = -EOPNOTSUPP;
8421                 break;
8422
8423         }
8424
8425         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
8426                 ret = -EFAULT;
8427
8428
8429         rtw_mfree((u8 *)param, p->length);
8430
8431 out:
8432
8433         return ret;
8434
8435 }
8436 #endif
8437
8438 static int rtw_wx_set_priv(struct net_device *dev,
8439                            struct iw_request_info *info,
8440                            union iwreq_data *awrq,
8441                            char *extra)
8442 {
8443
8444 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8445         char *ext_dbg;
8446 #endif
8447
8448         int ret = 0;
8449         int len = 0;
8450         char *ext;
8451         int i;
8452
8453         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8454         struct iw_point *dwrq = (struct iw_point *)awrq;
8455
8456         if (dwrq->length == 0)
8457                 return -EFAULT;
8458
8459         len = dwrq->length;
8460         ext = rtw_vmalloc(len);
8461         if (!ext)
8462                 return -ENOMEM;
8463
8464         if (copy_from_user(ext, dwrq->pointer, len)) {
8465                 rtw_vmfree(ext, len);
8466                 return -EFAULT;
8467         }
8468
8469
8470
8471 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8472         ext_dbg = rtw_vmalloc(len);
8473         if (!ext_dbg) {
8474                 rtw_vmfree(ext, len);
8475                 return -ENOMEM;
8476         }
8477
8478         _rtw_memcpy(ext_dbg, ext, len);
8479 #endif
8480
8481         /* added for wps2.0 @20110524 */
8482         if (dwrq->flags == 0x8766 && len > 8) {
8483                 u32 cp_sz;
8484                 struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8485                 u8 *probereq_wpsie = ext;
8486                 int probereq_wpsie_len = len;
8487                 u8 wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};
8488
8489                 if ((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
8490                     (_rtw_memcmp(&probereq_wpsie[2], wps_oui, 4) == _TRUE)) {
8491                         cp_sz = probereq_wpsie_len > MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN : probereq_wpsie_len;
8492
8493                         if (pmlmepriv->wps_probe_req_ie) {
8494                                 u32 free_len = pmlmepriv->wps_probe_req_ie_len;
8495                                 pmlmepriv->wps_probe_req_ie_len = 0;
8496                                 rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
8497                                 pmlmepriv->wps_probe_req_ie = NULL;
8498                         }
8499
8500                         pmlmepriv->wps_probe_req_ie = rtw_malloc(cp_sz);
8501                         if (pmlmepriv->wps_probe_req_ie == NULL) {
8502                                 printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8503                                 ret =  -EINVAL;
8504                                 goto FREE_EXT;
8505
8506                         }
8507
8508                         _rtw_memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
8509                         pmlmepriv->wps_probe_req_ie_len = cp_sz;
8510
8511                 }
8512
8513                 goto FREE_EXT;
8514
8515         }
8516
8517         if (len >= WEXT_CSCAN_HEADER_SIZE
8518                 && _rtw_memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
8519         ) {
8520                 ret = rtw_wx_set_scan(dev, info, awrq, ext);
8521                 goto FREE_EXT;
8522         }
8523
8524 #ifdef CONFIG_ANDROID
8525         /* RTW_INFO("rtw_wx_set_priv: %s req=%s\n", dev->name, ext); */
8526
8527         i = rtw_android_cmdstr_to_num(ext);
8528
8529         switch (i) {
8530         case ANDROID_WIFI_CMD_START:
8531                 indicate_wx_custom_event(padapter, "START");
8532                 break;
8533         case ANDROID_WIFI_CMD_STOP:
8534                 indicate_wx_custom_event(padapter, "STOP");
8535                 break;
8536         case ANDROID_WIFI_CMD_RSSI: {
8537                 struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
8538                 struct  wlan_network    *pcur_network = &pmlmepriv->cur_network;
8539
8540                 if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
8541                         sprintf(ext, "%s rssi %d", pcur_network->network.Ssid.Ssid, padapter->recvpriv.rssi);
8542                 else
8543                         sprintf(ext, "OK");
8544         }
8545                 break;
8546         case ANDROID_WIFI_CMD_LINKSPEED: {
8547                 u16 mbps = rtw_get_cur_max_rate(padapter) / 10;
8548                 sprintf(ext, "LINKSPEED %d", mbps);
8549         }
8550                 break;
8551         case ANDROID_WIFI_CMD_MACADDR:
8552                 sprintf(ext, "MACADDR = " MAC_FMT, MAC_ARG(dev->dev_addr));
8553                 break;
8554         case ANDROID_WIFI_CMD_SCAN_ACTIVE: {
8555                 /* rtw_set_scan_mode(padapter, SCAN_ACTIVE); */
8556                 sprintf(ext, "OK");
8557         }
8558                 break;
8559         case ANDROID_WIFI_CMD_SCAN_PASSIVE: {
8560                 /* rtw_set_scan_mode(padapter, SCAN_PASSIVE); */
8561                 sprintf(ext, "OK");
8562         }
8563                 break;
8564
8565         case ANDROID_WIFI_CMD_COUNTRY: {
8566                 char country_code[10];
8567                 sscanf(ext, "%*s %s", country_code);
8568                 rtw_set_country(padapter, country_code);
8569                 sprintf(ext, "OK");
8570         }
8571                 break;
8572         default:
8573                 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8574                 RTW_INFO("%s: %s unknowned req=%s\n", __FUNCTION__,
8575                         dev->name, ext_dbg);
8576                 #endif
8577
8578                 sprintf(ext, "OK");
8579
8580         }
8581
8582         if (copy_to_user(dwrq->pointer, ext, min(dwrq->length, (u16)(strlen(ext) + 1))))
8583                 ret = -EFAULT;
8584
8585 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8586         RTW_INFO("%s: %s req=%s rep=%s dwrq->length=%d, strlen(ext)+1=%d\n", __FUNCTION__,
8587                 dev->name, ext_dbg , ext, dwrq->length, (u16)(strlen(ext) + 1));
8588 #endif
8589 #endif /* end of CONFIG_ANDROID */
8590
8591
8592 FREE_EXT:
8593
8594         rtw_vmfree(ext, len);
8595         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8596         rtw_vmfree(ext_dbg, len);
8597         #endif
8598
8599         /* RTW_INFO("rtw_wx_set_priv: (SIOCSIWPRIV) %s ret=%d\n",  */
8600         /*              dev->name, ret); */
8601
8602         return ret;
8603
8604 }
8605 #ifdef CONFIG_WOWLAN
8606 static int rtw_wowlan_ctrl(struct net_device *dev,
8607                            struct iw_request_info *info,
8608                            union iwreq_data *wrqu, char *extra)
8609 {
8610         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8611         struct wowlan_ioctl_param poidparam;
8612         struct pwrctrl_priv *pwrctrlpriv = adapter_to_pwrctl(padapter);
8613         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
8614         struct sta_info *psta = NULL;
8615         int ret = 0;
8616         u32 start_time = rtw_get_current_time();
8617         poidparam.subcode = 0;
8618
8619         RTW_INFO("+rtw_wowlan_ctrl: %s\n", extra);
8620
8621         if (!check_fwstate(pmlmepriv, _FW_LINKED) &&
8622             check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
8623 #ifdef CONFIG_PNO_SUPPORT
8624                 pwrctrlpriv->wowlan_pno_enable = _TRUE;
8625 #else
8626                 RTW_INFO("[%s] WARNING: Please Connect With AP First!!\n", __func__);
8627                 goto _rtw_wowlan_ctrl_exit_free;
8628 #endif /* CONFIG_PNO_SUPPORT */
8629         }
8630
8631         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
8632                 rtw_scan_abort(padapter);
8633
8634         if (_rtw_memcmp(extra, "enable", 6))
8635
8636
8637                 rtw_suspend_common(padapter);
8638
8639         else if (_rtw_memcmp(extra, "disable", 7)) {
8640 #ifdef CONFIG_USB_HCI
8641                 RTW_ENABLE_FUNC(padapter, DF_RX_BIT);
8642                 RTW_ENABLE_FUNC(padapter, DF_TX_BIT);
8643 #endif
8644                 rtw_resume_common(padapter);
8645
8646 #ifdef CONFIG_PNO_SUPPORT
8647                 pwrctrlpriv->wowlan_pno_enable = _FALSE;
8648 #endif /* CONFIG_PNO_SUPPORT */
8649
8650         } else {
8651                 RTW_INFO("[%s] Invalid Parameter.\n", __func__);
8652                 goto _rtw_wowlan_ctrl_exit_free;
8653         }
8654         /* mutex_lock(&ioctl_mutex); */
8655 _rtw_wowlan_ctrl_exit_free:
8656         RTW_INFO("-rtw_wowlan_ctrl( subcode = %d)\n", poidparam.subcode);
8657         RTW_PRINT("%s in %d ms\n", __func__,
8658                   rtw_get_passing_time_ms(start_time));
8659 _rtw_wowlan_ctrl_exit:
8660         return ret;
8661 }
8662
8663 /*
8664  * IP filter This pattern if for a frame containing a ip packet:
8665  * AA:AA:AA:AA:AA:AA:BB:BB:BB:BB:BB:BB:CC:CC:DD:-:-:-:-:-:-:-:-:EE:-:-:FF:FF:FF:FF:GG:GG:GG:GG:HH:HH:II:II
8666  *
8667  * A: Ethernet destination address
8668  * B: Ethernet source address
8669  * C: Ethernet protocol type
8670  * D: IP header VER+Hlen, use: 0x45 (4 is for ver 4, 5 is for len 20)
8671  * E: IP protocol
8672  * F: IP source address ( 192.168.0.4: C0:A8:00:2C )
8673  * G: IP destination address ( 192.168.0.4: C0:A8:00:2C )
8674  * H: Source port (1024: 04:00)
8675  * I: Destination port (1024: 04:00)
8676  */
8677
8678 static int rtw_wowlan_set_pattern(struct net_device *dev,
8679                                   struct iw_request_info *info,
8680                                   union iwreq_data *wrqu, char *extra)
8681 {
8682         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8683         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
8684         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
8685         struct wowlan_ioctl_param poidparam;
8686         int ret = 0, len = 0, i = 0;
8687         u32 start_time = rtw_get_current_time();
8688         u8 input[wrqu->data.length];
8689         u8 index = 0;
8690
8691         poidparam.subcode = 0;
8692
8693         if (!check_fwstate(pmlmepriv, _FW_LINKED) &&
8694             check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
8695                 ret = -EFAULT;
8696                 RTW_INFO("Please Connect With AP First!!\n");
8697                 goto _rtw_wowlan_set_pattern_exit;
8698         }
8699
8700         if (wrqu->data.length <= 0) {
8701                 ret = -EFAULT;
8702                 RTW_INFO("ERROR: parameter length <= 0\n");
8703                 goto _rtw_wowlan_set_pattern_exit;
8704         } else {
8705                 /* set pattern */
8706                 if (copy_from_user(input,
8707                                    wrqu->data.pointer, wrqu->data.length))
8708                         return -EFAULT;
8709                 /* leave PS first */
8710                 rtw_ps_deny(padapter, PS_DENY_IOCTL);
8711                 LeaveAllPowerSaveModeDirect(padapter);
8712                 if (strncmp(input, "pattern=", 8) == 0) {
8713                         if (pwrpriv->wowlan_pattern_idx >= MAX_WKFM_NUM) {
8714                                 RTW_INFO("WARNING: priv-pattern is full(idx: %d)\n",
8715                                          pwrpriv->wowlan_pattern_idx);
8716                                 RTW_INFO("WARNING: please clean priv-pattern first\n");
8717                                 ret = -EINVAL;
8718                                 goto _rtw_wowlan_set_pattern_exit;
8719                         } else {
8720                                 index = pwrpriv->wowlan_pattern_idx;
8721                                 ret = rtw_wowlan_parser_pattern_cmd(input,
8722                                             pwrpriv->patterns[index].content,
8723                                             &pwrpriv->patterns[index].len,
8724                                             pwrpriv->patterns[index].mask);
8725
8726                                 if (ret == _TRUE)
8727                                         pwrpriv->wowlan_pattern_idx++;
8728                         }
8729                 } else if (strncmp(input, "clean", 5) == 0) {
8730                         poidparam.subcode = WOWLAN_PATTERN_CLEAN;
8731                         rtw_hal_set_hwreg(padapter,
8732                                           HW_VAR_WOWLAN, (u8 *)&poidparam);
8733                 } else if (strncmp(input, "show", 4) == 0) {
8734                         for (i = 0 ; i < MAX_WKFM_NUM ; i++) {
8735                                 RTW_INFO("=======[%d]=======\n", i);
8736                                 rtw_read_from_frame_mask(padapter, i);
8737                         }
8738
8739                         RTW_INFO("********[RTK priv-patterns]*********\n");
8740                         for (i = 0 ; i < MAX_WKFM_NUM ; i++)
8741                                 rtw_dump_priv_pattern(padapter, i);
8742                 } else {
8743                         RTW_INFO("ERROR: incorrect parameter!\n");
8744                         ret = -EINVAL;
8745                 }
8746                 rtw_ps_deny_cancel(padapter, PS_DENY_IOCTL);
8747         }
8748 _rtw_wowlan_set_pattern_exit:
8749         return ret;
8750 }
8751 #endif /* CONFIG_WOWLAN */
8752
8753 #ifdef CONFIG_AP_WOWLAN
8754 static int rtw_ap_wowlan_ctrl(struct net_device *dev,
8755                               struct iw_request_info *info,
8756                               union iwreq_data *wrqu, char *extra)
8757 {
8758         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8759         struct wowlan_ioctl_param poidparam;
8760         struct pwrctrl_priv *pwrctrlpriv = adapter_to_pwrctl(padapter);
8761         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
8762         struct sta_info *psta = NULL;
8763         int ret = 0;
8764         u32 start_time = rtw_get_current_time();
8765         poidparam.subcode = 0;
8766
8767         RTW_INFO("+rtw_ap_wowlan_ctrl: %s\n", extra);
8768
8769         if (!check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
8770                 RTW_INFO("[%s] It is not AP mode!!\n", __func__);
8771                 goto _rtw_ap_wowlan_ctrl_exit_free;
8772         }
8773
8774         if (_rtw_memcmp(extra, "enable", 6)) {
8775
8776                 pwrctrlpriv->wowlan_ap_mode = _TRUE;
8777
8778                 rtw_suspend_common(padapter);
8779         } else if (_rtw_memcmp(extra, "disable", 7)) {
8780 #ifdef CONFIG_USB_HCI
8781                 RTW_ENABLE_FUNC(padapter, DF_RX_BIT);
8782                 RTW_ENABLE_FUNC(padapter, DF_TX_BIT);
8783 #endif
8784                 rtw_resume_common(padapter);
8785         } else {
8786                 RTW_INFO("[%s] Invalid Parameter.\n", __func__);
8787                 goto _rtw_ap_wowlan_ctrl_exit_free;
8788         }
8789         /* mutex_lock(&ioctl_mutex); */
8790 _rtw_ap_wowlan_ctrl_exit_free:
8791         RTW_INFO("-rtw_ap_wowlan_ctrl( subcode = %d)\n", poidparam.subcode);
8792         RTW_PRINT("%s in %d ms\n", __func__,
8793                   rtw_get_passing_time_ms(start_time));
8794 _rtw_ap_wowlan_ctrl_exit:
8795         return ret;
8796 }
8797 #endif /* CONFIG_AP_WOWLAN */
8798
8799 static int rtw_pm_set(struct net_device *dev,
8800                       struct iw_request_info *info,
8801                       union iwreq_data *wrqu, char *extra)
8802 {
8803         int ret = 0;
8804         unsigned        mode = 0;
8805         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8806
8807         RTW_INFO("[%s] extra = %s\n", __FUNCTION__, extra);
8808
8809         if (_rtw_memcmp(extra, "lps=", 4)) {
8810                 sscanf(extra + 4, "%u", &mode);
8811                 ret = rtw_pm_set_lps(padapter, mode);
8812         } else if (_rtw_memcmp(extra, "ips=", 4)) {
8813                 sscanf(extra + 4, "%u", &mode);
8814                 ret = rtw_pm_set_ips(padapter, mode);
8815         } else
8816                 ret = -EINVAL;
8817
8818         return ret;
8819 }
8820 #ifdef CONFIG_APPEND_VENDOR_IE_ENABLE
8821
8822 int rtw_vendor_ie_get(struct net_device *dev, struct iw_request_info *info, union iwreq_data *wrqu, char *extra)
8823 {
8824         int ret = 0, vendor_ie_num = 0 , j , len = 0 , cmdlen;
8825         char *pstring;
8826         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8827         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8828         struct iw_point *p;
8829         u8 *ptmp;
8830         u32 vendor_ie_mask = 0;
8831
8832         p = &wrqu->data;
8833         cmdlen = p->length;
8834         if (0 == cmdlen)
8835                 return -EINVAL;
8836
8837         ptmp = (u8 *)rtw_malloc(cmdlen);
8838         if (NULL == ptmp)
8839                 return -ENOMEM;
8840
8841         if (copy_from_user(ptmp, p->pointer, cmdlen)) {
8842                 ret = -EFAULT;
8843                 goto exit;
8844         }
8845         ret = sscanf(ptmp , "%d", &vendor_ie_num);
8846         if (vendor_ie_num > WLAN_MAX_VENDOR_IE_NUM - 1) {
8847                 ret = -EFAULT;
8848                 goto exit;
8849         }
8850         vendor_ie_mask = pmlmepriv->vendor_ie_mask[vendor_ie_num];
8851         pstring = extra;
8852         pstring += sprintf(pstring , "\nVendor IE num %d , Mask:%x " , vendor_ie_num , vendor_ie_mask);
8853
8854         if (vendor_ie_mask & WIFI_BEACON_VENDOR_IE_BIT)
8855                 pstring += sprintf(pstring , "[Beacon]");
8856         if (vendor_ie_mask & WIFI_PROBEREQ_VENDOR_IE_BIT)
8857                 pstring += sprintf(pstring , "[Probe Req]");
8858         if (vendor_ie_mask & WIFI_PROBERESP_VENDOR_IE_BIT)
8859                 pstring += sprintf(pstring , "[Probe Resp]");
8860         if (vendor_ie_mask & WIFI_ASSOCREQ_VENDOR_IE_BIT)
8861                 pstring += sprintf(pstring , "[Assoc Req]");
8862         if (vendor_ie_mask & WIFI_ASSOCRESP_VENDOR_IE_BIT)
8863                 pstring += sprintf(pstring , "[Assoc Resp]");
8864
8865         pstring += sprintf(pstring , "\nVendor IE:\n");
8866         for (j = 0 ; j < pmlmepriv->vendor_ielen[vendor_ie_num]  ; j++)
8867                 pstring += sprintf(pstring , "%02x" , pmlmepriv->vendor_ie[vendor_ie_num][j]);
8868
8869         wrqu->data.length = pstring - extra;
8870
8871 exit:
8872         rtw_mfree(ptmp, cmdlen);
8873
8874         return 0;
8875 }
8876
8877 int rtw_vendor_ie_set(struct net_device *dev, struct iw_request_info *info, union iwreq_data *wrqu, char *extra)
8878 {
8879         int ret = 0, i , len = 0 , totoal_ie_len = 0 , total_ie_len_byte = 0;
8880         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8881         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8882         u32 vendor_ie_mask = 0;
8883         u32 vendor_ie_num = 0;
8884         u32 id, elen;
8885
8886         ret = sscanf(extra, "%d,%x,%*s", &vendor_ie_num , &vendor_ie_mask);
8887         if (strrchr(extra , ','))
8888                 extra = strrchr(extra , ',') + 1;
8889         else
8890                 return -EINVAL;
8891         totoal_ie_len = strlen(extra);
8892         RTW_INFO("[%s] vendor_ie_num = %d , vendor_ie_mask = %x , vendor_ie = %s , len = %d\n", __func__ , vendor_ie_num , vendor_ie_mask , extra  , totoal_ie_len);
8893
8894         if (vendor_ie_num  > WLAN_MAX_VENDOR_IE_NUM - 1) {
8895                 RTW_INFO("[%s] only support %d vendor ie\n", __func__ , WLAN_MAX_VENDOR_IE_NUM);
8896                 return -EFAULT;
8897         }
8898
8899         if (totoal_ie_len > WLAN_MAX_VENDOR_IE_LEN) {
8900                 RTW_INFO("[%s] Fail , not support ie length extend %d\n", __func__ , WLAN_MAX_VENDOR_IE_LEN);
8901                 return -EFAULT;
8902         }
8903
8904         if (vendor_ie_mask == 0) {
8905                 RTW_INFO("[%s] Clear vendor_ie_num %d group\n", __func__ , vendor_ie_num);
8906                 goto _clear_path;
8907         }
8908
8909         if (totoal_ie_len % 2 != 0) {
8910                 RTW_INFO("[%s]  Fail , IE length = %zu is odd\n" , __func__ , strlen(extra));
8911                 return -EFAULT;
8912         }
8913
8914         if (totoal_ie_len > 0) {
8915                 for (i = 0  ; i < strlen(extra) ; i += 2) {
8916                         pmlmepriv->vendor_ie[vendor_ie_num][len] = key_2char2num(extra[i] , extra[i + 1]);
8917                         if (len == 0) {
8918                                 id = pmlmepriv->vendor_ie[vendor_ie_num][len];
8919                                 if (id != WLAN_EID_VENDOR_SPECIFIC) {
8920                                         RTW_INFO("[%s] Fail , VENDOR SPECIFIC IE ID \"%x\" was not correct\n", __func__ , id);
8921                                         goto _clear_path;
8922                                 }
8923                         } else if (len == 1) {
8924                                 total_ie_len_byte = (totoal_ie_len / 2) - 2;
8925                                 elen = pmlmepriv->vendor_ie[vendor_ie_num][len];
8926                                 if (elen != total_ie_len_byte) {
8927                                         RTW_INFO("[%s] Fail , Input IE length = \"%d\"(hex:%x) bytes , not match input total IE context length \"%d\" bytes\n", __func__ , elen , elen ,
8928                                                  total_ie_len_byte);
8929                                         goto _clear_path;
8930                                 }
8931                         }
8932                         len++;
8933                 }
8934                 pmlmepriv->vendor_ielen[vendor_ie_num] = len;
8935         } else
8936                 pmlmepriv->vendor_ielen[vendor_ie_num] = 0;
8937
8938
8939
8940         if (vendor_ie_mask & WIFI_BEACON_VENDOR_IE_BIT)
8941                 RTW_INFO("[%s] Beacon append vendor ie\n", __func__);
8942         if (vendor_ie_mask & WIFI_PROBEREQ_VENDOR_IE_BIT)
8943                 RTW_INFO("[%s] Probe Req append vendor ie\n", __func__);
8944         if (vendor_ie_mask & WIFI_PROBERESP_VENDOR_IE_BIT)
8945                 RTW_INFO("[%s] Probe Resp  append vendor ie\n", __func__);
8946         if (vendor_ie_mask & WIFI_ASSOCREQ_VENDOR_IE_BIT)
8947                 RTW_INFO("[%s] Assoc Req append vendor ie\n", __func__);
8948         if (vendor_ie_mask & WIFI_ASSOCRESP_VENDOR_IE_BIT)
8949                 RTW_INFO("[%s] Assoc Resp append vendor ie\n", __func__);
8950
8951         pmlmepriv->vendor_ie_mask[vendor_ie_num] = vendor_ie_mask;
8952
8953         return ret;
8954
8955 _clear_path:
8956         _rtw_memset(pmlmepriv->vendor_ie[vendor_ie_num] , 0 , sizeof(u32) * WLAN_MAX_VENDOR_IE_LEN);
8957         pmlmepriv->vendor_ielen[vendor_ie_num] = 0;
8958         pmlmepriv->vendor_ie_mask[vendor_ie_num] = 0;
8959         return -EFAULT;
8960 }
8961 #endif
8962
8963 static int rtw_mp_efuse_get(struct net_device *dev,
8964                             struct iw_request_info *info,
8965                             union iwreq_data *wdata, char *extra)
8966 {
8967         PADAPTER padapter = rtw_netdev_priv(dev);
8968         HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
8969
8970         PEFUSE_HAL pEfuseHal;
8971         struct iw_point *wrqu;
8972
8973         u8      *PROMContent = pHalData->efuse_eeprom_data;
8974         u8 ips_mode = IPS_NUM; /* init invalid value */
8975         u8 lps_mode = PS_MODE_NUM; /* init invalid value */
8976         struct pwrctrl_priv *pwrctrlpriv ;
8977         u8 *data = NULL;
8978         u8 *rawdata = NULL;
8979         char *pch, *ptmp, *token, *tmp[3] = {0x00, 0x00, 0x00};
8980         u16 i = 0, j = 0, mapLen = 0, addr = 0, cnts = 0;
8981         u16 max_available_len = 0, raw_cursize = 0, raw_maxsize = 0;
8982         u16 mask_len;
8983         u8 mask_buf[64] = "";
8984         int err;
8985 #ifdef CONFIG_IOL
8986         u8 org_fw_iol = padapter->registrypriv.fw_iol;/* 0:Disable, 1:enable, 2:by usb speed */
8987 #endif
8988
8989         wrqu = (struct iw_point *)wdata;
8990         pwrctrlpriv = adapter_to_pwrctl(padapter);
8991         pEfuseHal = &pHalData->EfuseHal;
8992
8993         err = 0;
8994         data = rtw_zmalloc(EFUSE_BT_MAX_MAP_LEN);
8995         if (data == NULL) {
8996                 err = -ENOMEM;
8997                 goto exit;
8998         }
8999         rawdata = rtw_zmalloc(EFUSE_BT_MAX_MAP_LEN);
9000         if (rawdata == NULL) {
9001                 err = -ENOMEM;
9002                 goto exit;
9003         }
9004
9005         if (copy_from_user(extra, wrqu->pointer, wrqu->length)) {
9006                 err = -EFAULT;
9007                 goto exit;
9008         }
9009 #ifdef CONFIG_LPS
9010         lps_mode = pwrctrlpriv->power_mgnt;/* keep org value */
9011         rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
9012 #endif
9013
9014 #ifdef CONFIG_IPS
9015         ips_mode = pwrctrlpriv->ips_mode;/* keep org value */
9016         rtw_pm_set_ips(padapter, IPS_NONE);
9017 #endif
9018
9019         pch = extra;
9020         RTW_INFO("%s: in=%s\n", __FUNCTION__, extra);
9021
9022         i = 0;
9023         /* mac 16 "00e04c871200" rmap,00,2 */
9024         while ((token = strsep(&pch, ",")) != NULL) {
9025                 if (i > 2)
9026                         break;
9027                 tmp[i] = token;
9028                 i++;
9029         }
9030 #ifdef CONFIG_IOL
9031         padapter->registrypriv.fw_iol = 0;/* 0:Disable, 1:enable, 2:by usb speed */
9032 #endif
9033
9034         if (strcmp(tmp[0], "status") == 0) {
9035                 sprintf(extra, "Load File efuse=%s,Load File MAC=%s"
9036                         , pHalData->efuse_file_status == EFUSE_FILE_FAILED ? "FAIL" : "OK"
9037                         , pHalData->macaddr_file_status == MACADDR_FILE_FAILED ? "FAIL" : "OK"
9038                        );
9039                 goto exit;
9040         } else if (strcmp(tmp[0], "drvmap") == 0) {
9041                 static u8 drvmaporder = 0;
9042                 u8 *efuse;
9043                 u32 shift, cnt;
9044                 u32 blksz = 0x200; /* The size of one time show, default 512 */
