1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _IOCTL_LINUX_C_
8 
9 #include <linux/etherdevice.h>
10 #include <drv_types.h>
11 #include <rtw_debug.h>
12 #include <rtw_mp.h>
13 #include <linux/jiffies.h>
14 #include <linux/kernel.h>
15 
16 #define RTL_IOCTL_WPA_SUPPLICANT	(SIOCIWFIRSTPRIV+30)
17 
18 #define SCAN_ITEM_SIZE 768
19 #define MAX_CUSTOM_LEN 64
20 #define RATE_COUNT 4
21 
22 /*  combo scan */
23 #define WEXT_CSCAN_AMOUNT 9
24 #define WEXT_CSCAN_BUF_LEN		360
25 #define WEXT_CSCAN_HEADER		"CSCAN S\x01\x00\x00S\x00"
26 #define WEXT_CSCAN_HEADER_SIZE		12
27 #define WEXT_CSCAN_SSID_SECTION		'S'
28 #define WEXT_CSCAN_CHANNEL_SECTION	'C'
29 #define WEXT_CSCAN_NPROBE_SECTION	'N'
30 #define WEXT_CSCAN_ACTV_DWELL_SECTION	'A'
31 #define WEXT_CSCAN_PASV_DWELL_SECTION	'P'
32 #define WEXT_CSCAN_HOME_DWELL_SECTION	'H'
33 #define WEXT_CSCAN_TYPE_SECTION		'T'
34 
35 static u32 rtw_rates[] = {1000000, 2000000, 5500000, 11000000,
36 	6000000, 9000000, 12000000, 18000000, 24000000, 36000000, 48000000, 54000000};
37 
38 static const char * const iw_operation_mode[] = {
39 	"Auto", "Ad-Hoc", "Managed",  "Master", "Repeater", "Secondary", "Monitor"
40 };
41 
indicate_wx_scan_complete_event(struct adapter * padapter)42 void indicate_wx_scan_complete_event(struct adapter *padapter)
43 {
44 	union iwreq_data wrqu;
45 
46 	memset(&wrqu, 0, sizeof(union iwreq_data));
47 
48 	/* DBG_871X("+rtw_indicate_wx_scan_complete_event\n"); */
49 }
50 
51 
rtw_indicate_wx_assoc_event(struct adapter * padapter)52 void rtw_indicate_wx_assoc_event(struct adapter *padapter)
53 {
54 	union iwreq_data wrqu;
55 	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
56 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
57 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
58 	struct wlan_bssid_ex		*pnetwork = (struct wlan_bssid_ex*)(&(pmlmeinfo->network));
59 
60 	memset(&wrqu, 0, sizeof(union iwreq_data));
61 
62 	wrqu.ap_addr.sa_family = ARPHRD_ETHER;
63 
64 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ==true)
65 		memcpy(wrqu.ap_addr.sa_data, pnetwork->MacAddress, ETH_ALEN);
66 	else
67 		memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
68 
69 	DBG_871X_LEVEL(_drv_always_, "assoc success\n");
70 }
71 
rtw_indicate_wx_disassoc_event(struct adapter * padapter)72 void rtw_indicate_wx_disassoc_event(struct adapter *padapter)
73 {
74 	union iwreq_data wrqu;
75 
76 	memset(&wrqu, 0, sizeof(union iwreq_data));
77 
78 	wrqu.ap_addr.sa_family = ARPHRD_ETHER;
79 	eth_zero_addr(wrqu.ap_addr.sa_data);
80 }
81 
translate_scan(struct adapter * padapter,struct iw_request_info * info,struct wlan_network * pnetwork,char * start,char * stop)82 static char *translate_scan(struct adapter *padapter,
83 				struct iw_request_info* info, struct wlan_network *pnetwork,
84 				char *start, char *stop)
85 {
86 	struct iw_event iwe;
87 	u16 cap;
88 	u32 ht_ielen = 0;
89 	char *custom = NULL;
90 	char *p;
91 	u16 max_rate = 0, rate, ht_cap =false, vht_cap = false;
92 	u32 i = 0;
93 	u8 bw_40MHz = 0, short_GI = 0;
94 	u16 mcs_rate = 0, vht_data_rate = 0;
95 	u8 ie_offset = (pnetwork->network.Reserved[0] == 2? 0:12);
96 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
97 	u8 ss, sq;
98 
99 	/*  AP MAC address  */
100 	iwe.cmd = SIOCGIWAP;
101 	iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
102 
103 	memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
104 	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
105 
106 	/* Add the ESSID */
107 	iwe.cmd = SIOCGIWESSID;
108 	iwe.u.data.flags = 1;
109 	iwe.u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
110 	start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
111 
112 	/* parsing HT_CAP_IE */
113 	if (pnetwork->network.Reserved[0] == 2) { /*  Probe Request */
114 		p = rtw_get_ie(&pnetwork->network.IEs[0], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength);
115 	} else {
116 		p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
117 	}
118 	if (p && ht_ielen>0) {
119 		struct rtw_ieee80211_ht_cap *pht_capie;
120 		ht_cap = true;
121 		pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
122 		memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
123 		bw_40MHz = (le16_to_cpu(pht_capie->cap_info) & IEEE80211_HT_CAP_SUP_WIDTH) ? 1 : 0;
124 		short_GI = (le16_to_cpu(pht_capie->cap_info) & (IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40)) ? 1 : 0;
125 	}
126 
127 	/* Add the protocol name */
128 	iwe.cmd = SIOCGIWNAME;
129 	if (rtw_is_cckratesonly_included((u8 *)&pnetwork->network.SupportedRates)) {
130 		if (ht_cap)
131 			snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
132 		else
133 		snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
134 	} else if (rtw_is_cckrates_included((u8 *)&pnetwork->network.SupportedRates)) {
135 		if (ht_cap)
136 			snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
137 		else
138 			snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
139 	} else {
140 		if (pnetwork->network.Configuration.DSConfig > 14) {
141 			if (vht_cap)
142 				snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11AC");
143 			else if (ht_cap)
144 				snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
145 			else
146 				snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
147 		} else {
148 			if (ht_cap)
149 				snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
150 			else
151 				snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
152 		}
153 	}
154 
155 	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
156 
157 	  /* Add mode */
158 	if (pnetwork->network.Reserved[0] == 2) { /*  Probe Request */
159 		cap = 0;
160 	} else {
161 		__le16 le_tmp;
162 
163 	        iwe.cmd = SIOCGIWMODE;
164 		memcpy((u8 *)&le_tmp, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
165 		cap = le16_to_cpu(le_tmp);
166 	}
167 
168 	if (cap & (WLAN_CAPABILITY_IBSS |WLAN_CAPABILITY_BSS)) {
169 		if (cap & WLAN_CAPABILITY_BSS)
170 			iwe.u.mode = IW_MODE_MASTER;
171 		else
172 			iwe.u.mode = IW_MODE_ADHOC;
173 
174 		start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
175 	}
176 
177 	if (pnetwork->network.Configuration.DSConfig<1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
178 		pnetwork->network.Configuration.DSConfig = 1;
179 
180 	 /* Add frequency/channel */
181 	iwe.cmd = SIOCGIWFREQ;
182 	iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
183 	iwe.u.freq.e = 1;
184 	iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
185 	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
186 
187 	/* Add encryption capability */
188 	iwe.cmd = SIOCGIWENCODE;
189 	if (cap & WLAN_CAPABILITY_PRIVACY)
190 		iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
191 	else
192 		iwe.u.data.flags = IW_ENCODE_DISABLED;
193 	iwe.u.data.length = 0;
194 	start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
195 
196 	/*Add basic and extended rates */
197 	max_rate = 0;
198 	custom = kzalloc(MAX_CUSTOM_LEN, GFP_ATOMIC);
199 	if (!custom)
200 		return start;
201 	p = custom;
202 	p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
203 	while (pnetwork->network.SupportedRates[i]!= 0) {
204 		rate = pnetwork->network.SupportedRates[i]&0x7F;
205 		if (rate > max_rate)
206 			max_rate = rate;
207 		p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
208 			      "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
209 		i++;
210 	}
211 
212 	if (vht_cap == true) {
213 		max_rate = vht_data_rate;
214 	} else if (ht_cap == true) {
215 		if (mcs_rate&0x8000) { /* MCS15 */
216 			max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
217 		} else if (mcs_rate&0x0080) { /* MCS7 */
218 			max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
219 		} else { /* default MCS7 */
220 			/* DBG_871X("wx_get_scan, mcs_rate_bitmap = 0x%x\n", mcs_rate); */
221 			max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
222 		}
223 
224 		max_rate = max_rate*2;/* Mbps/2; */
225 	}
226 
227 	iwe.cmd = SIOCGIWRATE;
228 	iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
229 	iwe.u.bitrate.value = max_rate * 500000;
230 	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
231 
232 	/* parsing WPA/WPA2 IE */
233 	if (pnetwork->network.Reserved[0] != 2) { /*  Probe Request */
234 		u8 *buf;
235 		u8 wpa_ie[255], rsn_ie[255];
236 		u16 wpa_len = 0, rsn_len = 0;
237 		u8 *p;
238 		sint out_len = 0;
239 		out_len =rtw_get_sec_ie(pnetwork->network.IEs , pnetwork->network.IELength, rsn_ie,&rsn_len, wpa_ie,&wpa_len);
240 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan: ssid =%s\n", pnetwork->network.Ssid.Ssid));
241 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan: wpa_len =%d rsn_len =%d\n", wpa_len, rsn_len));
242 
243 		buf = kzalloc(MAX_WPA_IE_LEN*2, GFP_ATOMIC);
244 		if (!buf)
245 			return start;
246 		if (wpa_len > 0) {
247 			p =buf;
248 			p += sprintf(p, "wpa_ie =");
249 			for (i = 0; i < wpa_len; i++)
250 				p += sprintf(p, "%02x", wpa_ie[i]);
251 
252 			if (wpa_len > 100) {
253 				printk("-----------------Len %d----------------\n", wpa_len);
254 				for (i = 0; i < wpa_len; i++)
255 					printk("%02x ", wpa_ie[i]);
256 				printk("\n");
257 				printk("-----------------Len %d----------------\n", wpa_len);
258 			}
259 
260 			memset(&iwe, 0, sizeof(iwe));
261 			iwe.cmd = IWEVCUSTOM;
262 			iwe.u.data.length = strlen(buf);
263 			start = iwe_stream_add_point(info, start, stop, &iwe, buf);
264 
265 			memset(&iwe, 0, sizeof(iwe));
266 			iwe.cmd =IWEVGENIE;
267 			iwe.u.data.length = wpa_len;
268 			start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
269 		}
270 		if (rsn_len > 0) {
271 			p = buf;
272 			memset(buf, 0, MAX_WPA_IE_LEN*2);
273 			p += sprintf(p, "rsn_ie =");
274 			for (i = 0; i < rsn_len; i++)
275 				p += sprintf(p, "%02x", rsn_ie[i]);
276 			memset(&iwe, 0, sizeof(iwe));
277 			iwe.cmd = IWEVCUSTOM;
278 			iwe.u.data.length = strlen(buf);
279 			start = iwe_stream_add_point(info, start, stop, &iwe, buf);
280 
281 			memset(&iwe, 0, sizeof(iwe));
282 			iwe.cmd =IWEVGENIE;
283 			iwe.u.data.length = rsn_len;
284 			start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
285 		}
286 		kfree(buf);
287 	}
288 
289 	{ /* parsing WPS IE */
290 		uint cnt = 0, total_ielen;
291 		u8 *wpsie_ptr = NULL;
292 		uint wps_ielen = 0;
293 
294 		u8 *ie_ptr;
295 		total_ielen = pnetwork->network.IELength - ie_offset;
296 
297 		if (pnetwork->network.Reserved[0] == 2) { /*  Probe Request */
298 			ie_ptr = pnetwork->network.IEs;
299 			total_ielen = pnetwork->network.IELength;
300 		} else {    /*  Beacon or Probe Respones */
301 			ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
302 			total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
303 		}
304 
305 		while (cnt < total_ielen) {
306 			if (rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2)) {
307 				wpsie_ptr = &ie_ptr[cnt];
308 				iwe.cmd =IWEVGENIE;
309 				iwe.u.data.length = (u16)wps_ielen;
310 				start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
311 			}
312 			cnt+=ie_ptr[cnt+1]+2; /* goto next */
313 		}
314 	}
315 
316 	/* Add quality statistics */
317 	iwe.cmd = IWEVQUAL;
318 	iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED
319 	#if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
320 		| IW_QUAL_NOISE_UPDATED
321 	#else
322 		| IW_QUAL_NOISE_INVALID
323 	#endif
324 	#ifdef CONFIG_SIGNAL_DISPLAY_DBM
325 		| IW_QUAL_DBM
326 	#endif
327 	;
328 
329 	if (check_fwstate(pmlmepriv, _FW_LINKED) == true &&
330 		is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network, 0)) {
331 		ss = padapter->recvpriv.signal_strength;
332 		sq = padapter->recvpriv.signal_qual;
333 	} else {
334 		ss = pnetwork->network.PhyInfo.SignalStrength;
335 		sq = pnetwork->network.PhyInfo.SignalQuality;
336 	}
337 
338 
339 	#ifdef CONFIG_SIGNAL_DISPLAY_DBM
340 	iwe.u.qual.level = (u8) translate_percentage_to_dbm(ss);/* dbm */
341 	#else
342 	#ifdef CONFIG_SKIP_SIGNAL_SCALE_MAPPING
343 	{
344 		/* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
345 
346 		struct hal_com_data *pHal = GET_HAL_DATA(padapter);
347 
348 		iwe.u.qual.level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, ss);
349 	}
350 	#else
351 	iwe.u.qual.level = (u8)ss;/*  */
352 	#endif
353 	#endif
354 
355 	iwe.u.qual.qual = (u8)sq;   /*  signal quality */
356 
357 	#if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
358 	{
359 		s16 tmp_noise = 0;
360 		rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&(pnetwork->network.Configuration.DSConfig), &(tmp_noise));
361 		iwe.u.qual.noise = tmp_noise ;
362 	}
363 	#else
364 	iwe.u.qual.noise = 0; /*  noise level */
365 	#endif
366 
367 	/* DBG_871X("iqual =%d, ilevel =%d, inoise =%d, iupdated =%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated); */
368 
369 	start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
370 
371 	{
372 		u8 *buf;
373 		u8 *p, *pos;
374 
375 		buf = kzalloc(MAX_WPA_IE_LEN, GFP_ATOMIC);
376 		if (!buf)
377 			goto exit;
378 		p = buf;
379 		pos = pnetwork->network.Reserved;
380 		p += sprintf(p, "fm =%02X%02X", pos[1], pos[0]);
381 		memset(&iwe, 0, sizeof(iwe));
382 		iwe.cmd = IWEVCUSTOM;
383 		iwe.u.data.length = strlen(buf);
384 		start = iwe_stream_add_point(info, start, stop, &iwe, buf);
385 		kfree(buf);
386 	}
387 exit:
388 	kfree(custom);
389 
390 	return start;
391 }
392 
wpa_set_auth_algs(struct net_device * dev,u32 value)393 static int wpa_set_auth_algs(struct net_device *dev, u32 value)
394 {
395 	struct adapter *padapter = (struct adapter *) rtw_netdev_priv(dev);
396 	int ret = 0;
397 
398 	if ((value & WLAN_AUTH_SHARED_KEY) && (value & WLAN_AUTH_OPEN)) {
399 		DBG_871X("wpa_set_auth_algs, WLAN_AUTH_SHARED_KEY and WLAN_AUTH_OPEN [value:0x%x]\n", value);
400 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
401 		padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
402 		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
403 	} else if (value & WLAN_AUTH_SHARED_KEY)	{
404 		DBG_871X("wpa_set_auth_algs, WLAN_AUTH_SHARED_KEY  [value:0x%x]\n", value);
405 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
406 
407 		padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
408 		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
409 	} else if (value & WLAN_AUTH_OPEN) {
410 		DBG_871X("wpa_set_auth_algs, WLAN_AUTH_OPEN\n");
411 		/* padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled; */
412 		if (padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK) {
413 			padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
414 			padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
415 		}
416 	} else if (value & WLAN_AUTH_LEAP) {
417 		DBG_871X("wpa_set_auth_algs, WLAN_AUTH_LEAP\n");
418 	} else {
419 		DBG_871X("wpa_set_auth_algs, error!\n");
420 		ret = -EINVAL;
421 	}
422 
423 	return ret;
424 
425 }
426 
wpa_set_encryption(struct net_device * dev,struct ieee_param * param,u32 param_len)427 static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
428 {
429 	int ret = 0;
430 	u32 wep_key_idx, wep_key_len, wep_total_len;
431 	struct ndis_802_11_wep	 *pwep = NULL;
432 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
433 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
434 	struct security_priv *psecuritypriv = &padapter->securitypriv;
435 
436 	param->u.crypt.err = 0;
437 	param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
438 
439 	if (param_len < (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len) {
440 		ret =  -EINVAL;
441 		goto exit;
442 	}
443 
444 	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
445 	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
446 	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
447 		if (param->u.crypt.idx >= WEP_KEYS ||
448 		    param->u.crypt.idx >= BIP_MAX_KEYID) {
449 			ret = -EINVAL;
450 			goto exit;
451 		}
452 	} else {
453 		{
454 			ret = -EINVAL;
455 			goto exit;
456 		}
457 	}
458 
459 	if (strcmp(param->u.crypt.alg, "WEP") == 0) {
460 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("wpa_set_encryption, crypt.alg = WEP\n"));
461 		DBG_871X("wpa_set_encryption, crypt.alg = WEP\n");
462 
463 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
464 		padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
465 		padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
466 
467 		wep_key_idx = param->u.crypt.idx;
468 		wep_key_len = param->u.crypt.key_len;
469 
470 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("(1)wep_key_idx =%d\n", wep_key_idx));
471 		DBG_871X("(1)wep_key_idx =%d\n", wep_key_idx);
472 
473 		if (wep_key_idx > WEP_KEYS)
474 			return -EINVAL;
475 
476 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("(2)wep_key_idx =%d\n", wep_key_idx));
477 
478 		if (wep_key_len > 0) {
479 			wep_key_len = wep_key_len <= 5 ? 5 : 13;
480 			wep_total_len = wep_key_len + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
481 			pwep = rtw_malloc(wep_total_len);
482 			if (pwep == NULL) {
483 				RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, (" wpa_set_encryption: pwep allocate fail !!!\n"));
484 				goto exit;
485 			}
486 
487 			memset(pwep, 0, wep_total_len);
488 
489 			pwep->KeyLength = wep_key_len;
490 			pwep->Length = wep_total_len;
491 
492 			if (wep_key_len == 13) {
493 				padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
494 				padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
495 			}
496 		} else {
497 			ret = -EINVAL;
498 			goto exit;
499 		}
500 
501 		pwep->KeyIndex = wep_key_idx;
502 		pwep->KeyIndex |= 0x80000000;
503 
504 		memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
505 
506 		if (param->u.crypt.set_tx) {
507 			DBG_871X("wep, set_tx = 1\n");
508 
509 			if (rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
510 				ret = -EOPNOTSUPP ;
511 		} else {
512 			DBG_871X("wep, set_tx = 0\n");
513 
514 			/* don't update "psecuritypriv->dot11PrivacyAlgrthm" and */
515 			/* psecuritypriv->dot11PrivacyKeyIndex =keyid", but can rtw_set_key to fw/cam */
516 
517 			if (wep_key_idx >= WEP_KEYS) {
518 				ret = -EOPNOTSUPP ;
519 				goto exit;
520 			}
521 
522 			memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
523 			psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
524 			rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0, true);
525 		}
526 
527 		goto exit;
528 	}
529 
530 	if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) { /*  802_1x */
531 		struct sta_info * psta,*pbcmc_sta;
532 		struct sta_priv * pstapriv = &padapter->stapriv;
533 
534 		if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == true) { /* sta mode */
535 			psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
536 			if (psta == NULL) {
537 				/* DEBUG_ERR(("Set wpa_set_encryption: Obtain Sta_info fail\n")); */
538 			} else {
539 				/* Jeff: don't disable ieee8021x_blocked while clearing key */
540 				if (strcmp(param->u.crypt.alg, "none") != 0)
541 					psta->ieee8021x_blocked = false;
542 
543 				if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
544 						(padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled)) {
545 					psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
546 				}
547 
548 				if (param->u.crypt.set_tx == 1) { /* pairwise key */
549 					memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
550 
551 					if (strcmp(param->u.crypt.alg, "TKIP") == 0) { /* set mic key */
552 						/* DEBUG_ERR(("\nset key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len)); */
553 						memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
554 						memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
555 
556 						padapter->securitypriv.busetkipkey =false;
557 						/* _set_timer(&padapter->securitypriv.tkip_timer, 50); */
558 					}
559 
560 					/* DEBUG_ERR((" param->u.crypt.key_len =%d\n", param->u.crypt.key_len)); */
561 					DBG_871X(" ~~~~set sta key:unicastkey\n");
562 
563 					rtw_setstakey_cmd(padapter, psta, true, true);
564 				} else { /* group key */
565 					if (strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0) {
566 						memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
567 						/* only TKIP group key need to install this */
568 						if (param->u.crypt.key_len > 16) {
569 							memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]), 8);
570 							memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]), 8);
571 						}
572 						padapter->securitypriv.binstallGrpkey = true;
573 						/* DEBUG_ERR((" param->u.crypt.key_len =%d\n", param->u.crypt.key_len)); */
574 						DBG_871X(" ~~~~set sta key:groupkey\n");
575 
576 						padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
577 
578 						rtw_set_key(padapter,&padapter->securitypriv, param->u.crypt.idx, 1, true);
579 					} else if (strcmp(param->u.crypt.alg, "BIP") == 0) {
580 						/* printk("BIP key_len =%d , index =%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx); */
581 						/* save the IGTK key, length 16 bytes */
582 						memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
583 						/*printk("IGTK key below:\n");
584 						for (no = 0;no<16;no++)
585 							printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
586 						printk("\n");*/
587 						padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
588 						padapter->securitypriv.binstallBIPkey = true;
589 						DBG_871X(" ~~~~set sta key:IGKT\n");
590 					}
591 				}
592 			}
593 
594 			pbcmc_sta =rtw_get_bcmc_stainfo(padapter);
595 			if (pbcmc_sta == NULL) {
596 				/* DEBUG_ERR(("Set OID_802_11_ADD_KEY: bcmc stainfo is null\n")); */
597 			} else {
598 				/* Jeff: don't disable ieee8021x_blocked while clearing key */
599 				if (strcmp(param->u.crypt.alg, "none") != 0)
600 					pbcmc_sta->ieee8021x_blocked = false;
601 
602 				if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
603 						(padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled)) {
604 					pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
605 				}
606 			}
607 		} else if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
608 			/* adhoc mode */
609 		}
610 	}
611 
612 exit:
613 
614 	kfree(pwep);
615 	return ret;
616 }
617 
rtw_set_wpa_ie(struct adapter * padapter,char * pie,unsigned short ielen)618 static int rtw_set_wpa_ie(struct adapter *padapter, char *pie, unsigned short ielen)
619 {
620 	u8 *buf = NULL, *pos = NULL;
621 	int group_cipher = 0, pairwise_cipher = 0;
622 	int ret = 0;
623 	u8 null_addr[]= {0, 0, 0, 0, 0, 0};
624 
625 	if ((ielen > MAX_WPA_IE_LEN) || (pie == NULL)) {
626 		_clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
627 		if (pie == NULL)
628 			return ret;
629 		else
630 			return -EINVAL;
631 	}
632 
633 	if (ielen) {
634 		buf = rtw_zmalloc(ielen);
635 		if (buf == NULL) {
636 			ret =  -ENOMEM;
637 			goto exit;
638 		}
639 
640 		memcpy(buf, pie , ielen);
641 
642 		/* dump */
643 		{
644 			int i;
645 			DBG_871X("\n wpa_ie(length:%d):\n", ielen);
646 			for (i = 0;i<ielen;i =i+8)
647 				DBG_871X("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x\n", buf[i], buf[i+1], buf[i+2], buf[i+3], buf[i+4], buf[i+5], buf[i+6], buf[i+7]);
648 		}
649 
650 		pos = buf;
651 		if (ielen < RSN_HEADER_LEN) {
652 			RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("Ie len too short %d\n", ielen));
653 			ret  = -1;
654 			goto exit;
655 		}
656 
657 		if (rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
658 			padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
659 			padapter->securitypriv.ndisauthtype =Ndis802_11AuthModeWPAPSK;
660 			memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
661 		}
662 
663 		if (rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
664 			padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
665 			padapter->securitypriv.ndisauthtype =Ndis802_11AuthModeWPA2PSK;
666 			memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
667 		}
668 
669 		if (group_cipher == 0)
670 			group_cipher = WPA_CIPHER_NONE;
671 		if (pairwise_cipher == 0)
672 			pairwise_cipher = WPA_CIPHER_NONE;
