PageRenderTime 283ms CodeModel.GetById 18ms app.highlight 235ms RepoModel.GetById 1ms app.codeStats 1ms

/drivers/staging/rtl8187se/ieee80211/ieee80211_softmac.c

https://bitbucket.org/wisechild/galaxy-nexus
C | 3011 lines | 2017 code | 630 blank | 364 comment | 422 complexity | c30d5aace09055f9b59b3c0983c15bec MD5 | raw file
Possible License(s): GPL-2.0, LGPL-2.0, AGPL-1.0

Large files files are truncated, but you can click here to view the full file

   1/* IEEE 802.11 SoftMAC layer
   2 * Copyright (c) 2005 Andrea Merello <andreamrl@tiscali.it>
   3 *
   4 * Mostly extracted from the rtl8180-sa2400 driver for the
   5 * in-kernel generic ieee802.11 stack.
   6 *
   7 * Few lines might be stolen from other part of the ieee80211
   8 * stack. Copyright who own it's copyright
   9 *
  10 * WPA code stolen from the ipw2200 driver.
  11 * Copyright who own it's copyright.
  12 *
  13 * released under the GPL
  14 */
  15
  16
  17#include "ieee80211.h"
  18
  19#include <linux/random.h>
  20#include <linux/delay.h>
  21#include <linux/slab.h>
  22#include <linux/version.h>
  23#include <asm/uaccess.h>
  24
  25#include "dot11d.h"
  26u8 rsn_authen_cipher_suite[16][4] = {
  27	{0x00,0x0F,0xAC,0x00}, //Use group key, //Reserved
  28	{0x00,0x0F,0xAC,0x01}, //WEP-40         //RSNA default
  29	{0x00,0x0F,0xAC,0x02}, //TKIP           //NONE		//{used just as default}
  30	{0x00,0x0F,0xAC,0x03}, //WRAP-historical
  31	{0x00,0x0F,0xAC,0x04}, //CCMP
  32	{0x00,0x0F,0xAC,0x05}, //WEP-104
  33};
  34
  35short ieee80211_is_54g(struct ieee80211_network net)
  36{
  37	return ((net.rates_ex_len > 0) || (net.rates_len > 4));
  38}
  39
  40short ieee80211_is_shortslot(struct ieee80211_network net)
  41{
  42	return (net.capability & WLAN_CAPABILITY_SHORT_SLOT);
  43}
  44
  45/* returns the total length needed for pleacing the RATE MFIE
  46 * tag and the EXTENDED RATE MFIE tag if needed.
  47 * It encludes two bytes per tag for the tag itself and its len
  48 */
  49unsigned int ieee80211_MFIE_rate_len(struct ieee80211_device *ieee)
  50{
  51	unsigned int rate_len = 0;
  52
  53	if (ieee->modulation & IEEE80211_CCK_MODULATION)
  54		rate_len = IEEE80211_CCK_RATE_LEN + 2;
  55
  56	if (ieee->modulation & IEEE80211_OFDM_MODULATION)
  57
  58		rate_len += IEEE80211_OFDM_RATE_LEN + 2;
  59
  60	return rate_len;
  61}
  62
  63/* pleace the MFIE rate, tag to the memory (double) poined.
  64 * Then it updates the pointer so that
  65 * it points after the new MFIE tag added.
  66 */
  67void ieee80211_MFIE_Brate(struct ieee80211_device *ieee, u8 **tag_p)
  68{
  69	u8 *tag = *tag_p;
  70
  71	if (ieee->modulation & IEEE80211_CCK_MODULATION){
  72		*tag++ = MFIE_TYPE_RATES;
  73		*tag++ = 4;
  74		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_1MB;
  75		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_2MB;
  76		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_5MB;
  77		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_11MB;
  78	}
  79
  80	/* We may add an option for custom rates that specific HW might support */
  81	*tag_p = tag;
  82}
  83
  84void ieee80211_MFIE_Grate(struct ieee80211_device *ieee, u8 **tag_p)
  85{
  86	u8 *tag = *tag_p;
  87
  88		if (ieee->modulation & IEEE80211_OFDM_MODULATION){
  89
  90		*tag++ = MFIE_TYPE_RATES_EX;
  91		*tag++ = 8;
  92		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_6MB;
  93		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_9MB;
  94		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_12MB;
  95		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_18MB;
  96		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_24MB;
  97		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_36MB;
  98		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_48MB;
  99		*tag++ = IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_54MB;
 100
 101	}
 102
 103	/* We may add an option for custom rates that specific HW might support */
 104	*tag_p = tag;
 105}
 106
 107
 108void ieee80211_WMM_Info(struct ieee80211_device *ieee, u8 **tag_p) {
 109	u8 *tag = *tag_p;
 110
 111	*tag++ = MFIE_TYPE_GENERIC; //0
 112	*tag++ = 7;
 113	*tag++ = 0x00;
 114	*tag++ = 0x50;
 115	*tag++ = 0xf2;
 116	*tag++ = 0x02;//5
 117	*tag++ = 0x00;
 118	*tag++ = 0x01;
 119#ifdef SUPPORT_USPD
 120	if(ieee->current_network.wmm_info & 0x80) {
 121		*tag++ = 0x0f|MAX_SP_Len;
 122	} else {
 123		*tag++ = MAX_SP_Len;
 124	}
 125#else
 126	*tag++ = MAX_SP_Len;
 127#endif
 128	*tag_p = tag;
 129}
 130
 131void ieee80211_TURBO_Info(struct ieee80211_device *ieee, u8 **tag_p) {
 132	u8 *tag = *tag_p;
 133
 134        *tag++ = MFIE_TYPE_GENERIC; //0
 135        *tag++ = 7;
 136        *tag++ = 0x00;
 137        *tag++ = 0xe0;
 138        *tag++ = 0x4c;
 139        *tag++ = 0x01;//5
 140        *tag++ = 0x02;
 141        *tag++ = 0x11;
 142	*tag++ = 0x00;
 143
 144	*tag_p = tag;
 145	printk(KERN_ALERT "This is enable turbo mode IE process\n");
 146}
 147
 148void enqueue_mgmt(struct ieee80211_device *ieee, struct sk_buff *skb)
 149{
 150	int nh;
 151	nh = (ieee->mgmt_queue_head +1) % MGMT_QUEUE_NUM;
 152
 153/*
 154 * if the queue is full but we have newer frames then
 155 * just overwrites the oldest.
 156 *
 157 * if (nh == ieee->mgmt_queue_tail)
 158 *		return -1;
 159 */
 160	ieee->mgmt_queue_head = nh;
 161	ieee->mgmt_queue_ring[nh] = skb;
 162
 163	//return 0;
 164}
 165
 166struct sk_buff *dequeue_mgmt(struct ieee80211_device *ieee)
 167{
 168	struct sk_buff *ret;
 169
 170	if(ieee->mgmt_queue_tail == ieee->mgmt_queue_head)
 171		return NULL;
 172
 173	ret = ieee->mgmt_queue_ring[ieee->mgmt_queue_tail];
 174
 175	ieee->mgmt_queue_tail =
 176		(ieee->mgmt_queue_tail+1) % MGMT_QUEUE_NUM;
 177
 178	return ret;
 179}
 180
 181void init_mgmt_queue(struct ieee80211_device *ieee)
 182{
 183	ieee->mgmt_queue_tail = ieee->mgmt_queue_head = 0;
 184}
 185
 186
 187void ieee80211_sta_wakeup(struct ieee80211_device *ieee, short nl);
 188
 189inline void softmac_mgmt_xmit(struct sk_buff *skb, struct ieee80211_device *ieee)
 190{
 191	unsigned long flags;
 192	short single = ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE;
 193	struct ieee80211_hdr_3addr  *header=
 194		(struct ieee80211_hdr_3addr  *) skb->data;
 195
 196
 197	spin_lock_irqsave(&ieee->lock, flags);
 198
 199	/* called with 2nd param 0, no mgmt lock required */
 200	ieee80211_sta_wakeup(ieee,0);
 201
 202	if(single){
 203		if(ieee->queue_stop){
 204
 205			enqueue_mgmt(ieee,skb);
 206		}else{
 207			header->seq_ctrl = cpu_to_le16(ieee->seq_ctrl[0]<<4);
 208
 209			if (ieee->seq_ctrl[0] == 0xFFF)
 210				ieee->seq_ctrl[0] = 0;
 211			else
 212				ieee->seq_ctrl[0]++;
 213
 214			/* avoid watchdog triggers */
 215			ieee->dev->trans_start = jiffies;
 216			ieee->softmac_data_hard_start_xmit(skb,ieee->dev,ieee->basic_rate);
 217		}
 218
 219		spin_unlock_irqrestore(&ieee->lock, flags);
 220	}else{
 221		spin_unlock_irqrestore(&ieee->lock, flags);
 222		spin_lock_irqsave(&ieee->mgmt_tx_lock, flags);
 223
 224		header->seq_ctrl = cpu_to_le16(ieee->seq_ctrl[0] << 4);
 225
 226		if (ieee->seq_ctrl[0] == 0xFFF)
 227			ieee->seq_ctrl[0] = 0;
 228		else
 229			ieee->seq_ctrl[0]++;
 230
 231		/* avoid watchdog triggers */
 232		ieee->dev->trans_start = jiffies;
 233		ieee->softmac_hard_start_xmit(skb,ieee->dev);
 234
 235		spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags);