9045                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (void *)&mapLen, _FALSE);
9046
9047                 efuse = pHalData->efuse_eeprom_data;
9048
9049                 shift = blksz * drvmaporder;
9050                 efuse += shift;
9051                 cnt = mapLen - shift;
9052
9053                 if (cnt > blksz) {
9054                         cnt = blksz;
9055                         drvmaporder++;
9056                 } else
9057                         drvmaporder = 0;
9058
9059                 sprintf(extra, "\n");
9060                 for (i = 0; i < cnt; i += 16) {
9061                         sprintf(extra, "%s0x%02x\t", extra, shift + i);
9062                         for (j = 0; j < 8; j++)
9063                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9064                         sprintf(extra, "%s\t", extra);
9065                         for (; j < 16; j++)
9066                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9067                         sprintf(extra, "%s\n", extra);
9068                 }
9069                 if ((shift + cnt) < mapLen)
9070                         sprintf(extra, "%s\t...more (left:%d/%d)\n", extra, mapLen-(shift + cnt), mapLen);
9071
9072         } else if (strcmp(tmp[0], "realmap") == 0) {
9073                 static u8 order = 0;
9074                 u8 *efuse;
9075                 u32 shift, cnt;
9076                 u32 blksz = 0x200; /* The size of one time show, default 512 */
9077
9078                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN , (void *)&mapLen, _FALSE);
9079                 efuse = pEfuseHal->fakeEfuseInitMap;
9080                 if (rtw_efuse_mask_map_read(padapter, 0, mapLen, efuse) == _FAIL) {
9081                         RTW_INFO("%s: read realmap Fail!!\n", __FUNCTION__);
9082                         err = -EFAULT;
9083                         goto exit;
9084                 }
9085
9086 #if 0
9087                 RTW_INFO("OFFSET\tVALUE(hex)\n");
9088                 for (i = 0; i < mapLen; i += 16) {
9089                         RTW_INFO("0x%02x\t", i);
9090                         for (j = 0; j < 8; j++)
9091                                 RTW_INFO("%02X ", efuse[i + j]);
9092                         RTW_INFO("\t");
9093                         for (; j < 16; j++)
9094                                 RTW_INFO("%02X ", efuse[i + j]);
9095                         RTW_INFO("\n");
9096                 }
9097                 RTW_INFO("\n");
9098 #endif
9099
9100                 shift = blksz * order;
9101                 efuse += shift;
9102                 cnt = mapLen - shift;
9103                 if (cnt > blksz) {
9104                         cnt = blksz;
9105                         order++;
9106                 } else
9107                         order = 0;
9108
9109                 sprintf(extra, "\n");
9110                 for (i = 0; i < cnt; i += 16) {
9111                         sprintf(extra, "%s0x%02x\t", extra, shift + i);
9112                         for (j = 0; j < 8; j++)
9113                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9114                         sprintf(extra, "%s\t", extra);
9115                         for (; j < 16; j++)
9116                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9117                         sprintf(extra, "%s\n", extra);
9118                 }
9119                 if ((shift + cnt) < mapLen)
9120                         sprintf(extra, "%s\t...more\n", extra);
9121         } else if (strcmp(tmp[0], "rmap") == 0) {
9122                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9123                         RTW_INFO("%s: rmap Fail!! Parameters error!\n", __FUNCTION__);
9124                         err = -EINVAL;
9125                         goto exit;
9126                 }
9127
9128                 /* rmap addr cnts */
9129                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9130                 RTW_INFO("%s: addr=%x\n", __FUNCTION__, addr);
9131
9132                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
9133                 if (cnts == 0) {
9134                         RTW_INFO("%s: rmap Fail!! cnts error!\n", __FUNCTION__);
9135                         err = -EINVAL;
9136                         goto exit;
9137                 }
9138                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9139
9140                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN , (PVOID)&max_available_len, _FALSE);
9141                 if ((addr + cnts) > max_available_len) {
9142                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9143                         err = -EINVAL;
9144                         goto exit;
9145                 }
9146
9147                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, data) == _FAIL) {
9148                         RTW_INFO("%s: rtw_efuse_mask_map_read error!\n", __func__);
9149                         err = -EFAULT;
9150                         goto exit;
9151                 }
9152
9153                 /*              RTW_INFO("%s: data={", __FUNCTION__); */
9154                 *extra = 0;
9155                 for (i = 0; i < cnts; i++) {
9156                         /*                      RTW_INFO("0x%02x ", data[i]); */
9157                         sprintf(extra, "%s0x%02X ", extra, data[i]);
9158                 }
9159                 /*              RTW_INFO("}\n"); */
9160         } else if (strcmp(tmp[0], "realraw") == 0) {
9161                 addr = 0;
9162                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_REAL_CONTENT_LEN , (PVOID)&mapLen, _FALSE);
9163                 RTW_INFO("EFUSE_MAX_SIZE = %d\n", EFUSE_MAX_SIZE);
9164
9165                 if (rtw_efuse_access(padapter, _FALSE, addr, mapLen, rawdata) == _FAIL) {
9166                         RTW_INFO("%s: rtw_efuse_access Fail!!\n", __func__);
9167                         err = -EFAULT;
9168                         goto exit;
9169                 }
9170
9171                 if (mapLen >= 512)
9172                         mapLen = 512;
9173
9174                 _rtw_memset(extra, '\0', strlen(extra));
9175
9176                 sprintf(extra, "\n0x00\t");
9177
9178                 for (i = 0; i < mapLen ; i++) {
9179                         sprintf(extra, "%s%02X", extra, rawdata[i]);
9180                         if ((i & 0xF) == 0xF) {
9181                                 sprintf(extra, "%s\n", extra);
9182                                 sprintf(extra, "%s0x%02x\t", extra, i + 1);
9183                         } else if ((i & 0x7) == 0x7)
9184                                 sprintf(extra, "%s \t", extra);
9185                         else
9186                                 sprintf(extra, "%s ", extra);
9187                 }
9188
9189         } else if (strcmp(tmp[0], "realrawb") == 0) {
9190                 addr = 0;
9191                 mapLen = EFUSE_MAX_SIZE;
9192                 RTW_INFO("EFUSE_MAX_SIZE =%d\n", EFUSE_MAX_SIZE);
9193                 if (rtw_efuse_access(padapter, _FALSE, addr, mapLen, rawdata) == _FAIL) {
9194                         RTW_INFO("%s: rtw_efuse_access Fail!!\n", __FUNCTION__);
9195                         err = -EFAULT;
9196                         goto exit;
9197                 }
9198                 _rtw_memset(extra, '\0', strlen(extra));
9199                 /*              RTW_INFO("%s: realraw={\n", __FUNCTION__); */
9200                 sprintf(extra, "\n0x00\t");
9201                 for (i = 512; i < mapLen; i++) {
9202                         /*                      RTW_INFO("%02X", rawdata[i]); */
9203                         sprintf(extra, "%s%02X", extra, rawdata[i]);
9204                         if ((i & 0xF) == 0xF) {
9205                                 /*                              RTW_INFO("\n"); */
9206                                 sprintf(extra, "%s\n", extra);
9207                                 sprintf(extra, "%s0x%02x\t", extra, i + 1);
9208                         } else if ((i & 0x7) == 0x7) {
9209                                 /*                              RTW_INFO("\t"); */
9210                                 sprintf(extra, "%s \t", extra);
9211                         } else {
9212                                 /*                              RTW_INFO(" "); */
9213                                 sprintf(extra, "%s ", extra);
9214                         }
9215                 }
9216                 /*              RTW_INFO("}\n"); */
9217         } else if (strcmp(tmp[0], "mac") == 0) {
9218                 if (hal_efuse_macaddr_offset(padapter) == -1) {
9219                         err = -EFAULT;
9220                         goto exit;
9221                 }
9222
9223                 addr = hal_efuse_macaddr_offset(padapter);
9224                 cnts = 6;
9225
9226                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9227                 if ((addr + cnts) > max_available_len) {
9228                         RTW_INFO("%s: addr(0x%02x)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9229                         err = -EFAULT;
9230                         goto exit;
9231                 }
9232
9233                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, data) == _FAIL) {
9234                         RTW_INFO("%s: rtw_efuse_mask_map_read error!\n", __func__);
9235                         err = -EFAULT;
9236                         goto exit;
9237                 }
9238
9239                 /*              RTW_INFO("%s: MAC address={", __FUNCTION__); */
9240                 *extra = 0;
9241                 for (i = 0; i < cnts; i++) {
9242                         /*                      RTW_INFO("%02X", data[i]); */
9243                         sprintf(extra, "%s%02X", extra, data[i]);
9244                         if (i != (cnts - 1)) {
9245                                 /*                              RTW_INFO(":"); */
9246                                 sprintf(extra, "%s:", extra);
9247                         }
9248                 }
9249                 /*              RTW_INFO("}\n"); */
9250         } else if (strcmp(tmp[0], "vidpid") == 0) {
9251 #ifdef CONFIG_RTL8188E
9252 #ifdef CONFIG_USB_HCI
9253                 addr = EEPROM_VID_88EU;
9254 #endif
9255 #ifdef CONFIG_PCI_HCI
9256                 addr = EEPROM_VID_88EE;
9257 #endif
9258 #endif /* CONFIG_RTL8188E */
9259
9260 #ifdef CONFIG_RTL8192E
9261 #ifdef CONFIG_USB_HCI
9262                 addr = EEPROM_VID_8192EU;
9263 #endif
9264 #ifdef CONFIG_PCI_HCI
9265                 addr = EEPROM_VID_8192EE;
9266 #endif
9267 #endif /* CONFIG_RTL8192E */
9268 #ifdef CONFIG_RTL8723B
9269                 addr = EEPROM_VID_8723BU;
9270 #endif /* CONFIG_RTL8192E */
9271
9272 #ifdef CONFIG_RTL8188F
9273                 addr = EEPROM_VID_8188FU;
9274 #endif /* CONFIG_RTL8188F */
9275
9276 #ifdef CONFIG_RTL8703B
9277 #ifdef CONFIG_USB_HCI
9278                 addr = EEPROM_VID_8703BU;
9279 #endif
9280 #endif /* CONFIG_RTL8703B */
9281
9282 #ifdef CONFIG_RTL8723D
9283 #ifdef CONFIG_USB_HCI
9284                 addr = EEPROM_VID_8723DU;
9285 #endif /* CONFIG_USB_HCI */
9286 #endif /* CONFIG_RTL8723D */
9287
9288                 cnts = 4;
9289
9290                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9291                 if ((addr + cnts) > max_available_len) {
9292                         RTW_INFO("%s: addr(0x%02x)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9293                         err = -EFAULT;
9294                         goto exit;
9295                 }
9296                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, data) == _FAIL) {
9297                         RTW_INFO("%s: rtw_efuse_access error!!\n", __FUNCTION__);
9298                         err = -EFAULT;
9299                         goto exit;
9300                 }
9301
9302                 /*              RTW_INFO("%s: {VID,PID}={", __FUNCTION__); */
9303                 *extra = 0;
9304                 for (i = 0; i < cnts; i++) {
9305                         /*                      RTW_INFO("0x%02x", data[i]); */
9306                         sprintf(extra, "%s0x%02X", extra, data[i]);
9307                         if (i != (cnts - 1)) {
9308                                 /*                              RTW_INFO(","); */
9309                                 sprintf(extra, "%s,", extra);
9310                         }
9311                 }
9312                 /*              RTW_INFO("}\n"); */
9313         } else if (strcmp(tmp[0], "ableraw") == 0) {
9314                 efuse_GetCurrentSize(padapter, &raw_cursize);
9315                 raw_maxsize = efuse_GetMaxSize(padapter);
9316                 sprintf(extra, "[available raw size]= %d bytes\n", raw_maxsize - raw_cursize);
9317         } else if (strcmp(tmp[0], "btableraw") == 0) {
9318                 efuse_bt_GetCurrentSize(padapter, &raw_cursize);
9319                 raw_maxsize = efuse_bt_GetMaxSize(padapter);
9320                 sprintf(extra, "[available raw size]= %d bytes\n", raw_maxsize - raw_cursize);
9321         } else if (strcmp(tmp[0], "btfmap") == 0) {
9322
9323                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
9324
9325                 mapLen = EFUSE_BT_MAX_MAP_LEN;
9326                 if (rtw_BT_efuse_map_read(padapter, 0, mapLen, pEfuseHal->BTEfuseInitMap) == _FAIL) {
9327                         RTW_INFO("%s: rtw_BT_efuse_map_read Fail!!\n", __FUNCTION__);
9328                         err = -EFAULT;
9329                         goto exit;
9330                 }
9331
9332                 /*              RTW_INFO("OFFSET\tVALUE(hex)\n"); */
9333                 sprintf(extra, "\n");
9334                 for (i = 0; i < 512; i += 16) { /* set 512 because the iwpriv's extra size have limit 0x7FF */
9335                         /*                      RTW_INFO("0x%03x\t", i); */
9336                         sprintf(extra, "%s0x%03x\t", extra, i);
9337                         for (j = 0; j < 8; j++) {
9338                                 /*                              RTW_INFO("%02X ", pEfuseHal->BTEfuseInitMap[i+j]); */
9339                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i + j]);
9340                         }
9341                         /*                      RTW_INFO("\t"); */
9342                         sprintf(extra, "%s\t", extra);
9343                         for (; j < 16; j++) {
9344                                 /*                              RTW_INFO("%02X ", pEfuseHal->BTEfuseInitMap[i+j]); */
9345                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i + j]);
9346                         }
9347                         /*                      RTW_INFO("\n"); */
9348                         sprintf(extra, "%s\n", extra);
9349                 }
9350                 /*              RTW_INFO("\n"); */
9351         } else if (strcmp(tmp[0], "btbmap") == 0) {
9352                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
9353
9354                 mapLen = EFUSE_BT_MAX_MAP_LEN;
9355                 if (rtw_BT_efuse_map_read(padapter, 0, mapLen, pEfuseHal->BTEfuseInitMap) == _FAIL) {
9356                         RTW_INFO("%s: rtw_BT_efuse_map_read Fail!!\n", __FUNCTION__);
9357                         err = -EFAULT;
9358                         goto exit;
9359                 }
9360
9361                 /*              RTW_INFO("OFFSET\tVALUE(hex)\n"); */
9362                 sprintf(extra, "\n");
9363                 for (i = 512; i < 1024 ; i += 16) {
9364                         /*                      RTW_INFO("0x%03x\t", i); */
9365                         sprintf(extra, "%s0x%03x\t", extra, i);
9366                         for (j = 0; j < 8; j++) {
9367                                 /*                              RTW_INFO("%02X ", data[i+j]); */
9368                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i + j]);
9369                         }
9370                         /*                      RTW_INFO("\t"); */
9371                         sprintf(extra, "%s\t", extra);
9372                         for (; j < 16; j++) {
9373                                 /*                              RTW_INFO("%02X ", data[i+j]); */
9374                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i + j]);
9375                         }
9376                         /*                      RTW_INFO("\n"); */
9377                         sprintf(extra, "%s\n", extra);
9378                 }
9379                 /*              RTW_INFO("\n"); */
9380         } else if (strcmp(tmp[0], "btrmap") == 0) {
9381                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9382                         err = -EINVAL;
9383                         goto exit;
9384                 }
9385
9386                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
9387
9388                 /* rmap addr cnts */
9389                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9390                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9391
9392                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
9393                 if (cnts == 0) {
9394                         RTW_INFO("%s: btrmap Fail!! cnts error!\n", __FUNCTION__);
9395                         err = -EINVAL;
9396                         goto exit;
9397                 }
9398                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9399
9400                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9401                 if ((addr + cnts) > max_available_len) {
9402                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9403                         err = -EFAULT;
9404                         goto exit;
9405                 }
9406
9407                 if (rtw_BT_efuse_map_read(padapter, addr, cnts, data) == _FAIL) {
9408                         RTW_INFO("%s: rtw_BT_efuse_map_read error!!\n", __FUNCTION__);
9409                         err = -EFAULT;
9410                         goto exit;
9411                 }
9412
9413                 *extra = 0;
9414                 /*              RTW_INFO("%s: bt efuse data={", __FUNCTION__); */
9415                 for (i = 0; i < cnts; i++) {
9416                         /*                      RTW_INFO("0x%02x ", data[i]); */
9417                         sprintf(extra, "%s 0x%02X ", extra, data[i]);
9418                 }
9419                 /*              RTW_INFO("}\n"); */
9420                 RTW_INFO(FUNC_ADPT_FMT ": BT MAC=[%s]\n", FUNC_ADPT_ARG(padapter), extra);
9421         } else if (strcmp(tmp[0], "btffake") == 0) {
9422                 /*              RTW_INFO("OFFSET\tVALUE(hex)\n"); */
9423                 sprintf(extra, "\n");
9424                 for (i = 0; i < 512; i += 16) {
9425                         /*                      RTW_INFO("0x%03x\t", i); */
9426                         sprintf(extra, "%s0x%03x\t", extra, i);
9427                         for (j = 0; j < 8; j++) {
9428                                 /*                              RTW_INFO("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]); */
9429                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
9430                         }
9431                         /*                      RTW_INFO("\t"); */
9432                         sprintf(extra, "%s\t", extra);
9433                         for (; j < 16; j++) {
9434                                 /*                              RTW_INFO("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]); */
9435                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
9436                         }
9437                         /*                      RTW_INFO("\n"); */
9438                         sprintf(extra, "%s\n", extra);
9439                 }
9440                 /*              RTW_INFO("\n"); */
9441         } else if (strcmp(tmp[0], "btbfake") == 0) {
9442                 /*              RTW_INFO("OFFSET\tVALUE(hex)\n"); */
9443                 sprintf(extra, "\n");
9444                 for (i = 512; i < 1024; i += 16) {
9445                         /*                      RTW_INFO("0x%03x\t", i); */
9446                         sprintf(extra, "%s0x%03x\t", extra, i);
9447                         for (j = 0; j < 8; j++) {
9448                                 /*                              RTW_INFO("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]); */
9449                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
9450                         }
9451                         /*                      RTW_INFO("\t"); */
9452                         sprintf(extra, "%s\t", extra);
9453                         for (; j < 16; j++) {
9454                                 /*                              RTW_INFO("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]); */
9455                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
9456                         }
9457                         /*                      RTW_INFO("\n"); */
9458                         sprintf(extra, "%s\n", extra);
9459                 }
9460                 /*              RTW_INFO("\n"); */
9461         } else if (strcmp(tmp[0], "wlrfkmap") == 0) {
9462                 static u8 fk_order = 0;
9463                 u8 *efuse;
9464                 u32 shift, cnt;
9465                 u32 blksz = 0x200; /* The size of one time show, default 512 */
9466
9467                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN , (void *)&mapLen, _FALSE);
9468                 efuse = pEfuseHal->fakeEfuseModifiedMap;
9469
9470                 shift = blksz * fk_order;
9471                 efuse += shift;
9472                 cnt = mapLen - shift;
9473                 if (cnt > blksz) {
9474                         cnt = blksz;
9475                         fk_order++;
9476                 } else
9477                         fk_order = 0;
9478
9479                 sprintf(extra, "\n");
9480                 for (i = 0; i < cnt; i += 16) {
9481                         sprintf(extra, "%s0x%02x\t", extra, shift + i);
9482                         for (j = 0; j < 8; j++)
9483                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9484                         sprintf(extra, "%s\t", extra);
9485                         for (; j < 16; j++)
9486                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9487                         sprintf(extra, "%s\n", extra);
9488                 }
9489                 if ((shift + cnt) < mapLen)
9490                         sprintf(extra, "%s\t...more\n", extra);
9491
9492         } else if (strcmp(tmp[0], "wlrfkrmap") == 0) {
9493                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9494                         RTW_INFO("%s: rmap Fail!! Parameters error!\n", __FUNCTION__);
9495                         err = -EINVAL;
9496                         goto exit;
9497                 }
9498                 /* rmap addr cnts */
9499                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9500                 RTW_INFO("%s: addr=%x\n", __FUNCTION__, addr);
9501
9502                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
9503                 if (cnts == 0) {
9504                         RTW_INFO("%s: rmap Fail!! cnts error!\n", __FUNCTION__);
9505                         err = -EINVAL;
9506                         goto exit;
9507                 }
9508                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9509
9510                 /*              RTW_INFO("%s: data={", __FUNCTION__); */
9511                 *extra = 0;
9512                 for (i = 0; i < cnts; i++) {
9513                         RTW_INFO("wlrfkrmap = 0x%02x\n", pEfuseHal->fakeEfuseModifiedMap[addr + i]);
9514                         sprintf(extra, "%s0x%02X ", extra, pEfuseHal->fakeEfuseModifiedMap[addr + i]);
9515                 }
9516         } else if (strcmp(tmp[0], "btrfkrmap") == 0) {
9517                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9518                         RTW_INFO("%s: rmap Fail!! Parameters error!\n", __FUNCTION__);
9519                         err = -EINVAL;
9520                         goto exit;
9521                 }
9522                 /* rmap addr cnts */
9523                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9524                 RTW_INFO("%s: addr=%x\n", __FUNCTION__, addr);
9525
9526                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
9527                 if (cnts == 0) {
9528                         RTW_INFO("%s: rmap Fail!! cnts error!\n", __FUNCTION__);
9529                         err = -EINVAL;
9530                         goto exit;
9531                 }
9532                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9533
9534                 /*              RTW_INFO("%s: data={", __FUNCTION__); */
9535                 *extra = 0;
9536                 for (i = 0; i < cnts; i++) {
9537                         RTW_INFO("wlrfkrmap = 0x%02x\n", pEfuseHal->fakeBTEfuseModifiedMap[addr + i]);
9538                         sprintf(extra, "%s0x%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[addr + i]);
9539                 }
9540         } else if (strcmp(tmp[0], "mask") == 0) {
9541                 *extra = 0;
9542                 mask_len = sizeof(u8) * rtw_get_efuse_mask_arraylen(padapter);
9543                 rtw_efuse_mask_array(padapter, mask_buf);
9544
9545                 if (padapter->registrypriv.bFileMaskEfuse == _TRUE)
9546                         _rtw_memcpy(mask_buf, maskfileBuffer, mask_len);
9547
9548                 sprintf(extra, "\n");
9549                 for (i = 0; i < mask_len; i++)
9550                         sprintf(extra, "%s0x%02X\n", extra, mask_buf[i]);
9551
9552         } else
9553                 sprintf(extra, "Command not found!");
9554
9555 exit:
9556         if (data)
9557                 rtw_mfree(data, EFUSE_BT_MAX_MAP_LEN);
9558         if (rawdata)
9559                 rtw_mfree(rawdata, EFUSE_BT_MAX_MAP_LEN);
9560         if (!err)
