git.oblomov.eu Git - linux-2.6/blob - drivers/staging/rt2870/sta/sync.c

   1 /*
   2  *************************************************************************
   3  * Ralink Tech Inc.
   4  * 5F., No.36, Taiyuan St., Jhubei City,
   5  * Hsinchu County 302,
   6  * Taiwan, R.O.C.
   7  *
   8  * (c) Copyright 2002-2007, Ralink Technology, Inc.
   9  *
  10  * This program is free software; you can redistribute it and/or modify  *
  11  * it under the terms of the GNU General Public License as published by  *
  12  * the Free Software Foundation; either version 2 of the License, or     *
  13  * (at your option) any later version.                                   *
  14  *                                                                       *
  15  * This program is distributed in the hope that it will be useful,       *
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of        *
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
  18  * GNU General Public License for more details.                          *
  19  *                                                                       *
  20  * You should have received a copy of the GNU General Public License     *
  21  * along with this program; if not, write to the                         *
  22  * Free Software Foundation, Inc.,                                       *
  23  * 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *
  24  *                                                                       *
  25  *************************************************************************
  26
  27         Module Name:
  28         sync.c
  29
  30         Abstract:
  31
  32         Revision History:
  33         Who                     When                    What
  34         --------        ----------              ----------------------------------------------
  35         John Chang      2004-09-01      modified for rt2561/2661
  36         Jan Lee         2006-08-01      modified for rt2860 for 802.11n
  37 */
  38 #include "../rt_config.h"
  39
  40 #define ADHOC_ENTRY_BEACON_LOST_TIME    (2*OS_HZ)       // 2 sec
  41
  42 /*
  43         ==========================================================================
  44         Description:
  45                 The sync state machine,
  46         Parameters:
  47                 Sm - pointer to the state machine
  48         Note:
  49                 the state machine looks like the following
  50
  51         ==========================================================================
  52  */
  53 VOID SyncStateMachineInit(
  54         IN PRTMP_ADAPTER pAd,
  55         IN STATE_MACHINE *Sm,
  56         OUT STATE_MACHINE_FUNC Trans[])
  57 {
  58         StateMachineInit(Sm, Trans, MAX_SYNC_STATE, MAX_SYNC_MSG, (STATE_MACHINE_FUNC)Drop, SYNC_IDLE, SYNC_MACHINE_BASE);
  59
  60         // column 1
  61         StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)MlmeScanReqAction);
  62         StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)MlmeJoinReqAction);
  63         StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)MlmeStartReqAction);
  64         StateMachineSetAction(Sm, SYNC_IDLE, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeacon);
  65         StateMachineSetAction(Sm, SYNC_IDLE, MT2_PEER_PROBE_REQ, (STATE_MACHINE_FUNC)PeerProbeReqAction);
  66
  67         //column 2
  68         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenScan);
  69         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenJoin);
  70         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenStart);
  71         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeaconAtJoinAction);
  72         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_BEACON_TIMEOUT, (STATE_MACHINE_FUNC)BeaconTimeoutAtJoinAction);
  73
  74         // column 3
  75         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenScan);
  76         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenJoin);
  77         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenStart);
  78         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeaconAtScanAction);
  79         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_PEER_PROBE_RSP, (STATE_MACHINE_FUNC)PeerBeaconAtScanAction);
  80         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_SCAN_TIMEOUT, (STATE_MACHINE_FUNC)ScanTimeoutAction);
  81
  82         // timer init
  83         RTMPInitTimer(pAd, &pAd->MlmeAux.BeaconTimer, GET_TIMER_FUNCTION(BeaconTimeout), pAd, FALSE);
  84         RTMPInitTimer(pAd, &pAd->MlmeAux.ScanTimer, GET_TIMER_FUNCTION(ScanTimeout), pAd, FALSE);
  85 }
  86
  87 /*
  88         ==========================================================================
  89         Description:
  90                 Beacon timeout handler, executed in timer thread
  91
  92         IRQL = DISPATCH_LEVEL
  93
  94         ==========================================================================
  95  */
  96 VOID BeaconTimeout(
  97         IN PVOID SystemSpecific1,
  98         IN PVOID FunctionContext,
  99         IN PVOID SystemSpecific2,
 100         IN PVOID SystemSpecific3)
 101 {
 102         RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
 103
 104         DBGPRINT(RT_DEBUG_TRACE,("SYNC - BeaconTimeout\n"));
 105
 106         // Do nothing if the driver is starting halt state.
 107         // This might happen when timer already been fired before cancel timer with mlmehalt
 108         if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))
 109                 return;
 110
 111 #ifdef DOT11_N_SUPPORT
 112         if ((pAd->CommonCfg.BBPCurrentBW == BW_40)
 113                 )
 114         {
 115                 UCHAR        BBPValue = 0;
 116                 AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
 117                 AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
 118                 RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
 119                 BBPValue &= (~0x18);
 120                 BBPValue |= 0x10;
 121                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
 122                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to 40MHz channel %d, Total BSS[%02d]\n",pAd->CommonCfg.CentralChannel, pAd->ScanTab.BssNr));
 123         }
 124 #endif // DOT11_N_SUPPORT //
 125
 126         MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_BEACON_TIMEOUT, 0, NULL);
 127         RT28XX_MLME_HANDLER(pAd);
 128 }
 129
 130 /*
 131         ==========================================================================
 132         Description:
 133                 Scan timeout handler, executed in timer thread
 134
 135         IRQL = DISPATCH_LEVEL
 136
 137         ==========================================================================
 138  */
 139 VOID ScanTimeout(
 140         IN PVOID SystemSpecific1,
 141         IN PVOID FunctionContext,
 142         IN PVOID SystemSpecific2,
 143         IN PVOID SystemSpecific3)
 144 {
 145         RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
 146
 147
 148         // Do nothing if the driver is starting halt state.
 149         // This might happen when timer already been fired before cancel timer with mlmehalt
 150         if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))
 151                 return;
 152
 153         if (MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_SCAN_TIMEOUT, 0, NULL))
 154         {
 155                 RT28XX_MLME_HANDLER(pAd);
 156         }
 157         else
 158         {
 159                 // To prevent SyncMachine.CurrState is SCAN_LISTEN forever.
 160                 pAd->MlmeAux.Channel = 0;
 161                 ScanNextChannel(pAd);
 162                 if (pAd->CommonCfg.bWirelessEvent)
 163                 {
 164                         RTMPSendWirelessEvent(pAd, IW_SCAN_ENQUEUE_FAIL_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
 165                 }
 166         }
 167 }
 168
 169 /*
 170         ==========================================================================
 171         Description:
 172                 MLME SCAN req state machine procedure
 173         ==========================================================================
 174  */
 175 VOID MlmeScanReqAction(
 176         IN PRTMP_ADAPTER pAd,
 177         IN MLME_QUEUE_ELEM *Elem)
 178 {
 179         UCHAR          Ssid[MAX_LEN_OF_SSID], SsidLen, ScanType, BssType, BBPValue = 0;
 180         BOOLEAN        TimerCancelled;
 181         ULONG              Now;
 182         USHORT         Status;
 183         PHEADER_802_11 pHdr80211;
 184         PUCHAR         pOutBuffer = NULL;
 185         NDIS_STATUS    NStatus;
 186
 187         // Check the total scan tries for one single OID command
 188         // If this is the CCX 2.0 Case, skip that!
 189         if ( !RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_START_UP))
 190         {
 191                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeScanReqAction before Startup\n"));
 192                 return;
 193         }
 194
 195         // Increase the scan retry counters.
 196         pAd->StaCfg.ScanCnt++;
 197
 198
 199         // first check the parameter sanity
 200         if (MlmeScanReqSanity(pAd,
 201                                                   Elem->Msg,
 202                                                   Elem->MsgLen,
 203                                                   &BssType,
 204                                                   Ssid,
 205                                                   &SsidLen,
 206                                                   &ScanType))
 207         {
 208
 209                 // Check for channel load and noise hist request
 210                 // Suspend MSDU only at scan request, not the last two mentioned
 211                 if ((ScanType == SCAN_CISCO_NOISE) || (ScanType == SCAN_CISCO_CHANNEL_LOAD))
 212                 {
 213                         if (pAd->StaCfg.CCXScanChannel != pAd->CommonCfg.Channel)
 214                                 RTMPSuspendMsduTransmission(pAd);                       // Suspend MSDU transmission here
 215                 }
 216                 else
 217                 {
 218                         // Suspend MSDU transmission here
 219                         RTMPSuspendMsduTransmission(pAd);
 220                 }
 221
 222                 //
 223                 // To prevent data lost.
 224                 // Send an NULL data with turned PSM bit on to current associated AP before SCAN progress.