 236	}
 237}
 238
 239
 240inline void softmac_ps_mgmt_xmit(struct sk_buff *skb, struct ieee80211_device *ieee)
 241{
 242
 243	short single = ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE;
 244	struct ieee80211_hdr_3addr  *header =
 245		(struct ieee80211_hdr_3addr  *) skb->data;
 246
 247
 248	if(single){
 249
 250		header->seq_ctrl = cpu_to_le16(ieee->seq_ctrl[0] << 4);
 251
 252		if (ieee->seq_ctrl[0] == 0xFFF)
 253			ieee->seq_ctrl[0] = 0;
 254		else
 255			ieee->seq_ctrl[0]++;
 256
 257		/* avoid watchdog triggers */
 258		ieee->dev->trans_start = jiffies;
 259		ieee->softmac_data_hard_start_xmit(skb,ieee->dev,ieee->basic_rate);
 260
 261	}else{
 262
 263		header->seq_ctrl = cpu_to_le16(ieee->seq_ctrl[0] << 4);
 264
 265		if (ieee->seq_ctrl[0] == 0xFFF)
 266			ieee->seq_ctrl[0] = 0;
 267		else
 268			ieee->seq_ctrl[0]++;
 269
 270		/* avoid watchdog triggers */
 271		ieee->dev->trans_start = jiffies;
 272		ieee->softmac_hard_start_xmit(skb,ieee->dev);
 273
 274	}
 275//	dev_kfree_skb_any(skb);//edit by thomas
 276}
 277//by amy for power save
 278inline struct sk_buff *ieee80211_disassociate_skb(
 279							struct ieee80211_network *beacon,
 280							struct ieee80211_device *ieee,
 281							u8	asRsn)
 282{
 283	struct sk_buff *skb;
 284	struct ieee80211_disassoc_frame *disass;
 285
 286	skb = dev_alloc_skb(sizeof(struct ieee80211_disassoc_frame));
 287	if (!skb)
 288		return NULL;
 289
 290	disass = (struct ieee80211_disassoc_frame *) skb_put(skb,sizeof(struct ieee80211_disassoc_frame));
 291	disass->header.frame_control = cpu_to_le16(IEEE80211_STYPE_DISASSOC);
 292	disass->header.duration_id = 0;
 293
 294	memcpy(disass->header.addr1, beacon->bssid, ETH_ALEN);
 295	memcpy(disass->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
 296	memcpy(disass->header.addr3, beacon->bssid, ETH_ALEN);
 297
 298	disass->reasoncode = asRsn;
 299	return skb;
 300}
 301void
 302SendDisassociation(
 303        struct ieee80211_device *ieee,
 304        u8*                     asSta,
 305        u8                      asRsn
 306)
 307{
 308        struct ieee80211_network *beacon = &ieee->current_network;
 309        struct sk_buff *skb;
 310        skb = ieee80211_disassociate_skb(beacon,ieee,asRsn);
 311        if (skb){
 312                softmac_mgmt_xmit(skb, ieee);
 313                //dev_kfree_skb_any(skb);//edit by thomas
 314        }
 315}
 316
 317//by amy for power save
 318inline struct sk_buff *ieee80211_probe_req(struct ieee80211_device *ieee)
 319{
 320	unsigned int len,rate_len;
 321	u8 *tag;
 322	struct sk_buff *skb;
 323	struct ieee80211_probe_request *req;
 324
 325	len = ieee->current_network.ssid_len;
 326
 327	rate_len = ieee80211_MFIE_rate_len(ieee);
 328
 329	skb = dev_alloc_skb(sizeof(struct ieee80211_probe_request) +
 330			    2 + len + rate_len);
 331	if (!skb)
 332		return NULL;
 333
 334	req = (struct ieee80211_probe_request *) skb_put(skb,sizeof(struct ieee80211_probe_request));
 335	req->header.frame_ctl = cpu_to_le16(IEEE80211_STYPE_PROBE_REQ);
 336	req->header.duration_id = 0; //FIXME: is this OK ?
 337
 338	memset(req->header.addr1, 0xff, ETH_ALEN);
 339	memcpy(req->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
 340	memset(req->header.addr3, 0xff, ETH_ALEN);
 341
 342	tag = (u8 *) skb_put(skb,len+2+rate_len);
 343
 344	*tag++ = MFIE_TYPE_SSID;
 345	*tag++ = len;
 346	memcpy(tag, ieee->current_network.ssid, len);
 347	tag += len;
 348	ieee80211_MFIE_Brate(ieee,&tag);
 349	ieee80211_MFIE_Grate(ieee,&tag);
 350
 351	return skb;
 352}
 353
 354struct sk_buff *ieee80211_get_beacon_(struct ieee80211_device *ieee);
 355
 356void ext_ieee80211_send_beacon_wq(struct ieee80211_device *ieee)
 357{
 358	struct sk_buff *skb;
 359
 360	//unsigned long flags;
 361
 362	skb = ieee80211_get_beacon_(ieee);
 363
 364	if (skb){
 365		softmac_mgmt_xmit(skb, ieee);
 366		ieee->softmac_stats.tx_beacons++;
 367		dev_kfree_skb_any(skb);//edit by thomas
 368	}
 369
 370
 371	//printk(KERN_WARNING "[1] beacon sending!\n");
 372	ieee->beacon_timer.expires = jiffies +
 373		(MSECS( ieee->current_network.beacon_interval -5));
 374
 375	//spin_lock_irqsave(&ieee->beacon_lock,flags);
 376	if(ieee->beacon_txing)
 377		add_timer(&ieee->beacon_timer);
 378	//spin_unlock_irqrestore(&ieee->beacon_lock,flags);
 379}
 380
 381void ieee80211_send_beacon(struct ieee80211_device *ieee)
 382{
 383	struct sk_buff *skb;
 384
 385	//unsigned long flags;
 386
 387	skb = ieee80211_get_beacon_(ieee);
 388
 389	if (skb){
 390		softmac_mgmt_xmit(skb, ieee);
 391		ieee->softmac_stats.tx_beacons++;
 392		dev_kfree_skb_any(skb);//edit by thomas
 393	}
 394
 395	//printk(KERN_WARNING "[1] beacon sending!\n");
 396	ieee->beacon_timer.expires = jiffies +
 397		(MSECS( ieee->current_network.beacon_interval -5));
 398
 399	//spin_lock_irqsave(&ieee->beacon_lock,flags);
 400	if(ieee->beacon_txing)
 401		add_timer(&ieee->beacon_timer);
 402	//spin_unlock_irqrestore(&ieee->beacon_lock,flags);
 403}
 404
 405
 406void ieee80211_send_beacon_cb(unsigned long _ieee)
 407{
 408	struct ieee80211_device *ieee =
 409		(struct ieee80211_device *) _ieee;
 410	unsigned long flags;
 411
 412	spin_lock_irqsave(&ieee->beacon_lock, flags);
 413	ieee80211_send_beacon(ieee);
 414	spin_unlock_irqrestore(&ieee->beacon_lock, flags);
 415}
 416
 417void ieee80211_send_probe(struct ieee80211_device *ieee)
 418{
 419	struct sk_buff *skb;
 420
 421	skb = ieee80211_probe_req(ieee);
 422	if (skb){
 423		softmac_mgmt_xmit(skb, ieee);
 424		ieee->softmac_stats.tx_probe_rq++;
 425		//dev_kfree_skb_any(skb);//edit by thomas
 426	}
 427}
 428
 429void ieee80211_send_probe_requests(struct ieee80211_device *ieee)
 430{
 431	if (ieee->active_scan && (ieee->softmac_features & IEEE_SOFTMAC_PROBERQ)){
 432		ieee80211_send_probe(ieee);
 433		ieee80211_send_probe(ieee);
 434	}
 435}
 436
 437/* this performs syncro scan blocking the caller until all channels
 438 * in the allowed channel map has been checked.
 439 */
 440void ieee80211_softmac_scan_syncro(struct ieee80211_device *ieee)
 441{
 442	short ch = 0;
 443	u8 channel_map[MAX_CHANNEL_NUMBER+1];
 444	memcpy(channel_map, GET_DOT11D_INFO(ieee)->channel_map, MAX_CHANNEL_NUMBER+1);
 445	down(&ieee->scan_sem);
 446//	printk("==================> Sync scan\n");
 447
 448	while(1)
 449	{
 450
 451		do{
 452			ch++;
 453			if (ch > MAX_CHANNEL_NUMBER)
 454				goto out; /* scan completed */
 455
 456		}while(!channel_map[ch]);
 457		/* this function can be called in two situations
 458		 * 1- We have switched to ad-hoc mode and we are
 459		 *    performing a complete syncro scan before conclude
 460		 *    there are no interesting cell and to create a
 461		 *    new one. In this case the link state is
 462		 *    IEEE80211_NOLINK until we found an interesting cell.
 463		 *    If so the ieee8021_new_net, called by the RX path
 464		 *    will set the state to IEEE80211_LINKED, so we stop
 465		 *    scanning
 466		 * 2- We are linked and the root uses run iwlist scan.
 467		 *    So we switch to IEEE80211_LINKED_SCANNING to remember
 468		 *    that we are still logically linked (not interested in
 469		 *    new network events, despite for updating the net list,
 470		 *    but we are temporarly 'unlinked' as the driver shall
 471		 *    not filter RX frames and the channel is changing.
