git.oblomov.eu Git - linux-2.6/blob - drivers/staging/rt2860/sta/sync.c

   1 /*
   2  *************************************************************************
   3  * Ralink Tech Inc.
   4  * 5F., No.36, Taiyuan St., Jhubei City,
   5  * Hsinchu County 302,
   6  * Taiwan, R.O.C.
   7  *
   8  * (c) Copyright 2002-2007, Ralink Technology, Inc.
   9  *
  10  * This program is free software; you can redistribute it and/or modify  *
  11  * it under the terms of the GNU General Public License as published by  *
  12  * the Free Software Foundation; either version 2 of the License, or     *
  13  * (at your option) any later version.                                   *
  14  *                                                                       *
  15  * This program is distributed in the hope that it will be useful,       *
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of        *
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
  18  * GNU General Public License for more details.                          *
  19  *                                                                       *
  20  * You should have received a copy of the GNU General Public License     *
  21  * along with this program; if not, write to the                         *
  22  * Free Software Foundation, Inc.,                                       *
  23  * 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *
  24  *                                                                       *
  25  *************************************************************************
  26
  27         Module Name:
  28         sync.c
  29
  30         Abstract:
  31
  32         Revision History:
  33         Who                     When                    What
  34         --------        ----------              ----------------------------------------------
  35         John Chang      2004-09-01      modified for rt2561/2661
  36         Jan Lee         2006-08-01      modified for rt2860 for 802.11n
  37 */
  38 #include "../rt_config.h"
  39
  40 #define AC0_DEF_TXOP            0
  41 #define AC1_DEF_TXOP            0
  42 #define AC2_DEF_TXOP            94
  43 #define AC3_DEF_TXOP            47
  44
  45 VOID    AdhocTurnOnQos(
  46         IN  PRTMP_ADAPTER pAd)
  47 {
  48         // Turn on QOs if use HT rate.
  49         if (pAd->CommonCfg.APEdcaParm.bValid == FALSE)
  50         {
  51                 pAd->CommonCfg.APEdcaParm.bValid = TRUE;
  52                 pAd->CommonCfg.APEdcaParm.Aifsn[0] = 3;
  53                 pAd->CommonCfg.APEdcaParm.Aifsn[1] = 7;
  54                 pAd->CommonCfg.APEdcaParm.Aifsn[2] = 1;
  55                 pAd->CommonCfg.APEdcaParm.Aifsn[3] = 1;
  56
  57                 pAd->CommonCfg.APEdcaParm.Cwmin[0] = 4;
  58                 pAd->CommonCfg.APEdcaParm.Cwmin[1] = 4;
  59                 pAd->CommonCfg.APEdcaParm.Cwmin[2] = 3;
  60                 pAd->CommonCfg.APEdcaParm.Cwmin[3] = 2;
  61
  62                 pAd->CommonCfg.APEdcaParm.Cwmax[0] = 10;
  63                 pAd->CommonCfg.APEdcaParm.Cwmax[1] = 6;
  64                 pAd->CommonCfg.APEdcaParm.Cwmax[2] = 4;
  65                 pAd->CommonCfg.APEdcaParm.Cwmax[3] = 3;
  66
  67                 pAd->CommonCfg.APEdcaParm.Txop[0]  = 0;
  68                 pAd->CommonCfg.APEdcaParm.Txop[1]  = 0;
  69                 pAd->CommonCfg.APEdcaParm.Txop[2]  = AC2_DEF_TXOP;
  70                 pAd->CommonCfg.APEdcaParm.Txop[3]  = AC3_DEF_TXOP;
  71         }
  72         AsicSetEdcaParm(pAd, &pAd->CommonCfg.APEdcaParm);
  73 }
  74
  75 /*
  76         ==========================================================================
  77         Description:
  78                 The sync state machine,
  79         Parameters:
  80                 Sm - pointer to the state machine
  81         Note:
  82                 the state machine looks like the following
  83
  84         ==========================================================================
  85  */
  86 VOID SyncStateMachineInit(
  87         IN PRTMP_ADAPTER pAd,
  88         IN STATE_MACHINE *Sm,
  89         OUT STATE_MACHINE_FUNC Trans[])
  90 {
  91         StateMachineInit(Sm, Trans, MAX_SYNC_STATE, MAX_SYNC_MSG, (STATE_MACHINE_FUNC)Drop, SYNC_IDLE, SYNC_MACHINE_BASE);
  92
  93         // column 1
  94         StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)MlmeScanReqAction);
  95         StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)MlmeJoinReqAction);
  96         StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)MlmeStartReqAction);
  97         StateMachineSetAction(Sm, SYNC_IDLE, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeacon);
  98         StateMachineSetAction(Sm, SYNC_IDLE, MT2_PEER_PROBE_REQ, (STATE_MACHINE_FUNC)PeerProbeReqAction);
  99
 100         //column 2
 101         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenScan);
 102         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenJoin);
 103         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenStart);
 104         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeaconAtJoinAction);
 105         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_BEACON_TIMEOUT, (STATE_MACHINE_FUNC)BeaconTimeoutAtJoinAction);
 106
 107         // column 3
 108         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenScan);
 109         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenJoin);
 110         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenStart);
 111         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeaconAtScanAction);
 112         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_PEER_PROBE_RSP, (STATE_MACHINE_FUNC)PeerBeaconAtScanAction);
 113         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_SCAN_TIMEOUT, (STATE_MACHINE_FUNC)ScanTimeoutAction);
 114
 115         // timer init
 116         RTMPInitTimer(pAd, &pAd->MlmeAux.BeaconTimer, GET_TIMER_FUNCTION(BeaconTimeout), pAd, FALSE);
 117         RTMPInitTimer(pAd, &pAd->MlmeAux.ScanTimer, GET_TIMER_FUNCTION(ScanTimeout), pAd, FALSE);
 118 }
 119
 120 /*
 121         ==========================================================================
 122         Description:
 123                 Beacon timeout handler, executed in timer thread
 124
 125         IRQL = DISPATCH_LEVEL
 126
 127         ==========================================================================
 128  */
 129 VOID BeaconTimeout(
 130         IN PVOID SystemSpecific1,
 131         IN PVOID FunctionContext,
 132         IN PVOID SystemSpecific2,
 133         IN PVOID SystemSpecific3)
 134 {
 135         RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
 136
 137         DBGPRINT(RT_DEBUG_TRACE,("SYNC - BeaconTimeout\n"));
 138
 139         // Do nothing if the driver is starting halt state.
 140         // This might happen when timer already been fired before cancel timer with mlmehalt
 141         if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))
 142                 return;
 143
 144 #ifdef DOT11_N_SUPPORT
 145         if ((pAd->CommonCfg.BBPCurrentBW == BW_40)
 146                 )
 147         {
 148                 UCHAR        BBPValue = 0;
 149                 AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
 150                 AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
 151                 RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
 152                 BBPValue &= (~0x18);
 153                 BBPValue |= 0x10;
 154                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
 155                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to 40MHz channel %d, Total BSS[%02d]\n",pAd->CommonCfg.CentralChannel, pAd->ScanTab.BssNr));
 156         }
 157 #endif // DOT11_N_SUPPORT //
 158
 159         MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_BEACON_TIMEOUT, 0, NULL);
 160         RT28XX_MLME_HANDLER(pAd);
 161 }
 162
 163 /*
 164         ==========================================================================
 165         Description:
 166                 Scan timeout handler, executed in timer thread
 167
 168         IRQL = DISPATCH_LEVEL
 169
 170         ==========================================================================
 171  */
 172 VOID ScanTimeout(
 173         IN PVOID SystemSpecific1,
 174         IN PVOID FunctionContext,
 175         IN PVOID SystemSpecific2,
 176         IN PVOID SystemSpecific3)
 177 {
 178         RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
 179
 180
 181         // Do nothing if the driver is starting halt state.
 182         // This might happen when timer already been fired before cancel timer with mlmehalt
 183         if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))
 184                 return;
 185
 186         if (MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_SCAN_TIMEOUT, 0, NULL))
 187         {
 188                 RT28XX_MLME_HANDLER(pAd);
 189         }
 190         else
 191         {
 192                 // To prevent SyncMachine.CurrState is SCAN_LISTEN forever.
 193                 pAd->MlmeAux.Channel = 0;
 194                 ScanNextChannel(pAd);
 195                 if (pAd->CommonCfg.bWirelessEvent)
 196                 {
 197                         RTMPSendWirelessEvent(pAd, IW_SCAN_ENQUEUE_FAIL_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
 198                 }
 199         }
 200 }
 201
 202 /*
 203         ==========================================================================
 204         Description:
 205                 MLME SCAN req state machine procedure
 206         ==========================================================================
 207  */
 208 VOID MlmeScanReqAction(
 209         IN PRTMP_ADAPTER pAd,
 210         IN MLME_QUEUE_ELEM *Elem)
 211 {
 212         UCHAR          Ssid[MAX_LEN_OF_SSID], SsidLen, ScanType, BssType, BBPValue = 0;
 213         BOOLEAN        TimerCancelled;
 214         ULONG              Now;
 215         USHORT         Status;
 216         PHEADER_802_11 pHdr80211;
 217         PUCHAR         pOutBuffer = NULL;
 218         NDIS_STATUS    NStatus;
 219
 220         // Check the total scan tries for one single OID command
 221         // If this is the CCX 2.0 Case, skip that!
 222         if ( !RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_START_UP))
 223         {
 224                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeScanReqAction before Startup\n"));
 225                 return;
 226         }
 227
 228         // Increase the scan retry counters.
 229         pAd->StaCfg.ScanCnt++;
 230
 231     if ((OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE)) &&
 232         (IDLE_ON(pAd)) &&
 233                 (pAd->StaCfg.bRadio == TRUE) &&
 234                 (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_IDLE_RADIO_OFF)))
 235         {
 236                 RT28xxPciAsicRadioOn(pAd, GUI_IDLE_POWER_SAVE);
 237         }
 238
 239         // first check the parameter sanity
 240         if (MlmeScanReqSanity(pAd,
 241                                                   Elem->Msg,
 242                                                   Elem->MsgLen,
 243                                                   &BssType,
 244                                                   Ssid,
 245                                                   &SsidLen,
 246                                                   &ScanType))
 247         {
 248
 249                 // Check for channel load and noise hist request
 250                 // Suspend MSDU only at scan request, not the last two mentioned
 251                 if ((ScanType == SCAN_CISCO_NOISE) || (ScanType == SCAN_CISCO_CHANNEL_LOAD))
 252                 {
 253                         if (pAd->StaCfg.CCXScanChannel != pAd->CommonCfg.Channel)
 254                                 RTMPSuspendMsduTransmission(pAd);                       // Suspend MSDU transmission here
 255                 }
 256                 else
 257                 {
 258                         // Suspend MSDU transmission here
 259                         RTMPSuspendMsduTransmission(pAd);
 260                 }
 261
 262                 //
 263                 // To prevent data lost.
 264                 // Send an NULL data with turned PSM bit on to current associated AP before SCAN progress.