 225                 // And should send an NULL data with turned PSM bit off to AP, when scan progress done
 226                 //
 227                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) && (INFRA_ON(pAd)))
 228                 {
 229                         NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer);
 230                         if (NStatus     == NDIS_STATUS_SUCCESS)
 231                         {
 232                                 pHdr80211 = (PHEADER_802_11) pOutBuffer;
 233                                 MgtMacHeaderInit(pAd, pHdr80211, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
 234                                 pHdr80211->Duration = 0;
 235                                 pHdr80211->FC.Type = BTYPE_DATA;
 236                                 pHdr80211->FC.PwrMgmt = PWR_SAVE;
 237
 238                                 // Send using priority queue
 239                                 MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
 240                                 DBGPRINT(RT_DEBUG_TRACE, ("MlmeScanReqAction -- Send PSM Data frame for off channel RM\n"));
 241                                 MlmeFreeMemory(pAd, pOutBuffer);
 242                                 RTMPusecDelay(5000);
 243                         }
 244                 }
 245
 246                 NdisGetSystemUpTime(&Now);
 247                 pAd->StaCfg.LastScanTime = Now;
 248                 // reset all the timers
 249                 RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 250                 RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
 251
 252                 // record desired BSS parameters
 253                 pAd->MlmeAux.BssType = BssType;
 254                 pAd->MlmeAux.ScanType = ScanType;
 255                 pAd->MlmeAux.SsidLen = SsidLen;
 256         NdisZeroMemory(pAd->MlmeAux.Ssid, MAX_LEN_OF_SSID);
 257                 NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
 258
 259                 // start from the first channel
 260                 pAd->MlmeAux.Channel = FirstChannel(pAd);
 261
 262                 // Change the scan channel when dealing with CCX beacon report
 263                 if ((ScanType == SCAN_CISCO_PASSIVE) || (ScanType == SCAN_CISCO_ACTIVE) ||
 264                         (ScanType == SCAN_CISCO_CHANNEL_LOAD) || (ScanType == SCAN_CISCO_NOISE))
 265                         pAd->MlmeAux.Channel = pAd->StaCfg.CCXScanChannel;
 266
 267                 // Let BBP register at 20MHz to do scan
 268                 RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
 269                 BBPValue &= (~0x18);
 270                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
 271                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BBP R4 to 20MHz.l\n"));
 272                 ScanNextChannel(pAd);
 273         }
 274         else
 275         {
 276                 DBGPRINT_ERR(("SYNC - MlmeScanReqAction() sanity check fail\n"));
 277                 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 278                 Status = MLME_INVALID_FORMAT;
 279                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
 280         }
 281 }
 282
 283 /*
 284         ==========================================================================
 285         Description:
 286                 MLME JOIN req state machine procedure
 287         ==========================================================================
 288  */
 289 VOID MlmeJoinReqAction(
 290         IN PRTMP_ADAPTER pAd,
 291         IN MLME_QUEUE_ELEM *Elem)
 292 {
 293         UCHAR        BBPValue = 0;
 294         BSS_ENTRY    *pBss;
 295         BOOLEAN       TimerCancelled;
 296         HEADER_802_11 Hdr80211;
 297         NDIS_STATUS   NStatus;
 298         ULONG         FrameLen = 0;
 299         PUCHAR        pOutBuffer = NULL;
 300         PUCHAR        pSupRate = NULL;
 301         UCHAR         SupRateLen;
 302         PUCHAR        pExtRate = NULL;
 303         UCHAR         ExtRateLen;
 304         UCHAR         ASupRate[] = {0x8C, 0x12, 0x98, 0x24, 0xb0, 0x48, 0x60, 0x6C};
 305         UCHAR         ASupRateLen = sizeof(ASupRate)/sizeof(UCHAR);
 306         MLME_JOIN_REQ_STRUCT *pInfo = (MLME_JOIN_REQ_STRUCT *)(Elem->Msg);
 307
 308         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeJoinReqAction(BSS #%ld)\n", pInfo->BssIdx));
 309
 310
 311         // reset all the timers
 312         RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
 313         RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 314
 315         pBss = &pAd->MlmeAux.SsidBssTab.BssEntry[pInfo->BssIdx];
 316
 317         // record the desired SSID & BSSID we're waiting for
 318         COPY_MAC_ADDR(pAd->MlmeAux.Bssid, pBss->Bssid);
 319
 320         // If AP's SSID is not hidden, it is OK for updating ssid to MlmeAux again.
 321         if (pBss->Hidden == 0)
 322         {
 323                 NdisMoveMemory(pAd->MlmeAux.Ssid, pBss->Ssid, pBss->SsidLen);
 324                 pAd->MlmeAux.SsidLen = pBss->SsidLen;
 325         }
 326
 327         pAd->MlmeAux.BssType = pBss->BssType;
 328         pAd->MlmeAux.Channel = pBss->Channel;
 329         pAd->MlmeAux.CentralChannel = pBss->CentralChannel;
 330
 331         // Let BBP register at 20MHz to do scan
 332         RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
 333         BBPValue &= (~0x18);
 334         RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
 335         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BBP R4 to 20MHz.l\n"));
 336
 337         // switch channel and waiting for beacon timer
 338         AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, FALSE);
 339         AsicLockChannel(pAd, pAd->MlmeAux.Channel);
 340         RTMPSetTimer(&pAd->MlmeAux.BeaconTimer, JOIN_TIMEOUT);
 341
 342     do
 343         {
 344                 if (((pAd->CommonCfg.bIEEE80211H == 1) &&
 345             (pAd->MlmeAux.Channel > 14) &&
 346              RadarChannelCheck(pAd, pAd->MlmeAux.Channel))
 347             )
 348                 {
 349                         //
 350                         // We can't send any Probe request frame to meet 802.11h.
 351                         //
 352                         if (pBss->Hidden == 0)
 353                                 break;
 354                 }
 355
 356                 //
 357                 // send probe request
 358                 //
 359                 NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
 360                 if (NStatus == NDIS_STATUS_SUCCESS)
 361                 {
 362                         if (pAd->MlmeAux.Channel <= 14)
 363                         {
 364                                 pSupRate = pAd->CommonCfg.SupRate;
 365                                 SupRateLen = pAd->CommonCfg.SupRateLen;
 366                                 pExtRate = pAd->CommonCfg.ExtRate;
 367                                 ExtRateLen = pAd->CommonCfg.ExtRateLen;
 368                         }
 369                         else
 370                         {
 371                                 //
 372                                 // Overwrite Support Rate, CCK rate are not allowed
 373                                 //
 374                                 pSupRate = ASupRate;
 375                                 SupRateLen = ASupRateLen;
 376                                 ExtRateLen = 0;
 377                         }
 378
 379                         if (pAd->MlmeAux.BssType == BSS_INFRA)
 380                                 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, pAd->MlmeAux.Bssid, pAd->MlmeAux.Bssid);
 381                         else
 382                                 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
 383
 384                         MakeOutgoingFrame(pOutBuffer,               &FrameLen,
 385                                                           sizeof(HEADER_802_11),    &Hdr80211,
 386                                                           1,                        &SsidIe,
 387                                                           1,                        &pAd->MlmeAux.SsidLen,
 388                                                           pAd->MlmeAux.SsidLen,     pAd->MlmeAux.Ssid,
 389                                                           1,                        &SupRateIe,
 390                                                           1,                        &SupRateLen,
 391                                                           SupRateLen,               pSupRate,
 392                                                           END_OF_ARGS);
 393
 394                         if (ExtRateLen)
 395                         {
 396                                 ULONG Tmp;
 397                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &Tmp,
 398                                                                   1,                                &ExtRateIe,
 399                                                                   1,                                &ExtRateLen,
 400                                                                   ExtRateLen,                       pExtRate,
 401                                                                   END_OF_ARGS);
 402                                 FrameLen += Tmp;
 403                         }
 404
 405
 406                         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
 407                         MlmeFreeMemory(pAd, pOutBuffer);
 408                 }
 409     } while (FALSE);
 410
 411         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - Switch to ch %d, Wait BEACON from %02x:%02x:%02x:%02x:%02x:%02x\n",
 412                 pBss->Channel, pBss->Bssid[0], pBss->Bssid[1], pBss->Bssid[2], pBss->Bssid[3], pBss->Bssid[4], pBss->Bssid[5]));
 413
 414         pAd->Mlme.SyncMachine.CurrState = JOIN_WAIT_BEACON;
 415 }
 416
 417 /*
 418         ==========================================================================
 419         Description:
 420                 MLME START Request state machine procedure, starting an IBSS
 421         ==========================================================================
 422  */
 423 VOID MlmeStartReqAction(
 424         IN PRTMP_ADAPTER pAd,
 425         IN MLME_QUEUE_ELEM *Elem)
 426 {
 427         UCHAR         Ssid[MAX_LEN_OF_SSID], SsidLen;
 428         BOOLEAN       TimerCancelled;
 429
 430         // New for WPA security suites
 431         UCHAR                                           VarIE[MAX_VIE_LEN];     // Total VIE length = MAX_VIE_LEN - -5
 432         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 433         LARGE_INTEGER                           TimeStamp;
 434         BOOLEAN Privacy;
 435         USHORT Status;
 436
 437         // Init Variable IE structure
 438         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 439         pVIE->Length = 0;
 440         TimeStamp.u.LowPart  = 0;
 441         TimeStamp.u.HighPart = 0;
 442
 443         if (MlmeStartReqSanity(pAd, Elem->Msg, Elem->MsgLen, Ssid, &SsidLen))
 444         {
 445                 // reset all the timers
 446                 RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
 447                 RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 448
 449                 //
 450                 // Start a new IBSS. All IBSS parameters are decided now....
 451                 //
 452                 DBGPRINT(RT_DEBUG_TRACE, ("MlmeStartReqAction - Start a new IBSS. All IBSS parameters are decided now.... \n"));
 453                 pAd->MlmeAux.BssType           = BSS_ADHOC;
 454                 NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
 455                 pAd->MlmeAux.SsidLen           = SsidLen;
 456
 457                 // generate a radom number as BSSID
 458                 MacAddrRandomBssid(pAd, pAd->MlmeAux.Bssid);
 459                 DBGPRINT(RT_DEBUG_TRACE, ("MlmeStartReqAction - generate a radom number as BSSID \n"));
 460
 461                 Privacy = (pAd->StaCfg.WepStatus == Ndis802_11Encryption1Enabled) ||
 462                                   (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
 463                                   (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled);
 464                 pAd->MlmeAux.CapabilityInfo    = CAP_GENERATE(0,1,Privacy, (pAd->CommonCfg.TxPreamble == Rt802_11PreambleShort), 1, 0);
 465                 pAd->MlmeAux.BeaconPeriod      = pAd->CommonCfg.BeaconPeriod;
 466                 pAd->MlmeAux.AtimWin           = pAd->StaCfg.AtimWin;
 467                 pAd->MlmeAux.Channel           = pAd->CommonCfg.Channel;
 468
 469                 pAd->CommonCfg.CentralChannel  = pAd->CommonCfg.Channel;
 470                 pAd->MlmeAux.CentralChannel    = pAd->CommonCfg.CentralChannel;
 471
 472                 pAd->MlmeAux.SupRateLen= pAd->CommonCfg.SupRateLen;
 473                 NdisMoveMemory(pAd->MlmeAux.SupRate, pAd->CommonCfg.SupRate, MAX_LEN_OF_SUPPORTED_RATES);
 474                 RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
 475                 pAd->MlmeAux.ExtRateLen = pAd->CommonCfg.ExtRateLen;
 476                 NdisMoveMemory(pAd->MlmeAux.ExtRate, pAd->CommonCfg.ExtRate, MAX_LEN_OF_SUPPORTED_RATES);
 477                 RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
 478 #ifdef DOT11_N_SUPPORT
 479                 if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
 480                 {
 481                         RTMPUpdateHTIE(&pAd->CommonCfg.DesiredHtPhy, &pAd->StaCfg.DesiredHtPhyInfo.MCSSet[0], &pAd->MlmeAux.HtCapability, &pAd->MlmeAux.AddHtInfo);
 482                         pAd->MlmeAux.HtCapabilityLen = sizeof(HT_CAPABILITY_IE);
 483                         // Not turn pAd->StaActive.SupportedHtPhy.bHtEnable = TRUE here.