9561                 wrqu->length = strlen(extra);
9562
9563         if (padapter->registrypriv.mp_mode == 0) {
9564 #ifdef CONFIG_IPS
9565                 rtw_pm_set_ips(padapter, ips_mode);
9566 #endif /* CONFIG_IPS */
9567
9568 #ifdef CONFIG_LPS
9569                 rtw_pm_set_lps(padapter, lps_mode);
9570 #endif /* CONFIG_LPS */
9571         }
9572
9573 #ifdef CONFIG_IOL
9574         padapter->registrypriv.fw_iol = org_fw_iol;/* 0:Disable, 1:enable, 2:by usb speed */
9575 #endif
9576         return err;
9577 }
9578
9579 static int rtw_mp_efuse_set(struct net_device *dev,
9580                             struct iw_request_info *info,
9581                             union iwreq_data *wdata, char *extra)
9582 {
9583         struct iw_point *wrqu;
9584         PADAPTER padapter;
9585         struct pwrctrl_priv *pwrctrlpriv ;
9586         PHAL_DATA_TYPE pHalData;
9587         PEFUSE_HAL pEfuseHal;
9588         struct hal_ops *pHalFunc;
9589         struct mp_priv *pmp_priv;
9590
9591         u8 ips_mode = IPS_NUM; /* init invalid value */
9592         u8 lps_mode = PS_MODE_NUM; /* init invalid value */
9593         u32 i = 0, j = 0, jj, kk;
9594         u8 *setdata = NULL;
9595         u8 *ShadowMapBT = NULL;
9596         u8 *ShadowMapWiFi = NULL;
9597         u8 *setrawdata = NULL;
9598         char *pch, *ptmp, *token, *tmp[3] = {0x00, 0x00, 0x00};
9599         u16 addr = 0xFF, cnts = 0, BTStatus = 0 , max_available_len = 0;
9600         u16 wifimaplen;
9601         int err;
9602
9603         wrqu = (struct iw_point *)wdata;
9604         padapter = rtw_netdev_priv(dev);
9605         pwrctrlpriv = adapter_to_pwrctl(padapter);
9606         pHalData = GET_HAL_DATA(padapter);
9607         pEfuseHal = &pHalData->EfuseHal;
9608         pHalFunc = &padapter->HalFunc;
9609         pmp_priv = &padapter->mppriv;
9610
9611         err = 0;
9612
9613         if (copy_from_user(extra, wrqu->pointer, wrqu->length))
9614                 return -EFAULT;
9615
9616         EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN , (void *)&wifimaplen, _FALSE);
9617
9618         setdata = rtw_zmalloc(1024);
9619         if (setdata == NULL) {
9620                 err = -ENOMEM;
9621                 goto exit;
9622         }
9623         ShadowMapBT = rtw_malloc(EFUSE_BT_MAX_MAP_LEN);
9624         if (ShadowMapBT == NULL) {
9625                 err = -ENOMEM;
9626                 goto exit;
9627         }
9628         ShadowMapWiFi = rtw_malloc(wifimaplen);
9629         if (ShadowMapWiFi == NULL) {
9630                 err = -ENOMEM;
9631                 goto exit;
9632         }
9633         setrawdata = rtw_malloc(EFUSE_MAX_SIZE);
9634         if (setrawdata == NULL) {
9635                 err = -ENOMEM;
9636                 goto exit;
9637         }
9638
9639 #ifdef CONFIG_LPS
9640         lps_mode = pwrctrlpriv->power_mgnt;/* keep org value */
9641         rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
9642 #endif
9643
9644 #ifdef CONFIG_IPS
9645         ips_mode = pwrctrlpriv->ips_mode;/* keep org value */
9646         rtw_pm_set_ips(padapter, IPS_NONE);
9647 #endif
9648
9649         pch = extra;
9650         RTW_INFO("%s: in=%s\n", __FUNCTION__, extra);
9651
9652         i = 0;
9653         while ((token = strsep(&pch, ",")) != NULL) {
9654                 if (i > 2)
9655                         break;
9656                 tmp[i] = token;
9657                 i++;
9658         }
9659
9660         /* tmp[0],[1],[2] */
9661         /* wmap,addr,00e04c871200 */
9662         if (strcmp(tmp[0], "wmap") == 0) {
9663                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9664                         err = -EINVAL;
9665                         goto exit;
9666                 }
9667
9668 #ifndef RTW_HALMAC
9669                 /* unknown bug workaround, need to fix later */
9670                 addr = 0x1ff;
9671                 rtw_write8(padapter, EFUSE_CTRL + 1, (addr & 0xff));
9672                 rtw_msleep_os(10);
9673                 rtw_write8(padapter, EFUSE_CTRL + 2, ((addr >> 8) & 0x03));
9674                 rtw_msleep_os(10);
9675                 rtw_write8(padapter, EFUSE_CTRL + 3, 0x72);
9676                 rtw_msleep_os(10);
9677                 rtw_read8(padapter, EFUSE_CTRL);
9678 #endif /* RTW_HALMAC */
9679
9680                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9681                 addr &= 0xFFF;
9682
9683                 cnts = strlen(tmp[2]);
9684                 if (cnts % 2) {
9685                         err = -EINVAL;
9686                         goto exit;
9687                 }
9688                 cnts /= 2;
9689                 if (cnts == 0) {
9690                         err = -EINVAL;
9691                         goto exit;
9692                 }
9693
9694                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9695                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9696                 RTW_INFO("%s: map data=%s\n", __FUNCTION__, tmp[2]);
9697
9698                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9699                         setdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
9700
9701                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9702
9703                 if ((addr + cnts) > max_available_len) {
9704                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9705                         err = -EFAULT;
9706                         goto exit;
9707                 }
9708
9709                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
9710                         RTW_INFO("%s: rtw_efuse_map_write error!!\n", __FUNCTION__);
9711                         err = -EFAULT;
9712                         goto exit;
9713                 }
9714                 *extra = 0;
9715                 RTW_INFO("%s: after rtw_efuse_map_write to _rtw_memcmp\n", __func__);
9716                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, ShadowMapWiFi) == _SUCCESS) {
9717                         if (_rtw_memcmp((void *)ShadowMapWiFi , (void *)setdata, cnts)) {
9718                                 RTW_INFO("%s: WiFi write map afterf compare success\n", __FUNCTION__);
9719                                 sprintf(extra, "WiFi write map compare OK\n");
9720                                 err = 0;
9721                                 goto exit;
9722                         } else {
9723                                 sprintf(extra, "WiFi write map compare FAIL\n");
9724                                 RTW_INFO("%s: WiFi write map compare Fail\n", __FUNCTION__);
9725                                 err = 0;
9726                                 goto exit;
9727                         }
9728                 }
9729         } else if (strcmp(tmp[0], "wraw") == 0) {
9730                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9731                         err = -EINVAL;
9732                         goto exit;
9733                 }
9734
9735                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9736                 addr &= 0xFFF;
9737
9738                 cnts = strlen(tmp[2]);
9739                 if (cnts % 2) {
9740                         err = -EINVAL;
9741                         goto exit;
9742                 }
9743                 cnts /= 2;
9744                 if (cnts == 0) {
9745                         err = -EINVAL;
9746                         goto exit;
9747                 }
9748
9749                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9750                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9751                 RTW_INFO("%s: raw data=%s\n", __FUNCTION__, tmp[2]);
9752
9753                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9754                         setrawdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
9755
9756                 if (rtw_efuse_access(padapter, _TRUE, addr, cnts, setrawdata) == _FAIL) {
9757                         RTW_INFO("%s: rtw_efuse_access error!!\n", __FUNCTION__);
9758                         err = -EFAULT;
9759                         goto exit;
9760                 }
9761         } else if (strcmp(tmp[0], "btwraw") == 0) {
9762                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9763                         err = -EINVAL;
9764                         goto exit;
9765                 }
9766
9767                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9768                 addr &= 0xFFF;
9769
9770                 cnts = strlen(tmp[2]);
9771                 if (cnts % 2) {
9772                         err = -EINVAL;
9773                         goto exit;
9774                 }
9775                 cnts /= 2;
9776                 if (cnts == 0) {
9777                         err = -EINVAL;
9778                         goto exit;
9779                 }
9780
9781                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9782                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9783                 RTW_INFO("%s: raw data=%s\n", __FUNCTION__, tmp[2]);
9784
9785                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9786                         setrawdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
9787 #ifdef RTW_HALMAC
9788                 if (rtw_efuse_bt_access(padapter, _TRUE, addr, cnts, setrawdata) == _FAIL) {
9789                         RTW_INFO("%s: rtw_efuse_access error!!\n", __FUNCTION__);
9790                         err = -EFAULT;
9791                         goto exit;
9792                 }
9793 #else
9794                 rtw_write8(padapter, 0x35, 1); /* switch bank 1 (BT)*/
9795                 if (rtw_efuse_access(padapter, _TRUE, addr, cnts, setrawdata) == _FAIL) {
9796                         RTW_INFO("%s: rtw_efuse_access error!!\n", __FUNCTION__);
9797                         rtw_write8(padapter, 0x35, 0); /* switch bank 0 (WiFi)*/
9798                         err = -EFAULT;
9799                         goto exit;
9800                 }
9801                 rtw_write8(padapter, 0x35, 0); /* switch bank 0 (WiFi)*/
9802 #endif
9803         } else if (strcmp(tmp[0], "mac") == 0) {
9804                 if (tmp[1] == NULL) {
9805                         err = -EINVAL;
9806                         goto exit;
9807                 }
9808
9809                 /* mac,00e04c871200 */
9810
9811                 if (hal_efuse_macaddr_offset(padapter) == -1) {
9812                         err = -EFAULT;
9813                         goto exit;
9814                 }
9815
9816                 addr = hal_efuse_macaddr_offset(padapter);
9817                 cnts = strlen(tmp[1]);
9818                 if (cnts % 2) {
9819                         err = -EINVAL;
9820                         goto exit;
9821                 }
9822                 cnts /= 2;
9823                 if (cnts == 0) {
9824                         err = -EINVAL;
9825                         goto exit;
9826                 }
9827                 if (cnts > 6) {
9828                         RTW_INFO("%s: error data for mac addr=\"%s\"\n", __FUNCTION__, tmp[1]);
9829                         err = -EFAULT;
9830                         goto exit;
9831                 }
9832
9833                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9834                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9835                 RTW_INFO("%s: MAC address=%s\n", __FUNCTION__, tmp[1]);
9836
9837                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9838                         setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk + 1]);
9839
9840                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9841
9842                 if ((addr + cnts) > max_available_len) {
9843                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9844                         err = -EFAULT;
9845                         goto exit;
9846                 }
9847
9848                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
9849                         RTW_INFO("%s: rtw_efuse_map_write error!!\n", __FUNCTION__);
9850                         err = -EFAULT;
9851                         goto exit;
9852                 }
9853         } else if (strcmp(tmp[0], "vidpid") == 0) {
9854                 if (tmp[1] == NULL) {
9855                         err = -EINVAL;
9856                         goto exit;
9857                 }
9858
9859                 /* pidvid,da0b7881               */
9860 #ifdef CONFIG_RTL8188E
9861 #ifdef CONFIG_USB_HCI
9862                 addr = EEPROM_VID_88EU;
9863 #endif
9864 #ifdef CONFIG_PCI_HCI
9865                 addr = EEPROM_VID_88EE;
9866 #endif
9867 #endif /* CONFIG_RTL8188E */
9868
9869 #ifdef CONFIG_RTL8192E
9870 #ifdef CONFIG_USB_HCI
9871                 addr = EEPROM_VID_8192EU;
9872 #endif
9873 #ifdef CONFIG_PCI_HCI
9874                 addr = EEPROM_VID_8192EE;
9875 #endif
9876 #endif /* CONFIG_RTL8188E */
9877
9878 #ifdef CONFIG_RTL8723B
9879                 addr = EEPROM_VID_8723BU;
9880 #endif
9881
9882 #ifdef CONFIG_RTL8188F
9883                 addr = EEPROM_VID_8188FU;
9884 #endif
9885
9886 #ifdef CONFIG_RTL8703B
9887 #ifdef CONFIG_USB_HCI
9888                 addr = EEPROM_VID_8703BU;
9889 #endif /* CONFIG_USB_HCI */
9890 #endif /* CONFIG_RTL8703B */
9891
9892 #ifdef CONFIG_RTL8723D
9893 #ifdef CONFIG_USB_HCI
9894                 addr = EEPROM_VID_8723DU;
9895 #endif /* CONFIG_USB_HCI */
9896 #endif /* CONFIG_RTL8723D */
9897
9898                 cnts = strlen(tmp[1]);
9899                 if (cnts % 2) {
9900                         err = -EINVAL;
9901                         goto exit;
9902                 }
9903                 cnts /= 2;
9904                 if (cnts == 0) {
9905                         err = -EINVAL;
9906                         goto exit;
9907                 }
9908
9909                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9910                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9911                 RTW_INFO("%s: VID/PID=%s\n", __FUNCTION__, tmp[1]);
9912
9913                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9914                         setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk + 1]);
9915
9916                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9917                 if ((addr + cnts) > max_available_len) {
9918                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9919                         err = -EFAULT;
9920                         goto exit;
9921                 }
9922
9923                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
9924                         RTW_INFO("%s: rtw_efuse_map_write error!!\n", __FUNCTION__);
9925                         err = -EFAULT;
9926                         goto exit;
9927                 }
9928         } else if (strcmp(tmp[0], "wldumpfake") == 0) {
9929                 if (wifimaplen > EFUSE_MAX_MAP_LEN)
9930                         cnts = EFUSE_MAX_MAP_LEN;
9931                 else
9932                         cnts = wifimaplen;
9933                 if (rtw_efuse_mask_map_read(padapter, 0, cnts, pEfuseHal->fakeEfuseModifiedMap) == _SUCCESS)
9934                         RTW_INFO("%s: WiFi hw efuse dump to Fake map success\n", __func__);
9935                 else {
9936                         RTW_INFO("%s: WiFi hw efuse dump to Fake map Fail\n", __func__);
9937                         err = -EFAULT;
9938                 }
9939         } else if (strcmp(tmp[0], "btwmap") == 0) {
9940                 rtw_write8(padapter, 0xa3, 0x05); /* For 8723AB ,8821S ? */
9941                 BTStatus = rtw_read8(padapter, 0xa0);
9942                 RTW_INFO("%s: btwmap before read 0xa0 BT Status =0x%x\n", __FUNCTION__, BTStatus);
9943                 if (BTStatus != 0x04) {
9944                         sprintf(extra, "BT Status not Active ,can't do Write\n");
9945                         goto exit;
9946                 }
9947
9948                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9949                         err = -EINVAL;
9950                         goto exit;
9951                 }
9952
9953 #ifndef RTW_HALMAC
9954                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
9955                 addr = 0x1ff;
9956                 rtw_write8(padapter, EFUSE_CTRL + 1, (addr & 0xff));
9957                 rtw_msleep_os(10);
9958                 rtw_write8(padapter, EFUSE_CTRL + 2, ((addr >> 8) & 0x03));
9959                 rtw_msleep_os(10);
9960                 rtw_write8(padapter, EFUSE_CTRL + 3, 0x72);
9961                 rtw_msleep_os(10);
9962                 rtw_read8(padapter, EFUSE_CTRL);
9963                 BTEfuse_PowerSwitch(padapter, 1, _FALSE);
9964 #endif /* RTW_HALMAC */
9965
9966                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9967                 addr &= 0xFFF;
9968
9969                 cnts = strlen(tmp[2]);
9970                 if (cnts % 2) {
9971                         err = -EINVAL;
9972                         goto exit;
9973                 }
9974                 cnts /= 2;
9975                 if (cnts == 0) {
9976                         err = -EINVAL;
9977                         goto exit;
9978                 }
9979
9980                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9981                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9982                 RTW_INFO("%s: BT data=%s\n", __FUNCTION__, tmp[2]);
9983
9984                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9985                         setdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
9986 #ifdef CONFIG_RTL8703B
9987                 if (cnts == 1 && addr == 0x189) {
9988                         setdata[1] = setdata[0];
9989                         setdata[0] = 0x00;
9990                         cnts += 1;
9991                         addr = 0x188;
9992                         RTW_INFO("addr 0x%x ,setdata=0x%X 0x%X\n", addr, setdata[0], setdata[1]);
9993                 } else if (cnts == 1 && addr == 0x161) {
9994                         setdata[1] = setdata[0];
9995                         setdata[0] = 0xFE;
9996                         cnts += 1;
9997                         addr = 0x160;
9998                         RTW_INFO("addr 0x%x ,setdata=0x%X 0x%X\n", addr, setdata[0], setdata[1]);
9999                 }
10000 #endif
10001 #ifndef RTW_HALMAC
10002                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10003                 if ((addr + cnts) > max_available_len) {
10004                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10005                         err = -EFAULT;
10006                         goto exit;
10007                 }
10008 #endif
10009                 if (rtw_BT_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
10010                         RTW_INFO("%s: rtw_BT_efuse_map_write error!!\n", __FUNCTION__);
10011                         err = -EFAULT;
10012                         goto exit;
10013                 }
10014                 *extra = 0;
10015                 RTW_INFO("%s: after rtw_BT_efuse_map_write to _rtw_memcmp\n", __FUNCTION__);
10016                 if ((rtw_BT_efuse_map_read(padapter, addr, cnts, ShadowMapBT) == _SUCCESS)) {
10017                         if (_rtw_memcmp((void *)ShadowMapBT , (void *)setdata, cnts)) {
10018                                 RTW_INFO("%s: BT write map compare OK BTStatus=0x%x\n", __FUNCTION__, BTStatus);
10019                                 sprintf(extra, "BT write map compare OK");
10020                                 err = 0;
10021                                 goto exit;
10022                         } else {
10023                                 sprintf(extra, "BT write map compare FAIL");
10024                                 RTW_INFO("%s: BT write map compare FAIL BTStatus=0x%x\n", __FUNCTION__, BTStatus);
10025                                 err = 0;
10026                                 goto exit;
10027                         }
10028                 }
10029         } else if (strcmp(tmp[0], "btwfake") == 0) {
10030                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
10031                         err = -EINVAL;
10032                         goto exit;
10033                 }
10034
10035                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10036                 addr &= 0xFFF;
10037
10038                 cnts = strlen(tmp[2]);
10039                 if (cnts % 2) {
10040                         err = -EINVAL;
10041                         goto exit;
10042                 }
10043                 cnts /= 2;
10044                 if (cnts == 0) {
10045                         err = -EINVAL;
10046                         goto exit;
10047                 }
10048
10049                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
10050                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
10051                 RTW_INFO("%s: BT tmp data=%s\n", __FUNCTION__, tmp[2]);
10052
10053                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
10054                         pEfuseHal->fakeBTEfuseModifiedMap[addr + jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
10055         } else if (strcmp(tmp[0], "btdumpfake") == 0) {
10056                 if (rtw_BT_efuse_map_read(padapter, 0, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _SUCCESS)
10057                         RTW_INFO("%s: BT read all map success\n", __FUNCTION__);
10058                 else {
10059                         RTW_INFO("%s: BT read all map Fail!\n", __FUNCTION__);
10060                         err = -EFAULT;
10061                 }
10062         } else if (strcmp(tmp[0], "btfk2map") == 0) {
10063                 rtw_write8(padapter, 0xa3, 0x05);
10064                 BTStatus = rtw_read8(padapter, 0xa0);
10065                 RTW_INFO("%s: btwmap before read 0xa0 BT Status =0x%x\n", __FUNCTION__, BTStatus);
10066                 if (BTStatus != 0x04) {
10067                         sprintf(extra, "BT Status not Active Write FAIL\n");
10068                         goto exit;
10069                 }
10070 #ifndef RTW_HALMAC
10071                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
10072                 addr = 0x1ff;
10073                 rtw_write8(padapter, EFUSE_CTRL + 1, (addr & 0xff));
10074                 rtw_msleep_os(10);
10075                 rtw_write8(padapter, EFUSE_CTRL + 2, ((addr >> 8) & 0x03));
10076                 rtw_msleep_os(10);
10077                 rtw_write8(padapter, EFUSE_CTRL + 3, 0x72);
10078                 rtw_msleep_os(10);
10079                 rtw_read8(padapter, EFUSE_CTRL);
10080                 BTEfuse_PowerSwitch(padapter, 1, _FALSE);
10081 #endif /* RTW_HALMAC */
10082                 _rtw_memcpy(pEfuseHal->BTEfuseModifiedMap, pEfuseHal->fakeBTEfuseModifiedMap, EFUSE_BT_MAX_MAP_LEN);
10083
10084                 if (rtw_BT_efuse_map_write(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _FAIL) {
10085                         RTW_INFO("%s: rtw_BT_efuse_map_write error!\n", __FUNCTION__);
10086                         err = -EFAULT;
10087                         goto exit;
10088                 }
10089
10090                 RTW_INFO("pEfuseHal->fakeBTEfuseModifiedMap OFFSET\tVALUE(hex)\n");
10091                 for (i = 0; i < EFUSE_BT_MAX_MAP_LEN; i += 16) {
10092                         printk("0x%02x\t", i);
10093                         for (j = 0; j < 8; j++)
10094                                 printk("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
10095                         printk("\t");
10096
10097                         for (; j < 16; j++)
10098                                 printk("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
10099                         printk("\n");
10100                 }
10101                 printk("\n");
10102 #if 1
10103                 err = -EFAULT;
10104                 RTW_INFO("%s: rtw_BT_efuse_map_read _rtw_memcmp\n", __FUNCTION__);
10105                 if ((rtw_BT_efuse_map_read(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseInitMap) == _SUCCESS)) {
10106                         if (_rtw_memcmp((void *)pEfuseHal->fakeBTEfuseModifiedMap, (void *)pEfuseHal->fakeBTEfuseInitMap, EFUSE_BT_MAX_MAP_LEN)) {
10107                                 sprintf(extra, "BT write map compare OK");
10108                                 RTW_INFO("%s: BT write map afterf compare success BTStatus=0x%x\n", __FUNCTION__, BTStatus);
10109                                 err = 0;
10110                                 goto exit;
10111                         } else {
10112                                 sprintf(extra, "BT write map compare FAIL");
10113                                 if (rtw_BT_efuse_map_write(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _FAIL)
10114                                         RTW_INFO("%s: rtw_BT_efuse_map_write compare error,retry = %d!\n", __FUNCTION__, i);
10115
10116                                 if (rtw_BT_efuse_map_read(padapter, EFUSE_BT, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseInitMap) == _SUCCESS) {
10117                                         RTW_INFO("pEfuseHal->fakeBTEfuseInitMap OFFSET\tVALUE(hex)\n");
10118
10119                                         for (i = 0; i < EFUSE_BT_MAX_MAP_LEN; i += 16) {
10120                                                 printk("0x%02x\t", i);
10121                                                 for (j = 0; j < 8; j++)
10122                                                         printk("%02X ", pEfuseHal->fakeBTEfuseInitMap[i + j]);
10123                                                 printk("\t");
10124                                                 for (; j < 16; j++)
10125                                                         printk("%02X ", pEfuseHal->fakeBTEfuseInitMap[i + j]);
10126                                                 printk("\n");
10127                                         }
10128                                         printk("\n");
10129                                 }