 472		 * So the only situation in witch are interested is to check
 473		 * if the state become LINKED because of the #1 situation
 474		 */
 475
 476		if (ieee->state == IEEE80211_LINKED)
 477			goto out;
 478
 479		ieee->set_chan(ieee->dev, ch);
 480//		printk("=====>channel=%d   ",ch);
 481		if(channel_map[ch] == 1)
 482		{
 483//			printk("====send probe request\n");
 484			ieee80211_send_probe_requests(ieee);
 485		}
 486		/* this prevent excessive time wait when we
 487		 * need to wait for a syncro scan to end..
 488		 */
 489		if (ieee->sync_scan_hurryup)
 490			goto out;
 491
 492
 493		msleep_interruptible_rtl(IEEE80211_SOFTMAC_SCAN_TIME);
 494
 495	}
 496out:
 497	ieee->sync_scan_hurryup = 0;
 498	up(&ieee->scan_sem);
 499	if(IS_DOT11D_ENABLE(ieee))
 500		DOT11D_ScanComplete(ieee);
 501}
 502
 503void ieee80211_softmac_ips_scan_syncro(struct ieee80211_device *ieee)
 504{
 505	int ch;
 506        unsigned int watch_dog = 0;
 507	u8 channel_map[MAX_CHANNEL_NUMBER+1];
 508	memcpy(channel_map, GET_DOT11D_INFO(ieee)->channel_map, MAX_CHANNEL_NUMBER+1);
 509        down(&ieee->scan_sem);
 510	ch = ieee->current_network.channel;
 511//      	if(ieee->sync_scan_hurryup)
 512//	{
 513
 514//		printk("stop scan sync\n");
 515//   		goto out;
 516//  	}
 517//	printk("=======hh===============>ips scan\n");
 518     	while(1)
 519        {
 520                /* this function can be called in two situations
 521                 * 1- We have switched to ad-hoc mode and we are
 522                 *    performing a complete syncro scan before conclude
 523                 *    there are no interesting cell and to create a
 524                 *    new one. In this case the link state is
 525                 *    IEEE80211_NOLINK until we found an interesting cell.
 526                 *    If so the ieee8021_new_net, called by the RX path
 527                 *    will set the state to IEEE80211_LINKED, so we stop
 528                 *    scanning
 529                 * 2- We are linked and the root uses run iwlist scan.
 530                 *    So we switch to IEEE80211_LINKED_SCANNING to remember
 531                 *    that we are still logically linked (not interested in
 532                 *    new network events, despite for updating the net list,
 533                 *    but we are temporarly 'unlinked' as the driver shall
 534                 *    not filter RX frames and the channel is changing.
 535                 * So the only situation in witch are interested is to check
 536                 * if the state become LINKED because of the #1 situation
 537                 */
 538		if (ieee->state == IEEE80211_LINKED)
 539		{
 540			goto out;
 541		}
 542		if(channel_map[ieee->current_network.channel] > 0)
 543		{
 544			ieee->set_chan(ieee->dev, ieee->current_network.channel);
 545//			printk("======>channel=%d  ",ieee->current_network.channel);
 546		}
 547		if(channel_map[ieee->current_network.channel] == 1)
 548		{
 549//			printk("====send probe request\n");
 550			ieee80211_send_probe_requests(ieee);
 551                }
 552		/* this prevent excessive time wait when we
 553                 * need to wait for a syncro scan to end..
 554                 */
 555//                if (ieee->sync_scan_hurryup)
 556//                        goto out;
 557
 558		msleep_interruptible_rtl(IEEE80211_SOFTMAC_SCAN_TIME);
 559
 560		do{
 561			if (watch_dog++ >= MAX_CHANNEL_NUMBER)
 562		//	if (++watch_dog >= 15);//MAX_CHANNEL_NUMBER)  //YJ,modified,080630
 563				goto out; /* scan completed */
 564
 565			ieee->current_network.channel = (ieee->current_network.channel + 1)%MAX_CHANNEL_NUMBER;
 566		}while(!channel_map[ieee->current_network.channel]);
 567        }
 568out:
 569	//ieee->sync_scan_hurryup = 0;
 570   	//ieee->set_chan(ieee->dev, ch);
 571   	//ieee->current_network.channel = ch;
 572	ieee->actscanning = false;
 573	up(&ieee->scan_sem);
 574	if(IS_DOT11D_ENABLE(ieee))
 575		DOT11D_ScanComplete(ieee);
 576}
 577
 578void ieee80211_softmac_scan_wq(struct work_struct *work)
 579{
 580	struct delayed_work *dwork = to_delayed_work(work);
 581	struct ieee80211_device *ieee = container_of(dwork, struct ieee80211_device, softmac_scan_wq);
 582	static short watchdog = 0;
 583	u8 channel_map[MAX_CHANNEL_NUMBER+1];
 584	memcpy(channel_map, GET_DOT11D_INFO(ieee)->channel_map, MAX_CHANNEL_NUMBER+1);
 585//	printk("ieee80211_softmac_scan_wq ENABLE_IPS\n");
 586//	printk("in %s\n",__func__);
 587	down(&ieee->scan_sem);
 588
 589	do{
 590		ieee->current_network.channel =
 591			(ieee->current_network.channel + 1) % MAX_CHANNEL_NUMBER;
 592		if (watchdog++ > MAX_CHANNEL_NUMBER)
 593				goto out; /* no good chans */
 594
 595 	}while(!channel_map[ieee->current_network.channel]);
 596
 597	//printk("current_network.channel:%d\n", ieee->current_network.channel);
 598	if (ieee->scanning == 0 )
 599	{
 600		printk("error out, scanning = 0\n");
 601		goto out;
 602	}
 603	ieee->set_chan(ieee->dev, ieee->current_network.channel);
 604	if(channel_map[ieee->current_network.channel] == 1)
 605		ieee80211_send_probe_requests(ieee);
 606
 607	queue_delayed_work(ieee->wq, &ieee->softmac_scan_wq, IEEE80211_SOFTMAC_SCAN_TIME);
 608	up(&ieee->scan_sem);
 609	return;
 610out:
 611	ieee->actscanning = false;
 612	watchdog = 0;
 613	ieee->scanning = 0;
 614	up(&ieee->scan_sem);
 615
 616	if(IS_DOT11D_ENABLE(ieee))
 617		DOT11D_ScanComplete(ieee);
 618	return;
 619}
 620
 621void ieee80211_beacons_start(struct ieee80211_device *ieee)
 622{
 623	unsigned long flags;
 624
 625	spin_lock_irqsave(&ieee->beacon_lock,flags);
 626
 627	ieee->beacon_txing = 1;
 628	ieee80211_send_beacon(ieee);
 629
 630	spin_unlock_irqrestore(&ieee->beacon_lock,flags);
 631}
 632
 633void ieee80211_beacons_stop(struct ieee80211_device *ieee)
 634{
 635	unsigned long flags;
 636
 637	spin_lock_irqsave(&ieee->beacon_lock,flags);
 638
 639	ieee->beacon_txing = 0;
 640 	del_timer_sync(&ieee->beacon_timer);
 641
 642	spin_unlock_irqrestore(&ieee->beacon_lock,flags);
 643
 644}
 645
 646
 647void ieee80211_stop_send_beacons(struct ieee80211_device *ieee)
 648{
 649	if(ieee->stop_send_beacons)
 650		ieee->stop_send_beacons(ieee->dev);
 651	if (ieee->softmac_features & IEEE_SOFTMAC_BEACONS)
 652		ieee80211_beacons_stop(ieee);
 653}
 654
 655
 656void ieee80211_start_send_beacons(struct ieee80211_device *ieee)
 657{
 658	if(ieee->start_send_beacons)
 659		ieee->start_send_beacons(ieee->dev);
 660	if(ieee->softmac_features & IEEE_SOFTMAC_BEACONS)
 661		ieee80211_beacons_start(ieee);
 662}
 663
 664
 665void ieee80211_softmac_stop_scan(struct ieee80211_device *ieee)
 666{
 667//	unsigned long flags;
 668
 669	//ieee->sync_scan_hurryup = 1;
 670
 671	down(&ieee->scan_sem);
 672//	spin_lock_irqsave(&ieee->lock, flags);
 673
 674	if (ieee->scanning == 1){
 675		ieee->scanning = 0;
 676		//del_timer_sync(&ieee->scan_timer);
 677		cancel_delayed_work(&ieee->softmac_scan_wq);