 484                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC -pAd->StaActive.SupportedHtPhy.bHtEnable = TRUE\n"));
 485                 }
 486                 else
 487 #endif // DOT11_N_SUPPORT //
 488                 {
 489                         pAd->MlmeAux.HtCapabilityLen = 0;
 490                         pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
 491                 }
 492                 // temporarily not support QOS in IBSS
 493                 NdisZeroMemory(&pAd->MlmeAux.APEdcaParm, sizeof(EDCA_PARM));
 494                 NdisZeroMemory(&pAd->MlmeAux.APQbssLoad, sizeof(QBSS_LOAD_PARM));
 495                 NdisZeroMemory(&pAd->MlmeAux.APQosCapability, sizeof(QOS_CAPABILITY_PARM));
 496
 497                 AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, FALSE);
 498                 AsicLockChannel(pAd, pAd->MlmeAux.Channel);
 499
 500                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeStartReqAction(ch= %d,sup rates= %d, ext rates=%d)\n",
 501                         pAd->MlmeAux.Channel, pAd->MlmeAux.SupRateLen, pAd->MlmeAux.ExtRateLen));
 502
 503                 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 504                 Status = MLME_SUCCESS;
 505                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
 506         }
 507         else
 508         {
 509                 DBGPRINT_ERR(("SYNC - MlmeStartReqAction() sanity check fail.\n"));
 510                 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 511                 Status = MLME_INVALID_FORMAT;
 512                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
 513         }
 514 }
 515
 516 /*
 517         ==========================================================================
 518         Description:
 519                 peer sends beacon back when scanning
 520         ==========================================================================
 521  */
 522 VOID PeerBeaconAtScanAction(
 523         IN PRTMP_ADAPTER pAd,
 524         IN MLME_QUEUE_ELEM *Elem)
 525 {
 526         UCHAR           Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
 527         UCHAR           Ssid[MAX_LEN_OF_SSID], BssType, Channel, NewChannel,
 528                                         SsidLen, DtimCount, DtimPeriod, BcastFlag, MessageToMe;
 529         CF_PARM         CfParm;
 530         USHORT          BeaconPeriod, AtimWin, CapabilityInfo;
 531         PFRAME_802_11   pFrame;
 532         LARGE_INTEGER   TimeStamp;
 533         UCHAR           Erp;
 534         UCHAR           SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
 535         UCHAR                   SupRateLen, ExtRateLen;
 536         USHORT                  LenVIE;
 537         UCHAR                   CkipFlag;
 538         UCHAR                   AironetCellPowerLimit;
 539         EDCA_PARM       EdcaParm;
 540         QBSS_LOAD_PARM  QbssLoad;
 541         QOS_CAPABILITY_PARM QosCapability;
 542         ULONG                                           RalinkIe;
 543         UCHAR                                           VarIE[MAX_VIE_LEN];             // Total VIE length = MAX_VIE_LEN - -5
 544         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 545         HT_CAPABILITY_IE                HtCapability;
 546         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
 547         UCHAR                   HtCapabilityLen = 0, PreNHtCapabilityLen = 0;
 548         UCHAR                   AddHtInfoLen;
 549         UCHAR                   NewExtChannelOffset = 0xff;
 550
 551
 552         // NdisFillMemory(Ssid, MAX_LEN_OF_SSID, 0x00);
 553         pFrame = (PFRAME_802_11) Elem->Msg;
 554         // Init Variable IE structure
 555         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 556         pVIE->Length = 0;
 557 #ifdef DOT11_N_SUPPORT
 558     RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
 559         RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
 560 #endif // DOT11_N_SUPPORT //
 561
 562         if (PeerBeaconAndProbeRspSanity(pAd,
 563                                                                 Elem->Msg,
 564                                                                 Elem->MsgLen,
 565                                                                 Elem->Channel,
 566                                                                 Addr2,
 567                                                                 Bssid,
 568                                                                 Ssid,
 569                                                                 &SsidLen,
 570                                                                 &BssType,
 571                                                                 &BeaconPeriod,
 572                                                                 &Channel,
 573                                                                 &NewChannel,
 574                                                                 &TimeStamp,
 575                                                                 &CfParm,
 576                                                                 &AtimWin,
 577                                                                 &CapabilityInfo,
 578                                                                 &Erp,
 579                                                                 &DtimCount,
 580                                                                 &DtimPeriod,
 581                                                                 &BcastFlag,
 582                                                                 &MessageToMe,
 583                                                                 SupRate,
 584                                                                 &SupRateLen,
 585                                                                 ExtRate,
 586                                                                 &ExtRateLen,
 587                                                                 &CkipFlag,
 588                                                                 &AironetCellPowerLimit,
 589                                                                 &EdcaParm,
 590                                                                 &QbssLoad,
 591                                                                 &QosCapability,
 592                                                                 &RalinkIe,
 593                                                                 &HtCapabilityLen,
 594                                                                 &PreNHtCapabilityLen,
 595                                                                 &HtCapability,
 596                                                                 &AddHtInfoLen,
 597                                                                 &AddHtInfo,
 598                                                                 &NewExtChannelOffset,
 599                                                                 &LenVIE,
 600                                                                 pVIE))
 601         {
 602                 ULONG Idx;
 603                 CHAR Rssi = 0;
 604
 605                 Idx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
 606                 if (Idx != BSS_NOT_FOUND)
 607                         Rssi = pAd->ScanTab.BssEntry[Idx].Rssi;
 608
 609                 Rssi = RTMPMaxRssi(pAd, ConvertToRssi(pAd, Elem->Rssi0, RSSI_0), ConvertToRssi(pAd, Elem->Rssi1, RSSI_1), ConvertToRssi(pAd, Elem->Rssi2, RSSI_2));
 610
 611
 612 #ifdef DOT11_N_SUPPORT
 613                 if ((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0))
 614                         HtCapabilityLen = SIZE_HT_CAP_IE;
 615 #endif // DOT11_N_SUPPORT //
 616                 if ((pAd->StaCfg.CCXReqType != MSRN_TYPE_UNUSED) && (Channel == pAd->StaCfg.CCXScanChannel))
 617                 {
 618                         Idx = BssTableSetEntry(pAd, &pAd->StaCfg.CCXBssTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
 619                                                  &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen,ExtRate, ExtRateLen, &HtCapability,
 620                                                  &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, Rssi, TimeStamp, CkipFlag,
 621                                                  &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
 622                         if (Idx != BSS_NOT_FOUND)
 623                         {
 624                                 NdisMoveMemory(pAd->StaCfg.CCXBssTab.BssEntry[Idx].PTSF, &Elem->Msg[24], 4);
 625                                 NdisMoveMemory(&pAd->StaCfg.CCXBssTab.BssEntry[Idx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
 626                                 NdisMoveMemory(&pAd->StaCfg.CCXBssTab.BssEntry[Idx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
 627                                 if (pAd->StaCfg.CCXReqType == MSRN_TYPE_BEACON_REQ)
 628                                         AironetAddBeaconReport(pAd, Idx, Elem);
 629                         }
 630                 }
 631                 else
 632                 {
 633                         Idx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
 634                                                   &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,  &HtCapability,
 635                                                  &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, Rssi, TimeStamp, CkipFlag,
 636                                                  &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
 637 #ifdef DOT11_N_SUPPORT
 638 #ifdef DOT11N_DRAFT3
 639                         if (pAd->ChannelList[pAd->CommonCfg.ChannelListIdx].bEffectedChannel == TRUE)
 640                         {
 641                                 UCHAR           RegClass;
 642                                 PeerBeaconAndProbeRspSanity2(pAd, Elem->Msg, Elem->MsgLen, &RegClass);
 643                                 TriEventTableSetEntry(pAd, &pAd->CommonCfg.TriggerEventTab, Bssid, &HtCapability, HtCapabilityLen, RegClass, Channel);
 644                         }
 645 #endif // DOT11N_DRAFT3 //
 646 #endif // DOT11_N_SUPPORT //
 647                         if (Idx != BSS_NOT_FOUND)
 648                         {
 649                                 NdisMoveMemory(pAd->ScanTab.BssEntry[Idx].PTSF, &Elem->Msg[24], 4);
 650                                 NdisMoveMemory(&pAd->ScanTab.BssEntry[Idx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
 651                                 NdisMoveMemory(&pAd->ScanTab.BssEntry[Idx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
 652                         }
 653                 }
 654         }
 655         // sanity check fail, ignored
 656 }
 657
 658 /*
 659         ==========================================================================
 660         Description:
 661                 When waiting joining the (I)BSS, beacon received from external
 662         ==========================================================================
 663  */
 664 VOID PeerBeaconAtJoinAction(
 665         IN PRTMP_ADAPTER pAd,
 666         IN MLME_QUEUE_ELEM *Elem)
 667 {
 668         UCHAR         Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
 669         UCHAR         Ssid[MAX_LEN_OF_SSID], SsidLen, BssType, Channel, MessageToMe,
 670                                   DtimCount, DtimPeriod, BcastFlag, NewChannel;
 671         LARGE_INTEGER TimeStamp;
 672         USHORT        BeaconPeriod, AtimWin, CapabilityInfo;
 673         CF_PARM       Cf;
 674         BOOLEAN       TimerCancelled;
 675         UCHAR         Erp;
 676         UCHAR         SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
 677         UCHAR             SupRateLen, ExtRateLen;
 678         UCHAR         CkipFlag;
 679         USHORT            LenVIE;
 680         UCHAR             AironetCellPowerLimit;
 681         EDCA_PARM       EdcaParm;
 682         QBSS_LOAD_PARM  QbssLoad;
 683         QOS_CAPABILITY_PARM QosCapability;
 684         USHORT        Status;
 685         UCHAR                                           VarIE[MAX_VIE_LEN];             // Total VIE length = MAX_VIE_LEN - -5
 686         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 687         ULONG           RalinkIe;