10130                                 RTW_INFO("%s: BT write map afterf compare not match to write efuse try write Map again , BTStatus=0x%x\n", __FUNCTION__, BTStatus);
10131                                 goto exit;
10132                         }
10133                 }
10134 #endif
10135
10136         } else if (strcmp(tmp[0], "wlfk2map") == 0) {
10137                 *extra = 0;
10138
10139                 if (padapter->registrypriv.bFileMaskEfuse != _TRUE && pmp_priv->bloadefusemap == _TRUE) {
10140                         RTW_INFO("%s: File eFuse mask file not to be loaded\n", __FUNCTION__);
10141                         sprintf(extra, "Not load eFuse mask file yet, Please use the efuse_mask CMD.\n");
10142                         err = 0;
10143                         goto exit;
10144                 }
10145
10146                 if (wifimaplen > EFUSE_MAX_MAP_LEN)
10147                         cnts = EFUSE_MAX_MAP_LEN;
10148                 else
10149                         cnts = wifimaplen;
10150                 if (rtw_efuse_map_write(padapter, 0x00, cnts, pEfuseHal->fakeEfuseModifiedMap) == _FAIL) {
10151                         RTW_INFO("%s: rtw_efuse_map_write fakeEfuseModifiedMap error!\n", __FUNCTION__);
10152                         err = -EFAULT;
10153                         goto exit;
10154                 }
10155
10156                 if (rtw_efuse_mask_map_read(padapter, 0x00, wifimaplen, ShadowMapWiFi) == _SUCCESS) {
10157                         if (_rtw_memcmp((void *)ShadowMapWiFi , (void *)pEfuseHal->fakeEfuseModifiedMap, cnts)) {
10158                                 RTW_INFO("%s: WiFi write map afterf compare OK\n", __FUNCTION__);
10159                                 sprintf(extra, "WiFi write map compare OK\n");
10160                                 err = 0;
10161                                 goto exit;
10162                         } else {
10163                                 sprintf(extra, "WiFi write map compare FAIL\n");
10164                                 RTW_INFO("%s: WiFi write map compare Fail\n", __FUNCTION__);
10165                                 err = 0;
10166                                 goto exit;
10167                         }
10168                 }
10169         } else if (strcmp(tmp[0], "wlwfake") == 0) {
10170                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
10171                         err = -EINVAL;
10172                         goto exit;
10173                 }
10174
10175                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10176                 addr &= 0xFFF;
10177
10178                 cnts = strlen(tmp[2]);
10179                 if (cnts % 2) {
10180                         err = -EINVAL;
10181                         goto exit;
10182                 }
10183                 cnts /= 2;
10184                 if (cnts == 0) {
10185                         err = -EINVAL;
10186                         goto exit;
10187                 }
10188
10189                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
10190                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
10191                 RTW_INFO("%s: map tmp data=%s\n", __FUNCTION__, tmp[2]);
10192
10193                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
10194                         pEfuseHal->fakeEfuseModifiedMap[addr + jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
10195                 _rtw_memset(extra, '\0', strlen(extra));
10196                 sprintf(extra, "wlwfake OK\n");
10197
10198         }
10199         else if (strcmp(tmp[0], "wfakemac") == 0) {
10200                 if (tmp[1] == NULL) {
10201                         err = -EINVAL;
10202                         goto exit;
10203                 }
10204                 /* wfakemac,00e04c871200 */
10205                 if (hal_efuse_macaddr_offset(padapter) == -1) {
10206                         err = -EFAULT;
10207                         goto exit;
10208                 }
10209
10210                 addr = hal_efuse_macaddr_offset(padapter);
10211                 cnts = strlen(tmp[1]);
10212                 if (cnts % 2) {
10213                         err = -EINVAL;
10214                         goto exit;
10215                 }
10216                 cnts /= 2;
10217                 if (cnts == 0) {
10218                         err = -EINVAL;
10219                         goto exit;
10220                 }
10221                 if (cnts > 6) {
10222                         RTW_INFO("%s: error data for mac addr=\"%s\"\n", __FUNCTION__, tmp[1]);
10223                         err = -EFAULT;
10224                         goto exit;
10225                 }
10226
10227                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
10228                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
10229                 RTW_INFO("%s: MAC address=%s\n", __FUNCTION__, tmp[1]);
10230
10231                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
10232                         pEfuseHal->fakeEfuseModifiedMap[addr + jj] = key_2char2num(tmp[1][kk], tmp[1][kk + 1]);
10233
10234                 _rtw_memset(extra, '\0', strlen(extra));
10235                 sprintf(extra, "write mac addr to fake map OK\n");
10236         } else if(strcmp(tmp[0], "update") == 0) {
10237                 RTW_INFO("To Use new eFuse map\n");
10238                 /*step read efuse/eeprom data and get mac_addr*/
10239                 rtw_hal_read_chip_info(padapter);
10240                 /* set mac addr*/
10241                 rtw_macaddr_cfg(adapter_mac_addr(padapter), get_hal_mac_addr(padapter));
10242                 _rtw_memcpy(padapter->pnetdev->dev_addr, get_hal_mac_addr(padapter), ETH_ALEN); /* set mac addr to net_device */
10243
10244 #ifdef CONFIG_P2P
10245                 rtw_init_wifidirect_addrs(padapter, adapter_mac_addr(padapter), adapter_mac_addr(padapter));
10246 #endif
10247 #ifdef CONFIG_MI_WITH_MBSSID_CAM
10248                 rtw_hal_change_macaddr_mbid(padapter, adapter_mac_addr(padapter));
10249 #else
10250                 rtw_hal_set_hwreg(padapter, HW_VAR_MAC_ADDR, adapter_mac_addr(padapter)); /* set mac addr to mac register */
10251 #endif
10252                 /*pHalFunc->hal_deinit(padapter);*/
10253                 if (pHalFunc->hal_init(padapter) == _FAIL) {
10254                         err = -EINVAL;
10255                         goto exit;
10256                 }
10257                 _rtw_memset(extra, '\0', strlen(extra));
10258                 sprintf(extra, "eFuse Update OK\n");
10259         }
10260
10261 exit:
10262         if (setdata)
10263                 rtw_mfree(setdata, 1024);
10264         if (ShadowMapBT)
10265                 rtw_mfree(ShadowMapBT, EFUSE_BT_MAX_MAP_LEN);
10266         if (ShadowMapWiFi)
10267                 rtw_mfree(ShadowMapWiFi, wifimaplen);
10268         if (setrawdata)
10269                 rtw_mfree(setrawdata, EFUSE_MAX_SIZE);
10270
10271         wrqu->length = strlen(extra);
10272
10273         if (padapter->registrypriv.mp_mode == 0) {
10274 #ifdef CONFIG_IPS
10275                 rtw_pm_set_ips(padapter, ips_mode);
10276 #endif /* CONFIG_IPS */
10277
10278 #ifdef CONFIG_LPS
10279                 rtw_pm_set_lps(padapter, lps_mode);
10280 #endif /* CONFIG_LPS */
10281         }
10282
10283         return err;
10284 }
10285
10286 #ifdef CONFIG_MP_INCLUDED
10287
10288 #ifdef CONFIG_RTW_CUSTOMER_STR
10289 static int rtw_mp_customer_str(
10290         struct net_device *dev,
10291         struct iw_request_info *info,
10292         union iwreq_data *wrqu, char *extra)
10293 {
10294         _adapter *adapter = rtw_netdev_priv(dev);
10295         u32 len;
10296         u8 *pbuf = NULL, *pch;
10297         char *ptmp;
10298         u8 param[RTW_CUSTOMER_STR_LEN];
10299         u8 count = 0;
10300         u8 tmp;
10301         u8 i;
10302         u32 pos;
10303         u8 ret;
10304         u8 read = 0;
10305
10306         if (adapter->registrypriv.mp_mode != 1
10307                 || !adapter->registrypriv.mp_customer_str)
10308                 return -EFAULT;
10309
10310         len = wrqu->data.length;
10311
10312         pbuf = (u8 *)rtw_zmalloc(len);
10313         if (pbuf == NULL) {
10314                 RTW_WARN("%s: no memory!\n", __func__);
10315                 return -ENOMEM;
10316         }
10317
10318         if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
10319                 rtw_mfree(pbuf, len);
10320                 RTW_WARN("%s: copy from user fail!\n", __func__);
10321                 return -EFAULT;
10322         }
10323         RTW_INFO("%s: string=\"%s\"\n", __func__, pbuf);
10324
10325         ptmp = (char *)pbuf;
10326         pch = strsep(&ptmp, ",");
10327         if ((pch == NULL) || (strlen(pch) == 0)) {
10328                 rtw_mfree(pbuf, len);
10329                 RTW_INFO("%s: parameter error(no cmd)!\n", __func__);
10330                 return -EFAULT;
10331         }
10332
10333         _rtw_memset(param, 0xFF, RTW_CUSTOMER_STR_LEN);
10334
10335         if (strcmp(pch, "read") == 0) {
10336                 read = 1;
10337                 ret = rtw_hal_customer_str_read(adapter, param);
10338
10339         } else if (strcmp(pch, "write") == 0) {
10340                 do {
10341                         pch = strsep(&ptmp, ":");
10342                         if ((pch == NULL) || (strlen(pch) == 0))
10343                                 break;
10344                         if (strlen(pch) != 2
10345                                 || IsHexDigit(*pch) == _FALSE
10346                                 || IsHexDigit(*(pch + 1)) == _FALSE
10347                                 || sscanf(pch, "%hhx", &tmp) != 1
10348                         ) {
10349                                 RTW_WARN("%s: invalid 8-bit hex!\n", __func__);
10350                                 rtw_mfree(pbuf, len);
10351                                 return -EFAULT;
10352                         }
10353
10354                         param[count++] = tmp;
10355
10356                 } while (count < RTW_CUSTOMER_STR_LEN);
10357
10358                 if (count == 0) {
10359                         rtw_mfree(pbuf, len);
10360                         RTW_WARN("%s: no input!\n", __func__);
10361                         return -EFAULT;
10362                 }
10363                 ret = rtw_hal_customer_str_write(adapter, param);
10364         } else {
10365                 rtw_mfree(pbuf, len);
10366                 RTW_INFO("%s: parameter error(unknown cmd)!\n", __func__);
10367                 return -EFAULT;
10368         }
10369
10370         pos = sprintf(extra, "%s: ", read ? "read" : "write");
10371         if (read == 0 || ret == _SUCCESS) {
10372                 for (i = 0; i < RTW_CUSTOMER_STR_LEN; i++)
10373                         pos += sprintf(extra + pos, "%02x:", param[i]);
10374                 extra[pos] = 0;
10375                 pos--;
10376         }
10377         pos += sprintf(extra + pos, " %s", ret == _SUCCESS ? "OK" : "FAIL");
10378
10379         wrqu->data.length = strlen(extra) + 1;
10380
10381 free_buf:
10382         rtw_mfree(pbuf, len);
10383         return 0;
10384 }
10385 #endif /* CONFIG_RTW_CUSTOMER_STR */
10386
10387 static int rtw_priv_mp_set(struct net_device *dev,
10388                            struct iw_request_info *info,
10389                            union iwreq_data *wdata, char *extra)
10390 {
10391
10392         struct iw_point *wrqu = (struct iw_point *)wdata;
10393         u32 subcmd = wrqu->flags;
10394
10395         switch (subcmd) {
10396         case CTA_TEST:
10397                 RTW_INFO("set CTA_TEST\n");
10398                 rtw_cta_test_start(dev, info, wdata, extra);
10399                 break;
10400         case MP_DISABLE_BT_COEXIST:
10401                 RTW_INFO("set case MP_DISABLE_BT_COEXIST\n");
10402                 rtw_mp_disable_bt_coexist(dev, info, wdata, extra);
10403                 break;
10404         case MP_IQK:
10405                 RTW_INFO("set MP_IQK\n");
10406                 rtw_mp_iqk(dev, info, wrqu, extra);
10407                 break;
10408         case MP_LCK:
10409                 RTW_INFO("set MP_LCK\n");
10410                 rtw_mp_lck(dev, info, wrqu, extra);
10411         break;
10412
10413         default:
10414                 return -EIO;
10415         }
10416
10417         return 0;
10418 }
10419
10420 static int rtw_priv_mp_get(struct net_device *dev,
10421                            struct iw_request_info *info,
10422                            union iwreq_data *wdata, char *extra)
10423 {
10424
10425         struct iw_point *wrqu = (struct iw_point *)wdata;
10426         u32 subcmd = wrqu->flags;
10427
10428         switch (subcmd) {
10429         case MP_START:
10430                 RTW_INFO("set case mp_start\n");
10431                 rtw_mp_start(dev, info, wrqu, extra);
10432                 break;
10433         case MP_STOP:
10434                 RTW_INFO("set case mp_stop\n");
10435                 rtw_mp_stop(dev, info, wrqu, extra);
10436                 break;
10437         case MP_BANDWIDTH:
10438                 RTW_INFO("set case mp_bandwidth\n");
10439                 rtw_mp_bandwidth(dev, info, wrqu, extra);
10440                 break;
10441         case MP_RESET_STATS:
10442                 RTW_INFO("set case MP_RESET_STATS\n");
10443                 rtw_mp_reset_stats(dev, info, wrqu, extra);
10444                 break;
10445         case MP_SetRFPathSwh:
10446                 RTW_INFO("set MP_SetRFPathSwitch\n");
10447                 rtw_mp_SetRFPath(dev, info, wrqu, extra);
10448                 break;
10449         case WRITE_REG:
10450                 rtw_mp_write_reg(dev, info, wrqu, extra);
10451                 break;
10452         case WRITE_RF:
10453                 rtw_mp_write_rf(dev, info, wrqu, extra);
10454                 break;
10455         case MP_PHYPARA:
10456                 RTW_INFO("mp_get  MP_PHYPARA\n");
10457                 rtw_mp_phypara(dev, info, wrqu, extra);
10458                 break;
10459         case MP_CHANNEL:
10460                 RTW_INFO("set case mp_channel\n");
10461                 rtw_mp_channel(dev , info, wrqu, extra);
10462                 break;
10463         case READ_REG:
10464                 RTW_INFO("mp_get  READ_REG\n");
10465                 rtw_mp_read_reg(dev, info, wrqu, extra);
10466                 break;
10467         case READ_RF:
10468                 RTW_INFO("mp_get  READ_RF\n");
10469                 rtw_mp_read_rf(dev, info, wrqu, extra);
10470                 break;
10471         case MP_RATE:
10472                 RTW_INFO("set case mp_rate\n");
10473                 rtw_mp_rate(dev, info, wrqu, extra);
10474                 break;
10475         case MP_TXPOWER:
10476                 RTW_INFO("set case MP_TXPOWER\n");
10477                 rtw_mp_txpower(dev, info, wrqu, extra);
10478                 break;
10479         case MP_ANT_TX:
10480                 RTW_INFO("set case MP_ANT_TX\n");
10481                 rtw_mp_ant_tx(dev, info, wrqu, extra);
10482                 break;
10483         case MP_ANT_RX:
10484                 RTW_INFO("set case MP_ANT_RX\n");
10485                 rtw_mp_ant_rx(dev, info, wrqu, extra);
10486                 break;
10487         case MP_QUERY:
10488                 rtw_mp_trx_query(dev, info, wrqu, extra);
10489                 break;
10490         case MP_CTX:
10491                 RTW_INFO("set case MP_CTX\n");
10492                 rtw_mp_ctx(dev, info, wrqu, extra);
10493                 break;
10494         case MP_ARX:
10495                 RTW_INFO("set case MP_ARX\n");
10496                 rtw_mp_arx(dev, info, wrqu, extra);
10497                 break;
10498         case MP_DUMP:
10499                 RTW_INFO("set case MP_DUMP\n");
10500                 rtw_mp_dump(dev, info, wrqu, extra);
10501                 break;
10502         case MP_PSD:
10503                 RTW_INFO("set case MP_PSD\n");
10504                 rtw_mp_psd(dev, info, wrqu, extra);
10505                 break;
10506         case MP_THER:
10507                 RTW_INFO("set case MP_THER\n");
10508                 rtw_mp_thermal(dev, info, wrqu, extra);
10509                 break;
10510         case MP_PwrCtlDM:
10511                 RTW_INFO("set MP_PwrCtlDM\n");
10512                 rtw_mp_PwrCtlDM(dev, info, wrqu, extra);
10513                 break;
10514         case MP_QueryDrvStats:
10515                 RTW_INFO("mp_get MP_QueryDrvStats\n");
10516                 rtw_mp_QueryDrv(dev, info, wdata, extra);
10517                 break;
10518         case MP_PWRTRK:
10519                 RTW_INFO("set case MP_PWRTRK\n");
10520                 rtw_mp_pwrtrk(dev, info, wrqu, extra);
10521                 break;
10522         case EFUSE_SET:
10523                 RTW_INFO("set case efuse set\n");
10524                 rtw_mp_efuse_set(dev, info, wdata, extra);
10525                 break;
10526         case EFUSE_GET:
10527                 RTW_INFO("efuse get EFUSE_GET\n");
10528                 rtw_mp_efuse_get(dev, info, wdata, extra);
10529                 break;
10530         case MP_GET_TXPOWER_INX:
10531                 RTW_INFO("mp_get MP_GET_TXPOWER_INX\n");
10532                 rtw_mp_txpower_index(dev, info, wrqu, extra);
10533                 break;
10534         case MP_GETVER:
10535                 RTW_INFO("mp_get MP_GETVER\n");
10536                 rtw_mp_getver(dev, info, wdata, extra);
10537                 break;
10538         case MP_MON:
10539                 RTW_INFO("mp_get MP_MON\n");
10540                 rtw_mp_mon(dev, info, wdata, extra);
10541                 break;
10542         case EFUSE_MASK:
10543                 RTW_INFO("mp_get EFUSE_MASK\n");
10544                 rtw_efuse_mask_file(dev, info, wdata, extra);
10545                 break;
10546         case  EFUSE_FILE:
10547                 RTW_INFO("mp_get EFUSE_FILE\n");
10548                 rtw_efuse_file_map(dev, info, wdata, extra);
10549                 break;
10550         case  MP_TX:
10551                 RTW_INFO("mp_get MP_TX\n");
10552                 rtw_mp_tx(dev, info, wdata, extra);
10553                 break;
10554         case  MP_RX:
10555                 RTW_INFO("mp_get MP_RX\n");
10556                 rtw_mp_rx(dev, info, wdata, extra);
10557                 break;
10558         case MP_HW_TX_MODE:
10559                 RTW_INFO("mp_get MP_HW_TX_MODE\n");
10560                 rtw_mp_hwtx(dev, info, wdata, extra);
10561                 break;
10562 #ifdef CONFIG_RTW_CUSTOMER_STR
10563         case MP_CUSTOMER_STR:
10564                 RTW_INFO("customer str\n");
10565                 rtw_mp_customer_str(dev, info, wdata, extra);
10566                 break;
10567 #endif
10568         default:
10569                 return -EIO;
10570         }
10571
10572         return 0;
10573 }
10574 #endif /*#if defined(CONFIG_MP_INCLUDED)*/
10575
10576
10577 #ifdef CONFIG_SDIO_INDIRECT_ACCESS
10578 #define DBG_MP_SDIO_INDIRECT_ACCESS 1
10579 static int rtw_mp_sd_iread(struct net_device *dev
10580                            , struct iw_request_info *info
10581                            , struct iw_point *wrqu
10582                            , char *extra)
10583 {
10584         char input[16];
10585         u8 width;
10586         unsigned long addr;
10587         u32 ret = 0;
10588         PADAPTER padapter = rtw_netdev_priv(dev);
10589
10590         if (wrqu->length > 16) {
10591                 RTW_INFO(FUNC_ADPT_FMT" wrqu->length:%d\n", FUNC_ADPT_ARG(padapter), wrqu->length);
10592                 ret = -EINVAL;
10593                 goto exit;
10594         }
10595
10596         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
10597                 RTW_INFO(FUNC_ADPT_FMT" copy_from_user fail\n", FUNC_ADPT_ARG(padapter));
10598                 ret = -EFAULT;
10599                 goto exit;
10600         }
10601
10602         _rtw_memset(extra, 0, wrqu->length);
10603
10604         if (sscanf(input, "%hhu,%lx", &width, &addr) != 2) {
10605                 RTW_INFO(FUNC_ADPT_FMT" sscanf fail\n", FUNC_ADPT_ARG(padapter));
10606                 ret = -EINVAL;
10607                 goto exit;
10608         }
10609
10610         if (addr > 0x3FFF) {
10611                 RTW_INFO(FUNC_ADPT_FMT" addr:0x%lx\n", FUNC_ADPT_ARG(padapter), addr);
10612                 ret = -EINVAL;
10613                 goto exit;
10614         }
10615
10616         if (DBG_MP_SDIO_INDIRECT_ACCESS)
10617                 RTW_INFO(FUNC_ADPT_FMT" width:%u, addr:0x%lx\n", FUNC_ADPT_ARG(padapter), width, addr);
10618
10619         switch (width) {
10620         case 1:
10621                 sprintf(extra, "0x%02x", rtw_sd_iread8(padapter, addr));
10622                 wrqu->length = strlen(extra);
10623                 break;
10624         case 2:
10625                 sprintf(extra, "0x%04x", rtw_sd_iread16(padapter, addr));
10626                 wrqu->length = strlen(extra);
10627                 break;
10628         case 4:
10629                 sprintf(extra, "0x%08x", rtw_sd_iread32(padapter, addr));
10630                 wrqu->length = strlen(extra);
10631                 break;
10632         default:
10633                 wrqu->length = 0;
10634                 ret = -EINVAL;
10635                 break;
10636         }
10637
10638 exit:
10639         return ret;
10640 }
10641
10642 static int rtw_mp_sd_iwrite(struct net_device *dev
10643                             , struct iw_request_info *info
10644                             , struct iw_point *wrqu
10645                             , char *extra)
10646 {
10647         char width;
10648         unsigned long addr, data;
10649         int ret = 0;
10650         PADAPTER padapter = rtw_netdev_priv(dev);
10651         char input[32];
10652
10653         if (wrqu->length > 32) {
10654                 RTW_INFO(FUNC_ADPT_FMT" wrqu->length:%d\n", FUNC_ADPT_ARG(padapter), wrqu->length);
10655                 ret = -EINVAL;
10656                 goto exit;
10657         }
10658
10659         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
10660                 RTW_INFO(FUNC_ADPT_FMT" copy_from_user fail\n", FUNC_ADPT_ARG(padapter));
10661                 ret = -EFAULT;
10662                 goto exit;
10663         }
10664
10665         _rtw_memset(extra, 0, wrqu->length);
10666
10667         if (sscanf(input, "%hhu,%lx,%lx", &width, &addr, &data) != 3) {
10668                 RTW_INFO(FUNC_ADPT_FMT" sscanf fail\n", FUNC_ADPT_ARG(padapter));
10669                 ret = -EINVAL;
10670                 goto exit;
10671         }
10672
10673         if (addr > 0x3FFF) {
10674                 RTW_INFO(FUNC_ADPT_FMT" addr:0x%lx\n", FUNC_ADPT_ARG(padapter), addr);
10675                 ret = -EINVAL;
10676                 goto exit;
10677         }
10678
10679         if (DBG_MP_SDIO_INDIRECT_ACCESS)
10680                 RTW_INFO(FUNC_ADPT_FMT" width:%u, addr:0x%lx, data:0x%lx\n", FUNC_ADPT_ARG(padapter), width, addr, data);
10681
10682         switch (width) {
10683         case 1:
10684                 if (data > 0xFF) {
10685                         ret = -EINVAL;
10686                         break;
10687                 }
10688                 rtw_sd_iwrite8(padapter, addr, data);
10689                 break;
10690         case 2:
10691                 if (data > 0xFFFF) {
10692                         ret = -EINVAL;
10693                         break;
10694                 }
10695                 rtw_sd_iwrite16(padapter, addr, data);
10696                 break;
10697         case 4:
10698                 rtw_sd_iwrite32(padapter, addr, data);
10699                 break;
10700         default:
10701                 wrqu->length = 0;
10702                 ret = -EINVAL;
10703                 break;
10704         }
10705
10706 exit:
10707         return ret;
10708 }
10709 #endif /* CONFIG_SDIO_INDIRECT_ACCESS */
10710
10711 static int rtw_priv_set(struct net_device *dev,
10712                         struct iw_request_info *info,
10713                         union iwreq_data *wdata, char *extra)
10714 {
10715         struct iw_point *wrqu = (struct iw_point *)wdata;
10716         u32 subcmd = wrqu->flags;
10717         PADAPTER padapter = rtw_netdev_priv(dev);
10718
10719         if (padapter == NULL)
10720                 return -ENETDOWN;
10721
10722         if (padapter->bup == _FALSE) {
10723                 RTW_INFO(" %s fail =>(padapter->bup == _FALSE )\n", __FUNCTION__);
10724                 return -ENETDOWN;
10725         }
10726
10727         if (RTW_CANNOT_RUN(padapter)) {
10728                 RTW_INFO("%s fail =>(bSurpriseRemoved == _TRUE) || ( bDriverStopped == _TRUE)\n", __func__);
10729                 return -ENETDOWN;
10730         }
10731
10732         if (extra == NULL) {
10733                 wrqu->length = 0;
10734                 return -EIO;
10735         }
10736
10737         if (subcmd < MP_NULL) {
10738 #ifdef CONFIG_MP_INCLUDED
10739                 rtw_priv_mp_set(dev, info, wdata, extra);
10740 #endif
10741                 return 0;
10742         }
10743
10744         switch (subcmd) {
10745 #ifdef CONFIG_WOWLAN
10746         case MP_WOW_ENABLE:
10747                 RTW_INFO("set case MP_WOW_ENABLE: %s\n", extra);
10748
10749                 rtw_wowlan_ctrl(dev, info, wdata, extra);
10750                 break;
10751         case MP_WOW_SET_PATTERN:
10752                 RTW_INFO("set case MP_WOW_SET_PATTERN: %s\n", extra);
10753                 rtw_wowlan_set_pattern(dev, info, wdata, extra);
10754                 break;
10755 #endif
10756 #ifdef CONFIG_AP_WOWLAN
10757         case MP_AP_WOW_ENABLE:
10758                 RTW_INFO("set case MP_AP_WOW_ENABLE: %s\n", extra);
10759                 rtw_ap_wowlan_ctrl(dev, info, wdata, extra);
10760                 break;
10761 #endif
10762 #ifdef CONFIG_APPEND_VENDOR_IE_ENABLE
10763         case VENDOR_IE_SET:
10764                 RTW_INFO("set case VENDOR_IE_SET\n");
10765                 rtw_vendor_ie_set(dev , info , wdata , extra);
10766                 break;
10767 #endif
10768         default:
10769                 return -EIO;
10770         }