 678	}
 679
 680//	spin_unlock_irqrestore(&ieee->lock, flags);
 681	up(&ieee->scan_sem);
 682}
 683
 684void ieee80211_stop_scan(struct ieee80211_device *ieee)
 685{
 686	if (ieee->softmac_features & IEEE_SOFTMAC_SCAN)
 687		ieee80211_softmac_stop_scan(ieee);
 688	else
 689		ieee->stop_scan(ieee->dev);
 690}
 691
 692/* called with ieee->lock held */
 693void ieee80211_rtl_start_scan(struct ieee80211_device *ieee)
 694{
 695	if(IS_DOT11D_ENABLE(ieee) )
 696	{
 697		if(IS_COUNTRY_IE_VALID(ieee))
 698		{
 699			RESET_CIE_WATCHDOG(ieee);
 700		}
 701	}
 702	if (ieee->softmac_features & IEEE_SOFTMAC_SCAN){
 703		if (ieee->scanning == 0)
 704		{
 705			ieee->scanning = 1;
 706			//ieee80211_softmac_scan(ieee);
 707		//	queue_work(ieee->wq, &ieee->softmac_scan_wq);
 708		//care this,1203,2007,by lawrence
 709#if 1
 710			queue_delayed_work(ieee->wq, &ieee->softmac_scan_wq,0);
 711#endif
 712		}
 713	}else
 714		ieee->start_scan(ieee->dev);
 715
 716}
 717
 718/* called with wx_sem held */
 719void ieee80211_start_scan_syncro(struct ieee80211_device *ieee)
 720{
 721	if(IS_DOT11D_ENABLE(ieee) )
 722	{
 723		if(IS_COUNTRY_IE_VALID(ieee))
 724		{
 725			RESET_CIE_WATCHDOG(ieee);
 726		}
 727	}
 728	ieee->sync_scan_hurryup = 0;
 729
 730	if (ieee->softmac_features & IEEE_SOFTMAC_SCAN)
 731		ieee80211_softmac_scan_syncro(ieee);
 732	else
 733		ieee->scan_syncro(ieee->dev);
 734
 735}
 736
 737inline struct sk_buff *ieee80211_authentication_req(struct ieee80211_network *beacon,
 738	struct ieee80211_device *ieee, int challengelen)
 739{
 740	struct sk_buff *skb;
 741	struct ieee80211_authentication *auth;
 742
 743	skb = dev_alloc_skb(sizeof(struct ieee80211_authentication) + challengelen);
 744
 745	if (!skb) return NULL;
 746
 747	auth = (struct ieee80211_authentication *)
 748		skb_put(skb, sizeof(struct ieee80211_authentication));
 749
 750	auth->header.frame_ctl = IEEE80211_STYPE_AUTH;
 751	if (challengelen) auth->header.frame_ctl |= IEEE80211_FCTL_WEP;
 752
 753	auth->header.duration_id = 0x013a; //FIXME
 754
 755	memcpy(auth->header.addr1, beacon->bssid, ETH_ALEN);
 756	memcpy(auth->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
 757	memcpy(auth->header.addr3, beacon->bssid, ETH_ALEN);
 758
 759	auth->algorithm = ieee->open_wep ? WLAN_AUTH_OPEN : WLAN_AUTH_SHARED_KEY;
 760
 761	auth->transaction = cpu_to_le16(ieee->associate_seq);
 762	ieee->associate_seq++;
 763
 764	auth->status = cpu_to_le16(WLAN_STATUS_SUCCESS);
 765
 766	return skb;
 767
 768}
 769
 770static struct sk_buff* ieee80211_probe_resp(struct ieee80211_device *ieee, u8 *dest)
 771{
 772	u8 *tag;
 773	int beacon_size;
 774	struct ieee80211_probe_response *beacon_buf;
 775	struct sk_buff *skb;
 776	int encrypt;
 777	int atim_len,erp_len;
 778	struct ieee80211_crypt_data* crypt;
 779
 780	char *ssid = ieee->current_network.ssid;
 781	int ssid_len = ieee->current_network.ssid_len;
 782	int rate_len = ieee->current_network.rates_len+2;
 783	int rate_ex_len = ieee->current_network.rates_ex_len;
 784	int wpa_ie_len = ieee->wpa_ie_len;
 785	if(rate_ex_len > 0) rate_ex_len+=2;
 786
 787	if(ieee->current_network.capability & WLAN_CAPABILITY_IBSS)
 788		atim_len = 4;
 789	else
 790		atim_len = 0;
 791
 792	if(ieee80211_is_54g(ieee->current_network))
 793		erp_len = 3;
 794	else
 795		erp_len = 0;
 796
 797	beacon_size = sizeof(struct ieee80211_probe_response)+
 798		ssid_len
 799		+3 //channel
 800		+rate_len
 801		+rate_ex_len
 802		+atim_len
 803		+wpa_ie_len
 804		+erp_len;
 805
 806	skb = dev_alloc_skb(beacon_size);
 807
 808	if (!skb)
 809		return NULL;
 810
 811	beacon_buf = (struct ieee80211_probe_response*) skb_put(skb, beacon_size);
 812
 813	memcpy (beacon_buf->header.addr1, dest,ETH_ALEN);
 814	memcpy (beacon_buf->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
 815	memcpy (beacon_buf->header.addr3, ieee->current_network.bssid, ETH_ALEN);
 816
 817	beacon_buf->header.duration_id = 0; //FIXME
 818	beacon_buf->beacon_interval =
 819		cpu_to_le16(ieee->current_network.beacon_interval);
 820	beacon_buf->capability =
 821		cpu_to_le16(ieee->current_network.capability & WLAN_CAPABILITY_IBSS);
 822
 823	if(ieee->short_slot && (ieee->current_network.capability & WLAN_CAPABILITY_SHORT_SLOT))
 824		cpu_to_le16((beacon_buf->capability |= WLAN_CAPABILITY_SHORT_SLOT));
 825
 826	crypt = ieee->crypt[ieee->tx_keyidx];
 827
 828	encrypt = ieee->host_encrypt && crypt && crypt->ops &&
 829		((0 == strcmp(crypt->ops->name, "WEP")) || wpa_ie_len);
 830
 831	if (encrypt)
 832		beacon_buf->capability |= cpu_to_le16(WLAN_CAPABILITY_PRIVACY);
 833
 834
 835	beacon_buf->header.frame_ctl = cpu_to_le16(IEEE80211_STYPE_PROBE_RESP);
 836
 837	beacon_buf->info_element.id = MFIE_TYPE_SSID;
 838	beacon_buf->info_element.len = ssid_len;
 839
 840	tag = (u8*) beacon_buf->info_element.data;
 841
 842	memcpy(tag, ssid, ssid_len);
 843
 844	tag += ssid_len;
 845
 846	*(tag++) = MFIE_TYPE_RATES;
 847	*(tag++) = rate_len-2;
 848	memcpy(tag,ieee->current_network.rates,rate_len-2);
 849	tag+=rate_len-2;
 850
 851	*(tag++) = MFIE_TYPE_DS_SET;
 852	*(tag++) = 1;
 853	*(tag++) = ieee->current_network.channel;
 854
 855	if(atim_len){
 856		*(tag++) = MFIE_TYPE_IBSS_SET;
 857		*(tag++) = 2;
 858		*((u16*)(tag)) = cpu_to_le16(ieee->current_network.atim_window);
 859		tag+=2;
 860	}
 861
 862	if(erp_len){
 863		*(tag++) = MFIE_TYPE_ERP;
 864		*(tag++) = 1;
 865		*(tag++) = 0;
 866	}
 867
 868	if(rate_ex_len){
 869		*(tag++) = MFIE_TYPE_RATES_EX;
 870		*(tag++) = rate_ex_len-2;
 871		memcpy(tag,ieee->current_network.rates_ex,rate_ex_len-2);
 872		tag+=rate_ex_len-2;
 873	}
 874
 875	if (wpa_ie_len)
 876	{
 877		if (ieee->iw_mode == IW_MODE_ADHOC)
 878		{//as Windows will set pairwise key same as the group key which is not allowed in Linux, so set this for IOT issue. WB 2008.07.07
 879			memcpy(&ieee->wpa_ie[14], &ieee->wpa_ie[8], 4);
 880		}
 881
 882		memcpy(tag, ieee->wpa_ie, ieee->wpa_ie_len);
 883	}
 884
 885	skb->dev = ieee->dev;
 886	return skb;
 887}
 888
 889struct sk_buff* ieee80211_assoc_resp(struct ieee80211_device *ieee, u8 *dest)
 890{
 891	struct sk_buff *skb;
 892	u8* tag;
 893
 894	struct ieee80211_crypt_data* crypt;
 895	struct ieee80211_assoc_response_frame *assoc;
 896	short encrypt;
 897
 898	unsigned int rate_len = ieee80211_MFIE_rate_len(ieee);
 899	int len = sizeof(struct ieee80211_assoc_response_frame) + rate_len;
 900
 901	skb = dev_alloc_skb(len);
 902
 903	if (!skb)
 904		return NULL;
 905
 906	assoc = (struct ieee80211_assoc_response_frame *)
 907		skb_put(skb,sizeof(struct ieee80211_assoc_response_frame));
 908
 909	assoc->header.frame_control = cpu_to_le16(IEEE80211_STYPE_ASSOC_RESP);
 910	memcpy(assoc->header.addr1, dest,ETH_ALEN);
 911	memcpy(assoc->header.addr3, ieee->dev->dev_addr, ETH_ALEN);
 912	memcpy(assoc->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
 913	assoc->capability = cpu_to_le16(ieee->iw_mode == IW_MODE_MASTER ?