 688         ULONG         Idx;
 689         HT_CAPABILITY_IE                HtCapability;
 690         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
 691         UCHAR                           HtCapabilityLen = 0, PreNHtCapabilityLen = 0;
 692         UCHAR                   AddHtInfoLen;
 693         UCHAR                   NewExtChannelOffset = 0xff;
 694 #ifdef DOT11_N_SUPPORT
 695         UCHAR                   CentralChannel;
 696 #endif // DOT11_N_SUPPORT //
 697
 698         // Init Variable IE structure
 699         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 700         pVIE->Length = 0;
 701     RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
 702         RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
 703
 704
 705         if (PeerBeaconAndProbeRspSanity(pAd,
 706                                                                 Elem->Msg,
 707                                                                 Elem->MsgLen,
 708                                                                 Elem->Channel,
 709                                                                 Addr2,
 710                                                                 Bssid,
 711                                                                 Ssid,
 712                                                                 &SsidLen,
 713                                                                 &BssType,
 714                                                                 &BeaconPeriod,
 715                                                                 &Channel,
 716                                                                 &NewChannel,
 717                                                                 &TimeStamp,
 718                                                                 &Cf,
 719                                                                 &AtimWin,
 720                                                                 &CapabilityInfo,
 721                                                                 &Erp,
 722                                                                 &DtimCount,
 723                                                                 &DtimPeriod,
 724                                                                 &BcastFlag,
 725                                                                 &MessageToMe,
 726                                                                 SupRate,
 727                                                                 &SupRateLen,
 728                                                                 ExtRate,
 729                                                                 &ExtRateLen,
 730                                                                 &CkipFlag,
 731                                                                 &AironetCellPowerLimit,
 732                                                                 &EdcaParm,
 733                                                                 &QbssLoad,
 734                                                                 &QosCapability,
 735                                                                 &RalinkIe,
 736                                                                 &HtCapabilityLen,
 737                                                                 &PreNHtCapabilityLen,
 738                                                                 &HtCapability,
 739                                                                 &AddHtInfoLen,
 740                                                                 &AddHtInfo,
 741                                                                 &NewExtChannelOffset,
 742                                                                 &LenVIE,
 743                                                                 pVIE))
 744         {
 745                 // Disqualify 11b only adhoc when we are in 11g only adhoc mode
 746                 if ((BssType == BSS_ADHOC) && (pAd->CommonCfg.PhyMode == PHY_11G) && ((SupRateLen+ExtRateLen)< 12))
 747                         return;
 748
 749                 // BEACON from desired BSS/IBSS found. We should be able to decide most
 750                 // BSS parameters here.
 751                 // Q. But what happen if this JOIN doesn't conclude a successful ASSOCIATEION?
 752                 //    Do we need to receover back all parameters belonging to previous BSS?
 753                 // A. Should be not. There's no back-door recover to previous AP. It still need
 754                 //    a new JOIN-AUTH-ASSOC sequence.
 755                 if (MAC_ADDR_EQUAL(pAd->MlmeAux.Bssid, Bssid))
 756                 {
 757                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - receive desired BEACON at JoinWaitBeacon... Channel = %d\n", Channel));
 758                         RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 759
 760                         // Update RSSI to prevent No signal display when cards first initialized
 761                         pAd->StaCfg.RssiSample.LastRssi0        = ConvertToRssi(pAd, Elem->Rssi0, RSSI_0);
 762                         pAd->StaCfg.RssiSample.LastRssi1        = ConvertToRssi(pAd, Elem->Rssi1, RSSI_1);
 763                         pAd->StaCfg.RssiSample.LastRssi2        = ConvertToRssi(pAd, Elem->Rssi2, RSSI_2);
 764                         pAd->StaCfg.RssiSample.AvgRssi0 = pAd->StaCfg.RssiSample.LastRssi0;
 765                         pAd->StaCfg.RssiSample.AvgRssi0X8       = pAd->StaCfg.RssiSample.AvgRssi0 << 3;
 766                         pAd->StaCfg.RssiSample.AvgRssi1 = pAd->StaCfg.RssiSample.LastRssi1;
 767                         pAd->StaCfg.RssiSample.AvgRssi1X8       = pAd->StaCfg.RssiSample.AvgRssi1 << 3;
 768                         pAd->StaCfg.RssiSample.AvgRssi2 = pAd->StaCfg.RssiSample.LastRssi2;
 769                         pAd->StaCfg.RssiSample.AvgRssi2X8       = pAd->StaCfg.RssiSample.AvgRssi2 << 3;
 770
 771                         //
 772                         // We need to check if SSID only set to any, then we can record the current SSID.
 773                         // Otherwise will cause hidden SSID association failed.
 774                         //
 775                         if (pAd->MlmeAux.SsidLen == 0)
 776                         {
 777                                 NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
 778                                 pAd->MlmeAux.SsidLen = SsidLen;
 779                         }
 780                         else
 781                         {
 782                                 Idx = BssSsidTableSearch(&pAd->ScanTab, Bssid, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen, Channel);
 783
 784                                 if (Idx != BSS_NOT_FOUND)
 785                                 {
 786                                         //
 787                                         // Multiple SSID case, used correct CapabilityInfo
 788                                         //
 789                                         CapabilityInfo = pAd->ScanTab.BssEntry[Idx].CapabilityInfo;
 790                                 }
 791                         }
 792                         NdisMoveMemory(pAd->MlmeAux.Bssid, Bssid, MAC_ADDR_LEN);
 793                         pAd->MlmeAux.CapabilityInfo = CapabilityInfo & SUPPORTED_CAPABILITY_INFO;
 794                         pAd->MlmeAux.BssType = BssType;
 795                         pAd->MlmeAux.BeaconPeriod = BeaconPeriod;
 796                         pAd->MlmeAux.Channel = Channel;
 797                         pAd->MlmeAux.AtimWin = AtimWin;
 798                         pAd->MlmeAux.CfpPeriod = Cf.CfpPeriod;
 799                         pAd->MlmeAux.CfpMaxDuration = Cf.CfpMaxDuration;
 800                         pAd->MlmeAux.APRalinkIe = RalinkIe;
 801
 802                         // Copy AP's supported rate to MlmeAux for creating assoication request
 803                         // Also filter out not supported rate
 804                         pAd->MlmeAux.SupRateLen = SupRateLen;
 805                         NdisMoveMemory(pAd->MlmeAux.SupRate, SupRate, SupRateLen);
 806                         RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
 807                         pAd->MlmeAux.ExtRateLen = ExtRateLen;
 808                         NdisMoveMemory(pAd->MlmeAux.ExtRate, ExtRate, ExtRateLen);
 809                         RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
 810
 811             NdisZeroMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, 16);
 812 #ifdef DOT11_N_SUPPORT
 813                         pAd->MlmeAux.NewExtChannelOffset = NewExtChannelOffset;
 814                         pAd->MlmeAux.HtCapabilityLen = HtCapabilityLen;
 815
 816                         // filter out un-supported ht rates
 817                         if (((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0)) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
 818                         {
 819                                 RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
 820                                 RTMPMoveMemory(&pAd->MlmeAux.AddHtInfo, &AddHtInfo, SIZE_ADD_HT_INFO_IE);
 821
 822                                 // StaActive.SupportedHtPhy.MCSSet stores Peer AP's 11n Rx capability
 823                                 NdisMoveMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, HtCapability.MCSSet, 16);
 824                                 pAd->MlmeAux.NewExtChannelOffset = NewExtChannelOffset;
 825                                 pAd->MlmeAux.HtCapabilityLen = SIZE_HT_CAP_IE;
 826                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = TRUE;
 827                                 if (PreNHtCapabilityLen > 0)
 828                                         pAd->StaActive.SupportedPhyInfo.bPreNHt = TRUE;
 829                                 RTMPCheckHt(pAd, BSSID_WCID, &HtCapability, &AddHtInfo);
 830                                 // Copy AP Parameter to StaActive.  This is also in LinkUp.
 831                                 DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAtJoinAction! (MpduDensity=%d, MaxRAmpduFactor=%d, BW=%d)\n",
 832                                         pAd->StaActive.SupportedHtPhy.MpduDensity, pAd->StaActive.SupportedHtPhy.MaxRAmpduFactor, HtCapability.HtCapInfo.ChannelWidth));
 833
 834                                 if (AddHtInfoLen > 0)
 835                                 {
 836                                         CentralChannel = AddHtInfo.ControlChan;
 837                                         // Check again the Bandwidth capability of this AP.
 838                                         if ((AddHtInfo.ControlChan > 2)&& (AddHtInfo.AddHtInfo.ExtChanOffset == EXTCHA_BELOW) && (HtCapability.HtCapInfo.ChannelWidth == BW_40))
 839                                         {
 840                                                 CentralChannel = AddHtInfo.ControlChan - 2;
 841                                         }
 842                                         else if ((AddHtInfo.AddHtInfo.ExtChanOffset == EXTCHA_ABOVE) && (HtCapability.HtCapInfo.ChannelWidth == BW_40))
 843                                         {
 844                                                 CentralChannel = AddHtInfo.ControlChan + 2;
 845                                         }
 846
 847                                         // Check Error .
 848                                         if (pAd->MlmeAux.CentralChannel != CentralChannel)
 849                                                 DBGPRINT(RT_DEBUG_ERROR, ("PeerBeaconAtJoinAction HT===>Beacon Central Channel = %d, Control Channel = %d. Mlmeaux CentralChannel = %d\n", CentralChannel, AddHtInfo.ControlChan, pAd->MlmeAux.CentralChannel));
 850
 851                                         DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAtJoinAction HT===>Central Channel = %d, Control Channel = %d,  .\n", CentralChannel, AddHtInfo.ControlChan));
 852
 853                                 }
 854
 855                         }
 856                         else
 857 #endif // DOT11_N_SUPPORT //
 858                         {
 859                                 // To prevent error, let legacy AP must have same CentralChannel and Channel.