10771
10772         return 0;
10773 }
10774
10775
10776 static int rtw_priv_get(struct net_device *dev,
10777                         struct iw_request_info *info,
10778                         union iwreq_data *wdata, char *extra)
10779 {
10780         struct iw_point *wrqu = (struct iw_point *)wdata;
10781         u32 subcmd = wrqu->flags;
10782         PADAPTER padapter = rtw_netdev_priv(dev);
10783
10784
10785         if (padapter == NULL)
10786                 return -ENETDOWN;
10787
10788         if (padapter->bup == _FALSE) {
10789                 RTW_INFO(" %s fail =>(padapter->bup == _FALSE )\n", __FUNCTION__);
10790                 return -ENETDOWN;
10791         }
10792
10793         if (RTW_CANNOT_RUN(padapter)) {
10794                 RTW_INFO("%s fail =>(padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE)\n", __func__);
10795                 return -ENETDOWN;
10796         }
10797
10798         if (extra == NULL) {
10799                 wrqu->length = 0;
10800                 return -EIO;
10801         }
10802
10803         if (subcmd < MP_NULL) {
10804 #ifdef CONFIG_MP_INCLUDED
10805                 rtw_priv_mp_get(dev, info, wdata, extra);
10806 #endif
10807                 return 0;
10808         }
10809
10810         switch (subcmd) {
10811 #if defined(CONFIG_RTL8723B)
10812         case MP_SetBT:
10813                 RTW_INFO("set MP_SetBT\n");
10814                 rtw_mp_SetBT(dev, info, wdata, extra);
10815                 break;
10816 #endif
10817 #ifdef CONFIG_SDIO_INDIRECT_ACCESS
10818         case MP_SD_IREAD:
10819                 rtw_mp_sd_iread(dev, info, wrqu, extra);
10820                 break;
10821         case MP_SD_IWRITE:
10822                 rtw_mp_sd_iwrite(dev, info, wrqu, extra);
10823                 break;
10824 #endif
10825 #ifdef CONFIG_APPEND_VENDOR_IE_ENABLE
10826         case VENDOR_IE_GET:
10827                 RTW_INFO("get case VENDOR_IE_GET\n");
10828                 rtw_vendor_ie_get(dev , info , wdata , extra);
10829                 break;
10830 #endif
10831         default:
10832                 return -EIO;
10833         }
10834
10835         rtw_msleep_os(10); /* delay 5ms for sending pkt before exit adb shell operation */
10836         return 0;
10837 }
10838
10839
10840
10841 static int rtw_wx_tdls_wfd_enable(struct net_device *dev,
10842                                   struct iw_request_info *info,
10843                                   union iwreq_data *wrqu, char *extra)
10844 {
10845         int ret = 0;
10846
10847 #ifdef CONFIG_TDLS
10848 #ifdef CONFIG_WFD
10849
10850         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
10851
10852         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
10853
10854         if (extra[0] == '0')
10855                 rtw_tdls_wfd_enable(padapter, 0);
10856         else
10857                 rtw_tdls_wfd_enable(padapter, 1);
10858
10859 #endif /* CONFIG_WFD */
10860 #endif /* CONFIG_TDLS */
10861
10862         return ret;
10863 }
10864
10865 static int rtw_tdls_weaksec(struct net_device *dev,
10866                             struct iw_request_info *info,
10867                             union iwreq_data *wrqu, char *extra)
10868 {
10869         int ret = 0;
10870
10871 #ifdef CONFIG_TDLS
10872
10873         u8 i, j;
10874         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
10875
10876         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
10877
10878         if (extra[0] == '0')
10879                 padapter->wdinfo.wfd_tdls_weaksec = 0;
10880         else
10881                 padapter->wdinfo.wfd_tdls_weaksec = 1;
10882
10883 #endif /* CONFIG_TDLS */
10884
10885         return ret;
10886 }
10887
10888
10889 static int rtw_tdls_enable(struct net_device *dev,
10890                            struct iw_request_info *info,
10891                            union iwreq_data *wrqu, char *extra)
10892 {
10893         int ret = 0;
10894
10895 #ifdef CONFIG_TDLS
10896
10897         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
10898         struct tdls_info        *ptdlsinfo = &padapter->tdlsinfo;
10899         _irqL    irqL;
10900         _list   *plist, *phead;
10901         s32     index;
10902         struct sta_info *psta = NULL;
10903         struct  sta_priv *pstapriv = &padapter->stapriv;
10904         u8 tdls_sta[NUM_STA][ETH_ALEN];
10905         u8 empty_hwaddr[ETH_ALEN] = { 0x00 };
10906         struct tdls_txmgmt txmgmt;
10907
10908         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
10909
10910         _rtw_memset(tdls_sta, 0x00, sizeof(tdls_sta));
10911         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
10912
10913         if (extra[0] == '0') {
10914                 ptdlsinfo->tdls_enable = 0;
10915
10916                 if (pstapriv->asoc_sta_count == 1)
10917                         return ret;
10918
10919                 _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
10920                 for (index = 0; index < NUM_STA; index++) {
10921                         phead = &(pstapriv->sta_hash[index]);
10922                         plist = get_next(phead);
10923
10924                         while (rtw_end_of_queue_search(phead, plist) == _FALSE) {
10925                                 psta = LIST_CONTAINOR(plist, struct sta_info , hash_list);
10926
10927                                 plist = get_next(plist);
10928
10929                                 if (psta->tdls_sta_state != TDLS_STATE_NONE)
10930                                         _rtw_memcpy(tdls_sta[index], psta->hwaddr, ETH_ALEN);
10931                         }
10932                 }
10933                 _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
10934
10935                 for (index = 0; index < NUM_STA; index++) {
10936                         if (!_rtw_memcmp(tdls_sta[index], empty_hwaddr, ETH_ALEN)) {
10937                                 RTW_INFO("issue tear down to "MAC_FMT"\n", MAC_ARG(tdls_sta[index]));
10938                                 txmgmt.status_code = _RSON_TDLS_TEAR_UN_RSN_;
10939                                 _rtw_memcpy(txmgmt.peer, tdls_sta[index], ETH_ALEN);
10940                                 issue_tdls_teardown(padapter, &txmgmt, _TRUE);
10941                         }
10942                 }
10943                 rtw_tdls_cmd(padapter, NULL, TDLS_RS_RCR);
10944                 rtw_reset_tdls_info(padapter);
10945         }       else if (extra[0] == '1')
10946                 ptdlsinfo->tdls_enable = 1;
10947 #endif /* CONFIG_TDLS */
10948
10949         return ret;
10950 }
10951
10952 static int rtw_tdls_setup(struct net_device *dev,
10953                           struct iw_request_info *info,
10954                           union iwreq_data *wrqu, char *extra)
10955 {
10956         int ret = 0;
10957 #ifdef CONFIG_TDLS
10958         u8 i, j;
10959         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
10960         struct tdls_txmgmt txmgmt;
10961 #ifdef CONFIG_WFD
10962         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
10963 #endif /* CONFIG_WFD */
10964
10965         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
10966
10967         if (wrqu->data.length - 1 != 17) {
10968                 RTW_INFO("[%s] length:%d != 17\n", __FUNCTION__, (wrqu->data.length - 1));
10969                 return ret;
10970         }
10971
10972         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
10973         for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
10974                 txmgmt.peer[i] = key_2char2num(*(extra + j), *(extra + j + 1));
10975
10976 #ifdef CONFIG_WFD
10977         if (_AES_ != padapter->securitypriv.dot11PrivacyAlgrthm) {
10978                 /* Weak Security situation with AP. */
10979                 if (0 == pwdinfo->wfd_tdls_weaksec)     {
10980                         /* Can't send the tdls setup request out!! */
10981                         RTW_INFO("[%s] Current link is not AES, "
10982                                 "SKIP sending the tdls setup request!!\n", __FUNCTION__);
10983                 } else
10984                         issue_tdls_setup_req(padapter, &txmgmt, _TRUE);
10985         } else
10986 #endif /* CONFIG_WFD */
10987         {
10988                 issue_tdls_setup_req(padapter, &txmgmt, _TRUE);
10989         }
10990 #endif /* CONFIG_TDLS */
10991
10992         return ret;
10993 }
10994
10995 static int rtw_tdls_teardown(struct net_device *dev,
10996                              struct iw_request_info *info,
10997                              union iwreq_data *wrqu, char *extra)
10998 {
10999         int ret = 0;
11000
11001 #ifdef CONFIG_TDLS
11002
11003         u8 i, j;
11004         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11005         struct sta_info *ptdls_sta = NULL;
11006         struct tdls_txmgmt txmgmt;
11007
11008         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11009
11010         if (wrqu->data.length - 1 != 17 && wrqu->data.length - 1 != 19) {
11011                 RTW_INFO("[%s] length:%d != 17 or 19\n",
11012                          __FUNCTION__, (wrqu->data.length - 1));
11013                 return ret;
11014         }
11015
11016         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11017         for (i = 0, j = 0; i < ETH_ALEN; i++, j += 3)
11018                 txmgmt.peer[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11019
11020         ptdls_sta = rtw_get_stainfo(&(padapter->stapriv), txmgmt.peer);
11021
11022         if (ptdls_sta != NULL) {
11023                 txmgmt.status_code = _RSON_TDLS_TEAR_UN_RSN_;
11024                 if (wrqu->data.length - 1 == 19)
11025                         issue_tdls_teardown(padapter, &txmgmt, _FALSE);
11026                 else
11027                         issue_tdls_teardown(padapter, &txmgmt, _TRUE);
11028         } else
11029                 RTW_INFO("TDLS peer not found\n");
11030 #endif /* CONFIG_TDLS */
11031
11032         return ret;
11033 }
11034
11035 static int rtw_tdls_discovery(struct net_device *dev,
11036                               struct iw_request_info *info,
11037                               union iwreq_data *wrqu, char *extra)
11038 {
11039         int ret = 0;
11040
11041 #ifdef CONFIG_TDLS
11042
11043         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11044         struct tdls_txmgmt      txmgmt;
11045         int i = 0, j = 0;
11046
11047         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11048
11049         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11050         for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
11051                 txmgmt.peer[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11052
11053         issue_tdls_dis_req(padapter, &txmgmt);
11054
11055 #endif /* CONFIG_TDLS */
11056
11057         return ret;
11058 }
11059
11060 static int rtw_tdls_ch_switch(struct net_device *dev,
11061                               struct iw_request_info *info,
11062                               union iwreq_data *wrqu, char *extra)
11063 {
11064         int ret = 0;
11065
11066 #ifdef CONFIG_TDLS
11067 #ifdef CONFIG_TDLS_CH_SW
11068         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11069         struct tdls_ch_switch *pchsw_info = &padapter->tdlsinfo.chsw_info;
11070         u8 i, j;
11071         struct sta_info *ptdls_sta = NULL;
11072         u8 take_care_iqk;
11073
11074         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11075
11076         if (rtw_tdls_is_chsw_allowed(padapter) == _FALSE) {
11077                 RTW_INFO("TDLS channel switch is not allowed\n");
11078                 return ret;
11079         }
11080
11081         for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
11082                 pchsw_info->addr[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11083
11084         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, pchsw_info->addr);
11085         if (ptdls_sta == NULL)
11086                 return ret;
11087
11088         pchsw_info->ch_sw_state |= TDLS_CH_SW_INITIATOR_STATE;
11089
11090         if (ptdls_sta != NULL) {
11091                 if (pchsw_info->off_ch_num == 0)
11092                         pchsw_info->off_ch_num = 11;
11093         } else
11094                 RTW_INFO("TDLS peer not found\n");
11095
11096         rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
11097
11098         rtw_hal_get_hwreg(padapter, HW_VAR_CH_SW_NEED_TO_TAKE_CARE_IQK_INFO, &take_care_iqk);
11099         if (take_care_iqk == _TRUE) {
11100                 u8 central_chnl;
11101                 u8 bw_mode;
11102
11103                 bw_mode = (pchsw_info->ch_offset) ? CHANNEL_WIDTH_40 : CHANNEL_WIDTH_20;
11104                 central_chnl = rtw_get_center_ch(pchsw_info->off_ch_num, bw_mode, pchsw_info->ch_offset);
11105                 if (rtw_hal_ch_sw_iqk_info_search(padapter, central_chnl, bw_mode) >= 0)
11106                         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_START);
11107                 else
11108                         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_PREPARE);
11109         } else
11110                 rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_START);
11111
11112         /* issue_tdls_ch_switch_req(padapter, ptdls_sta); */
11113         /* RTW_INFO("issue tdls ch switch req\n"); */
11114
11115 #endif /* CONFIG_TDLS_CH_SW */
11116 #endif /* CONFIG_TDLS */
11117
11118         return ret;
11119 }
11120
11121 static int rtw_tdls_ch_switch_off(struct net_device *dev,
11122                                   struct iw_request_info *info,
11123                                   union iwreq_data *wrqu, char *extra)
11124 {
11125         int ret = 0;
11126
11127 #ifdef CONFIG_TDLS
11128 #ifdef CONFIG_TDLS_CH_SW
11129
11130         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11131         struct tdls_ch_switch *pchsw_info = &padapter->tdlsinfo.chsw_info;
11132         u8 i, j, mac_addr[ETH_ALEN];
11133         struct sta_info *ptdls_sta = NULL;
11134         struct tdls_txmgmt txmgmt;
11135
11136         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11137
11138         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11139
11140         if (rtw_tdls_is_chsw_allowed(padapter) == _FALSE) {
11141                 RTW_INFO("TDLS channel switch is not allowed\n");
11142                 return ret;
11143         }
11144
11145         if (wrqu->data.length >= 17) {
11146                 for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
11147                         mac_addr[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11148                 ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
11149         }
11150
11151         if (ptdls_sta == NULL)
11152                 return ret;
11153
11154         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_END_TO_BASE_CHNL);
11155
11156         pchsw_info->ch_sw_state &= ~(TDLS_CH_SW_INITIATOR_STATE |
11157                                      TDLS_CH_SWITCH_ON_STATE |
11158                                      TDLS_PEER_AT_OFF_STATE);
11159         _rtw_memset(pchsw_info->addr, 0x00, ETH_ALEN);
11160
11161         ptdls_sta->ch_switch_time = 0;
11162         ptdls_sta->ch_switch_timeout = 0;
11163         _cancel_timer_ex(&ptdls_sta->ch_sw_timer);
11164         _cancel_timer_ex(&ptdls_sta->delay_timer);
11165         _cancel_timer_ex(&ptdls_sta->stay_on_base_chnl_timer);
11166         _cancel_timer_ex(&ptdls_sta->ch_sw_monitor_timer);
11167
11168         rtw_pm_set_lps(padapter, PS_MODE_MAX);
11169 #endif /* CONFIG_TDLS_CH_SW */
11170 #endif /* CONFIG_TDLS */
11171
11172         return ret;
11173 }
11174
11175 static int rtw_tdls_dump_ch(struct net_device *dev,
11176                             struct iw_request_info *info,
11177                             union iwreq_data *wrqu, char *extra)
11178 {
11179         int ret = 0;
11180
11181 #ifdef CONFIG_TDLS
11182 #ifdef CONFIG_TDLS_CH_SW
11183         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11184         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11185
11186         RTW_INFO("[%s] dump_stack:%s\n", __FUNCTION__, extra);
11187
11188         extra[wrqu->data.length] = 0x00;
11189         ptdlsinfo->chsw_info.dump_stack = rtw_atoi(extra);
11190
11191         return ret;
11192
11193 #endif
11194 #endif /* CONFIG_TDLS */
11195
11196         return ret;
11197 }
11198
11199 static int rtw_tdls_off_ch_num(struct net_device *dev,
11200                                struct iw_request_info *info,
11201                                union iwreq_data *wrqu, char *extra)
11202 {
11203         int ret = 0;
11204
11205 #ifdef CONFIG_TDLS
11206 #ifdef CONFIG_TDLS_CH_SW
11207         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11208         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11209
11210         RTW_INFO("[%s] off_ch_num:%s\n", __FUNCTION__, extra);
11211
11212         extra[wrqu->data.length] = 0x00;
11213         ptdlsinfo->chsw_info.off_ch_num = rtw_atoi(extra);
11214
11215         return ret;
11216
11217 #endif
11218 #endif /* CONFIG_TDLS */
11219
11220         return ret;
11221 }
11222
11223 static int rtw_tdls_ch_offset(struct net_device *dev,
11224                               struct iw_request_info *info,
11225                               union iwreq_data *wrqu, char *extra)
11226 {
11227         int ret = 0;
11228
11229 #ifdef CONFIG_TDLS
11230 #ifdef CONFIG_TDLS_CH_SW
11231         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11232         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11233
11234         RTW_INFO("[%s] ch_offset:%s\n", __FUNCTION__, extra);
11235
11236         extra[wrqu->data.length] = 0x00;
11237         switch (rtw_atoi(extra)) {
11238         case SCA:
11239                 ptdlsinfo->chsw_info.ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
11240                 break;
11241
11242         case SCB:
11243                 ptdlsinfo->chsw_info.ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
11244                 break;
11245
11246         default:
11247                 ptdlsinfo->chsw_info.ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
11248                 break;
11249         }
11250
11251         return ret;
11252
11253 #endif
11254 #endif /* CONFIG_TDLS */
11255
11256         return ret;
11257 }
11258
11259 static int rtw_tdls_pson(struct net_device *dev,
11260                          struct iw_request_info *info,
11261                          union iwreq_data *wrqu, char *extra)
11262 {
11263         int ret = 0;
11264
11265 #ifdef CONFIG_TDLS
11266
11267         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11268         u8 i, j, mac_addr[ETH_ALEN];
11269         struct sta_info *ptdls_sta = NULL;
11270
11271         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11272
11273         for (i = 0, j = 0; i < ETH_ALEN; i++, j += 3)
11274                 mac_addr[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11275
11276         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
11277
11278         issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta->hwaddr, 1, 3, 500);
11279
11280 #endif /* CONFIG_TDLS */
11281
11282         return ret;
11283 }
11284
11285 static int rtw_tdls_psoff(struct net_device *dev,
11286                           struct iw_request_info *info,
11287                           union iwreq_data *wrqu, char *extra)
11288 {
11289         int ret = 0;
11290
11291 #ifdef CONFIG_TDLS
11292
11293         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11294         u8 i, j, mac_addr[ETH_ALEN];
11295         struct sta_info *ptdls_sta = NULL;
11296
11297         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11298
11299         for (i = 0, j = 0; i < ETH_ALEN; i++, j += 3)
11300                 mac_addr[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11301
11302         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
11303
11304         if (ptdls_sta)
11305                 issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta->hwaddr, 0, 3, 500);
11306
11307 #endif /* CONFIG_TDLS */
11308
11309         return ret;
11310 }
11311
11312 static int rtw_tdls_setip(struct net_device *dev,
11313                           struct iw_request_info *info,
11314                           union iwreq_data *wrqu, char *extra)
11315 {
11316         int ret = 0;
11317
11318 #ifdef CONFIG_TDLS
11319 #ifdef CONFIG_WFD
11320
11321         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11322         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11323         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
11324         u8 i = 0, j = 0, k = 0, tag = 0;
11325
11326         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11327
11328         while (i < 4) {
11329                 for (j = 0; j < 4; j++) {
11330                         if (*(extra + j + tag) == '.' || *(extra + j + tag) == '\0') {
11331                                 if (j == 1)
11332                                         pwfd_info->ip_address[i] = convert_ip_addr('0', '0', *(extra + (j - 1) + tag));
11333                                 if (j == 2)
11334                                         pwfd_info->ip_address[i] = convert_ip_addr('0', *(extra + (j - 2) + tag), *(extra + (j - 1) + tag));
11335                                 if (j == 3)
11336                                         pwfd_info->ip_address[i] = convert_ip_addr(*(extra + (j - 3) + tag), *(extra + (j - 2) + tag), *(extra + (j - 1) + tag));
11337
11338                                 tag += j + 1;
11339                                 break;
11340                         }
11341                 }
11342                 i++;
11343         }
11344
11345         RTW_INFO("[%s] Set IP = %u.%u.%u.%u\n", __FUNCTION__,
11346                  ptdlsinfo->wfd_info->ip_address[0],
11347                  ptdlsinfo->wfd_info->ip_address[1],
11348                  ptdlsinfo->wfd_info->ip_address[2],
11349                  ptdlsinfo->wfd_info->ip_address[3]);
11350
11351 #endif /* CONFIG_WFD */
11352 #endif /* CONFIG_TDLS */
11353
11354         return ret;
11355 }
11356
11357 static int rtw_tdls_getip(struct net_device *dev,
11358                           struct iw_request_info *info,
11359                           union iwreq_data *wrqu, char *extra)
11360 {
11361         int ret = 0;
11362
11363 #ifdef CONFIG_TDLS
11364 #ifdef CONFIG_WFD
11365
11366         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11367         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11368         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
11369
11370         RTW_INFO("[%s]\n", __FUNCTION__);
11371
11372         sprintf(extra, "\n\n%u.%u.%u.%u\n",
11373                 pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
11374                 pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]);
11375
11376         RTW_INFO("[%s] IP=%u.%u.%u.%u\n", __FUNCTION__,
11377                  pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
11378                  pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]);
11379
11380         wrqu->data.length = strlen(extra);
11381
11382 #endif /* CONFIG_WFD */
11383 #endif /* CONFIG_TDLS */
11384
11385         return ret;
11386 }
11387
11388 static int rtw_tdls_getport(struct net_device *dev,
11389                             struct iw_request_info *info,
11390                             union iwreq_data *wrqu, char *extra)
11391 {
11392
11393         int ret = 0;
11394
11395 #ifdef CONFIG_TDLS
11396 #ifdef CONFIG_WFD
11397
11398         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11399         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11400         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
11401
11402         RTW_INFO("[%s]\n", __FUNCTION__);
11403
11404         sprintf(extra, "\n\n%d\n", pwfd_info->peer_rtsp_ctrlport);
11405         RTW_INFO("[%s] remote port = %d\n",
11406                  __FUNCTION__, pwfd_info->peer_rtsp_ctrlport);
11407
11408         wrqu->data.length = strlen(extra);
11409
11410 #endif /* CONFIG_WFD */
11411 #endif /* CONFIG_TDLS */
11412
11413         return ret;
11414
11415 }
11416
11417 /* WFDTDLS, for sigma test */
11418 static int rtw_tdls_dis_result(struct net_device *dev,
11419                                struct iw_request_info *info,
11420                                union iwreq_data *wrqu, char *extra)
11421 {
11422
11423         int ret = 0;
11424
11425 #ifdef CONFIG_TDLS
11426 #ifdef CONFIG_WFD
11427
11428         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11429         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11430
11431         RTW_INFO("[%s]\n", __FUNCTION__);
11432
11433         if (ptdlsinfo->dev_discovered == _TRUE) {
11434                 sprintf(extra, "\n\nDis=1\n");
11435                 ptdlsinfo->dev_discovered = _FALSE;
11436         }
11437
11438         wrqu->data.length = strlen(extra);
11439
11440 #endif /* CONFIG_WFD */
11441 #endif /* CONFIG_TDLS */
11442
11443         return ret;
11444
11445 }
11446
11447 /* WFDTDLS, for sigma test */
11448 static int rtw_wfd_tdls_status(struct net_device *dev,
11449                                struct iw_request_info *info,
11450                                union iwreq_data *wrqu, char *extra)
11451 {
11452
11453         int ret = 0;
11454
11455 #ifdef CONFIG_TDLS
11456
11457         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11458         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11459
11460         RTW_INFO("[%s]\n", __FUNCTION__);
11461
11462         sprintf(extra, "\nlink_established:%d\n"
11463                 "sta_cnt:%d\n"
11464                 "sta_maximum:%d\n"
11465                 "cur_channel:%d\n"
11466                 "tdls_enable:%d"
11467 #ifdef CONFIG_TDLS_CH_SW
11468                 "ch_sw_state:%08x\n"
11469                 "chsw_on:%d\n"
11470                 "off_ch_num:%d\n"
11471                 "cur_time:%d\n"
11472                 "ch_offset:%d\n"
11473                 "delay_swtich_back:%d"
11474 #endif
11475                 ,
