PageRenderTime 69ms CodeModel.GetById 25ms RepoModel.GetById 1ms app.codeStats 1ms

/drivers/staging/rtl8723au/core/rtw_mlme_ext.c

http://github.com/mirrors/linux-2.6
C | 6187 lines | 4556 code | 1132 blank | 499 comment | 894 complexity | eadf830d0512b176f49eec5fbcf30820 MD5 | raw file
Possible License(s): LGPL-2.0, AGPL-1.0, GPL-2.0

Large files files are truncated, but you can click here to view the full file

    

  1. /******************************************************************************
    2. 

  2.  *
    3. 

  3.  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
    4. 

  4.  *
    5. 

  5.  * This program is free software; you can redistribute it and/or modify it
    6. 

  6.  * under the terms of version 2 of the GNU General Public License as
    7. 

  7.  * published by the Free Software Foundation.
    8. 

  8.  *
    9. 

  9.  * This program is distributed in the hope that it will be useful, but WITHOUT
    10. 

  10.  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
    11. 

  11.  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
    12. 

  12.  * more details.
    13. 

  13.  *
    14. 

  14.  ******************************************************************************/
    15. 

  15. #define _RTW_MLME_EXT_C_
    16. 

  16. 

  17. #include <osdep_service.h>
    18. 

  18. #include <drv_types.h>
    19. 

  19. #include <wifi.h>
    20. 

  20. #include <rtw_mlme_ext.h>
    21. 

  21. #include <wlan_bssdef.h>
    22. 

  22. #include <mlme_osdep.h>
    23. 

  23. #include <recv_osdep.h>
    24. 

  24. #include <linux/ieee80211.h>
    25. 

  25. #include <rtl8723a_hal.h>
    26. 

  26. 

  27. static int OnAssocReq23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    28. 

  28. static int OnAssocRsp23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    29. 

  29. static int OnProbeReq23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    30. 

  30. static int OnProbeRsp23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    31. 

  31. static int DoReserved23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    32. 

  32. static int OnBeacon23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    33. 

  33. static int OnAtim23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    34. 

  34. static int OnDisassoc23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    35. 

  35. static int OnAuth23aClient23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    36. 

  36. static int OnDeAuth23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    37. 

  37. static int OnAction23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    38. 

  38. 

  39. static int on_action_spct23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    40. 

  40. static int OnAction23a_qos(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    41. 

  41. static int OnAction23a_dls(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    42. 

  42. static int OnAction23a_back23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    43. 

  43. static int on_action_public23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    44. 

  44. static int OnAction23a_ht(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    45. 

  45. static int OnAction23a_wmm(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    46. 

  46. static int OnAction23a_p2p(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    47. 

  47. 

  48. static void issue_assocreq(struct rtw_adapter *padapter);
    49. 

  49. static void issue_probereq(struct rtw_adapter *padapter,
    50. 

  50. 			   struct cfg80211_ssid *pssid, u8 *da);
    51. 

  51. static int issue_probereq_ex(struct rtw_adapter *padapter,
    52. 

  52. 			     struct cfg80211_ssid *pssid,
    53. 

  53. 			     u8 *da, int try_cnt, int wait_ms);
    54. 

  54. static void issue_probersp(struct rtw_adapter *padapter, unsigned char *da);
    55. 

  55. static void issue_auth(struct rtw_adapter *padapter, struct sta_info *psta,
    56. 

  56. 		       unsigned short status);
    57. 

  57. static int issue_deauth_ex(struct rtw_adapter *padapter, u8 *da,
    58. 

  58. 			   unsigned short reason, int try_cnt, int wait_ms);
    59. 

  59. static void start_clnt_assoc(struct rtw_adapter *padapter);
    60. 

  60. static void start_clnt_auth(struct rtw_adapter *padapter);
    61. 

  61. static void start_clnt_join(struct rtw_adapter *padapter);
    62. 

  62. static void start_create_ibss(struct rtw_adapter *padapter);
    63. 

  63. static struct wlan_bssid_ex *collect_bss_info(struct rtw_adapter *padapter,
    64. 

  64. 					      struct recv_frame *precv_frame);
    65. 

  65. 

  66. #ifdef CONFIG_8723AU_AP_MODE
    67. 

  67. static int OnAuth23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
    68. 

  68. static void issue_assocrsp(struct rtw_adapter *padapter, unsigned short status,
    69. 

  69. 			   struct sta_info *pstat, u16 pkt_type);
    70. 

  70. #endif
    71. 

  71. 

  72. static struct mlme_handler mlme_sta_tbl[]={
    73. 

  73. 	{"OnAssocReq23a",		&OnAssocReq23a},
    74. 

  74. 	{"OnAssocRsp23a",		&OnAssocRsp23a},
    75. 

  75. 	{"OnReAssocReq",	&OnAssocReq23a},
    76. 

  76. 	{"OnReAssocRsp",	&OnAssocRsp23a},
    77. 

  77. 	{"OnProbeReq23a",		&OnProbeReq23a},
    78. 

  78. 	{"OnProbeRsp23a",		&OnProbeRsp23a},
    79. 

  79. 

  80. 	/*----------------------------------------------------------
    81. 

  81. 					below 2 are reserved
    82. 

  82. 	-----------------------------------------------------------*/
    83. 

  83. 	{"DoReserved23a",		&DoReserved23a},
    84. 

  84. 	{"DoReserved23a",		&DoReserved23a},
    85. 

  85. 	{"OnBeacon23a",		&OnBeacon23a},
    86. 

  86. 	{"OnATIM",		&OnAtim23a},
    87. 

  87. 	{"OnDisassoc23a",		&OnDisassoc23a},
    88. 

  88. 	{"OnAuth23a",		&OnAuth23aClient23a},
    89. 

  89. 	{"OnDeAuth23a",		&OnDeAuth23a},
    90. 

  90. 	{"OnAction23a",		&OnAction23a},
    91. 

  91. };
    92. 

  92. 

  93. static struct action_handler OnAction23a_tbl[]={
    94. 

  94. 	{WLAN_CATEGORY_SPECTRUM_MGMT, "ACTION_SPECTRUM_MGMT", on_action_spct23a},
    95. 

  95. 	{WLAN_CATEGORY_QOS, "ACTION_QOS", &OnAction23a_qos},
    96. 

  96. 	{WLAN_CATEGORY_DLS, "ACTION_DLS", &OnAction23a_dls},
    97. 

  97. 	{WLAN_CATEGORY_BACK, "ACTION_BACK", &OnAction23a_back23a},
    98. 

  98. 	{WLAN_CATEGORY_PUBLIC, "ACTION_PUBLIC", on_action_public23a},
    99. 

  99. 	{WLAN_CATEGORY_HT, "ACTION_HT",	&OnAction23a_ht},
    100. 

  100. 	{WLAN_CATEGORY_SA_QUERY, "ACTION_SA_QUERY", &DoReserved23a},
    101. 

  101. 	{WLAN_CATEGORY_WMM, "ACTION_WMM", &OnAction23a_wmm},
    102. 

  102. 	{WLAN_CATEGORY_VENDOR_SPECIFIC, "ACTION_P2P", &OnAction23a_p2p},
    103. 

  103. };
    104. 

  104. 

  105. static u8	null_addr[ETH_ALEN]= {0, 0, 0, 0, 0, 0};
    106. 

  106. 

  107. /**************************************************
    108. 

  108. OUI definitions for the vendor specific IE
    109. 

  109. ***************************************************/
    110. 

  110. unsigned char WMM_OUI23A[] = {0x00, 0x50, 0xf2, 0x02};
    111. 

  111. unsigned char WPS_OUI23A[] = {0x00, 0x50, 0xf2, 0x04};
    112. 

  112. unsigned char P2P_OUI23A[] = {0x50, 0x6F, 0x9A, 0x09};
    113. 

  113. unsigned char WFD_OUI23A[] = {0x50, 0x6F, 0x9A, 0x0A};
    114. 

  114. 

  115. unsigned char WMM_INFO_OUI23A[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01};
    116. 

  116. unsigned char WMM_PARA_OUI23A[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
    117. 

  117. 

  118. static unsigned char REALTEK_96B_IE[] = {0x00, 0xe0, 0x4c, 0x02, 0x01, 0x20};
    119. 

  119. 

  120. /********************************************************
    121. 

  121. MCS rate definitions
    122. 

  122. *********************************************************/
    123. 

  123. unsigned char MCS_rate_2R23A[16] = {
    124. 

  124. 	0xff, 0xff, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0,
    125. 

  125. 	0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
    126. 

  126. unsigned char MCS_rate_1R23A[16] = {
    127. 

  127. 	0xff, 0x00, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0,
    128. 

  128. 	0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
    129. 

  129. 

  130. /********************************************************
    131. 

  131. ChannelPlan definitions
    132. 

  132. *********************************************************/
    133. 

  133. 

  134. static struct rt_channel_plan_2g RTW_ChannelPlan2G[RT_CHANNEL_DOMAIN_2G_MAX] = {
    135. 

  135. 	/*  0x00, RT_CHANNEL_DOMAIN_2G_WORLD , Passive scan CH 12, 13 */
    136. 

  136. 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
    137. 

  137. 	/*  0x01, RT_CHANNEL_DOMAIN_2G_ETSI1 */
    138. 

  138. 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
    139. 

  139. 	/*  0x02, RT_CHANNEL_DOMAIN_2G_FCC1 */
    140. 

  140. 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}, 11},
    141. 

  141. 	/*  0x03, RT_CHANNEL_DOMAIN_2G_MIKK1 */
    142. 

  142. 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14}, 14},
    143. 

  143. 	/*  0x04, RT_CHANNEL_DOMAIN_2G_ETSI2 */
    144. 

  144. 	{{10, 11, 12, 13}, 4},
    145. 

  145. 	/*  0x05, RT_CHANNEL_DOMAIN_2G_NULL */
    146. 

  146. 	{{}, 0},
    147. 

  147. };
    148. 

  148. 

  149. static struct rt_channel_plan_5g RTW_ChannelPlan5G[RT_CHANNEL_DOMAIN_5G_MAX] = {
    150. 

  150. 	/*  0x00, RT_CHANNEL_DOMAIN_5G_NULL */
    151. 

  151. 	{{}, 0},
    152. 

  152. 	/*  0x01, RT_CHANNEL_DOMAIN_5G_ETSI1 */
    153. 

  153. 	{{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
    154. 

  154. 	  116, 120, 124, 128, 132, 136, 140}, 19},
    155. 

  155. 	/*  0x02, RT_CHANNEL_DOMAIN_5G_ETSI2 */
    156. 

  156. 	{{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
    157. 

  157. 	  116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165}, 24},
    158. 

  158. 	/*  0x03, RT_CHANNEL_DOMAIN_5G_ETSI3 */
    159. 

  159. 	{{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
    160. 

  160. 	  116, 120, 124, 128, 132, 149, 153, 157, 161, 165}, 22},
    161. 

  161. 	/*  0x04, RT_CHANNEL_DOMAIN_5G_FCC1 */
    162. 

  162. 	{{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
    163. 

  163. 	  116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165}, 24},
    164. 

  164. 	/*  0x05, RT_CHANNEL_DOMAIN_5G_FCC2 */
    165. 

  165. 	{{36, 40, 44, 48, 149, 153, 157, 161, 165}, 9},
    166. 

  166. 	/*  0x06, RT_CHANNEL_DOMAIN_5G_FCC3 */
    167. 

  167. 	{{36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165}, 13},
    168. 

  168. 	/*  0x07, RT_CHANNEL_DOMAIN_5G_FCC4 */
    169. 

  169. 	{{36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161}, 12},
    170. 

  170. 	/*  0x08, RT_CHANNEL_DOMAIN_5G_FCC5 */
    171. 

  171. 	{{149, 153, 157, 161, 165}, 5},
    172. 

  172. 	/*  0x09, RT_CHANNEL_DOMAIN_5G_FCC6 */
    173. 

  173. 	{{36, 40, 44, 48, 52, 56, 60, 64}, 8},
    174. 

  174. 	/*  0x0A, RT_CHANNEL_DOMAIN_5G_FCC7_IC1 */
    175. 

  175. 	{{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
    176. 

  176. 	  116, 136, 140, 149, 153, 157, 161, 165}, 20},
    177. 

  177. 	/*  0x0B, RT_CHANNEL_DOMAIN_5G_KCC1 */
    178. 

  178. 	{{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
    179. 

  179. 	  116, 120, 124, 149, 153, 157, 161, 165}, 20},
    180. 