 860                                 if ((HtCapabilityLen == 0) && (PreNHtCapabilityLen == 0))
 861                                         pAd->MlmeAux.CentralChannel = pAd->MlmeAux.Channel;
 862
 863                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
 864                                 RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
 865                                 RTMPZeroMemory(&pAd->MlmeAux.AddHtInfo, SIZE_ADD_HT_INFO_IE);
 866                         }
 867
 868                         RTMPUpdateMlmeRate(pAd);
 869
 870                         // copy QOS related information
 871                         if ((pAd->CommonCfg.bWmmCapable)
 872 #ifdef DOT11_N_SUPPORT
 873                                  || (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
 874 #endif // DOT11_N_SUPPORT //
 875                                 )
 876                         {
 877                                 NdisMoveMemory(&pAd->MlmeAux.APEdcaParm, &EdcaParm, sizeof(EDCA_PARM));
 878                                 NdisMoveMemory(&pAd->MlmeAux.APQbssLoad, &QbssLoad, sizeof(QBSS_LOAD_PARM));
 879                                 NdisMoveMemory(&pAd->MlmeAux.APQosCapability, &QosCapability, sizeof(QOS_CAPABILITY_PARM));
 880                         }
 881                         else
 882                         {
 883                                 NdisZeroMemory(&pAd->MlmeAux.APEdcaParm, sizeof(EDCA_PARM));
 884                                 NdisZeroMemory(&pAd->MlmeAux.APQbssLoad, sizeof(QBSS_LOAD_PARM));
 885                                 NdisZeroMemory(&pAd->MlmeAux.APQosCapability, sizeof(QOS_CAPABILITY_PARM));
 886                         }
 887
 888                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - after JOIN, SupRateLen=%d, ExtRateLen=%d\n",
 889                                                                                 pAd->MlmeAux.SupRateLen, pAd->MlmeAux.ExtRateLen));
 890
 891 #ifdef LEAP_SUPPORT
 892                         // Update CkipFlag
 893                         pAd->StaCfg.CkipFlag = CkipFlag;
 894
 895                         // Keep TimeStamp for Re-Association used.
 896                         if (LEAP_CCKM_ON(pAd) && (pAd->StaCfg.CCKMLinkUpFlag == TRUE))
 897                                 pAd->StaCfg.CCKMBeaconAtJoinTimeStamp = TimeStamp;
 898 #endif // LEAP_SUPPORT //
 899
 900                         if (AironetCellPowerLimit != 0xFF)
 901                         {
 902                                 //We need to change our TxPower for CCX 2.0 AP Control of Client Transmit Power
 903                                 ChangeToCellPowerLimit(pAd, AironetCellPowerLimit);
 904                         }
 905                         else  //Used the default TX Power Percentage.
 906                                 pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
 907
 908                         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 909                         Status = MLME_SUCCESS;
 910                         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
 911                 }
 912                 // not to me BEACON, ignored
 913         }
 914         // sanity check fail, ignore this frame
 915 }
 916
 917 /*
 918         ==========================================================================
 919         Description:
 920                 receive BEACON from peer
 921
 922         IRQL = DISPATCH_LEVEL
 923
 924         ==========================================================================
 925  */
 926 VOID PeerBeacon(
 927         IN PRTMP_ADAPTER pAd,
 928         IN MLME_QUEUE_ELEM *Elem)
 929 {
 930         UCHAR         Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
 931         CHAR          Ssid[MAX_LEN_OF_SSID];
 932         CF_PARM       CfParm;
 933         UCHAR         SsidLen, MessageToMe=0, BssType, Channel, NewChannel, index=0;
 934         UCHAR         DtimCount=0, DtimPeriod=0, BcastFlag=0;
 935         USHORT        CapabilityInfo, AtimWin, BeaconPeriod;
 936         LARGE_INTEGER TimeStamp;
 937         USHORT        TbttNumToNextWakeUp;
 938         UCHAR         Erp;
 939         UCHAR         SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
 940         UCHAR             SupRateLen, ExtRateLen;
 941         UCHAR             CkipFlag;
 942         USHORT        LenVIE;
 943         UCHAR             AironetCellPowerLimit;
 944         EDCA_PARM       EdcaParm;
 945         QBSS_LOAD_PARM  QbssLoad;
 946         QOS_CAPABILITY_PARM QosCapability;
 947         ULONG           RalinkIe;
 948         // New for WPA security suites
 949         UCHAR                                           VarIE[MAX_VIE_LEN];             // Total VIE length = MAX_VIE_LEN - -5
 950         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 951         HT_CAPABILITY_IE                HtCapability;
 952         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
 953         UCHAR                   HtCapabilityLen, PreNHtCapabilityLen;
 954         UCHAR                   AddHtInfoLen;
 955         UCHAR                   NewExtChannelOffset = 0xff;
 956
 957         if (!(INFRA_ON(pAd) || ADHOC_ON(pAd)
 958                 ))
 959                 return;
 960
 961         // Init Variable IE structure
 962         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 963         pVIE->Length = 0;
 964     RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
 965         RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
 966
 967         if (PeerBeaconAndProbeRspSanity(pAd,
 968                                                                 Elem->Msg,
 969                                                                 Elem->MsgLen,
 970                                                                 Elem->Channel,
 971                                                                 Addr2,
 972                                                                 Bssid,
 973                                                                 Ssid,
 974                                                                 &SsidLen,
 975                                                                 &BssType,
 976                                                                 &BeaconPeriod,
 977                                                                 &Channel,
 978                                                                 &NewChannel,
 979                                                                 &TimeStamp,
 980                                                                 &CfParm,
 981                                                                 &AtimWin,
 982                                                                 &CapabilityInfo,
 983                                                                 &Erp,
 984                                                                 &DtimCount,
 985                                                                 &DtimPeriod,
 986                                                                 &BcastFlag,
 987                                                                 &MessageToMe,
 988                                                                 SupRate,
 989                                                                 &SupRateLen,
 990                                                                 ExtRate,
 991                                                                 &ExtRateLen,
 992                                                                 &CkipFlag,
 993                                                                 &AironetCellPowerLimit,
 994                                                                 &EdcaParm,
 995                                                                 &QbssLoad,
 996                                                                 &QosCapability,
 997                                                                 &RalinkIe,
 998                                                                 &HtCapabilityLen,
 999                                                                 &PreNHtCapabilityLen,
1000                                                                 &HtCapability,
1001                                                                 &AddHtInfoLen,
1002                                                                 &AddHtInfo,
1003                                                                 &NewExtChannelOffset,
1004                                                                 &LenVIE,
1005                                                                 pVIE))
1006         {
1007                 BOOLEAN is_my_bssid, is_my_ssid;
1008                 ULONG   Bssidx, Now;
1009                 BSS_ENTRY *pBss;
1010                 CHAR            RealRssi = RTMPMaxRssi(pAd, ConvertToRssi(pAd, Elem->Rssi0, RSSI_0), ConvertToRssi(pAd, Elem->Rssi1, RSSI_1), ConvertToRssi(pAd, Elem->Rssi2, RSSI_2));
1011
1012                 is_my_bssid = MAC_ADDR_EQUAL(Bssid, pAd->CommonCfg.Bssid)? TRUE : FALSE;
1013                 is_my_ssid = SSID_EQUAL(Ssid, SsidLen, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen)? TRUE:FALSE;
1014
1015
1016                 // ignore BEACON not for my SSID
1017                 if ((! is_my_ssid) && (! is_my_bssid))
1018                         return;
1019
1020                 // It means STA waits disassoc completely from this AP, ignores this beacon.
1021                 if (pAd->Mlme.CntlMachine.CurrState == CNTL_WAIT_DISASSOC)
1022                         return;
1023
1024 #ifdef DOT11_N_SUPPORT
1025                 // Copy Control channel for this BSSID.
1026                 if (AddHtInfoLen != 0)
1027                         Channel = AddHtInfo.ControlChan;
1028
1029                 if ((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0))
1030                         HtCapabilityLen = SIZE_HT_CAP_IE;
1031 #endif // DOT11_N_SUPPORT //
1032
1033                 //
1034                 // Housekeeping "SsidBssTab" table for later-on ROAMing usage.
1035                 //
1036                 Bssidx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
1037                 if (Bssidx == BSS_NOT_FOUND)
1038                 {
1039                         // discover new AP of this network, create BSS entry
1040                         Bssidx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
1041                                                  &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,
1042                                                 &HtCapability, &AddHtInfo,HtCapabilityLen,AddHtInfoLen,NewExtChannelOffset, Channel,
1043                                                 RealRssi, TimeStamp, CkipFlag, &EdcaParm, &QosCapability,
1044                                                 &QbssLoad, LenVIE, pVIE);
1045                         if (Bssidx == BSS_NOT_FOUND) // return if BSS table full
1046                                 return;
1047
1048                         NdisMoveMemory(pAd->ScanTab.BssEntry[Bssidx].PTSF, &Elem->Msg[24], 4);
1049                         NdisMoveMemory(&pAd->ScanTab.BssEntry[Bssidx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
1050                         NdisMoveMemory(&pAd->ScanTab.BssEntry[Bssidx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
1051
1052
1053
1054                 }
1055
1056                 if ((pAd->CommonCfg.bIEEE80211H == 1) && (NewChannel != 0) && (Channel != NewChannel))
1057                 {
1058                         // Switching to channel 1 can prevent from rescanning the current channel immediately (by auto reconnection).
1059                         // In addition, clear the MLME queue and the scan table to discard the RX packets and previous scanning results.