11476                 ptdlsinfo->link_established, ptdlsinfo->sta_cnt,
11477                 ptdlsinfo->sta_maximum, ptdlsinfo->cur_channel,
11478                 ptdlsinfo->tdls_enable
11479 #ifdef CONFIG_TDLS_CH_SW
11480                 ,
11481                 ptdlsinfo->chsw_info.ch_sw_state,
11482                 ATOMIC_READ(&padapter->tdlsinfo.chsw_info.chsw_on),
11483                 ptdlsinfo->chsw_info.off_ch_num,
11484                 ptdlsinfo->chsw_info.cur_time,
11485                 ptdlsinfo->chsw_info.ch_offset,
11486                 ptdlsinfo->chsw_info.delay_switch_back
11487 #endif
11488                );
11489
11490         wrqu->data.length = strlen(extra);
11491
11492 #endif /* CONFIG_TDLS */
11493
11494         return ret;
11495
11496 }
11497
11498 static int rtw_tdls_getsta(struct net_device *dev,
11499                            struct iw_request_info *info,
11500                            union iwreq_data *wrqu, char *extra)
11501 {
11502
11503         int ret = 0;
11504 #ifdef CONFIG_TDLS
11505         u8 i, j;
11506         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11507         u8 addr[ETH_ALEN] = {0};
11508         char charmac[17];
11509         struct sta_info *ptdls_sta = NULL;
11510
11511         RTW_INFO("[%s] %s %d\n", __FUNCTION__,
11512                  (char *)wrqu->data.pointer, wrqu->data.length - 1);
11513
11514         if (copy_from_user(charmac, wrqu->data.pointer + 9, 17)) {
11515                 ret = -EFAULT;
11516                 goto exit;
11517         }
11518
11519         RTW_INFO("[%s] %d, charmac:%s\n", __FUNCTION__, __LINE__, charmac);
11520         for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
11521                 addr[i] = key_2char2num(*(charmac + j), *(charmac + j + 1));
11522
11523         RTW_INFO("[%s] %d, charmac:%s, addr:"MAC_FMT"\n",
11524                  __FUNCTION__, __LINE__, charmac, MAC_ARG(addr));
11525         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, addr);
11526         if (ptdls_sta) {
11527                 sprintf(extra, "\n\ntdls_sta_state=0x%08x\n", ptdls_sta->tdls_sta_state);
11528                 RTW_INFO("\n\ntdls_sta_state=%d\n", ptdls_sta->tdls_sta_state);
11529         } else {
11530                 sprintf(extra, "\n\nNot found this sta\n");
11531                 RTW_INFO("\n\nNot found this sta\n");
11532         }
11533         wrqu->data.length = strlen(extra);
11534
11535 #endif /* CONFIG_TDLS */
11536 exit:
11537         return ret;
11538
11539 }
11540
11541 static int rtw_tdls_get_best_ch(struct net_device *dev,
11542                                 struct iw_request_info *info,
11543                                 union iwreq_data *wrqu, char *extra)
11544 {
11545 #ifdef CONFIG_FIND_BEST_CHANNEL
11546         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11547         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
11548         u32 i, best_channel_24G = 1, best_channel_5G = 36, index_24G = 0, index_5G = 0;
11549
11550         for (i = 0; pmlmeext->channel_set[i].ChannelNum != 0; i++) {
11551                 if (pmlmeext->channel_set[i].ChannelNum == 1)
11552                         index_24G = i;
11553                 if (pmlmeext->channel_set[i].ChannelNum == 36)
11554                         index_5G = i;
11555         }
11556
11557         for (i = 0; pmlmeext->channel_set[i].ChannelNum != 0; i++) {
11558                 /* 2.4G */
11559                 if (pmlmeext->channel_set[i].ChannelNum == 6 || pmlmeext->channel_set[i].ChannelNum == 11) {
11560                         if (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_24G].rx_count) {
11561                                 index_24G = i;
11562                                 best_channel_24G = pmlmeext->channel_set[i].ChannelNum;
11563                         }
11564                 }
11565
11566                 /* 5G */
11567                 if (pmlmeext->channel_set[i].ChannelNum >= 36
11568                     && pmlmeext->channel_set[i].ChannelNum < 140) {
11569                         /* Find primary channel */
11570                         if (((pmlmeext->channel_set[i].ChannelNum - 36) % 8 == 0)
11571                             && (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count)) {
11572                                 index_5G = i;
11573                                 best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
11574                         }
11575                 }
11576
11577                 if (pmlmeext->channel_set[i].ChannelNum >= 149
11578                     && pmlmeext->channel_set[i].ChannelNum < 165) {
11579                         /* Find primary channel */
11580                         if (((pmlmeext->channel_set[i].ChannelNum - 149) % 8 == 0)
11581                             && (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count)) {
11582                                 index_5G = i;
11583                                 best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
11584                         }
11585                 }
11586 #if 1 /* debug */
11587                 RTW_INFO("The rx cnt of channel %3d = %d\n",
11588                          pmlmeext->channel_set[i].ChannelNum,
11589                          pmlmeext->channel_set[i].rx_count);
11590 #endif
11591         }
11592
11593         sprintf(extra, "\nbest_channel_24G = %d\n", best_channel_24G);
11594         RTW_INFO("best_channel_24G = %d\n", best_channel_24G);
11595
11596         if (index_5G != 0) {
11597                 sprintf(extra, "best_channel_5G = %d\n", best_channel_5G);
11598                 RTW_INFO("best_channel_5G = %d\n", best_channel_5G);
11599         }
11600
11601         wrqu->data.length = strlen(extra);
11602
11603 #endif
11604
11605         return 0;
11606
11607 }
11608
11609 static int rtw_tdls(struct net_device *dev,
11610                     struct iw_request_info *info,
11611                     union iwreq_data *wrqu, char *extra)
11612 {
11613         int ret = 0;
11614
11615 #ifdef CONFIG_TDLS
11616
11617         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11618
11619         RTW_INFO("[%s] extra = %s\n", __FUNCTION__, extra);
11620
11621         if (hal_chk_wl_func(padapter, WL_FUNC_TDLS) == _FALSE) {
11622                 RTW_INFO("Discard tdls oper since hal doesn't support tdls\n");
11623                 return 0;
11624         }
11625
11626         if (padapter->tdlsinfo.tdls_enable == 0) {
11627                 RTW_INFO("tdls haven't enabled\n");
11628                 return 0;
11629         }
11630
11631         /* WFD Sigma will use the tdls enable command to let the driver know we want to test the tdls now! */
11632
11633         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
11634                 if (_rtw_memcmp(extra, "wfdenable=", 10)) {
11635                         wrqu->data.length -= 10;
11636                         rtw_wx_tdls_wfd_enable(dev, info, wrqu, &extra[10]);
11637                         return ret;
11638                 }
11639         }
11640
11641         if (_rtw_memcmp(extra, "weaksec=", 8)) {
11642                 wrqu->data.length -= 8;
11643                 rtw_tdls_weaksec(dev, info, wrqu, &extra[8]);
11644                 return ret;
11645         } else if (_rtw_memcmp(extra, "tdlsenable=", 11)) {
11646                 wrqu->data.length -= 11;
11647                 rtw_tdls_enable(dev, info, wrqu, &extra[11]);
11648                 return ret;
11649         }
11650
11651         if (_rtw_memcmp(extra, "setup=", 6)) {
11652                 wrqu->data.length -= 6;
11653                 rtw_tdls_setup(dev, info, wrqu, &extra[6]);
11654         } else if (_rtw_memcmp(extra, "tear=", 5)) {
11655                 wrqu->data.length -= 5;
11656                 rtw_tdls_teardown(dev, info, wrqu, &extra[5]);
11657         } else if (_rtw_memcmp(extra, "dis=", 4)) {
11658                 wrqu->data.length -= 4;
11659                 rtw_tdls_discovery(dev, info, wrqu, &extra[4]);
11660         } else if (_rtw_memcmp(extra, "swoff=", 6)) {
11661                 wrqu->data.length -= 6;
11662                 rtw_tdls_ch_switch_off(dev, info, wrqu, &extra[6]);
11663         } else if (_rtw_memcmp(extra, "sw=", 3)) {
11664                 wrqu->data.length -= 3;
11665                 rtw_tdls_ch_switch(dev, info, wrqu, &extra[3]);
11666         } else if (_rtw_memcmp(extra, "dumpstack=", 10)) {
11667                 wrqu->data.length -= 10;
11668                 rtw_tdls_dump_ch(dev, info, wrqu, &extra[10]);
11669         } else if (_rtw_memcmp(extra, "offchnum=", 9)) {
11670                 wrqu->data.length -= 9;
11671                 rtw_tdls_off_ch_num(dev, info, wrqu, &extra[9]);
11672         } else if (_rtw_memcmp(extra, "choffset=", 9)) {
11673                 wrqu->data.length -= 9;
11674                 rtw_tdls_ch_offset(dev, info, wrqu, &extra[9]);
11675         } else if (_rtw_memcmp(extra, "pson=", 5)) {
11676                 wrqu->data.length -= 5;
11677                 rtw_tdls_pson(dev, info, wrqu, &extra[5]);
11678         } else if (_rtw_memcmp(extra, "psoff=", 6)) {
11679                 wrqu->data.length -= 6;
11680                 rtw_tdls_psoff(dev, info, wrqu, &extra[6]);
11681         }
11682
11683 #ifdef CONFIG_WFD
11684         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
11685                 if (_rtw_memcmp(extra, "setip=", 6)) {
11686                         wrqu->data.length -= 6;
11687                         rtw_tdls_setip(dev, info, wrqu, &extra[6]);
11688                 } else if (_rtw_memcmp(extra, "tprobe=", 6))
11689                         issue_tunneled_probe_req((_adapter *)rtw_netdev_priv(dev));
11690         }
11691 #endif /* CONFIG_WFD */
11692
11693 #endif /* CONFIG_TDLS */
11694
11695         return ret;
11696 }
11697
11698
11699 static int rtw_tdls_get(struct net_device *dev,
11700                         struct iw_request_info *info,
11701                         union iwreq_data *wrqu, char *extra)
11702 {
11703         int ret = 0;
11704
11705 #ifdef CONFIG_TDLS
11706
11707         RTW_INFO("[%s] extra = %s\n", __FUNCTION__, (char *) wrqu->data.pointer);
11708
11709         if (_rtw_memcmp(wrqu->data.pointer, "ip", 2))
11710                 rtw_tdls_getip(dev, info, wrqu, extra);
11711         else if (_rtw_memcmp(wrqu->data.pointer, "port", 4))
11712                 rtw_tdls_getport(dev, info, wrqu, extra);
11713         /* WFDTDLS, for sigma test */
11714         else if (_rtw_memcmp(wrqu->data.pointer, "dis", 3))
11715                 rtw_tdls_dis_result(dev, info, wrqu, extra);
11716         else if (_rtw_memcmp(wrqu->data.pointer, "status", 6))
11717                 rtw_wfd_tdls_status(dev, info, wrqu, extra);
11718         else if (_rtw_memcmp(wrqu->data.pointer, "tdls_sta=", 9))
11719                 rtw_tdls_getsta(dev, info, wrqu, extra);
11720         else if (_rtw_memcmp(wrqu->data.pointer, "best_ch", 7))
11721                 rtw_tdls_get_best_ch(dev, info, wrqu, extra);
11722 #endif /* CONFIG_TDLS */
11723
11724         return ret;
11725 }
11726
11727
11728
11729
11730
11731 #ifdef CONFIG_INTEL_WIDI
11732 static int rtw_widi_set(struct net_device *dev,
11733                         struct iw_request_info *info,
11734                         union iwreq_data *wrqu, char *extra)
11735 {
11736         int ret = 0;
11737         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11738
11739         process_intel_widi_cmd(padapter, extra);
11740
11741         return ret;
11742 }
11743
11744 static int rtw_widi_set_probe_request(struct net_device *dev,
11745                                       struct iw_request_info *info,
11746                                       union iwreq_data *wrqu, char *extra)
11747 {
11748         int     ret = 0;
11749         u8      *pbuf = NULL;
11750         _adapter        *padapter = (_adapter *)rtw_netdev_priv(dev);
11751
11752         pbuf = rtw_malloc(sizeof(l2_msg_t));
11753         if (pbuf) {
11754                 if (copy_from_user(pbuf, wrqu->data.pointer, wrqu->data.length))
11755                         ret = -EFAULT;
11756                 /* _rtw_memcpy(pbuf, wrqu->data.pointer, wrqu->data.length); */
11757
11758                 if (wrqu->data.flags == 0)
11759                         intel_widi_wk_cmd(padapter, INTEL_WIDI_ISSUE_PROB_WK, pbuf, sizeof(l2_msg_t));
11760                 else if (wrqu->data.flags == 1)
11761                         rtw_set_wfd_rds_sink_info(padapter, (l2_msg_t *)pbuf);
11762         }
11763         return ret;
11764 }
11765 #endif /* CONFIG_INTEL_WIDI */
11766
11767 #ifdef CONFIG_MAC_LOOPBACK_DRIVER
11768
11769 #if defined(CONFIG_RTL8188E)
11770 #include <rtl8188e_hal.h>
11771 extern void rtl8188e_cal_txdesc_chksum(struct tx_desc *ptxdesc);
11772 #define cal_txdesc_chksum rtl8188e_cal_txdesc_chksum
11773 #ifdef CONFIG_SDIO_HCI || defined(CONFIG_GSPI_HCI)
11774 extern void rtl8188es_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
11775 #define fill_default_txdesc rtl8188es_fill_default_txdesc
11776 #endif /* CONFIG_SDIO_HCI */
11777 #endif /* CONFIG_RTL8188E */
11778 #if defined(CONFIG_RTL8723B)
11779 extern void rtl8723b_cal_txdesc_chksum(struct tx_desc *ptxdesc);
11780 #define cal_txdesc_chksum rtl8723b_cal_txdesc_chksum
11781 extern void rtl8723b_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
11782 #define fill_default_txdesc rtl8723b_fill_default_txdesc
11783 #endif /* CONFIG_RTL8723B */
11784
11785 #if defined(CONFIG_RTL8703B)
11786 /* extern void rtl8703b_cal_txdesc_chksum(struct tx_desc *ptxdesc); */
11787 #define cal_txdesc_chksum rtl8703b_cal_txdesc_chksum
11788 /* extern void rtl8703b_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf); */
11789 #define fill_default_txdesc rtl8703b_fill_default_txdesc
11790 #endif /* CONFIG_RTL8703B */
11791
11792 #if defined(CONFIG_RTL8723D)
11793 /* extern void rtl8723d_cal_txdesc_chksum(struct tx_desc *ptxdesc); */
11794 #define cal_txdesc_chksum rtl8723d_cal_txdesc_chksum
11795 /* extern void rtl8723d_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf); */
11796 #define fill_default_txdesc rtl8723d_fill_default_txdesc
11797 #endif /* CONFIG_RTL8723D */
11798
11799 #if defined(CONFIG_RTL8192E)
11800 extern void rtl8192e_cal_txdesc_chksum(struct tx_desc *ptxdesc);
11801 #define cal_txdesc_chksum rtl8192e_cal_txdesc_chksum
11802 #ifdef CONFIG_SDIO_HCI || defined(CONFIG_GSPI_HCI)
11803 extern void rtl8192es_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
11804 #define fill_default_txdesc rtl8192es_fill_default_txdesc
11805 #endif /* CONFIG_SDIO_HCI */
11806 #endif /* CONFIG_RTL8192E */
11807
11808 static s32 initLoopback(PADAPTER padapter)
11809 {
11810         PLOOPBACKDATA ploopback;
11811
11812
11813         if (padapter->ploopback == NULL) {
11814                 ploopback = (PLOOPBACKDATA)rtw_zmalloc(sizeof(LOOPBACKDATA));
11815                 if (ploopback == NULL)
11816                         return -ENOMEM;
11817
11818                 _rtw_init_sema(&ploopback->sema, 0);
11819                 ploopback->bstop = _TRUE;
11820                 ploopback->cnt = 0;
11821                 ploopback->size = 300;
11822                 _rtw_memset(ploopback->msg, 0, sizeof(ploopback->msg));
11823
11824                 padapter->ploopback = ploopback;
11825         }
11826
11827         return 0;
11828 }
11829
11830 static void freeLoopback(PADAPTER padapter)
11831 {
11832         PLOOPBACKDATA ploopback;
11833
11834
11835         ploopback = padapter->ploopback;
11836         if (ploopback) {
11837                 rtw_mfree((u8 *)ploopback, sizeof(LOOPBACKDATA));
11838                 padapter->ploopback = NULL;
11839         }
11840 }
11841
11842 static s32 initpseudoadhoc(PADAPTER padapter)
11843 {
11844         NDIS_802_11_NETWORK_INFRASTRUCTURE networkType;
11845         s32 err;
11846
11847         networkType = Ndis802_11IBSS;
11848         err = rtw_set_802_11_infrastructure_mode(padapter, networkType);
11849         if (err == _FALSE)
11850                 return _FAIL;
11851
11852         err = rtw_setopmode_cmd(padapter, networkType, _TRUE);
11853         if (err == _FAIL)
11854                 return _FAIL;
11855
11856         return _SUCCESS;
11857 }
11858
11859 static s32 createpseudoadhoc(PADAPTER padapter)
11860 {
11861         NDIS_802_11_AUTHENTICATION_MODE authmode;
11862         struct mlme_priv *pmlmepriv;
11863         NDIS_802_11_SSID *passoc_ssid;
11864         WLAN_BSSID_EX *pdev_network;
11865         u8 *pibss;
11866         u8 ssid[] = "pseduo_ad-hoc";
11867         s32 err;
11868         _irqL irqL;
11869
11870
11871         pmlmepriv = &padapter->mlmepriv;
11872
11873         authmode = Ndis802_11AuthModeOpen;
11874         err = rtw_set_802_11_authentication_mode(padapter, authmode);
11875         if (err == _FALSE)
11876                 return _FAIL;
11877
11878         passoc_ssid = &pmlmepriv->assoc_ssid;
11879         _rtw_memset(passoc_ssid, 0, sizeof(NDIS_802_11_SSID));
11880         passoc_ssid->SsidLength = sizeof(ssid) - 1;
11881         _rtw_memcpy(passoc_ssid->Ssid, ssid, passoc_ssid->SsidLength);
11882
11883         pdev_network = &padapter->registrypriv.dev_network;
11884         pibss = padapter->registrypriv.dev_network.MacAddress;
11885         _rtw_memcpy(&pdev_network->Ssid, passoc_ssid, sizeof(NDIS_802_11_SSID));
11886
11887         rtw_update_registrypriv_dev_network(padapter);
11888         rtw_generate_random_ibss(pibss);
11889
11890         _enter_critical_bh(&pmlmepriv->lock, &irqL);
11891         /*pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;*/
11892         init_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
11893
11894         _exit_critical_bh(&pmlmepriv->lock, &irqL);
11895
11896 #if 0
11897         err = rtw_create_ibss_cmd(padapter, 0);
11898         if (err == _FAIL)
11899                 return _FAIL;
11900 #else
11901         {
11902                 struct wlan_network *pcur_network;
11903                 struct sta_info *psta;
11904
11905                 /* 3  create a new psta */
11906                 pcur_network = &pmlmepriv->cur_network;
11907
11908                 /* clear psta in the cur_network, if any */
11909                 psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
11910                 if (psta)
11911                         rtw_free_stainfo(padapter, psta);
11912
11913                 psta = rtw_alloc_stainfo(&padapter->stapriv, pibss);
11914                 if (psta == NULL)
11915                         return _FAIL;
11916
11917                 /* 3  join psudo AdHoc */
11918                 pcur_network->join_res = 1;
11919                 pcur_network->aid = psta->aid = 1;
11920                 _rtw_memcpy(&pcur_network->network, pdev_network, get_WLAN_BSSID_EX_sz(pdev_network));
11921
11922                 /* set msr to WIFI_FW_ADHOC_STATE */
11923                 padapter->hw_port = HW_PORT0;
11924                 Set_MSR(padapter, WIFI_FW_ADHOC_STATE);
11925
11926         }
11927 #endif
11928
11929         return _SUCCESS;
11930 }
11931
11932 static struct xmit_frame *createloopbackpkt(PADAPTER padapter, u32 size)
11933 {
11934         struct xmit_priv *pxmitpriv;
11935         struct xmit_frame *pframe;
11936         struct xmit_buf *pxmitbuf;
11937         struct pkt_attrib *pattrib;
11938         struct tx_desc *desc;
11939         u8 *pkt_start, *pkt_end, *ptr;
11940         struct rtw_ieee80211_hdr *hdr;
11941         s32 bmcast;
11942         _irqL irqL;
11943
11944
11945         if ((TXDESC_SIZE + WLANHDR_OFFSET + size) > MAX_XMITBUF_SZ)
11946                 return NULL;
11947
11948         pxmitpriv = &padapter->xmitpriv;
11949         pframe = NULL;
11950
11951         /* 2 1. allocate xmit frame */
11952         pframe = rtw_alloc_xmitframe(pxmitpriv);
11953         if (pframe == NULL)
11954                 return NULL;
11955         pframe->padapter = padapter;
11956
11957         /* 2 2. allocate xmit buffer */
11958         _enter_critical_bh(&pxmitpriv->lock, &irqL);
11959         pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
11960         _exit_critical_bh(&pxmitpriv->lock, &irqL);
11961         if (pxmitbuf == NULL) {
11962                 rtw_free_xmitframe(pxmitpriv, pframe);
11963                 return NULL;
11964         }
11965
11966         pframe->pxmitbuf = pxmitbuf;
11967         pframe->buf_addr = pxmitbuf->pbuf;
11968         pxmitbuf->priv_data = pframe;
11969
11970         /* 2 3. update_attrib() */
11971         pattrib = &pframe->attrib;
11972
11973         /* init xmitframe attribute */
11974         _rtw_memset(pattrib, 0, sizeof(struct pkt_attrib));
11975
11976         pattrib->ether_type = 0x8723;
11977         _rtw_memcpy(pattrib->src, adapter_mac_addr(padapter), ETH_ALEN);
11978         _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
11979         _rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
11980         _rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
11981
11982         /*      pattrib->dhcp_pkt = 0;
11983          *      pattrib->pktlen = 0; */
11984         pattrib->ack_policy = 0;
11985         /*      pattrib->pkt_hdrlen = ETH_HLEN; */
11986         pattrib->hdrlen = WLAN_HDR_A3_LEN;
11987         pattrib->subtype = WIFI_DATA;
11988         pattrib->priority = 0;
11989         pattrib->qsel = pattrib->priority;
11990         /*      do_queue_select(padapter, pattrib); */
11991         pattrib->nr_frags = 1;
11992         pattrib->encrypt = 0;
11993         pattrib->bswenc = _FALSE;
11994         pattrib->qos_en = _FALSE;
11995
11996         bmcast = IS_MCAST(pattrib->ra);
11997         if (bmcast) {
11998                 pattrib->mac_id = 1;
11999                 pattrib->psta = rtw_get_bcmc_stainfo(padapter);
12000         } else {
12001                 pattrib->mac_id = 0;
12002                 pattrib->psta = rtw_get_stainfo(&padapter->stapriv, get_bssid(&padapter->mlmepriv));
12003         }
12004
12005         pattrib->pktlen = size;
12006         pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->pktlen;
12007
12008         /* 2 4. fill TX descriptor */
12009         desc = (struct tx_desc *)pframe->buf_addr;
12010         _rtw_memset(desc, 0, TXDESC_SIZE);
12011
12012         fill_default_txdesc(pframe, (u8 *)desc);
12013
12014         /* Hw set sequence number */
12015         ((PTXDESC)desc)->hwseq_en = 0; /* HWSEQ_EN, 0:disable, 1:enable
12016  * ((PTXDESC)desc)->hwseq_sel = 0;  */ /* HWSEQ_SEL */
12017
12018         ((PTXDESC)desc)->disdatafb = 1;
12019
12020         /* convert to little endian */
12021         desc->txdw0 = cpu_to_le32(desc->txdw0);
12022         desc->txdw1 = cpu_to_le32(desc->txdw1);
12023         desc->txdw2 = cpu_to_le32(desc->txdw2);
12024         desc->txdw3 = cpu_to_le32(desc->txdw3);
12025         desc->txdw4 = cpu_to_le32(desc->txdw4);
12026         desc->txdw5 = cpu_to_le32(desc->txdw5);
12027         desc->txdw6 = cpu_to_le32(desc->txdw6);
12028         desc->txdw7 = cpu_to_le32(desc->txdw7);
12029 #ifdef CONFIG_PCI_HCI
12030         desc->txdw8 = cpu_to_le32(desc->txdw8);
12031         desc->txdw9 = cpu_to_le32(desc->txdw9);
12032         desc->txdw10 = cpu_to_le32(desc->txdw10);
12033         desc->txdw11 = cpu_to_le32(desc->txdw11);
12034         desc->txdw12 = cpu_to_le32(desc->txdw12);
12035         desc->txdw13 = cpu_to_le32(desc->txdw13);
12036         desc->txdw14 = cpu_to_le32(desc->txdw14);
12037         desc->txdw15 = cpu_to_le32(desc->txdw15);
12038 #endif
12039
12040         cal_txdesc_chksum(desc);
12041
12042         /* 2 5. coalesce */
12043         pkt_start = pframe->buf_addr + TXDESC_SIZE;
12044         pkt_end = pkt_start + pattrib->last_txcmdsz;
12045
12046         /* 3 5.1. make wlan header, make_wlanhdr() */
12047         hdr = (struct rtw_ieee80211_hdr *)pkt_start;
12048         SetFrameSubType(&hdr->frame_ctl, pattrib->subtype);
12049         _rtw_memcpy(hdr->addr1, pattrib->dst, ETH_ALEN); /* DA */
12050         _rtw_memcpy(hdr->addr2, pattrib->src, ETH_ALEN); /* SA */
12051         _rtw_memcpy(hdr->addr3, get_bssid(&padapter->mlmepriv), ETH_ALEN); /* RA, BSSID */
12052
12053         /* 3 5.2. make payload */
12054         ptr = pkt_start + pattrib->hdrlen;
12055         get_random_bytes(ptr, pkt_end - ptr);
12056
12057         pxmitbuf->len = TXDESC_SIZE + pattrib->last_txcmdsz;
12058         pxmitbuf->ptail += pxmitbuf->len;
12059
12060         return pframe;
12061 }
12062
12063 static void freeloopbackpkt(PADAPTER padapter, struct xmit_frame *pframe)
12064 {
12065         struct xmit_priv *pxmitpriv;
12066         struct xmit_buf *pxmitbuf;
12067
12068
12069         pxmitpriv = &padapter->xmitpriv;
12070         pxmitbuf = pframe->pxmitbuf;
12071
12072         rtw_free_xmitframe(pxmitpriv, pframe);
12073         rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
12074 }
12075
12076 static void printdata(u8 *pbuf, u32 len)
12077 {
12078         u32 i, val;
12079
12080
12081         for (i = 0; (i + 4) <= len; i += 4) {
12082                 printk("%08X", *(u32 *)(pbuf + i));
12083                 if ((i + 4) & 0x1F)
12084                         printk(" ");
12085                 else
12086                         printk("\n");
12087         }
12088
12089         if (i < len) {
12090 #ifdef CONFIG_BIG_ENDIAN
12091                 for (; i < len, i++)
12092                         printk("%02X", pbuf + i);
12093 #else /* CONFIG_LITTLE_ENDIAN */
12094 #if 0
12095                 val = 0;
12096                 _rtw_memcpy(&val, pbuf + i, len - i);
12097                 printk("%8X", val);
12098 #else
12099                 u8 str[9];
12100                 u8 n;
12101                 val = 0;
12102                 n = len - i;
12103                 _rtw_memcpy(&val, pbuf + i, n);
12104                 sprintf(str, "%08X", val);
12105                 n = (4 - n) * 2;
12106                 printk("%8s", str + n);
12107 #endif
12108 #endif /* CONFIG_LITTLE_ENDIAN */
12109         }
12110         printk("\n");
12111 }
12112
12113 static u8 pktcmp(PADAPTER padapter, u8 *txbuf, u32 txsz, u8 *rxbuf, u32 rxsz)
12114 {
12115         PHAL_DATA_TYPE phal;
12116         struct recv_stat *prxstat;
12117         struct recv_stat report;