673 
674 		switch (group_cipher) {
675 			case WPA_CIPHER_NONE:
676 				padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
677 				padapter->securitypriv.ndisencryptstatus =Ndis802_11EncryptionDisabled;
678 				break;
679 			case WPA_CIPHER_WEP40:
680 				padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
681 				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
682 				break;
683 			case WPA_CIPHER_TKIP:
684 				padapter->securitypriv.dot118021XGrpPrivacy = _TKIP_;
685 				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
686 				break;
687 			case WPA_CIPHER_CCMP:
688 				padapter->securitypriv.dot118021XGrpPrivacy = _AES_;
689 				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
690 				break;
691 			case WPA_CIPHER_WEP104:
692 				padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
693 				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
694 				break;
695 		}
696 
697 		switch (pairwise_cipher) {
698 			case WPA_CIPHER_NONE:
699 				padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
700 				padapter->securitypriv.ndisencryptstatus =Ndis802_11EncryptionDisabled;
701 				break;
702 			case WPA_CIPHER_WEP40:
703 				padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
704 				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
705 				break;
706 			case WPA_CIPHER_TKIP:
707 				padapter->securitypriv.dot11PrivacyAlgrthm = _TKIP_;
708 				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
709 				break;
710 			case WPA_CIPHER_CCMP:
711 				padapter->securitypriv.dot11PrivacyAlgrthm = _AES_;
712 				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
713 				break;
714 			case WPA_CIPHER_WEP104:
715 				padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
716 				padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
717 				break;
718 		}
719 
720 		_clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
721 		{/* set wps_ie */
722 			u16 cnt = 0;
723 			u8 eid, wps_oui[4]={0x0, 0x50, 0xf2, 0x04};
724 
725 			while (cnt < ielen) {
726 				eid = buf[cnt];
727 
728 				if ((eid == _VENDOR_SPECIFIC_IE_) && (!memcmp(&buf[cnt+2], wps_oui, 4))) {
729 					DBG_871X("SET WPS_IE\n");
730 
731 					padapter->securitypriv.wps_ie_len = ((buf[cnt+1]+2) < MAX_WPS_IE_LEN) ? (buf[cnt+1]+2):MAX_WPS_IE_LEN;
732 
733 					memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
734 
735 					set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
736 
737 					cnt += buf[cnt+1]+2;
738 
739 					break;
740 				} else {
741 					cnt += buf[cnt+1]+2; /* goto next */
742 				}
743 			}
744 		}
745 	}
746 
747 	/* TKIP and AES disallow multicast packets until installing group key */
748         if (padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
749                 || padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
750                 || padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
751                 /* WPS open need to enable multicast */
752                 /*  check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == true) */
753                 rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
754 
755 	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
756 		 ("rtw_set_wpa_ie: pairwise_cipher = 0x%08x padapter->securitypriv.ndisencryptstatus =%d padapter->securitypriv.ndisauthtype =%d\n",
757 		  pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
758 
759 exit:
760 
761 	kfree(buf);
762 
763 	return ret;
764 }
765 
rtw_wx_get_name(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)766 static int rtw_wx_get_name(struct net_device *dev,
767 			     struct iw_request_info *info,
768 			     union iwreq_data *wrqu, char *extra)
769 {
770 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
771 	u32 ht_ielen = 0;
772 	char *p;
773 	u8 ht_cap =false, vht_cap =false;
774 	struct	mlme_priv *pmlmepriv = &(padapter->mlmepriv);
775 	struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
776 	NDIS_802_11_RATES_EX* prates = NULL;
777 
778 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("cmd_code =%x\n", info->cmd));
779 
780 	if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == true) {
781 		/* parsing HT_CAP_IE */
782 		p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
783 		if (p && ht_ielen>0)
784 			ht_cap = true;
785 
786 		prates = &pcur_bss->SupportedRates;
787 
788 		if (rtw_is_cckratesonly_included((u8 *)prates)) {
789 			if (ht_cap)
790 				snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
791 			else
792 				snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
793 		} else if (rtw_is_cckrates_included((u8 *)prates)) {
794 			if (ht_cap)
795 				snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
796 			else
797 				snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
798 		} else {
799 			if (pcur_bss->Configuration.DSConfig > 14) {
800 				if (vht_cap)
801 					snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11AC");
802 				else if (ht_cap)
803 					snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
804 				else
805 					snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
806 			} else {
807 				if (ht_cap)
808 					snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
809 				else
810 					snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
811 			}
812 		}
813 	} else {
814 		/* prates = &padapter->registrypriv.dev_network.SupportedRates; */
815 		/* snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g"); */
816 		snprintf(wrqu->name, IFNAMSIZ, "unassociated");
817 	}
818 	return 0;
819 }
820 
rtw_wx_set_freq(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)821 static int rtw_wx_set_freq(struct net_device *dev,
822 			     struct iw_request_info *info,
823 			     union iwreq_data *wrqu, char *extra)
824 {
825 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_wx_set_freq\n"));
826 
827 	return 0;
828 }
829 
rtw_wx_get_freq(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)830 static int rtw_wx_get_freq(struct net_device *dev,
831 			     struct iw_request_info *info,
832 			     union iwreq_data *wrqu, char *extra)
833 {
834 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
835 	struct	mlme_priv *pmlmepriv = &(padapter->mlmepriv);
836 	struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
837 
838 	if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
839 		/* wrqu->freq.m = ieee80211_wlan_frequencies[pcur_bss->Configuration.DSConfig-1] * 100000; */
840 		wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
841 		wrqu->freq.e = 1;
842 		wrqu->freq.i = pcur_bss->Configuration.DSConfig;
843 
844 	} else {
845 		wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
846 		wrqu->freq.e = 1;
847 		wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
848 	}
849 
850 	return 0;
851 }
852 
rtw_wx_set_mode(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * b)853 static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
854 			     union iwreq_data *wrqu, char *b)
855 {
856 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
857 	enum NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
858 	int ret = 0;
859 
860 	if (_FAIL == rtw_pwr_wakeup(padapter)) {
861 		ret = -EPERM;
862 		goto exit;
863 	}
864 
865 	if (padapter->hw_init_completed ==false) {
866 		ret = -EPERM;
867 		goto exit;
868 	}
869 
870 	switch (wrqu->mode) {
871 		case IW_MODE_AUTO:
872 			networkType = Ndis802_11AutoUnknown;
873 			DBG_871X("set_mode = IW_MODE_AUTO\n");
874 			break;
875 		case IW_MODE_ADHOC:
876 			networkType = Ndis802_11IBSS;
877 			DBG_871X("set_mode = IW_MODE_ADHOC\n");
878 			break;
879 		case IW_MODE_MASTER:
880 			networkType = Ndis802_11APMode;
881 			DBG_871X("set_mode = IW_MODE_MASTER\n");
882                         /* rtw_setopmode_cmd(padapter, networkType, true); */
883 			break;
884 		case IW_MODE_INFRA:
885 			networkType = Ndis802_11Infrastructure;
886 			DBG_871X("set_mode = IW_MODE_INFRA\n");
887 			break;
888 
889 		default :
890 			ret = -EINVAL;
891 			RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("\n Mode: %s is not supported \n", iw_operation_mode[wrqu->mode]));
892 			goto exit;
893 	}
894 
895 /*
896 	if (Ndis802_11APMode == networkType)
897 	{
898 		rtw_setopmode_cmd(padapter, networkType, true);
899 	}
900 	else
901 	{
902 		rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown, true);
903 	}
904 */
905 
906 	if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==false) {
907 
908 		ret = -EPERM;
909 		goto exit;
910 
911 	}
912 
913 	rtw_setopmode_cmd(padapter, networkType, true);
914 
915 exit:
916 	return ret;
917 }
918 
rtw_wx_get_mode(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * b)919 static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
920 			     union iwreq_data *wrqu, char *b)
921 {
922 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
923 	struct	mlme_priv *pmlmepriv = &(padapter->mlmepriv);
924 
925 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, (" rtw_wx_get_mode\n"));
926 
927 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
928 		wrqu->mode = IW_MODE_INFRA;
929 	} else if  ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) ||
930 		       (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
931 		wrqu->mode = IW_MODE_ADHOC;
932 	} else if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == true) {
933 		wrqu->mode = IW_MODE_MASTER;
934 	} else {
935 		wrqu->mode = IW_MODE_AUTO;
936 	}
937 	return 0;
938 }
939 
940 
rtw_wx_set_pmkid(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * extra)941 static int rtw_wx_set_pmkid(struct net_device *dev,
942 	                     struct iw_request_info *a,
943 			     union iwreq_data *wrqu, char *extra)
944 {
945 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
946 	u8          j, blInserted = false;
947 	int         intReturn = false;
948 	struct security_priv *psecuritypriv = &padapter->securitypriv;
949         struct iw_pmksa*  pPMK = (struct iw_pmksa*) extra;
950         u8     strZeroMacAddress[ ETH_ALEN ] = { 0x00 };
951         u8     strIssueBssid[ ETH_ALEN ] = { 0x00 };
952 
953 	/*
954         There are the BSSID information in the bssid.sa_data array.
955         If cmd is IW_PMKSA_FLUSH, it means the wpa_suppplicant wants to clear all the PMKID information.
956         If cmd is IW_PMKSA_ADD, it means the wpa_supplicant wants to add a PMKID/BSSID to driver.
957         If cmd is IW_PMKSA_REMOVE, it means the wpa_supplicant wants to remove a PMKID/BSSID from driver.
958         */
959 
960 	memcpy(strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
961         if (pPMK->cmd == IW_PMKSA_ADD) {
962                 DBG_871X("[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n");
963                 if (!memcmp(strIssueBssid, strZeroMacAddress, ETH_ALEN))
964                     return(intReturn);
965                 else
966                     intReturn = true;
967 
968 		blInserted = false;
969 
970 		/* overwrite PMKID */
971 		for (j = 0 ; j<NUM_PMKID_CACHE; j++) {
972 			if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN)) {
973 				/*  BSSID is matched, the same AP => rewrite with new PMKID. */
974                                 DBG_871X("[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n");
975 
976 				memcpy(psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
977                                 psecuritypriv->PMKIDList[ j ].bUsed = true;
978 				psecuritypriv->PMKIDIndex = j+1;
979 				blInserted = true;
980 				break;
981 			}
982 	        }
983 
984 	        if (!blInserted) {
985 		    /*  Find a new entry */
986                     DBG_871X("[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
987                             psecuritypriv->PMKIDIndex);
988 
989 	            memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
990 		    memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
991 
992                     psecuritypriv->PMKIDList[ psecuritypriv->PMKIDIndex ].bUsed = true;
993 		    psecuritypriv->PMKIDIndex++ ;
994 		    if (psecuritypriv->PMKIDIndex == 16)
995 		        psecuritypriv->PMKIDIndex = 0;
996 		}
997         } else if (pPMK->cmd == IW_PMKSA_REMOVE) {
998                 DBG_871X("[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n");
999                 intReturn = true;
1000 		for (j = 0 ; j<NUM_PMKID_CACHE; j++) {
1001 			if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN)) {
1002 				/*  BSSID is matched, the same AP => Remove this PMKID information and reset it. */
1003                                 eth_zero_addr(psecuritypriv->PMKIDList[j].Bssid);
1004                                 psecuritypriv->PMKIDList[ j ].bUsed = false;
1005 				break;
1006 			}
1007 	        }
1008         } else if (pPMK->cmd == IW_PMKSA_FLUSH) {
1009             DBG_871X("[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n");
1010             memset(&psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof(RT_PMKID_LIST) * NUM_PMKID_CACHE);
1011             psecuritypriv->PMKIDIndex = 0;
1012             intReturn = true;
1013         }
1014 	return intReturn;
1015 }
1016 
rtw_wx_get_sens(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1017 static int rtw_wx_get_sens(struct net_device *dev,
1018 			     struct iw_request_info *info,
1019 			     union iwreq_data *wrqu, char *extra)
1020 {
1021 	{
1022 		wrqu->sens.value = 0;
1023 		wrqu->sens.fixed = 0;	/* no auto select */
1024 		wrqu->sens.disabled = 1;
1025 	}
1026 	return 0;
1027 }
1028 
rtw_wx_get_range(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1029 static int rtw_wx_get_range(struct net_device *dev,
1030 				struct iw_request_info *info,
1031 				union iwreq_data *wrqu, char *extra)
1032 {
1033 	struct iw_range *range = (struct iw_range *)extra;
1034 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1035 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1036 
1037 	u16 val;
1038 	int i;
1039 
1040 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_range. cmd_code =%x\n", info->cmd));
1041 
1042 	wrqu->data.length = sizeof(*range);
1043 	memset(range, 0, sizeof(*range));
1044 
1045 	/* Let's try to keep this struct in the same order as in
1046 	 * linux/include/wireless.h
1047 	 */
1048 
1049 	/* TODO: See what values we can set, and remove the ones we can't
1050 	 * set, or fill them with some default data.
1051 	 */
1052 
1053 	/* ~5 Mb/s real (802.11b) */
1054 	range->throughput = 5 * 1000 * 1000;
1055 
1056 	/* signal level threshold range */
1057 
1058 	/* percent values between 0 and 100. */
1059 	range->max_qual.qual = 100;
1060 	range->max_qual.level = 100;
1061 	range->max_qual.noise = 100;
1062 	range->max_qual.updated = 7; /* Updated all three */
1063 
1064 
1065 	range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
1066 	/* TODO: Find real 'good' to 'bad' threshol value for RSSI */
1067 	range->avg_qual.level = 256 - 78;
1068 	range->avg_qual.noise = 0;
1069 	range->avg_qual.updated = 7; /* Updated all three */
1070 
1071 	range->num_bitrates = RATE_COUNT;
1072 
1073 	for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++)
1074 		range->bitrate[i] = rtw_rates[i];
1075 
1076 	range->min_frag = MIN_FRAG_THRESHOLD;
1077 	range->max_frag = MAX_FRAG_THRESHOLD;
1078 
1079 	range->pm_capa = 0;
1080 
1081 	range->we_version_compiled = WIRELESS_EXT;
1082 	range->we_version_source = 16;
1083 
1084 	for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
1085 
1086 		/*  Include only legal frequencies for some countries */
1087 		if (pmlmeext->channel_set[i].ChannelNum != 0) {
1088 			range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
1089 			range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
1090 			range->freq[val].e = 1;
1091 			val++;
1092 		}
1093 
1094 		if (val == IW_MAX_FREQUENCIES)
1095 			break;
1096 	}
1097 
1098 	range->num_channels = val;
1099 	range->num_frequency = val;
1100 
1101 /*  Commented by Albert 2009/10/13 */
1102 /*  The following code will proivde the security capability to network manager. */
1103 /*  If the driver doesn't provide this capability to network manager, */
1104 /*  the WPA/WPA2 routers can't be choosen in the network manager. */
1105 
1106 /*
1107 #define IW_SCAN_CAPA_NONE		0x00
1108 #define IW_SCAN_CAPA_ESSID		0x01
1109 #define IW_SCAN_CAPA_BSSID		0x02
1110 #define IW_SCAN_CAPA_CHANNEL	0x04
1111 #define IW_SCAN_CAPA_MODE		0x08
1112 #define IW_SCAN_CAPA_RATE		0x10
1113 #define IW_SCAN_CAPA_TYPE		0x20
1114 #define IW_SCAN_CAPA_TIME		0x40
1115 */
1116 
1117 	range->enc_capa = IW_ENC_CAPA_WPA|IW_ENC_CAPA_WPA2|
1118 			  IW_ENC_CAPA_CIPHER_TKIP|IW_ENC_CAPA_CIPHER_CCMP;
1119 
1120 	range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE |IW_SCAN_CAPA_BSSID|
1121 					IW_SCAN_CAPA_CHANNEL|IW_SCAN_CAPA_MODE|IW_SCAN_CAPA_RATE;
1122 
1123 	return 0;
1124 }
1125 
1126 /* set bssid flow */
1127 /* s1. rtw_set_802_11_infrastructure_mode() */
1128 /* s2. rtw_set_802_11_authentication_mode() */
1129 /* s3. set_802_11_encryption_mode() */
1130 /* s4. rtw_set_802_11_bssid() */
rtw_wx_set_wap(struct net_device * dev,struct iw_request_info * info,union iwreq_data * awrq,char * extra)1131 static int rtw_wx_set_wap(struct net_device *dev,
1132 			 struct iw_request_info *info,
1133 			 union iwreq_data *awrq,
1134 			 char *extra)
1135 {
1136 	uint ret = 0;
1137 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1138 	struct sockaddr *temp = (struct sockaddr *)awrq;
1139 	struct	mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1140 	struct list_head	*phead;
1141 	u8 *dst_bssid, *src_bssid;
1142 	struct __queue	*queue	= &(pmlmepriv->scanned_queue);
1143 	struct	wlan_network	*pnetwork = NULL;
1144 	enum NDIS_802_11_AUTHENTICATION_MODE	authmode;
1145 
1146 	rtw_ps_deny(padapter, PS_DENY_JOIN);
1147 	if (_FAIL == rtw_pwr_wakeup(padapter)) {
1148 		ret = -1;
1149 		goto exit;
1150 	}
1151 
1152 	if (!padapter->bup) {
1153 		ret = -1;
1154 		goto exit;
1155 	}
1156 
1157 
1158 	if (temp->sa_family != ARPHRD_ETHER) {
1159 		ret = -EINVAL;
1160 		goto exit;
1161 	}
1162 
1163 	authmode = padapter->securitypriv.ndisauthtype;
1164 	spin_lock_bh(&queue->lock);
1165 	phead = get_list_head(queue);
1166 	pmlmepriv->pscanned = get_next(phead);
1167 
1168 	while (1) {
1169 		if (phead == pmlmepriv->pscanned)
1170 			break;
1171 
1172 		pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1173 
1174 		pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1175 
1176 		dst_bssid = pnetwork->network.MacAddress;
1177 
1178 		src_bssid = temp->sa_data;
1179 
1180 		if ((!memcmp(dst_bssid, src_bssid, ETH_ALEN))) {
1181 			if (!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode)) {
1182 				ret = -1;
1183 				spin_unlock_bh(&queue->lock);
1184 				goto exit;
1185 			}
1186 				break;
1187 		}
1188 
1189 	}
1190 	spin_unlock_bh(&queue->lock);
1191 
1192 	rtw_set_802_11_authentication_mode(padapter, authmode);
1193 	/* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
1194 	if (rtw_set_802_11_bssid(padapter, temp->sa_data) == false) {
1195 		ret = -1;
1196 		goto exit;
1197 	}
1198 
1199 exit:
1200 
1201 	rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
1202 
1203 	return ret;
1204 }
1205 
rtw_wx_get_wap(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1206 static int rtw_wx_get_wap(struct net_device *dev,
1207 			    struct iw_request_info *info,
1208 			    union iwreq_data *wrqu, char *extra)
1209 {
1210 
1211 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1212 	struct	mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1213 	struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
1214 
1215 	wrqu->ap_addr.sa_family = ARPHRD_ETHER;
1216 
1217 	eth_zero_addr(wrqu->ap_addr.sa_data);
1218 
1219 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_wap\n"));
1220 
1221 	if  (((check_fwstate(pmlmepriv, _FW_LINKED)) == true) ||
1222 			((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == true) ||
1223 			((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == true)) {
1224 		memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
1225 	} else {
1226 		eth_zero_addr(wrqu->ap_addr.sa_data);
1227 	}
1228 
1229 	return 0;
1230 }
1231 
rtw_wx_set_mlme(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1232 static int rtw_wx_set_mlme(struct net_device *dev,
1233 			     struct iw_request_info *info,
1234 			     union iwreq_data *wrqu, char *extra)
1235 {
1236 	int ret = 0;
1237 	u16 reason;
1238 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1239 	struct iw_mlme *mlme = (struct iw_mlme *) extra;
1240 
1241 
1242 	if (mlme == NULL)
1243 		return -1;
1244 
1245 	DBG_871X("%s\n", __func__);
1246 
1247 	reason = mlme->reason_code;
1248 
1249 	DBG_871X("%s, cmd =%d, reason =%d\n", __func__, mlme->cmd, reason);
1250 
1251 	switch (mlme->cmd) {
1252 	case IW_MLME_DEAUTH:
1253 		if (!rtw_set_802_11_disassociate(padapter))
1254 			ret = -1;
1255 		break;
1256 	case IW_MLME_DISASSOC:
1257 		if (!rtw_set_802_11_disassociate(padapter))
1258 			ret = -1;
1259 		break;
1260 	default:
1261 		return -EOPNOTSUPP;
1262 	}
1263 
1264 	return ret;
1265 }
1266 
rtw_wx_set_scan(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * extra)1267 static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
1268 			     union iwreq_data *wrqu, char *extra)
1269 {
1270 	u8 _status = false;
1271 	int ret = 0;
1272 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1273 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1274 	struct ndis_802_11_ssid ssid[RTW_SSID_SCAN_AMOUNT];
1275 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_set_scan\n"));
1276 
1277 	#ifdef DBG_IOCTL
1278 	DBG_871X("DBG_IOCTL %s:%d\n", __func__, __LINE__);
1279 	#endif
1280 
1281 	rtw_ps_deny(padapter, PS_DENY_SCAN);
1282 	if (_FAIL == rtw_pwr_wakeup(padapter)) {
1283 		ret = -1;
1284 		goto exit;
1285 	}
1286 
1287 	if (padapter->bDriverStopped) {
1288 		DBG_871X("bDriverStopped =%d\n", padapter->bDriverStopped);
1289 		ret = -1;
1290 		goto exit;
1291 	}
1292 
1293 	if (!padapter->bup) {
1294 		ret = -1;
1295 		goto exit;
1296 	}
1297 
1298 	if (padapter->hw_init_completed ==false) {
1299 		ret = -1;
1300 		goto exit;
1301 	}
1302 
1303 	/*  When Busy Traffic, driver do not site survey. So driver return success. */
1304 	/*  wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout. */
1305 	/*  modify by thomas 2011-02-22. */
1306 	if (pmlmepriv->LinkDetectInfo.bBusyTraffic == true) {
1307 		indicate_wx_scan_complete_event(padapter);
1308 		goto exit;
1309 	}
1310 
1311 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == true) {
1312 		indicate_wx_scan_complete_event(padapter);
1313 		goto exit;
1314 	}
1315 
1316 	memset(ssid, 0, sizeof(struct ndis_802_11_ssid)*RTW_SSID_SCAN_AMOUNT);
1317 
1318 	if (wrqu->data.length == sizeof(struct iw_scan_req)) {
1319 		struct iw_scan_req *req = (struct iw_scan_req *)extra;
1320 
1321 		if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
1322 			int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
1323 
1324 			memcpy(ssid[0].Ssid, req->essid, len);
1325 			ssid[0].SsidLength = len;
1326 
1327 			DBG_871X("IW_SCAN_THIS_ESSID, ssid =%s, len =%d\n", req->essid, req->essid_len);
1328 
1329 			spin_lock_bh(&pmlmepriv->lock);
1330 
1331 			_status = rtw_sitesurvey_cmd(padapter, ssid, 1, NULL, 0);
1332 
1333 			spin_unlock_bh(&pmlmepriv->lock);
1334 
1335 		} else if (req->scan_type == IW_SCAN_TYPE_PASSIVE) {
1336 			DBG_871X("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
1337 		}
1338 
1339 	} else if (wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE
1340 		&& !memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)) {
1341 		int len = wrqu->data.length -WEXT_CSCAN_HEADER_SIZE;
1342 		char *pos = extra+WEXT_CSCAN_HEADER_SIZE;
1343 		char section;
1344 		char sec_len;
1345 		int ssid_index = 0;
1346 
1347 		/* DBG_871X("%s COMBO_SCAN header is recognized\n", __func__); */
1348 
1349 		while (len >= 1) {
1350 			section = *(pos++); len-= 1;
1351 
1352 			switch (section) {