 265                 // And should send an NULL data with turned PSM bit off to AP, when scan progress done
 266                 //
 267                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) && (INFRA_ON(pAd)))
 268                 {
 269                         NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer);
 270                         if (NStatus     == NDIS_STATUS_SUCCESS)
 271                         {
 272                                 pHdr80211 = (PHEADER_802_11) pOutBuffer;
 273                                 MgtMacHeaderInit(pAd, pHdr80211, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
 274                                 pHdr80211->Duration = 0;
 275                                 pHdr80211->FC.Type = BTYPE_DATA;
 276                                 pHdr80211->FC.PwrMgmt = PWR_SAVE;
 277
 278                                 // Send using priority queue
 279                                 MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
 280                                 DBGPRINT(RT_DEBUG_TRACE, ("MlmeScanReqAction -- Send PSM Data frame for off channel RM\n"));
 281                                 MlmeFreeMemory(pAd, pOutBuffer);
 282                                 RTMPusecDelay(5000);
 283                         }
 284                 }
 285
 286                 NdisGetSystemUpTime(&Now);
 287                 pAd->StaCfg.LastScanTime = Now;
 288                 // reset all the timers
 289                 RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 290                 RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
 291
 292                 // record desired BSS parameters
 293                 pAd->MlmeAux.BssType = BssType;
 294                 pAd->MlmeAux.ScanType = ScanType;
 295                 pAd->MlmeAux.SsidLen = SsidLen;
 296         NdisZeroMemory(pAd->MlmeAux.Ssid, MAX_LEN_OF_SSID);
 297                 NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
 298
 299                 // start from the first channel
 300                 pAd->MlmeAux.Channel = FirstChannel(pAd);
 301
 302                 // Change the scan channel when dealing with CCX beacon report
 303                 if ((ScanType == SCAN_CISCO_PASSIVE) || (ScanType == SCAN_CISCO_ACTIVE) ||
 304                         (ScanType == SCAN_CISCO_CHANNEL_LOAD) || (ScanType == SCAN_CISCO_NOISE))
 305                         pAd->MlmeAux.Channel = pAd->StaCfg.CCXScanChannel;
 306
 307                 // Let BBP register at 20MHz to do scan
 308                 RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
 309                 BBPValue &= (~0x18);
 310                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
 311                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BBP R4 to 20MHz.l\n"));
 312                 ScanNextChannel(pAd);
 313         }
 314         else
 315         {
 316                 DBGPRINT_ERR(("SYNC - MlmeScanReqAction() sanity check fail\n"));
 317                 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 318                 Status = MLME_INVALID_FORMAT;
 319                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
 320         }
 321 }
 322
 323 /*
 324         ==========================================================================
 325         Description:
 326                 MLME JOIN req state machine procedure
 327         ==========================================================================
 328  */
 329 VOID MlmeJoinReqAction(
 330         IN PRTMP_ADAPTER pAd,
 331         IN MLME_QUEUE_ELEM *Elem)
 332 {
 333         UCHAR        BBPValue = 0;
 334         BSS_ENTRY    *pBss;
 335         BOOLEAN       TimerCancelled;
 336         HEADER_802_11 Hdr80211;
 337         NDIS_STATUS   NStatus;
 338         ULONG         FrameLen = 0;
 339         PUCHAR        pOutBuffer = NULL;
 340         PUCHAR        pSupRate = NULL;
 341         UCHAR         SupRateLen;
 342         PUCHAR        pExtRate = NULL;
 343         UCHAR         ExtRateLen;
 344         UCHAR         ASupRate[] = {0x8C, 0x12, 0x98, 0x24, 0xb0, 0x48, 0x60, 0x6C};
 345         UCHAR         ASupRateLen = sizeof(ASupRate)/sizeof(UCHAR);
 346         MLME_JOIN_REQ_STRUCT *pInfo = (MLME_JOIN_REQ_STRUCT *)(Elem->Msg);
 347
 348         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeJoinReqAction(BSS #%ld)\n", pInfo->BssIdx));
 349
 350     if ((OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE)) &&
 351         (IDLE_ON(pAd)) &&
 352                 (pAd->StaCfg.bRadio == TRUE) &&
 353                 (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_IDLE_RADIO_OFF)))
 354         {
 355                 RT28xxPciAsicRadioOn(pAd, GUI_IDLE_POWER_SAVE);
 356         }
 357
 358         // reset all the timers
 359         RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
 360         RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 361
 362         pBss = &pAd->MlmeAux.SsidBssTab.BssEntry[pInfo->BssIdx];
 363
 364         // record the desired SSID & BSSID we're waiting for
 365         COPY_MAC_ADDR(pAd->MlmeAux.Bssid, pBss->Bssid);
 366
 367         // If AP's SSID is not hidden, it is OK for updating ssid to MlmeAux again.
 368         if (pBss->Hidden == 0)
 369         {
 370                 NdisMoveMemory(pAd->MlmeAux.Ssid, pBss->Ssid, pBss->SsidLen);
 371                 pAd->MlmeAux.SsidLen = pBss->SsidLen;
 372         }
 373
 374         pAd->MlmeAux.BssType = pBss->BssType;
 375         pAd->MlmeAux.Channel = pBss->Channel;
 376         pAd->MlmeAux.CentralChannel = pBss->CentralChannel;
 377
 378 #ifdef EXT_BUILD_CHANNEL_LIST
 379         // Country IE of the AP will be evaluated and will be used.
 380         if ((pAd->StaCfg.IEEE80211dClientMode != Rt802_11_D_None) &&
 381                 (pBss->bHasCountryIE == TRUE))
 382         {
 383                 NdisMoveMemory(&pAd->CommonCfg.CountryCode[0], &pBss->CountryString[0], 2);
 384                 if (pBss->CountryString[2] == 'I')
 385                         pAd->CommonCfg.Geography = IDOR;
 386                 else if (pBss->CountryString[2] == 'O')
 387                         pAd->CommonCfg.Geography = ODOR;
 388                 else
 389                         pAd->CommonCfg.Geography = BOTH;
 390                 BuildChannelListEx(pAd);
 391         }
 392 #endif // EXT_BUILD_CHANNEL_LIST //
 393
 394         // Let BBP register at 20MHz to do scan
 395         RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
 396         BBPValue &= (~0x18);
 397         RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
 398         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BBP R4 to 20MHz.l\n"));
 399
 400         // switch channel and waiting for beacon timer
 401         AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, FALSE);
 402         AsicLockChannel(pAd, pAd->MlmeAux.Channel);
 403         RTMPSetTimer(&pAd->MlmeAux.BeaconTimer, JOIN_TIMEOUT);
 404
 405     do
 406         {
 407                 if (((pAd->CommonCfg.bIEEE80211H == 1) &&
 408             (pAd->MlmeAux.Channel > 14) &&
 409              RadarChannelCheck(pAd, pAd->MlmeAux.Channel))
 410 #ifdef CARRIER_DETECTION_SUPPORT // Roger sync Carrier
 411              || (pAd->CommonCfg.CarrierDetect.Enable == TRUE)
 412 #endif // CARRIER_DETECTION_SUPPORT //
 413             )
 414                 {
 415                         //
 416                         // We can't send any Probe request frame to meet 802.11h.
 417                         //
 418                         if (pBss->Hidden == 0)
 419                                 break;
 420                 }
 421
 422                 //
 423                 // send probe request
 424                 //
 425                 NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
 426                 if (NStatus == NDIS_STATUS_SUCCESS)
 427                 {
 428                         if (pAd->MlmeAux.Channel <= 14)
 429                         {
 430                                 pSupRate = pAd->CommonCfg.SupRate;
 431                                 SupRateLen = pAd->CommonCfg.SupRateLen;
 432                                 pExtRate = pAd->CommonCfg.ExtRate;
 433                                 ExtRateLen = pAd->CommonCfg.ExtRateLen;
 434                         }
 435                         else
 436                         {
 437                                 //
 438                                 // Overwrite Support Rate, CCK rate are not allowed
 439                                 //
 440                                 pSupRate = ASupRate;
 441                                 SupRateLen = ASupRateLen;
 442                                 ExtRateLen = 0;
 443                         }
 444
 445                         if (pAd->MlmeAux.BssType == BSS_INFRA)
 446                                 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, pAd->MlmeAux.Bssid, pAd->MlmeAux.Bssid);
 447                         else
 448                                 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
 449
 450                         MakeOutgoingFrame(pOutBuffer,               &FrameLen,
 451                                                           sizeof(HEADER_802_11),    &Hdr80211,
 452                                                           1,                        &SsidIe,
 453                                                           1,                        &pAd->MlmeAux.SsidLen,
 454                                                           pAd->MlmeAux.SsidLen,     pAd->MlmeAux.Ssid,
 455                                                           1,                        &SupRateIe,
 456                                                           1,                        &SupRateLen,
 457                                                           SupRateLen,               pSupRate,
 458                                                           END_OF_ARGS);
 459
 460                         if (ExtRateLen)
 461                         {
 462                                 ULONG Tmp;
 463                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &Tmp,
 464                                                                   1,                                &ExtRateIe,
 465                                                                   1,                                &ExtRateLen,
 466                                                                   ExtRateLen,                       pExtRate,
 467                                                                   END_OF_ARGS);
 468                                 FrameLen += Tmp;
 469                         }
 470
 471
 472                         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
 473                         MlmeFreeMemory(pAd, pOutBuffer);
 474                 }
 475     } while (FALSE);
 476
 477         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - Switch to ch %d, Wait BEACON from %02x:%02x:%02x:%02x:%02x:%02x\n",
 478                 pBss->Channel, pBss->Bssid[0], pBss->Bssid[1], pBss->Bssid[2], pBss->Bssid[3], pBss->Bssid[4], pBss->Bssid[5]));
 479
 480         pAd->Mlme.SyncMachine.CurrState = JOIN_WAIT_BEACON;
 481 }
 482
 483 /*
 484         ==========================================================================
 485         Description:
 486                 MLME START Request state machine procedure, starting an IBSS
 487         ==========================================================================
 488  */
 489 VOID MlmeStartReqAction(
 490         IN PRTMP_ADAPTER pAd,
 491         IN MLME_QUEUE_ELEM *Elem)
 492 {
 493         UCHAR         Ssid[MAX_LEN_OF_SSID], SsidLen;
 494         BOOLEAN       TimerCancelled;
 495
 496         // New for WPA security suites
 497         UCHAR                                           VarIE[MAX_VIE_LEN];     // Total VIE length = MAX_VIE_LEN - -5
 498         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 499         LARGE_INTEGER                           TimeStamp;
 500         BOOLEAN Privacy;
 501         USHORT Status;
 502
 503         // Init Variable IE structure
 504         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 505         pVIE->Length = 0;
 506         TimeStamp.u.LowPart  = 0;
 507         TimeStamp.u.HighPart = 0;
 508
 509         if (MlmeStartReqSanity(pAd, Elem->Msg, Elem->MsgLen, Ssid, &SsidLen))
 510         {
 511                 // reset all the timers
 512                 RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
 513                 RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 514
 515                 //
 516                 // Start a new IBSS. All IBSS parameters are decided now....