  180. 	/*  0x0C, RT_CHANNEL_DOMAIN_5G_MKK1 */
    181. 

  181. 	{{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
    182. 

  182. 	  116, 120, 124, 128, 132, 136, 140}, 19},
    183. 

  183. 	/*  0x0D, RT_CHANNEL_DOMAIN_5G_MKK2 */
    184. 

  184. 	{{36, 40, 44, 48, 52, 56, 60, 64}, 8},
    185. 

  185. 	/*  0x0E, RT_CHANNEL_DOMAIN_5G_MKK3 */
    186. 

  186. 	{{100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140}, 11},
    187. 

  187. 	/*  0x0F, RT_CHANNEL_DOMAIN_5G_NCC1 */
    188. 

  188. 	{{56, 60, 64, 100, 104, 108, 112, 116, 136, 140, 149,
    189. 

  189. 	  153, 157, 161, 165}, 15},
    190. 

  190. 	/*  0x10, RT_CHANNEL_DOMAIN_5G_NCC2 */
    191. 

  191. 	{{56, 60, 64, 149, 153, 157, 161, 165}, 8},
    192. 

  192. 

  193. 	/*  Driver self defined for old channel plan Compatible,
    194. 

  194. 	    Remember to modify if have new channel plan definition ===== */
    195. 

  195. 	/*  0x11, RT_CHANNEL_DOMAIN_5G_FCC */
    196. 

  196. 	{{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
    197. 

  197. 	  116, 132, 136, 140, 149, 153, 157, 161, 165}, 21},
    198. 

  198. 	/*  0x12, RT_CHANNEL_DOMAIN_5G_JAPAN_NO_DFS */
    199. 

  199. 	{{36, 40, 44, 48}, 4},
    200. 

  200. 	/*  0x13, RT_CHANNEL_DOMAIN_5G_FCC4_NO_DFS */
    201. 

  201. 	{{36, 40, 44, 48, 149, 153, 157, 161}, 8},
    202. 

  202. };
    203. 

  203. 

  204. static struct rt_channel_plan_map RTW_ChannelPlanMap[RT_CHANNEL_DOMAIN_MAX] = {
    205. 

  205. 	/*  0x00 ~ 0x1F , Old Define ===== */
    206. 

  206. 	{0x02, 0x11},	/* 0x00, RT_CHANNEL_DOMAIN_FCC */
    207. 

  207. 	{0x02, 0x0A},	/* 0x01, RT_CHANNEL_DOMAIN_IC */
    208. 

  208. 	{0x01, 0x01},	/* 0x02, RT_CHANNEL_DOMAIN_ETSI */
    209. 

  209. 	{0x01, 0x00},	/* 0x03, RT_CHANNEL_DOMAIN_SPAIN */
    210. 

  210. 	{0x01, 0x00},	/* 0x04, RT_CHANNEL_DOMAIN_FRANCE */
    211. 

  211. 	{0x03, 0x00},	/* 0x05, RT_CHANNEL_DOMAIN_MKK */
    212. 

  212. 	{0x03, 0x00},	/* 0x06, RT_CHANNEL_DOMAIN_MKK1 */
    213. 

  213. 	{0x01, 0x09},	/* 0x07, RT_CHANNEL_DOMAIN_ISRAEL */
    214. 

  214. 	{0x03, 0x09},	/* 0x08, RT_CHANNEL_DOMAIN_TELEC */
    215. 

  215. 	{0x03, 0x00},	/* 0x09, RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN */
    216. 

  216. 	{0x00, 0x00},	/* 0x0A, RT_CHANNEL_DOMAIN_WORLD_WIDE_13 */
    217. 

  217. 	{0x02, 0x0F},	/* 0x0B, RT_CHANNEL_DOMAIN_TAIWAN */
    218. 

  218. 	{0x01, 0x08},	/* 0x0C, RT_CHANNEL_DOMAIN_CHINA */
    219. 

  219. 	{0x02, 0x06},	/* 0x0D, RT_CHANNEL_DOMAIN_SINGAPORE_INDIA_MEXICO */
    220. 

  220. 	{0x02, 0x0B},	/* 0x0E, RT_CHANNEL_DOMAIN_KOREA */
    221. 

  221. 	{0x02, 0x09},	/* 0x0F, RT_CHANNEL_DOMAIN_TURKEY */
    222. 

  222. 	{0x01, 0x01},	/* 0x10, RT_CHANNEL_DOMAIN_JAPAN */
    223. 

  223. 	{0x02, 0x05},	/* 0x11, RT_CHANNEL_DOMAIN_FCC_NO_DFS */
    224. 

  224. 	{0x01, 0x12},	/* 0x12, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS */
    225. 

  225. 	{0x00, 0x04},	/* 0x13, RT_CHANNEL_DOMAIN_WORLD_WIDE_5G */
    226. 

  226. 	{0x02, 0x10},	/* 0x14, RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS */
    227. 

  227. 	{0x00, 0x12},	/* 0x15, RT_CHANNEL_DOMAIN_ETSI_NO_DFS */
    228. 

  228. 	{0x00, 0x13},	/* 0x16, RT_CHANNEL_DOMAIN_KOREA_NO_DFS */
    229. 

  229. 	{0x03, 0x12},	/* 0x17, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS */
    230. 

  230. 	{0x05, 0x08},	/* 0x18, RT_CHANNEL_DOMAIN_PAKISTAN_NO_DFS */
    231. 

  231. 	{0x02, 0x08},	/* 0x19, RT_CHANNEL_DOMAIN_TAIWAN2_NO_DFS */
    232. 

  232. 	{0x00, 0x00},	/* 0x1A, */
    233. 

  233. 	{0x00, 0x00},	/* 0x1B, */
    234. 

  234. 	{0x00, 0x00},	/* 0x1C, */
    235. 

  235. 	{0x00, 0x00},	/* 0x1D, */
    236. 

  236. 	{0x00, 0x00},	/* 0x1E, */
    237. 

  237. 	{0x05, 0x04},	/* 0x1F, RT_CHANNEL_DOMAIN_WORLD_WIDE_ONLY_5G */
    238. 

  238. 	/*  0x20 ~ 0x7F , New Define ===== */
    239. 

  239. 	{0x00, 0x00},	/* 0x20, RT_CHANNEL_DOMAIN_WORLD_NULL */
    240. 

  240. 	{0x01, 0x00},	/* 0x21, RT_CHANNEL_DOMAIN_ETSI1_NULL */
    241. 

  241. 	{0x02, 0x00},	/* 0x22, RT_CHANNEL_DOMAIN_FCC1_NULL */
    242. 

  242. 	{0x03, 0x00},	/* 0x23, RT_CHANNEL_DOMAIN_MKK1_NULL */
    243. 

  243. 	{0x04, 0x00},	/* 0x24, RT_CHANNEL_DOMAIN_ETSI2_NULL */
    244. 

  244. 	{0x02, 0x04},	/* 0x25, RT_CHANNEL_DOMAIN_FCC1_FCC1 */
    245. 

  245. 	{0x00, 0x01},	/* 0x26, RT_CHANNEL_DOMAIN_WORLD_ETSI1 */
    246. 

  246. 	{0x03, 0x0C},	/* 0x27, RT_CHANNEL_DOMAIN_MKK1_MKK1 */
    247. 

  247. 	{0x00, 0x0B},	/* 0x28, RT_CHANNEL_DOMAIN_WORLD_KCC1 */
    248. 

  248. 	{0x00, 0x05},	/* 0x29, RT_CHANNEL_DOMAIN_WORLD_FCC2 */
    249. 

  249. 	{0x00, 0x00},	/* 0x2A, */
    250. 

  250. 	{0x00, 0x00},	/* 0x2B, */
    251. 

  251. 	{0x00, 0x00},	/* 0x2C, */
    252. 

  252. 	{0x00, 0x00},	/* 0x2D, */
    253. 

  253. 	{0x00, 0x00},	/* 0x2E, */
    254. 

  254. 	{0x00, 0x00},	/* 0x2F, */
    255. 

  255. 	{0x00, 0x06},	/* 0x30, RT_CHANNEL_DOMAIN_WORLD_FCC3 */
    256. 

  256. 	{0x00, 0x07},	/* 0x31, RT_CHANNEL_DOMAIN_WORLD_FCC4 */
    257. 

  257. 	{0x00, 0x08},	/* 0x32, RT_CHANNEL_DOMAIN_WORLD_FCC5 */
    258. 

  258. 	{0x00, 0x09},	/* 0x33, RT_CHANNEL_DOMAIN_WORLD_FCC6 */
    259. 

  259. 	{0x02, 0x0A},	/* 0x34, RT_CHANNEL_DOMAIN_FCC1_FCC7 */
    260. 

  260. 	{0x00, 0x02},	/* 0x35, RT_CHANNEL_DOMAIN_WORLD_ETSI2 */
    261. 

  261. 	{0x00, 0x03},	/* 0x36, RT_CHANNEL_DOMAIN_WORLD_ETSI3 */
    262. 

  262. 	{0x03, 0x0D},	/* 0x37, RT_CHANNEL_DOMAIN_MKK1_MKK2 */
    263. 

  263. 	{0x03, 0x0E},	/* 0x38, RT_CHANNEL_DOMAIN_MKK1_MKK3 */
    264. 

  264. 	{0x02, 0x0F},	/* 0x39, RT_CHANNEL_DOMAIN_FCC1_NCC1 */
    265. 

  265. 	{0x00, 0x00},	/* 0x3A, */
    266. 

  266. 	{0x00, 0x00},	/* 0x3B, */
    267. 

  267. 	{0x00, 0x00},	/* 0x3C, */
    268. 

  268. 	{0x00, 0x00},	/* 0x3D, */
    269. 

  269. 	{0x00, 0x00},	/* 0x3E, */
    270. 

  270. 	{0x00, 0x00},	/* 0x3F, */
    271. 

  271. 	{0x02, 0x10},	/* 0x40, RT_CHANNEL_DOMAIN_FCC1_NCC2 */
    272. 

  272. 	{0x03, 0x00},	/* 0x41, RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN_2G */
    273. 

  273. };
    274. 

  274. 

  275. static struct rt_channel_plan_map RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE =
    276. 

  276. {0x03, 0x02}; /* use the conbination for max channel numbers */
    277. 

  277. 

  278. static void dummy_event_callback(struct rtw_adapter *adapter, const u8 *pbuf)
    279. 

  279. {
    280. 

  280. }
    281. 

  281. 

  282. static struct fwevent wlanevents[] =
    283. 

  283. {
    284. 

  284. 	{0, &dummy_event_callback},	/*0*/
    285. 

  285. 	{0, NULL},
    286. 

  286. 	{0, NULL},
    287. 

  287. 	{0, NULL},
    288. 

  288. 	{0, NULL},
    289. 

  289. 	{0, NULL},
    290. 

  290. 	{0, NULL},
    291. 

  291. 	{0, NULL},
    292. 

  292. 	{0, &rtw_survey_event_cb23a},		/*8*/
    293. 

  293. 	{sizeof (struct surveydone_event), &rtw_surveydone_event_callback23a},
    294. 

  294. 	{0, &rtw23a_joinbss_event_cb},		/*10*/
    295. 

  295. 	{sizeof(struct stassoc_event), &rtw_stassoc_event_callback23a},
    296. 

  296. 	{sizeof(struct stadel_event), &rtw_stadel_event_callback23a},
    297. 

  297. 	{0, &dummy_event_callback},
    298. 

  298. 	{0, &dummy_event_callback},
    299. 

  299. 	{0, NULL},	/*15*/
    300. 

  300. 	{0, NULL},
    301. 

  301. 	{0, NULL},
    302. 

  302. 	{0, NULL},
    303. 

  303. 	{0, &dummy_event_callback},
    304. 

  304. 	{0, NULL},	 /*20*/
    305. 

  305. 	{0, NULL},
    306. 

  306. 	{0, NULL},
    307. 

  307. 	{0, &dummy_event_callback},
    308. 

  308. 	{0, NULL},
    309. 

  309. };
    310. 

  310. 

  311. 

  312. static void rtw_correct_TSF(struct rtw_adapter *padapter)
    313. 

  313. {
    314. 

  314. 	hw_var_set_correct_tsf(padapter);
    315. 

  315. }
    316. 

  316. 

  317. static void
    318. 

  318. rtw_update_TSF(struct mlme_ext_priv *pmlmeext, struct ieee80211_mgmt *mgmt)
    319. 

  319. {
    320. 

  320. 	pmlmeext->TSFValue = get_unaligned_le64(&mgmt->u.beacon.timestamp);
    321. 

  321. }
    322. 