1353 				case WEXT_CSCAN_SSID_SECTION:
1354 					/* DBG_871X("WEXT_CSCAN_SSID_SECTION\n"); */
1355 					if (len < 1) {
1356 						len = 0;
1357 						break;
1358 					}
1359 
1360 					sec_len = *(pos++); len-= 1;
1361 
1362 					if (sec_len>0 && sec_len<=len) {
1363 						ssid[ssid_index].SsidLength = sec_len;
1364 						memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
1365 						/* DBG_871X("%s COMBO_SCAN with specific ssid:%s, %d\n", __func__ */
1366 						/* 	, ssid[ssid_index].Ssid, ssid[ssid_index].SsidLength); */
1367 						ssid_index++;
1368 					}
1369 
1370 					pos+=sec_len; len-=sec_len;
1371 					break;
1372 
1373 
1374 				case WEXT_CSCAN_CHANNEL_SECTION:
1375 					/* DBG_871X("WEXT_CSCAN_CHANNEL_SECTION\n"); */
1376 					pos+= 1; len-= 1;
1377 					break;
1378 				case WEXT_CSCAN_ACTV_DWELL_SECTION:
1379 					/* DBG_871X("WEXT_CSCAN_ACTV_DWELL_SECTION\n"); */
1380 					pos+=2; len-=2;
1381 					break;
1382 				case WEXT_CSCAN_PASV_DWELL_SECTION:
1383 					/* DBG_871X("WEXT_CSCAN_PASV_DWELL_SECTION\n"); */
1384 					pos+=2; len-=2;
1385 					break;
1386 				case WEXT_CSCAN_HOME_DWELL_SECTION:
1387 					/* DBG_871X("WEXT_CSCAN_HOME_DWELL_SECTION\n"); */
1388 					pos+=2; len-=2;
1389 					break;
1390 				case WEXT_CSCAN_TYPE_SECTION:
1391 					/* DBG_871X("WEXT_CSCAN_TYPE_SECTION\n"); */
1392 					pos+= 1; len-= 1;
1393 					break;
1394 				default:
1395 					/* DBG_871X("Unknown CSCAN section %c\n", section); */
1396 					len = 0; /*  stop parsing */
1397 			}
1398 			/* DBG_871X("len:%d\n", len); */
1399 
1400 		}
1401 
1402 		/* jeff: it has still some scan paramater to parse, we only do this now... */
1403 		_status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
1404 
1405 	} else {
1406 		_status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
1407 	}
1408 
1409 	if (_status == false)
1410 		ret = -1;
1411 
1412 exit:
1413 
1414 	rtw_ps_deny_cancel(padapter, PS_DENY_SCAN);
1415 
1416 	#ifdef DBG_IOCTL
1417 	DBG_871X("DBG_IOCTL %s:%d return %d\n", __func__, __LINE__, ret);
1418 	#endif
1419 
1420 	return ret;
1421 }
1422 
rtw_wx_get_scan(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * extra)1423 static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
1424 			     union iwreq_data *wrqu, char *extra)
1425 {
1426 	struct list_head					*plist, *phead;
1427 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1428 	struct	mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1429 	struct __queue				*queue	= &(pmlmepriv->scanned_queue);
1430 	struct	wlan_network	*pnetwork = NULL;
1431 	char *ev = extra;
1432 	char *stop = ev + wrqu->data.length;
1433 	u32 ret = 0;
1434 	sint wait_status;
1435 
1436 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan\n"));
1437 	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, (" Start of Query SIOCGIWSCAN .\n"));
1438 
1439 	#ifdef DBG_IOCTL
1440 	DBG_871X("DBG_IOCTL %s:%d\n", __func__, __LINE__);
1441 	#endif
1442 
1443 	if (adapter_to_pwrctl(padapter)->brfoffbyhw && padapter->bDriverStopped) {
1444 		ret = -EINVAL;
1445 		goto exit;
1446 	}
1447 
1448 	wait_status = _FW_UNDER_SURVEY | _FW_UNDER_LINKING;
1449 
1450 	if (check_fwstate(pmlmepriv, wait_status))
1451 		return -EAGAIN;
1452 
1453 	spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1454 
1455 	phead = get_list_head(queue);
1456 	plist = get_next(phead);
1457 
1458 	while (1) {
1459 		if (phead == plist)
1460 			break;
1461 
1462 		if ((stop - ev) < SCAN_ITEM_SIZE) {
1463 			ret = -E2BIG;
1464 			break;
1465 		}
1466 
1467 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
1468 
1469 		/* report network only if the current channel set contains the channel to which this network belongs */
1470 		if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
1471 			&& rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == true
1472 			&& true == rtw_validate_ssid(&(pnetwork->network.Ssid))) {
1473 
1474 			ev =translate_scan(padapter, a, pnetwork, ev, stop);
1475 		}
1476 
1477 		plist = get_next(plist);
1478 
1479 	}
1480 
1481 	spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1482 
1483 	wrqu->data.length = ev-extra;
1484 	wrqu->data.flags = 0;
1485 
1486 exit:
1487 
1488 	#ifdef DBG_IOCTL
1489 	DBG_871X("DBG_IOCTL %s:%d return %d\n", __func__, __LINE__, ret);
1490 	#endif
1491 
1492 	return ret ;
1493 
1494 }
1495 
1496 /* set ssid flow */
1497 /* s1. rtw_set_802_11_infrastructure_mode() */
1498 /* s2. set_802_11_authenticaion_mode() */
1499 /* s3. set_802_11_encryption_mode() */
1500 /* s4. rtw_set_802_11_ssid() */
rtw_wx_set_essid(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * extra)1501 static int rtw_wx_set_essid(struct net_device *dev,
1502 			      struct iw_request_info *a,
1503 			      union iwreq_data *wrqu, char *extra)
1504 {
1505 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1506 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1507 	struct __queue *queue = &pmlmepriv->scanned_queue;
1508 	struct list_head *phead;
1509 	struct wlan_network *pnetwork = NULL;
1510 	enum NDIS_802_11_AUTHENTICATION_MODE authmode;
1511 	struct ndis_802_11_ssid ndis_ssid;
1512 	u8 *dst_ssid, *src_ssid;
1513 
1514 	uint ret = 0, len;
1515 
1516 	#ifdef DBG_IOCTL
1517 	DBG_871X("DBG_IOCTL %s:%d\n", __func__, __LINE__);
1518 	#endif
1519 
1520 	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1521 		 ("+rtw_wx_set_essid: fw_state = 0x%08x\n", get_fwstate(pmlmepriv)));
1522 
1523 	rtw_ps_deny(padapter, PS_DENY_JOIN);
1524 	if (_FAIL == rtw_pwr_wakeup(padapter)) {
1525 		ret = -1;
1526 		goto exit;
1527 	}
1528 
1529 	if (!padapter->bup) {
1530 		ret = -1;
1531 		goto exit;
1532 	}
1533 
1534 	if (wrqu->essid.length > IW_ESSID_MAX_SIZE) {
1535 		ret = -E2BIG;
1536 		goto exit;
1537 	}
1538 
1539 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1540 		ret = -1;
1541 		goto exit;
1542 	}
1543 
1544 	authmode = padapter->securitypriv.ndisauthtype;
1545 	DBG_871X("=>%s\n", __func__);
1546 	if (wrqu->essid.flags && wrqu->essid.length) {
1547 		len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
1548 
1549 		if (wrqu->essid.length != 33)
1550 			DBG_871X("ssid =%s, len =%d\n", extra, wrqu->essid.length);
1551 
1552 		memset(&ndis_ssid, 0, sizeof(struct ndis_802_11_ssid));
1553 		ndis_ssid.SsidLength = len;
1554 		memcpy(ndis_ssid.Ssid, extra, len);
1555 		src_ssid = ndis_ssid.Ssid;
1556 
1557 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("rtw_wx_set_essid: ssid =[%s]\n", src_ssid));
1558 		spin_lock_bh(&queue->lock);
1559 		phead = get_list_head(queue);
1560 		pmlmepriv->pscanned = get_next(phead);
1561 
1562 		while (1) {
1563 			if (phead == pmlmepriv->pscanned) {
1564 			        RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_warning_,
1565 					 ("rtw_wx_set_essid: scan_q is empty, set ssid to check if scanning again!\n"));
1566 
1567 				break;
1568 			}
1569 
1570 			pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1571 
1572 			pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1573 
1574 			dst_ssid = pnetwork->network.Ssid.Ssid;
1575 
1576 			RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1577 				 ("rtw_wx_set_essid: dst_ssid =%s\n",
1578 				  pnetwork->network.Ssid.Ssid));
1579 
1580 			if ((!memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength)) &&
1581 				(pnetwork->network.Ssid.SsidLength ==ndis_ssid.SsidLength)) {
1582 				RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1583 					 ("rtw_wx_set_essid: find match, set infra mode\n"));
1584 
1585 				if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true) {
1586 					if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
1587 						continue;
1588 				}
1589 
1590 				if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == false) {
1591 					ret = -1;
1592 					spin_unlock_bh(&queue->lock);
1593 					goto exit;
1594 				}
1595 
1596 				break;
1597 			}
1598 		}
1599 		spin_unlock_bh(&queue->lock);
1600 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1601 			 ("set ssid: set_802_11_auth. mode =%d\n", authmode));
1602 		rtw_set_802_11_authentication_mode(padapter, authmode);
1603 		/* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
1604 		if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == false) {
1605 			ret = -1;
1606 			goto exit;
1607 		}
1608 	}
1609 
1610 exit:
1611 
1612 	rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
1613 
1614 	DBG_871X("<=%s, ret %d\n", __func__, ret);
1615 
1616 	#ifdef DBG_IOCTL
1617 	DBG_871X("DBG_IOCTL %s:%d return %d\n", __func__, __LINE__, ret);
1618 	#endif
1619 
1620 	return ret;
1621 }
1622 
rtw_wx_get_essid(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * extra)1623 static int rtw_wx_get_essid(struct net_device *dev,
1624 			      struct iw_request_info *a,
1625 			      union iwreq_data *wrqu, char *extra)
1626 {
1627 	u32 len, ret = 0;
1628 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1629 	struct	mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1630 	struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
1631 
1632 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_essid\n"));
1633 
1634 	if ((check_fwstate(pmlmepriv, _FW_LINKED) == true) ||
1635 	      (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true)) {
1636 		len = pcur_bss->Ssid.SsidLength;
1637 
1638 		wrqu->essid.length = len;
1639 
1640 		memcpy(extra, pcur_bss->Ssid.Ssid, len);
1641 
1642 		wrqu->essid.flags = 1;
1643 	} else {
1644 		ret = -1;
1645 		goto exit;
1646 	}
1647 
1648 exit:
1649 	return ret;
1650 }
1651 
rtw_wx_set_rate(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * extra)1652 static int rtw_wx_set_rate(struct net_device *dev,
1653 			      struct iw_request_info *a,
1654 			      union iwreq_data *wrqu, char *extra)
1655 {
1656 	int	i, ret = 0;
1657 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1658 	u8 datarates[NumRates];
1659 	u32 target_rate = wrqu->bitrate.value;
1660 	u32 fixed = wrqu->bitrate.fixed;
1661 	u32 ratevalue = 0;
1662 	u8 mpdatarate[NumRates]={11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
1663 
1664 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, (" rtw_wx_set_rate\n"));
1665 	RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("target_rate = %d, fixed = %d\n", target_rate, fixed));
1666 
1667 	if (target_rate == -1) {
1668 		ratevalue = 11;
1669 		goto set_rate;
1670 	}
1671 	target_rate = target_rate/100000;
1672 
1673 	switch (target_rate) {
1674 		case 10:
1675 			ratevalue = 0;
1676 			break;
1677 		case 20:
1678 			ratevalue = 1;
1679 			break;
1680 		case 55:
1681 			ratevalue = 2;
1682 			break;
1683 		case 60:
1684 			ratevalue = 3;
1685 			break;
1686 		case 90:
1687 			ratevalue = 4;
1688 			break;
1689 		case 110:
1690 			ratevalue = 5;
1691 			break;
1692 		case 120:
1693 			ratevalue = 6;
1694 			break;
1695 		case 180:
1696 			ratevalue = 7;
1697 			break;
1698 		case 240:
1699 			ratevalue = 8;
1700 			break;
1701 		case 360:
1702 			ratevalue = 9;
1703 			break;
1704 		case 480:
1705 			ratevalue = 10;
1706 			break;
1707 		case 540:
1708 			ratevalue = 11;
1709 			break;
1710 		default:
1711 			ratevalue = 11;
1712 			break;
1713 	}
1714 
1715 set_rate:
1716 
1717 	for (i = 0; i<NumRates; i++) {
1718 		if (ratevalue ==mpdatarate[i]) {
1719 			datarates[i] = mpdatarate[i];
1720 			if (fixed == 0)
1721 				break;
1722 		} else {
1723 			datarates[i] = 0xff;
1724 		}
1725 
1726 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("datarate_inx =%d\n", datarates[i]));
1727 	}
1728 
1729 	if (rtw_setdatarate_cmd(padapter, datarates) != _SUCCESS) {
1730 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("rtw_wx_set_rate Fail!!!\n"));
1731 		ret = -1;
1732 	}
1733 	return ret;
1734 }
1735 
rtw_wx_get_rate(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1736 static int rtw_wx_get_rate(struct net_device *dev,
1737 			     struct iw_request_info *info,
1738 			     union iwreq_data *wrqu, char *extra)
1739 {
1740 	u16 max_rate = 0;
1741 
1742 	max_rate = rtw_get_cur_max_rate((struct adapter *)rtw_netdev_priv(dev));
1743 
1744 	if (max_rate == 0)
1745 		return -EPERM;
1746 
1747 	wrqu->bitrate.fixed = 0;	/* no auto select */
1748 	wrqu->bitrate.value = max_rate * 100000;
1749 
1750 	return 0;
1751 }
1752 
rtw_wx_set_rts(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1753 static int rtw_wx_set_rts(struct net_device *dev,
1754 			     struct iw_request_info *info,
1755 			     union iwreq_data *wrqu, char *extra)
1756 {
1757 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1758 
1759 	if (wrqu->rts.disabled)
1760 		padapter->registrypriv.rts_thresh = 2347;
1761 	else {
1762 		if (wrqu->rts.value < 0 ||
1763 		    wrqu->rts.value > 2347)
1764 			return -EINVAL;
1765 
1766 		padapter->registrypriv.rts_thresh = wrqu->rts.value;
1767 	}
1768 
1769 	DBG_871X("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);
1770 
1771 	return 0;
1772 }
1773 
rtw_wx_get_rts(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1774 static int rtw_wx_get_rts(struct net_device *dev,
1775 			     struct iw_request_info *info,
1776 			     union iwreq_data *wrqu, char *extra)
1777 {
1778 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1779 
1780 	DBG_871X("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);
1781 
1782 	wrqu->rts.value = padapter->registrypriv.rts_thresh;
1783 	wrqu->rts.fixed = 0;	/* no auto select */
1784 	/* wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD); */
1785 
1786 	return 0;
1787 }
1788 
rtw_wx_set_frag(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1789 static int rtw_wx_set_frag(struct net_device *dev,
1790 			     struct iw_request_info *info,
1791 			     union iwreq_data *wrqu, char *extra)
1792 {
1793 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1794 
1795 	if (wrqu->frag.disabled)
1796 		padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
1797 	else {
1798 		if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
1799 		    wrqu->frag.value > MAX_FRAG_THRESHOLD)
1800 			return -EINVAL;
1801 
1802 		padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
1803 	}
1804 
1805 	DBG_871X("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);
1806 
1807 	return 0;
1808 
1809 }
1810 
rtw_wx_get_frag(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1811 static int rtw_wx_get_frag(struct net_device *dev,
1812 			     struct iw_request_info *info,
1813 			     union iwreq_data *wrqu, char *extra)
1814 {
1815 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1816 
1817 	DBG_871X("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);
1818 
1819 	wrqu->frag.value = padapter->xmitpriv.frag_len;
1820 	wrqu->frag.fixed = 0;	/* no auto select */
1821 	/* wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FRAG_THRESHOLD); */
1822 
1823 	return 0;
1824 }
1825 
rtw_wx_get_retry(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)1826 static int rtw_wx_get_retry(struct net_device *dev,
1827 			     struct iw_request_info *info,
1828 			     union iwreq_data *wrqu, char *extra)
1829 {
1830 	/* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
1831 
1832 
1833 	wrqu->retry.value = 7;
1834 	wrqu->retry.fixed = 0;	/* no auto select */
1835 	wrqu->retry.disabled = 1;
1836 
1837 	return 0;
1838 
1839 }
1840 
rtw_wx_set_enc(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * keybuf)1841 static int rtw_wx_set_enc(struct net_device *dev,
1842 			    struct iw_request_info *info,
1843 			    union iwreq_data *wrqu, char *keybuf)
1844 {
1845 	u32 key, ret = 0;
1846 	u32 keyindex_provided;
1847 	struct ndis_802_11_wep	 wep;
1848 	enum NDIS_802_11_AUTHENTICATION_MODE authmode;
1849 
1850 	struct iw_point *erq = &(wrqu->encoding);
1851 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1852 	struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
1853 	DBG_871X("+rtw_wx_set_enc, flags = 0x%x\n", erq->flags);
1854 
1855 	memset(&wep, 0, sizeof(struct ndis_802_11_wep));
1856 
1857 	key = erq->flags & IW_ENCODE_INDEX;
1858 
1859 	if (erq->flags & IW_ENCODE_DISABLED) {
1860 		DBG_871X("EncryptionDisabled\n");
1861 		padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
1862 		padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1863 		padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1864 		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
1865 		authmode = Ndis802_11AuthModeOpen;
1866 		padapter->securitypriv.ndisauthtype =authmode;
1867 
1868 		goto exit;
1869 	}
1870 
1871 	if (key) {
1872 		if (key > WEP_KEYS)
1873 			return -EINVAL;
1874 		key--;
1875 		keyindex_provided = 1;
1876 	} else {
1877 		keyindex_provided = 0;
1878 		key = padapter->securitypriv.dot11PrivacyKeyIndex;
1879 		DBG_871X("rtw_wx_set_enc, key =%d\n", key);
1880 	}
1881 
1882 	/* set authentication mode */
1883 	if (erq->flags & IW_ENCODE_OPEN) {
1884 		DBG_871X("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
1885 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
1886 
1887 		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
1888 
1889 		padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1890 		padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1891 		authmode = Ndis802_11AuthModeOpen;
1892 		padapter->securitypriv.ndisauthtype =authmode;
1893 	} else if (erq->flags & IW_ENCODE_RESTRICTED) {
1894 		DBG_871X("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
1895 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1896 
1897 		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
1898 
1899 		padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
1900 		padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
1901 		authmode = Ndis802_11AuthModeShared;
1902 		padapter->securitypriv.ndisauthtype =authmode;
1903 	} else {
1904 		DBG_871X("rtw_wx_set_enc():erq->flags = 0x%x\n", erq->flags);
1905 
1906 		padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
1907 		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
1908 		padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1909 		padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1910 		authmode = Ndis802_11AuthModeOpen;
1911 		padapter->securitypriv.ndisauthtype =authmode;
1912 	}
1913 
1914 	wep.KeyIndex = key;
1915 	if (erq->length > 0) {
1916 		wep.KeyLength = erq->length <= 5 ? 5 : 13;
1917 
1918 		wep.Length = wep.KeyLength + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
1919 	} else {
1920 		wep.KeyLength = 0 ;
1921 
1922 		if (keyindex_provided == 1) { /*  set key_id only, no given KeyMaterial(erq->length == 0). */
1923 			padapter->securitypriv.dot11PrivacyKeyIndex = key;
1924 
1925 			DBG_871X("(keyindex_provided == 1), keyid =%d, key_len =%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
1926 
1927 			switch (padapter->securitypriv.dot11DefKeylen[key]) {
1928 				case 5:
1929 					padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
1930 					break;
1931 				case 13:
1932 					padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
1933 					break;
1934 				default:
1935 					padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1936 					break;
1937 			}
1938 
1939 			goto exit;
1940 
1941 		}
1942 
1943 	}
1944 
1945 	wep.KeyIndex |= 0x80000000;
1946 
1947 	memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
1948 
1949 	if (rtw_set_802_11_add_wep(padapter, &wep) == false) {
1950 		if (rf_on == pwrpriv->rf_pwrstate)
1951 			ret = -EOPNOTSUPP;
1952 		goto exit;
1953 	}
1954 
1955 exit:
1956 	return ret;
1957 }
1958 
rtw_wx_get_enc(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * keybuf)1959 static int rtw_wx_get_enc(struct net_device *dev,
1960 			    struct iw_request_info *info,
1961 			    union iwreq_data *wrqu, char *keybuf)
1962 {
1963 	uint key, ret = 0;
1964 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1965 	struct iw_point *erq = &(wrqu->encoding);
1966 	struct	mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1967 
1968 	if (check_fwstate(pmlmepriv, _FW_LINKED) != true) {
1969 		 if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != true) {
1970 			 erq->length = 0;
1971 			 erq->flags |= IW_ENCODE_DISABLED;
1972 			 return 0;
1973 		 }
1974 	}
1975 
1976 
1977 	key = erq->flags & IW_ENCODE_INDEX;
1978 
1979 	if (key) {
1980 		if (key > WEP_KEYS)
1981 			return -EINVAL;
1982 		key--;
1983 	} else {
1984 		key = padapter->securitypriv.dot11PrivacyKeyIndex;
1985 	}
1986 
1987 	erq->flags = key + 1;
1988 
1989 	/* if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen) */
1990 	/*  */
1991 	/*       erq->flags |= IW_ENCODE_OPEN; */
1992 	/*  */
1993 
1994 	switch (padapter->securitypriv.ndisencryptstatus) {
1995 	case Ndis802_11EncryptionNotSupported:
1996 	case Ndis802_11EncryptionDisabled:
1997 		erq->length = 0;
1998 		erq->flags |= IW_ENCODE_DISABLED;
1999 		break;
2000 	case Ndis802_11Encryption1Enabled:
2001 		erq->length = padapter->securitypriv.dot11DefKeylen[key];
2002 
2003 		if (erq->length) {
2004 			memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
2005 
2006 			erq->flags |= IW_ENCODE_ENABLED;
2007 
2008 			if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
2009 				erq->flags |= IW_ENCODE_OPEN;
2010 			else if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
2011 				erq->flags |= IW_ENCODE_RESTRICTED;
2012 		} else {
2013 			erq->length = 0;
2014 			erq->flags |= IW_ENCODE_DISABLED;
2015 		}
2016 		break;
2017 	case Ndis802_11Encryption2Enabled:
2018 	case Ndis802_11Encryption3Enabled:
2019 		erq->length = 16;
2020 		erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
2021 		break;
2022 	default:
2023 		erq->length = 0;
2024 		erq->flags |= IW_ENCODE_DISABLED;
2025 		break;
2026 	}
2027 	return ret;
2028 }
2029 
rtw_wx_get_power(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2030 static int rtw_wx_get_power(struct net_device *dev,
2031 			     struct iw_request_info *info,
2032 			     union iwreq_data *wrqu, char *extra)
2033 {
2034 	/* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2035 
2036 	wrqu->power.value = 0;
2037 	wrqu->power.fixed = 0;	/* no auto select */
2038 	wrqu->power.disabled = 1;
2039 
2040 	return 0;
2041 }
2042 
rtw_wx_set_gen_ie(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2043 static int rtw_wx_set_gen_ie(struct net_device *dev,
2044 			     struct iw_request_info *info,
2045 			     union iwreq_data *wrqu, char *extra)
2046 {
2047 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2048 
2049 	return rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
2050 }
2051 
rtw_wx_set_auth(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2052 static int rtw_wx_set_auth(struct net_device *dev,
2053 			   struct iw_request_info *info,
2054 			   union iwreq_data *wrqu, char *extra)
2055 {
2056 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2057 	struct iw_param *param = (struct iw_param*)&(wrqu->param);
2058 	int ret = 0;
2059 
2060 	switch (param->flags & IW_AUTH_INDEX) {
2061 	case IW_AUTH_WPA_VERSION:
2062 		break;
2063 	case IW_AUTH_CIPHER_PAIRWISE:
2064 		break;
2065 	case IW_AUTH_CIPHER_GROUP:
2066 		break;
2067 	case IW_AUTH_KEY_MGMT:
2068 		/*
2069 		 *  ??? does not use these parameters
2070 		 */
2071 		break;
2072 	case IW_AUTH_TKIP_COUNTERMEASURES:
2073 		/* wpa_supplicant is setting the tkip countermeasure. */
2074 		if (param->value) /* enabling */
2075 			padapter->securitypriv.btkip_countermeasure = true;
2076 		else /* disabling */
2077 			padapter->securitypriv.btkip_countermeasure = false;
2078 		break;
2079 	case IW_AUTH_DROP_UNENCRYPTED:
2080 		/* HACK:
2081 		 *
2082 		 * wpa_supplicant calls set_wpa_enabled when the driver
2083 		 * is loaded and unloaded, regardless of if WPA is being
2084 		 * used.  No other calls are made which can be used to
2085 		 * determine if encryption will be used or not prior to
2086 		 * association being expected.  If encryption is not being
2087 		 * used, drop_unencrypted is set to false, else true -- we
2088 		 * can use this to determine if the CAP_PRIVACY_ON bit should
2089 		 * be set.