 517                 //
 518                 DBGPRINT(RT_DEBUG_TRACE, ("MlmeStartReqAction - Start a new IBSS. All IBSS parameters are decided now.... \n"));
 519                 pAd->MlmeAux.BssType           = BSS_ADHOC;
 520                 NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
 521                 pAd->MlmeAux.SsidLen           = SsidLen;
 522
 523                 // generate a radom number as BSSID
 524                 MacAddrRandomBssid(pAd, pAd->MlmeAux.Bssid);
 525                 DBGPRINT(RT_DEBUG_TRACE, ("MlmeStartReqAction - generate a radom number as BSSID \n"));
 526
 527                 Privacy = (pAd->StaCfg.WepStatus == Ndis802_11Encryption1Enabled) ||
 528                                   (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
 529                                   (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled);
 530                 pAd->MlmeAux.CapabilityInfo    = CAP_GENERATE(0,1,Privacy, (pAd->CommonCfg.TxPreamble == Rt802_11PreambleShort), 1, 0);
 531                 pAd->MlmeAux.BeaconPeriod      = pAd->CommonCfg.BeaconPeriod;
 532                 pAd->MlmeAux.AtimWin           = pAd->StaCfg.AtimWin;
 533                 pAd->MlmeAux.Channel           = pAd->CommonCfg.Channel;
 534
 535                 pAd->CommonCfg.CentralChannel  = pAd->CommonCfg.Channel;
 536                 pAd->MlmeAux.CentralChannel    = pAd->CommonCfg.CentralChannel;
 537
 538                 pAd->MlmeAux.SupRateLen= pAd->CommonCfg.SupRateLen;
 539                 NdisMoveMemory(pAd->MlmeAux.SupRate, pAd->CommonCfg.SupRate, MAX_LEN_OF_SUPPORTED_RATES);
 540                 RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
 541                 pAd->MlmeAux.ExtRateLen = pAd->CommonCfg.ExtRateLen;
 542                 NdisMoveMemory(pAd->MlmeAux.ExtRate, pAd->CommonCfg.ExtRate, MAX_LEN_OF_SUPPORTED_RATES);
 543                 RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
 544 #ifdef DOT11_N_SUPPORT
 545                 if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
 546                 {
 547                         RTMPUpdateHTIE(&pAd->CommonCfg.DesiredHtPhy, &pAd->StaCfg.DesiredHtPhyInfo.MCSSet[0], &pAd->MlmeAux.HtCapability, &pAd->MlmeAux.AddHtInfo);
 548                         pAd->MlmeAux.HtCapabilityLen = sizeof(HT_CAPABILITY_IE);
 549                         // Not turn pAd->StaActive.SupportedHtPhy.bHtEnable = TRUE here.
 550                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC -pAd->StaActive.SupportedHtPhy.bHtEnable = TRUE\n"));
 551                 }
 552                 else
 553 #endif // DOT11_N_SUPPORT //
 554                 {
 555                         pAd->MlmeAux.HtCapabilityLen = 0;
 556                         pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
 557                 }
 558                 // temporarily not support QOS in IBSS
 559                 NdisZeroMemory(&pAd->MlmeAux.APEdcaParm, sizeof(EDCA_PARM));
 560                 NdisZeroMemory(&pAd->MlmeAux.APQbssLoad, sizeof(QBSS_LOAD_PARM));
 561                 NdisZeroMemory(&pAd->MlmeAux.APQosCapability, sizeof(QOS_CAPABILITY_PARM));
 562
 563                 AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, FALSE);
 564                 AsicLockChannel(pAd, pAd->MlmeAux.Channel);
 565
 566                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeStartReqAction(ch= %d,sup rates= %d, ext rates=%d)\n",
 567                         pAd->MlmeAux.Channel, pAd->MlmeAux.SupRateLen, pAd->MlmeAux.ExtRateLen));
 568
 569                 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 570                 Status = MLME_SUCCESS;
 571                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
 572         }
 573         else
 574         {
 575                 DBGPRINT_ERR(("SYNC - MlmeStartReqAction() sanity check fail.\n"));
 576                 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 577                 Status = MLME_INVALID_FORMAT;
 578                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
 579         }
 580 }
 581
 582 /*
 583         ==========================================================================
 584         Description:
 585                 peer sends beacon back when scanning
 586         ==========================================================================
 587  */
 588 VOID PeerBeaconAtScanAction(
 589         IN PRTMP_ADAPTER pAd,
 590         IN MLME_QUEUE_ELEM *Elem)
 591 {
 592         UCHAR           Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
 593         UCHAR           Ssid[MAX_LEN_OF_SSID], BssType, Channel, NewChannel,
 594                                         SsidLen, DtimCount, DtimPeriod, BcastFlag, MessageToMe;
 595         CF_PARM         CfParm;
 596         USHORT          BeaconPeriod, AtimWin, CapabilityInfo;
 597         PFRAME_802_11   pFrame;
 598         LARGE_INTEGER   TimeStamp;
 599         UCHAR           Erp;
 600         UCHAR           SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
 601         UCHAR                   SupRateLen, ExtRateLen;
 602         USHORT                  LenVIE;
 603         UCHAR                   CkipFlag;
 604         UCHAR                   AironetCellPowerLimit;
 605         EDCA_PARM       EdcaParm;
 606         QBSS_LOAD_PARM  QbssLoad;
 607         QOS_CAPABILITY_PARM QosCapability;
 608         ULONG                                           RalinkIe;
 609         UCHAR                                           VarIE[MAX_VIE_LEN];             // Total VIE length = MAX_VIE_LEN - -5
 610         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 611         HT_CAPABILITY_IE                HtCapability;
 612         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
 613         UCHAR                   HtCapabilityLen = 0, PreNHtCapabilityLen = 0;
 614         UCHAR                   AddHtInfoLen;
 615         UCHAR                   NewExtChannelOffset = 0xff;
 616
 617         pFrame = (PFRAME_802_11) Elem->Msg;
 618         // Init Variable IE structure
 619         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 620         pVIE->Length = 0;
 621 #ifdef DOT11_N_SUPPORT
 622     RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
 623         RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
 624 #endif // DOT11_N_SUPPORT //
 625
 626         if (PeerBeaconAndProbeRspSanity(pAd,
 627                                                                 Elem->Msg,
 628                                                                 Elem->MsgLen,
 629                                                                 Elem->Channel,
 630                                                                 Addr2,
 631                                                                 Bssid,
 632                                                                 Ssid,
 633                                                                 &SsidLen,
 634                                                                 &BssType,
 635                                                                 &BeaconPeriod,
 636                                                                 &Channel,
 637                                                                 &NewChannel,
 638                                                                 &TimeStamp,
 639                                                                 &CfParm,
 640                                                                 &AtimWin,
 641                                                                 &CapabilityInfo,
 642                                                                 &Erp,
 643                                                                 &DtimCount,
 644                                                                 &DtimPeriod,
 645                                                                 &BcastFlag,
 646                                                                 &MessageToMe,
 647                                                                 SupRate,
 648                                                                 &SupRateLen,
 649                                                                 ExtRate,
 650                                                                 &ExtRateLen,
 651                                                                 &CkipFlag,
 652                                                                 &AironetCellPowerLimit,
 653                                                                 &EdcaParm,
 654                                                                 &QbssLoad,
 655                                                                 &QosCapability,
 656                                                                 &RalinkIe,
 657                                                                 &HtCapabilityLen,
 658                                                                 &PreNHtCapabilityLen,
 659                                                                 &HtCapability,
 660                                                                 &AddHtInfoLen,
 661                                                                 &AddHtInfo,
 662                                                                 &NewExtChannelOffset,
 663                                                                 &LenVIE,
 664                                                                 pVIE))
 665         {
 666                 ULONG Idx;
 667                 CHAR Rssi = 0;
 668
 669                 Idx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
 670                 if (Idx != BSS_NOT_FOUND)
 671                         Rssi = pAd->ScanTab.BssEntry[Idx].Rssi;
 672
 673                 Rssi = RTMPMaxRssi(pAd, ConvertToRssi(pAd, Elem->Rssi0, RSSI_0), ConvertToRssi(pAd, Elem->Rssi1, RSSI_1), ConvertToRssi(pAd, Elem->Rssi2, RSSI_2));
 674
 675
 676 #ifdef DOT11_N_SUPPORT
 677                 if ((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0))
 678                         HtCapabilityLen = SIZE_HT_CAP_IE;
 679 #endif // DOT11_N_SUPPORT //
 680                 if ((pAd->StaCfg.CCXReqType != MSRN_TYPE_UNUSED) && (Channel == pAd->StaCfg.CCXScanChannel))
 681                 {
 682                         Idx = BssTableSetEntry(pAd, &pAd->StaCfg.CCXBssTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
 683                                                  &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen,ExtRate, ExtRateLen, &HtCapability,
 684                                                  &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, Rssi, TimeStamp, CkipFlag,
 685                                                  &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
 686                         if (Idx != BSS_NOT_FOUND)
 687                         {
 688                                 NdisMoveMemory(pAd->StaCfg.CCXBssTab.BssEntry[Idx].PTSF, &Elem->Msg[24], 4);
 689                                 NdisMoveMemory(&pAd->StaCfg.CCXBssTab.BssEntry[Idx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
 690                                 NdisMoveMemory(&pAd->StaCfg.CCXBssTab.BssEntry[Idx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
 691                                 if (pAd->StaCfg.CCXReqType == MSRN_TYPE_BEACON_REQ)
 692                                         AironetAddBeaconReport(pAd, Idx, Elem);
 693                         }
 694                 }
 695                 else
 696                 {
 697                         Idx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
 698                                                   &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,  &HtCapability,
 699                                                  &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, Rssi, TimeStamp, CkipFlag,
 700                                                  &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
 701 #ifdef DOT11_N_SUPPORT
 702 #ifdef DOT11N_DRAFT3
 703                         if (pAd->ChannelList[pAd->CommonCfg.ChannelListIdx].bEffectedChannel == TRUE)
 704                         {
 705                                 UCHAR           RegClass;
 706                                 PeerBeaconAndProbeRspSanity2(pAd, Elem->Msg, Elem->MsgLen, &RegClass);
 707                                 TriEventTableSetEntry(pAd, &pAd->CommonCfg.TriggerEventTab, Bssid, &HtCapability, HtCapabilityLen, RegClass, Channel);
 708                         }
 709 #endif // DOT11N_DRAFT3 //
 710 #endif // DOT11_N_SUPPORT //
 711                         if (Idx != BSS_NOT_FOUND)
 712                         {
 713                                 NdisMoveMemory(pAd->ScanTab.BssEntry[Idx].PTSF, &Elem->Msg[24], 4);
 714                                 NdisMoveMemory(&pAd->ScanTab.BssEntry[Idx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
 715                                 NdisMoveMemory(&pAd->ScanTab.BssEntry[Idx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
 716                         }
 717                 }
 718         }
 719         // sanity check fail, ignored
 720 }
 721
 722 /*
 723         ==========================================================================
 724         Description:
 725                 When waiting joining the (I)BSS, beacon received from external
 726         ==========================================================================
 727  */
 728 VOID PeerBeaconAtJoinAction(
 729         IN PRTMP_ADAPTER pAd,
 730         IN MLME_QUEUE_ELEM *Elem)
 731 {
 732         UCHAR         Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
 733         UCHAR         Ssid[MAX_LEN_OF_SSID], SsidLen, BssType, Channel, MessageToMe,
 734                                   DtimCount, DtimPeriod, BcastFlag, NewChannel;
 735         LARGE_INTEGER TimeStamp;
 736         USHORT        BeaconPeriod, AtimWin, CapabilityInfo;
 737         CF_PARM       Cf;
 738         BOOLEAN       TimerCancelled;
 739         UCHAR         Erp;
 740         UCHAR         SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
 741         UCHAR             SupRateLen, ExtRateLen;
 742         UCHAR         CkipFlag;
 743         USHORT            LenVIE;
 744         UCHAR             AironetCellPowerLimit;
 745         EDCA_PARM       EdcaParm;
 746         QBSS_LOAD_PARM  QbssLoad;
 747         QOS_CAPABILITY_PARM QosCapability;
 748         USHORT        Status;
 749         UCHAR                                           VarIE[MAX_VIE_LEN];             // Total VIE length = MAX_VIE_LEN - -5
 750         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 751         ULONG           RalinkIe;
 752         ULONG         Idx;
 753         HT_CAPABILITY_IE                HtCapability;
 754         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
 755         UCHAR                           HtCapabilityLen = 0, PreNHtCapabilityLen = 0;
 756         UCHAR                   AddHtInfoLen;
 757         UCHAR                   NewExtChannelOffset = 0xff;
 758 #ifdef DOT11_N_SUPPORT
 759         UCHAR                   CentralChannel;
 760 #endif // DOT11_N_SUPPORT //
 761
 762         // Init Variable IE structure
 763         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 764         pVIE->Length = 0;
 765     RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
 766         RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
 767
 768
 769         if (PeerBeaconAndProbeRspSanity(pAd,
 770                                                                 Elem->Msg,
 771                                                                 Elem->MsgLen,
 772                                                                 Elem->Channel,
 773                                                                 Addr2,
 774                                                                 Bssid,
 775                                                                 Ssid,
 776                                                                 &SsidLen,
 777                                                                 &BssType,
 778                                                                 &BeaconPeriod,
 779                                                                 &Channel,
 780                                                                 &NewChannel,
 781                                                                 &TimeStamp,
 782                                                                 &Cf,
 783                                                                 &AtimWin,
 784                                                                 &CapabilityInfo,
 785                                                                 &Erp,
 786                                                                 &DtimCount,
 787                                                                 &DtimPeriod,
 788                                                                 &BcastFlag,
 789                                                                 &MessageToMe,
 790                                                                 SupRate,
 791                                                                 &SupRateLen,
 792                                                                 ExtRate,
 793                                                                 &ExtRateLen,
 794                                                                 &CkipFlag,
 795                                                                 &AironetCellPowerLimit,
 796                                                                 &EdcaParm,
 797                                                                 &QbssLoad,
 798                                                                 &QosCapability,
 799                                                                 &RalinkIe,
 800                                                                 &HtCapabilityLen,
 801                                                                 &PreNHtCapabilityLen,
 802                                                                 &HtCapability,
 803                                                                 &AddHtInfoLen,
 804                                                                 &AddHtInfo,
 805                                                                 &NewExtChannelOffset,
 806                                                                 &LenVIE,
 807                                                                 pVIE))
 808         {
 809                 // Disqualify 11b only adhoc when we are in 11g only adhoc mode
 810                 if ((BssType == BSS_ADHOC) && (pAd->CommonCfg.PhyMode == PHY_11G) && ((SupRateLen+ExtRateLen)< 12))
 811                         return;
 812
 813                 // BEACON from desired BSS/IBSS found. We should be able to decide most
 814                 // BSS parameters here.