  322. 

  323. /*
    324. 

  324.  * Search the @param channel_num in given @param channel_set
    325. 

  325.  * @ch_set: the given channel set
    326. 

  326.  * @ch: the given channel number
    327. 

  327.  *
    328. 

  328.  * return the index of channel_num in channel_set, -1 if not found
    329. 

  329.  */
    330. 

  330. int rtw_ch_set_search_ch23a(struct rt_channel_info *ch_set, const u32 ch)
    331. 

  331. {
    332. 

  332. 	int i;
    333. 

  333. 

  334. 	for (i = 0; ch_set[i]. ChannelNum != 0; i++) {
    335. 

  335. 		if (ch == ch_set[i].ChannelNum)
    336. 

  336. 			break;
    337. 

  337. 	}
    338. 

  338. 

  339. 	if (i >= ch_set[i].ChannelNum)
    340. 

  340. 		return -1;
    341. 

  341. 	return i;
    342. 

  342. }
    343. 

  343. 

  344. /****************************************************************************
    345. 

    346. 

  346. Following are the initialization functions for WiFi MLME
    347. 

    348. 

  348. *****************************************************************************/
    349. 

  349. 

  350. int init_hw_mlme_ext23a(struct rtw_adapter *padapter)
    351. 

  351. {
    352. 

  352. 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
    353. 

  353. 

  354. 	set_channel_bwmode23a(padapter, pmlmeext->cur_channel,
    355. 

  355. 			      pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
    356. 

  356. 	return _SUCCESS;
    357. 

  357. }
    358. 

  358. 

  359. static void init_mlme_ext_priv23a_value(struct rtw_adapter *padapter)
    360. 

  360. {
    361. 

  361. 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
    362. 

  362. 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
    363. 

  363. 	unsigned char	mixed_datarate[NumRates] = {
    364. 

  364. 		_1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, _6M_RATE_,
    365. 

  365. 		_9M_RATE_, _12M_RATE_, _18M_RATE_, _24M_RATE_, _36M_RATE_,
    366. 

  366. 		_48M_RATE_, _54M_RATE_, 0xff};
    367. 

  367. 	unsigned char	mixed_basicrate[NumRates] = {
    368. 

  368. 		_1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, _6M_RATE_,
    369. 

  369. 		_12M_RATE_, _24M_RATE_, 0xff,};
    370. 

  370. 

  371. 	atomic_set(&pmlmeext->event_seq, 0);
    372. 

  372. 	/* reset to zero when disconnect at client mode */
    373. 

  373. 	pmlmeext->mgnt_seq = 0;
    374. 

  374. 

  375. 	pmlmeext->cur_channel = padapter->registrypriv.channel;
    376. 

  376. 	pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
    377. 

  377. 	pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
    378. 

  378. 

  379. 	pmlmeext->retry = 0;
    380. 

  380. 

  381. 	pmlmeext->cur_wireless_mode = padapter->registrypriv.wireless_mode;
    382. 

  382. 

  383. 	memcpy(pmlmeext->datarate, mixed_datarate, NumRates);
    384. 

  384. 	memcpy(pmlmeext->basicrate, mixed_basicrate, NumRates);
    385. 

  385. 

  386. 	if (pmlmeext->cur_channel > 14)
    387. 

  387. 		pmlmeext->tx_rate = IEEE80211_OFDM_RATE_6MB;
    388. 

  388. 	else
    389. 

  389. 		pmlmeext->tx_rate = IEEE80211_CCK_RATE_1MB;
    390. 

  390. 

  391. 	pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
    392. 

  392. 	pmlmeext->sitesurvey_res.channel_idx = 0;
    393. 

  393. 	pmlmeext->sitesurvey_res.bss_cnt = 0;
    394. 

  394. 	pmlmeext->scan_abort = false;
    395. 

  395. 

  396. 	pmlmeinfo->state = MSR_NOLINK;
    397. 

  397. 	pmlmeinfo->reauth_count = 0;
    398. 

  398. 	pmlmeinfo->reassoc_count = 0;
    399. 

  399. 	pmlmeinfo->link_count = 0;
    400. 

  400. 	pmlmeinfo->auth_seq = 0;
    401. 

  401. 	pmlmeinfo->auth_algo = dot11AuthAlgrthm_Open;
    402. 

  402. 	pmlmeinfo->key_index = 0;
    403. 

  403. 	pmlmeinfo->iv = 0;
    404. 

  404. 

  405. 	pmlmeinfo->enc_algo = 0;
    406. 

  406. 	pmlmeinfo->authModeToggle = 0;
    407. 

  407. 

  408. 	memset(pmlmeinfo->chg_txt, 0, 128);
    409. 

  409. 

  410. 	pmlmeinfo->slotTime = SHORT_SLOT_TIME;
    411. 

  411. 	pmlmeinfo->preamble_mode = PREAMBLE_AUTO;
    412. 

  412. 

  413. 	pmlmeinfo->dialogToken = 0;
    414. 

  414. 

  415. 	pmlmeext->action_public_rxseq = 0xffff;
    416. 

  416. 	pmlmeext->action_public_dialog_token = 0xff;
    417. 

  417. }
    418. 

  418. 

  419. static int has_channel(struct rt_channel_info *channel_set,
    420. 

  420. 		       u8 chanset_size, u8 chan) {
    421. 

  421. 	int i;
    422. 

  422. 

  423. 	for (i = 0; i < chanset_size; i++) {
    424. 

  424. 		if (channel_set[i].ChannelNum == chan)
    425. 

  425. 			return 1;
    426. 

  426. 	}
    427. 

  427. 

  428. 	return 0;
    429. 

  429. }
    430. 

  430. 

  431. static void init_channel_list(struct rtw_adapter *padapter,
    432. 

  432. 			      struct rt_channel_info *channel_set,
    433. 

  433. 			      u8 chanset_size,
    434. 

  434. 			      struct p2p_channels *channel_list)
    435. 

  435. {
    436. 

  436. 	struct p2p_oper_class_map op_class[] = {
    437. 

  437. 		{ IEEE80211G,  81,   1,  13,  1, BW20 },
    438. 

  438. 		{ IEEE80211G,  82,  14,  14,  1, BW20 },
    439. 

  439. 		{ IEEE80211A, 115,  36,  48,  4, BW20 },
    440. 

  440. 		{ IEEE80211A, 116,  36,  44,  8, BW40PLUS },
    441. 

  441. 		{ IEEE80211A, 117,  40,  48,  8, BW40MINUS },
    442. 

  442. 		{ IEEE80211A, 124, 149, 161,  4, BW20 },
    443. 

  443. 		{ IEEE80211A, 125, 149, 169,  4, BW20 },
    444. 

  444. 		{ IEEE80211A, 126, 149, 157,  8, BW40PLUS },
    445. 

  445. 		{ IEEE80211A, 127, 153, 161,  8, BW40MINUS },
    446. 

  446. 		{ -1, 0, 0, 0, 0, BW20 }
    447. 

  447. 	};
    448. 

  448. 

  449. 	int cla, op;
    450. 

  450. 

  451. 	cla = 0;
    452. 

  452. 

  453. 	for (op = 0; op_class[op].op_class; op++) {
    454. 

  454. 		u8 ch;
    455. 

  455. 		struct p2p_oper_class_map *o = &op_class[op];
    456. 

  456. 		struct p2p_reg_class *reg = NULL;
    457. 

  457. 

  458. 		for (ch = o->min_chan; ch <= o->max_chan; ch += o->inc) {
    459. 

  459. 			if (!has_channel(channel_set, chanset_size, ch))
    460. 

  460. 				continue;
    461. 

  461. 

  462. 			if ((0 == padapter->registrypriv.ht_enable) &&
    463. 

  463. 			    (o->inc == 8))
    464. 

  464. 				continue;
    465. 

  465. 

  466. 			if ((0 == (padapter->registrypriv.cbw40_enable & BIT(1))) &&
    467. 

  467. 				((BW40MINUS == o->bw) || (BW40PLUS == o->bw)))
    468. 

  468. 				continue;
    469. 

  469. 

  470. 			if (reg == NULL) {
    471. 

  471. 				reg = &channel_list->reg_class[cla];
    472. 

  472. 				cla++;
    473. 

  473. 				reg->reg_class = o->op_class;
    474. 

  474. 				reg->channels = 0;
    475. 

  475. 			}
    476. 

  476. 			reg->channel[reg->channels] = ch;
    477. 

  477. 			reg->channels++;
    478. 

  478. 		}
    479. 

  479. 	}
    480. 

  480. 	channel_list->reg_classes = cla;
    481. 

  481. }
    482. 

  482. 

  483. static u8 init_channel_set(struct rtw_adapter *padapter, u8 cplan,
    484. 

  484. 			   struct rt_channel_info *c_set)
    485. 

  485. {
    486. 

  486. 	u8 i, ch_size = 0;
    487. 

  487. 	u8 b5GBand = false, b2_4GBand = false;
    488. 

  488. 	u8 Index2G = 0, Index5G = 0;
    489. 

  489. 

  490. 	memset(c_set, 0, sizeof(struct rt_channel_info) * MAX_CHANNEL_NUM);
    491. 

  491. 

  492. 	if (cplan >= RT_CHANNEL_DOMAIN_MAX &&
    493. 

  493. 	    cplan != RT_CHANNEL_DOMAIN_REALTEK_DEFINE) {
    494. 

  494. 		DBG_8723A("ChannelPlan ID %x error !!!!!\n", cplan);
    495. 

  495. 		return ch_size;
    496. 

  496. 	}
    497. 

  497. 

  498. 	if (padapter->registrypriv.wireless_mode & WIRELESS_11G) {
    499. 

  499. 		b2_4GBand = true;
    500. 

  500. 		if (RT_CHANNEL_DOMAIN_REALTEK_DEFINE == cplan)
    501. 

  501. 			Index2G = RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE.Index2G;
    502. 

  502. 		else
    503. 

  503. 			Index2G = RTW_ChannelPlanMap[cplan].Index2G;
    504. 

  504. 	}
    505. 

  505. 

  506. 	if (padapter->registrypriv.wireless_mode & WIRELESS_11A) {
    507. 

  507. 		b5GBand = true;
    508. 

  508. 		if (RT_CHANNEL_DOMAIN_REALTEK_DEFINE == cplan)
    509. 

  509. 			Index5G = RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE.Index5G;
    510. 

  510. 		else
    511. 

  511. 			Index5G = RTW_ChannelPlanMap[cplan].Index5G;
    512. 

  512. 	}
    513. 

  513. 

  514. 	if (b2_4GBand) {
    515. 

  515. 		for (i = 0; i < RTW_ChannelPlan2G[Index2G].Len; i++) {
    516. 

  516. 			c_set[ch_size].ChannelNum =
    517. 

  517. 				RTW_ChannelPlan2G[Index2G].Channel[i];
    518. 

  518. 

  519. 			if ((RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN == cplan) ||
    520. 

  520. 			    /* Channel 1~11 is active, and 12~14 is passive */
    521. 

  521. 			    RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN_2G == cplan) {
    522. 

  522. 				if (c_set[ch_size].ChannelNum >= 1 &&
    523. 

  523. 				    c_set[ch_size].ChannelNum <= 11)
    524. 

  524. 					c_set[ch_size].ScanType = SCAN_ACTIVE;
    525. 

  525. 				else if (c_set[ch_size].ChannelNum >= 12 &&
    526. 

  526. 					 c_set[ch_size].ChannelNum  <= 14)
    527. 

  527. 					c_set[ch_size].ScanType = SCAN_PASSIVE;
    528. 

  528. 			} else if (RT_CHANNEL_DOMAIN_WORLD_WIDE_13 == cplan ||
    529. 

  529. 				   RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == cplan ||
    530. 

  530. 				   RT_CHANNEL_DOMAIN_2G_WORLD == Index2G) {
    531. 

  531. 				/*  channel 12~13, passive scan */
    532. 

  532. 				if (c_set[ch_size].ChannelNum <= 11)
    533. 

  533. 					c_set[ch_size].ScanType = SCAN_ACTIVE;
    534. 

  534. 				else
    535. 

  535. 					c_set[ch_size].ScanType = SCAN_PASSIVE;
    536. 

  536. 			} else
    537. 

  537. 				c_set[ch_size].ScanType = SCAN_ACTIVE;
    538. 

  538. 

  539. 			ch_size++;
    540. 

  540. 		}
    541. 

  541. 	}
    542. 

  542. 

  543. 	if (b5GBand) {
    544. 

  544. 		for (i = 0; i < RTW_ChannelPlan5G[Index5G].Len; i++) {
    545. 