2090 		 */
2091 
2092 		/*
2093 		 * This means init value, or using wep, ndisencryptstatus =
2094 		 * Ndis802_11Encryption1Enabled, then it needn't reset it;
2095 		 */
2096 		if (padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled)
2097 			break;
2098 
2099 		if (param->value) {
2100 			padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
2101 			padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
2102 			padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
2103 			padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
2104 			padapter->securitypriv.ndisauthtype =Ndis802_11AuthModeOpen;
2105 		}
2106 
2107 		break;
2108 	case IW_AUTH_80211_AUTH_ALG:
2109 		/*
2110 		 *  It's the starting point of a link layer connection using wpa_supplicant
2111 		 */
2112 		if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
2113 			LeaveAllPowerSaveMode(padapter);
2114 			rtw_disassoc_cmd(padapter, 500, false);
2115 			DBG_871X("%s...call rtw_indicate_disconnect\n ", __func__);
2116 			rtw_indicate_disconnect(padapter);
2117 			rtw_free_assoc_resources(padapter, 1);
2118 		}
2119 
2120 		ret = wpa_set_auth_algs(dev, (u32)param->value);
2121 		break;
2122 	case IW_AUTH_WPA_ENABLED:
2123 		break;
2124 	case IW_AUTH_RX_UNENCRYPTED_EAPOL:
2125 		break;
2126 	case IW_AUTH_PRIVACY_INVOKED:
2127 		break;
2128 	default:
2129 		return -EOPNOTSUPP;
2130 	}
2131 
2132 	return ret;
2133 }
2134 
rtw_wx_set_enc_ext(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2135 static int rtw_wx_set_enc_ext(struct net_device *dev,
2136 			     struct iw_request_info *info,
2137 			     union iwreq_data *wrqu, char *extra)
2138 {
2139 	char *alg_name;
2140 	u32 param_len;
2141 	struct ieee_param *param = NULL;
2142 	struct iw_point *pencoding = &wrqu->encoding;
2143 	struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
2144 	int ret = 0;
2145 
2146 	param_len = sizeof(struct ieee_param) + pext->key_len;
2147 	param = rtw_malloc(param_len);
2148 	if (param == NULL)
2149 		return -1;
2150 
2151 	memset(param, 0, param_len);
2152 
2153 	param->cmd = IEEE_CMD_SET_ENCRYPTION;
2154 	memset(param->sta_addr, 0xff, ETH_ALEN);
2155 
2156 
2157 	switch (pext->alg) {
2158 	case IW_ENCODE_ALG_NONE:
2159 		/* todo: remove key */
2160 		/* remove = 1; */
2161 		alg_name = "none";
2162 		break;
2163 	case IW_ENCODE_ALG_WEP:
2164 		alg_name = "WEP";
2165 		break;
2166 	case IW_ENCODE_ALG_TKIP:
2167 		alg_name = "TKIP";
2168 		break;
2169 	case IW_ENCODE_ALG_CCMP:
2170 		alg_name = "CCMP";
2171 		break;
2172 	case IW_ENCODE_ALG_AES_CMAC:
2173 		alg_name = "BIP";
2174 		break;
2175 	default:
2176 		ret = -1;
2177 		goto exit;
2178 	}
2179 
2180 	strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
2181 
2182 	if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
2183 		param->u.crypt.set_tx = 1;
2184 
2185 	/* cliW: WEP does not have group key
2186 	 * just not checking GROUP key setting
2187 	 */
2188 	if ((pext->alg != IW_ENCODE_ALG_WEP) &&
2189 		((pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
2190 		|| (pext->ext_flags & IW_ENCODE_ALG_AES_CMAC)))	{
2191 		param->u.crypt.set_tx = 0;
2192 	}
2193 
2194 	param->u.crypt.idx = (pencoding->flags&0x00FF) -1 ;
2195 
2196 	if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID)
2197 		memcpy(param->u.crypt.seq, pext->rx_seq, 8);
2198 
2199 	if (pext->key_len) {
2200 		param->u.crypt.key_len = pext->key_len;
2201 		/* memcpy(param + 1, pext + 1, pext->key_len); */
2202 		memcpy(param->u.crypt.key, pext + 1, pext->key_len);
2203 	}
2204 
2205 	if (pencoding->flags & IW_ENCODE_DISABLED) {
2206 		/* todo: remove key */
2207 		/* remove = 1; */
2208 	}
2209 
2210 	ret =  wpa_set_encryption(dev, param, param_len);
2211 
2212 exit:
2213 	kfree(param);
2214 
2215 	return ret;
2216 }
2217 
2218 
rtw_wx_get_nick(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2219 static int rtw_wx_get_nick(struct net_device *dev,
2220 			     struct iw_request_info *info,
2221 			     union iwreq_data *wrqu, char *extra)
2222 {
2223 	/* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2224 	 /* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
2225 	 /* struct security_priv *psecuritypriv = &padapter->securitypriv; */
2226 
2227 	if (extra) {
2228 		wrqu->data.length = 14;
2229 		wrqu->data.flags = 1;
2230 		memcpy(extra, "<WIFI@REALTEK>", 14);
2231 	}
2232 	return 0;
2233 }
2234 
rtw_wx_read32(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2235 static int rtw_wx_read32(struct net_device *dev,
2236                             struct iw_request_info *info,
2237                             union iwreq_data *wrqu, char *extra)
2238 {
2239 	struct adapter *padapter;
2240 	struct iw_point *p;
2241 	u16 len;
2242 	u32 addr;
2243 	u32 data32;
2244 	u32 bytes;
2245 	u8 *ptmp;
2246 	int ret;
2247 
2248 
2249 	ret = 0;
2250 	padapter = (struct adapter *)rtw_netdev_priv(dev);
2251 	p = &wrqu->data;
2252 	len = p->length;
2253 	if (0 == len)
2254 		return -EINVAL;
2255 
2256 	ptmp = rtw_malloc(len);
2257 	if (NULL == ptmp)
2258 		return -ENOMEM;
2259 
2260 	if (copy_from_user(ptmp, p->pointer, len)) {
2261 		ret = -EFAULT;
2262 		goto exit;
2263 	}
2264 
2265 	bytes = 0;
2266 	addr = 0;
2267 	sscanf(ptmp, "%d,%x", &bytes, &addr);
2268 
2269 	switch (bytes) {
2270 		case 1:
2271 			data32 = rtw_read8(padapter, addr);
2272 			sprintf(extra, "0x%02X", data32);
2273 			break;
2274 		case 2:
2275 			data32 = rtw_read16(padapter, addr);
2276 			sprintf(extra, "0x%04X", data32);
2277 			break;
2278 		case 4:
2279 			data32 = rtw_read32(padapter, addr);
2280 			sprintf(extra, "0x%08X", data32);
2281 			break;
2282 		default:
2283 			DBG_871X(KERN_INFO "%s: usage> read [bytes],[address(hex)]\n", __func__);
2284 			ret = -EINVAL;
2285 			goto exit;
2286 	}
2287 	DBG_871X(KERN_INFO "%s: addr = 0x%08X data =%s\n", __func__, addr, extra);
2288 
2289 exit:
2290 	kfree(ptmp);
2291 
2292 	return 0;
2293 }
2294 
rtw_wx_write32(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2295 static int rtw_wx_write32(struct net_device *dev,
2296                             struct iw_request_info *info,
2297                             union iwreq_data *wrqu, char *extra)
2298 {
2299 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2300 
2301 	u32 addr;
2302 	u32 data32;
2303 	u32 bytes;
2304 
2305 
2306 	bytes = 0;
2307 	addr = 0;
2308 	data32 = 0;
2309 	sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
2310 
2311 	switch (bytes) {
2312 		case 1:
2313 			rtw_write8(padapter, addr, (u8)data32);
2314 			DBG_871X(KERN_INFO "%s: addr = 0x%08X data = 0x%02X\n", __func__, addr, (u8)data32);
2315 			break;
2316 		case 2:
2317 			rtw_write16(padapter, addr, (u16)data32);
2318 			DBG_871X(KERN_INFO "%s: addr = 0x%08X data = 0x%04X\n", __func__, addr, (u16)data32);
2319 			break;
2320 		case 4:
2321 			rtw_write32(padapter, addr, data32);
2322 			DBG_871X(KERN_INFO "%s: addr = 0x%08X data = 0x%08X\n", __func__, addr, data32);
2323 			break;
2324 		default:
2325 			DBG_871X(KERN_INFO "%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
2326 			return -EINVAL;
2327 	}
2328 
2329 	return 0;
2330 }
2331 
rtw_wx_read_rf(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2332 static int rtw_wx_read_rf(struct net_device *dev,
2333                             struct iw_request_info *info,
2334                             union iwreq_data *wrqu, char *extra)
2335 {
2336 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2337 	u32 path, addr, data32;
2338 
2339 
2340 	path = *(u32*)extra;
2341 	addr = *((u32*)extra + 1);
2342 	data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
2343 	/*
2344 	 * IMPORTANT!!
2345 	 * Only when wireless private ioctl is at odd order,
2346 	 * "extra" would be copied to user space.
2347 	 */
2348 	sprintf(extra, "0x%05x", data32);
2349 
2350 	return 0;
2351 }
2352 
rtw_wx_write_rf(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2353 static int rtw_wx_write_rf(struct net_device *dev,
2354                             struct iw_request_info *info,
2355                             union iwreq_data *wrqu, char *extra)
2356 {
2357 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2358 	u32 path, addr, data32;
2359 
2360 
2361 	path = *(u32*)extra;
2362 	addr = *((u32*)extra + 1);
2363 	data32 = *((u32*)extra + 2);
2364 /* 	DBG_871X("%s: path =%d addr = 0x%02x data = 0x%05x\n", __func__, path, addr, data32); */
2365 	rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
2366 
2367 	return 0;
2368 }
2369 
rtw_wx_priv_null(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * b)2370 static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
2371 		 union iwreq_data *wrqu, char *b)
2372 {
2373 	return -1;
2374 }
2375 
dummy(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * b)2376 static int dummy(struct net_device *dev, struct iw_request_info *a,
2377 		 union iwreq_data *wrqu, char *b)
2378 {
2379 	/* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2380 	/* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
2381 
2382 	/* DBG_871X("cmd_code =%x, fwstate = 0x%x\n", a->cmd, get_fwstate(pmlmepriv)); */
2383 
2384 	return -1;
2385 
2386 }
2387 
rtw_wx_set_channel_plan(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2388 static int rtw_wx_set_channel_plan(struct net_device *dev,
2389                                struct iw_request_info *info,
2390                                union iwreq_data *wrqu, char *extra)
2391 {
2392 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2393 	u8 channel_plan_req = (u8) (*((int *)wrqu));
2394 
2395 	if (_SUCCESS == rtw_set_chplan_cmd(padapter, channel_plan_req, 1, 1))
2396 		DBG_871X("%s set channel_plan = 0x%02X\n", __func__, channel_plan_req);
2397 	 else
2398 		return -EPERM;
2399 
2400 	return 0;
2401 }
2402 
rtw_wx_set_mtk_wps_probe_ie(struct net_device * dev,struct iw_request_info * a,union iwreq_data * wrqu,char * b)2403 static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
2404 		struct iw_request_info *a,
2405 		union iwreq_data *wrqu, char *b)
2406 {
2407 	return 0;
2408 }
2409 
rtw_wx_get_sensitivity(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * buf)2410 static int rtw_wx_get_sensitivity(struct net_device *dev,
2411 				struct iw_request_info *info,
2412 				union iwreq_data *wrqu, char *buf)
2413 {
2414 	return 0;
2415 }
2416 
rtw_wx_set_mtk_wps_ie(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2417 static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
2418 				struct iw_request_info *info,
2419 				union iwreq_data *wrqu, char *extra)
2420 {
2421 	return 0;
2422 }
2423 
2424 /*
2425 typedef int (*iw_handler)(struct net_device *dev, struct iw_request_info *info,
2426 			  union iwreq_data *wrqu, char *extra);
2427 */
2428 /*
2429  *For all data larger than 16 octets, we need to use a
2430  *pointer to memory allocated in user space.
2431  */
rtw_drvext_hdl(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2432 static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
2433 						union iwreq_data *wrqu, char *extra)
2434 {
2435 	return 0;
2436 }
2437 
rtw_mp_ioctl_hdl(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2438 static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
2439 						union iwreq_data *wrqu, char *extra)
2440 {
2441 	int ret = 0;
2442 	return ret;
2443 }
2444 
rtw_get_ap_info(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2445 static int rtw_get_ap_info(struct net_device *dev,
2446                                struct iw_request_info *info,
2447                                union iwreq_data *wrqu, char *extra)
2448 {
2449 	int ret = 0;
2450 	u32 cnt = 0, wpa_ielen;
2451 	struct list_head	*plist, *phead;
2452 	unsigned char *pbuf;
2453 	u8 bssid[ETH_ALEN];
2454 	char data[32];
2455 	struct wlan_network *pnetwork = NULL;
2456 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2457 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2458 	struct __queue *queue = &(pmlmepriv->scanned_queue);
2459 	struct iw_point *pdata = &wrqu->data;
2460 
2461 	DBG_871X("+rtw_get_aplist_info\n");
2462 
2463 	if ((padapter->bDriverStopped) || (pdata == NULL)) {
2464 		ret = -EINVAL;
2465 		goto exit;
2466 	}
2467 
2468 	while ((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING))) == true) {
2469 		msleep(30);
2470 		cnt++;
2471 		if (cnt > 100)
2472 			break;
2473 	}
2474 
2475 
2476 	/* pdata->length = 0;? */
2477 	pdata->flags = 0;
2478 	if (pdata->length>=32) {
2479 		if (copy_from_user(data, pdata->pointer, 32)) {
2480 			ret = -EINVAL;
2481 			goto exit;
2482 		}
2483 	} else {
2484 		ret = -EINVAL;
2485 		goto exit;
2486 	}
2487 
2488 	spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
2489 
2490 	phead = get_list_head(queue);
2491 	plist = get_next(phead);
2492 
2493 	while (1) {
2494 		if (phead == plist)
2495 			break;
2496 
2497 
2498 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
2499 
2500 		if (!mac_pton(data, bssid)) {
2501 			DBG_871X("Invalid BSSID '%s'.\n", (u8 *)data);
2502 			spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
2503 			return -EINVAL;
2504 		}
2505 
2506 
2507 		if (!memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN)) { /* BSSID match, then check if supporting wpa/wpa2 */
2508 			DBG_871X("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
2509 
2510 			pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
2511 			if (pbuf && (wpa_ielen>0)) {
2512 				pdata->flags = 1;
2513 				break;
2514 			}
2515 
2516 			pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
2517 			if (pbuf && (wpa_ielen>0)) {
2518 				pdata->flags = 2;
2519 				break;
2520 			}
2521 		}
2522 
2523 		plist = get_next(plist);
2524 
2525 	}
2526 
2527 	spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
2528 
2529 	if (pdata->length>=34) {
2530 		if (copy_to_user((u8 __force __user *)pdata->pointer+32, (u8 *)&pdata->flags, 1)) {
2531 			ret = -EINVAL;
2532 			goto exit;
2533 		}
2534 	}
2535 
2536 exit:
2537 
2538 	return ret;
2539 
2540 }
2541 
rtw_set_pid(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2542 static int rtw_set_pid(struct net_device *dev,
2543                                struct iw_request_info *info,
2544                                union iwreq_data *wrqu, char *extra)
2545 {
2546 
2547 	int ret = 0;
2548 	struct adapter *padapter = rtw_netdev_priv(dev);
2549 	int *pdata = (int *)wrqu;
2550 	int selector;
2551 
2552 	if ((padapter->bDriverStopped) || (pdata == NULL)) {
2553 		ret = -EINVAL;
2554 		goto exit;
2555 	}
2556 
2557 	selector = *pdata;
2558 	if (selector < 3 && selector >= 0) {
2559 		padapter->pid[selector] = *(pdata+1);
2560 		DBG_871X("%s set pid[%d]=%d\n", __func__, selector , padapter->pid[selector]);
2561 	}
2562 	else
2563 		DBG_871X("%s selector %d error\n", __func__, selector);
2564 
2565 exit:
2566 
2567 	return ret;
2568 
2569 }
2570 
rtw_wps_start(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2571 static int rtw_wps_start(struct net_device *dev,
2572                                struct iw_request_info *info,
2573                                union iwreq_data *wrqu, char *extra)
2574 {
2575 
2576 	int ret = 0;
2577 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2578 	struct iw_point *pdata = &wrqu->data;
2579 	u32   u32wps_start = 0;
2580         unsigned int uintRet = 0;
2581 
2582 	if ((true == padapter->bDriverStopped) ||(true ==padapter->bSurpriseRemoved) || (NULL == pdata)) {
2583 		ret = -EINVAL;
2584 		goto exit;
2585 	}
2586 
2587 	uintRet = copy_from_user((void*) &u32wps_start, pdata->pointer, 4);
2588 	if (u32wps_start == 0)
2589 		u32wps_start = *extra;
2590 
2591 	DBG_871X("[%s] wps_start = %d\n", __func__, u32wps_start);
2592 
2593 #ifdef CONFIG_INTEL_WIDI
2594 	process_intel_widi_wps_status(padapter, u32wps_start);
2595 #endif /* CONFIG_INTEL_WIDI */
2596 
2597 exit:
2598 
2599 	return ret;
2600 
2601 }
2602 
rtw_p2p_set(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2603 static int rtw_p2p_set(struct net_device *dev,
2604                                struct iw_request_info *info,
2605                                union iwreq_data *wrqu, char *extra)
2606 {
2607 
2608 	int ret = 0;
2609 
2610 	return ret;
2611 
2612 }
2613 
rtw_p2p_get(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2614 static int rtw_p2p_get(struct net_device *dev,
2615                                struct iw_request_info *info,
2616                                union iwreq_data *wrqu, char *extra)
2617 {
2618 
2619 	int ret = 0;
2620 
2621 	return ret;
2622 
2623 }
2624 
rtw_p2p_get2(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2625 static int rtw_p2p_get2(struct net_device *dev,
2626 						struct iw_request_info *info,
2627 						union iwreq_data *wrqu, char *extra)
2628 {
2629 
2630 	int ret = 0;
2631 
2632 	return ret;
2633 
2634 }
2635 
rtw_rereg_nd_name(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2636 static int rtw_rereg_nd_name(struct net_device *dev,
2637                                struct iw_request_info *info,
2638                                union iwreq_data *wrqu, char *extra)
2639 {
2640 	int ret = 0;
2641 	struct adapter *padapter = rtw_netdev_priv(dev);
2642 	struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
2643 	char new_ifname[IFNAMSIZ];
2644 
2645 	if (rereg_priv->old_ifname[0] == 0) {
2646 		char *reg_ifname;
2647 		reg_ifname = padapter->registrypriv.ifname;
2648 
2649 		strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
2650 		rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
2651 	}
2652 
2653 	/* DBG_871X("%s wrqu->data.length:%d\n", __func__, wrqu->data.length); */
2654 	if (wrqu->data.length > IFNAMSIZ)
2655 		return -EFAULT;
2656 
2657 	if (copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ))
2658 		return -EFAULT;
2659 
2660 	if (0 == strcmp(rereg_priv->old_ifname, new_ifname))
2661 		return ret;
2662 
2663 	DBG_871X("%s new_ifname:%s\n", __func__, new_ifname);
2664 	if (0 != (ret = rtw_change_ifname(padapter, new_ifname)))
2665 		goto exit;
2666 
2667 	strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
2668 	rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
2669 
2670 	if (!memcmp(new_ifname, "disable%d", 9)) {
2671 
2672 		DBG_871X("%s disable\n", __func__);
2673 		/*  free network queue for Android's timming issue */
2674 		rtw_free_network_queue(padapter, true);
2675 
2676 		/*  the interface is being "disabled", we can do deeper IPS */
2677 		/* rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv); */
2678 		/* rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL); */
2679 	}
2680 exit:
2681 	return ret;
2682 
2683 }
2684 
rtw_dbg_port(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)2685 static int rtw_dbg_port(struct net_device *dev,
2686                                struct iw_request_info *info,
2687                                union iwreq_data *wrqu, char *extra)
2688 {
2689 	int ret = 0;
2690 	u8 major_cmd, minor_cmd;
2691 	u16 arg;
2692 	u32 extra_arg, *pdata, val32;
2693 	struct sta_info *psta;
2694 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2695 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2696 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2697 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
2698 	struct wlan_network *cur_network = &(pmlmepriv->cur_network);
2699 	struct sta_priv *pstapriv = &padapter->stapriv;
2700 
2701 
2702 	pdata = (u32*)&wrqu->data;
2703 
2704 	val32 = *pdata;
2705 	arg = (u16)(val32&0x0000ffff);
2706 	major_cmd = (u8)(val32>>24);
2707 	minor_cmd = (u8)((val32>>16)&0x00ff);
2708 
2709 	extra_arg = *(pdata+1);
2710 
2711 	switch (major_cmd) {
2712 		case 0x70:/* read_reg */
2713 			switch (minor_cmd) {
2714 				case 1:
2715 					DBG_871X("rtw_read8(0x%x) = 0x%02x\n", arg, rtw_read8(padapter, arg));
2716 					break;
2717 				case 2:
2718 					DBG_871X("rtw_read16(0x%x) = 0x%04x\n", arg, rtw_read16(padapter, arg));
2719 					break;
2720 				case 4:
2721 					DBG_871X("rtw_read32(0x%x) = 0x%08x\n", arg, rtw_read32(padapter, arg));
2722 					break;
2723 			}
2724 			break;
2725 		case 0x71:/* write_reg */
2726 			switch (minor_cmd) {
2727 				case 1:
2728 					rtw_write8(padapter, arg, extra_arg);
2729 					DBG_871X("rtw_write8(0x%x) = 0x%02x\n", arg, rtw_read8(padapter, arg));
2730 					break;
2731 				case 2:
2732 					rtw_write16(padapter, arg, extra_arg);
2733 					DBG_871X("rtw_write16(0x%x) = 0x%04x\n", arg, rtw_read16(padapter, arg));
2734 					break;
2735 				case 4:
2736 					rtw_write32(padapter, arg, extra_arg);
2737 					DBG_871X("rtw_write32(0x%x) = 0x%08x\n", arg, rtw_read32(padapter, arg));
2738 					break;
2739 			}
2740 			break;
2741 		case 0x72:/* read_bb */
2742 			DBG_871X("read_bbreg(0x%x) = 0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
2743 			break;
2744 		case 0x73:/* write_bb */
2745 			rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
2746 			DBG_871X("write_bbreg(0x%x) = 0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
2747 			break;
2748 		case 0x74:/* read_rf */
2749 			DBG_871X("read RF_reg path(0x%02x), offset(0x%x), value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
2750 			break;
2751 		case 0x75:/* write_rf */
2752 			rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
2753 			DBG_871X("write RF_reg path(0x%02x), offset(0x%x), value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
2754 			break;
2755 
2756 		case 0x76:
2757 			switch (minor_cmd) {
2758 				case 0x00: /* normal mode, */
2759 					padapter->recvpriv.is_signal_dbg = 0;
2760 					break;
2761 				case 0x01: /* dbg mode */