 815                 // Q. But what happen if this JOIN doesn't conclude a successful ASSOCIATEION?
 816                 //    Do we need to receover back all parameters belonging to previous BSS?
 817                 // A. Should be not. There's no back-door recover to previous AP. It still need
 818                 //    a new JOIN-AUTH-ASSOC sequence.
 819                 if (MAC_ADDR_EQUAL(pAd->MlmeAux.Bssid, Bssid))
 820                 {
 821                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - receive desired BEACON at JoinWaitBeacon... Channel = %d\n", Channel));
 822                         RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 823
 824                         // Update RSSI to prevent No signal display when cards first initialized
 825                         pAd->StaCfg.RssiSample.LastRssi0        = ConvertToRssi(pAd, Elem->Rssi0, RSSI_0);
 826                         pAd->StaCfg.RssiSample.LastRssi1        = ConvertToRssi(pAd, Elem->Rssi1, RSSI_1);
 827                         pAd->StaCfg.RssiSample.LastRssi2        = ConvertToRssi(pAd, Elem->Rssi2, RSSI_2);
 828                         pAd->StaCfg.RssiSample.AvgRssi0 = pAd->StaCfg.RssiSample.LastRssi0;
 829                         pAd->StaCfg.RssiSample.AvgRssi0X8       = pAd->StaCfg.RssiSample.AvgRssi0 << 3;
 830                         pAd->StaCfg.RssiSample.AvgRssi1 = pAd->StaCfg.RssiSample.LastRssi1;
 831                         pAd->StaCfg.RssiSample.AvgRssi1X8       = pAd->StaCfg.RssiSample.AvgRssi1 << 3;
 832                         pAd->StaCfg.RssiSample.AvgRssi2 = pAd->StaCfg.RssiSample.LastRssi2;
 833                         pAd->StaCfg.RssiSample.AvgRssi2X8       = pAd->StaCfg.RssiSample.AvgRssi2 << 3;
 834
 835                         //
 836                         // We need to check if SSID only set to any, then we can record the current SSID.
 837                         // Otherwise will cause hidden SSID association failed.
 838                         //
 839                         if (pAd->MlmeAux.SsidLen == 0)
 840                         {
 841                                 NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
 842                                 pAd->MlmeAux.SsidLen = SsidLen;
 843                         }
 844                         else
 845                         {
 846                                 Idx = BssSsidTableSearch(&pAd->ScanTab, Bssid, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen, Channel);
 847
 848                                 if (Idx != BSS_NOT_FOUND)
 849                                 {
 850                                         //
 851                                         // Multiple SSID case, used correct CapabilityInfo
 852                                         //
 853                                         CapabilityInfo = pAd->ScanTab.BssEntry[Idx].CapabilityInfo;
 854                                 }
 855                         }
 856                         NdisMoveMemory(pAd->MlmeAux.Bssid, Bssid, MAC_ADDR_LEN);
 857                         pAd->MlmeAux.CapabilityInfo = CapabilityInfo & SUPPORTED_CAPABILITY_INFO;
 858                         pAd->MlmeAux.BssType = BssType;
 859                         pAd->MlmeAux.BeaconPeriod = BeaconPeriod;
 860                         pAd->MlmeAux.Channel = Channel;
 861                         pAd->MlmeAux.AtimWin = AtimWin;
 862                         pAd->MlmeAux.CfpPeriod = Cf.CfpPeriod;
 863                         pAd->MlmeAux.CfpMaxDuration = Cf.CfpMaxDuration;
 864                         pAd->MlmeAux.APRalinkIe = RalinkIe;
 865
 866                         // Copy AP's supported rate to MlmeAux for creating assoication request
 867                         // Also filter out not supported rate
 868                         pAd->MlmeAux.SupRateLen = SupRateLen;
 869                         NdisMoveMemory(pAd->MlmeAux.SupRate, SupRate, SupRateLen);
 870                         RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
 871                         pAd->MlmeAux.ExtRateLen = ExtRateLen;
 872                         NdisMoveMemory(pAd->MlmeAux.ExtRate, ExtRate, ExtRateLen);
 873                         RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
 874
 875             NdisZeroMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, 16);
 876 #ifdef DOT11_N_SUPPORT
 877                         pAd->MlmeAux.NewExtChannelOffset = NewExtChannelOffset;
 878                         pAd->MlmeAux.HtCapabilityLen = HtCapabilityLen;
 879
 880                         // filter out un-supported ht rates
 881                         if (((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0)) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
 882                         {
 883                                 RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
 884                                 RTMPMoveMemory(&pAd->MlmeAux.AddHtInfo, &AddHtInfo, SIZE_ADD_HT_INFO_IE);
 885
 886                                 // StaActive.SupportedHtPhy.MCSSet stores Peer AP's 11n Rx capability
 887                                 NdisMoveMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, HtCapability.MCSSet, 16);
 888                                 pAd->MlmeAux.NewExtChannelOffset = NewExtChannelOffset;
 889                                 pAd->MlmeAux.HtCapabilityLen = SIZE_HT_CAP_IE;
 890                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = TRUE;
 891                                 if (PreNHtCapabilityLen > 0)
 892                                         pAd->StaActive.SupportedPhyInfo.bPreNHt = TRUE;
 893                                 RTMPCheckHt(pAd, BSSID_WCID, &HtCapability, &AddHtInfo);
 894                                 // Copy AP Parameter to StaActive.  This is also in LinkUp.
 895                                 DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAtJoinAction! (MpduDensity=%d, MaxRAmpduFactor=%d, BW=%d)\n",
 896                                         pAd->StaActive.SupportedHtPhy.MpduDensity, pAd->StaActive.SupportedHtPhy.MaxRAmpduFactor, HtCapability.HtCapInfo.ChannelWidth));
 897
 898                                 if (AddHtInfoLen > 0)
 899                                 {
 900                                         CentralChannel = AddHtInfo.ControlChan;
 901                                         // Check again the Bandwidth capability of this AP.
 902                                         if ((AddHtInfo.ControlChan > 2)&& (AddHtInfo.AddHtInfo.ExtChanOffset == EXTCHA_BELOW) && (HtCapability.HtCapInfo.ChannelWidth == BW_40))
 903                                         {
 904                                                 CentralChannel = AddHtInfo.ControlChan - 2;
 905                                         }
 906                                         else if ((AddHtInfo.AddHtInfo.ExtChanOffset == EXTCHA_ABOVE) && (HtCapability.HtCapInfo.ChannelWidth == BW_40))
 907                                         {
 908                                                 CentralChannel = AddHtInfo.ControlChan + 2;
 909                                         }
 910
 911                                         // Check Error .
 912                                         if (pAd->MlmeAux.CentralChannel != CentralChannel)
 913                                                 DBGPRINT(RT_DEBUG_ERROR, ("PeerBeaconAtJoinAction HT===>Beacon Central Channel = %d, Control Channel = %d. Mlmeaux CentralChannel = %d\n", CentralChannel, AddHtInfo.ControlChan, pAd->MlmeAux.CentralChannel));
 914
 915                                         DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAtJoinAction HT===>Central Channel = %d, Control Channel = %d,  .\n", CentralChannel, AddHtInfo.ControlChan));
 916
 917                                 }
 918
 919                         }
 920                         else
 921 #endif // DOT11_N_SUPPORT //
 922                         {
 923                                 // To prevent error, let legacy AP must have same CentralChannel and Channel.
 924                                 if ((HtCapabilityLen == 0) && (PreNHtCapabilityLen == 0))
 925                                         pAd->MlmeAux.CentralChannel = pAd->MlmeAux.Channel;
 926
 927                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
 928                                 RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
 929                                 RTMPZeroMemory(&pAd->MlmeAux.AddHtInfo, SIZE_ADD_HT_INFO_IE);
 930                         }
 931
 932                         RTMPUpdateMlmeRate(pAd);
 933
 934                         // copy QOS related information
 935                         if ((pAd->CommonCfg.bWmmCapable)
 936 #ifdef DOT11_N_SUPPORT
 937                                  || (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
 938 #endif // DOT11_N_SUPPORT //
 939                                 )
 940                         {
 941                                 NdisMoveMemory(&pAd->MlmeAux.APEdcaParm, &EdcaParm, sizeof(EDCA_PARM));
 942                                 NdisMoveMemory(&pAd->MlmeAux.APQbssLoad, &QbssLoad, sizeof(QBSS_LOAD_PARM));
 943                                 NdisMoveMemory(&pAd->MlmeAux.APQosCapability, &QosCapability, sizeof(QOS_CAPABILITY_PARM));
 944                         }
 945                         else
 946                         {
 947                                 NdisZeroMemory(&pAd->MlmeAux.APEdcaParm, sizeof(EDCA_PARM));
 948                                 NdisZeroMemory(&pAd->MlmeAux.APQbssLoad, sizeof(QBSS_LOAD_PARM));
 949                                 NdisZeroMemory(&pAd->MlmeAux.APQosCapability, sizeof(QOS_CAPABILITY_PARM));
 950                         }
 951
 952                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - after JOIN, SupRateLen=%d, ExtRateLen=%d\n",
 953                                                                                 pAd->MlmeAux.SupRateLen, pAd->MlmeAux.ExtRateLen));
 954
 955 #ifdef LEAP_SUPPORT
 956                         // Update CkipFlag
 957                         pAd->StaCfg.CkipFlag = CkipFlag;
 958
 959                         // Keep TimeStamp for Re-Association used.