  545. 			if (RTW_ChannelPlan5G[Index5G].Channel[i] <= 48 ||
    546. 

  546. 			    RTW_ChannelPlan5G[Index5G].Channel[i] >= 149) {
    547. 

  547. 				c_set[ch_size].ChannelNum =
    548. 

  548. 					RTW_ChannelPlan5G[Index5G].Channel[i];
    549. 

  549. 				if (RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == cplan) {
    550. 

  550. 					/* passive scan for all 5G channels */
    551. 

  551. 					c_set[ch_size].ScanType =
    552. 

  552. 						SCAN_PASSIVE;
    553. 

  553. 				} else
    554. 

  554. 					c_set[ch_size].ScanType =
    555. 

  555. 						SCAN_ACTIVE;
    556. 

  556. 				DBG_8723A("%s(): channel_set[%d].ChannelNum = "
    557. 

  557. 					  "%d\n", __func__, ch_size,
    558. 

  558. 					  c_set[ch_size].ChannelNum);
    559. 

  559. 				ch_size++;
    560. 

  560. 			}
    561. 

  561. 		}
    562. 

  562. 	}
    563. 

  563. 

  564. 	return ch_size;
    565. 

  565. }
    566. 

  566. 

  567. int init_mlme_ext_priv23a(struct rtw_adapter *padapter)
    568. 

  568. {
    569. 

  569. 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
    570. 

  570. 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
    571. 

  571. 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
    572. 

  572. 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
    573. 

  573. 

  574. 	pmlmeext->padapter = padapter;
    575. 

  575. 

  576. 	init_mlme_ext_priv23a_value(padapter);
    577. 

  577. 	pmlmeinfo->bAcceptAddbaReq = pregistrypriv->bAcceptAddbaReq;
    578. 

  578. 

  579. 	init_mlme_ext_timer23a(padapter);
    580. 

  580. 

  581. #ifdef CONFIG_8723AU_AP_MODE
    582. 

  582. 	init_mlme_ap_info23a(padapter);
    583. 

  583. #endif
    584. 

  584. 

  585. 	pmlmeext->max_chan_nums = init_channel_set(padapter,
    586. 

  586. 						   pmlmepriv->ChannelPlan,
    587. 

  587. 						   pmlmeext->channel_set);
    588. 

  588. 	init_channel_list(padapter, pmlmeext->channel_set,
    589. 

  589. 			  pmlmeext->max_chan_nums, &pmlmeext->channel_list);
    590. 

  590. 

  591. 	pmlmeext->chan_scan_time = SURVEY_TO;
    592. 

  592. 	pmlmeext->mlmeext_init = true;
    593. 

  593. 

  594. 	pmlmeext->active_keep_alive_check = true;
    595. 

  595. 	return _SUCCESS;
    596. 

  596. }
    597. 

  597. 

  598. void free_mlme_ext_priv23a (struct mlme_ext_priv *pmlmeext)
    599. 

  599. {
    600. 

  600. 	struct rtw_adapter *padapter = pmlmeext->padapter;
    601. 

  601. 

  602. 	if (!padapter)
    603. 

  603. 		return;
    604. 

  604. 

  605. 	if (padapter->bDriverStopped == true) {
    606. 

  606. 		del_timer_sync(&pmlmeext->survey_timer);
    607. 

  607. 		del_timer_sync(&pmlmeext->link_timer);
    608. 

  608. 		/* del_timer_sync(&pmlmeext->ADDBA_timer); */
    609. 

  609. 	}
    610. 

  610. }
    611. 

  611. 

  612. static void
    613. 

  613. _mgt_dispatcher23a(struct rtw_adapter *padapter, struct mlme_handler *ptable,
    614. 

  614. 		   struct recv_frame *precv_frame)
    615. 

  615. {
    616. 

  616. 	struct sk_buff *skb = precv_frame->pkt;
    617. 

  617. 	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
    618. 

  618. 

  619. 	if (ptable->func) {
    620. 

  620. 		/* receive the frames that ra(a1) is my address
    621. 

  621. 		   or ra(a1) is bc address. */
    622. 

  622. 		if (!ether_addr_equal(hdr->addr1, myid(&padapter->eeprompriv))&&
    623. 

  623. 		    !is_broadcast_ether_addr(hdr->addr1))
    624. 

  624. 			return;
    625. 

  625. 

  626. 		ptable->func(padapter, precv_frame);
    627. 

  627. 	}
    628. 

  628. }
    629. 

  629. 

  630. void mgt_dispatcher23a(struct rtw_adapter *padapter,
    631. 

  631. 		    struct recv_frame *precv_frame)
    632. 

  632. {
    633. 

  633. 	struct mlme_handler *ptable;
    634. 

  634. #ifdef CONFIG_8723AU_AP_MODE
    635. 

  635. 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
    636. 

  636. #endif /* CONFIG_8723AU_AP_MODE */
    637. 

  637. 	struct sk_buff *skb = precv_frame->pkt;
    638. 

  638. 	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
    639. 

  639. 	struct sta_info *psta;
    640. 

  640. 	u16 stype;
    641. 

  641. 	int index;
    642. 

  642. 

  643. 	if (!ieee80211_is_mgmt(mgmt->frame_control))
    644. 

  644. 		return;
    645. 

  645. 

  646. 	/* receive the frames that ra(a1) is my address or ra(a1) is
    647. 

  647. 	   bc address. */
    648. 

  648. 	if (!ether_addr_equal(mgmt->da, myid(&padapter->eeprompriv)) &&
    649. 

  649. 	    !is_broadcast_ether_addr(mgmt->da))
    650. 

  650. 		return;
    651. 

  651. 

  652. 	ptable = mlme_sta_tbl;
    653. 

  653. 

  654. 	stype = le16_to_cpu(mgmt->frame_control) & IEEE80211_FCTL_STYPE;
    655. 

  655. 	index = stype >> 4;
    656. 

  656. 

  657. 	if (index > 13) {
    658. 

  658. 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
    659. 

  659. 			 "Currently we do not support reserved sub-fr-type =%d\n",
    660. 

  660. 			 index);
    661. 

  661. 		return;
    662. 

  662. 	}
    663. 

  663. 	ptable += index;
    664. 

  664. 

  665. 	psta = rtw_get_stainfo23a(&padapter->stapriv, mgmt->sa);
    666. 

  666. 

  667. 	if (psta) {
    668. 

  668. 		if (ieee80211_has_retry(mgmt->frame_control)) {
    669. 

  669. 			if (precv_frame->attrib.seq_num ==
    670. 

  670. 			    psta->RxMgmtFrameSeqNum) {
    671. 

  671. 				/* drop the duplicate management frame */
    672. 

  672. 				DBG_8723A("Drop duplicate management frame "
    673. 

  673. 					  "with seq_num = %d.\n",
    674. 

  674. 					  precv_frame->attrib.seq_num);
    675. 

  675. 				return;
    676. 

  676. 			}
    677. 

  677. 		}
    678. 

  678. 		psta->RxMgmtFrameSeqNum = precv_frame->attrib.seq_num;
    679. 

  679. 	}
    680. 

  680. 

  681. #ifdef CONFIG_8723AU_AP_MODE
    682. 

  682. 	switch (stype) {
    683. 

  683. 	case IEEE80211_STYPE_AUTH:
    684. 

  684. 		if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
    685. 

  685. 			ptable->func = &OnAuth23a;
    686. 

  686. 		else
    687. 

  687. 			ptable->func = &OnAuth23aClient23a;
    688. 

  688. 		/* pass through */
    689. 

  689. 	case IEEE80211_STYPE_ASSOC_REQ:
    690. 

  690. 	case IEEE80211_STYPE_REASSOC_REQ:
    691. 

  691. 		_mgt_dispatcher23a(padapter, ptable, precv_frame);
    692. 

  692. 		break;
    693. 

  693. 	case IEEE80211_STYPE_PROBE_REQ:
    694. 

  694. 		if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
    695. 

  695. 			_mgt_dispatcher23a(padapter, ptable, precv_frame);
    696. 

  696. 		else
    697. 

  697. 			_mgt_dispatcher23a(padapter, ptable, precv_frame);
    698. 

  698. 		break;
    699. 

  699. 	case IEEE80211_STYPE_BEACON:
    700. 

  700. 		_mgt_dispatcher23a(padapter, ptable, precv_frame);
    701. 

  701. 		break;
    702. 

  702. 	case IEEE80211_STYPE_ACTION:
    703. 

  703. 		/* if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) */
    704. 

  704. 		_mgt_dispatcher23a(padapter, ptable, precv_frame);
    705. 

  705. 		break;
    706. 

  706. 	default:
    707. 

  707. 		_mgt_dispatcher23a(padapter, ptable, precv_frame);
    708. 

  708. 		break;
    709. 

  709. 	}
    710. 

  710. #else
    711. 

  711. 	_mgt_dispatcher23a(padapter, ptable, precv_frame);
    712. 

  712. #endif
    713. 

  713. }
    714. 

  714. 

  715. /****************************************************************************
    716. 

    717. 

  717. Following are the callback functions for each subtype of the management frames
    718. 

    719. 

  719. *****************************************************************************/
    720. 

  720. 

  721. static int
    722. 

  722. OnProbeReq23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
    723. 

  723. {
    724. 

  724. 	const u8 *ie;
    725. 

  725. 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
    726. 

  726. 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
    727. 

  727. 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
    728. 

  728. 	struct wlan_bssid_ex *cur = &pmlmeinfo->network;
    729. 

  729. 	struct sk_buff *skb = precv_frame->pkt;
    730. 

  730. 	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
    731. 

  731. 	int len = skb->len;
    732. 

  732. 

  733. 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE))
    734. 

  734. 		return _SUCCESS;
    735. 

  735. 

  736. 	if (!check_fwstate(pmlmepriv, _FW_LINKED) &&
    737. 

  737. 	    !check_fwstate(pmlmepriv,
    738. 

  738. 			   WIFI_ADHOC_MASTER_STATE | WIFI_AP_STATE))
    739. 

  739. 		return _SUCCESS;
    740. 

  740. 

  741. 	if (unlikely(!ieee80211_is_probe_req(mgmt->frame_control))) {
    742. 

  742. 		printk(KERN_WARNING "%s: Received non probe request frame\n",
    743. 

  743. 		       __func__);
    744. 

  744. 		return _FAIL;
    745. 

  745. 	}
    746. 

  746. 

  747. 	len -= offsetof(struct ieee80211_mgmt, u.probe_req.variable);
    748. 

  748. 

  749. 	ie = cfg80211_find_ie(WLAN_EID_SSID, mgmt->u.probe_req.variable, len);
    750. 

  750. 

  751. 	/* check (wildcard) SSID */
    752. 

  752. 	if (!ie)
    753. 

  753. 		goto out;
    754. 

  754. 

  755. 	if ((ie[1] && memcmp(ie + 2, cur->Ssid.ssid, cur->Ssid.ssid_len)) ||
    756. 

  756. 	    (ie[1] == 0 && pmlmeinfo->hidden_ssid_mode)) {
    757. 

  757. 		return _SUCCESS;
    758. 

  758. 	}
    759. 

  759. 

  760. 	if (check_fwstate(pmlmepriv, _FW_LINKED) &&
    761. 

  761. 	    pmlmepriv->cur_network.join_res)
    762. 

  762. 		issue_probersp(padapter, mgmt->sa);
    763. 

  763. 

  764. out:
    765. 

  765. 	return _SUCCESS;
    766. 

  766. }
    767. 

  767. 

  768. static int
    769. 

  769. OnProbeRsp23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
    770. 

  770. {
    771. 

  771. 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
    772. 

  772. 

  773. 	if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS) {
    774. 

  774. 		report_survey_event23a(padapter, precv_frame);
    775. 

  775. 		return _SUCCESS;
    776. 

  776. 	}
    777. 

  777. 

  778. 	return _SUCCESS;
    779. 

  779. }
    780. 

  780. 

  781. static int
    782. 

  782. OnBeacon23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
    783. 

  783. {
    784. 

  784. 	int cam_idx;
    785. 

  785. 	struct sta_info	*psta;
    786. 

  786. 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
    787. 

  787. 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
    788. 

  788. 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
    789. 

  789. 	struct sta_priv	*pstapriv = &padapter->stapriv;
    790. 

  790. 	struct sk_buff *skb = precv_frame->pkt;
    791. 

  791. 	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
    792. 

  792. 	int pkt_len = skb->len;
    793. 

  793. 	struct wlan_bssid_ex *pbss;
    794. 