12118         PRXREPORT prxreport;
12119         u32 drvinfosize;
12120         u32 rxpktsize;
12121         u8 fcssize;
12122         u8 ret = _FALSE;
12123
12124         prxstat = (struct recv_stat *)rxbuf;
12125         report.rxdw0 = le32_to_cpu(prxstat->rxdw0);
12126         report.rxdw1 = le32_to_cpu(prxstat->rxdw1);
12127         report.rxdw2 = le32_to_cpu(prxstat->rxdw2);
12128         report.rxdw3 = le32_to_cpu(prxstat->rxdw3);
12129         report.rxdw4 = le32_to_cpu(prxstat->rxdw4);
12130         report.rxdw5 = le32_to_cpu(prxstat->rxdw5);
12131
12132         prxreport = (PRXREPORT)&report;
12133         drvinfosize = prxreport->drvinfosize << 3;
12134         rxpktsize = prxreport->pktlen;
12135
12136         phal = GET_HAL_DATA(padapter);
12137         if (phal->ReceiveConfig & RCR_APPFCS)
12138                 fcssize = IEEE80211_FCS_LEN;
12139         else
12140                 fcssize = 0;
12141
12142         if ((txsz - TXDESC_SIZE) != (rxpktsize - fcssize)) {
12143                 RTW_INFO("%s: ERROR! size not match tx/rx=%d/%d !\n",
12144                          __func__, txsz - TXDESC_SIZE, rxpktsize - fcssize);
12145                 ret = _FALSE;
12146         } else {
12147                 ret = _rtw_memcmp(txbuf + TXDESC_SIZE, \
12148                                   rxbuf + RXDESC_SIZE + drvinfosize, \
12149                                   txsz - TXDESC_SIZE);
12150                 if (ret == _FALSE)
12151                         RTW_INFO("%s: ERROR! pkt content mismatch!\n", __func__);
12152         }
12153
12154         if (ret == _FALSE) {
12155                 RTW_INFO("\n%s: TX PKT total=%d, desc=%d, content=%d\n",
12156                          __func__, txsz, TXDESC_SIZE, txsz - TXDESC_SIZE);
12157                 RTW_INFO("%s: TX DESC size=%d\n", __func__, TXDESC_SIZE);
12158                 printdata(txbuf, TXDESC_SIZE);
12159                 RTW_INFO("%s: TX content size=%d\n", __func__, txsz - TXDESC_SIZE);
12160                 printdata(txbuf + TXDESC_SIZE, txsz - TXDESC_SIZE);
12161
12162                 RTW_INFO("\n%s: RX PKT read=%d offset=%d(%d,%d) content=%d\n",
12163                         __func__, rxsz, RXDESC_SIZE + drvinfosize, RXDESC_SIZE, drvinfosize, rxpktsize);
12164                 if (rxpktsize != 0) {
12165                         RTW_INFO("%s: RX DESC size=%d\n", __func__, RXDESC_SIZE);
12166                         printdata(rxbuf, RXDESC_SIZE);
12167                         RTW_INFO("%s: RX drvinfo size=%d\n", __func__, drvinfosize);
12168                         printdata(rxbuf + RXDESC_SIZE, drvinfosize);
12169                         RTW_INFO("%s: RX content size=%d\n", __func__, rxpktsize);
12170                         printdata(rxbuf + RXDESC_SIZE + drvinfosize, rxpktsize);
12171                 } else {
12172                         RTW_INFO("%s: RX data size=%d\n", __func__, rxsz);
12173                         printdata(rxbuf, rxsz);
12174                 }
12175         }
12176
12177         return ret;
12178 }
12179
12180 thread_return lbk_thread(thread_context context)
12181 {
12182         s32 err;
12183         PADAPTER padapter;
12184         PLOOPBACKDATA ploopback;
12185         struct xmit_frame *pxmitframe;
12186         u32 cnt, ok, fail, headerlen;
12187         u32 pktsize;
12188         u32 ff_hwaddr;
12189
12190
12191         padapter = (PADAPTER)context;
12192         ploopback = padapter->ploopback;
12193         if (ploopback == NULL)
12194                 return -1;
12195         cnt = 0;
12196         ok = 0;
12197         fail = 0;
12198
12199         daemonize("%s", "RTW_LBK_THREAD");
12200         allow_signal(SIGTERM);
12201
12202         do {
12203                 if (ploopback->size == 0) {
12204                         get_random_bytes(&pktsize, 4);
12205                         pktsize = (pktsize % 1535) + 1; /* 1~1535 */
12206                 } else
12207                         pktsize = ploopback->size;
12208
12209                 pxmitframe = createloopbackpkt(padapter, pktsize);
12210                 if (pxmitframe == NULL) {
12211                         sprintf(ploopback->msg, "loopback FAIL! 3. create Packet FAIL!");
12212                         break;
12213                 }
12214
12215                 ploopback->txsize = TXDESC_SIZE + pxmitframe->attrib.last_txcmdsz;
12216                 _rtw_memcpy(ploopback->txbuf, pxmitframe->buf_addr, ploopback->txsize);
12217                 ff_hwaddr = rtw_get_ff_hwaddr(pxmitframe);
12218                 cnt++;
12219                 RTW_INFO("%s: wirte port cnt=%d size=%d\n", __func__, cnt, ploopback->txsize);
12220                 pxmitframe->pxmitbuf->pdata = ploopback->txbuf;
12221                 rtw_write_port(padapter, ff_hwaddr, ploopback->txsize, (u8 *)pxmitframe->pxmitbuf);
12222
12223                 /* wait for rx pkt */
12224                 _rtw_down_sema(&ploopback->sema);
12225
12226                 err = pktcmp(padapter, ploopback->txbuf, ploopback->txsize, ploopback->rxbuf, ploopback->rxsize);
12227                 if (err == _TRUE)
12228                         ok++;
12229                 else
12230                         fail++;
12231
12232                 ploopback->txsize = 0;
12233                 _rtw_memset(ploopback->txbuf, 0, 0x8000);
12234                 ploopback->rxsize = 0;
12235                 _rtw_memset(ploopback->rxbuf, 0, 0x8000);
12236
12237                 freeloopbackpkt(padapter, pxmitframe);
12238                 pxmitframe = NULL;
12239
12240                 if (signal_pending(current))
12241                         flush_signals(current);
12242
12243                 if ((ploopback->bstop == _TRUE) ||
12244                     ((ploopback->cnt != 0) && (ploopback->cnt == cnt))) {
12245                         u32 ok_rate, fail_rate, all;
12246                         all = cnt;
12247                         ok_rate = (ok * 100) / all;
12248                         fail_rate = (fail * 100) / all;
12249                         sprintf(ploopback->msg, \
12250                                 "loopback result: ok=%d%%(%d/%d),error=%d%%(%d/%d)", \
12251                                 ok_rate, ok, all, fail_rate, fail, all);
12252                         break;
12253                 }
12254         } while (1);
12255
12256         ploopback->bstop = _TRUE;
12257
12258         thread_exit();
12259 }
12260
12261 static void loopbackTest(PADAPTER padapter, u32 cnt, u32 size, u8 *pmsg)
12262 {
12263         PLOOPBACKDATA ploopback;
12264         u32 len;
12265         s32 err;
12266
12267
12268         ploopback = padapter->ploopback;
12269
12270         if (ploopback) {
12271                 if (ploopback->bstop == _FALSE) {
12272                         ploopback->bstop = _TRUE;
12273                         _rtw_up_sema(&ploopback->sema);
12274                 }
12275                 len = 0;
12276                 do {
12277                         len = strlen(ploopback->msg);
12278                         if (len)
12279                                 break;
12280                         rtw_msleep_os(1);
12281                 } while (1);
12282                 _rtw_memcpy(pmsg, ploopback->msg, len + 1);
12283                 freeLoopback(padapter);
12284
12285                 return;
12286         }
12287
12288         /* disable dynamic algorithm     */
12289         rtw_phydm_ability_backup(padapter);
12290         rtw_phydm_func_disable_all(padapter);
12291
12292         /* create pseudo ad-hoc connection */
12293         err = initpseudoadhoc(padapter);
12294         if (err == _FAIL) {
12295                 sprintf(pmsg, "loopback FAIL! 1.1 init ad-hoc FAIL!");
12296                 return;
12297         }
12298
12299         err = createpseudoadhoc(padapter);
12300         if (err == _FAIL) {
12301                 sprintf(pmsg, "loopback FAIL! 1.2 create ad-hoc master FAIL!");
12302                 return;
12303         }
12304
12305         err = initLoopback(padapter);
12306         if (err) {
12307                 sprintf(pmsg, "loopback FAIL! 2. init FAIL! error code=%d", err);
12308                 return;
12309         }
12310
12311         ploopback = padapter->ploopback;
12312
12313         ploopback->bstop = _FALSE;
12314         ploopback->cnt = cnt;
12315         ploopback->size = size;
12316         ploopback->lbkthread = kthread_run(lbk_thread, padapter, "RTW_LBK_THREAD");
12317         if (IS_ERR(padapter->lbkthread)) {
12318                 freeLoopback(padapter);
12319                 sprintf(pmsg, "loopback start FAIL! cnt=%d", cnt);
12320                 return;
12321         }
12322
12323         sprintf(pmsg, "loopback start! cnt=%d", cnt);
12324 }
12325 #endif /* CONFIG_MAC_LOOPBACK_DRIVER */
12326
12327 static int rtw_test(
12328         struct net_device *dev,
12329         struct iw_request_info *info,
12330         union iwreq_data *wrqu, char *extra)
12331 {
12332         u32 len;
12333         u8 *pbuf, *pch;
12334         char *ptmp;
12335         u8 *delim = ",";
12336         PADAPTER padapter = rtw_netdev_priv(dev);
12337
12338
12339         RTW_INFO("+%s\n", __func__);
12340         len = wrqu->data.length;
12341
12342         pbuf = (u8 *)rtw_zmalloc(len);
12343         if (pbuf == NULL) {
12344                 RTW_INFO("%s: no memory!\n", __func__);
12345                 return -ENOMEM;
12346         }
12347
12348         if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
12349                 rtw_mfree(pbuf, len);
12350                 RTW_INFO("%s: copy from user fail!\n", __func__);
12351                 return -EFAULT;
12352         }
12353         RTW_INFO("%s: string=\"%s\"\n", __func__, pbuf);
12354
12355         ptmp = (char *)pbuf;
12356         pch = strsep(&ptmp, delim);
12357         if ((pch == NULL) || (strlen(pch) == 0)) {
12358                 rtw_mfree(pbuf, len);
12359                 RTW_INFO("%s: parameter error(level 1)!\n", __func__);
12360                 return -EFAULT;
12361         }
12362
12363 #ifdef CONFIG_MAC_LOOPBACK_DRIVER
12364         if (strcmp(pch, "loopback") == 0) {
12365                 s32 cnt = 0;
12366                 u32 size = 64;
12367
12368                 pch = strsep(&ptmp, delim);
12369                 if ((pch == NULL) || (strlen(pch) == 0)) {
12370                         rtw_mfree(pbuf, len);
12371                         RTW_INFO("%s: parameter error(level 2)!\n", __func__);
12372                         return -EFAULT;
12373                 }
12374
12375                 sscanf(pch, "%d", &cnt);
12376                 RTW_INFO("%s: loopback cnt=%d\n", __func__, cnt);
12377
12378                 pch = strsep(&ptmp, delim);
12379                 if ((pch == NULL) || (strlen(pch) == 0)) {
12380                         rtw_mfree(pbuf, len);
12381                         RTW_INFO("%s: parameter error(level 2)!\n", __func__);
12382                         return -EFAULT;
12383                 }
12384
12385                 sscanf(pch, "%d", &size);
12386                 RTW_INFO("%s: loopback size=%d\n", __func__, size);
12387
12388                 loopbackTest(padapter, cnt, size, extra);
12389                 wrqu->data.length = strlen(extra) + 1;
12390
12391                 goto free_buf;
12392         }
12393 #endif
12394
12395
12396 #ifdef CONFIG_BT_COEXIST
12397         if (strcmp(pch, "bton") == 0) {
12398                 rtw_btcoex_SetManualControl(padapter, _FALSE);
12399                 goto free_buf;
12400         } else if (strcmp(pch, "btoff") == 0) {
12401                 rtw_btcoex_SetManualControl(padapter, _TRUE);
12402                 goto free_buf;
12403         }
12404 #endif
12405
12406         if (strcmp(pch, "h2c") == 0) {
12407                 u8 param[8];
12408                 u8 count = 0;
12409                 u32 tmp;
12410                 u8 i;
12411                 u32 pos;
12412                 u8 ret;
12413
12414                 do {
12415                         pch = strsep(&ptmp, delim);
12416                         if ((pch == NULL) || (strlen(pch) == 0))
12417                                 break;
12418
12419                         sscanf(pch, "%x", &tmp);
12420                         param[count++] = (u8)tmp;
12421                 } while (count < 8);
12422
12423                 if (count == 0) {
12424                         rtw_mfree(pbuf, len);
12425                         RTW_INFO("%s: parameter error(level 2)!\n", __func__);
12426                         return -EFAULT;
12427                 }
12428
12429                 ret = rtw_test_h2c_cmd(padapter, param, count);
12430
12431                 pos = sprintf(extra, "H2C ID=0x%02x content=", param[0]);
12432                 for (i = 1; i < count; i++)
12433                         pos += sprintf(extra + pos, "%02x,", param[i]);
12434                 extra[pos] = 0;
12435                 pos--;
12436                 pos += sprintf(extra + pos, " %s", ret == _FAIL ? "FAIL" : "OK");
12437
12438                 wrqu->data.length = strlen(extra) + 1;
12439
12440                 goto free_buf;
12441         }
12442
12443 free_buf:
12444         rtw_mfree(pbuf, len);
12445         return 0;
12446 }
12447
12448 static iw_handler rtw_handlers[] = {
12449         NULL,                                   /* SIOCSIWCOMMIT */
12450         rtw_wx_get_name,                /* SIOCGIWNAME */
12451         dummy,                                  /* SIOCSIWNWID */
12452         dummy,                                  /* SIOCGIWNWID */
12453         rtw_wx_set_freq,                /* SIOCSIWFREQ */
12454         rtw_wx_get_freq,                /* SIOCGIWFREQ */
12455         rtw_wx_set_mode,                /* SIOCSIWMODE */
12456         rtw_wx_get_mode,                /* SIOCGIWMODE */
12457         dummy,                                  /* SIOCSIWSENS */
12458         rtw_wx_get_sens,                /* SIOCGIWSENS */
12459         NULL,                                   /* SIOCSIWRANGE */
12460         rtw_wx_get_range,               /* SIOCGIWRANGE */
12461         rtw_wx_set_priv,                /* SIOCSIWPRIV */
12462         NULL,                                   /* SIOCGIWPRIV */
12463         NULL,                                   /* SIOCSIWSTATS */
12464         NULL,                                   /* SIOCGIWSTATS */
12465         dummy,                                  /* SIOCSIWSPY */
12466         dummy,                                  /* SIOCGIWSPY */
12467         NULL,                                   /* SIOCGIWTHRSPY */
12468         NULL,                                   /* SIOCWIWTHRSPY */
12469         rtw_wx_set_wap,         /* SIOCSIWAP */
12470         rtw_wx_get_wap,         /* SIOCGIWAP */
12471         rtw_wx_set_mlme,                /* request MLME operation; uses struct iw_mlme */
12472         dummy,                                  /* SIOCGIWAPLIST -- depricated */
12473         rtw_wx_set_scan,                /* SIOCSIWSCAN */
12474         rtw_wx_get_scan,                /* SIOCGIWSCAN */
12475         rtw_wx_set_essid,               /* SIOCSIWESSID */
12476         rtw_wx_get_essid,               /* SIOCGIWESSID */
12477         dummy,                                  /* SIOCSIWNICKN */
12478         rtw_wx_get_nick,                /* SIOCGIWNICKN */
12479         NULL,                                   /* -- hole -- */
12480         NULL,                                   /* -- hole -- */
12481         rtw_wx_set_rate,                /* SIOCSIWRATE */
12482         rtw_wx_get_rate,                /* SIOCGIWRATE */
12483         rtw_wx_set_rts,                 /* SIOCSIWRTS */
12484         rtw_wx_get_rts,                 /* SIOCGIWRTS */
12485         rtw_wx_set_frag,                /* SIOCSIWFRAG */
12486         rtw_wx_get_frag,                /* SIOCGIWFRAG */
12487         dummy,                                  /* SIOCSIWTXPOW */
12488         dummy,                                  /* SIOCGIWTXPOW */
12489         dummy,                                  /* SIOCSIWRETRY */
12490         rtw_wx_get_retry,               /* SIOCGIWRETRY */
12491         rtw_wx_set_enc,                 /* SIOCSIWENCODE */
12492         rtw_wx_get_enc,                 /* SIOCGIWENCODE */
12493         dummy,                                  /* SIOCSIWPOWER */
12494         rtw_wx_get_power,               /* SIOCGIWPOWER */
12495         NULL,                                   /*---hole---*/
12496         NULL,                                   /*---hole---*/
12497         rtw_wx_set_gen_ie,              /* SIOCSIWGENIE */
12498         NULL,                                   /* SIOCGWGENIE */
12499         rtw_wx_set_auth,                /* SIOCSIWAUTH */
12500         NULL,                                   /* SIOCGIWAUTH */
12501         rtw_wx_set_enc_ext,             /* SIOCSIWENCODEEXT */
12502         NULL,                                   /* SIOCGIWENCODEEXT */
12503         rtw_wx_set_pmkid,               /* SIOCSIWPMKSA */
12504         NULL,                                   /*---hole---*/
12505 };
12506
12507
12508 static const struct iw_priv_args rtw_private_args[] = {
12509         {
12510                 SIOCIWFIRSTPRIV + 0x0,
12511                 IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
12512         },
12513         {
12514                 SIOCIWFIRSTPRIV + 0x1,
12515                 IW_PRIV_TYPE_CHAR | 0x7FF,
12516                 IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
12517         },
12518         {
12519                 SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
12520         },
12521         {
12522                 SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
12523         },
12524         {
12525                 SIOCIWFIRSTPRIV + 0x4,
12526                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
12527         },
12528         {
12529                 SIOCIWFIRSTPRIV + 0x5,
12530                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
12531         },
12532         {
12533                 SIOCIWFIRSTPRIV + 0x6,
12534                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
12535         },
12536         /* for PLATFORM_MT53XX   */
12537         {
12538                 SIOCIWFIRSTPRIV + 0x7,
12539                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
12540         },
12541         {
12542                 SIOCIWFIRSTPRIV + 0x8,
12543                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
12544         },
12545         {
12546                 SIOCIWFIRSTPRIV + 0x9,
12547                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
12548         },
12549
12550         /* for RTK_DMP_PLATFORM  */
12551         {
12552                 SIOCIWFIRSTPRIV + 0xA,
12553                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
12554         },
12555
12556         {
12557                 SIOCIWFIRSTPRIV + 0xB,
12558                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
12559         },
12560         {
12561                 SIOCIWFIRSTPRIV + 0xC,
12562                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
12563         },
12564         {
12565                 SIOCIWFIRSTPRIV + 0xD,
12566                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
12567         },
12568 #if 0
12569         {
12570                 SIOCIWFIRSTPRIV + 0xE, 0, 0, "wowlan_ctrl"
12571         },
12572 #endif
12573         {
12574                 SIOCIWFIRSTPRIV + 0x10,
12575                 IW_PRIV_TYPE_CHAR | 1024, 0, "p2p_set"
12576         },
12577         {
12578                 SIOCIWFIRSTPRIV + 0x11,
12579                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "p2p_get"
12580         },
12581         {
12582                 SIOCIWFIRSTPRIV + 0x12, 0, 0, "NULL"
12583         },
12584         {
12585                 SIOCIWFIRSTPRIV + 0x13,
12586                 IW_PRIV_TYPE_CHAR | 64, IW_PRIV_TYPE_CHAR | 64 , "p2p_get2"
12587         },
12588         {
12589                 SIOCIWFIRSTPRIV + 0x14,
12590                 IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
12591         },
12592         {
12593                 SIOCIWFIRSTPRIV + 0x15,
12594                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024 , "tdls_get"
12595         },
12596         {
12597                 SIOCIWFIRSTPRIV + 0x16,
12598                 IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
12599         },
12600
12601         {SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
12602 #ifdef CONFIG_MP_INCLUDED
12603         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0,  "NULL"},
12604         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "NULL"},
12605 #else
12606         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set"},
12607         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get"},
12608 #endif
12609         {
12610                 SIOCIWFIRSTPRIV + 0x1D,
12611                 IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
12612         },
12613
12614 #ifdef CONFIG_INTEL_WIDI
12615         {
12616                 SIOCIWFIRSTPRIV + 0x1E,
12617                 IW_PRIV_TYPE_CHAR | 1024, 0, "widi_set"
12618         },
12619         {
12620                 SIOCIWFIRSTPRIV + 0x1F,
12621                 IW_PRIV_TYPE_CHAR | 128, 0, "widi_prob_req"
12622         },
12623 #endif /* CONFIG_INTEL_WIDI */
12624
12625         { SIOCIWFIRSTPRIV + 0x0E, IW_PRIV_TYPE_CHAR | 1024, 0 , ""},  /* set  */
12626         { SIOCIWFIRSTPRIV + 0x0F, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , ""},/* get
12627  * --- sub-ioctls definitions --- */
12628
12629 #ifdef CONFIG_APPEND_VENDOR_IE_ENABLE
12630         { VENDOR_IE_SET, IW_PRIV_TYPE_CHAR | 1024 , 0 , "vendor_ie_set" },
12631         { VENDOR_IE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "vendor_ie_get" },
12632 #endif
12633 #if defined(CONFIG_RTL8723B)
12634         { MP_SetBT, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_setbt" },
12635         { MP_DISABLE_BT_COEXIST, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_disa_btcoex"},
12636 #endif
12637 #ifdef CONFIG_WOWLAN
12638         { MP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "wow_mode" },
12639         { MP_WOW_SET_PATTERN , IW_PRIV_TYPE_CHAR | 1024, 0, "wow_set_pattern" },
12640 #endif
12641 #ifdef CONFIG_AP_WOWLAN
12642         { MP_AP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "ap_wow_mode" }, /* set  */
12643 #endif
12644 #ifdef CONFIG_SDIO_INDIRECT_ACCESS
12645         { MP_SD_IREAD, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "sd_iread" },
12646         { MP_SD_IWRITE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "sd_iwrite" },
12647 #endif
12648 };
12649
12650
12651 static const struct iw_priv_args rtw_mp_private_args[] = {
12652         /* --- sub-ioctls definitions --- */
12653 #ifdef CONFIG_MP_INCLUDED
12654         { MP_START , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_start" },
12655         { MP_PHYPARA, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_phypara" },
12656         { MP_STOP , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_stop" },
12657         { MP_CHANNEL , IW_PRIV_TYPE_CHAR | 1024 , IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_channel" },
12658         { MP_BANDWIDTH , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_bandwidth"},
12659         { MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },
12660         { MP_RESET_STATS , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_reset_stats"},
12661         { MP_QUERY , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "mp_query"},
12662         { READ_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_reg" },
12663         { MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },
12664         { READ_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_rf" },
12665         { MP_PSD , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_psd"},
12666         { MP_DUMP, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_dump" },
12667         { MP_TXPOWER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_txpower"},
12668         { MP_ANT_TX , IW_PRIV_TYPE_CHAR | 1024,  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_tx"},
12669         { MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_rx"},
12670         { WRITE_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_reg" },
12671         { WRITE_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_rf" },
12672         { MP_CTX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ctx"},
12673         { MP_ARX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_arx"},
12674         { MP_THER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ther"},
12675         { EFUSE_SET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_set" },
12676         { EFUSE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get" },
12677         { MP_PWRTRK , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_pwrtrk"},
12678         { MP_QueryDrvStats, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_drvquery" },
12679         { MP_IOCTL, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ioctl"},
12680         { MP_SetRFPathSwh, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_setrfpath" },
12681         { MP_PwrCtlDM, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_pwrctldm" },
12682         { MP_GET_TXPOWER_INX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_get_txpower" },
12683         { MP_GETVER, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_priv_ver" },
12684         { MP_MON, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_mon" },
12685         { EFUSE_MASK, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_mask" },
12686         { EFUSE_FILE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_file" },
12687         { MP_TX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_tx" },
12688         { MP_RX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rx" },
12689         { MP_HW_TX_MODE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_hxtx" },