 960                         if (LEAP_CCKM_ON(pAd) && (pAd->StaCfg.CCKMLinkUpFlag == TRUE))
 961                                 pAd->StaCfg.CCKMBeaconAtJoinTimeStamp = TimeStamp;
 962 #endif // LEAP_SUPPORT //
 963
 964                         if (AironetCellPowerLimit != 0xFF)
 965                         {
 966                                 //We need to change our TxPower for CCX 2.0 AP Control of Client Transmit Power
 967                                 ChangeToCellPowerLimit(pAd, AironetCellPowerLimit);
 968                         }
 969                         else  //Used the default TX Power Percentage.
 970                                 pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
 971
 972                         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 973                         Status = MLME_SUCCESS;
 974                         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
 975                 }
 976                 // not to me BEACON, ignored
 977         }
 978         // sanity check fail, ignore this frame
 979 }
 980
 981 /*
 982         ==========================================================================
 983         Description:
 984                 receive BEACON from peer
 985
 986         IRQL = DISPATCH_LEVEL
 987
 988         ==========================================================================
 989  */
 990 VOID PeerBeacon(
 991         IN PRTMP_ADAPTER pAd,
 992         IN MLME_QUEUE_ELEM *Elem)
 993 {
 994         UCHAR         Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
 995         CHAR          Ssid[MAX_LEN_OF_SSID];
 996         CF_PARM       CfParm;
 997         UCHAR         SsidLen, MessageToMe=0, BssType, Channel, NewChannel, index=0;
 998         UCHAR         DtimCount=0, DtimPeriod=0, BcastFlag=0;
 999         USHORT        CapabilityInfo, AtimWin, BeaconPeriod;
1000         LARGE_INTEGER TimeStamp;
1001         USHORT        TbttNumToNextWakeUp;
1002         UCHAR         Erp;
1003         UCHAR         SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
1004         UCHAR             SupRateLen, ExtRateLen;
1005         UCHAR             CkipFlag;
1006         USHORT        LenVIE;
1007         UCHAR             AironetCellPowerLimit;
1008         EDCA_PARM       EdcaParm;
1009         QBSS_LOAD_PARM  QbssLoad;
1010         QOS_CAPABILITY_PARM QosCapability;
1011         ULONG           RalinkIe;
1012         // New for WPA security suites
1013         UCHAR                                           VarIE[MAX_VIE_LEN];             // Total VIE length = MAX_VIE_LEN - -5
1014         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
1015         HT_CAPABILITY_IE                HtCapability;
1016         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
1017         UCHAR                   HtCapabilityLen, PreNHtCapabilityLen;
1018         UCHAR                   AddHtInfoLen;
1019         UCHAR                   NewExtChannelOffset = 0xff;
1020
1021         if (!(INFRA_ON(pAd) || ADHOC_ON(pAd)
1022                 ))
1023                 return;
1024
1025         // Init Variable IE structure
1026         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
1027         pVIE->Length = 0;
1028     RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
1029         RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
1030
1031         if (PeerBeaconAndProbeRspSanity(pAd,
1032                                                                 Elem->Msg,
1033                                                                 Elem->MsgLen,
1034                                                                 Elem->Channel,
1035                                                                 Addr2,
1036                                                                 Bssid,
1037                                                                 Ssid,
1038                                                                 &SsidLen,
1039                                                                 &BssType,
1040                                                                 &BeaconPeriod,
1041                                                                 &Channel,
1042                                                                 &NewChannel,
1043                                                                 &TimeStamp,
1044                                                                 &CfParm,
1045                                                                 &AtimWin,
1046                                                                 &CapabilityInfo,
1047                                                                 &Erp,
1048                                                                 &DtimCount,
1049                                                                 &DtimPeriod,
1050                                                                 &BcastFlag,
1051                                                                 &MessageToMe,
1052                                                                 SupRate,
1053                                                                 &SupRateLen,
1054                                                                 ExtRate,
1055                                                                 &ExtRateLen,
1056                                                                 &CkipFlag,
1057                                                                 &AironetCellPowerLimit,
1058                                                                 &EdcaParm,
1059                                                                 &QbssLoad,
1060                                                                 &QosCapability,
1061                                                                 &RalinkIe,
1062                                                                 &HtCapabilityLen,
1063                                                                 &PreNHtCapabilityLen,
1064                                                                 &HtCapability,
1065                                                                 &AddHtInfoLen,
1066                                                                 &AddHtInfo,
1067                                                                 &NewExtChannelOffset,
1068                                                                 &LenVIE,
1069                                                                 pVIE))
1070         {
1071                 BOOLEAN is_my_bssid, is_my_ssid;
1072                 ULONG   Bssidx, Now;
1073                 BSS_ENTRY *pBss;
1074                 CHAR            RealRssi = RTMPMaxRssi(pAd, ConvertToRssi(pAd, Elem->Rssi0, RSSI_0), ConvertToRssi(pAd, Elem->Rssi1, RSSI_1), ConvertToRssi(pAd, Elem->Rssi2, RSSI_2));
1075
1076                 is_my_bssid = MAC_ADDR_EQUAL(Bssid, pAd->CommonCfg.Bssid)? TRUE : FALSE;
1077                 is_my_ssid = SSID_EQUAL(Ssid, SsidLen, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen)? TRUE:FALSE;
1078
1079
1080                 // ignore BEACON not for my SSID
1081                 if ((! is_my_ssid) && (! is_my_bssid))
1082                         return;
1083
1084                 // It means STA waits disassoc completely from this AP, ignores this beacon.
1085                 if (pAd->Mlme.CntlMachine.CurrState == CNTL_WAIT_DISASSOC)
1086                         return;
1087
1088 #ifdef DOT11_N_SUPPORT
1089                 // Copy Control channel for this BSSID.
1090                 if (AddHtInfoLen != 0)
1091                         Channel = AddHtInfo.ControlChan;
1092
1093                 if ((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0))
1094                         HtCapabilityLen = SIZE_HT_CAP_IE;
1095 #endif // DOT11_N_SUPPORT //
1096
1097                 //
1098                 // Housekeeping "SsidBssTab" table for later-on ROAMing usage.
1099                 //
1100                 Bssidx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
1101                 if (Bssidx == BSS_NOT_FOUND)
1102                 {
1103                         // discover new AP of this network, create BSS entry
1104                         Bssidx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
1105                                                  &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,
1106                                                 &HtCapability, &AddHtInfo,HtCapabilityLen,AddHtInfoLen,NewExtChannelOffset, Channel,
1107                                                 RealRssi, TimeStamp, CkipFlag, &EdcaParm, &QosCapability,
1108                                                 &QbssLoad, LenVIE, pVIE);
1109                         if (Bssidx == BSS_NOT_FOUND) // return if BSS table full
1110                                 return;
1111
1112                         NdisMoveMemory(pAd->ScanTab.BssEntry[Bssidx].PTSF, &Elem->Msg[24], 4);
1113                         NdisMoveMemory(&pAd->ScanTab.BssEntry[Bssidx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
1114                         NdisMoveMemory(&pAd->ScanTab.BssEntry[Bssidx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
1115
1116
1117
1118                 }
1119
1120                 if ((pAd->CommonCfg.bIEEE80211H == 1) && (NewChannel != 0) && (Channel != NewChannel))
1121                 {
1122                         // Switching to channel 1 can prevent from rescanning the current channel immediately (by auto reconnection).
1123                         // In addition, clear the MLME queue and the scan table to discard the RX packets and previous scanning results.
1124                         AsicSwitchChannel(pAd, 1, FALSE);
1125                         AsicLockChannel(pAd, 1);
1126                     LinkDown(pAd, FALSE);
1127                         MlmeQueueInit(&pAd->Mlme.Queue);
1128                         BssTableInit(&pAd->ScanTab);
1129                     RTMPusecDelay(1000000);             // use delay to prevent STA do reassoc
1130
1131                         // channel sanity check
1132                         for (index = 0 ; index < pAd->ChannelListNum; index++)
1133                         {
1134                                 if (pAd->ChannelList[index].Channel == NewChannel)
1135                                 {
1136                                         pAd->ScanTab.BssEntry[Bssidx].Channel = NewChannel;
1137                                         pAd->CommonCfg.Channel = NewChannel;
1138                                         AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
1139                                         AsicLockChannel(pAd, pAd->CommonCfg.Channel);
1140                                         DBGPRINT(RT_DEBUG_TRACE, ("PeerBeacon - STA receive channel switch announcement IE (New Channel =%d)\n", NewChannel));
1141                                         break;
1142                                 }
1143                         }
1144
1145                         if (index >= pAd->ChannelListNum)
1146                         {
1147                                 DBGPRINT_ERR(("PeerBeacon(can not find New Channel=%d in ChannelList[%d]\n", pAd->CommonCfg.Channel, pAd->ChannelListNum));
1148                         }
1149                 }
1150
1151                 // if the ssid matched & bssid unmatched, we should select the bssid with large value.
1152                 // This might happened when two STA start at the same time
1153                 if ((! is_my_bssid) && ADHOC_ON(pAd))
1154                 {
1155                         INT     i;
1156
1157                         // Add the safeguard against the mismatch of adhoc wep status
1158                         if (pAd->StaCfg.WepStatus != pAd->ScanTab.BssEntry[Bssidx].WepStatus)
1159                         {
1160                                 return;
1161                         }
1162
1163                         // collapse into the ADHOC network which has bigger BSSID value.
1164                         for (i = 0; i < 6; i++)
1165                         {
1166                                 if (Bssid[i] > pAd->CommonCfg.Bssid[i])
1167                                 {
1168                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - merge to the IBSS with bigger BSSID=%02x:%02x:%02x:%02x:%02x:%02x\n",
1169                                                 Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
1170                                         AsicDisableSync(pAd);
1171                                         COPY_MAC_ADDR(pAd->CommonCfg.Bssid, Bssid);
1172                                         AsicSetBssid(pAd, pAd->CommonCfg.Bssid);
1173                                         MakeIbssBeacon(pAd);        // re-build BEACON frame
1174                                         AsicEnableIbssSync(pAd);    // copy BEACON frame to on-chip memory
1175                                         is_my_bssid = TRUE;
1176                                         break;
1177                                 }
1178                                 else if (Bssid[i] < pAd->CommonCfg.Bssid[i])
1179                                         break;
1180                         }
1181                 }
1182
1183
1184                 NdisGetSystemUpTime(&Now);
1185                 pBss = &pAd->ScanTab.BssEntry[Bssidx];
1186                 pBss->Rssi = RealRssi;       // lastest RSSI
1187                 pBss->LastBeaconRxTime = Now;   // last RX timestamp
1188
1189                 //
1190                 // BEACON from my BSSID - either IBSS or INFRA network
1191                 //
1192                 if (is_my_bssid)
1193                 {
1194                         RXWI_STRUC      RxWI;
1195
1196                         pAd->StaCfg.DtimCount = DtimCount;
1197                         pAd->StaCfg.DtimPeriod = DtimPeriod;
1198                         pAd->StaCfg.LastBeaconRxTime = Now;
1199
1200
1201                         RxWI.RSSI0 = Elem->Rssi0;
1202                         RxWI.RSSI1 = Elem->Rssi1;
1203                         RxWI.RSSI2 = Elem->Rssi2;
1204
1205                         Update_Rssi_Sample(pAd, &pAd->StaCfg.RssiSample, &RxWI);
1206                         if (AironetCellPowerLimit != 0xFF)
1207                         {
1208                                 //
1209                                 // We get the Cisco (ccx) "TxPower Limit" required
1210                                 // Changed to appropriate TxPower Limit for Ciso Compatible Extensions
1211                                 //
1212                                 ChangeToCellPowerLimit(pAd, AironetCellPowerLimit);
1213                         }
1214                         else
1215                         {
1216                                 //
1217                                 // AironetCellPowerLimit equal to 0xFF means the Cisco (ccx) "TxPower Limit" not exist.