  794. 	int ret = _SUCCESS;
    795. 

  795. 	u8 *p, *pie;
    796. 

  796. 	int pie_len;
    797. 

  797. 	u32 ielen = 0;
    798. 

  798. 

  799. 	pie = mgmt->u.beacon.variable;
    800. 

  800. 	pie_len = pkt_len - offsetof(struct ieee80211_mgmt, u.beacon.variable);
    801. 

  801. 	p = rtw_get_ie23a(pie, WLAN_EID_EXT_SUPP_RATES, &ielen, pie_len);
    802. 

  802. 	if (p && ielen > 0) {
    803. 

  803. 		if (p[1 + ielen] == 0x2D && p[2 + ielen] != 0x2D) {
    804. 

  804. 			/* Invalid value 0x2D is detected in Extended Supported
    805. 

  805. 			 * Rates (ESR) IE. Try to fix the IE length to avoid
    806. 

  806. 			 * failed Beacon parsing.
    807. 

  807. 			 */
    808. 

  808. 			DBG_8723A("[WIFIDBG] Error in ESR IE is detected in "
    809. 

  809. 				  "Beacon of BSSID: %pM. Fix the length of "
    810. 

  810. 				  "ESR IE to avoid failed Beacon parsing.\n",
    811. 

  811. 				  mgmt->bssid);
    812. 

  812. 			p[1] = ielen - 1;
    813. 

  813. 		}
    814. 

  814. 	}
    815. 

  815. 

  816. 	if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS) {
    817. 

  817. 		report_survey_event23a(padapter, precv_frame);
    818. 

  818. 		return _SUCCESS;
    819. 

  819. 	}
    820. 

  820. 

  821. 	if (!ether_addr_equal(mgmt->bssid,
    822. 

  822. 			      get_my_bssid23a(&pmlmeinfo->network)))
    823. 

  823. 		goto out;
    824. 

  824. 

  825. 	if (pmlmeinfo->state & WIFI_FW_AUTH_NULL) {
    826. 

  826. 		/* we should update current network before auth,
    827. 

  827. 		   or some IE is wrong */
    828. 

  828. 		pbss = collect_bss_info(padapter, precv_frame);
    829. 

  829. 		if (pbss) {
    830. 

  830. 			update_network23a(&pmlmepriv->cur_network.network, pbss,
    831. 

  831. 					  padapter, true);
    832. 

  832. 			rtw_get_bcn_info23a(&pmlmepriv->cur_network);
    833. 

  833. 			kfree(pbss);
    834. 

  834. 		}
    835. 

  835. 

  836. 		/* check the vendor of the assoc AP */
    837. 

  837. 		pmlmeinfo->assoc_AP_vendor =
    838. 

  838. 			check_assoc_AP23a((u8 *)&mgmt->u.beacon, pkt_len -
    839. 

  839. 					  offsetof(struct ieee80211_mgmt, u));
    840. 

  840. 

  841. 		/* update TSF Value */
    842. 

  842. 		rtw_update_TSF(pmlmeext, mgmt);
    843. 

  843. 

  844. 		/* start auth */
    845. 

  845. 		start_clnt_auth(padapter);
    846. 

  846. 

  847. 		return _SUCCESS;
    848. 

  848. 	}
    849. 

  849. 

  850. 	if (((pmlmeinfo->state & 0x03) == MSR_AP) &&
    851. 

  851. 	    (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
    852. 

  852. 		psta = rtw_get_stainfo23a(pstapriv, mgmt->sa);
    853. 

  853. 		if (psta) {
    854. 

  854. 			ret = rtw_check_bcn_info23a(padapter, mgmt, pkt_len);
    855. 

  855. 			if (ret != _SUCCESS) {
    856. 

  856. 				DBG_8723A_LEVEL(_drv_always_, "ap has changed, "
    857. 

  857. 						"disconnect now\n");
    858. 

  858. 				receive_disconnect23a(padapter, pmlmeinfo->network.MacAddress, 65535);
    859. 

  859. 				return _SUCCESS;
    860. 

  860. 			}
    861. 

  861. 			/* update WMM, ERP in the beacon */
    862. 

  862. 			/* todo: the timer is used instead of
    863. 

  863. 			   the number of the beacon received */
    864. 

  864. 			if ((sta_rx_pkts(psta) & 0xf) == 0) {
    865. 

  865. 				/* DBG_8723A("update_bcn_info\n"); */
    866. 

  866. 				update_beacon23a_info(padapter, mgmt,
    867. 

  867. 						      pkt_len, psta);
    868. 

  868. 			}
    869. 

  869. 		}
    870. 

  870. 	} else if ((pmlmeinfo->state&0x03) == MSR_ADHOC) {
    871. 

  871. 		psta = rtw_get_stainfo23a(pstapriv, mgmt->sa);
    872. 

  872. 		if (psta) {
    873. 

  873. 			/* update WMM, ERP in the beacon */
    874. 

  874. 			/* todo: the timer is used instead of the
    875. 

  875. 			   number of the beacon received */
    876. 

  876. 			if ((sta_rx_pkts(psta) & 0xf) == 0) {
    877. 

  877. 				/* DBG_8723A("update_bcn_info\n"); */
    878. 

  878. 				update_beacon23a_info(padapter, mgmt,
    879. 

  879. 						      pkt_len, psta);
    880. 

  880. 			}
    881. 

  881. 		} else {
    882. 

  882. 			/* allocate a new CAM entry for IBSS station */
    883. 

  883. 			cam_idx = allocate_fw_sta_entry23a(padapter);
    884. 

  884. 			if (cam_idx == NUM_STA)
    885. 

  885. 				goto out;
    886. 

  886. 

  887. 			/* get supported rate */
    888. 

  888. 			if (update_sta_support_rate23a(padapter, pie, pie_len,
    889. 

  889. 						       cam_idx) == _FAIL) {
    890. 

  890. 				pmlmeinfo->FW_sta_info[cam_idx].status = 0;
    891. 

  891. 				goto out;
    892. 

  892. 			}
    893. 

  893. 

  894. 			/* update TSF Value */
    895. 

  895. 			rtw_update_TSF(pmlmeext, mgmt);
    896. 

  896. 

  897. 			/* report sta add event */
    898. 

  898. 			report_add_sta_event23a(padapter, mgmt->sa,
    899. 

  899. 						cam_idx);
    900. 

  900. 		}
    901. 

  901. 	}
    902. 

  902. 

  903. out:
    904. 

  904. 

  905. 	return _SUCCESS;
    906. 

  906. }
    907. 

  907. 

  908. #ifdef CONFIG_8723AU_AP_MODE
    909. 

  909. static int
    910. 

  910. OnAuth23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
    911. 

  911. {
    912. 

  912. 	static struct sta_info stat;
    913. 

  913. 	struct sta_info *pstat = NULL;
    914. 

  914. 	struct sta_priv *pstapriv = &padapter->stapriv;
    915. 

  915. 	struct security_priv *psecuritypriv = &padapter->securitypriv;
    916. 

  916. 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
    917. 

  917. 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
    918. 

  918. 	struct sk_buff *skb = precv_frame->pkt;
    919. 

  919. 	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
    920. 

  920. 	u8 *pframe;
    921. 

  921. 	const u8 *p;
    922. 

  922. 	unsigned char *sa;
    923. 

  923. 	u16 auth_mode, seq, algorithm;
    924. 

  924. 	int status, len = skb->len;
    925. 

  925. 

  926. 	if ((pmlmeinfo->state & 0x03) != MSR_AP)
    927. 

  927. 		return _FAIL;
    928. 

  928. 

  929. 	DBG_8723A("+OnAuth23a\n");
    930. 

  930. 

  931. 	sa = mgmt->sa;
    932. 

  932. 

  933. 	auth_mode = psecuritypriv->dot11AuthAlgrthm;
    934. 

  934. 

  935. 	pframe = mgmt->u.auth.variable;
    936. 

  936. 	len = skb->len - offsetof(struct ieee80211_mgmt, u.auth.variable);
    937. 

  937. 

  938. 	seq = le16_to_cpu(mgmt->u.auth.auth_transaction);
    939. 

  939. 	algorithm = le16_to_cpu(mgmt->u.auth.auth_alg);
    940. 

  940. 

  941. 	DBG_8723A("auth alg =%x, seq =%X\n", algorithm, seq);
    942. 

  942. 

  943. 	if (auth_mode == 2 &&
    944. 

  944. 	    psecuritypriv->dot11PrivacyAlgrthm != WLAN_CIPHER_SUITE_WEP40 &&
    945. 

  945. 	    psecuritypriv->dot11PrivacyAlgrthm != WLAN_CIPHER_SUITE_WEP104)
    946. 

  946. 		auth_mode = 0;
    947. 

  947. 

  948. 	/*  rx a shared-key auth but shared not enabled, or */
    949. 

  949. 	/*  rx a open-system auth but shared-key is enabled */
    950. 

  950. 	if ((algorithm != WLAN_AUTH_OPEN && auth_mode == 0) ||
    951. 

  951. 	    (algorithm == WLAN_AUTH_OPEN && auth_mode == 1)) {
    952. 

  952. 		DBG_8723A("auth rejected due to bad alg [alg =%d, auth_mib "
    953. 

  953. 			  "=%d] %02X%02X%02X%02X%02X%02X\n",
    954. 

  954. 			  algorithm, auth_mode,
    955. 

  955. 			  sa[0], sa[1], sa[2], sa[3], sa[4], sa[5]);
    956. 

  956. 

  957. 		status = WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG;
    958. 

  958. 

  959. 		goto auth_fail;
    960. 

  960. 	}
    961. 

  961. 

  962. 	if (rtw_access_ctrl23a(padapter, sa) == false) {
    963. 

  963. 		status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
    964. 

  964. 		goto auth_fail;
    965. 

  965. 	}
    966. 

  966. 

  967. 	pstat = rtw_get_stainfo23a(pstapriv, sa);
    968. 

  968. 	if (!pstat) {
    969. 

  969. 		/*  allocate a new one */
    970. 

  970. 		DBG_8723A("going to alloc stainfo for sa =%pM\n", sa);
    971. 

  971. 		pstat = rtw_alloc_stainfo23a(pstapriv, sa, GFP_ATOMIC);
    972. 

  972. 		if (!pstat) {
    973. 

  973. 			DBG_8723A(" Exceed the upper limit of supported "
    974. 

  974. 				  "clients...\n");
    975. 

  975. 			status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
    976. 

  976. 			goto auth_fail;
    977. 

  977. 		}
    978. 

  978. 

  979. 		pstat->state = WIFI_FW_AUTH_NULL;
    980. 

  980. 		pstat->auth_seq = 0;
    981. 

  981. 

  982. 		/* pstat->flags = 0; */
    983. 

  983. 		/* pstat->capability = 0; */
    984. 

  984. 	} else {
    985. 

  985. 		spin_lock_bh(&pstapriv->asoc_list_lock);
    986. 

  986. 		if (!list_empty(&pstat->asoc_list)) {
    987. 

  987. 			list_del_init(&pstat->asoc_list);
    988. 

  988. 			pstapriv->asoc_list_cnt--;
    989. 

  989. 			if (pstat->expire_to > 0) {
    990. 

  990. 				/* TODO: STA re_auth within expire_to */
    991. 

  991. 			}
    992. 

  992. 		}
    993. 

  993. 		spin_unlock_bh(&pstapriv->asoc_list_lock);
    994. 

  994. 

  995. 		if (seq == 1) {
    996. 

  996. 			/* TODO: STA re_auth and auth timeout */
    997. 

  997. 		}
    998. 

  998. 	}
    999. 

  999. 

  1000. 	spin_lock_bh(&pstapriv->auth_list_lock);
    1001. 

  1001. 	if (list_empty(&pstat->auth_list)) {
    1002. 

  1002. 		list_add_tail(&pstat->auth_list, &pstapriv->auth_list);
    1003. 

  1003. 		pstapriv->auth_list_cnt++;
    1004. 

  1004. 	}
    1005. 

  1005. 	spin_unlock_bh(&pstapriv->auth_list_lock);
    1006. 

  1006. 

  1007. 	if (pstat->auth_seq == 0)
    1008. 

  1008. 		pstat->expire_to = pstapriv->auth_to;
    1009. 

  1009. 

  1010. 	if ((pstat->auth_seq + 1) != seq) {
    1011. 

  1011. 		DBG_8723A("(1)auth rejected because out of seq [rx_seq =%d, "
    1012. 

  1012. 			  "exp_seq =%d]!\n", seq, pstat->auth_seq+1);
    1013. 