 914		WLAN_CAPABILITY_BSS : WLAN_CAPABILITY_IBSS);
 915
 916
 917	if(ieee->short_slot)
 918		assoc->capability |= cpu_to_le16(WLAN_CAPABILITY_SHORT_SLOT);
 919
 920	if (ieee->host_encrypt)
 921		crypt = ieee->crypt[ieee->tx_keyidx];
 922	else crypt = NULL;
 923
 924	encrypt = ( crypt && crypt->ops);
 925
 926	if (encrypt)
 927		assoc->capability |= cpu_to_le16(WLAN_CAPABILITY_PRIVACY);
 928
 929	assoc->status = 0;
 930	assoc->aid = cpu_to_le16(ieee->assoc_id);
 931	if (ieee->assoc_id == 0x2007) ieee->assoc_id=0;
 932	else ieee->assoc_id++;
 933
 934	tag = (u8*) skb_put(skb, rate_len);
 935
 936	ieee80211_MFIE_Brate(ieee, &tag);
 937	ieee80211_MFIE_Grate(ieee, &tag);
 938
 939	return skb;
 940}
 941
 942struct sk_buff* ieee80211_auth_resp(struct ieee80211_device *ieee,int status, u8 *dest)
 943{
 944	struct sk_buff *skb;
 945	struct ieee80211_authentication *auth;
 946
 947	skb = dev_alloc_skb(sizeof(struct ieee80211_authentication)+1);
 948
 949	if (!skb)
 950		return NULL;
 951
 952	skb->len = sizeof(struct ieee80211_authentication);
 953
 954	auth = (struct ieee80211_authentication *)skb->data;
 955
 956	auth->status = cpu_to_le16(status);
 957	auth->transaction = cpu_to_le16(2);
 958	auth->algorithm = cpu_to_le16(WLAN_AUTH_OPEN);
 959
 960	memcpy(auth->header.addr3, ieee->dev->dev_addr, ETH_ALEN);
 961	memcpy(auth->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
 962	memcpy(auth->header.addr1, dest, ETH_ALEN);
 963	auth->header.frame_ctl = cpu_to_le16(IEEE80211_STYPE_AUTH);
 964	return skb;
 965
 966
 967}
 968
 969struct sk_buff* ieee80211_null_func(struct ieee80211_device *ieee,short pwr)
 970{
 971	struct sk_buff *skb;
 972	struct ieee80211_hdr_3addr* hdr;
 973
 974	skb = dev_alloc_skb(sizeof(struct ieee80211_hdr_3addr));
 975
 976	if (!skb)
 977		return NULL;
 978
 979	hdr = (struct ieee80211_hdr_3addr*)skb_put(skb,sizeof(struct ieee80211_hdr_3addr));
 980
 981	memcpy(hdr->addr1, ieee->current_network.bssid, ETH_ALEN);
 982	memcpy(hdr->addr2, ieee->dev->dev_addr, ETH_ALEN);
 983	memcpy(hdr->addr3, ieee->current_network.bssid, ETH_ALEN);
 984
 985	hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
 986		IEEE80211_STYPE_NULLFUNC | IEEE80211_FCTL_TODS |
 987		(pwr ? IEEE80211_FCTL_PM:0));
 988
 989	return skb;
 990
 991
 992}
 993
 994
 995void ieee80211_resp_to_assoc_rq(struct ieee80211_device *ieee, u8* dest)
 996{
 997	struct sk_buff *buf = ieee80211_assoc_resp(ieee, dest);
 998
 999	if (buf){
1000		softmac_mgmt_xmit(buf, ieee);
1001		dev_kfree_skb_any(buf);//edit by thomas
1002	}
1003}
1004
1005
1006void ieee80211_resp_to_auth(struct ieee80211_device *ieee, int s, u8* dest)
1007{
1008	struct sk_buff *buf = ieee80211_auth_resp(ieee, s, dest);
1009
1010	if (buf){
1011		softmac_mgmt_xmit(buf, ieee);
1012		dev_kfree_skb_any(buf);//edit by thomas
1013	}
1014}
1015
1016
1017void ieee80211_resp_to_probe(struct ieee80211_device *ieee, u8 *dest)
1018{
1019
1020	struct sk_buff *buf = ieee80211_probe_resp(ieee, dest);
1021
1022	if (buf) {
1023		softmac_mgmt_xmit(buf, ieee);
1024		dev_kfree_skb_any(buf);//edit by thomas
1025	}
1026}
1027
1028
1029inline struct sk_buff *ieee80211_association_req(struct ieee80211_network *beacon,struct ieee80211_device *ieee)
1030{
1031	struct sk_buff *skb;
1032	//unsigned long flags;
1033
1034	struct ieee80211_assoc_request_frame *hdr;
1035	u8 *tag;
1036	//short info_addr = 0;
1037	//int i;
1038	//u16 suite_count = 0;
1039	//u8 suit_select = 0;
1040	unsigned int wpa_len = beacon->wpa_ie_len;
1041	//struct net_device *dev = ieee->dev;
1042	//union iwreq_data wrqu;
1043	//u8 *buff;
1044	//u8 *p;
1045#if 1
1046	// for testing purpose
1047	unsigned int rsn_len = beacon->rsn_ie_len;
1048#else
1049	unsigned int rsn_len = beacon->rsn_ie_len - 4;
1050#endif
1051	unsigned int rate_len = ieee80211_MFIE_rate_len(ieee);
1052	unsigned int wmm_info_len = beacon->QoS_Enable?9:0;
1053	unsigned int turbo_info_len = beacon->Turbo_Enable?9:0;
1054
1055	u8  encry_proto = ieee->wpax_type_notify & 0xff;
1056	//u8  pairwise_type = (ieee->wpax_type_notify >> 8) & 0xff;
1057	//u8  authen_type = (ieee->wpax_type_notify >> 16) & 0xff;
1058
1059	int len = 0;
1060
1061	//[0] Notify type of encryption: WPA/WPA2
1062	//[1] pair wise type
1063	//[2] authen type
1064	if(ieee->wpax_type_set) {
1065		if (IEEE_PROTO_WPA == encry_proto) {
1066			rsn_len = 0;
1067		} else if (IEEE_PROTO_RSN == encry_proto) {
1068			wpa_len = 0;
1069		}
1070	}
1071	len = sizeof(struct ieee80211_assoc_request_frame)+
1072		+ beacon->ssid_len//essid tagged val
1073		+ rate_len//rates tagged val
1074		+ wpa_len
1075		+ rsn_len
1076		+ wmm_info_len
1077		+ turbo_info_len;
1078
1079	skb = dev_alloc_skb(len);
1080
1081	if (!skb)
1082		return NULL;
1083
1084	hdr = (struct ieee80211_assoc_request_frame *)
1085		skb_put(skb, sizeof(struct ieee80211_assoc_request_frame));
1086
1087
1088	hdr->header.frame_control = IEEE80211_STYPE_ASSOC_REQ;
1089	hdr->header.duration_id= 37; //FIXME
1090	memcpy(hdr->header.addr1, beacon->bssid, ETH_ALEN);
1091	memcpy(hdr->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
1092	memcpy(hdr->header.addr3, beacon->bssid, ETH_ALEN);
1093	memcpy(ieee->ap_mac_addr, beacon->bssid, ETH_ALEN);//for HW security, John
1094
1095	hdr->capability = cpu_to_le16(WLAN_CAPABILITY_BSS);
1096	if (beacon->capability & WLAN_CAPABILITY_PRIVACY )
1097		hdr->capability |= cpu_to_le16(WLAN_CAPABILITY_PRIVACY);
1098	if (beacon->capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
1099		hdr->capability |= cpu_to_le16(WLAN_CAPABILITY_SHORT_PREAMBLE);
1100
1101	if(ieee->short_slot)
1102		hdr->capability |= cpu_to_le16(WLAN_CAPABILITY_SHORT_SLOT);
1103
1104	hdr->listen_interval = 0xa; //FIXME
1105
1106	hdr->info_element.id = MFIE_TYPE_SSID;
1107
1108	hdr->info_element.len = beacon->ssid_len;
1109	tag = skb_put(skb, beacon->ssid_len);
1110	memcpy(tag, beacon->ssid, beacon->ssid_len);
1111
1112	tag = skb_put(skb, rate_len);
1113
1114	ieee80211_MFIE_Brate(ieee, &tag);
1115	ieee80211_MFIE_Grate(ieee, &tag);
1116
1117	//add rsn==0 condition for ap's mix security mode(wpa+wpa2), john2007.8.9
1118	//choose AES encryption as default algorithm while using mixed mode
1119
1120	tag = skb_put(skb,ieee->wpa_ie_len);
1121	memcpy(tag,ieee->wpa_ie,ieee->wpa_ie_len);
1122
1123	tag = skb_put(skb,wmm_info_len);
1124	if(wmm_info_len) {
1125	  ieee80211_WMM_Info(ieee, &tag);
1126	}
1127	tag = skb_put(skb,turbo_info_len);
1128        if(turbo_info_len) {
1129                ieee80211_TURBO_Info(ieee, &tag);
1130        }
1131
1132	return skb;
1133}
1134
1135void ieee80211_associate_abort(struct ieee80211_device *ieee)
1136{
1137
1138	unsigned long flags;
1139	spin_lock_irqsave(&ieee->lock, flags);
1140
1141	ieee->associate_seq++;
1142
1143	/* don't scan, and avoid to have the RX path possibily
1144	 * try again to associate. Even do not react to AUTH or
1145	 * ASSOC response. Just wait for the retry wq to be scheduled.