1218                                 // Used the default TX Power Percentage, that set from UI.
1219                                 //
1220                                 pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
1221                         }
1222
1223                         // at least one 11b peer joined. downgrade the MaxTxRate to 11Mbps
1224                         // after last 11b peer left for several seconds, we'll auto switch back to 11G rate
1225                         // in MlmePeriodicExec()
1226                         if (ADHOC_ON(pAd) && (CAP_IS_IBSS_ON(CapabilityInfo)))
1227                         {
1228                                 BOOLEAN bRestart;
1229                 BOOLEAN bnRestart;
1230
1231                                 bRestart = FALSE;
1232                 bnRestart = FALSE;
1233
1234                                 do
1235                                 {
1236                                         if ((SupRateLen+ExtRateLen <= 4) && (pAd->CommonCfg.MaxTxRate > RATE_11))
1237                                         {
1238                                                 if (pAd->StaCfg.AdhocBOnlyJoined == FALSE)
1239                                                 {
1240                                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - 11b peer joined. down-grade to 11b TX rates \n"));
1241                                                         bRestart = TRUE;
1242                                                         NdisMoveMemory(pAd->StaActive.SupRate, SupRate, MAX_LEN_OF_SUPPORTED_RATES);
1243                                                         pAd->StaActive.SupRateLen = SupRateLen;
1244                                                         NdisMoveMemory(pAd->StaActive.ExtRate, ExtRate, MAX_LEN_OF_SUPPORTED_RATES);
1245                                                         pAd->StaActive.ExtRateLen = ExtRateLen;
1246                                                         pAd->StaCfg.AdhocBOnlyJoined = TRUE;
1247                                                         pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
1248                                                         AsicSetEdcaParm(pAd, NULL);
1249                                                 }
1250
1251                                                 // this timestamp is for MlmePeriodicExec() to check if all 11B peers have left
1252                                                 pAd->StaCfg.Last11bBeaconRxTime = Now;
1253                                                 break;
1254                                         }
1255 #ifdef DOT11_N_SUPPORT
1256                                         // Update Ht Phy.
1257                                         if ((pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
1258                                         {
1259                                                 if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) &&
1260                                                         !pAd->StaCfg.AdhocBGJoined &&
1261                                                         !pAd->StaCfg.AdhocBOnlyJoined)
1262                                                         AdhocTurnOnQos(pAd);
1263
1264                                                 // Handle rate switch issue when Adhoc mode
1265                                                 if ((SupRateLen+ExtRateLen >= 8) && (HtCapability.MCSSet[0] == 0) && (HtCapability.MCSSet[1] == 0))
1266                                                 {
1267                                                         if (pAd->StaCfg.AdhocBGJoined == FALSE)
1268                                                         {
1269                                                                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - 11g peer joined. down-grade to 11g TX rates \n"));
1270                                                                 bRestart = TRUE;
1271                                                                 NdisMoveMemory(pAd->StaActive.SupRate, SupRate, MAX_LEN_OF_SUPPORTED_RATES);
1272                                                                 pAd->StaActive.SupRateLen = SupRateLen;
1273                                                                 NdisMoveMemory(pAd->StaActive.ExtRate, ExtRate, MAX_LEN_OF_SUPPORTED_RATES);
1274                                                                 pAd->StaActive.ExtRateLen = ExtRateLen;
1275                                                                 pAd->StaCfg.AdhocBGJoined = TRUE;
1276                                                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
1277                                                                 AsicSetEdcaParm(pAd, NULL);
1278                                                         }
1279
1280                                                         // this timestamp is for MlmePeriodicExec() to check if all 11g peers have left
1281                                                         pAd->StaCfg.Last11gBeaconRxTime = Now;
1282                                                         break;
1283                                                 }
1284                                                 else if (!pAd->StaCfg.AdhocBGJoined &&
1285                                                                  !pAd->StaCfg.AdhocBOnlyJoined &&
1286                                                                  (pAd->CommonCfg.RegTransmitSetting.field.BW == BW_40) &&
1287                                                                  (HtCapability.HtCapInfo.ChannelWidth == BW_20))
1288                                                 {
1289                                                         if (pAd->StaCfg.Adhoc20NJoined == FALSE)
1290                                                         {
1291                                                                 pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel;
1292
1293                                                                 pAd->StaCfg.Adhoc20NJoined = TRUE;
1294                                                                 NdisMoveMemory(&pAd->MlmeAux.HtCapability, &HtCapability, SIZE_HT_CAP_IE);
1295                                                                 if (AddHtInfoLen != 0)
1296                                                                         NdisMoveMemory(&pAd->MlmeAux.AddHtInfo, &AddHtInfo, AddHtInfoLen);
1297                                                                 NdisMoveMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, HtCapability.MCSSet, 16);
1298
1299                                                                 RTMPCheckHt(pAd, Elem->Wcid, &pAd->MlmeAux.HtCapability, &pAd->MlmeAux.AddHtInfo);
1300                                                                 COPY_HTSETTINGS_FROM_MLME_AUX_TO_ACTIVE_CFG(pAd);
1301                                                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = TRUE;
1302                                                                 bRestart = TRUE;
1303                                                                 bnRestart = TRUE;
1304                                                         }
1305                                                         // this timestamp is for MlmePeriodicExec() to check if all 20MHz N peers have left
1306                                                         pAd->StaCfg.Last20NBeaconRxTime = Now;
1307                                                 }
1308
1309                                         }
1310                                         else
1311 #endif // DOT11_N_SUPPORT //
1312                                         {
1313                                                 RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
1314                                                 RTMPZeroMemory(&pAd->MlmeAux.AddHtInfo, SIZE_ADD_HT_INFO_IE);
1315                                         }
1316                                 }while (FALSE);
1317
1318                                 // If peer Adhoc is legacy mode, I don't need to call MlmeUpdateHtTxRates no matter I support HT or not
1319                                 if ((bRestart == TRUE) && (bnRestart == FALSE))
1320                                 {
1321                                         MlmeUpdateTxRates(pAd, FALSE, 0);
1322                                         MakeIbssBeacon(pAd);        // re-build BEACON frame
1323                                         AsicEnableIbssSync(pAd);    // copy to on-chip memory
1324                                 }
1325 #ifdef DOT11_N_SUPPORT
1326                                 else if ((bRestart == TRUE) && (bnRestart == TRUE))
1327                                 {
1328                                         MlmeUpdateTxRates(pAd, FALSE, BSS0);
1329                                         MlmeUpdateHtTxRates(pAd, BSS0);
1330                                         MakeIbssBeacon(pAd);        // re-build BEACON frame
1331                                         AsicEnableIbssSync(pAd);    // copy to on-chip memory
1332                                 }
1333 #endif // DOT11_N_SUPPORT //
1334
1335                                 // At least another peer in this IBSS, declare MediaState as CONNECTED
1336                                 if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
1337                                 {
1338                                         OPSTATUS_SET_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
1339
1340                                         pAd->IndicateMediaState = NdisMediaStateConnected;
1341                                         RTMP_IndicateMediaState(pAd);
1342                         pAd->ExtraInfo = GENERAL_LINK_UP;
1343                                         AsicSetBssid(pAd, pAd->CommonCfg.Bssid);
1344
1345                                         // 2003/03/12 - john
1346                                         // Make sure this entry in "ScanTab" table, thus complies to Microsoft's policy that
1347                                         // "site survey" result should always include the current connected network.
1348                                         //
1349                                         Bssidx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
1350                                         if (Bssidx == BSS_NOT_FOUND)
1351                                         {
1352                                                 Bssidx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
1353                                                                         &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen, &HtCapability,
1354                                                                         &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, RealRssi, TimeStamp, 0,
1355                                                                         &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
1356                                         }
1357                                         DBGPRINT(RT_DEBUG_TRACE, ("ADHOC  fOP_STATUS_MEDIA_STATE_CONNECTED.\n"));
1358                                 }
1359
1360                                 // Ad-hoc mode is using MAC address as BA session. So we need to continuously find newly joined adhoc station by receiving beacon.
1361                                 // To prevent always check this, we use wcid == RESERVED_WCID to recognize it as newly joined adhoc station.
1362                                 if (ADHOC_ON(pAd) && (Elem->Wcid == RESERVED_WCID))
1363                                 {
1364                                         UCHAR   idx;
1365                                         MAC_TABLE_ENTRY *pEntry;
1366
1367                                         // look up the existing table
1368                                         pEntry = MacTableLookup(pAd, Addr2);
1369                                         if (pEntry == NULL)
1370                                         {
1371                                                 // Another adhoc joining, add to our MAC table.
1372                                                 pEntry = MacTableInsertEntry(pAd, Addr2, BSS0, FALSE);
1373                                                 if (pEntry)
1374                                                 {
1375                                                         pEntry->Sst = SST_ASSOC;
1376                                                         idx = pAd->StaCfg.DefaultKeyId;
1377                                                         // After InsertEntry, Write to ASIC on-chip table.