2762 					padapter->recvpriv.is_signal_dbg = 1;
2763 					extra_arg = extra_arg>100?100:extra_arg;
2764 					padapter->recvpriv.signal_strength_dbg =extra_arg;
2765 					break;
2766 			}
2767 			break;
2768 		case 0x78: /* IOL test */
2769 			break;
2770 		case 0x79:
2771 			{
2772 				/*
2773 				* dbg 0x79000000 [value], set RESP_TXAGC to + value, value:0~15
2774 				* dbg 0x79010000 [value], set RESP_TXAGC to - value, value:0~15
2775 				*/
2776 				u8 value =  extra_arg & 0x0f;
2777 				u8 sign = minor_cmd;
2778 				u16 write_value = 0;
2779 
2780 				DBG_871X("%s set RESP_TXAGC to %s %u\n", __func__, sign?"minus":"plus", value);
2781 
2782 				if (sign)
2783 					value = value | 0x10;
2784 
2785 				write_value = value | (value << 5);
2786 				rtw_write16(padapter, 0x6d9, write_value);
2787 			}
2788 			break;
2789 		case 0x7a:
2790 			receive_disconnect(padapter, pmlmeinfo->network.MacAddress
2791 				, WLAN_REASON_EXPIRATION_CHK);
2792 			break;
2793 		case 0x7F:
2794 			switch (minor_cmd) {
2795 				case 0x0:
2796 					DBG_871X("fwstate = 0x%x\n", get_fwstate(pmlmepriv));
2797 					break;
2798 				case 0x01:
2799 					DBG_871X("minor_cmd 0x%x\n", minor_cmd);
2800 					break;
2801 				case 0x02:
2802 					DBG_871X("pmlmeinfo->state = 0x%x\n", pmlmeinfo->state);
2803 					DBG_871X("DrvBcnEarly =%d\n", pmlmeext->DrvBcnEarly);
2804 					DBG_871X("DrvBcnTimeOut =%d\n", pmlmeext->DrvBcnTimeOut);
2805 					break;
2806 				case 0x03:
2807 					DBG_871X("qos_option =%d\n", pmlmepriv->qospriv.qos_option);
2808 					DBG_871X("ht_option =%d\n", pmlmepriv->htpriv.ht_option);
2809 					break;
2810 				case 0x04:
2811 					DBG_871X("cur_ch =%d\n", pmlmeext->cur_channel);
2812 					DBG_871X("cur_bw =%d\n", pmlmeext->cur_bwmode);
2813 					DBG_871X("cur_ch_off =%d\n", pmlmeext->cur_ch_offset);
2814 
2815 					DBG_871X("oper_ch =%d\n", rtw_get_oper_ch(padapter));
2816 					DBG_871X("oper_bw =%d\n", rtw_get_oper_bw(padapter));
2817 					DBG_871X("oper_ch_offet =%d\n", rtw_get_oper_choffset(padapter));
2818 
2819 					break;
2820 				case 0x05:
2821 					psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
2822 					if (psta) {
2823 						int i;
2824 						struct recv_reorder_ctrl *preorder_ctrl;
2825 
2826 						DBG_871X("SSID =%s\n", cur_network->network.Ssid.Ssid);
2827 						DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
2828 						DBG_871X("cur_channel =%d, cur_bwmode =%d, cur_ch_offset =%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
2829 						DBG_871X("rtsen =%d, cts2slef =%d\n", psta->rtsen, psta->cts2self);
2830 						DBG_871X("state = 0x%x, aid =%d, macid =%d, raid =%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
2831 						DBG_871X("qos_en =%d, ht_en =%d, init_rate =%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
2832 						DBG_871X("bwmode =%d, ch_offset =%d, sgi_20m =%d, sgi_40m =%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
2833 						DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
2834 						DBG_871X("agg_enable_bitmap =%x, candidate_tid_bitmap =%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
2835 
2836 						for (i = 0;i<16;i++) {
2837 							preorder_ctrl = &psta->recvreorder_ctrl[i];
2838 							if (preorder_ctrl->enable)
2839 								DBG_871X("tid =%d, indicate_seq =%d\n", i, preorder_ctrl->indicate_seq);
2840 						}
2841 
2842 					} else {
2843 						DBG_871X("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
2844 					}
2845 					break;
2846 				case 0x06:
2847 					{
2848 						u32 ODMFlag;
2849 						rtw_hal_get_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&ODMFlag));
2850 						DBG_871X("(B)DMFlag = 0x%x, arg = 0x%x\n", ODMFlag, arg);
2851 						ODMFlag = (u32)(0x0f&arg);
2852 						DBG_871X("(A)DMFlag = 0x%x\n", ODMFlag);
2853 						rtw_hal_set_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&ODMFlag));
2854 					}
2855 					break;
2856 				case 0x07:
2857 					DBG_871X("bSurpriseRemoved =%d, bDriverStopped =%d\n",
2858 						padapter->bSurpriseRemoved, padapter->bDriverStopped);
2859 					break;
2860 				case 0x08:
2861 					{
2862 						DBG_871X("minor_cmd 0x%x\n", minor_cmd);
2863 					}
2864 					break;
2865 				case 0x09:
2866 					{
2867 						int i, j;
2868 						struct list_head	*plist, *phead;
2869 						struct recv_reorder_ctrl *preorder_ctrl;
2870 
2871 						DBG_871X("sta_dz_bitmap = 0x%x, tim_bitmap = 0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
2872 
2873 						spin_lock_bh(&pstapriv->sta_hash_lock);
2874 
2875 						for (i = 0; i< NUM_STA; i++) {
2876 							phead = &(pstapriv->sta_hash[i]);
2877 							plist = get_next(phead);
2878 
2879 							while (phead != plist) {
2880 								psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
2881 
2882 								plist = get_next(plist);
2883 
2884 								if (extra_arg == psta->aid) {
2885 									DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
2886 									DBG_871X("rtsen =%d, cts2slef =%d\n", psta->rtsen, psta->cts2self);
2887 									DBG_871X("state = 0x%x, aid =%d, macid =%d, raid =%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
2888 									DBG_871X("qos_en =%d, ht_en =%d, init_rate =%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
2889 									DBG_871X("bwmode =%d, ch_offset =%d, sgi_20m =%d, sgi_40m =%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
2890 									DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
2891 									DBG_871X("agg_enable_bitmap =%x, candidate_tid_bitmap =%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
2892 									DBG_871X("capability = 0x%x\n", psta->capability);
2893 									DBG_871X("flags = 0x%x\n", psta->flags);
2894 									DBG_871X("wpa_psk = 0x%x\n", psta->wpa_psk);
2895 									DBG_871X("wpa2_group_cipher = 0x%x\n", psta->wpa2_group_cipher);
2896 									DBG_871X("wpa2_pairwise_cipher = 0x%x\n", psta->wpa2_pairwise_cipher);
2897 									DBG_871X("qos_info = 0x%x\n", psta->qos_info);
2898 									DBG_871X("dot118021XPrivacy = 0x%x\n", psta->dot118021XPrivacy);
2899 
2900 
2901 
2902 									for (j = 0;j<16;j++) {
2903 										preorder_ctrl = &psta->recvreorder_ctrl[j];
2904 										if (preorder_ctrl->enable)
2905 											DBG_871X("tid =%d, indicate_seq =%d\n", j, preorder_ctrl->indicate_seq);
2906 									}
2907 								}
2908 							}
2909 						}
2910 
2911 						spin_unlock_bh(&pstapriv->sta_hash_lock);
2912 
2913 					}
2914 					break;
2915 				case 0x0a:
2916 					{
2917 						int max_mac_id = 0;
2918 						max_mac_id = rtw_search_max_mac_id(padapter);
2919 						printk("%s ==> max_mac_id = %d\n", __func__, max_mac_id);
2920 					}
2921 					break;
2922 				case 0x0b: /* Enable = 1, Disable = 0 driver control vrtl_carrier_sense. */
2923 					if (arg == 0) {
2924 						DBG_871X("disable driver ctrl vcs\n");
2925 						padapter->driver_vcs_en = 0;
2926 					} else if (arg == 1) {
2927 						DBG_871X("enable driver ctrl vcs = %d\n", extra_arg);
2928 						padapter->driver_vcs_en = 1;
2929 
2930 						if (extra_arg>2)
2931 							padapter->driver_vcs_type = 1;
2932 						else
2933 							padapter->driver_vcs_type = extra_arg;
2934 					}
2935 					break;
2936 				case 0x0c:/* dump rx/tx packet */
2937 					{
2938 						if (arg == 0) {
2939 							DBG_871X("dump rx packet (%d)\n", extra_arg);
2940 							/* pHalData->bDumpRxPkt =extra_arg; */
2941 							rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
2942 						} else if (arg == 1) {
2943 							DBG_871X("dump tx packet (%d)\n", extra_arg);
2944 							rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_TXPKT, &(extra_arg));
2945 						}
2946 					}
2947 					break;
2948 				case 0x0e:
2949 					{
2950 						if (arg == 0) {
2951 							DBG_871X("disable driver ctrl rx_ampdu_factor\n");
2952 							padapter->driver_rx_ampdu_factor = 0xFF;
2953 						} else if (arg == 1) {
2954 
2955 							DBG_871X("enable driver ctrl rx_ampdu_factor = %d\n", extra_arg);
2956 
2957 							if ((extra_arg & 0x03) > 0x03)
2958 								padapter->driver_rx_ampdu_factor = 0xFF;
2959 							else
2960 								padapter->driver_rx_ampdu_factor = extra_arg;
2961 						}
2962 					}
2963 					break;
2964 
2965 				case 0x10:/*  driver version display */
2966 					dump_drv_version(RTW_DBGDUMP);
2967 					break;
2968 				case 0x11:/* dump linked status */
2969 					{
2970 						 linked_info_dump(padapter, extra_arg);
2971 					}
2972 					break;
2973 				case 0x12: /* set rx_stbc */
2974 				{
2975 					struct registry_priv *pregpriv = &padapter->registrypriv;
2976 					/*  0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g */
2977 					/* default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ */
2978 					if (pregpriv && (extra_arg == 0 || extra_arg == 1|| extra_arg == 2 || extra_arg == 3)) {
2979 						pregpriv->rx_stbc = extra_arg;
2980 						DBG_871X("set rx_stbc =%d\n", pregpriv->rx_stbc);
2981 					} else
2982 						DBG_871X("get rx_stbc =%d\n", pregpriv->rx_stbc);
2983 
2984 				}
2985 				break;
2986 				case 0x13: /* set ampdu_enable */
2987 				{
2988 					struct registry_priv *pregpriv = &padapter->registrypriv;
2989 					/*  0: disable, 0x1:enable (but wifi_spec should be 0), 0x2: force enable (don't care wifi_spec) */
2990 					if (pregpriv && extra_arg < 3) {
2991 						pregpriv->ampdu_enable = extra_arg;
2992 						DBG_871X("set ampdu_enable =%d\n", pregpriv->ampdu_enable);
2993 					} else
2994 						DBG_871X("get ampdu_enable =%d\n", pregpriv->ampdu_enable);
2995 
2996 				}
2997 				break;
2998 				case 0x14:
2999 				{
3000 					DBG_871X("minor_cmd 0x%x\n", minor_cmd);
3001 				}
3002 				break;
3003 				case 0x16:
3004 				{
3005 					if (arg == 0xff) {
3006 						rtw_odm_dbg_comp_msg(RTW_DBGDUMP, padapter);
3007 					} else {
3008 						u64 dbg_comp = (u64)extra_arg;
3009 						rtw_odm_dbg_comp_set(padapter, dbg_comp);
3010 					}
3011 				}
3012 					break;
3013 #ifdef DBG_FIXED_CHAN
3014 				case 0x17:
3015 					{
3016 						struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
3017 						printk("===>  Fixed channel to %d\n", extra_arg);
3018 						pmlmeext->fixed_chan = extra_arg;
3019 
3020 					}
3021 					break;
3022 #endif
3023 				case 0x18:
3024 					{
3025 						printk("===>  Switch USB Mode %d\n", extra_arg);
3026 						rtw_hal_set_hwreg(padapter, HW_VAR_USB_MODE, (u8 *)&extra_arg);
3027 					}
3028 					break;
3029 				case 0x19:
3030 					{
3031 						struct registry_priv *pregistrypriv = &padapter->registrypriv;
3032 						/*  extra_arg : */
3033 						/*  BIT0: Enable VHT LDPC Rx, BIT1: Enable VHT LDPC Tx, */
3034 						/*  BIT4: Enable HT LDPC Rx, BIT5: Enable HT LDPC Tx */
3035 						if (arg == 0) {
3036 							DBG_871X("driver disable LDPC\n");
3037 							pregistrypriv->ldpc_cap = 0x00;
3038 						} else if (arg == 1) {
3039 							DBG_871X("driver set LDPC cap = 0x%x\n", extra_arg);
3040 							pregistrypriv->ldpc_cap = (u8)(extra_arg&0x33);
3041 						}
3042 					}
3043                                         break;
3044 				case 0x1a:
3045 					{
3046 						struct registry_priv *pregistrypriv = &padapter->registrypriv;
3047 						/*  extra_arg : */
3048 						/*  BIT0: Enable VHT STBC Rx, BIT1: Enable VHT STBC Tx, */
3049 						/*  BIT4: Enable HT STBC Rx, BIT5: Enable HT STBC Tx */
3050 						if (arg == 0) {
3051 							DBG_871X("driver disable STBC\n");
3052 							pregistrypriv->stbc_cap = 0x00;
3053 						} else if (arg == 1) {
3054 							DBG_871X("driver set STBC cap = 0x%x\n", extra_arg);
3055 							pregistrypriv->stbc_cap = (u8)(extra_arg&0x33);
3056 						}
3057 					}
3058                                         break;
3059 				case 0x1b:
3060 					{
3061 						struct registry_priv *pregistrypriv = &padapter->registrypriv;
3062 
3063 						if (arg == 0) {
3064 							DBG_871X("disable driver ctrl max_rx_rate, reset to default_rate_set\n");
3065 							init_mlme_default_rate_set(padapter);
3066 							pregistrypriv->ht_enable = (u8)rtw_ht_enable;
3067 						} else if (arg == 1) {
3068 
3069 							int i;
3070 							u8 max_rx_rate;
3071 
3072 							DBG_871X("enable driver ctrl max_rx_rate = 0x%x\n", extra_arg);
3073 
3074 							max_rx_rate = (u8)extra_arg;
3075 
3076 							if (max_rx_rate < 0xc) { /*  max_rx_rate < MSC0 -> B or G -> disable HT */
3077 								pregistrypriv->ht_enable = 0;
3078 								for (i = 0; i<NumRates; i++) {
3079 									if (pmlmeext->datarate[i] > max_rx_rate)
3080 										pmlmeext->datarate[i] = 0xff;
3081 								}
3082 
3083 							}
3084 							else if (max_rx_rate < 0x1c) { /*  mcs0~mcs15 */
3085 								u32 mcs_bitmap = 0x0;
3086 
3087 								for (i = 0; i<((max_rx_rate+1)-0xc); i++)
3088 									mcs_bitmap |= BIT(i);
3089 
3090 								set_mcs_rate_by_mask(pmlmeext->default_supported_mcs_set, mcs_bitmap);
3091 							}
3092 						}
3093 					}
3094                                         break;
3095 				case 0x1c: /* enable/disable driver control AMPDU Density for peer sta's rx */
3096 					{
3097 						if (arg == 0) {
3098 							DBG_871X("disable driver ctrl ampdu density\n");
3099 							padapter->driver_ampdu_spacing = 0xFF;
3100 						} else if (arg == 1) {
3101 
3102 							DBG_871X("enable driver ctrl ampdu density = %d\n", extra_arg);
3103 
3104 							if ((extra_arg & 0x07) > 0x07)
3105 								padapter->driver_ampdu_spacing = 0xFF;
3106 							else
3107 								padapter->driver_ampdu_spacing = extra_arg;
3108 						}
3109 					}
3110 					break;
3111 #ifdef CONFIG_BACKGROUND_NOISE_MONITOR
3112 				case 0x1e:
3113 					{
3114 						struct hal_com_data	*pHalData = GET_HAL_DATA(padapter);
3115 						PDM_ODM_T pDM_Odm = &pHalData->odmpriv;
3116 						u8 chan = rtw_get_oper_ch(padapter);
3117 						DBG_871X("===========================================\n");
3118 						ODM_InbandNoise_Monitor(pDM_Odm, true, 0x1e, 100);
3119 						DBG_871X("channel(%d), noise_a = %d, noise_b = %d , noise_all:%d\n",
3120 							chan, pDM_Odm->noise_level.noise[ODM_RF_PATH_A],
3121 							pDM_Odm->noise_level.noise[ODM_RF_PATH_B],
3122 							pDM_Odm->noise_level.noise_all);
3123 						DBG_871X("===========================================\n");
3124 
3125 					}
3126 					break;
3127 #endif
3128 				case 0x23:
3129 					{
3130 						DBG_871X("turn %s the bNotifyChannelChange Variable\n", (extra_arg == 1)?"on":"off");
3131 						padapter->bNotifyChannelChange = extra_arg;
3132 						break;
3133 					}
3134 				case 0x24:
3135 					{
3136 						break;
3137 					}
3138 #ifdef CONFIG_GPIO_API
3139 		            case 0x25: /* Get GPIO register */
3140 		                    {
3141 			                    /*
3142 			                    * dbg 0x7f250000 [gpio_num], Get gpio value, gpio_num:0~7
3143 			                    */
3144 
3145 			                    int value;
3146 			                    DBG_871X("Read GPIO Value  extra_arg = %d\n", extra_arg);
3147 			                    value = rtw_get_gpio(dev, extra_arg);
3148 			                    DBG_871X("Read GPIO Value = %d\n", value);
3149 			                    break;
3150 		                    }
3151 		            case 0x26: /* Set GPIO direction */
3152 		                    {
3153 
3154 			                    /* dbg 0x7f26000x [y], Set gpio direction,
3155 			                    * x: gpio_num, 4~7  y: indicate direction, 0~1
3156 			                    */
3157 
3158 			                    int value;
3159 			                    DBG_871X("Set GPIO Direction! arg = %d , extra_arg =%d\n", arg , extra_arg);
3160 			                    value = rtw_config_gpio(dev, arg, extra_arg);
3161 			                    DBG_871X("Set GPIO Direction %s\n", (value ==-1)?"Fail!!!":"Success");
3162 			                    break;
3163 					}
3164 				case 0x27: /* Set GPIO output direction value */
3165 					{
3166 						/*
3167 						* dbg 0x7f27000x [y], Set gpio output direction value,
3168 						* x: gpio_num, 4~7  y: indicate direction, 0~1
3169 						*/
3170 
3171 						int value;
3172 						DBG_871X("Set GPIO Value! arg = %d , extra_arg =%d\n", arg , extra_arg);
3173 						value = rtw_set_gpio_output_value(dev, arg, extra_arg);
3174 						DBG_871X("Set GPIO Value %s\n", (value ==-1)?"Fail!!!":"Success");
3175 						break;
3176 					}
3177 #endif
3178 				case 0xaa:
3179 					{
3180 						if ((extra_arg & 0x7F)> 0x3F) extra_arg = 0xFF;
3181 						DBG_871X("chang data rate to :0x%02x\n", extra_arg);
3182 						padapter->fix_rate = extra_arg;
3183 					}
3184 					break;
3185 				case 0xdd:/* registers dump , 0 for mac reg, 1 for bb reg, 2 for rf reg */
3186 					{
3187 						if (extra_arg == 0)
3188 							mac_reg_dump(RTW_DBGDUMP, padapter);
3189 						else if (extra_arg == 1)
3190 							bb_reg_dump(RTW_DBGDUMP, padapter);
3191 						else if (extra_arg ==2)
3192 							rf_reg_dump(RTW_DBGDUMP, padapter);
3193 					}
3194 					break;
3195 
3196 				case 0xee:/* turn on/off dynamic funcs */
3197 					{
3198 						u32 odm_flag;
3199 
3200 						if (0xf ==extra_arg) {
3201 							rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&odm_flag);
3202 							DBG_871X(" === DMFlag(0x%08x) ===\n", odm_flag);
3203 							DBG_871X("extra_arg = 0  - disable all dynamic func\n");
3204 							DBG_871X("extra_arg = 1  - disable DIG- BIT(0)\n");
3205 							DBG_871X("extra_arg = 2  - disable High power - BIT(1)\n");
3206 							DBG_871X("extra_arg = 3  - disable tx power tracking - BIT(2)\n");
3207 							DBG_871X("extra_arg = 4  - disable BT coexistence - BIT(3)\n");
3208 							DBG_871X("extra_arg = 5  - disable antenna diversity - BIT(4)\n");
3209 							DBG_871X("extra_arg = 6  - enable all dynamic func\n");
3210 						} else {
3211 							/*extra_arg = 0  - disable all dynamic func
3212 								extra_arg = 1  - disable DIG
3213 								extra_arg = 2  - disable tx power tracking
3214 								extra_arg = 3  - turn on all dynamic func
3215 							*/
3216 							rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DM_FUNC, &(extra_arg));
3217 							rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&odm_flag);
3218 							DBG_871X(" === DMFlag(0x%08x) ===\n", odm_flag);
3219 						}
3220 					}
3221 					break;
3222 
3223 				case 0xfd:
3224 					rtw_write8(padapter, 0xc50, arg);
3225 					DBG_871X("wr(0xc50) = 0x%x\n", rtw_read8(padapter, 0xc50));
3226 					rtw_write8(padapter, 0xc58, arg);
3227 					DBG_871X("wr(0xc58) = 0x%x\n", rtw_read8(padapter, 0xc58));
3228 					break;
3229 				case 0xfe:
3230 					DBG_871X("rd(0xc50) = 0x%x\n", rtw_read8(padapter, 0xc50));
3231 					DBG_871X("rd(0xc58) = 0x%x\n", rtw_read8(padapter, 0xc58));
3232 					break;
3233 				case 0xff:
3234 					{
3235 						DBG_871X("dbg(0x210) = 0x%x\n", rtw_read32(padapter, 0x210));
3236 						DBG_871X("dbg(0x608) = 0x%x\n", rtw_read32(padapter, 0x608));
3237 						DBG_871X("dbg(0x280) = 0x%x\n", rtw_read32(padapter, 0x280));
3238 						DBG_871X("dbg(0x284) = 0x%x\n", rtw_read32(padapter, 0x284));
3239 						DBG_871X("dbg(0x288) = 0x%x\n", rtw_read32(padapter, 0x288));
3240 
3241 						DBG_871X("dbg(0x664) = 0x%x\n", rtw_read32(padapter, 0x664));
3242 
3243 
3244 						DBG_871X("\n");
3245 
3246 						DBG_871X("dbg(0x430) = 0x%x\n", rtw_read32(padapter, 0x430));
3247 						DBG_871X("dbg(0x438) = 0x%x\n", rtw_read32(padapter, 0x438));
3248 
3249 						DBG_871X("dbg(0x440) = 0x%x\n", rtw_read32(padapter, 0x440));
3250 
3251 						DBG_871X("dbg(0x458) = 0x%x\n", rtw_read32(padapter, 0x458));
3252 
3253 						DBG_871X("dbg(0x484) = 0x%x\n", rtw_read32(padapter, 0x484));
3254 						DBG_871X("dbg(0x488) = 0x%x\n", rtw_read32(padapter, 0x488));
3255 
3256 						DBG_871X("dbg(0x444) = 0x%x\n", rtw_read32(padapter, 0x444));
3257 						DBG_871X("dbg(0x448) = 0x%x\n", rtw_read32(padapter, 0x448));
3258 						DBG_871X("dbg(0x44c) = 0x%x\n", rtw_read32(padapter, 0x44c));
3259 						DBG_871X("dbg(0x450) = 0x%x\n", rtw_read32(padapter, 0x450));
3260 					}
3261 					break;
3262 			}
3263 			break;
3264 		default:
3265 			DBG_871X("error dbg cmd!\n");
3266 			break;
3267 	}
3268 
3269 
3270 	return ret;
3271 
3272 }
3273 
wpa_set_param(struct net_device * dev,u8 name,u32 value)3274 static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
3275 {
3276 	uint ret = 0;
3277 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3278 
3279 	switch (name) {
3280 	case IEEE_PARAM_WPA_ENABLED:
3281 
3282 		padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; /* 802.1x */
3283 
3284 		/* ret = ieee80211_wpa_enable(ieee, value); */
3285 
3286 		switch ((value)&0xff) {
3287 		case 1 : /* WPA */
3288 			padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; /* WPA_PSK */
3289 			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
3290 			break;
3291 		case 2: /* WPA2 */
3292 			padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; /* WPA2_PSK */
3293 			padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
3294 			break;
3295 		}
3296 
3297 		RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("wpa_set_param:padapter->securitypriv.ndisauthtype =%d\n", padapter->securitypriv.ndisauthtype));
3298 
3299 		break;
3300 
3301 	case IEEE_PARAM_TKIP_COUNTERMEASURES:
3302 		/* ieee->tkip_countermeasures =value; */
3303 		break;
3304 
3305 	case IEEE_PARAM_DROP_UNENCRYPTED:
3306 	{
3307 		/* HACK:
3308 		 *
3309 		 * wpa_supplicant calls set_wpa_enabled when the driver
3310 		 * is loaded and unloaded, regardless of if WPA is being
3311 		 * used.  No other calls are made which can be used to
3312 		 * determine if encryption will be used or not prior to
3313 		 * association being expected.  If encryption is not being
3314 		 * used, drop_unencrypted is set to false, else true -- we
3315 		 * can use this to determine if the CAP_PRIVACY_ON bit should
3316 		 * be set.