1060                         AsicSwitchChannel(pAd, 1, FALSE);
1061                         AsicLockChannel(pAd, 1);
1062                     LinkDown(pAd, FALSE);
1063                         MlmeQueueInit(&pAd->Mlme.Queue);
1064                         BssTableInit(&pAd->ScanTab);
1065                     RTMPusecDelay(1000000);             // use delay to prevent STA do reassoc
1066
1067                         // channel sanity check
1068                         for (index = 0 ; index < pAd->ChannelListNum; index++)
1069                         {
1070                                 if (pAd->ChannelList[index].Channel == NewChannel)
1071                                 {
1072                                         pAd->ScanTab.BssEntry[Bssidx].Channel = NewChannel;
1073                                         pAd->CommonCfg.Channel = NewChannel;
1074                                         AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
1075                                         AsicLockChannel(pAd, pAd->CommonCfg.Channel);
1076                                         DBGPRINT(RT_DEBUG_TRACE, ("PeerBeacon - STA receive channel switch announcement IE (New Channel =%d)\n", NewChannel));
1077                                         break;
1078                                 }
1079                         }
1080
1081                         if (index >= pAd->ChannelListNum)
1082                         {
1083                                 DBGPRINT_ERR(("PeerBeacon(can not find New Channel=%d in ChannelList[%d]\n", pAd->CommonCfg.Channel, pAd->ChannelListNum));
1084                         }
1085                 }
1086
1087                 // if the ssid matched & bssid unmatched, we should select the bssid with large value.
1088                 // This might happened when two STA start at the same time
1089                 if ((! is_my_bssid) && ADHOC_ON(pAd))
1090                 {
1091                         INT     i;
1092
1093                         // Add the safeguard against the mismatch of adhoc wep status
1094                         if (pAd->StaCfg.WepStatus != pAd->ScanTab.BssEntry[Bssidx].WepStatus)
1095                         {
1096                                 return;
1097                         }
1098
1099                         // collapse into the ADHOC network which has bigger BSSID value.
1100                         for (i = 0; i < 6; i++)
1101                         {
1102                                 if (Bssid[i] > pAd->CommonCfg.Bssid[i])
1103                                 {
1104                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - merge to the IBSS with bigger BSSID=%02x:%02x:%02x:%02x:%02x:%02x\n",
1105                                                 Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
1106                                         AsicDisableSync(pAd);
1107                                         COPY_MAC_ADDR(pAd->CommonCfg.Bssid, Bssid);
1108                                         AsicSetBssid(pAd, pAd->CommonCfg.Bssid);
1109                                         MakeIbssBeacon(pAd);        // re-build BEACON frame
1110                                         AsicEnableIbssSync(pAd);    // copy BEACON frame to on-chip memory
1111                                         is_my_bssid = TRUE;
1112                                         break;
1113                                 }
1114                                 else if (Bssid[i] < pAd->CommonCfg.Bssid[i])
1115                                         break;
1116                         }
1117                 }
1118
1119
1120                 NdisGetSystemUpTime(&Now);
1121                 pBss = &pAd->ScanTab.BssEntry[Bssidx];
1122                 pBss->Rssi = RealRssi;       // lastest RSSI
1123                 pBss->LastBeaconRxTime = Now;   // last RX timestamp
1124
1125                 //
1126                 // BEACON from my BSSID - either IBSS or INFRA network
1127                 //
1128                 if (is_my_bssid)
1129                 {
1130                         RXWI_STRUC      RxWI;
1131
1132                         pAd->StaCfg.DtimCount = DtimCount;
1133                         pAd->StaCfg.DtimPeriod = DtimPeriod;
1134                         pAd->StaCfg.LastBeaconRxTime = Now;
1135
1136
1137                         RxWI.RSSI0 = Elem->Rssi0;
1138                         RxWI.RSSI1 = Elem->Rssi1;
1139                         RxWI.RSSI2 = Elem->Rssi2;
1140
1141                         Update_Rssi_Sample(pAd, &pAd->StaCfg.RssiSample, &RxWI);
1142                         if (AironetCellPowerLimit != 0xFF)
1143                         {
1144                                 //
1145                                 // We get the Cisco (ccx) "TxPower Limit" required
1146                                 // Changed to appropriate TxPower Limit for Ciso Compatible Extensions
1147                                 //
1148                                 ChangeToCellPowerLimit(pAd, AironetCellPowerLimit);
1149                         }
1150                         else
1151                         {
1152                                 //
1153                                 // AironetCellPowerLimit equal to 0xFF means the Cisco (ccx) "TxPower Limit" not exist.
1154                                 // Used the default TX Power Percentage, that set from UI.
1155                                 //
1156                                 pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
1157                         }
1158
1159                         if (ADHOC_ON(pAd) && (CAP_IS_IBSS_ON(CapabilityInfo)))
1160                         {
1161                                 UCHAR                   MaxSupportedRateIn500Kbps = 0;
1162                                 UCHAR                   idx;
1163                                 MAC_TABLE_ENTRY *pEntry;
1164
1165                                 // supported rates array may not be sorted. sort it and find the maximum rate
1166                             for (idx=0; idx<SupRateLen; idx++)
1167                             {
1168                                 if (MaxSupportedRateIn500Kbps < (SupRate[idx] & 0x7f))
1169                                     MaxSupportedRateIn500Kbps = SupRate[idx] & 0x7f;
1170                             }
1171
1172                                 for (idx=0; idx<ExtRateLen; idx++)
1173                             {
1174                                 if (MaxSupportedRateIn500Kbps < (ExtRate[idx] & 0x7f))
1175                                     MaxSupportedRateIn500Kbps = ExtRate[idx] & 0x7f;
1176                             }
1177
1178                                 // look up the existing table
1179                                 pEntry = MacTableLookup(pAd, Addr2);
1180
1181                                 // Ad-hoc mode is using MAC address as BA session. So we need to continuously find newly joined adhoc station by receiving beacon.
1182                                 // To prevent always check this, we use wcid == RESERVED_WCID to recognize it as newly joined adhoc station.
1183                                 if ((ADHOC_ON(pAd) && (Elem->Wcid == RESERVED_WCID)) ||
1184                                         (pEntry && ((pEntry->LastBeaconRxTime + ADHOC_ENTRY_BEACON_LOST_TIME) < Now)))
1185                                 {
1186                                         if (pEntry == NULL)
1187                                                 // Another adhoc joining, add to our MAC table.
1188                                                 pEntry = MacTableInsertEntry(pAd, Addr2, BSS0, FALSE);
1189
1190                                         if (StaAddMacTableEntry(pAd, pEntry, MaxSupportedRateIn500Kbps, &HtCapability, HtCapabilityLen, CapabilityInfo) == FALSE)
1191                                         {
1192                                                 DBGPRINT(RT_DEBUG_TRACE, ("ADHOC - Add Entry failed.\n"));
1193                                                 return;
1194                                         }
1195
1196                                         if (pEntry &&
1197                                                 (Elem->Wcid == RESERVED_WCID))
1198                                         {
1199                                                 idx = pAd->StaCfg.DefaultKeyId;
1200                                                 RT28XX_STA_SECURITY_INFO_ADD(pAd, BSS0, idx, pEntry);
1201                                         }
1202                                 }
1203
1204                                 if (pEntry && pEntry->ValidAsCLI)
1205                                         pEntry->LastBeaconRxTime = Now;
1206
1207                                 // At least another peer in this IBSS, declare MediaState as CONNECTED
1208                                 if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
1209                                 {
1210                                         OPSTATUS_SET_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
1211
1212                                         pAd->IndicateMediaState = NdisMediaStateConnected;
1213                                         RTMP_IndicateMediaState(pAd);
1214                         pAd->ExtraInfo = GENERAL_LINK_UP;
1215                                         AsicSetBssid(pAd, pAd->CommonCfg.Bssid);
1216
1217                                         // 2003/03/12 - john
1218                                         // Make sure this entry in "ScanTab" table, thus complies to Microsoft's policy that
1219                                         // "site survey" result should always include the current connected network.
1220                                         //
1221                                         Bssidx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
1222                                         if (Bssidx == BSS_NOT_FOUND)
1223                                         {
1224                                                 Bssidx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
1225                                                                         &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen, &HtCapability,
1226                                                                         &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, RealRssi, TimeStamp, 0,
1227                                                                         &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
1228                                         }
1229                                         DBGPRINT(RT_DEBUG_TRACE, ("ADHOC  fOP_STATUS_MEDIA_STATE_CONNECTED.\n"));
1230                                 }
1231                         }
1232
1233                         if (INFRA_ON(pAd))
1234                         {
1235                                 BOOLEAN bUseShortSlot, bUseBGProtection;
1236
1237                                 // decide to use/change to -
1238                                 //      1. long slot (20 us) or short slot (9 us) time
1239                                 //      2. turn on/off RTS/CTS and/or CTS-to-self protection
1240                                 //      3. short preamble
1241
1242                                 //bUseShortSlot = pAd->CommonCfg.bUseShortSlotTime && CAP_IS_SHORT_SLOT(CapabilityInfo);
1243                                 bUseShortSlot = CAP_IS_SHORT_SLOT(CapabilityInfo);
1244                                 if (bUseShortSlot != OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SHORT_SLOT_INUSED))
1245                                         AsicSetSlotTime(pAd, bUseShortSlot);
1246
1247                                 bUseBGProtection = (pAd->CommonCfg.UseBGProtection == 1) ||    // always use
1248                                                                    ((pAd->CommonCfg.UseBGProtection == 0) && ERP_IS_USE_PROTECTION(Erp));
1249
1250                                 if (pAd->CommonCfg.Channel > 14) // always no BG protection in A-band. falsely happened when switching A/G band to a dual-band AP
1251                                         bUseBGProtection = FALSE;
1252
1253                                 if (bUseBGProtection != OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED))
1254                                 {
1255                                         if (bUseBGProtection)
1256                                         {
1257                                                 OPSTATUS_SET_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED);
1258                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, (OFDMSETPROTECT|CCKSETPROTECT|ALLN_SETPROTECT),FALSE,(pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1));
1259                                         }
1260                                         else
1261                                         {
1262                                                 OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED);
1263                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, (OFDMSETPROTECT|CCKSETPROTECT|ALLN_SETPROTECT),TRUE,(pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1));
1264                                         }
1265
1266                                         DBGPRINT(RT_DEBUG_WARN, ("SYNC - AP changed B/G protection to %d\n", bUseBGProtection));
1267                                 }
1268
1269 #ifdef DOT11_N_SUPPORT
1270                                 // check Ht protection mode. and adhere to the Non-GF device indication by AP.