  1013. 		status = WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION;
    1014. 

  1014. 		goto auth_fail;
    1015. 

  1015. 	}
    1016. 

  1016. 

  1017. 	if (algorithm == WLAN_AUTH_OPEN && (auth_mode == 0 || auth_mode == 2)) {
    1018. 

  1018. 		if (seq == 1) {
    1019. 

  1019. 			pstat->state &= ~WIFI_FW_AUTH_NULL;
    1020. 

  1020. 			pstat->state |= WIFI_FW_AUTH_SUCCESS;
    1021. 

  1021. 			pstat->expire_to = pstapriv->assoc_to;
    1022. 

  1022. 			pstat->authalg = algorithm;
    1023. 

  1023. 		} else {
    1024. 

  1024. 			DBG_8723A("(2)auth rejected because out of seq "
    1025. 

  1025. 				  "[rx_seq =%d, exp_seq =%d]!\n",
    1026. 

  1026. 				  seq, pstat->auth_seq+1);
    1027. 

  1027. 			status = WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION;
    1028. 

  1028. 			goto auth_fail;
    1029. 

  1029. 		}
    1030. 

  1030. 	} else { /*  shared system or auto authentication */
    1031. 

  1031. 		if (seq == 1) {
    1032. 

  1032. 			/* prepare for the challenging txt... */
    1033. 

  1033. 			pstat->state &= ~WIFI_FW_AUTH_NULL;
    1034. 

  1034. 			pstat->state |= WIFI_FW_AUTH_STATE;
    1035. 

  1035. 			pstat->authalg = algorithm;
    1036. 

  1036. 			pstat->auth_seq = 2;
    1037. 

  1037. 		} else if (seq == 3) {
    1038. 

  1038. 			/* checking for challenging txt... */
    1039. 

  1039. 			DBG_8723A("checking for challenging txt...\n");
    1040. 

  1040. 

  1041. 			p = cfg80211_find_ie(WLAN_EID_CHALLENGE, pframe, len);
    1042. 

  1042. 			if (!p || p[1] <= 0) {
    1043. 

  1043. 				DBG_8723A("auth rejected because challenge "
    1044. 

  1044. 					  "failure!(1)\n");
    1045. 

  1045. 				status = WLAN_STATUS_CHALLENGE_FAIL;
    1046. 

  1046. 				goto auth_fail;
    1047. 

  1047. 			}
    1048. 

  1048. 

  1049. 			if (!memcmp(p + 2, pstat->chg_txt, 128)) {
    1050. 

  1050. 				pstat->state &= ~WIFI_FW_AUTH_STATE;
    1051. 

  1051. 				pstat->state |= WIFI_FW_AUTH_SUCCESS;
    1052. 

  1052. 				/*  challenging txt is correct... */
    1053. 

  1053. 				pstat->expire_to =  pstapriv->assoc_to;
    1054. 

  1054. 			} else {
    1055. 

  1055. 				DBG_8723A("auth rejected because challenge "
    1056. 

  1056. 					  "failure!\n");
    1057. 

  1057. 				status = WLAN_STATUS_CHALLENGE_FAIL;
    1058. 

  1058. 				goto auth_fail;
    1059. 

  1059. 			}
    1060. 

  1060. 		} else {
    1061. 

  1061. 			DBG_8723A("(3)auth rejected because out of seq "
    1062. 

  1062. 				  "[rx_seq =%d, exp_seq =%d]!\n",
    1063. 

  1063. 				  seq, pstat->auth_seq+1);
    1064. 

  1064. 			status = WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION;
    1065. 

  1065. 			goto auth_fail;
    1066. 

  1066. 		}
    1067. 

  1067. 	}
    1068. 

  1068. 

  1069. 	/*  Now, we are going to issue_auth... */
    1070. 

  1070. 	pstat->auth_seq = seq + 1;
    1071. 

  1071. 

  1072. 	issue_auth(padapter, pstat, WLAN_STATUS_SUCCESS);
    1073. 

  1073. 

  1074. 	if (pstat->state & WIFI_FW_AUTH_SUCCESS)
    1075. 

  1075. 		pstat->auth_seq = 0;
    1076. 

  1076. 

  1077. 	return _SUCCESS;
    1078. 

  1078. 

  1079. auth_fail:
    1080. 

  1080. 

  1081. 	if (pstat)
    1082. 

  1082. 		rtw_free_stainfo23a(padapter, pstat);
    1083. 

  1083. 

  1084. 	pstat = &stat;
    1085. 

  1085. 	memset((char *)pstat, '\0', sizeof(stat));
    1086. 

  1086. 	pstat->auth_seq = 2;
    1087. 

  1087. 	ether_addr_copy(pstat->hwaddr, sa);
    1088. 

  1088. 

  1089. 	issue_auth(padapter, pstat, (unsigned short)status);
    1090. 

  1090. 

  1091. 	return _FAIL;
    1092. 

  1092. }
    1093. 

  1093. #endif
    1094. 

  1094. 

  1095. static int
    1096. 

  1096. OnAuth23aClient23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
    1097. 

  1097. {
    1098. 

  1098. 	unsigned int seq, status, algthm;
    1099. 

  1099. 	unsigned int go2asoc = 0;
    1100. 

  1100. 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
    1101. 

  1101. 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
    1102. 

  1102. 	struct sk_buff *skb = precv_frame->pkt;
    1103. 

  1103. 	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
    1104. 

  1104. 	const u8 *p;
    1105. 

  1105. 	u8 *pie;
    1106. 

  1106. 	int plen = skb->len;
    1107. 

  1107. 

  1108. 	DBG_8723A("%s\n", __func__);
    1109. 

  1109. 

  1110. 	/* check A1 matches or not */
    1111. 

  1111. 	if (!ether_addr_equal(myid(&padapter->eeprompriv), mgmt->da))
    1112. 

  1112. 		return _SUCCESS;
    1113. 

  1113. 

  1114. 	if (!(pmlmeinfo->state & WIFI_FW_AUTH_STATE))
    1115. 

  1115. 		return _SUCCESS;
    1116. 

  1116. 

  1117. 	pie = mgmt->u.auth.variable;
    1118. 

  1118. 	plen -= offsetof(struct ieee80211_mgmt, u.auth.variable);
    1119. 

  1119. 

  1120. 	algthm = le16_to_cpu(mgmt->u.auth.auth_alg);
    1121. 

  1121. 	seq = le16_to_cpu(mgmt->u.auth.auth_transaction);
    1122. 

  1122. 	status = le16_to_cpu(mgmt->u.auth.status_code);
    1123. 

  1123. 

  1124. 	if (status) {
    1125. 

  1125. 		DBG_8723A("clnt auth fail, status: %d\n", status);
    1126. 

  1126. 		/*  pmlmeinfo->auth_algo == dot11AuthAlgrthm_Auto) */
    1127. 

  1127. 		if (status == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) {
    1128. 

  1128. 			if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
    1129. 

  1129. 				pmlmeinfo->auth_algo = dot11AuthAlgrthm_Open;
    1130. 

  1130. 			else
    1131. 

  1131. 				pmlmeinfo->auth_algo = dot11AuthAlgrthm_Shared;
    1132. 

  1132. 			/* pmlmeinfo->reauth_count = 0; */
    1133. 

  1133. 		}
    1134. 

  1134. 

  1135. 		set_link_timer(pmlmeext, 1);
    1136. 

  1136. 		goto authclnt_fail;
    1137. 

  1137. 	}
    1138. 

  1138. 

  1139. 	if (seq == 2) {
    1140. 

  1140. 		if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared) {
    1141. 

  1141. 			/*  legendary shared system */
    1142. 

  1142. 			p = cfg80211_find_ie(WLAN_EID_CHALLENGE, pie, plen);
    1143. 

  1143. 

  1144. 			if (!p) {
    1145. 

  1145. 				/* DBG_8723A("marc: no challenge text?\n"); */
    1146. 

  1146. 				goto authclnt_fail;
    1147. 

  1147. 			}
    1148. 

  1148. 

  1149. 			memcpy((void *)(pmlmeinfo->chg_txt), p + 2, p[1]);
    1150. 

  1150. 			pmlmeinfo->auth_seq = 3;
    1151. 

  1151. 			issue_auth(padapter, NULL, 0);
    1152. 

  1152. 			set_link_timer(pmlmeext, REAUTH_TO);
    1153. 

  1153. 

  1154. 			return _SUCCESS;
    1155. 

  1155. 		} else {
    1156. 

  1156. 			/*  open system */
    1157. 

  1157. 			go2asoc = 1;
    1158. 

  1158. 		}
    1159. 

  1159. 	} else if (seq == 4) {
    1160. 

  1160. 		if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
    1161. 

  1161. 			go2asoc = 1;
    1162. 

  1162. 		else
    1163. 

  1163. 			goto authclnt_fail;
    1164. 

  1164. 	} else {
    1165. 

  1165. 		/*  this is also illegal */
    1166. 

  1166. 		/* DBG_8723A("marc: clnt auth failed due to illegal seq =%x\n",
    1167. 

  1167. 		   seq); */
    1168. 

  1168. 		goto authclnt_fail;
    1169. 

  1169. 	}
    1170. 

  1170. 

  1171. 	if (go2asoc) {
    1172. 

  1172. 		DBG_8723A_LEVEL(_drv_always_, "auth success, start assoc\n");
    1173. 

  1173. 		start_clnt_assoc(padapter);
    1174. 

  1174. 		return _SUCCESS;
    1175. 

  1175. 	}
    1176. 

  1176. 

  1177. authclnt_fail:
    1178. 

  1178. 

  1179. 	/* pmlmeinfo->state &= ~(WIFI_FW_AUTH_STATE); */
    1180. 

  1180. 

  1181. 	return _FAIL;
    1182. 

  1182. }
    1183. 

  1183. 

  1184. #ifdef CONFIG_8723AU_AP_MODE
    1185. 

  1185. static int rtw_validate_vendor_specific_ies(const u8 *pos, int elen)
    1186. 

  1186. {
    1187. 

  1187. 	unsigned int oui;
    1188. 

  1188. 

  1189. 	/* first 3 bytes in vendor specific information element are the IEEE
    1190. 

  1190. 	 * OUI of the vendor. The following byte is used a vendor specific
    1191. 

  1191. 	 * sub-type. */
    1192. 

  1192. 	if (elen < 4) {
    1193. 

  1193. 		DBG_8723A("short vendor specific information element "
    1194. 

  1194. 			  "ignored (len =%i)\n", elen);
    1195. 

  1195. 		return -EINVAL;
    1196. 

  1196. 	}
    1197. 

  1197. 

  1198. 	oui = RTW_GET_BE24(pos);
    1199. 

  1199. 	switch (oui) {
    1200. 

  1200. 	case WLAN_OUI_MICROSOFT:
    1201. 

  1201. 		/* Microsoft/Wi-Fi information elements are further typed and
    1202. 

  1202. 		 * subtyped */
    1203. 

  1203. 		switch (pos[3]) {
    1204. 

  1204. 		case WLAN_OUI_TYPE_MICROSOFT_WPA:
    1205. 

  1205. 			/* Microsoft OUI (00:50:F2) with OUI Type 1:
    1206. 

  1206. 			 * real WPA information element */
    1207. 

  1207. 			break;
    1208. 

  1208. 		case WLAN_OUI_TYPE_MICROSOFT_WMM:
    1209. 

  1209. 			if (elen < 5) {
    1210. 

  1210. 				DBG_8723A("short WME information element "
    1211. 

  1211. 					  "ignored (len =%i)\n", elen);
    1212. 

  1212. 				return -EINVAL;
    1213. 

  1213. 			}
    1214. 

  1214. 			switch (pos[4]) {
    1215. 

  1215. 			case WME_OUI_SUBTYPE_INFORMATION_ELEMENT:
    1216. 

  1216. 			case WME_OUI_SUBTYPE_PARAMETER_ELEMENT:
    1217. 

  1217. 				break;
    1218. 

  1218. 			case WME_OUI_SUBTYPE_TSPEC_ELEMENT:
    1219. 

  1219. 				break;
    1220. 

  1220. 			default:
    1221. 

  1221. 				DBG_8723A("unknown WME information element "
    1222. 

  1222. 					  "ignored (subtype =%d len =%i)\n",
    1223. 

  1223. 					   pos[4], elen);
    1224. 

  1224. 				return -EINVAL;
    1225. 

  1225. 			}
    1226. 

  1226. 			break;
    1227. 

  1227. 		case WLAN_OUI_TYPE_MICROSOFT_WPS:
    1228. 