3317 		 */
3318 		break;
3319 
3320 	}
3321 	case IEEE_PARAM_PRIVACY_INVOKED:
3322 
3323 		/* ieee->privacy_invoked =value; */
3324 
3325 		break;
3326 
3327 	case IEEE_PARAM_AUTH_ALGS:
3328 
3329 		ret = wpa_set_auth_algs(dev, value);
3330 
3331 		break;
3332 
3333 	case IEEE_PARAM_IEEE_802_1X:
3334 
3335 		/* ieee->ieee802_1x =value; */
3336 
3337 		break;
3338 
3339 	case IEEE_PARAM_WPAX_SELECT:
3340 
3341 		/*  added for WPA2 mixed mode */
3342 		/* DBG_871X(KERN_WARNING "------------------------>wpax value = %x\n", value); */
3343 		/*
3344 		spin_lock_irqsave(&ieee->wpax_suitlist_lock, flags);
3345 		ieee->wpax_type_set = 1;
3346 		ieee->wpax_type_notify = value;
3347 		spin_unlock_irqrestore(&ieee->wpax_suitlist_lock, flags);
3348 		*/
3349 
3350 		break;
3351 
3352 	default:
3353 
3354 
3355 
3356 		ret = -EOPNOTSUPP;
3357 
3358 
3359 		break;
3360 
3361 	}
3362 
3363 	return ret;
3364 
3365 }
3366 
wpa_mlme(struct net_device * dev,u32 command,u32 reason)3367 static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
3368 {
3369 	int ret = 0;
3370 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3371 
3372 	switch (command) {
3373 		case IEEE_MLME_STA_DEAUTH:
3374 
3375 			if (!rtw_set_802_11_disassociate(padapter))
3376 				ret = -1;
3377 
3378 			break;
3379 
3380 		case IEEE_MLME_STA_DISASSOC:
3381 
3382 			if (!rtw_set_802_11_disassociate(padapter))
3383 				ret = -1;
3384 
3385 			break;
3386 
3387 		default:
3388 			ret = -EOPNOTSUPP;
3389 			break;
3390 	}
3391 
3392 	return ret;
3393 
3394 }
3395 
wpa_supplicant_ioctl(struct net_device * dev,struct iw_point * p)3396 static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
3397 {
3398 	struct ieee_param *param;
3399 	uint ret = 0;
3400 
3401 	/* down(&ieee->wx_sem); */
3402 
3403 	if (p->length < sizeof(struct ieee_param) || !p->pointer) {
3404 		ret = -EINVAL;
3405 		goto out;
3406 	}
3407 
3408 	param = rtw_malloc(p->length);
3409 	if (param == NULL) {
3410 		ret = -ENOMEM;
3411 		goto out;
3412 	}
3413 
3414 	if (copy_from_user(param, p->pointer, p->length)) {
3415 		kfree(param);
3416 		ret = -EFAULT;
3417 		goto out;
3418 	}
3419 
3420 	switch (param->cmd) {
3421 
3422 	case IEEE_CMD_SET_WPA_PARAM:
3423 		ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
3424 		break;
3425 
3426 	case IEEE_CMD_SET_WPA_IE:
3427 		/* ret = wpa_set_wpa_ie(dev, param, p->length); */
3428 		ret =  rtw_set_wpa_ie((struct adapter *)rtw_netdev_priv(dev), (char*)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
3429 		break;
3430 
3431 	case IEEE_CMD_SET_ENCRYPTION:
3432 		ret = wpa_set_encryption(dev, param, p->length);
3433 		break;
3434 
3435 	case IEEE_CMD_MLME:
3436 		ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
3437 		break;
3438 
3439 	default:
3440 		DBG_871X("Unknown WPA supplicant request: %d\n", param->cmd);
3441 		ret = -EOPNOTSUPP;
3442 		break;
3443 
3444 	}
3445 
3446 	if (ret == 0 && copy_to_user(p->pointer, param, p->length))
3447 		ret = -EFAULT;
3448 
3449 	kfree(param);
3450 
3451 out:
3452 
3453 	/* up(&ieee->wx_sem); */
3454 
3455 	return ret;
3456 
3457 }
3458 
rtw_set_encryption(struct net_device * dev,struct ieee_param * param,u32 param_len)3459 static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
3460 {
3461 	int ret = 0;
3462 	u32 wep_key_idx, wep_key_len, wep_total_len;
3463 	struct ndis_802_11_wep	 *pwep = NULL;
3464 	struct sta_info *psta = NULL, *pbcmc_sta = NULL;
3465 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3466 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3467 	struct security_priv* psecuritypriv =&(padapter->securitypriv);
3468 	struct sta_priv *pstapriv = &padapter->stapriv;
3469 
3470 	DBG_871X("%s\n", __func__);
3471 
3472 	param->u.crypt.err = 0;
3473 	param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
3474 
3475 	/* sizeof(struct ieee_param) = 64 bytes; */
3476 	/* if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len) */
3477 	if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len) {
3478 		ret =  -EINVAL;
3479 		goto exit;
3480 	}
3481 
3482 	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3483 	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3484 	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3485 		if (param->u.crypt.idx >= WEP_KEYS) {
3486 			ret = -EINVAL;
3487 			goto exit;
3488 		}
3489 	} else {
3490 		psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3491 		if (!psta) {
3492 			/* ret = -EINVAL; */
3493 			DBG_871X("rtw_set_encryption(), sta has already been removed or never been added\n");
3494 			goto exit;
3495 		}
3496 	}
3497 
3498 	if (strcmp(param->u.crypt.alg, "none") == 0 && (psta == NULL)) {
3499 		/* todo:clear default encryption keys */
3500 
3501 		psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
3502 		psecuritypriv->ndisencryptstatus = Ndis802_11EncryptionDisabled;
3503 		psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
3504 		psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
3505 
3506 		DBG_871X("clear default encryption keys, keyid =%d\n", param->u.crypt.idx);
3507 
3508 		goto exit;
3509 	}
3510 
3511 
3512 	if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta == NULL)) {
3513 		DBG_871X("r871x_set_encryption, crypt.alg = WEP\n");
3514 
3515 		wep_key_idx = param->u.crypt.idx;
3516 		wep_key_len = param->u.crypt.key_len;
3517 
3518 		DBG_871X("r871x_set_encryption, wep_key_idx =%d, len =%d\n", wep_key_idx, wep_key_len);
3519 
3520 		if ((wep_key_idx >= WEP_KEYS) || (wep_key_len<= 0)) {
3521 			ret = -EINVAL;
3522 			goto exit;
3523 		}
3524 
3525 
3526 		if (wep_key_len > 0) {
3527 			wep_key_len = wep_key_len <= 5 ? 5 : 13;
3528 			wep_total_len = wep_key_len + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
3529 			pwep = rtw_malloc(wep_total_len);
3530 			if (pwep == NULL) {
3531 				DBG_871X(" r871x_set_encryption: pwep allocate fail !!!\n");
3532 				goto exit;
3533 			}
3534 
3535 			memset(pwep, 0, wep_total_len);
3536 
3537 			pwep->KeyLength = wep_key_len;
3538 			pwep->Length = wep_total_len;
3539 
3540 		}
3541 
3542 		pwep->KeyIndex = wep_key_idx;
3543 
3544 		memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
3545 
3546 		if (param->u.crypt.set_tx) {
3547 			DBG_871X("wep, set_tx = 1\n");
3548 
3549 			psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
3550 			psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
3551 			psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
3552 			psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
3553 
3554 			if (pwep->KeyLength == 13) {
3555 				psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
3556 				psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
3557 			}
3558 
3559 
3560 			psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
3561 
3562 			memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
3563 
3564 			psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
3565 
3566 			rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 1);
3567 		} else {
3568 			DBG_871X("wep, set_tx = 0\n");
3569 
3570 			/* don't update "psecuritypriv->dot11PrivacyAlgrthm" and */
3571 			/* psecuritypriv->dot11PrivacyKeyIndex =keyid", but can rtw_set_key to cam */
3572 
3573 			memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
3574 
3575 			psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
3576 
3577 			rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 0);
3578 		}
3579 
3580 		goto exit;
3581 
3582 	}
3583 
3584 
3585 	if (!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) { /*  group key */
3586 		if (param->u.crypt.set_tx == 1) {
3587 			if (strcmp(param->u.crypt.alg, "WEP") == 0) {
3588 				DBG_871X("%s, set group_key, WEP\n", __func__);
3589 
3590 				memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3591 
3592 				psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
3593 				if (param->u.crypt.key_len == 13)
3594 						psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
3595 
3596 			} else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
3597 				DBG_871X("%s, set group_key, TKIP\n", __func__);
3598 
3599 				psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
3600 
3601 				memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3602 
3603 				/* DEBUG_ERR("set key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len); */
3604 				/* set mic key */
3605 				memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
3606 				memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
3607 
3608 				psecuritypriv->busetkipkey = true;
3609 
3610 			}
3611 			else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
3612 				DBG_871X("%s, set group_key, CCMP\n", __func__);
3613 
3614 				psecuritypriv->dot118021XGrpPrivacy = _AES_;
3615 
3616 				memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3617 			} else {
3618 				DBG_871X("%s, set group_key, none\n", __func__);
3619 
3620 				psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
3621 			}
3622 
3623 			psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
3624 
3625 			psecuritypriv->binstallGrpkey = true;
3626 
3627 			psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/*  */
3628 
3629 			rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
3630 
3631 			pbcmc_sta =rtw_get_bcmc_stainfo(padapter);
3632 			if (pbcmc_sta) {
3633 				pbcmc_sta->ieee8021x_blocked = false;
3634 				pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy;/* rx will use bmc_sta's dot118021XPrivacy */
3635 			}
3636 		}
3637 
3638 		goto exit;
3639 
3640 	}
3641 
3642 	if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) { /*  psk/802_1x */
3643 		if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
3644 			if (param->u.crypt.set_tx == 1)	{
3645 				memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3646 
3647 				if (strcmp(param->u.crypt.alg, "WEP") == 0) {
3648 					DBG_871X("%s, set pairwise key, WEP\n", __func__);
3649 
3650 					psta->dot118021XPrivacy = _WEP40_;
3651 					if (param->u.crypt.key_len == 13)
3652 						psta->dot118021XPrivacy = _WEP104_;
3653 				} else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
3654 					DBG_871X("%s, set pairwise key, TKIP\n", __func__);
3655 
3656 					psta->dot118021XPrivacy = _TKIP_;
3657 
3658 					/* DEBUG_ERR("set key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len); */
3659 					/* set mic key */
3660 					memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
3661 					memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
3662 
3663 					psecuritypriv->busetkipkey = true;
3664 
3665 				} else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
3666 
3667 					DBG_871X("%s, set pairwise key, CCMP\n", __func__);
3668 
3669 					psta->dot118021XPrivacy = _AES_;
3670 				} else {
3671 					DBG_871X("%s, set pairwise key, none\n", __func__);
3672 
3673 					psta->dot118021XPrivacy = _NO_PRIVACY_;
3674 				}
3675 
3676 				rtw_ap_set_pairwise_key(padapter, psta);
3677 
3678 				psta->ieee8021x_blocked = false;
3679 
3680 			} else { /* group key??? */
3681 				if (strcmp(param->u.crypt.alg, "WEP") == 0) {
3682 					memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3683 
3684 					psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
3685 					if (param->u.crypt.key_len == 13)
3686 						psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
3687 				} else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
3688 					psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
3689 
3690 					memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3691 
3692 					/* DEBUG_ERR("set key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len); */
3693 					/* set mic key */
3694 					memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
3695 					memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
3696 
3697 					psecuritypriv->busetkipkey = true;
3698 
3699 				} else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
3700 					psecuritypriv->dot118021XGrpPrivacy = _AES_;
3701 
3702 					memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3703 				} else {
3704 					psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
3705 				}
3706 
3707 				psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
3708 
3709 				psecuritypriv->binstallGrpkey = true;
3710 
3711 				psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/*  */
3712 
3713 				rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
3714 
3715 				pbcmc_sta =rtw_get_bcmc_stainfo(padapter);
3716 				if (pbcmc_sta) {
3717 					pbcmc_sta->ieee8021x_blocked = false;
3718 					pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy;/* rx will use bmc_sta's dot118021XPrivacy */
3719 				}
3720 			}
3721 		}
3722 	}
3723 
3724 exit:
3725 	kfree(pwep);
3726 
3727 	return ret;
3728 
3729 }
3730 
rtw_set_beacon(struct net_device * dev,struct ieee_param * param,int len)3731 static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
3732 {
3733 	int ret = 0;
3734 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3735 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3736 	struct sta_priv *pstapriv = &padapter->stapriv;
3737 	unsigned char *pbuf = param->u.bcn_ie.buf;
3738 
3739 
3740 	DBG_871X("%s, len =%d\n", __func__, len);
3741 
3742 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
3743 		return -EINVAL;
3744 
3745 	memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
3746 
3747 	if ((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<= 0))
3748 		pstapriv->max_num_sta = NUM_STA;
3749 
3750 
3751 	if (rtw_check_beacon_data(padapter, pbuf,  (len-12-2)) == _SUCCESS)/*  12 = param header, 2:no packed */
3752 		ret = 0;
3753 	else
3754 		ret = -EINVAL;
3755 
3756 
3757 	return ret;
3758 
3759 }
3760 
rtw_hostapd_sta_flush(struct net_device * dev)3761 static int rtw_hostapd_sta_flush(struct net_device *dev)
3762 {
3763 	/* _irqL irqL; */
3764 	/* struct list_head	*phead, *plist; */
3765 	/* struct sta_info *psta = NULL; */
3766 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3767 	/* struct sta_priv *pstapriv = &padapter->stapriv; */
3768 
3769 	DBG_871X("%s\n", __func__);
3770 
3771 	flush_all_cam_entry(padapter);	/* clear CAM */
3772 
3773 	return rtw_sta_flush(padapter);
3774 
3775 }
3776 
rtw_add_sta(struct net_device * dev,struct ieee_param * param)3777 static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
3778 {
3779 	int ret = 0;
3780 	struct sta_info *psta = NULL;
3781 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3782 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3783 	struct sta_priv *pstapriv = &padapter->stapriv;
3784 
3785 	DBG_871X("rtw_add_sta(aid =%d) =" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
3786 
3787 	if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
3788 		return -EINVAL;
3789 
3790 	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3791 	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3792 	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3793 		return -EINVAL;
3794 	}
3795 
3796 /*
3797 	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3798 	if (psta)
3799 	{
3800 		DBG_871X("rtw_add_sta(), free has been added psta =%p\n", psta);
3801 		spin_lock_bh(&(pstapriv->sta_hash_lock));
3802 		rtw_free_stainfo(padapter,  psta);
3803 		spin_unlock_bh(&(pstapriv->sta_hash_lock));
3804 
3805 		psta = NULL;
3806 	}
3807 */
3808 	/* psta = rtw_alloc_stainfo(pstapriv, param->sta_addr); */
3809 	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3810 	if (psta) {
3811 		int flags = param->u.add_sta.flags;
3812 
3813 		/* DBG_871X("rtw_add_sta(), init sta's variables, psta =%p\n", psta); */
3814 
3815 		psta->aid = param->u.add_sta.aid;/* aid = 1~2007 */
3816 
3817 		memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
3818 
3819 
3820 		/* check wmm cap. */
3821 		if (WLAN_STA_WME&flags)
3822 			psta->qos_option = 1;
3823 		else
3824 			psta->qos_option = 0;
3825 
3826 		if (pmlmepriv->qospriv.qos_option == 0)
3827 			psta->qos_option = 0;
3828 
3829 		/* chec 802.11n ht cap. */
3830 		if (WLAN_STA_HT&flags) {
3831 			psta->htpriv.ht_option = true;
3832 			psta->qos_option = 1;
3833 			memcpy((void*)&psta->htpriv.ht_cap, (void*)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
3834 		} else {
3835 			psta->htpriv.ht_option = false;
3836 		}
3837 
3838 		if (pmlmepriv->htpriv.ht_option == false)
3839 			psta->htpriv.ht_option = false;
3840 
3841 		update_sta_info_apmode(padapter, psta);
3842 
3843 
3844 	} else {
3845 		ret = -ENOMEM;
3846 	}
3847 
3848 	return ret;
3849 
3850 }
3851 
rtw_del_sta(struct net_device * dev,struct ieee_param * param)3852 static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
3853 {
3854 	int ret = 0;
3855 	struct sta_info *psta = NULL;
3856 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3857 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3858 	struct sta_priv *pstapriv = &padapter->stapriv;
3859 
3860 	DBG_871X("rtw_del_sta =" MAC_FMT "\n", MAC_ARG(param->sta_addr));
3861 
3862 	if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
3863 		return -EINVAL;
3864 
3865 	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3866 	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3867 	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3868 		return -EINVAL;
3869 	}
3870 
3871 	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3872 	if (psta) {
3873 		u8 updated =false;
3874 
3875 		/* DBG_871X("free psta =%p, aid =%d\n", psta, psta->aid); */
3876 
3877 		spin_lock_bh(&pstapriv->asoc_list_lock);
3878 		if (list_empty(&psta->asoc_list) ==false) {
3879 			list_del_init(&psta->asoc_list);
3880 			pstapriv->asoc_list_cnt--;
3881 			updated = ap_free_sta(padapter, psta, true, WLAN_REASON_DEAUTH_LEAVING);
3882 
3883 		}
3884 		spin_unlock_bh(&pstapriv->asoc_list_lock);
3885 
3886 		associated_clients_update(padapter, updated);
3887 
3888 		psta = NULL;
3889 
3890 	} else {
3891 		DBG_871X("rtw_del_sta(), sta has already been removed or never been added\n");
3892 
3893 		/* ret = -1; */
3894 	}
3895 
3896 
3897 	return ret;
3898 
3899 }
3900 
rtw_ioctl_get_sta_data(struct net_device * dev,struct ieee_param * param,int len)3901 static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
3902 {
3903 	int ret = 0;
3904 	struct sta_info *psta = NULL;
3905 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3906 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3907 	struct sta_priv *pstapriv = &padapter->stapriv;
3908 	struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
3909 	struct sta_data *psta_data = (struct sta_data *)param_ex->data;
3910 
3911 	DBG_871X("rtw_ioctl_get_sta_info, sta_addr: " MAC_FMT "\n", MAC_ARG(param_ex->sta_addr));
3912 
3913 	if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
3914 		return -EINVAL;
3915 
3916 	if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
3917 	    param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
3918 	    param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff) {
3919 		return -EINVAL;
3920 	}
3921 
3922 	psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
3923 	if (psta) {
3924 		psta_data->aid = (u16)psta->aid;
3925 		psta_data->capability = psta->capability;
3926 		psta_data->flags = psta->flags;
3927 
3928 /*
3929 		nonerp_set : BIT(0)
3930 		no_short_slot_time_set : BIT(1)
3931 		no_short_preamble_set : BIT(2)
3932 		no_ht_gf_set : BIT(3)
3933 		no_ht_set : BIT(4)
3934 		ht_20mhz_set : BIT(5)
3935 */
3936 
3937 		psta_data->sta_set =((psta->nonerp_set) |
3938 							(psta->no_short_slot_time_set <<1) |
3939 							(psta->no_short_preamble_set <<2) |
3940 							(psta->no_ht_gf_set <<3) |
3941 							(psta->no_ht_set <<4) |
3942 							(psta->ht_20mhz_set <<5));
3943 
3944 		psta_data->tx_supp_rates_len =  psta->bssratelen;
3945 		memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
3946 		memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
3947 		psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
3948 		psta_data->rx_bytes = psta->sta_stats.rx_bytes;
3949 		psta_data->rx_drops = psta->sta_stats.rx_drops;
3950 
3951 		psta_data->tx_pkts = psta->sta_stats.tx_pkts;
3952 		psta_data->tx_bytes = psta->sta_stats.tx_bytes;
3953 		psta_data->tx_drops = psta->sta_stats.tx_drops;
3954 
3955 
3956 	} else {
3957 		ret = -1;
3958 	}
3959 
3960 	return ret;
3961 
3962 }
3963 
rtw_get_sta_wpaie(struct net_device * dev,struct ieee_param * param)3964 static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
3965 {
3966 	int ret = 0;
3967 	struct sta_info *psta = NULL;