1271                                 if ((AddHtInfoLen != 0) &&
1272                                         ((AddHtInfo.AddHtInfo2.OperaionMode != pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode) ||
1273                                         (AddHtInfo.AddHtInfo2.NonGfPresent != pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent)))
1274                                 {
1275                                         pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent = AddHtInfo.AddHtInfo2.NonGfPresent;
1276                                         pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode = AddHtInfo.AddHtInfo2.OperaionMode;
1277                                         if (pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1)
1278                                 {
1279                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, TRUE);
1280                                         }
1281                                         else
1282                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, FALSE);
1283
1284                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP changed N OperaionMode to %d\n", pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode));
1285                                 }
1286 #endif // DOT11_N_SUPPORT //
1287
1288                                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED) &&
1289                                         ERP_IS_USE_BARKER_PREAMBLE(Erp))
1290                                 {
1291                                         MlmeSetTxPreamble(pAd, Rt802_11PreambleLong);
1292                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP forced to use LONG preamble\n"));
1293                                 }
1294
1295                                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED)    &&
1296                                         (EdcaParm.bValid == TRUE)                          &&
1297                                         (EdcaParm.EdcaUpdateCount != pAd->CommonCfg.APEdcaParm.EdcaUpdateCount))
1298                                 {
1299                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP change EDCA parameters(from %d to %d)\n",
1300                                                 pAd->CommonCfg.APEdcaParm.EdcaUpdateCount,
1301                                                 EdcaParm.EdcaUpdateCount));
1302                                         AsicSetEdcaParm(pAd, &EdcaParm);
1303                                 }
1304
1305                                 // copy QOS related information
1306                                 NdisMoveMemory(&pAd->CommonCfg.APQbssLoad, &QbssLoad, sizeof(QBSS_LOAD_PARM));
1307                                 NdisMoveMemory(&pAd->CommonCfg.APQosCapability, &QosCapability, sizeof(QOS_CAPABILITY_PARM));
1308                         }
1309
1310                         // only INFRASTRUCTURE mode support power-saving feature
1311                         if ((INFRA_ON(pAd) && (pAd->StaCfg.Psm == PWR_SAVE)) || (pAd->CommonCfg.bAPSDForcePowerSave))
1312                         {
1313                                 UCHAR FreeNumber;
1314                                 //  1. AP has backlogged unicast-to-me frame, stay AWAKE, send PSPOLL
1315                                 //  2. AP has backlogged broadcast/multicast frame and we want those frames, stay AWAKE
1316                                 //  3. we have outgoing frames in TxRing or MgmtRing, better stay AWAKE
1317                                 //  4. Psm change to PWR_SAVE, but AP not been informed yet, we better stay AWAKE
1318                                 //  5. otherwise, put PHY back to sleep to save battery.
1319                                 if (MessageToMe)
1320                                 {
1321                                         if (pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable &&
1322                                                 pAd->CommonCfg.bAPSDAC_BE && pAd->CommonCfg.bAPSDAC_BK && pAd->CommonCfg.bAPSDAC_VI && pAd->CommonCfg.bAPSDAC_VO)
1323                                         {
1324                                                 pAd->CommonCfg.bNeedSendTriggerFrame = TRUE;
1325                                         }
1326                                         else
1327                                                 RT28XX_PS_POLL_ENQUEUE(pAd);
1328                                 }
1329                                 else if (BcastFlag && (DtimCount == 0) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM))
1330                                 {
1331                                 }
1332                                 else if ((pAd->TxSwQueue[QID_AC_BK].Number != 0)                                                                                                        ||
1333                                                 (pAd->TxSwQueue[QID_AC_BE].Number != 0)                                                                                                         ||
1334                                                 (pAd->TxSwQueue[QID_AC_VI].Number != 0)                                                                                                         ||
1335                                                 (pAd->TxSwQueue[QID_AC_VO].Number != 0)                                                                                                         ||
1336                                                 (RTMPFreeTXDRequest(pAd, QID_AC_BK, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1337                                                 (RTMPFreeTXDRequest(pAd, QID_AC_BE, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1338                                                 (RTMPFreeTXDRequest(pAd, QID_AC_VI, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1339                                                 (RTMPFreeTXDRequest(pAd, QID_AC_VO, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1340                                                 (RTMPFreeTXDRequest(pAd, QID_MGMT, MGMT_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS))
1341                                 {
1342                                         // TODO: consider scheduled HCCA. might not be proper to use traditional DTIM-based power-saving scheme
1343                                         // can we cheat here (i.e. just check MGMT & AC_BE) for better performance?
1344                                 }
1345                                 else
1346                                 {
1347                                         USHORT NextDtim = DtimCount;
1348
1349                                         if (NextDtim == 0)
1350                                                 NextDtim = DtimPeriod;
1351
1352                                         TbttNumToNextWakeUp = pAd->StaCfg.DefaultListenCount;
1353                                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM) && (TbttNumToNextWakeUp > NextDtim))
1354                                                 TbttNumToNextWakeUp = NextDtim;
1355
1356                                         if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
1357                                         {
1358                                                 AsicSleepThenAutoWakeup(pAd, TbttNumToNextWakeUp);
1359                                         }
1360                                 }
1361                         }
1362                 }
1363                 // not my BSSID, ignore it
1364         }
1365         // sanity check fail, ignore this frame
1366 }
1367
1368 /*
1369         ==========================================================================
1370         Description:
1371                 Receive PROBE REQ from remote peer when operating in IBSS mode
1372         ==========================================================================
1373  */
1374 VOID PeerProbeReqAction(
1375         IN PRTMP_ADAPTER pAd,
1376         IN MLME_QUEUE_ELEM *Elem)
1377 {
1378         UCHAR         Addr2[MAC_ADDR_LEN];
1379         CHAR          Ssid[MAX_LEN_OF_SSID];
1380         UCHAR         SsidLen;
1381 #ifdef DOT11_N_SUPPORT
1382         UCHAR             HtLen, AddHtLen, NewExtLen;
1383 #endif // DOT11_N_SUPPORT //
1384         HEADER_802_11 ProbeRspHdr;
1385         NDIS_STATUS   NStatus;
1386         PUCHAR        pOutBuffer = NULL;
1387         ULONG         FrameLen = 0;
1388         LARGE_INTEGER FakeTimestamp;
1389         UCHAR         DsLen = 1, IbssLen = 2;
1390         UCHAR         LocalErpIe[3] = {IE_ERP, 1, 0};
1391         BOOLEAN       Privacy;
1392         USHORT        CapabilityInfo;
1393         UCHAR             RSNIe = IE_WPA;
1394
1395         if (! ADHOC_ON(pAd))
1396                 return;
1397
1398         if (PeerProbeReqSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, Ssid, &SsidLen))
1399         {
1400                 if ((SsidLen == 0) || SSID_EQUAL(Ssid, SsidLen, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen))
1401                 {
1402                         // allocate and send out ProbeRsp frame
1403                         NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
1404                         if (NStatus != NDIS_STATUS_SUCCESS)
1405                                 return;
1406
1407                         //pAd->StaCfg.AtimWin = 0;  // ??????