  1228. 			/* Wi-Fi Protected Setup (WPS) IE */
    1229. 

  1229. 			break;
    1230. 

  1230. 		default:
    1231. 

  1231. 			DBG_8723A("Unknown Microsoft information element "
    1232. 

  1232. 				  "ignored (type =%d len =%i)\n",
    1233. 

  1233. 				  pos[3], elen);
    1234. 

  1234. 			return -EINVAL;
    1235. 

  1235. 		}
    1236. 

  1236. 		break;
    1237. 

  1237. 

  1238. 	case OUI_BROADCOM:
    1239. 

  1239. 		switch (pos[3]) {
    1240. 

  1240. 		case VENDOR_HT_CAPAB_OUI_TYPE:
    1241. 

  1241. 			break;
    1242. 

  1242. 		default:
    1243. 

  1243. 			DBG_8723A("Unknown Broadcom information element "
    1244. 

  1244. 				  "ignored (type =%d len =%i)\n", pos[3], elen);
    1245. 

  1245. 			return -EINVAL;
    1246. 

  1246. 		}
    1247. 

  1247. 		break;
    1248. 

  1248. 

  1249. 	default:
    1250. 

  1250. 		DBG_8723A("unknown vendor specific information element "
    1251. 

  1251. 			  "ignored (vendor OUI %02x:%02x:%02x len =%i)\n",
    1252. 

  1252. 			   pos[0], pos[1], pos[2], elen);
    1253. 

  1253. 		return -EINVAL;
    1254. 

  1254. 	}
    1255. 

  1255. 

  1256. 	return 0;
    1257. 

  1257. }
    1258. 

  1258. 

  1259. static int rtw_validate_frame_ies(const u8 *start, uint len)
    1260. 

  1260. {
    1261. 

  1261. 	const u8 *pos = start;
    1262. 

  1262. 	int left = len;
    1263. 

  1263. 	int unknown = 0;
    1264. 

  1264. 

  1265. 	while (left >= 2) {
    1266. 

  1266. 		u8 id, elen;
    1267. 

  1267. 

  1268. 		id = *pos++;
    1269. 

  1269. 		elen = *pos++;
    1270. 

  1270. 		left -= 2;
    1271. 

  1271. 

  1272. 		if (elen > left) {
    1273. 

  1273. 			DBG_8723A("%s: IEEE 802.11 failed (id =%d elen =%d "
    1274. 

  1274. 				  "left =%i)\n", __func__, id, elen, left);
    1275. 

  1275. 			return -EINVAL;
    1276. 

  1276. 		}
    1277. 

  1277. 

  1278. 		switch (id) {
    1279. 

  1279. 		case WLAN_EID_SSID:
    1280. 

  1280. 		case WLAN_EID_SUPP_RATES:
    1281. 

  1281. 		case WLAN_EID_FH_PARAMS:
    1282. 

  1282. 		case WLAN_EID_DS_PARAMS:
    1283. 

  1283. 		case WLAN_EID_CF_PARAMS:
    1284. 

  1284. 		case WLAN_EID_TIM:
    1285. 

  1285. 		case WLAN_EID_IBSS_PARAMS:
    1286. 

  1286. 		case WLAN_EID_CHALLENGE:
    1287. 

  1287. 		case WLAN_EID_ERP_INFO:
    1288. 

  1288. 		case WLAN_EID_EXT_SUPP_RATES:
    1289. 

  1289. 			break;
    1290. 

  1290. 		case WLAN_EID_VENDOR_SPECIFIC:
    1291. 

  1291. 			if (rtw_validate_vendor_specific_ies(pos, elen))
    1292. 

  1292. 				unknown++;
    1293. 

  1293. 			break;
    1294. 

  1294. 		case WLAN_EID_RSN:
    1295. 

  1295. 		case WLAN_EID_PWR_CAPABILITY:
    1296. 

  1296. 		case WLAN_EID_SUPPORTED_CHANNELS:
    1297. 

  1297. 		case WLAN_EID_MOBILITY_DOMAIN:
    1298. 

  1298. 		case WLAN_EID_FAST_BSS_TRANSITION:
    1299. 

  1299. 		case WLAN_EID_TIMEOUT_INTERVAL:
    1300. 

  1300. 		case WLAN_EID_HT_CAPABILITY:
    1301. 

  1301. 		case WLAN_EID_HT_OPERATION:
    1302. 

  1302. 		default:
    1303. 

  1303. 			unknown++;
    1304. 

  1304. 			DBG_8723A("%s IEEE 802.11 ignored unknown element "
    1305. 

  1305. 				  "(id =%d elen =%d)\n", __func__, id, elen);
    1306. 

  1306. 			break;
    1307. 

  1307. 		}
    1308. 

  1308. 

  1309. 		left -= elen;
    1310. 

  1310. 		pos += elen;
    1311. 

  1311. 	}
    1312. 

  1312. 

  1313. 	if (left)
    1314. 

  1314. 		return -EINVAL;
    1315. 

  1315. 

  1316. 	return 0;
    1317. 

  1317. }
    1318. 

  1318. #endif
    1319. 

  1319. 

  1320. static int
    1321. 

  1321. OnAssocReq23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
    1322. 

  1322. {
    1323. 

  1323. #ifdef CONFIG_8723AU_AP_MODE
    1324. 

  1324. 	u16 capab_info, listen_interval;
    1325. 

  1325. 	struct sta_info	*pstat;
    1326. 

  1326. 	unsigned char reassoc;
    1327. 

  1327. 	int i, wpa_ie_len, left;
    1328. 

  1328. 	unsigned char supportRate[16];
    1329. 

  1329. 	int supportRateNum;
    1330. 

  1330. 	unsigned short status = WLAN_STATUS_SUCCESS;
    1331. 

  1331. 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
    1332. 

  1332. 	struct security_priv *psecuritypriv = &padapter->securitypriv;
    1333. 

  1333. 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
    1334. 

  1334. 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
    1335. 

  1335. 	struct wlan_bssid_ex *cur = &pmlmeinfo->network;
    1336. 

  1336. 	struct sta_priv *pstapriv = &padapter->stapriv;
    1337. 

  1337. 	struct sk_buff *skb = precv_frame->pkt;
    1338. 

  1338. 	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
    1339. 

  1339. 	const u8 *pos, *p, *wpa_ie, *wps_ie;
    1340. 

  1340. 	u8 *pframe = skb->data;
    1341. 

  1341. 	uint pkt_len = skb->len;
    1342. 

  1342. 	int r;
    1343. 

  1343. 

  1344. 	if ((pmlmeinfo->state & 0x03) != MSR_AP)
    1345. 

  1345. 		return _FAIL;
    1346. 

  1346. 

  1347. 	left = pkt_len - sizeof(struct ieee80211_hdr_3addr);
    1348. 

  1348. 	if (ieee80211_is_assoc_req(mgmt->frame_control)) {
    1349. 

  1349. 		reassoc = 0;
    1350. 

  1350. 		pos = mgmt->u.assoc_req.variable;
    1351. 

  1351. 		left -= offsetof(struct ieee80211_mgmt, u.assoc_req.variable);
    1352. 

  1352. 	} else { /*  WIFI_REASSOCREQ */
    1353. 

  1353. 		reassoc = 1;
    1354. 

  1354. 		pos = mgmt->u.reassoc_req.variable;
    1355. 

  1355. 		left -= offsetof(struct ieee80211_mgmt, u.reassoc_req.variable);
    1356. 

  1356. 	}
    1357. 

  1357. 

  1358. 	if (left < 0) {
    1359. 

  1359. 		DBG_8723A("handle_assoc(reassoc =%d) - too short payload "
    1360. 

  1360. 			  "(len =%lu)\n", reassoc, (unsigned long)pkt_len);
    1361. 

  1361. 		return _FAIL;
    1362. 

  1362. 	}
    1363. 

  1363. 

  1364. 	pstat = rtw_get_stainfo23a(pstapriv, mgmt->sa);
    1365. 

  1365. 	if (!pstat) {
    1366. 

  1366. 		status = WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA;
    1367. 

  1367. 		goto asoc_class2_error;
    1368. 

  1368. 	}
    1369. 

  1369. 

  1370. 	/* These two are located at the same offsets whether it's an
    1371. 

  1371. 	 * assoc_req or a reassoc_req */
    1372. 

  1372. 	capab_info = get_unaligned_le16(&mgmt->u.assoc_req.capab_info);
    1373. 

  1373. 	listen_interval =
    1374. 

  1374. 		get_unaligned_le16(&mgmt->u.assoc_req.listen_interval);
    1375. 

  1375. 

  1376. 	DBG_8723A("%s\n", __func__);
    1377. 

  1377. 

  1378. 	/*  check if this stat has been successfully authenticated/assocated */
    1379. 

  1379. 	if (!(pstat->state & WIFI_FW_AUTH_SUCCESS)) {
    1380. 

  1380. 		if (!(pstat->state & WIFI_FW_ASSOC_SUCCESS)) {
    1381. 

  1381. 			status = WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA;
    1382. 

  1382. 			goto asoc_class2_error;
    1383. 

  1383. 		} else {
    1384. 

  1384. 			pstat->state &= (~WIFI_FW_ASSOC_SUCCESS);
    1385. 

  1385. 			pstat->state |= WIFI_FW_ASSOC_STATE;
    1386. 

  1386. 		}
    1387. 

  1387. 	} else {
    1388. 

  1388. 		pstat->state &= (~WIFI_FW_AUTH_SUCCESS);
    1389. 

  1389. 		pstat->state |= WIFI_FW_ASSOC_STATE;
    1390. 

  1390. 	}
    1391. 

  1391. 

  1392. 	pstat->capability = capab_info;
    1393. 

  1393. 

  1394. 	/* now parse all ieee802_11 ie to point to elems */
    1395. 

  1395. 

  1396. 	if (rtw_validate_frame_ies(pos, left)) {
    1397. 

  1397. 		DBG_8723A("STA %pM sent invalid association request\n",
    1398. 

  1398. 			  pstat->hwaddr);
    1399. 

  1399. 		status = WLAN_STATUS_UNSPECIFIED_FAILURE;
    1400. 

  1400. 		goto OnAssocReq23aFail;
    1401. 

  1401. 	}
    1402. 

  1402. 

  1403. 	/*  now we should check all the fields... */
    1404. 

  1404. 	/*  checking SSID */
    1405. 

  1405. 	p = cfg80211_find_ie(WLAN_EID_SSID, pos, left);
    1406. 

  1406. 	if (!p || p[1] == 0) {
    1407. 

  1407. 		/*  broadcast ssid, however it is not allowed in assocreq */
    1408. 

  1408. 		DBG_8723A("STA %pM sent invalid association request lacking an SSID\n",
    1409. 

  1409. 			  pstat->hwaddr);
    1410. 

  1410. 		status = WLAN_STATUS_UNSPECIFIED_FAILURE;
    1411. 

  1411. 		goto OnAssocReq23aFail;
    1412. 

  1412. 	} else {
    1413. 

  1413. 		/*  check if ssid match */
    1414. 

  1414. 		if (memcmp(p + 2, cur->Ssid.ssid, cur->Ssid.ssid_len))
    1415. 

  1415. 			status = WLAN_STATUS_UNSPECIFIED_FAILURE;
    1416. 

  1416. 

  1417. 		if (p[1] != cur->Ssid.ssid_len)
    1418. 

  1418. 			status = WLAN_STATUS_UNSPECIFIED_FAILURE;
    1419. 

  1419. 	}
    1420. 

  1420. 

  1421. 	if (status != WLAN_STATUS_SUCCESS)
    1422. 

  1422. 		goto OnAssocReq23aFail;
    1423. 

  1423. 

  1424. 	/*  check if the supported rate is ok */
    1425. 

  1425. 	p = cfg80211_find_ie(WLAN_EID_SUPP_RATES, pos, left);
    1426. 

  1426. 	if (!p) {
    1427. 

  1427. 		DBG_8723A("Rx a sta assoc-req which supported rate is "
    1428. 

  1428. 			  "empty!\n");
    1429. 

  1429. 		/*  use our own rate set as statoin used */
    1430. 

  1430. 		/* memcpy(supportRate, AP_BSSRATE, AP_BSSRATE_LEN); */
    1431. 

  1431. 		/* supportRateNum = AP_BSSRATE_LEN; */
    1432. 

  1432. 

  1433. 		status = WLAN_STATUS_UNSPECIFIED_FAILURE;
    1434. 

  1434. 		goto OnAssocReq23aFail;
    1435. 

  1435. 	} else {
    1436. 