3968 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3969 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3970 	struct sta_priv *pstapriv = &padapter->stapriv;
3971 
3972 	DBG_871X("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
3973 
3974 	if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
3975 		return -EINVAL;
3976 
3977 	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3978 	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3979 	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3980 		return -EINVAL;
3981 	}
3982 
3983 	psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3984 	if (psta) {
3985 		if ((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC)) {
3986 			int wpa_ie_len;
3987 			int copy_len;
3988 
3989 			wpa_ie_len = psta->wpa_ie[1];
3990 
3991 			copy_len = ((wpa_ie_len+2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)):(wpa_ie_len+2);
3992 
3993 			param->u.wpa_ie.len = copy_len;
3994 
3995 			memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
3996 		} else {
3997 			/* ret = -1; */
3998 			DBG_871X("sta's wpa_ie is NONE\n");
3999 		}
4000 	} else {
4001 		ret = -1;
4002 	}
4003 
4004 	return ret;
4005 
4006 }
4007 
rtw_set_wps_beacon(struct net_device * dev,struct ieee_param * param,int len)4008 static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
4009 {
4010 	int ret = 0;
4011 	unsigned char wps_oui[4]={0x0, 0x50, 0xf2, 0x04};
4012 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4013 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4014 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
4015 	int ie_len;
4016 
4017 	DBG_871X("%s, len =%d\n", __func__, len);
4018 
4019 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4020 		return -EINVAL;
4021 
4022 	ie_len = len-12-2;/*  12 = param header, 2:no packed */
4023 
4024 
4025 	kfree(pmlmepriv->wps_beacon_ie);
4026 	pmlmepriv->wps_beacon_ie = NULL;
4027 
4028 	if (ie_len>0) {
4029 		pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
4030 		pmlmepriv->wps_beacon_ie_len = ie_len;
4031 		if (pmlmepriv->wps_beacon_ie == NULL) {
4032 			DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4033 			return -EINVAL;
4034 		}
4035 
4036 		memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
4037 
4038 		update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, true);
4039 
4040 		pmlmeext->bstart_bss = true;
4041 	}
4042 
4043 
4044 	return ret;
4045 
4046 }
4047 
rtw_set_wps_probe_resp(struct net_device * dev,struct ieee_param * param,int len)4048 static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
4049 {
4050 	int ret = 0;
4051 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4052 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4053 	int ie_len;
4054 
4055 	DBG_871X("%s, len =%d\n", __func__, len);
4056 
4057 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4058 		return -EINVAL;
4059 
4060 	ie_len = len-12-2;/*  12 = param header, 2:no packed */
4061 
4062 
4063 	kfree(pmlmepriv->wps_probe_resp_ie);
4064 	pmlmepriv->wps_probe_resp_ie = NULL;
4065 
4066 	if (ie_len>0) {
4067 		pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
4068 		pmlmepriv->wps_probe_resp_ie_len = ie_len;
4069 		if (pmlmepriv->wps_probe_resp_ie == NULL) {
4070 			DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4071 			return -EINVAL;
4072 		}
4073 		memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);
4074 	}
4075 
4076 
4077 	return ret;
4078 
4079 }
4080 
rtw_set_wps_assoc_resp(struct net_device * dev,struct ieee_param * param,int len)4081 static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
4082 {
4083 	int ret = 0;
4084 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4085 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4086 	int ie_len;
4087 
4088 	DBG_871X("%s, len =%d\n", __func__, len);
4089 
4090 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4091 		return -EINVAL;
4092 
4093 	ie_len = len-12-2;/*  12 = param header, 2:no packed */
4094 
4095 
4096 	kfree(pmlmepriv->wps_assoc_resp_ie);
4097 	pmlmepriv->wps_assoc_resp_ie = NULL;
4098 
4099 	if (ie_len>0) {
4100 		pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
4101 		pmlmepriv->wps_assoc_resp_ie_len = ie_len;
4102 		if (pmlmepriv->wps_assoc_resp_ie == NULL) {
4103 			DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4104 			return -EINVAL;
4105 		}
4106 
4107 		memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);
4108 	}
4109 
4110 
4111 	return ret;
4112 
4113 }
4114 
rtw_set_hidden_ssid(struct net_device * dev,struct ieee_param * param,int len)4115 static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
4116 {
4117 	int ret = 0;
4118 	struct adapter *adapter = (struct adapter *)rtw_netdev_priv(dev);
4119 	struct mlme_priv *mlmepriv = &(adapter->mlmepriv);
4120 	struct mlme_ext_priv *mlmeext = &(adapter->mlmeextpriv);
4121 	struct mlme_ext_info *mlmeinfo = &(mlmeext->mlmext_info);
4122 	int ie_len;
4123 	u8 *ssid_ie;
4124 	char ssid[NDIS_802_11_LENGTH_SSID + 1];
4125 	sint ssid_len;
4126 	u8 ignore_broadcast_ssid;
4127 
4128 	if (check_fwstate(mlmepriv, WIFI_AP_STATE) != true)
4129 		return -EPERM;
4130 
4131 	if (param->u.bcn_ie.reserved[0] != 0xea)
4132 		return -EINVAL;
4133 
4134 	mlmeinfo->hidden_ssid_mode = ignore_broadcast_ssid = param->u.bcn_ie.reserved[1];
4135 
4136 	ie_len = len-12-2;/*  12 = param header, 2:no packed */
4137 	ssid_ie = rtw_get_ie(param->u.bcn_ie.buf,  WLAN_EID_SSID, &ssid_len, ie_len);
4138 
4139 	if (ssid_ie && ssid_len > 0 && ssid_len <= NDIS_802_11_LENGTH_SSID) {
4140 		struct wlan_bssid_ex *pbss_network = &mlmepriv->cur_network.network;
4141 		struct wlan_bssid_ex *pbss_network_ext = &mlmeinfo->network;
4142 
4143 		memcpy(ssid, ssid_ie+2, ssid_len);
4144 		ssid[ssid_len] = 0x0;
4145 
4146 		if (0)
4147 			DBG_871X(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
4148 				 ssid, ssid_len,
4149 				 pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
4150 				 pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
4151 
4152 		memcpy(pbss_network->Ssid.Ssid, (void *)ssid, ssid_len);
4153 		pbss_network->Ssid.SsidLength = ssid_len;
4154 		memcpy(pbss_network_ext->Ssid.Ssid, (void *)ssid, ssid_len);
4155 		pbss_network_ext->Ssid.SsidLength = ssid_len;
4156 
4157 		if (0)
4158 			DBG_871X(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
4159 				 pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
4160 				 pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
4161 	}
4162 
4163 	DBG_871X(FUNC_ADPT_FMT" ignore_broadcast_ssid:%d, %s,%d\n", FUNC_ADPT_ARG(adapter),
4164 		ignore_broadcast_ssid, ssid, ssid_len);
4165 
4166 	return ret;
4167 }
4168 
rtw_ioctl_acl_remove_sta(struct net_device * dev,struct ieee_param * param,int len)4169 static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
4170 {
4171 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4172 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4173 
4174 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4175 		return -EINVAL;
4176 
4177 	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4178 	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4179 	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
4180 		return -EINVAL;
4181 	}
4182 
4183 	return rtw_acl_remove_sta(padapter, param->sta_addr);
4184 
4185 }
4186 
rtw_ioctl_acl_add_sta(struct net_device * dev,struct ieee_param * param,int len)4187 static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
4188 {
4189 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4190 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4191 
4192 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4193 		return -EINVAL;
4194 
4195 	if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4196 	    param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4197 	    param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
4198 		return -EINVAL;
4199 	}
4200 
4201 	return rtw_acl_add_sta(padapter, param->sta_addr);
4202 
4203 }
4204 
rtw_ioctl_set_macaddr_acl(struct net_device * dev,struct ieee_param * param,int len)4205 static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
4206 {
4207 	int ret = 0;
4208 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4209 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4210 
4211 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4212 		return -EINVAL;
4213 
4214 	rtw_set_macaddr_acl(padapter, param->u.mlme.command);
4215 
4216 	return ret;
4217 }
4218 
rtw_hostapd_ioctl(struct net_device * dev,struct iw_point * p)4219 static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
4220 {
4221 	struct ieee_param *param;
4222 	int ret = 0;
4223 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4224 
4225 	/* DBG_871X("%s\n", __func__); */
4226 
4227 	/*
4228 	* this function is expect to call in master mode, which allows no power saving
4229 	* so, we just check hw_init_completed
4230 	*/
4231 
4232 	if (padapter->hw_init_completed ==false) {
4233 		ret = -EPERM;
4234 		goto out;
4235 	}
4236 
4237 
4238 	/* if (p->length < sizeof(struct ieee_param) || !p->pointer) { */
4239 	if (!p->pointer) {
4240 		ret = -EINVAL;
4241 		goto out;
4242 	}
4243 
4244 	param = rtw_malloc(p->length);
4245 	if (param == NULL) {
4246 		ret = -ENOMEM;
4247 		goto out;
4248 	}
4249 
4250 	if (copy_from_user(param, p->pointer, p->length)) {
4251 		kfree(param);
4252 		ret = -EFAULT;
4253 		goto out;
4254 	}
4255 
4256 	/* DBG_871X("%s, cmd =%d\n", __func__, param->cmd); */
4257 
4258 	switch (param->cmd) {
4259 		case RTL871X_HOSTAPD_FLUSH:
4260 
4261 			ret = rtw_hostapd_sta_flush(dev);
4262 
4263 			break;
4264 
4265 		case RTL871X_HOSTAPD_ADD_STA:
4266 
4267 			ret = rtw_add_sta(dev, param);
4268 
4269 			break;
4270 
4271 		case RTL871X_HOSTAPD_REMOVE_STA:
4272 
4273 			ret = rtw_del_sta(dev, param);
4274 
4275 			break;
4276 
4277 		case RTL871X_HOSTAPD_SET_BEACON:
4278 
4279 			ret = rtw_set_beacon(dev, param, p->length);
4280 
4281 			break;
4282 
4283 		case RTL871X_SET_ENCRYPTION:
4284 
4285 			ret = rtw_set_encryption(dev, param, p->length);
4286 
4287 			break;
4288 
4289 		case RTL871X_HOSTAPD_GET_WPAIE_STA:
4290 
4291 			ret = rtw_get_sta_wpaie(dev, param);
4292 
4293 			break;
4294 
4295 		case RTL871X_HOSTAPD_SET_WPS_BEACON:
4296 
4297 			ret = rtw_set_wps_beacon(dev, param, p->length);
4298 
4299 			break;
4300 
4301 		case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
4302 
4303 			ret = rtw_set_wps_probe_resp(dev, param, p->length);
4304 
4305 			break;
4306 
4307 		case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
4308 
4309 			ret = rtw_set_wps_assoc_resp(dev, param, p->length);
4310 
4311 			break;
4312 
4313 		case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
4314 
4315 			ret = rtw_set_hidden_ssid(dev, param, p->length);
4316 
4317 			break;
4318 
4319 		case RTL871X_HOSTAPD_GET_INFO_STA:
4320 
4321 			ret = rtw_ioctl_get_sta_data(dev, param, p->length);
4322 
4323 			break;
4324 
4325 		case RTL871X_HOSTAPD_SET_MACADDR_ACL:
4326 
4327 			ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
4328 
4329 			break;
4330 
4331 		case RTL871X_HOSTAPD_ACL_ADD_STA:
4332 
4333 			ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
4334 
4335 			break;
4336 
4337 		case RTL871X_HOSTAPD_ACL_REMOVE_STA:
4338 
4339 			ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
4340 
4341 			break;
4342 
4343 		default:
4344 			DBG_871X("Unknown hostapd request: %d\n", param->cmd);
4345 			ret = -EOPNOTSUPP;
4346 			break;
4347 
4348 	}
4349 
4350 	if (ret == 0 && copy_to_user(p->pointer, param, p->length))
4351 		ret = -EFAULT;
4352 
4353 
4354 	kfree(param);
4355 
4356 out:
4357 
4358 	return ret;
4359 
4360 }
4361 
rtw_wx_set_priv(struct net_device * dev,struct iw_request_info * info,union iwreq_data * awrq,char * extra)4362 static int rtw_wx_set_priv(struct net_device *dev,
4363 				struct iw_request_info *info,
4364 				union iwreq_data *awrq,
4365 				char *extra)
4366 {
4367 
4368 #ifdef DEBUG_RTW_WX_SET_PRIV
4369 	char *ext_dbg;
4370 #endif
4371 
4372 	int ret = 0;
4373 	int len = 0;
4374 	char *ext;
4375 
4376 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4377 	struct iw_point *dwrq = (struct iw_point*)awrq;
4378 
4379 	/* RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, ("+rtw_wx_set_priv\n")); */
4380 	if (dwrq->length == 0)
4381 		return -EFAULT;
4382 
4383 	len = dwrq->length;
4384 	if (!(ext = vmalloc(len)))
4385 		return -ENOMEM;
4386 
4387 	if (copy_from_user(ext, dwrq->pointer, len)) {
4388 		vfree(ext);
4389 		return -EFAULT;
4390 	}
4391 
4392 
4393 	/* RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, */
4394 	/* 	 ("rtw_wx_set_priv: %s req =%s\n", */
4395 	/* 	  dev->name, ext)); */
4396 
4397 	#ifdef DEBUG_RTW_WX_SET_PRIV
4398 	if (!(ext_dbg = vmalloc(len))) {
4399 		vfree(ext, len);
4400 		return -ENOMEM;
4401 	}
4402 
4403 	memcpy(ext_dbg, ext, len);
4404 	#endif
4405 
4406 	/* added for wps2.0 @20110524 */
4407 	if (dwrq->flags == 0x8766 && len > 8) {
4408 		u32 cp_sz;
4409 		struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4410 		u8 *probereq_wpsie = ext;
4411 		int probereq_wpsie_len = len;
4412 		u8 wps_oui[4]={0x0, 0x50, 0xf2, 0x04};
4413 
4414 		if ((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
4415 			(!memcmp(&probereq_wpsie[2], wps_oui, 4))) {
4416 			cp_sz = probereq_wpsie_len>MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN:probereq_wpsie_len;
4417 
4418 			if (pmlmepriv->wps_probe_req_ie) {
4419 				pmlmepriv->wps_probe_req_ie_len = 0;
4420 				kfree(pmlmepriv->wps_probe_req_ie);
4421 				pmlmepriv->wps_probe_req_ie = NULL;
4422 			}
4423 
4424 			pmlmepriv->wps_probe_req_ie = rtw_malloc(cp_sz);
4425 			if (pmlmepriv->wps_probe_req_ie == NULL) {
4426 				printk("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4427 				ret =  -EINVAL;
4428 				goto FREE_EXT;
4429 
4430 			}
4431 
4432 			memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
4433 			pmlmepriv->wps_probe_req_ie_len = cp_sz;
4434 
4435 		}
4436 
4437 		goto FREE_EXT;
4438 
4439 	}
4440 
4441 	if (len >= WEXT_CSCAN_HEADER_SIZE
4442 		&& !memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)) {
4443 		ret = rtw_wx_set_scan(dev, info, awrq, ext);
4444 		goto FREE_EXT;
4445 	}
4446 
4447 FREE_EXT:
4448 
4449 	vfree(ext);
4450 	#ifdef DEBUG_RTW_WX_SET_PRIV
4451 	vfree(ext_dbg);
4452 	#endif
4453 
4454 	/* DBG_871X("rtw_wx_set_priv: (SIOCSIWPRIV) %s ret =%d\n", */
4455 	/* 		dev->name, ret); */
4456 
4457 	return ret;
4458 
4459 }
4460 
rtw_pm_set(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)4461 static int rtw_pm_set(struct net_device *dev,
4462                                struct iw_request_info *info,
4463                                union iwreq_data *wrqu, char *extra)
4464 {
4465 	int ret = 0;
4466 	unsigned	mode = 0;
4467 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4468 
4469 	DBG_871X("[%s] extra = %s\n", __func__, extra);
4470 
4471 	if (!memcmp(extra, "lps =", 4)) {
4472 		sscanf(extra+4, "%u", &mode);
4473 		ret = rtw_pm_set_lps(padapter, mode);
4474 	} else if (!memcmp(extra, "ips =", 4)) {
4475 		sscanf(extra+4, "%u", &mode);
4476 		ret = rtw_pm_set_ips(padapter, mode);
4477 	} else {
4478 		ret = -EINVAL;
4479 	}
4480 
4481 	return ret;
4482 }
4483 
rtw_mp_efuse_get(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wdata,char * extra)4484 static int rtw_mp_efuse_get(struct net_device *dev,
4485 			struct iw_request_info *info,
4486 			union iwreq_data *wdata, char *extra)
4487 {
4488 	int err = 0;
4489 	return err;
4490 }
4491 
rtw_mp_efuse_set(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wdata,char * extra)4492 static int rtw_mp_efuse_set(struct net_device *dev,
4493 			struct iw_request_info *info,
4494 			union iwreq_data *wdata, char *extra)
4495 {
4496 	int err = 0;
4497 	return err;
4498 }
4499 
rtw_tdls(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)4500 static int rtw_tdls(struct net_device *dev,
4501 				struct iw_request_info *info,
4502 				union iwreq_data *wrqu, char *extra)
4503 {
4504 	int ret = 0;
4505 	return ret;
4506 }
4507 
4508 
rtw_tdls_get(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)4509 static int rtw_tdls_get(struct net_device *dev,
4510 				struct iw_request_info *info,
4511 				union iwreq_data *wrqu, char *extra)
4512 {
4513 	int ret = 0;
4514 	return ret;
4515 }
4516 
4517 
4518 
4519 
4520 
4521 #ifdef CONFIG_INTEL_WIDI
rtw_widi_set(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)4522 static int rtw_widi_set(struct net_device *dev,
4523                                struct iw_request_info *info,
4524                                union iwreq_data *wrqu, char *extra)
4525 {
4526 	int ret = 0;
4527 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4528 
4529 	process_intel_widi_cmd(padapter, extra);
4530 
4531 	return ret;
4532 }
4533 
rtw_widi_set_probe_request(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)4534 static int rtw_widi_set_probe_request(struct net_device *dev,
4535                                struct iw_request_info *info,
4536                                union iwreq_data *wrqu, char *extra)
4537 {
4538 	int	ret = 0;
4539 	u8 *pbuf = NULL;
4540 	struct adapter	*padapter = (struct adapter *)rtw_netdev_priv(dev);
4541 
4542 	pbuf = rtw_malloc(sizeof(l2_msg_t));
4543 	if (pbuf) {
4544 		if (copy_from_user(pbuf, wrqu->data.pointer, wrqu->data.length))
4545 			ret = -EFAULT;
4546 		/* memcpy(pbuf, wrqu->data.pointer, wrqu->data.length); */
4547 
4548 		if (wrqu->data.flags == 0)
4549 			intel_widi_wk_cmd(padapter, INTEL_WIDI_ISSUE_PROB_WK, pbuf, sizeof(l2_msg_t));
4550 		else if (wrqu->data.flags == 1)
4551 			rtw_set_wfd_rds_sink_info(padapter, (l2_msg_t *)pbuf);
4552 	}
4553 	return ret;
4554 }
4555 #endif /*  CONFIG_INTEL_WIDI */
4556 
rtw_test(struct net_device * dev,struct iw_request_info * info,union iwreq_data * wrqu,char * extra)4557 static int rtw_test(
4558 	struct net_device *dev,
4559 	struct iw_request_info *info,
4560 	union iwreq_data *wrqu, char *extra)
4561 {
4562 	u32 len;
4563 	u8 *pbuf, *pch;
4564 	char *ptmp;
4565 	u8 *delim = ",";
4566 	struct adapter *padapter = rtw_netdev_priv(dev);
4567 
4568 
4569 	DBG_871X("+%s\n", __func__);
4570 	len = wrqu->data.length;
4571 
4572 	pbuf = rtw_zmalloc(len);
4573 	if (pbuf == NULL) {
4574 		DBG_871X("%s: no memory!\n", __func__);
4575 		return -ENOMEM;
4576 	}
4577 
4578 	if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
4579 		kfree(pbuf);
4580 		DBG_871X("%s: copy from user fail!\n", __func__);
4581 		return -EFAULT;
4582 	}
4583 	DBG_871X("%s: string =\"%s\"\n", __func__, pbuf);
4584 
4585 	ptmp = (char*)pbuf;
4586 	pch = strsep(&ptmp, delim);
4587 	if ((pch == NULL) || (strlen(pch) == 0)) {
4588 		kfree(pbuf);
4589 		DBG_871X("%s: parameter error(level 1)!\n", __func__);
4590 		return -EFAULT;
4591 	}
4592 
4593 	if (strcmp(pch, "bton") == 0)
4594 		rtw_btcoex_SetManualControl(padapter, false);
4595 
4596 	if (strcmp(pch, "btoff") == 0)
4597 		rtw_btcoex_SetManualControl(padapter, true);
4598 
4599 	if (strcmp(pch, "h2c") == 0) {
4600 		u8 param[8];
4601 		u8 count = 0;
4602 		u32 tmp;
4603 		u8 i;
4604 		u32 pos;
4605 		s32 ret;
4606 
4607 
4608 		do {
4609 			pch = strsep(&ptmp, delim);
4610 			if ((pch == NULL) || (strlen(pch) == 0))
4611 				break;
4612 
4613 			sscanf(pch, "%x", &tmp);
4614 			param[count++] = (u8)tmp;
4615 		} while (count < 8);
4616 
4617 		if (count == 0) {
4618 			kfree(pbuf);
4619 			DBG_871X("%s: parameter error(level 2)!\n", __func__);
4620 			return -EFAULT;
4621 		}
4622 
4623 		ret = rtw_hal_fill_h2c_cmd(padapter, param[0], count-1, &param[1]);
4624 
4625 		pos = sprintf(extra, "H2C ID = 0x%02x content =", param[0]);
4626 		for (i = 1; i<count; i++)
4627 			pos += sprintf(extra+pos, "%02x,", param[i]);
4628 		extra[pos] = 0;
4629 		pos--;
4630 		pos += sprintf(extra+pos, " %s", ret == _FAIL?"FAIL":"OK");
4631 
4632 		wrqu->data.length = strlen(extra) + 1;
4633 	}
4634 
4635 	kfree(pbuf);
4636 	return 0;
4637 }
4638 
4639 static iw_handler rtw_handlers[] = {
4640 	NULL,					/* SIOCSIWCOMMIT */
4641 	rtw_wx_get_name,		/* SIOCGIWNAME */
4642 	dummy,					/* SIOCSIWNWID */
4643 	dummy,					/* SIOCGIWNWID */
4644 	rtw_wx_set_freq,		/* SIOCSIWFREQ */
4645 	rtw_wx_get_freq,		/* SIOCGIWFREQ */
4646 	rtw_wx_set_mode,		/* SIOCSIWMODE */
4647 	rtw_wx_get_mode,		/* SIOCGIWMODE */
4648 	dummy,					/* SIOCSIWSENS */
4649 	rtw_wx_get_sens,		/* SIOCGIWSENS */
4650 	NULL,					/* SIOCSIWRANGE */
4651 	rtw_wx_get_range,		/* SIOCGIWRANGE */