1146	 * Here we will check if there are good nets to associate
1147	 * with, so we retry or just get back to NO_LINK and scanning
1148	 */
1149	if (ieee->state == IEEE80211_ASSOCIATING_AUTHENTICATING){
1150		IEEE80211_DEBUG_MGMT("Authentication failed\n");
1151		ieee->softmac_stats.no_auth_rs++;
1152	}else{
1153		IEEE80211_DEBUG_MGMT("Association failed\n");
1154		ieee->softmac_stats.no_ass_rs++;
1155	}
1156
1157	ieee->state = IEEE80211_ASSOCIATING_RETRY;
1158
1159	queue_delayed_work(ieee->wq, &ieee->associate_retry_wq,IEEE80211_SOFTMAC_ASSOC_RETRY_TIME);
1160
1161	spin_unlock_irqrestore(&ieee->lock, flags);
1162}
1163
1164void ieee80211_associate_abort_cb(unsigned long dev)
1165{
1166	ieee80211_associate_abort((struct ieee80211_device *) dev);
1167}
1168
1169
1170void ieee80211_associate_step1(struct ieee80211_device *ieee)
1171{
1172	struct ieee80211_network *beacon = &ieee->current_network;
1173	struct sk_buff *skb;
1174
1175	IEEE80211_DEBUG_MGMT("Stopping scan\n");
1176	ieee->softmac_stats.tx_auth_rq++;
1177	skb=ieee80211_authentication_req(beacon, ieee, 0);
1178	if (!skb){
1179
1180		ieee80211_associate_abort(ieee);
1181	}
1182	else{
1183		ieee->state = IEEE80211_ASSOCIATING_AUTHENTICATING ;
1184		IEEE80211_DEBUG_MGMT("Sending authentication request\n");
1185		//printk("---Sending authentication request\n");
1186		softmac_mgmt_xmit(skb, ieee);
1187		//BUGON when you try to add_timer twice, using mod_timer may be better, john0709
1188		if(!timer_pending(&ieee->associate_timer)){
1189			ieee->associate_timer.expires = jiffies + (HZ / 2);
1190			add_timer(&ieee->associate_timer);
1191		}
1192		//If call dev_kfree_skb_any,a warning will ocur....
1193		//KERNEL: assertion (!atomic_read(&skb->users)) failed at net/core/dev.c (1708)
1194		//So ... 1204 by lawrence.
1195		//printk("\nIn %s,line %d call kfree skb.",__func__,__LINE__);
1196		//dev_kfree_skb_any(skb);//edit by thomas
1197	}
1198}
1199
1200void ieee80211_rtl_auth_challenge(struct ieee80211_device *ieee, u8 *challenge, int chlen)
1201{
1202	u8 *c;
1203	struct sk_buff *skb;
1204	struct ieee80211_network *beacon = &ieee->current_network;
1205//	int hlen = sizeof(struct ieee80211_authentication);
1206	del_timer_sync(&ieee->associate_timer);
1207	ieee->associate_seq++;
1208	ieee->softmac_stats.tx_auth_rq++;
1209
1210	skb = ieee80211_authentication_req(beacon, ieee, chlen+2);
1211	if (!skb)
1212		ieee80211_associate_abort(ieee);
1213	else{
1214		c = skb_put(skb, chlen+2);
1215		*(c++) = MFIE_TYPE_CHALLENGE;
1216		*(c++) = chlen;
1217		memcpy(c, challenge, chlen);
1218
1219		IEEE80211_DEBUG_MGMT("Sending authentication challenge response\n");
1220
1221		ieee80211_encrypt_fragment(ieee, skb, sizeof(struct ieee80211_hdr_3addr  ));
1222
1223		softmac_mgmt_xmit(skb, ieee);
1224		if (!timer_pending(&ieee->associate_timer)){
1225		//printk("=========>add timer again, to crash\n");
1226		ieee->associate_timer.expires = jiffies + (HZ / 2);
1227		add_timer(&ieee->associate_timer);
1228		}
1229		dev_kfree_skb_any(skb);//edit by thomas
1230	}
1231	kfree(challenge);
1232}
1233
1234void ieee80211_associate_step2(struct ieee80211_device *ieee)
1235{
1236	struct sk_buff* skb;
1237	struct ieee80211_network *beacon = &ieee->current_network;
1238
1239	del_timer_sync(&ieee->associate_timer);
1240
1241	IEEE80211_DEBUG_MGMT("Sending association request\n");
1242	ieee->softmac_stats.tx_ass_rq++;
1243	skb=ieee80211_association_req(beacon, ieee);
1244	if (!skb)
1245		ieee80211_associate_abort(ieee);
1246	else{
1247		softmac_mgmt_xmit(skb, ieee);
1248		if (!timer_pending(&ieee->associate_timer)){
1249		ieee->associate_timer.expires = jiffies + (HZ / 2);
1250		add_timer(&ieee->associate_timer);
1251		}
1252		//dev_kfree_skb_any(skb);//edit by thomas
1253	}
1254}
1255
1256void ieee80211_associate_complete_wq(struct work_struct *work)
1257{
1258	struct ieee80211_device *ieee = container_of(work, struct ieee80211_device, associate_complete_wq);
1259
1260	printk(KERN_INFO "Associated successfully\n");
1261	if(ieee80211_is_54g(ieee->current_network) &&
1262		(ieee->modulation & IEEE80211_OFDM_MODULATION)){
1263
1264		ieee->rate = 540;
1265		printk(KERN_INFO"Using G rates\n");
1266	}else{
1267		ieee->rate = 110;
1268		printk(KERN_INFO"Using B rates\n");
1269	}
1270	ieee->link_change(ieee->dev);
1271	notify_wx_assoc_event(ieee);
1272	if (ieee->data_hard_resume)
1273		ieee->data_hard_resume(ieee->dev);
1274	netif_carrier_on(ieee->dev);
1275}
1276
1277void ieee80211_associate_complete(struct ieee80211_device *ieee)
1278{
1279	int i;
1280	del_timer_sync(&ieee->associate_timer);
1281
1282	for(i = 0; i < 6; i++) {
1283	  //ieee->seq_ctrl[i] = 0;
1284	}
1285	ieee->state = IEEE80211_LINKED;
1286	IEEE80211_DEBUG_MGMT("Successfully associated\n");
1287
1288	queue_work(ieee->wq, &ieee->associate_complete_wq);
1289}
1290
1291void ieee80211_associate_procedure_wq(struct work_struct *work)
1292{
1293	struct ieee80211_device *ieee = container_of(work, struct ieee80211_device, associate_procedure_wq);
1294
1295	ieee->sync_scan_hurryup = 1;
1296	down(&ieee->wx_sem);
1297
1298	if (ieee->data_hard_stop)
1299		ieee->data_hard_stop(ieee->dev);
1300
1301	ieee80211_stop_scan(ieee);
1302	ieee->set_chan(ieee->dev, ieee->current_network.channel);
1303
1304	ieee->associate_seq = 1;
1305	ieee80211_associate_step1(ieee);
1306
1307	up(&ieee->wx_sem);
1308}
1309
1310inline void ieee80211_softmac_new_net(struct ieee80211_device *ieee, struct ieee80211_network *net)
1311{
1312	u8 tmp_ssid[IW_ESSID_MAX_SIZE+1];
1313	int tmp_ssid_len = 0;
1314
1315	short apset,ssidset,ssidbroad,apmatch,ssidmatch;
1316
1317	/* we are interested in new new only if we are not associated
1318	 * and we are not associating / authenticating
1319	 */
1320	if (ieee->state != IEEE80211_NOLINK)
1321		return;
1322
1323	if ((ieee->iw_mode == IW_MODE_INFRA) && !(net->capability & WLAN_CAPABILITY_BSS))
1324		return;
1325
1326	if ((ieee->iw_mode == IW_MODE_ADHOC) && !(net->capability & WLAN_CAPABILITY_IBSS))
1327		return;
1328
1329
1330	if (ieee->iw_mode == IW_MODE_INFRA || ieee->iw_mode == IW_MODE_ADHOC){
1331		/* if the user specified the AP MAC, we need also the essid
1332		 * This could be obtained by beacons or, if the network does not
1333		 * broadcast it, it can be put manually.
1334		 */
1335		apset = ieee->wap_set;//(memcmp(ieee->current_network.bssid, zero,ETH_ALEN)!=0 );
1336		ssidset = ieee->ssid_set;//ieee->current_network.ssid[0] != '\0';
1337		ssidbroad =  !(net->ssid_len == 0 || net->ssid[0]== '\0');
1338		apmatch = (memcmp(ieee->current_network.bssid, net->bssid, ETH_ALEN)==0);
1339
1340		if(ieee->current_network.ssid_len != net->ssid_len)
1341			ssidmatch = 0;
1342		else
1343			ssidmatch = (0==strncmp(ieee->current_network.ssid, net->ssid, net->ssid_len));
1344
1345		//printk("cur: %s, %d, net:%s, %d\n", ieee->current_network.ssid, ieee->current_network.ssid_len, net->ssid, net->ssid_len);
1346		//printk("apset=%d apmatch=%d ssidset=%d ssidbroad=%d ssidmatch=%d\n",apset,apmatch,ssidset,ssidbroad,ssidmatch);
1347
1348		if (	/* if the user set the AP check if match.
1349			 * if the network does not broadcast essid we check the user supplyed ANY essid
1350			 * if the network does broadcast and the user does not set essid it is OK
1351			 * if the network does broadcast and the user did set essid chech if essid match
1352			 */
1353				( apset && apmatch &&
1354				  ((ssidset && ssidbroad && ssidmatch) || (ssidbroad && !ssidset) || (!ssidbroad && ssidset)) ) ||
1355				/* if the ap is not set, check that the user set the bssid
1356				 * and the network does bradcast and that those two bssid matches
1357				 */
1358				(!apset && ssidset && ssidbroad && ssidmatch)
1359		   ){
1360
1361
1362			/* if the essid is hidden replace it with the
1363			 * essid provided by the user.