1408
1409                         Privacy = (pAd->StaCfg.WepStatus == Ndis802_11Encryption1Enabled) ||
1410                                           (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
1411                                           (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled);
1412                         CapabilityInfo = CAP_GENERATE(0, 1, Privacy, (pAd->CommonCfg.TxPreamble == Rt802_11PreambleShort), 0, 0);
1413
1414                         MakeOutgoingFrame(pOutBuffer,                   &FrameLen,
1415                                                           sizeof(HEADER_802_11),        &ProbeRspHdr,
1416                                                           TIMESTAMP_LEN,                &FakeTimestamp,
1417                                                           2,                            &pAd->CommonCfg.BeaconPeriod,
1418                                                           2,                            &CapabilityInfo,
1419                                                           1,                            &SsidIe,
1420                                                           1,                            &pAd->CommonCfg.SsidLen,
1421                                                           pAd->CommonCfg.SsidLen,       pAd->CommonCfg.Ssid,
1422                                                           1,                            &SupRateIe,
1423                                                           1,                            &pAd->StaActive.SupRateLen,
1424                                                           pAd->StaActive.SupRateLen,    pAd->StaActive.SupRate,
1425                                                           1,                            &DsIe,
1426                                                           1,                            &DsLen,
1427                                                           1,                            &pAd->CommonCfg.Channel,
1428                                                           1,                            &IbssIe,
1429                                                           1,                            &IbssLen,
1430                                                           2,                            &pAd->StaActive.AtimWin,
1431                                                           END_OF_ARGS);
1432
1433                         if (pAd->StaActive.ExtRateLen)
1434                         {
1435                                 ULONG tmp;
1436                                 MakeOutgoingFrame(pOutBuffer + FrameLen,        &tmp,
1437                                                                   3,                            LocalErpIe,
1438                                                                   1,                            &ExtRateIe,
1439                                                                   1,                            &pAd->StaActive.ExtRateLen,
1440                                                                   pAd->StaActive.ExtRateLen,    &pAd->StaActive.ExtRate,
1441                                                                   END_OF_ARGS);
1442                                 FrameLen += tmp;
1443                         }
1444
1445                         // If adhoc secruity is set for WPA-None, append the cipher suite IE
1446                         if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
1447                         {
1448                                 ULONG tmp;
1449                                 MakeOutgoingFrame(pOutBuffer + FrameLen,                &tmp,
1450                                                                         1,                              &RSNIe,
1451                                                                         1,                              &pAd->StaCfg.RSNIE_Len,
1452                                                                         pAd->StaCfg.RSNIE_Len,          pAd->StaCfg.RSN_IE,
1453                                                                         END_OF_ARGS);
1454                                 FrameLen += tmp;
1455                         }
1456 #ifdef DOT11_N_SUPPORT
1457                         if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
1458                         {
1459                                 ULONG TmpLen;
1460                                 UCHAR   BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
1461                                 HtLen = sizeof(pAd->CommonCfg.HtCapability);
1462                                 AddHtLen = sizeof(pAd->CommonCfg.AddHTInfo);
1463                                 NewExtLen = 1;
1464                                 //New extension channel offset IE is included in Beacon, Probe Rsp or channel Switch Announcement Frame
1465                                 if (pAd->bBroadComHT == TRUE)
1466                                 {
1467                                         MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
1468                                                                   1,                                &WpaIe,
1469                                                                   4,                                &BROADCOM[0],
1470                                                                  pAd->MlmeAux.HtCapabilityLen,          &pAd->MlmeAux.HtCapability,
1471                                                                   END_OF_ARGS);
1472                                 }
1473                                 else
1474                                 {
1475                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
1476                                                                   1,                                &HtCapIe,
1477                                                                   1,                                &HtLen,
1478                                                                  sizeof(HT_CAPABILITY_IE),          &pAd->CommonCfg.HtCapability,
1479                                                                   1,                                &AddHtInfoIe,
1480                                                                   1,                                &AddHtLen,
1481                                                                  sizeof(ADD_HT_INFO_IE),          &pAd->CommonCfg.AddHTInfo,
1482                                                                   1,                                &NewExtChanIe,
1483                                                                   1,                                &NewExtLen,
1484                                                                  sizeof(NEW_EXT_CHAN_IE),          &pAd->CommonCfg.NewExtChanOffset,
1485                                                                   END_OF_ARGS);
1486                                 }
1487                                 FrameLen += TmpLen;
1488                         }
1489 #endif // DOT11_N_SUPPORT //
1490                         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
1491                         MlmeFreeMemory(pAd, pOutBuffer);
1492                 }
1493         }
1494 }
1495
1496 VOID BeaconTimeoutAtJoinAction(
1497         IN PRTMP_ADAPTER pAd,
1498         IN MLME_QUEUE_ELEM *Elem)
1499 {
1500         USHORT Status;
1501         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BeaconTimeoutAtJoinAction\n"));
1502         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1503         Status = MLME_REJ_TIMEOUT;
1504         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
1505 }
1506
1507 /*
1508         ==========================================================================
1509         Description:
1510                 Scan timeout procedure. basically add channel index by 1 and rescan
1511         ==========================================================================
1512  */
1513 VOID ScanTimeoutAction(
1514         IN PRTMP_ADAPTER pAd,
1515         IN MLME_QUEUE_ELEM *Elem)
1516 {
1517         pAd->MlmeAux.Channel = NextChannel(pAd, pAd->MlmeAux.Channel);
1518
1519         // Only one channel scanned for CISCO beacon request
1520         if ((pAd->MlmeAux.ScanType == SCAN_CISCO_ACTIVE) ||
1521                 (pAd->MlmeAux.ScanType == SCAN_CISCO_PASSIVE) ||
1522                 (pAd->MlmeAux.ScanType == SCAN_CISCO_NOISE) ||
1523                 (pAd->MlmeAux.ScanType == SCAN_CISCO_CHANNEL_LOAD))
1524                 pAd->MlmeAux.Channel = 0;
1525
1526         // this routine will stop if pAd->MlmeAux.Channel == 0
1527         ScanNextChannel(pAd);
1528 }
1529
1530 /*
1531         ==========================================================================
1532         Description:
1533         ==========================================================================
1534  */
1535 VOID InvalidStateWhenScan(
1536         IN PRTMP_ADAPTER pAd,
1537         IN MLME_QUEUE_ELEM *Elem)
1538 {
1539         USHORT Status;
1540         DBGPRINT(RT_DEBUG_TRACE, ("AYNC - InvalidStateWhenScan(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
1541         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1542         Status = MLME_STATE_MACHINE_REJECT;
1543         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
1544 }
1545
1546 /*
1547         ==========================================================================
1548         Description:
1549         ==========================================================================
1550  */
1551 VOID InvalidStateWhenJoin(
1552         IN PRTMP_ADAPTER pAd,
1553         IN MLME_QUEUE_ELEM *Elem)
1554 {
1555         USHORT Status;
1556         DBGPRINT(RT_DEBUG_TRACE, ("InvalidStateWhenJoin(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
1557         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1558         Status = MLME_STATE_MACHINE_REJECT;
1559         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
1560 }
1561
1562 /*
1563         ==========================================================================
1564         Description:
1565         ==========================================================================
1566  */
1567 VOID InvalidStateWhenStart(
1568         IN PRTMP_ADAPTER pAd,
1569         IN MLME_QUEUE_ELEM *Elem)
1570 {
1571         USHORT Status;
1572         DBGPRINT(RT_DEBUG_TRACE, ("InvalidStateWhenStart(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
1573         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1574         Status = MLME_STATE_MACHINE_REJECT;
1575         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
1576 }
1577
1578 /*
1579         ==========================================================================
1580         Description:
1581
1582         IRQL = DISPATCH_LEVEL
1583
1584         ==========================================================================
1585  */
1586 VOID EnqueuePsPoll(
1587         IN PRTMP_ADAPTER pAd)
1588 {
1589         if (pAd->StaCfg.WindowsPowerMode == Ndis802_11PowerModeLegacy_PSP)
1590         pAd->PsPollFrame.FC.PwrMgmt = PWR_SAVE;
1591         MiniportMMRequest(pAd, 0, (PUCHAR)&pAd->PsPollFrame, sizeof(PSPOLL_FRAME));
1592 }
1593
1594
1595 /*
1596         ==========================================================================
1597         Description:
1598         ==========================================================================
1599  */
1600 VOID EnqueueProbeRequest(
1601         IN PRTMP_ADAPTER pAd)
1602 {
1603         NDIS_STATUS     NState;
1604         PUCHAR          pOutBuffer;
1605         ULONG           FrameLen = 0;
1606         HEADER_802_11   Hdr80211;
1607
1608         DBGPRINT(RT_DEBUG_TRACE, ("force out a ProbeRequest ...\n"));
1609
1610         NState = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
1611         if (NState == NDIS_STATUS_SUCCESS)
1612         {
1613                 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
1614
1615                 // this ProbeRequest explicitly specify SSID to reduce unwanted ProbeResponse
1616                 MakeOutgoingFrame(pOutBuffer,                     &FrameLen,
1617                                                   sizeof(HEADER_802_11),          &Hdr80211,
1618                                                   1,                              &SsidIe,
1619                                                   1,                              &pAd->CommonCfg.SsidLen,
1620                                                   pAd->CommonCfg.SsidLen,                 pAd->CommonCfg.Ssid,
1621                                                   1,                              &SupRateIe,
1622                                                   1,                              &pAd->StaActive.SupRateLen,
1623                                                   pAd->StaActive.SupRateLen,      pAd->StaActive.SupRate,
1624                                                   END_OF_ARGS);
1625                 MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
1626                 MlmeFreeMemory(pAd, pOutBuffer);
1627         }
1628
1629 }
1630
1631 #ifdef DOT11_N_SUPPORT
1632 #ifdef DOT11N_DRAFT3
1633 VOID BuildEffectedChannelList(
1634         IN PRTMP_ADAPTER pAd)
1635 {
1636         UCHAR           EChannel[11];
1637         UCHAR           i, j, k;
1638         UCHAR           UpperChannel = 0, LowerChannel = 0;
1639
1640         RTMPZeroMemory(EChannel, 11);
1641         i = 0;
1642         // Find upper channel and lower channel.
1643         if (pAd->CommonCfg.CentralChannel < pAd->CommonCfg.Channel)
1644         {
1645                 UpperChannel = pAd->CommonCfg.Channel;
1646                 LowerChannel = pAd->CommonCfg.CentralChannel;
1647         }
1648         else if (pAd->CommonCfg.CentralChannel > pAd->CommonCfg.Channel)
1649         {
1650                 UpperChannel = pAd->CommonCfg.CentralChannel;
1651                 LowerChannel = pAd->CommonCfg.Channel;
1652         }
1653         else
1654         {
1655                 return;
1656         }
1657
1658         // Record channels that is below lower channel..
1659         if (LowerChannel > 1)
1660         {
1661                 EChannel[0] = LowerChannel - 1;
1662                 i = 1;
1663                 if (LowerChannel > 2)
1664                 {
1665                         EChannel[1] = LowerChannel - 2;
1666                         i = 2;
1667                         if (LowerChannel > 3)
1668                         {
1669                                 EChannel[2] = LowerChannel - 3;
1670                                 i = 3;
1671                         }
1672                 }
1673         }
1674         // Record channels that is between  lower channel and upper channel.
1675         for (k = LowerChannel;k < UpperChannel;k++)
1676         {
1677                 EChannel[i] = k;
1678                 i++;
1679         }
1680         // Record channels that is above upper channel..
1681         if (LowerChannel < 11)
1682         {
1683                 EChannel[i] = UpperChannel + 1;
1684                 i++;
1685                 if (LowerChannel < 10)
1686                 {
1687                         EChannel[i] = LowerChannel + 2;
1688                         i++;
1689                         if (LowerChannel < 9)
1690                         {
1691                                 EChannel[i] = LowerChannel + 3;
1692                                 i++;
1693                         }
1694                 }
1695         }
1696         //
1697         for (j = 0;j < i;j++)
1698         {
1699                 for (k = 0;k < pAd->ChannelListNum;k++)
1700                 {
1701                         if (pAd->ChannelList[k].Channel == EChannel[j])
1702                         {
1703                                 pAd->ChannelList[k].bEffectedChannel = TRUE;
1704                                 DBGPRINT(RT_DEBUG_TRACE,(" EffectedChannel( =%d)\n", EChannel[j]));
1705                                 break;
1706                         }
1707                 }
1708         }
1709 }
1710 #endif // DOT11N_DRAFT3 //
1711 #endif // DOT11_N_SUPPORT //
1712
1713 BOOLEAN ScanRunning(
1714                 IN PRTMP_ADAPTER pAd)
1715 {
1716         return (pAd->Mlme.SyncMachine.CurrState == SCAN_LISTEN) ? TRUE : FALSE;
1717 }
1718