4652 	rtw_wx_set_priv,		/* SIOCSIWPRIV */
4653 	NULL,					/* SIOCGIWPRIV */
4654 	NULL,					/* SIOCSIWSTATS */
4655 	NULL,					/* SIOCGIWSTATS */
4656 	dummy,					/* SIOCSIWSPY */
4657 	dummy,					/* SIOCGIWSPY */
4658 	NULL,					/* SIOCGIWTHRSPY */
4659 	NULL,					/* SIOCWIWTHRSPY */
4660 	rtw_wx_set_wap,		/* SIOCSIWAP */
4661 	rtw_wx_get_wap,		/* SIOCGIWAP */
4662 	rtw_wx_set_mlme,		/* request MLME operation; uses struct iw_mlme */
4663 	dummy,					/* SIOCGIWAPLIST -- depricated */
4664 	rtw_wx_set_scan,		/* SIOCSIWSCAN */
4665 	rtw_wx_get_scan,		/* SIOCGIWSCAN */
4666 	rtw_wx_set_essid,		/* SIOCSIWESSID */
4667 	rtw_wx_get_essid,		/* SIOCGIWESSID */
4668 	dummy,					/* SIOCSIWNICKN */
4669 	rtw_wx_get_nick,		/* SIOCGIWNICKN */
4670 	NULL,					/* -- hole -- */
4671 	NULL,					/* -- hole -- */
4672 	rtw_wx_set_rate,		/* SIOCSIWRATE */
4673 	rtw_wx_get_rate,		/* SIOCGIWRATE */
4674 	rtw_wx_set_rts,			/* SIOCSIWRTS */
4675 	rtw_wx_get_rts,			/* SIOCGIWRTS */
4676 	rtw_wx_set_frag,		/* SIOCSIWFRAG */
4677 	rtw_wx_get_frag,		/* SIOCGIWFRAG */
4678 	dummy,					/* SIOCSIWTXPOW */
4679 	dummy,					/* SIOCGIWTXPOW */
4680 	dummy,					/* SIOCSIWRETRY */
4681 	rtw_wx_get_retry,		/* SIOCGIWRETRY */
4682 	rtw_wx_set_enc,			/* SIOCSIWENCODE */
4683 	rtw_wx_get_enc,			/* SIOCGIWENCODE */
4684 	dummy,					/* SIOCSIWPOWER */
4685 	rtw_wx_get_power,		/* SIOCGIWPOWER */
4686 	NULL,					/*---hole---*/
4687 	NULL,					/*---hole---*/
4688 	rtw_wx_set_gen_ie,		/* SIOCSIWGENIE */
4689 	NULL,					/* SIOCGWGENIE */
4690 	rtw_wx_set_auth,		/* SIOCSIWAUTH */
4691 	NULL,					/* SIOCGIWAUTH */
4692 	rtw_wx_set_enc_ext,		/* SIOCSIWENCODEEXT */
4693 	NULL,					/* SIOCGIWENCODEEXT */
4694 	rtw_wx_set_pmkid,		/* SIOCSIWPMKSA */
4695 	NULL,					/*---hole---*/
4696 };
4697 
4698 static const struct iw_priv_args rtw_private_args[] = {
4699 	{
4700 		SIOCIWFIRSTPRIV + 0x0,
4701 		IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
4702 	},
4703 	{
4704 		SIOCIWFIRSTPRIV + 0x1,
4705 		IW_PRIV_TYPE_CHAR | 0x7FF,
4706 		IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
4707 	},
4708 	{
4709 		SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
4710 	},
4711 	{
4712 		SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
4713 	},
4714 	{
4715 		SIOCIWFIRSTPRIV + 0x4,
4716 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
4717 	},
4718 	{
4719 		SIOCIWFIRSTPRIV + 0x5,
4720 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
4721 	},
4722 	{
4723 		SIOCIWFIRSTPRIV + 0x6,
4724 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
4725 	},
4726 /* for PLATFORM_MT53XX */
4727 	{
4728 		SIOCIWFIRSTPRIV + 0x7,
4729 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
4730 	},
4731 	{
4732 		SIOCIWFIRSTPRIV + 0x8,
4733 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
4734 	},
4735 	{
4736 		SIOCIWFIRSTPRIV + 0x9,
4737 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
4738 	},
4739 
4740 /* for RTK_DMP_PLATFORM */
4741 	{
4742 		SIOCIWFIRSTPRIV + 0xA,
4743 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
4744 	},
4745 
4746 	{
4747 		SIOCIWFIRSTPRIV + 0xB,
4748 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
4749 	},
4750 	{
4751 		SIOCIWFIRSTPRIV + 0xC,
4752 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
4753 	},
4754 	{
4755 		SIOCIWFIRSTPRIV + 0xD,
4756 		IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
4757 	},
4758 	{
4759 		SIOCIWFIRSTPRIV + 0x10,
4760 		IW_PRIV_TYPE_CHAR | 1024, 0, "p2p_set"
4761 	},
4762 	{
4763 		SIOCIWFIRSTPRIV + 0x11,
4764 		IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "p2p_get"
4765 	},
4766 	{
4767 		SIOCIWFIRSTPRIV + 0x12, 0, 0, "NULL"
4768 	},
4769 	{
4770 		SIOCIWFIRSTPRIV + 0x13,
4771 		IW_PRIV_TYPE_CHAR | 64, IW_PRIV_TYPE_CHAR | 64 , "p2p_get2"
4772 	},
4773 	{
4774 		SIOCIWFIRSTPRIV + 0x14,
4775 		IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
4776 	},
4777 	{
4778 		SIOCIWFIRSTPRIV + 0x15,
4779 		IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024 , "tdls_get"
4780 	},
4781 	{
4782 		SIOCIWFIRSTPRIV + 0x16,
4783 		IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
4784 	},
4785 
4786 	{SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
4787 	{SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set"},
4788 	{SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get"},
4789 	{
4790 		SIOCIWFIRSTPRIV + 0x1D,
4791 		IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
4792 	},
4793 
4794 #ifdef CONFIG_INTEL_WIDI
4795 	{
4796 		SIOCIWFIRSTPRIV + 0x1E,
4797 		IW_PRIV_TYPE_CHAR | 1024, 0, "widi_set"
4798 	},
4799 	{
4800 		SIOCIWFIRSTPRIV + 0x1F,
4801 		IW_PRIV_TYPE_CHAR | 128, 0, "widi_prob_req"
4802 	},
4803 #endif /*  CONFIG_INTEL_WIDI */
4804 
4805 #ifdef CONFIG_WOWLAN
4806 		{ MP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "wow_mode" }, /* set */
4807 #endif
4808 #ifdef CONFIG_AP_WOWLAN
4809 		{ MP_AP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "ap_wow_mode" }, /* set */
4810 #endif
4811 };
4812 
4813 static iw_handler rtw_private_handler[] = {
4814 	rtw_wx_write32,					/* 0x00 */
4815 	rtw_wx_read32,					/* 0x01 */
4816 	rtw_drvext_hdl,					/* 0x02 */
4817 	rtw_mp_ioctl_hdl,				/* 0x03 */
4818 
4819 /*  for MM DTV platform */
4820 	rtw_get_ap_info,					/* 0x04 */
4821 
4822 	rtw_set_pid,						/* 0x05 */
4823 	rtw_wps_start,					/* 0x06 */
4824 
4825 /*  for PLATFORM_MT53XX */
4826 	rtw_wx_get_sensitivity,			/* 0x07 */
4827 	rtw_wx_set_mtk_wps_probe_ie,	/* 0x08 */
4828 	rtw_wx_set_mtk_wps_ie,			/* 0x09 */
4829 
4830 /*  for RTK_DMP_PLATFORM */
4831 /*  Set Channel depend on the country code */
4832 	rtw_wx_set_channel_plan,		/* 0x0A */
4833 
4834 	rtw_dbg_port,					/* 0x0B */
4835 	rtw_wx_write_rf,					/* 0x0C */
4836 	rtw_wx_read_rf,					/* 0x0D */
4837 	rtw_wx_priv_null,				/* 0x0E */
4838 	rtw_wx_priv_null,				/* 0x0F */
4839 	rtw_p2p_set,					/* 0x10 */
4840 	rtw_p2p_get,					/* 0x11 */
4841 	NULL,							/* 0x12 */
4842 	rtw_p2p_get2,					/* 0x13 */
4843 
4844 	rtw_tdls,						/* 0x14 */
4845 	rtw_tdls_get,					/* 0x15 */
4846 
4847 	rtw_pm_set,						/* 0x16 */
4848 	rtw_wx_priv_null,				/* 0x17 */
4849 	rtw_rereg_nd_name,				/* 0x18 */
4850 	rtw_wx_priv_null,				/* 0x19 */
4851 	rtw_mp_efuse_set,				/* 0x1A */
4852 	rtw_mp_efuse_get,				/* 0x1B */
4853 	NULL,							/*  0x1C is reserved for hostapd */
4854 	rtw_test,						/*  0x1D */
4855 #ifdef CONFIG_INTEL_WIDI
4856 	rtw_widi_set,					/* 0x1E */
4857 	rtw_widi_set_probe_request,		/* 0x1F */
4858 #endif /*  CONFIG_INTEL_WIDI */
4859 };
4860 
rtw_get_wireless_stats(struct net_device * dev)4861 static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
4862 {
4863 	struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4864 	struct iw_statistics *piwstats =&padapter->iwstats;
4865 	int tmp_level = 0;
4866 	int tmp_qual = 0;
4867 	int tmp_noise = 0;
4868 
4869 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) != true) {
4870 		piwstats->qual.qual = 0;
4871 		piwstats->qual.level = 0;
4872 		piwstats->qual.noise = 0;
4873 		/* DBG_871X("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise); */
4874 	} else {
4875 		#ifdef CONFIG_SIGNAL_DISPLAY_DBM
4876 		tmp_level = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
4877 		#else
4878 		#ifdef CONFIG_SKIP_SIGNAL_SCALE_MAPPING
4879 		{
4880 			/* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
4881 
4882 			struct hal_com_data *pHal = GET_HAL_DATA(padapter);
4883 
4884 			tmp_level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, padapter->recvpriv.signal_strength);
4885 		}
4886 		#else
4887 		tmp_level = padapter->recvpriv.signal_strength;
4888 		#endif
4889 		#endif
4890 
4891 		tmp_qual = padapter->recvpriv.signal_qual;
4892 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
4893 		if (rtw_linked_check(padapter)) {
4894 			struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
4895 			struct noise_info info;
4896 			info.bPauseDIG = true;
4897 			info.IGIValue = 0x1e;
4898 			info.max_time = 100;/* ms */
4899 			info.chan = pmlmeext->cur_channel ;/* rtw_get_oper_ch(padapter); */
4900 			rtw_ps_deny(padapter, PS_DENY_IOCTL);
4901 			LeaveAllPowerSaveModeDirect(padapter);
4902 
4903 			rtw_hal_set_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&info, false);
4904 			/* ODM_InbandNoise_Monitor(podmpriv, true, 0x20, 100); */
4905 			rtw_ps_deny_cancel(padapter, PS_DENY_IOCTL);
4906 			rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&(info.chan), &(padapter->recvpriv.noise));
4907 			DBG_871X("chan:%d, noise_level:%d\n", info.chan, padapter->recvpriv.noise);
4908 		}
4909 #endif
4910 		tmp_noise = padapter->recvpriv.noise;
4911 		DBG_871X("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise, padapter->recvpriv.rssi);
4912 
4913 		piwstats->qual.level = tmp_level;
4914 		piwstats->qual.qual = tmp_qual;
4915 		piwstats->qual.noise = tmp_noise;
4916 	}
4917 	piwstats->qual.updated = IW_QUAL_ALL_UPDATED ;/* IW_QUAL_DBM; */
4918 
4919 	#ifdef CONFIG_SIGNAL_DISPLAY_DBM
4920 	piwstats->qual.updated = piwstats->qual.updated | IW_QUAL_DBM;
4921 	#endif
4922 
4923 	return &padapter->iwstats;
4924 }
4925 
4926 struct iw_handler_def rtw_handlers_def = {
4927 	.standard = rtw_handlers,
4928 	.num_standard = ARRAY_SIZE(rtw_handlers),
4929 #if defined(CONFIG_WEXT_PRIV)
4930 	.private = rtw_private_handler,
4931 	.private_args = (struct iw_priv_args *)rtw_private_args,
4932 	.num_private = ARRAY_SIZE(rtw_private_handler),
4933 	.num_private_args = ARRAY_SIZE(rtw_private_args),
4934 #endif
4935 	.get_wireless_stats = rtw_get_wireless_stats,
4936 };
4937 
4938 /*  copy from net/wireless/wext.c start */
4939 /* ---------------------------------------------------------------- */
4940 /*
4941  * Calculate size of private arguments
4942  */
4943 static const char iw_priv_type_size[] = {
4944 	0,                              /* IW_PRIV_TYPE_NONE */
4945 	1,                              /* IW_PRIV_TYPE_BYTE */
4946 	1,                              /* IW_PRIV_TYPE_CHAR */
4947 	0,                              /* Not defined */
4948 	sizeof(__u32),                  /* IW_PRIV_TYPE_INT */
4949 	sizeof(struct iw_freq),         /* IW_PRIV_TYPE_FLOAT */
4950 	sizeof(struct sockaddr),        /* IW_PRIV_TYPE_ADDR */
4951 	0,                              /* Not defined */
4952 };
4953 
get_priv_size(__u16 args)4954 static int get_priv_size(__u16 args)
4955 {
4956 	int num = args & IW_PRIV_SIZE_MASK;
4957 	int type = (args & IW_PRIV_TYPE_MASK) >> 12;
4958 
4959 	return num * iw_priv_type_size[type];
4960 }
4961 /*  copy from net/wireless/wext.c end */
4962 
rtw_ioctl_wext_private(struct net_device * dev,union iwreq_data * wrq_data)4963 static int rtw_ioctl_wext_private(struct net_device *dev, union iwreq_data *wrq_data)
4964 {
4965 	int err = 0;
4966 	u8 *input = NULL;
4967 	u32 input_len = 0;
4968 	const char delim[] = " ";
4969 	u8 *output = NULL;
4970 	u32 output_len = 0;
4971 	u32 count = 0;
4972 	u8 *buffer = NULL;
4973 	u32 buffer_len = 0;
4974 	char *ptr = NULL;
4975 	u8 cmdname[17] = {0}; /*  IFNAMSIZ+1 */
4976 	u32 cmdlen;
4977 	s32 len;
4978 	u8 *extra = NULL;
4979 	u32 extra_size = 0;
4980 
4981 	s32 k;
4982 	const iw_handler *priv;		/* Private ioctl */
4983 	const struct iw_priv_args *priv_args;	/* Private ioctl description */
4984 	u32 num_priv;				/* Number of ioctl */
4985 	u32 num_priv_args;			/* Number of descriptions */
4986 	iw_handler handler;
4987 	int temp;
4988 	int subcmd = 0;				/* sub-ioctl index */
4989 	int offset = 0;				/* Space for sub-ioctl index */
4990 
4991 	union iwreq_data wdata;
4992 
4993 
4994 	memcpy(&wdata, wrq_data, sizeof(wdata));
4995 
4996 	input_len = 2048;
4997 	input = rtw_zmalloc(input_len);
4998 	if (NULL == input)
4999 		return -ENOMEM;
5000 	if (copy_from_user(input, wdata.data.pointer, input_len)) {
5001 		err = -EFAULT;
5002 		goto exit;
5003 	}
5004 	ptr = input;
5005 	len = strlen(input);
5006 
5007 	sscanf(ptr, "%16s", cmdname);
5008 	cmdlen = strlen(cmdname);
5009 	DBG_8192C("%s: cmd =%s\n", __func__, cmdname);
5010 
5011 	/*  skip command string */
5012 	if (cmdlen > 0)
5013 		cmdlen += 1; /*  skip one space */
5014 	ptr += cmdlen;
5015 	len -= cmdlen;
5016 	DBG_8192C("%s: parameters =%s\n", __func__, ptr);
5017 
5018 	priv = rtw_private_handler;
5019 	priv_args = rtw_private_args;
5020 	num_priv = ARRAY_SIZE(rtw_private_handler);
5021 	num_priv_args = ARRAY_SIZE(rtw_private_args);
5022 
5023 	if (num_priv_args == 0) {
5024 		err = -EOPNOTSUPP;
5025 		goto exit;
5026 	}
5027 
5028 	/* Search the correct ioctl */
5029 	k = -1;
5030 	while ((++k < num_priv_args) && strcmp(priv_args[k].name, cmdname));
5031 
5032 	/* If not found... */
5033 	if (k == num_priv_args) {
5034 		err = -EOPNOTSUPP;
5035 		goto exit;
5036 	}
5037 
5038 	/* Watch out for sub-ioctls ! */
5039 	if (priv_args[k].cmd < SIOCDEVPRIVATE) {
5040 		int j = -1;
5041 
5042 		/* Find the matching *real* ioctl */
5043 		while ((++j < num_priv_args) && ((priv_args[j].name[0] != '\0') ||
5044 			(priv_args[j].set_args != priv_args[k].set_args) ||
5045 			(priv_args[j].get_args != priv_args[k].get_args)));
5046 
5047 		/* If not found... */
5048 		if (j == num_priv_args) {
5049 			err = -EINVAL;
5050 			goto exit;
5051 		}
5052 
5053 		/* Save sub-ioctl number */
5054 		subcmd = priv_args[k].cmd;
5055 		/* Reserve one int (simplify alignment issues) */
5056 		offset = sizeof(__u32);
5057 		/* Use real ioctl definition from now on */
5058 		k = j;
5059 	}
5060 
5061 	buffer = rtw_zmalloc(4096);
5062 	if (NULL == buffer) {
5063 		err = -ENOMEM;
5064 		goto exit;
5065 	}
5066 
5067 	/* If we have to set some data */
5068 	if ((priv_args[k].set_args & IW_PRIV_TYPE_MASK) &&
5069 		(priv_args[k].set_args & IW_PRIV_SIZE_MASK)) {
5070 		u8 *str;
5071 
5072 		switch (priv_args[k].set_args & IW_PRIV_TYPE_MASK) {
5073 			case IW_PRIV_TYPE_BYTE:
5074 				/* Fetch args */
5075 				count = 0;
5076 				do {
5077 					str = strsep(&ptr, delim);
5078 					if (NULL == str) break;
5079 					sscanf(str, "%i", &temp);
5080 					buffer[count++] = (u8)temp;
5081 				} while (1);
5082 				buffer_len = count;
5083 
5084 				/* Number of args to fetch */
5085 				wdata.data.length = count;
5086 				if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5087 					wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
5088 
5089 				break;
5090 
5091 			case IW_PRIV_TYPE_INT:
5092 				/* Fetch args */
5093 				count = 0;
5094 				do {
5095 					str = strsep(&ptr, delim);
5096 					if (NULL == str) break;
5097 					sscanf(str, "%i", &temp);
5098 					((s32*)buffer)[count++] = (s32)temp;
5099 				} while (1);
5100 				buffer_len = count * sizeof(s32);
5101 
5102 				/* Number of args to fetch */
5103 				wdata.data.length = count;
5104 				if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5105 					wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
5106 
5107 				break;
5108 
5109 			case IW_PRIV_TYPE_CHAR:
5110 				if (len > 0) {
5111 					/* Size of the string to fetch */
5112 					wdata.data.length = len;
5113 					if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5114 						wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
5115 
5116 					/* Fetch string */
5117 					memcpy(buffer, ptr, wdata.data.length);
5118 				} else {
5119 					wdata.data.length = 1;
5120 					buffer[0] = '\0';
5121 				}
5122 				buffer_len = wdata.data.length;
5123 				break;
5124 
5125 			default:
5126 				DBG_8192C("%s: Not yet implemented...\n", __func__);
5127 				err = -1;
5128 				goto exit;
5129 		}
5130 
5131 		if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
5132 			(wdata.data.length != (priv_args[k].set_args & IW_PRIV_SIZE_MASK))) {
5133 			DBG_8192C("%s: The command %s needs exactly %d argument(s)...\n",
5134 					__func__, cmdname, priv_args[k].set_args & IW_PRIV_SIZE_MASK);
5135 			err = -EINVAL;
5136 			goto exit;
5137 		}
5138 	} else { /* if args to set */
5139 		wdata.data.length = 0L;
5140 	}
5141 
5142 	/* Those two tests are important. They define how the driver
5143 	* will have to handle the data */
5144 	if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
5145 		((get_priv_size(priv_args[k].set_args) + offset) <= IFNAMSIZ)) {
5146 		/* First case : all SET args fit within wrq */
5147 		if (offset)
5148 			wdata.mode = subcmd;
5149 		memcpy(wdata.name + offset, buffer, IFNAMSIZ - offset);
5150 	} else {
5151 		if ((priv_args[k].set_args == 0) &&
5152 			(priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
5153 			(get_priv_size(priv_args[k].get_args) <= IFNAMSIZ)) {
5154 			/* Second case : no SET args, GET args fit within wrq */
5155 			if (offset)
5156 				wdata.mode = subcmd;
5157 		} else {
5158 			/* Third case : args won't fit in wrq, or variable number of args */
5159 			if (copy_to_user(wdata.data.pointer, buffer, buffer_len)) {
5160 				err = -EFAULT;
5161 				goto exit;
5162 			}
5163 			wdata.data.flags = subcmd;
5164 		}
5165 	}
5166 
5167 	kfree(input);
5168 	input = NULL;
5169 
5170 	extra_size = 0;
5171 	if (IW_IS_SET(priv_args[k].cmd)) {
5172 		/* Size of set arguments */
5173 		extra_size = get_priv_size(priv_args[k].set_args);
5174 
5175 		/* Does it fits in iwr ? */
5176 		if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
5177 			((extra_size + offset) <= IFNAMSIZ))
5178 			extra_size = 0;
5179 	} else {
5180 		/* Size of get arguments */
5181 		extra_size = get_priv_size(priv_args[k].get_args);
5182 
5183 		/* Does it fits in iwr ? */
5184 		if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
5185 			(extra_size <= IFNAMSIZ))
5186 			extra_size = 0;
5187 	}
5188 
5189 	if (extra_size == 0) {
5190 		extra = (u8 *)&wdata;
5191 		kfree(buffer);
5192 		buffer = NULL;
5193 	} else
5194 		extra = buffer;
5195 
5196 	handler = priv[priv_args[k].cmd - SIOCIWFIRSTPRIV];
5197 	err = handler(dev, NULL, &wdata, extra);
5198 
5199 	/* If we have to get some data */
5200 	if ((priv_args[k].get_args & IW_PRIV_TYPE_MASK) &&
5201 		(priv_args[k].get_args & IW_PRIV_SIZE_MASK)) {
5202 		int j;
5203 		int n = 0;	/* number of args */
5204 		u8 str[20] = {0};
5205 
5206 		/* Check where is the returned data */
5207 		if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
5208 			(get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
5209 			n = priv_args[k].get_args & IW_PRIV_SIZE_MASK;
5210 		else
5211 			n = wdata.data.length;
5212 
5213 		output = rtw_zmalloc(4096);
5214 		if (NULL == output) {
5215 			err =  -ENOMEM;
5216 			goto exit;
5217 		}
5218 
5219 		switch (priv_args[k].get_args & IW_PRIV_TYPE_MASK) {
5220 			case IW_PRIV_TYPE_BYTE:
5221 				/* Display args */
5222 				for (j = 0; j < n; j++) {
5223 					sprintf(str, "%d  ", extra[j]);
5224 					len = strlen(str);
5225 					output_len = strlen(output);
5226 					if ((output_len + len + 1) > 4096) {
5227 						err = -E2BIG;
5228 						goto exit;
5229 					}
5230 					memcpy(output+output_len, str, len);
5231 				}
5232 				break;
5233 
5234 			case IW_PRIV_TYPE_INT:
5235 				/* Display args */
5236 				for (j = 0; j < n; j++) {
5237 					sprintf(str, "%d  ", ((__s32*)extra)[j]);
5238 					len = strlen(str);
5239 					output_len = strlen(output);
5240 					if ((output_len + len + 1) > 4096) {
5241 						err = -E2BIG;
5242 						goto exit;
5243 					}
5244 					memcpy(output+output_len, str, len);
5245 				}
5246 				break;
5247 
5248 			case IW_PRIV_TYPE_CHAR:
5249 				/* Display args */
5250 				memcpy(output, extra, n);
5251 				break;
5252 
5253 			default:
5254 				DBG_8192C("%s: Not yet implemented...\n", __func__);
5255 				err = -1;
5256 				goto exit;
5257 		}
5258 
5259 		output_len = strlen(output) + 1;
5260 		wrq_data->data.length = output_len;
5261 		if (copy_to_user(wrq_data->data.pointer, output, output_len)) {
5262 			err = -EFAULT;
5263 			goto exit;
5264 		}
5265 	} else { /* if args to set */
5266 		wrq_data->data.length = 0;
5267 	}
5268 
5269 exit:
5270 	kfree(input);
5271 	kfree(buffer);
5272 	kfree(output);
5273 
5274 	return err;
5275 }
5276 
rtw_ioctl(struct net_device * dev,struct ifreq * rq,int cmd)5277 int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
5278 {
5279 	struct iwreq *wrq = (struct iwreq *)rq;
5280 	int ret = 0;
5281 
5282 	switch (cmd) {
5283 		case RTL_IOCTL_WPA_SUPPLICANT:
5284 			ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
5285 			break;
5286 		case RTL_IOCTL_HOSTAPD:
5287 			ret = rtw_hostapd_ioctl(dev, &wrq->u.data);
5288 			break;
5289 		case SIOCDEVPRIVATE:
5290 			ret = rtw_ioctl_wext_private(dev, &wrq->u);
5291 			break;
5292 		default:
5293 			ret = -EOPNOTSUPP;
5294 			break;
5295 	}
5296 
5297 	return ret;
5298 }
5299