  1436. 		memcpy(supportRate, p + 2, p[1]);
    1437. 

  1437. 		supportRateNum = p[1];
    1438. 

  1438. 

  1439. 		p = cfg80211_find_ie(WLAN_EID_EXT_SUPP_RATES, pos, left);
    1440. 

  1440. 		if (p) {
    1441. 

  1441. 			if (supportRateNum <= sizeof(supportRate)) {
    1442. 

  1442. 				memcpy(supportRate+supportRateNum, p + 2, p[1]);
    1443. 

  1443. 				supportRateNum += p[1];
    1444. 

  1444. 			}
    1445. 

  1445. 		}
    1446. 

  1446. 	}
    1447. 

  1447. 

  1448. 	/* todo: mask supportRate between AP & STA -> move to update raid */
    1449. 

  1449. 	/* get_matched_rate(pmlmeext, supportRate, &supportRateNum, 0); */
    1450. 

  1450. 

  1451. 	/* update station supportRate */
    1452. 

  1452. 	pstat->bssratelen = supportRateNum;
    1453. 

  1453. 	memcpy(pstat->bssrateset, supportRate, supportRateNum);
    1454. 

  1454. 	Update23aTblForSoftAP(pstat->bssrateset, pstat->bssratelen);
    1455. 

  1455. 

  1456. 	/* check RSN/WPA/WPS */
    1457. 

  1457. 	pstat->dot8021xalg = 0;
    1458. 

  1458. 	pstat->wpa_psk = 0;
    1459. 

  1459. 	pstat->wpa_group_cipher = 0;
    1460. 

  1460. 	pstat->wpa2_group_cipher = 0;
    1461. 

  1461. 	pstat->wpa_pairwise_cipher = 0;
    1462. 

  1462. 	pstat->wpa2_pairwise_cipher = 0;
    1463. 

  1463. 	memset(pstat->wpa_ie, 0, sizeof(pstat->wpa_ie));
    1464. 

  1464. 

  1465. 	wpa_ie = cfg80211_find_ie(WLAN_EID_RSN, pos, left);
    1466. 

  1466. 	if (!wpa_ie)
    1467. 

  1467. 		wpa_ie = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
    1468. 

  1468. 						 WLAN_OUI_TYPE_MICROSOFT_WPA,
    1469. 

  1469. 						 pos, left);
    1470. 

  1470. 	if (wpa_ie) {
    1471. 

  1471. 		int group_cipher = 0, pairwise_cipher = 0;
    1472. 

  1472. 

  1473. 		wpa_ie_len = wpa_ie[1];
    1474. 

  1474. 		if (psecuritypriv->wpa_psk & BIT(1)) {
    1475. 

  1475. 			r = rtw_parse_wpa2_ie23a(wpa_ie, wpa_ie_len + 2,
    1476. 

  1476. 						 &group_cipher,
    1477. 

  1477. 						 &pairwise_cipher, NULL);
    1478. 

  1478. 			if (r == _SUCCESS) {
    1479. 

  1479. 				pstat->dot8021xalg = 1;/* psk,  todo:802.1x */
    1480. 

  1480. 				pstat->wpa_psk |= BIT(1);
    1481. 

  1481. 

  1482. 				pstat->wpa2_group_cipher = group_cipher &
    1483. 

  1483. 					psecuritypriv->wpa2_group_cipher;
    1484. 

  1484. 				pstat->wpa2_pairwise_cipher = pairwise_cipher &
    1485. 

  1485. 					psecuritypriv->wpa2_pairwise_cipher;
    1486. 

  1486. 			} else
    1487. 

  1487. 				status = WLAN_STATUS_INVALID_IE;
    1488. 

  1488. 		} else if (psecuritypriv->wpa_psk & BIT(0)) {
    1489. 

  1489. 			r = rtw_parse_wpa_ie23a(wpa_ie, wpa_ie_len + 2,
    1490. 

  1490. 						&group_cipher, &pairwise_cipher,
    1491. 

  1491. 						NULL);
    1492. 

  1492. 			if (r == _SUCCESS) {
    1493. 

  1493. 				pstat->dot8021xalg = 1;/* psk,  todo:802.1x */
    1494. 

  1494. 				pstat->wpa_psk |= BIT(0);
    1495. 

  1495. 

  1496. 				pstat->wpa_group_cipher = group_cipher &
    1497. 

  1497. 					psecuritypriv->wpa_group_cipher;
    1498. 

  1498. 				pstat->wpa_pairwise_cipher = pairwise_cipher &
    1499. 

  1499. 					psecuritypriv->wpa_pairwise_cipher;
    1500. 

  1500. 			} else
    1501. 

  1501. 				status = WLAN_STATUS_INVALID_IE;
    1502. 

  1502. 		} else {
    1503. 

  1503. 			wpa_ie = NULL;
    1504. 

  1504. 			wpa_ie_len = 0;
    1505. 

  1505. 		}
    1506. 

  1506. 		if (wpa_ie && status == WLAN_STATUS_SUCCESS) {
    1507. 

  1507. 			if (!pstat->wpa_group_cipher)
    1508. 

  1508. 				status = WLAN_STATUS_INVALID_GROUP_CIPHER;
    1509. 

  1509. 

  1510. 			if (!pstat->wpa_pairwise_cipher)
    1511. 

  1511. 				status = WLAN_STATUS_INVALID_PAIRWISE_CIPHER;
    1512. 

  1512. 		}
    1513. 

  1513. 	}
    1514. 

  1514. 

  1515. 	if (status != WLAN_STATUS_SUCCESS)
    1516. 

  1516. 		goto OnAssocReq23aFail;
    1517. 

  1517. 

  1518. 	pstat->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS);
    1519. 

  1519. 

  1520. 	wps_ie = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
    1521. 

  1521. 					 WLAN_OUI_TYPE_MICROSOFT_WPS,
    1522. 

  1522. 					 pos, left);
    1523. 

  1523. 

  1524. 	if (!wpa_ie) {
    1525. 

  1525. 		if (wps_ie) {
    1526. 

  1526. 			DBG_8723A("STA included WPS IE in (Re)Association "
    1527. 

  1527. 				  "Request - assume WPS is used\n");
    1528. 

  1528. 			pstat->flags |= WLAN_STA_WPS;
    1529. 

  1529. 		} else {
    1530. 

  1530. 			DBG_8723A("STA did not include WPA/RSN IE in (Re)"
    1531. 

  1531. 				   "Association Request - possible WPS use\n");
    1532. 

  1532. 			pstat->flags |= WLAN_STA_MAYBE_WPS;
    1533. 

  1533. 		}
    1534. 

  1534. 	} else {
    1535. 

  1535. 		int copy_len;
    1536. 

  1536. 

  1537. 		if (psecuritypriv->wpa_psk == 0) {
    1538. 

  1538. 			DBG_8723A("STA %pM: WPA/RSN IE in association request, but AP don't support WPA/RSN\n",
    1539. 

  1539. 				  pstat->hwaddr);
    1540. 

  1540. 

  1541. 			status = WLAN_STATUS_INVALID_IE;
    1542. 

  1542. 

  1543. 			goto OnAssocReq23aFail;
    1544. 

  1544. 		}
    1545. 

  1545. 

  1546. 		if (wps_ie) {
    1547. 

  1547. 			DBG_8723A("STA included WPS IE in (Re)Association "
    1548. 

  1548. 				  "Request - WPS is used\n");
    1549. 

  1549. 			pstat->flags |= WLAN_STA_WPS;
    1550. 

  1550. 			copy_len = 0;
    1551. 

  1551. 		} else {
    1552. 

  1552. 			copy_len = ((wpa_ie_len + 2) > sizeof(pstat->wpa_ie)) ?
    1553. 

  1553. 				sizeof(pstat->wpa_ie) : (wpa_ie_len + 2);
    1554. 

  1554. 		}
    1555. 

  1555. 

  1556. 		if (copy_len > 0)
    1557. 

  1557. 			memcpy(pstat->wpa_ie, wpa_ie - 2, copy_len);
    1558. 

  1558. 	}
    1559. 

  1559. 

  1560. 	/*  check if there is WMM IE & support WWM-PS */
    1561. 

  1561. 	pstat->flags &= ~WLAN_STA_WME;
    1562. 

  1562. 	pstat->qos_option = 0;
    1563. 

  1563. 	pstat->qos_info = 0;
    1564. 

  1564. 	pstat->has_legacy_ac = true;
    1565. 

  1565. 	pstat->uapsd_vo = 0;
    1566. 

  1566. 	pstat->uapsd_vi = 0;
    1567. 

  1567. 	pstat->uapsd_be = 0;
    1568. 

  1568. 	pstat->uapsd_bk = 0;
    1569. 

  1569. 	if (pmlmepriv->qos_option) {
    1570. 

  1570. 		const u8 *end = pos + left;
    1571. 

  1571. 

  1572. 		p = pos;
    1573. 

  1573. 

  1574. 		for (;;) {
    1575. 

  1575. 			left = end - p;
    1576. 

  1576. 			p = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
    1577. 

  1577. 						    WLAN_OUI_TYPE_MICROSOFT_WMM,
    1578. 

  1578. 						    p, left);
    1579. 

  1579. 			if (p) {
    1580. 

  1580. 				pstat->flags |= WLAN_STA_WME;
    1581. 

  1581. 

  1582. 				pstat->qos_option = 1;
    1583. 

  1583. 				pstat->qos_info = *(p + 8);
    1584. 

  1584. 

  1585. 				pstat->max_sp_len =
    1586. 

  1586. 					(pstat->qos_info >> 5) & 0x3;
    1587. 

  1587. 

  1588. 				if ((pstat->qos_info & 0xf) != 0xf)
    1589. 

  1589. 					pstat->has_legacy_ac = true;
    1590. 

  1590. 				else
    1591. 

  1591. 					pstat->has_legacy_ac = false;
    1592. 

  1592. 

  1593. 				if (pstat->qos_info & 0xf) {
    1594. 

  1594. 					if (pstat->qos_info & BIT(0))
    1595. 

  1595. 						pstat->uapsd_vo = BIT(0)|BIT(1);
    1596. 

  1596. 					else
    1597. 

  1597. 						pstat->uapsd_vo = 0;
    1598. 

  1598. 

  1599. 					if (pstat->qos_info & BIT(1))
    1600. 

  1600. 						pstat->uapsd_vi = BIT(0)|BIT(1);
    1601. 

  1601. 					else
    1602. 

  1602. 						pstat->uapsd_vi = 0;
    1603. 

  1603. 

  1604. 					if (pstat->qos_info & BIT(2))
    1605. 

  1605. 						pstat->uapsd_bk = BIT(0)|BIT(1);
    1606. 

  1606. 					else
    1607. 

  1607. 						pstat->uapsd_bk = 0;
    1608. 

  1608. 

  1609. 					if (pstat->qos_info & BIT(3))
    1610. 

  1610. 						pstat->uapsd_be = BIT(0)|BIT(1);
    1611. 

  1611. 					else
    1612. 

  1612. 						pstat->uapsd_be = 0;
    1613. 

  1613. 

  1614. 					break;
    1615. 

  1615. 				}
    1616. 

  1616. 			} else {
    1617. 

  1617. 				break;
    1618. 

  1618. 			}
    1619. 

  1619. 			p = p + p[1] + 2;
    1620. 

  1620. 		}
    1621. 

  1621. 	}
    1622. 

  1622. 

  1623. 	/* save HT capabilities in the sta object */
    1624. 

  1624. 	memset(&pstat->htpriv.ht_cap, 0, sizeof(struct ieee80211_ht_cap));
    1625. 

  1625. 	p = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, pos, left);
    1626. 

  1626. 

  1627. 	if (p && p[1] >= sizeof(struct ieee80211_ht_cap)) {
    1628. 

  1628. 		pstat->flags |= WLAN_STA_HT;
    1629. 

  1629. 

  1630. 		pstat->flags |= WLAN_STA_WME;
    1631. 

  1631. 

  1632. 		memcpy(&pstat->htpriv.ht_cap, p + 2,
    1633. 

  1633. 		       sizeof(struct ieee80211_ht_cap));
    1634. 

  1634. 	} else
    1635. 

  1635. 		pstat->flags &= ~WLAN_STA_HT;
    1636. 

  1636. 

  1637. 	if (!pmlmepriv->htpriv.ht_option && pstat->flags & WLAN_STA_HT){
    1638. 

  1638. 		status = WLAN_STATUS_UNSPECIFIED_FAILURE;
    1639. 

  1639. 		goto On…
    1640.

Large files files are truncated, but you can click here to view the full file