1378                                                         RT28XX_STA_SECURITY_INFO_ADD(pAd, BSS0, idx, pEntry);
1379                                                         DBGPRINT(RT_DEBUG_TRACE, ("ADHOC %x:%x:%x:%x:%x:%x  join in.Entry=%d\n", Addr2[0],Addr2[1],Addr2[2],Addr2[3],Addr2[4],Addr2[5], pEntry->Aid));
1380
1381                                                         pEntry->HTPhyMode.word = pAd->StaCfg.HTPhyMode.word;
1382                                 if (HtCapabilityLen <= 0)
1383                                 {
1384                                     pEntry->HTPhyMode.field.STBC = 0;
1385                                     pEntry->HTPhyMode.field.BW = 0;
1386                                     pEntry->HTPhyMode.field.ShortGI = 0;
1387                                     if ((SupRateLen+ExtRateLen <= 4) && (pAd->CommonCfg.Channel <= 14))
1388                                                         {
1389                                                                 pEntry->HTPhyMode.field.MODE = MODE_CCK;
1390                                                         }
1391                                                         else
1392                                                         {
1393                                                                 pEntry->HTPhyMode.field.MODE = MODE_OFDM;
1394                                                         }
1395                                                                 MlmeUpdateTxRates(pAd, FALSE, 0);
1396                                 }
1397 #ifdef DOT11_N_SUPPORT
1398                                                         else
1399                                                         {
1400                                                                 MlmeUpdateTxRates(pAd, FALSE, 0);
1401                                                                 MlmeUpdateHtTxRates(pAd, BSS0);
1402                                                         }
1403 #endif // DOT11_N_SUPPORT //
1404
1405 #ifdef WPA_SUPPLICANT_SUPPORT
1406 #ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
1407                                 if (pAd->StaCfg.WpaSupplicantUP)
1408                                 {
1409                                     union iwreq_data    wrqu;
1410
1411                                     SendAssocIEsToWpaSupplicant(pAd);
1412                                     memset(&wrqu, 0, sizeof(wrqu));
1413                                     wrqu.data.flags = RT_ASSOC_EVENT_FLAG;
1414                                     wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
1415                                 }
1416 #endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
1417 #endif // WPA_SUPPLICANT_SUPPORT //
1418
1419 #ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
1420                                 {
1421                                     union iwreq_data    wrqu;
1422                                     wext_notify_event_assoc(pAd);
1423
1424                                     memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
1425                                     memcpy(wrqu.ap_addr.sa_data, pAd->MlmeAux.Bssid, MAC_ADDR_LEN);
1426                                     wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
1427
1428                                 }
1429 #endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
1430                                                 }
1431                                         }
1432                                 }
1433                         }
1434
1435                         if (INFRA_ON(pAd))
1436                         {
1437                                 BOOLEAN bUseShortSlot, bUseBGProtection;
1438
1439                                 // decide to use/change to -
1440                                 //      1. long slot (20 us) or short slot (9 us) time
1441                                 //      2. turn on/off RTS/CTS and/or CTS-to-self protection
1442                                 //      3. short preamble
1443
1444                                 //bUseShortSlot = pAd->CommonCfg.bUseShortSlotTime && CAP_IS_SHORT_SLOT(CapabilityInfo);
1445                                 bUseShortSlot = CAP_IS_SHORT_SLOT(CapabilityInfo);
1446                                 if (bUseShortSlot != OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SHORT_SLOT_INUSED))
1447                                         AsicSetSlotTime(pAd, bUseShortSlot);
1448
1449                                 bUseBGProtection = (pAd->CommonCfg.UseBGProtection == 1) ||    // always use
1450                                                                    ((pAd->CommonCfg.UseBGProtection == 0) && ERP_IS_USE_PROTECTION(Erp));
1451
1452                                 if (pAd->CommonCfg.Channel > 14) // always no BG protection in A-band. falsely happened when switching A/G band to a dual-band AP
1453                                         bUseBGProtection = FALSE;
1454
1455                                 if (bUseBGProtection != OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED))
1456                                 {
1457                                         if (bUseBGProtection)
1458                                         {
1459                                                 OPSTATUS_SET_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED);
1460                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, (OFDMSETPROTECT|CCKSETPROTECT|ALLN_SETPROTECT),FALSE,(pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1));
1461                                         }
1462                                         else
1463                                         {
1464                                                 OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED);
1465                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, (OFDMSETPROTECT|CCKSETPROTECT|ALLN_SETPROTECT),TRUE,(pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1));
1466                                         }
1467
1468                                         DBGPRINT(RT_DEBUG_WARN, ("SYNC - AP changed B/G protection to %d\n", bUseBGProtection));
1469                                 }
1470
1471 #ifdef DOT11_N_SUPPORT
1472                                 // check Ht protection mode. and adhere to the Non-GF device indication by AP.
1473                                 if ((AddHtInfoLen != 0) &&
1474                                         ((AddHtInfo.AddHtInfo2.OperaionMode != pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode) ||
1475                                         (AddHtInfo.AddHtInfo2.NonGfPresent != pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent)))
1476                                 {
1477                                         pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent = AddHtInfo.AddHtInfo2.NonGfPresent;
1478                                         pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode = AddHtInfo.AddHtInfo2.OperaionMode;
1479                                         if (pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1)
1480                                 {
1481                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, TRUE);
1482                                         }
1483                                         else
1484                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, FALSE);
1485
1486                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP changed N OperaionMode to %d\n", pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode));
1487                                 }
1488 #endif // DOT11_N_SUPPORT //
1489
1490                                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED) &&
1491                                         ERP_IS_USE_BARKER_PREAMBLE(Erp))
1492                                 {
1493                                         MlmeSetTxPreamble(pAd, Rt802_11PreambleLong);
1494                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP forced to use LONG preamble\n"));
1495                                 }
1496
1497                                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED)    &&
1498                                         (EdcaParm.bValid == TRUE)                          &&
1499                                         (EdcaParm.EdcaUpdateCount != pAd->CommonCfg.APEdcaParm.EdcaUpdateCount))
1500                                 {
1501                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP change EDCA parameters(from %d to %d)\n",
1502                                                 pAd->CommonCfg.APEdcaParm.EdcaUpdateCount,
1503                                                 EdcaParm.EdcaUpdateCount));
1504                                         AsicSetEdcaParm(pAd, &EdcaParm);
1505                                 }
1506
1507                                 // copy QOS related information
1508                                 NdisMoveMemory(&pAd->CommonCfg.APQbssLoad, &QbssLoad, sizeof(QBSS_LOAD_PARM));
1509                                 NdisMoveMemory(&pAd->CommonCfg.APQosCapability, &QosCapability, sizeof(QOS_CAPABILITY_PARM));
1510                         }
1511
1512                         // only INFRASTRUCTURE mode support power-saving feature
1513                         if ((INFRA_ON(pAd) && (pAd->StaCfg.Psm == PWR_SAVE)) || (pAd->CommonCfg.bAPSDForcePowerSave))
1514                         {
1515                                 UCHAR FreeNumber;
1516                                 //  1. AP has backlogged unicast-to-me frame, stay AWAKE, send PSPOLL
1517                                 //  2. AP has backlogged broadcast/multicast frame and we want those frames, stay AWAKE
1518                                 //  3. we have outgoing frames in TxRing or MgmtRing, better stay AWAKE
1519                                 //  4. Psm change to PWR_SAVE, but AP not been informed yet, we better stay AWAKE
1520                                 //  5. otherwise, put PHY back to sleep to save battery.
1521                                 if (MessageToMe)
1522                                 {
1523                                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE))
1524                                         {
1525                                                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, pAd->StaCfg.BBPR3);
1526                                         }
1527                                         if (pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable &&
1528                                                 pAd->CommonCfg.bAPSDAC_BE && pAd->CommonCfg.bAPSDAC_BK && pAd->CommonCfg.bAPSDAC_VI && pAd->CommonCfg.bAPSDAC_VO)
1529                                         {
1530                                                 pAd->CommonCfg.bNeedSendTriggerFrame = TRUE;
1531                                         }
1532                                         else
1533                                                 RT28XX_PS_POLL_ENQUEUE(pAd);
1534                                 }
1535                                 else if (BcastFlag && (DtimCount == 0) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM))
1536                                 {
1537                                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE))
1538                                         {
1539                                                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, pAd->StaCfg.BBPR3);
1540                                         }
1541                                 }
1542                                 else if ((pAd->TxSwQueue[QID_AC_BK].Number != 0)                                                                                                        ||
1543                                                 (pAd->TxSwQueue[QID_AC_BE].Number != 0)                                                                                                         ||
1544                                                 (pAd->TxSwQueue[QID_AC_VI].Number != 0)                                                                                                         ||
1545                                                 (pAd->TxSwQueue[QID_AC_VO].Number != 0)                                                                                                         ||
1546                                                 (RTMPFreeTXDRequest(pAd, QID_AC_BK, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1547                                                 (RTMPFreeTXDRequest(pAd, QID_AC_BE, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1548                                                 (RTMPFreeTXDRequest(pAd, QID_AC_VI, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1549                                                 (RTMPFreeTXDRequest(pAd, QID_AC_VO, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1550                                                 (RTMPFreeTXDRequest(pAd, QID_MGMT, MGMT_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS))
1551                                 {
1552                                         // TODO: consider scheduled HCCA. might not be proper to use traditional DTIM-based power-saving scheme
1553                                         // can we cheat here (i.e. just check MGMT & AC_BE) for better performance?
1554                                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE))
1555                                         {
1556                                                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, pAd->StaCfg.BBPR3);
1557                                         }
1558                                 }
1559                                 else
1560                                 {
1561                                         USHORT NextDtim = DtimCount;
1562
1563                                         if (NextDtim == 0)
1564                                                 NextDtim = DtimPeriod;
1565
1566                                         TbttNumToNextWakeUp = pAd->StaCfg.DefaultListenCount;
1567                                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM) && (TbttNumToNextWakeUp > NextDtim))
1568                                                 TbttNumToNextWakeUp = NextDtim;
1569
1570                                         if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
1571                                         {
1572                                                 // Set a flag to go to sleep . Then after parse this RxDoneInterrupt, will go to sleep mode.
1573                                                 RTMP_SET_PSFLAG(pAd, fRTMP_PS_GO_TO_SLEEP_NOW);
1574                                                 pAd->ThisTbttNumToNextWakeUp = TbttNumToNextWakeUp;
1575                                                 //AsicSleepThenAutoWakeup(pAd, TbttNumToNextWakeUp);
1576                                         }
1577                                 }
1578                         }
1579                 }
1580                 // not my BSSID, ignore it
1581         }
1582         // sanity check fail, ignore this frame
1583 }
1584
1585 /*
1586         ==========================================================================
1587         Description:
1588                 Receive PROBE REQ from remote peer when operating in IBSS mode
1589         ==========================================================================
1590  */
1591 VOID PeerProbeReqAction(
1592         IN PRTMP_ADAPTER pAd,
1593         IN MLME_QUEUE_ELEM *Elem)
1594 {
1595         UCHAR         Addr2[MAC_ADDR_LEN];
1596         CHAR          Ssid[MAX_LEN_OF_SSID];
1597         UCHAR         SsidLen;
1598 #ifdef DOT11_N_SUPPORT
1599         UCHAR             HtLen, AddHtLen, NewExtLen;
1600 #endif // DOT11_N_SUPPORT //
1601         HEADER_802_11 ProbeRspHdr;
1602         NDIS_STATUS   NStatus;
1603         PUCHAR        pOutBuffer = NULL;
1604         ULONG         FrameLen = 0;
1605         LARGE_INTEGER FakeTimestamp;
1606         UCHAR         DsLen = 1, IbssLen = 2;
1607         UCHAR         LocalErpIe[3] = {IE_ERP, 1, 0};
1608         BOOLEAN       Privacy;
1609         USHORT        CapabilityInfo;
1610         UCHAR             RSNIe = IE_WPA;
1611
1612         if (! ADHOC_ON(pAd))
1613                 return;
1614
1615         if (PeerProbeReqSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, Ssid, &SsidLen))
1616         {
1617                 if ((SsidLen == 0) || SSID_EQUAL(Ssid, SsidLen, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen))
1618                 {
1619                         // allocate and send out ProbeRsp frame
1620                         NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
1621                         if (NStatus != NDIS_STATUS_SUCCESS)
1622                                 return;
1623
1624                         //pAd->StaCfg.AtimWin = 0;  // ??????