12690         { CTA_TEST, IW_PRIV_TYPE_CHAR | 1024, 0, "cta_test"},
12691         { MP_IQK, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_iqk"},
12692         { MP_LCK, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_lck"},
12693 #ifdef CONFIG_RTW_CUSTOMER_STR
12694         { MP_CUSTOMER_STR, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "customer_str" },
12695 #endif
12696
12697 #endif /* CONFIG_MP_INCLUDED */
12698 };
12699
12700 static iw_handler rtw_private_handler[] = {
12701         rtw_wx_write32,                                 /* 0x00 */
12702         rtw_wx_read32,                                  /* 0x01 */
12703         rtw_drvext_hdl,                                 /* 0x02 */
12704 #ifdef MP_IOCTL_HDL
12705         rtw_mp_ioctl_hdl,                               /* 0x03 */
12706 #else
12707         rtw_wx_priv_null,
12708 #endif
12709         /* for MM DTV platform */
12710         rtw_get_ap_info,                                        /* 0x04 */
12711
12712         rtw_set_pid,                                            /* 0x05 */
12713         rtw_wps_start,                                  /* 0x06 */
12714
12715         /* for PLATFORM_MT53XX */
12716         rtw_wx_get_sensitivity,                 /* 0x07 */
12717         rtw_wx_set_mtk_wps_probe_ie,    /* 0x08 */
12718         rtw_wx_set_mtk_wps_ie,                  /* 0x09 */
12719
12720         /* for RTK_DMP_PLATFORM
12721          * Set Channel depend on the country code */
12722         rtw_wx_set_channel_plan,                /* 0x0A */
12723
12724         rtw_dbg_port,                                   /* 0x0B */
12725         rtw_wx_write_rf,                                        /* 0x0C */
12726         rtw_wx_read_rf,                                 /* 0x0D */
12727
12728         rtw_priv_set,                                   /*0x0E*/
12729         rtw_priv_get,                                   /*0x0F*/
12730
12731         rtw_p2p_set,                                    /* 0x10 */
12732         rtw_p2p_get,                                    /* 0x11 */
12733         NULL,                                                   /* 0x12 */
12734         rtw_p2p_get2,                                   /* 0x13 */
12735
12736         rtw_tdls,                                               /* 0x14 */
12737         rtw_tdls_get,                                   /* 0x15 */
12738
12739         rtw_pm_set,                                             /* 0x16 */
12740         rtw_wx_priv_null,                               /* 0x17 */
12741         rtw_rereg_nd_name,                              /* 0x18 */
12742         rtw_wx_priv_null,                               /* 0x19 */
12743 #ifdef CONFIG_MP_INCLUDED
12744         rtw_wx_priv_null,                               /* 0x1A */
12745         rtw_wx_priv_null,                               /* 0x1B */
12746 #else
12747         rtw_mp_efuse_set,                               /* 0x1A */
12748         rtw_mp_efuse_get,                               /* 0x1B */
12749 #endif
12750         NULL,                                                   /* 0x1C is reserved for hostapd */
12751         rtw_test,                                               /* 0x1D */
12752 #ifdef CONFIG_INTEL_WIDI
12753         rtw_widi_set,                                   /* 0x1E */
12754         rtw_widi_set_probe_request,             /* 0x1F */
12755 #endif /* CONFIG_INTEL_WIDI */
12756 };
12757
12758 #if WIRELESS_EXT >= 17
12759 static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
12760 {
12761         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
12762         struct iw_statistics *piwstats = &padapter->iwstats;
12763         int tmp_level = 0;
12764         int tmp_qual = 0;
12765         int tmp_noise = 0;
12766
12767         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) != _TRUE) {
12768                 piwstats->qual.qual = 0;
12769                 piwstats->qual.level = 0;
12770                 piwstats->qual.noise = 0;
12771                 /* RTW_INFO("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise); */
12772         } else {
12773 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
12774                 tmp_level = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
12775 #else
12776 #ifdef CONFIG_SIGNAL_SCALE_MAPPING
12777                 tmp_level = padapter->recvpriv.signal_strength;
12778 #else
12779                 {
12780                         /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
12781
12782                         HAL_DATA_TYPE *pHal = GET_HAL_DATA(padapter);
12783
12784                         tmp_level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, padapter->recvpriv.signal_strength);
12785                 }
12786 #endif
12787 #endif
12788
12789                 tmp_qual = padapter->recvpriv.signal_qual;
12790                 rtw_get_noise(padapter);
12791                 tmp_noise = padapter->recvpriv.noise;
12792                 /* RTW_INFO("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise,padapter->recvpriv.rssi); */
12793
12794                 piwstats->qual.level = tmp_level;
12795                 piwstats->qual.qual = tmp_qual;
12796                 piwstats->qual.noise = tmp_noise;
12797         }
12798 #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 14))
12799         piwstats->qual.updated = IW_QUAL_ALL_UPDATED ;/* |IW_QUAL_DBM; */
12800 #else
12801 #ifdef RTK_DMP_PLATFORM
12802         /* IW_QUAL_DBM= 0x8, if driver use this flag, wireless extension will show value of dbm. */
12803         /* remove this flag for show percentage 0~100 */
12804         piwstats->qual.updated = 0x07;
12805 #else
12806         piwstats->qual.updated = 0x0f;
12807 #endif
12808 #endif
12809
12810 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
12811         piwstats->qual.updated = piwstats->qual.updated | IW_QUAL_DBM;
12812 #endif
12813
12814         return &padapter->iwstats;
12815 }
12816 #endif
12817
12818 #ifdef CONFIG_WIRELESS_EXT
12819 struct iw_handler_def rtw_handlers_def = {
12820         .standard = rtw_handlers,
12821         .num_standard = sizeof(rtw_handlers) / sizeof(iw_handler),
12822 #if (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 33)) || defined(CONFIG_WEXT_PRIV)
12823         .private = rtw_private_handler,
12824         .private_args = (struct iw_priv_args *)rtw_private_args,
12825         .num_private = sizeof(rtw_private_handler) / sizeof(iw_handler),
12826         .num_private_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args),
12827 #endif
12828 #if WIRELESS_EXT >= 17
12829         .get_wireless_stats = rtw_get_wireless_stats,
12830 #endif
12831 };
12832 #endif
12833
12834 /* copy from net/wireless/wext.c start
12835  * ----------------------------------------------------------------
12836  *
12837  * Calculate size of private arguments
12838  */
12839 static const char iw_priv_type_size[] = {
12840         0,                              /* IW_PRIV_TYPE_NONE */
12841         1,                              /* IW_PRIV_TYPE_BYTE */
12842         1,                              /* IW_PRIV_TYPE_CHAR */
12843         0,                              /* Not defined */
12844         sizeof(__u32),                  /* IW_PRIV_TYPE_INT */
12845         sizeof(struct iw_freq),         /* IW_PRIV_TYPE_FLOAT */
12846         sizeof(struct sockaddr),        /* IW_PRIV_TYPE_ADDR */
12847         0,                              /* Not defined */
12848 };
12849
12850 static int get_priv_size(__u16 args)
12851 {
12852         int num = args & IW_PRIV_SIZE_MASK;
12853         int type = (args & IW_PRIV_TYPE_MASK) >> 12;
12854
12855         return num * iw_priv_type_size[type];
12856 }
12857 /* copy from net/wireless/wext.c end */
12858
12859
12860 static int _rtw_ioctl_wext_private(struct net_device *dev, union iwreq_data *wrq_data)
12861 {
12862         int err = 0;
12863         u8 *input = NULL;
12864         u32 input_len = 0;
12865         const char delim[] = " ";
12866         u8 *output = NULL;
12867         u32 output_len = 0;
12868         u32 count = 0;
12869         u8 *buffer = NULL;
12870         u32 buffer_len = 0;
12871         char *ptr = NULL;
12872         u8 cmdname[17] = {0}; /* IFNAMSIZ+1 */
12873         u32 cmdlen;
12874         s32 len;
12875         u8 *extra = NULL;
12876         u32 extra_size = 0;
12877
12878         s32 k;
12879         const iw_handler *priv;         /* Private ioctl */
12880         const struct iw_priv_args *priv_args;   /* Private ioctl description */
12881         const struct iw_priv_args *mp_priv_args;        /*MP Private ioctl description */
12882         const struct iw_priv_args *sel_priv_args;       /*Selected Private ioctl description */
12883         u32 num_priv;                           /* Number of ioctl */
12884         u32 num_priv_args;                      /* Number of descriptions */
12885         u32 num_mp_priv_args;                   /*Number of MP descriptions */
12886         u32 num_sel_priv_args;                  /*Number of Selected descriptions */
12887         iw_handler handler;
12888         int temp;
12889         int subcmd = 0;                         /* sub-ioctl index */
12890         int offset = 0;                         /* Space for sub-ioctl index */
12891
12892         union iwreq_data wdata;
12893
12894         _rtw_memcpy(&wdata, wrq_data, sizeof(wdata));
12895
12896         input_len = wdata.data.length;
12897         if (!input_len)
12898                 return -EINVAL;
12899         input = rtw_zmalloc(input_len);
12900         if (NULL == input)
12901                 return -ENOMEM;
12902         if (copy_from_user(input, wdata.data.pointer, input_len)) {
12903                 err = -EFAULT;
12904                 goto exit;
12905         }
12906         input[input_len - 1] = '\0';
12907         ptr = input;
12908         len = input_len;
12909
12910         if (ptr == NULL) {
12911                 err = -EOPNOTSUPP;
12912                 goto exit;
12913         }
12914
12915         sscanf(ptr, "%16s", cmdname);
12916         cmdlen = strlen(cmdname);
12917         RTW_INFO("%s: cmd=%s\n", __func__, cmdname);
12918
12919         /* skip command string */
12920         if (cmdlen > 0)
12921                 cmdlen += 1; /* skip one space */
12922         ptr += cmdlen;
12923         len -= cmdlen;
12924         RTW_INFO("%s: parameters=%s\n", __func__, ptr);
12925
12926         priv = rtw_private_handler;
12927         priv_args = rtw_private_args;
12928         mp_priv_args = rtw_mp_private_args;
12929         num_priv = sizeof(rtw_private_handler) / sizeof(iw_handler);
12930         num_priv_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args);
12931         num_mp_priv_args = sizeof(rtw_mp_private_args) / sizeof(struct iw_priv_args);
12932
12933         if (num_priv_args == 0) {
12934                 err = -EOPNOTSUPP;
12935                 goto exit;
12936         }
12937
12938         /* Search the correct ioctl */
12939         k = -1;
12940         sel_priv_args = priv_args;
12941         num_sel_priv_args = num_priv_args;
12942         while
12943         ((++k < num_sel_priv_args) && strcmp(sel_priv_args[k].name, cmdname))
12944                 ;
12945
12946         /* If not found... */
12947         if (k == num_sel_priv_args) {
12948                 k = -1;
12949                 sel_priv_args = mp_priv_args;
12950                 num_sel_priv_args = num_mp_priv_args;
12951                 while
12952                 ((++k < num_sel_priv_args) && strcmp(sel_priv_args[k].name, cmdname))
12953                         ;
12954
12955                 if (k == num_sel_priv_args) {
12956                         err = -EOPNOTSUPP;
12957                         goto exit;
12958                 }
12959         }
12960
12961         /* Watch out for sub-ioctls ! */
12962         if (sel_priv_args[k].cmd < SIOCDEVPRIVATE) {
12963                 int j = -1;
12964
12965                 /* Find the matching *real* ioctl */
12966                 while ((++j < num_priv_args) && ((priv_args[j].name[0] != '\0') ||
12967                          (priv_args[j].set_args != sel_priv_args[k].set_args) ||
12968                          (priv_args[j].get_args != sel_priv_args[k].get_args)))
12969                         ;
12970
12971                 /* If not found... */
12972                 if (j == num_priv_args) {
12973                         err = -EINVAL;
12974                         goto exit;
12975                 }
12976
12977                 /* Save sub-ioctl number */
12978                 subcmd = sel_priv_args[k].cmd;
12979                 /* Reserve one int (simplify alignment issues) */
12980                 offset = sizeof(__u32);
12981                 /* Use real ioctl definition from now on */
12982                 k = j;
12983         }
12984
12985         buffer = rtw_zmalloc(4096);
12986         if (NULL == buffer) {
12987                 err = -ENOMEM;
12988                 goto exit;
12989         }
12990
12991         /* If we have to set some data */
12992         if ((priv_args[k].set_args & IW_PRIV_TYPE_MASK) &&
12993             (priv_args[k].set_args & IW_PRIV_SIZE_MASK)) {
12994                 u8 *str;
12995
12996                 switch (priv_args[k].set_args & IW_PRIV_TYPE_MASK) {
12997                 case IW_PRIV_TYPE_BYTE:
12998                         /* Fetch args */
12999                         count = 0;
13000                         do {
13001                                 str = strsep(&ptr, delim);
13002                                 if (NULL == str)
13003                                         break;
13004                                 sscanf(str, "%i", &temp);
13005                                 buffer[count++] = (u8)temp;
13006                         } while (1);
13007                         buffer_len = count;
13008
13009                         /* Number of args to fetch */
13010                         wdata.data.length = count;
13011                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13012                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
13013
13014                         break;
13015
13016                 case IW_PRIV_TYPE_INT:
13017                         /* Fetch args */
13018                         count = 0;
13019                         do {
13020                                 str = strsep(&ptr, delim);
13021                                 if (NULL == str)
13022                                         break;
13023                                 sscanf(str, "%i", &temp);
13024                                 ((s32 *)buffer)[count++] = (s32)temp;
13025                         } while (1);
13026                         buffer_len = count * sizeof(s32);
13027
13028                         /* Number of args to fetch */
13029                         wdata.data.length = count;
13030                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13031                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
13032
13033                         break;
13034
13035                 case IW_PRIV_TYPE_CHAR:
13036                         if (len > 0) {
13037                                 /* Size of the string to fetch */
13038                                 wdata.data.length = len;
13039                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13040                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
13041
13042                                 /* Fetch string */
13043                                 _rtw_memcpy(buffer, ptr, wdata.data.length);
13044                         } else {
13045                                 wdata.data.length = 1;
13046                                 buffer[0] = '\0';
13047                         }
13048                         buffer_len = wdata.data.length;
13049                         break;
13050
13051                 default:
13052                         RTW_INFO("%s: Not yet implemented...\n", __func__);
13053                         err = -1;
13054                         goto exit;
13055                 }
13056
13057                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
13058                     (wdata.data.length != (priv_args[k].set_args & IW_PRIV_SIZE_MASK))) {
13059                         RTW_INFO("%s: The command %s needs exactly %d argument(s)...\n",
13060                                 __func__, cmdname, priv_args[k].set_args & IW_PRIV_SIZE_MASK);
13061                         err = -EINVAL;
13062                         goto exit;
13063                 }
13064         }   /* if args to set */
13065         else
13066                 wdata.data.length = 0L;
13067
13068         /* Those two tests are important. They define how the driver
13069         * will have to handle the data */
13070         if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
13071             ((get_priv_size(priv_args[k].set_args) + offset) <= IFNAMSIZ)) {
13072                 /* First case : all SET args fit within wrq */
13073                 if (offset)
13074                         wdata.mode = subcmd;
13075                 _rtw_memcpy(wdata.name + offset, buffer, IFNAMSIZ - offset);
13076         } else {
13077                 if ((priv_args[k].set_args == 0) &&
13078                     (priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
13079                     (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ)) {
13080                         /* Second case : no SET args, GET args fit within wrq */
13081                         if (offset)
13082                                 wdata.mode = subcmd;
13083                 } else {
13084                         /* Third case : args won't fit in wrq, or variable number of args */
13085                         if (copy_to_user(wdata.data.pointer, buffer, buffer_len)) {
13086                                 err = -EFAULT;
13087                                 goto exit;
13088                         }
13089                         wdata.data.flags = subcmd;
13090                 }
13091         }
13092
13093         rtw_mfree(input, input_len);
13094         input = NULL;
13095
13096         extra_size = 0;
13097         if (IW_IS_SET(priv_args[k].cmd)) {
13098                 /* Size of set arguments */
13099                 extra_size = get_priv_size(priv_args[k].set_args);
13100
13101                 /* Does it fits in iwr ? */
13102                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
13103                     ((extra_size + offset) <= IFNAMSIZ))
13104                         extra_size = 0;
13105         } else {
13106                 /* Size of get arguments */
13107                 extra_size = get_priv_size(priv_args[k].get_args);
13108
13109                 /* Does it fits in iwr ? */
13110                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
13111                     (extra_size <= IFNAMSIZ))
13112                         extra_size = 0;
13113         }
13114
13115         if (extra_size == 0) {
13116                 extra = (u8 *)&wdata;
13117                 rtw_mfree(buffer, 4096);
13118                 buffer = NULL;
13119         } else
13120                 extra = buffer;
13121
13122         handler = priv[priv_args[k].cmd - SIOCIWFIRSTPRIV];
13123         err = handler(dev, NULL, &wdata, extra);
13124
13125         /* If we have to get some data */
13126         if ((priv_args[k].get_args & IW_PRIV_TYPE_MASK) &&
13127             (priv_args[k].get_args & IW_PRIV_SIZE_MASK)) {
13128                 int j;
13129                 int n = 0;      /* number of args */
13130                 u8 str[20] = {0};
13131
13132                 /* Check where is the returned data */
13133                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
13134                     (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
13135                         n = priv_args[k].get_args & IW_PRIV_SIZE_MASK;
13136                 else
13137                         n = wdata.data.length;
13138
13139                 output = rtw_zmalloc(4096);
13140                 if (NULL == output) {
13141                         err =  -ENOMEM;
13142                         goto exit;
13143                 }
13144
13145                 switch (priv_args[k].get_args & IW_PRIV_TYPE_MASK) {
13146                 case IW_PRIV_TYPE_BYTE:
13147                         /* Display args */
13148                         for (j = 0; j < n; j++) {
13149                                 sprintf(str, "%d  ", extra[j]);
13150                                 len = strlen(str);
13151                                 output_len = strlen(output);
13152                                 if ((output_len + len + 1) > 4096) {
13153                                         err = -E2BIG;
13154                                         goto exit;
13155                                 }
13156                                 _rtw_memcpy(output + output_len, str, len);
13157                         }
13158                         break;
13159
13160                 case IW_PRIV_TYPE_INT:
13161                         /* Display args */
13162                         for (j = 0; j < n; j++) {
13163                                 sprintf(str, "%d  ", ((__s32 *)extra)[j]);
13164                                 len = strlen(str);
13165                                 output_len = strlen(output);
13166                                 if ((output_len + len + 1) > 4096) {
13167                                         err = -E2BIG;
13168                                         goto exit;
13169                                 }
13170                                 _rtw_memcpy(output + output_len, str, len);
13171                         }
13172                         break;
13173
13174                 case IW_PRIV_TYPE_CHAR:
13175                         /* Display args */
13176                         _rtw_memcpy(output, extra, n);
13177                         break;
13178
13179                 default:
13180                         RTW_INFO("%s: Not yet implemented...\n", __func__);
13181                         err = -1;
13182                         goto exit;
13183                 }
13184
13185                 output_len = strlen(output) + 1;
13186                 wrq_data->data.length = output_len;
13187                 if (copy_to_user(wrq_data->data.pointer, output, output_len)) {
13188                         err = -EFAULT;
13189                         goto exit;
13190                 }
13191         }   /* if args to set */
13192         else
13193                 wrq_data->data.length = 0;
13194
13195 exit:
13196         if (input)
13197                 rtw_mfree(input, input_len);
13198         if (buffer)
13199                 rtw_mfree(buffer, 4096);
13200         if (output)
13201                 rtw_mfree(output, 4096);
13202
13203         return err;
13204 }
13205
13206 #ifdef CONFIG_COMPAT
13207 static int rtw_ioctl_compat_wext_private(struct net_device *dev, struct ifreq *rq)
13208 {
13209         struct compat_iw_point iwp_compat;
13210         union iwreq_data wrq_data;
13211         int err = 0;
13212         RTW_INFO("%s:...\n", __func__);
13213         if (copy_from_user(&iwp_compat, rq->ifr_ifru.ifru_data, sizeof(struct compat_iw_point)))
13214                 return -EFAULT;
13215
13216         wrq_data.data.pointer = compat_ptr(iwp_compat.pointer);
13217         wrq_data.data.length = iwp_compat.length;
13218         wrq_data.data.flags = iwp_compat.flags;
13219
13220         err = _rtw_ioctl_wext_private(dev, &wrq_data);
13221
13222         iwp_compat.pointer = ptr_to_compat(wrq_data.data.pointer);
13223         iwp_compat.length = wrq_data.data.length;
13224         iwp_compat.flags = wrq_data.data.flags;
13225         if (copy_to_user(rq->ifr_ifru.ifru_data, &iwp_compat, sizeof(struct compat_iw_point)))
13226                 return -EFAULT;
13227
13228         return err;
13229 }
13230 #endif /* CONFIG_COMPAT */
13231
13232 static int rtw_ioctl_standard_wext_private(struct net_device *dev, struct ifreq *rq)
13233 {
13234         struct iw_point *iwp;
13235         struct ifreq ifrq;
13236         union iwreq_data wrq_data;
13237         int err = 0;
13238         iwp = &wrq_data.data;
13239         RTW_INFO("%s:...\n", __func__);
13240         if (copy_from_user(iwp, rq->ifr_ifru.ifru_data, sizeof(struct iw_point)))
13241                 return -EFAULT;
13242
13243         err = _rtw_ioctl_wext_private(dev, &wrq_data);
13244
13245         if (copy_to_user(rq->ifr_ifru.ifru_data, iwp, sizeof(struct iw_point)))
13246                 return -EFAULT;
13247
13248         return err;
13249 }
13250
13251 static int rtw_ioctl_wext_private(struct net_device *dev, struct ifreq *rq)
13252 {
13253 #ifdef CONFIG_COMPAT
13254         if (is_compat_task())
13255                 return rtw_ioctl_compat_wext_private(dev, rq);
13256         else
13257 #endif /* CONFIG_COMPAT */
13258                 return rtw_ioctl_standard_wext_private(dev, rq);
13259 }
13260
13261 int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
13262 {
13263         struct iwreq *wrq = (struct iwreq *)rq;
13264         int ret = 0;
13265
13266         switch (cmd) {
13267         case RTL_IOCTL_WPA_SUPPLICANT:
13268                 ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
13269                 break;
13270 #ifdef CONFIG_AP_MODE
13271         case RTL_IOCTL_HOSTAPD:
13272                 ret = rtw_hostapd_ioctl(dev, &wrq->u.data);
13273                 break;
13274 #ifdef CONFIG_WIRELESS_EXT
13275         case SIOCSIWMODE:
13276                 ret = rtw_wx_set_mode(dev, NULL, &wrq->u, NULL);
13277                 break;
13278 #endif
13279 #endif /* CONFIG_AP_MODE */
13280         case SIOCDEVPRIVATE:
13281                 ret = rtw_ioctl_wext_private(dev, rq);
13282                 break;
13283         case (SIOCDEVPRIVATE+1):
13284                 ret = rtw_android_priv_cmd(dev, rq, cmd);
13285                 break;
13286         default:
13287                 ret = -EOPNOTSUPP;
13288                 break;
13289         }
13290
13291         return ret;
13292 }