1364			 */
1365			if (!ssidbroad){
1366				strncpy(tmp_ssid, ieee->current_network.ssid, IW_ESSID_MAX_SIZE);
1367				tmp_ssid_len = ieee->current_network.ssid_len;
1368			}
1369			memcpy(&ieee->current_network, net, sizeof(struct ieee80211_network));
1370
1371			if (!ssidbroad){
1372				strncpy(ieee->current_network.ssid, tmp_ssid, IW_ESSID_MAX_SIZE);
1373				ieee->current_network.ssid_len = tmp_ssid_len;
1374			}
1375			printk(KERN_INFO"Linking with %s: channel is %d\n",ieee->current_network.ssid,ieee->current_network.channel);
1376
1377			if (ieee->iw_mode == IW_MODE_INFRA){
1378				ieee->state = IEEE80211_ASSOCIATING;
1379				ieee->beinretry = false;
1380				queue_work(ieee->wq, &ieee->associate_procedure_wq);
1381			}else{
1382				if(ieee80211_is_54g(ieee->current_network) &&
1383						(ieee->modulation & IEEE80211_OFDM_MODULATION)){
1384					ieee->rate = 540;
1385					printk(KERN_INFO"Using G rates\n");
1386				}else{
1387					ieee->rate = 110;
1388					printk(KERN_INFO"Using B rates\n");
1389				}
1390				ieee->state = IEEE80211_LINKED;
1391				ieee->beinretry = false;
1392			}
1393
1394		}
1395	}
1396
1397}
1398
1399void ieee80211_softmac_check_all_nets(struct ieee80211_device *ieee)
1400{
1401	unsigned long flags;
1402	struct ieee80211_network *target;
1403
1404	spin_lock_irqsave(&ieee->lock, flags);
1405	list_for_each_entry(target, &ieee->network_list, list) {
1406
1407		/* if the state become different that NOLINK means
1408		 * we had found what we are searching for
1409		 */
1410
1411		if (ieee->state != IEEE80211_NOLINK)
1412			break;
1413
1414		if (ieee->scan_age == 0 || time_after(target->last_scanned + ieee->scan_age, jiffies))
1415			ieee80211_softmac_new_net(ieee, target);
1416	}
1417
1418	spin_unlock_irqrestore(&ieee->lock, flags);
1419
1420}
1421
1422
1423static inline u16 auth_parse(struct sk_buff *skb, u8** challenge, int *chlen)
1424{
1425	struct ieee80211_authentication *a;
1426	u8 *t;
1427	if (skb->len <  (sizeof(struct ieee80211_authentication)-sizeof(struct ieee80211_info_element))){
1428		IEEE80211_DEBUG_MGMT("invalid len in auth resp: %d\n",skb->len);
1429		return 0xcafe;
1430	}
1431	*challenge = NULL;
1432	a = (struct ieee80211_authentication*) skb->data;
1433	if(skb->len > (sizeof(struct ieee80211_authentication) +3)){
1434		t = skb->data + sizeof(struct ieee80211_authentication);
1435
1436		if(*(t++) == MFIE_TYPE_CHALLENGE){
1437			*chlen = *(t++);
1438			*challenge = kmemdup(t, *chlen, GFP_ATOMIC);
1439			if (!*challenge)
1440				return -ENOMEM;
1441		}
1442	}
1443
1444	return cpu_to_le16(a->status);
1445
1446}
1447
1448
1449int auth_rq_parse(struct sk_buff *skb,u8* dest)
1450{
1451	struct ieee80211_authentication *a;
1452
1453	if (skb->len <  (sizeof(struct ieee80211_authentication)-sizeof(struct ieee80211_info_element))){
1454		IEEE80211_DEBUG_MGMT("invalid len in auth request: %d\n",skb->len);
1455		return -1;
1456	}
1457	a = (struct ieee80211_authentication*) skb->data;
1458
1459	memcpy(dest,a->header.addr2, ETH_ALEN);
1460
1461	if (le16_to_cpu(a->algorithm) != WLAN_AUTH_OPEN)
1462		return  WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG;
1463
1464	return WLAN_STATUS_SUCCESS;
1465}
1466
1467static short probe_rq_parse(struct ieee80211_device *ieee, struct sk_buff *skb, u8 *src)
1468{
1469	u8 *tag;
1470	u8 *skbend;
1471	u8 *ssid=NULL;
1472	u8 ssidlen = 0;
1473
1474	struct ieee80211_hdr_3addr   *header =
1475		(struct ieee80211_hdr_3addr   *) skb->data;
1476
1477	if (skb->len < sizeof (struct ieee80211_hdr_3addr  ))
1478		return -1; /* corrupted */
1479
1480	memcpy(src,header->addr2, ETH_ALEN);
1481
1482	skbend = (u8*)skb->data + skb->len;
1483
1484	tag = skb->data + sizeof (struct ieee80211_hdr_3addr  );
1485
1486	while (tag+1 < skbend){
1487		if (*tag == 0){
1488			ssid = tag+2;
1489			ssidlen = *(tag+1);
1490			break;
1491		}
1492		tag++; /* point to the len field */
1493		tag = tag + *(tag); /* point to the last data byte of the tag */
1494		tag++; /* point to the next tag */
1495	}
1496
1497	//IEEE80211DMESG("Card MAC address is "MACSTR, MAC2STR(src));
1498	if (ssidlen == 0) return 1;
1499
1500	if (!ssid) return 1; /* ssid not found in tagged param */
1501	return (!strncmp(ssid, ieee->current_network.ssid, ssidlen));
1502
1503}
1504
1505int assoc_rq_parse(struct sk_buff *skb,u8* dest)
1506{
1507	struct ieee80211_assoc_request_frame *a;
1508
1509	if (skb->len < (sizeof(struct ieee80211_assoc_request_frame) -
1510		sizeof(struct ieee80211_info_element))) {
1511
1512		IEEE80211_DEBUG_MGMT("invalid len in auth request:%d \n", skb->len);
1513		return -1;
1514	}
1515
1516	a = (struct ieee80211_assoc_request_frame*) skb->data;
1517
1518	memcpy(dest,a->header.addr2,ETH_ALEN);
1519
1520	return 0;
1521}
1522
1523static inline u16 assoc_parse(struct sk_buff *skb, int *aid)
1524{
1525	struct ieee80211_assoc_response_frame *a;
1526	if (skb->len <  sizeof(struct ieee80211_assoc_response_frame)){
1527		IEEE80211_DEBUG_MGMT("invalid len in auth resp: %d\n", skb->len);
1528		return 0xcafe;
1529	}
1530
1531	a = (struct ieee80211_assoc_response_frame*) skb->data;
1532	*aid = le16_to_cpu(a->aid) & 0x3fff;
1533	return le16_to_cpu(a->status);
1534}
1535
1536static inline void
1537ieee80211_rx_probe_rq(struct ieee80211_device *ieee, struct sk_buff *skb)
1538{
1539	u8 dest[ETH_ALEN];
1540
1541	//IEEE80211DMESG("Rx probe");
1542	ieee->softmac_stats.rx_probe_rq++;
1543	//DMESG("Dest is "MACSTR, MAC2STR(dest));
1544	if (probe_rq_parse(ieee, skb, dest)){
1545		//IEEE80211DMESG("Was for me!");
1546		ieee->softmac_stats.tx_probe_rs++;
1547		ieee80211_resp_to_probe(ieee, dest);
1548	}
1549}
1550
1551inline void
1552ieee80211_rx_auth_rq(struct ieee80211_device *ieee, struct sk_buff *skb)
1553{
1554	u8 dest[ETH_ALEN];
1555	int status;
1556	//IEEE80211DMESG("Rx probe");
1557	ieee->softmac_stats.rx_auth_rq++;
1558
1559	status = auth_rq_parse(skb, dest);
1560	if (status != -1) {
1561		ieee80211_resp_to_auth(ieee, status, dest);
1562	}
1563	//DMESG("Dest is "MACSTR, MAC2STR(dest));
1564
1565}
1566
1567 inline void
1568ieee80211_rx_assoc_rq(struct ieee80211_device *ieee, struct sk_buff *skb)
1569{
1570
1571	u8 dest[ETH_ALEN];
1572	//unsigned long flags;
1573
1574	ieee->softmac_stats.rx_ass_rq++;
1575	if (assoc_rq_parse(skb,dest) != -1){
1576		ieee80211_resp_to_assoc_rq(ieee, dest);
1577	}
1578
1579	printk(KERN_INFO"New client associated: %pM\n", dest);
1580}
1581
1582
1583
1584void ieee80211_sta_ps_send_null_frame(struct ieee80211_device *ieee, short pwr)
1585{
1586
1587	struct sk_buff *buf = ieee80211_null_func(ieee, pwr);
1588
1589	if (buf)
1590		softmac_ps_mgmt_xmit(buf, ieee);
1591
1592}
1593
1594
1595short ieee80211_sta_ps_sleep(struct ieee80211_device *ieee, u32 *time_h, u32 *time_l)
1596{
1597        int timeout = 0;
1598
1599	u8 dtim;
1600	/*if(ieee->ps == IEEE80211_PS_DISABLED ||
1601		ieee->iw_mode != IW_MODE_INFRA ||
1602		ieee->state != IEEE80211_LINKED)
1603
1604		return 0;
1605	*/
1606	dtim = ieee->current_network.dtim_data;
1607	//printk("DTIM\n");
1608
1609	if(!(dtim & IEEE80211_DTIM_VALID))
1610		return 0;
1611        else
1612                timeout = ieee->current_network.beacon_interval;
1613
1614	//printk("VALID\n");
1615	ieee->current_network.dtim_data = IEEE80211_DTIM_INVALID;
1616
1617	if(dtim & ((IEEE80211_DTIM_UCAST | IEEE80211_DTIM_MBCAST)& ieee->ps))
1618		return 2;
1619
1620	if(!time_after(jiffies, ieee->dev->trans_start + MSECS(timeout)))