1625
1626                         Privacy = (pAd->StaCfg.WepStatus == Ndis802_11Encryption1Enabled) ||
1627                                           (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
1628                                           (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled);
1629                         CapabilityInfo = CAP_GENERATE(0, 1, Privacy, (pAd->CommonCfg.TxPreamble == Rt802_11PreambleShort), 0, 0);
1630
1631                         MakeOutgoingFrame(pOutBuffer,                   &FrameLen,
1632                                                           sizeof(HEADER_802_11),        &ProbeRspHdr,
1633                                                           TIMESTAMP_LEN,                &FakeTimestamp,
1634                                                           2,                            &pAd->CommonCfg.BeaconPeriod,
1635                                                           2,                            &CapabilityInfo,
1636                                                           1,                            &SsidIe,
1637                                                           1,                            &pAd->CommonCfg.SsidLen,
1638                                                           pAd->CommonCfg.SsidLen,       pAd->CommonCfg.Ssid,
1639                                                           1,                            &SupRateIe,
1640                                                           1,                            &pAd->StaActive.SupRateLen,
1641                                                           pAd->StaActive.SupRateLen,    pAd->StaActive.SupRate,
1642                                                           1,                            &DsIe,
1643                                                           1,                            &DsLen,
1644                                                           1,                            &pAd->CommonCfg.Channel,
1645                                                           1,                            &IbssIe,
1646                                                           1,                            &IbssLen,
1647                                                           2,                            &pAd->StaActive.AtimWin,
1648                                                           END_OF_ARGS);
1649
1650                         if (pAd->StaActive.ExtRateLen)
1651                         {
1652                                 ULONG tmp;
1653                                 MakeOutgoingFrame(pOutBuffer + FrameLen,        &tmp,
1654                                                                   3,                            LocalErpIe,
1655                                                                   1,                            &ExtRateIe,
1656                                                                   1,                            &pAd->StaActive.ExtRateLen,
1657                                                                   pAd->StaActive.ExtRateLen,    &pAd->StaActive.ExtRate,
1658                                                                   END_OF_ARGS);
1659                                 FrameLen += tmp;
1660                         }
1661
1662                         // If adhoc secruity is set for WPA-None, append the cipher suite IE
1663                         if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
1664                         {
1665                                 ULONG tmp;
1666                                 MakeOutgoingFrame(pOutBuffer + FrameLen,                &tmp,
1667                                                                         1,                              &RSNIe,
1668                                                                         1,                              &pAd->StaCfg.RSNIE_Len,
1669                                                                         pAd->StaCfg.RSNIE_Len,          pAd->StaCfg.RSN_IE,
1670                                                                         END_OF_ARGS);
1671                                 FrameLen += tmp;
1672                         }
1673 #ifdef DOT11_N_SUPPORT
1674                         if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
1675                         {
1676                                 ULONG TmpLen;
1677                                 UCHAR   BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
1678                                 HtLen = sizeof(pAd->CommonCfg.HtCapability);
1679                                 AddHtLen = sizeof(pAd->CommonCfg.AddHTInfo);
1680                                 NewExtLen = 1;
1681                                 //New extension channel offset IE is included in Beacon, Probe Rsp or channel Switch Announcement Frame
1682                                 if (pAd->bBroadComHT == TRUE)
1683                                 {
1684                                         MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
1685                                                                   1,                                &WpaIe,
1686                                                                   4,                                &BROADCOM[0],
1687                                                                  pAd->MlmeAux.HtCapabilityLen,          &pAd->MlmeAux.HtCapability,
1688                                                                   END_OF_ARGS);
1689                                 }
1690                                 else
1691                                 {
1692                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
1693                                                                   1,                                &HtCapIe,
1694                                                                   1,                                &HtLen,
1695                                                                  sizeof(HT_CAPABILITY_IE),          &pAd->CommonCfg.HtCapability,
1696                                                                   1,                                &AddHtInfoIe,
1697                                                                   1,                                &AddHtLen,
1698                                                                  sizeof(ADD_HT_INFO_IE),          &pAd->CommonCfg.AddHTInfo,
1699                                                                   1,                                &NewExtChanIe,
1700                                                                   1,                                &NewExtLen,
1701                                                                  sizeof(NEW_EXT_CHAN_IE),          &pAd->CommonCfg.NewExtChanOffset,
1702                                                                   END_OF_ARGS);
1703                                 }
1704                                 FrameLen += TmpLen;
1705                         }
1706 #endif // DOT11_N_SUPPORT //
1707                         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
1708                         MlmeFreeMemory(pAd, pOutBuffer);
1709                 }
1710         }
1711 }
1712
1713 VOID BeaconTimeoutAtJoinAction(
1714         IN PRTMP_ADAPTER pAd,
1715         IN MLME_QUEUE_ELEM *Elem)
1716 {
1717         USHORT Status;
1718         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BeaconTimeoutAtJoinAction\n"));
1719         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1720         Status = MLME_REJ_TIMEOUT;
1721         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
1722 }
1723
1724 /*
1725         ==========================================================================
1726         Description:
1727                 Scan timeout procedure. basically add channel index by 1 and rescan
1728         ==========================================================================
1729  */
1730 VOID ScanTimeoutAction(
1731         IN PRTMP_ADAPTER pAd,
1732         IN MLME_QUEUE_ELEM *Elem)
1733 {
1734         pAd->MlmeAux.Channel = NextChannel(pAd, pAd->MlmeAux.Channel);
1735
1736         // Only one channel scanned for CISCO beacon request
1737         if ((pAd->MlmeAux.ScanType == SCAN_CISCO_ACTIVE) ||
1738                 (pAd->MlmeAux.ScanType == SCAN_CISCO_PASSIVE) ||
1739                 (pAd->MlmeAux.ScanType == SCAN_CISCO_NOISE) ||
1740                 (pAd->MlmeAux.ScanType == SCAN_CISCO_CHANNEL_LOAD))
1741                 pAd->MlmeAux.Channel = 0;
1742
1743         // this routine will stop if pAd->MlmeAux.Channel == 0
1744         ScanNextChannel(pAd);
1745 }
1746
1747 /*
1748         ==========================================================================
1749         Description:
1750         ==========================================================================
1751  */
1752 VOID InvalidStateWhenScan(
1753         IN PRTMP_ADAPTER pAd,
1754         IN MLME_QUEUE_ELEM *Elem)
1755 {
1756         USHORT Status;
1757         DBGPRINT(RT_DEBUG_TRACE, ("AYNC - InvalidStateWhenScan(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
1758         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1759         Status = MLME_STATE_MACHINE_REJECT;
1760         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
1761 }
1762
1763 /*
1764         ==========================================================================
1765         Description:
1766         ==========================================================================
1767  */
1768 VOID InvalidStateWhenJoin(
1769         IN PRTMP_ADAPTER pAd,
1770         IN MLME_QUEUE_ELEM *Elem)
1771 {
1772         USHORT Status;
1773         DBGPRINT(RT_DEBUG_TRACE, ("InvalidStateWhenJoin(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
1774         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1775         Status = MLME_STATE_MACHINE_REJECT;
1776         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
1777 }
1778
1779 /*
1780         ==========================================================================
1781         Description:
1782         ==========================================================================
1783  */
1784 VOID InvalidStateWhenStart(
1785         IN PRTMP_ADAPTER pAd,
1786         IN MLME_QUEUE_ELEM *Elem)
1787 {
1788         USHORT Status;
1789         DBGPRINT(RT_DEBUG_TRACE, ("InvalidStateWhenStart(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
1790         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1791         Status = MLME_STATE_MACHINE_REJECT;
1792         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
1793 }
1794
1795 /*
1796         ==========================================================================
1797         Description:
1798
1799         IRQL = DISPATCH_LEVEL
1800
1801         ==========================================================================
1802  */
1803 VOID EnqueuePsPoll(
1804         IN PRTMP_ADAPTER pAd)
1805 {
1806         if (pAd->StaCfg.WindowsPowerMode == Ndis802_11PowerModeLegacy_PSP)
1807         pAd->PsPollFrame.FC.PwrMgmt = PWR_SAVE;
1808         MiniportMMRequest(pAd, 0, (PUCHAR)&pAd->PsPollFrame, sizeof(PSPOLL_FRAME));
1809 }
1810
1811
1812 /*
1813         ==========================================================================
1814         Description:
1815         ==========================================================================
1816  */
1817 VOID EnqueueProbeRequest(
1818         IN PRTMP_ADAPTER pAd)
1819 {
1820         NDIS_STATUS     NState;
1821         PUCHAR          pOutBuffer;
1822         ULONG           FrameLen = 0;
1823         HEADER_802_11   Hdr80211;
1824
1825         DBGPRINT(RT_DEBUG_TRACE, ("force out a ProbeRequest ...\n"));
1826
1827         NState = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
1828         if (NState == NDIS_STATUS_SUCCESS)
1829         {
1830                 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
1831
1832                 // this ProbeRequest explicitly specify SSID to reduce unwanted ProbeResponse
1833                 MakeOutgoingFrame(pOutBuffer,                     &FrameLen,
1834                                                   sizeof(HEADER_802_11),          &Hdr80211,
1835                                                   1,                              &SsidIe,
1836                                                   1,                              &pAd->CommonCfg.SsidLen,
1837                                                   pAd->CommonCfg.SsidLen,                 pAd->CommonCfg.Ssid,
1838                                                   1,                              &SupRateIe,
1839                                                   1,                              &pAd->StaActive.SupRateLen,
1840                                                   pAd->StaActive.SupRateLen,      pAd->StaActive.SupRate,
1841                                                   END_OF_ARGS);
1842                 MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
1843                 MlmeFreeMemory(pAd, pOutBuffer);
1844         }
1845
1846 }
1847
1848 #ifdef DOT11_N_SUPPORT
1849 #ifdef DOT11N_DRAFT3
1850 VOID BuildEffectedChannelList(
1851         IN PRTMP_ADAPTER pAd)
1852 {
1853         UCHAR           EChannel[11];
1854         UCHAR           i, j, k;
1855         UCHAR           UpperChannel = 0, LowerChannel = 0;
1856
1857         RTMPZeroMemory(EChannel, 11);
1858         i = 0;
1859         // Find upper channel and lower channel.
1860         if (pAd->CommonCfg.CentralChannel < pAd->CommonCfg.Channel)
1861         {
1862                 UpperChannel = pAd->CommonCfg.Channel;
1863                 LowerChannel = pAd->CommonCfg.CentralChannel;
1864         }
1865         else if (pAd->CommonCfg.CentralChannel > pAd->CommonCfg.Channel)
1866         {
1867                 UpperChannel = pAd->CommonCfg.CentralChannel;
1868                 LowerChannel = pAd->CommonCfg.Channel;
1869         }
1870         else
1871         {
1872                 return;
1873         }
1874
1875         // Record channels that is below lower channel..
1876         if (LowerChannel > 1)
1877         {
1878                 EChannel[0] = LowerChannel - 1;
1879                 i = 1;
1880                 if (LowerChannel > 2)
1881                 {
1882                         EChannel[1] = LowerChannel - 2;
1883                         i = 2;
1884                         if (LowerChannel > 3)
1885                         {
1886                                 EChannel[2] = LowerChannel - 3;
1887                                 i = 3;
1888                         }
1889                 }
1890         }
1891         // Record channels that is between  lower channel and upper channel.
1892         for (k = LowerChannel;k < UpperChannel;k++)
1893         {
1894                 EChannel[i] = k;
1895                 i++;
1896         }
1897         // Record channels that is above upper channel..
1898         if (LowerChannel < 11)
1899         {
1900                 EChannel[i] = UpperChannel + 1;
1901                 i++;
1902                 if (LowerChannel < 10)
1903                 {
1904                         EChannel[i] = LowerChannel + 2;
1905                         i++;
1906                         if (LowerChannel < 9)
1907                         {
1908                                 EChannel[i] = LowerChannel + 3;
1909                                 i++;
1910                         }
1911                 }
1912         }
1913         //
1914         for (j = 0;j < i;j++)
1915         {
1916                 for (k = 0;k < pAd->ChannelListNum;k++)
1917                 {
1918                         if (pAd->ChannelList[k].Channel == EChannel[j])
1919                         {
1920                                 pAd->ChannelList[k].bEffectedChannel = TRUE;
1921                                 DBGPRINT(RT_DEBUG_TRACE,(" EffectedChannel( =%d)\n", EChannel[j]));
1922                                 break;
1923                         }
1924                 }
1925         }
1926 }
1927 #endif // DOT11N_DRAFT3 //
1928 #endif // DOT11_N_SUPPORT //
1929
1930 BOOLEAN ScanRunning(
1931                 IN PRTMP_ADAPTER pAd)
1932 {
1933         return (pAd->Mlme.SyncMachine.CurrState == SCAN_LISTEN) ? TRUE : FALSE;
1934 }
1935