1621		return 0;
1622
1623	if(!time_after(jiffies, ieee->last_rx_ps_time + MSECS(timeout)))
1624		return 0;
1625
1626	if((ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE ) &&
1627		(ieee->mgmt_queue_tail != ieee->mgmt_queue_head))
1628		return 0;
1629
1630	if(time_l){
1631		*time_l = ieee->current_network.last_dtim_sta_time[0]
1632			+ MSECS((ieee->current_network.beacon_interval));
1633			//* ieee->current_network.dtim_period));
1634			//printk("beacon_interval:%x, dtim_period:%x, totol to Msecs:%x, HZ:%x\n", ieee->current_network.beacon_interval, ieee->current_network.dtim_period, MSECS(((ieee->current_network.beacon_interval * ieee->current_network.dtim_period))), HZ);
1635	}
1636
1637	if(time_h){
1638		*time_h = ieee->current_network.last_dtim_sta_time[1];
1639		if(time_l && *time_l < ieee->current_network.last_dtim_sta_time[0])
1640			*time_h += 1;
1641	}
1642
1643	return 1;
1644
1645
1646}
1647
1648inline void ieee80211_sta_ps(struct ieee80211_device *ieee)
1649{
1650
1651	u32 th,tl;
1652	short sleep;
1653
1654	unsigned long flags,flags2;
1655
1656	spin_lock_irqsave(&ieee->lock, flags);
1657
1658	if((ieee->ps == IEEE80211_PS_DISABLED ||
1659
1660		ieee->iw_mode != IW_MODE_INFRA ||
1661		ieee->state != IEEE80211_LINKED)){
1662
1663		//#warning CHECK_LOCK_HERE
1664		spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2);
1665
1666		ieee80211_sta_wakeup(ieee, 1);
1667
1668		spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2);
1669	}
1670
1671	sleep = ieee80211_sta_ps_sleep(ieee,&th, &tl);
1672//	printk("===>%s,%d[2 wake, 1 sleep, 0 do nothing], ieee->sta_sleep = %d\n",__func__, sleep,ieee->sta_sleep);
1673	/* 2 wake, 1 sleep, 0 do nothing */
1674	if(sleep == 0)
1675		goto out;
1676
1677	if(sleep == 1){
1678
1679		if(ieee->sta_sleep == 1)
1680			ieee->enter_sleep_state(ieee->dev,th,tl);
1681
1682		else if(ieee->sta_sleep == 0){
1683	//		printk("send null 1\n");
1684			spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2);
1685
1686			if(ieee->ps_is_queue_empty(ieee->dev)){
1687
1688
1689				ieee->sta_sleep = 2;
1690
1691				ieee->ps_request_tx_ack(ieee->dev);
1692
1693				ieee80211_sta_ps_send_null_frame(ieee,1);
1694
1695				ieee->ps_th = th;
1696				ieee->ps_tl = tl;
1697			}
1698			spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2);
1699
1700		}
1701
1702
1703	}else if(sleep == 2){
1704//#warning CHECK_LOCK_HERE
1705		spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2);
1706
1707	//	printk("send wakeup packet\n");
1708		ieee80211_sta_wakeup(ieee,1);
1709
1710		spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2);
1711	}
1712
1713out:
1714	spin_unlock_irqrestore(&ieee->lock, flags);
1715
1716}
1717
1718void ieee80211_sta_wakeup(struct ieee80211_device *ieee, short nl)
1719{
1720	if(ieee->sta_sleep == 0){
1721		if(nl){
1722		//	printk("Warning: driver is probably failing to report TX ps error\n");
1723			ieee->ps_request_tx_ack(ieee->dev);
1724			ieee80211_sta_ps_send_null_frame(ieee, 0);
1725		}
1726		return;
1727
1728	}
1729
1730	if(ieee->sta_sleep == 1)
1731		ieee->sta_wake_up(ieee->dev);
1732
1733	ieee->sta_sleep = 0;
1734
1735	if(nl){
1736		ieee->ps_request_tx_ack(ieee->dev);
1737		ieee80211_sta_ps_send_null_frame(ieee, 0);
1738	}
1739}
1740
1741void ieee80211_ps_tx_ack(struct ieee80211_device *ieee, short success)
1742{
1743	unsigned long flags,flags2;
1744
1745	spin_lock_irqsave(&ieee->lock, flags);
1746	if(ieee->sta_sleep == 2){
1747		/* Null frame with PS bit set */
1748		if(success){
1749
1750		//	printk("==================> %s::enter sleep state\n",__func__);
1751			ieee->sta_sleep = 1;
1752			ieee->enter_sleep_state(ieee->dev,ieee->ps_th,ieee->ps_tl);
1753		}
1754		/* if the card report not success we can't be sure the AP
1755		 * has not RXed so we can't assume the AP believe us awake
1756		 */
1757	}
1758	/* 21112005 - tx again null without PS bit if lost */
1759	else {
1760
1761		if((ieee->sta_sleep == 0) && !success){
1762			spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2);
1763			ieee80211_sta_ps_send_null_frame(ieee, 0);
1764			spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2);
1765		}
1766	}
1767	spin_unlock_irqrestore(&ieee->lock, flags);
1768}
1769
1770inline int
1771ieee80211_rx_frame_softmac(struct ieee80211_device *ieee, struct sk_buff *skb,
1772			struct ieee80211_rx_stats *rx_stats, u16 type,
1773			u16 stype)
1774{
1775	struct ieee80211_hdr_3addr *header = (struct ieee80211_hdr_3addr *) skb->data;
1776	u16 errcode;
1777	u8* challenge=NULL;
1778	int chlen=0;
1779	int aid=0;
1780	struct ieee80211_assoc_response_frame *assoc_resp;
1781	struct ieee80211_info_element *info_element;
1782
1783	if(!ieee->proto_started)
1784		return 0;
1785
1786	if(ieee->sta_sleep || (ieee->ps != IEEE80211_PS_DISABLED &&
1787		ieee->iw_mode == IW_MODE_INFRA &&
1788		ieee->state == IEEE80211_LINKED))
1789
1790		tasklet_schedule(&ieee->ps_task);
1791
1792	if (WLAN_FC_GET_STYPE(header->frame_control) != IEEE80211_STYPE_PROBE_RESP &&
1793		WLAN_FC_GET_STYPE(header->frame_control) != IEEE80211_STYPE_BEACON)
1794		ieee->last_rx_ps_time = jiffies;
1795
1796	switch (WLAN_FC_GET_STYPE(header->frame_control)) {
1797
1798		case IEEE80211_STYPE_ASSOC_RESP:
1799		case IEEE80211_STYPE_REASSOC_RESP:
1800
1801			IEEE80211_DEBUG_MGMT("received [RE]ASSOCIATION RESPONSE (%d)\n",
1802					WLAN_FC_GET_STYPE(header->frame_ctl));
1803			if ((ieee->softmac_features & IEEE_SOFTMAC_ASSOCIATE) &&
1804				ieee->state == IEEE80211_ASSOCIATING_AUTHENTICATED &&
1805				ieee->iw_mode == IW_MODE_INFRA){
1806				if (0 == (errcode=assoc_parse(skb, &aid))){
1807					u16 left;
1808
1809					ieee->state=IEEE80211_LINKED;
1810					ieee->assoc_id = aid;
1811					ieee->softmac_stats.rx_ass_ok++;
1812
1813					//printk(KERN_WARNING "nic_type = %s", (rx_stats->nic_type == 1)?"rtl8187":"rtl8187B");
1814					if(1 == rx_stats->nic_type) //card type is 8187
1815					{
1816						goto associate_complete;
1817					}
1818					assoc_resp = (struct ieee80211_assoc_response_frame*)skb->data;
1819					info_element = 	&assoc_resp->info_element;
1820					left = skb->len - ((void*)info_element - (void*)assoc_resp);
1821
1822					while (left >= sizeof(struct ieee80211_info_element_hdr)) {
1823						if (sizeof(struct ieee80211_info_element_hdr) + info_element->len > left) {
1824							printk(KERN_WARNING "[re]associate reeponse error!");
1825							return 1;
1826						}
1827						switch (info_element->id) {
1828						  case MFIE_TYPE_GENERIC:
1829						         IEEE80211_DEBUG_SCAN("MFIE_TYPE_GENERIC: %d bytes\n", info_element->len);
1830							if (info_element->len >= 8  &&
1831							    info_element->data[0] == 0x00 &&
1832							    info_element->data[1] == 0x50 &&
1833							    info_element->data[2] == 0xf2 &&
1834							    info_element->data[3] == 0x02 &&
1835							    info_element->data[4] == 0x01) {
1836							    // Not care about version at present.
1837							    //WMM Parameter Element
1838							    memcpy(ieee->current_network.wmm_param,(u8*)(info_element->data\
1839										    + 8),(info_element->len - 8));
1840
1841					 	            if (((ieee->current_network.wmm_info^info_element->data[6])& \
1842										    0x0f)||(!ieee->init_wmmparam_flag)) {
1843						   	      // refresh parameter element for current netw…

Large files files are truncated, but you can click here to view the full file