Staging: rt2860: remove DOT11_N_SUPPORT ifdefs
[linux-2.6] / drivers / staging / rt2860 / common / cmm_sync.c
1 /*
2  *************************************************************************
3  * Ralink Tech Inc.
4  * 5F., No.36, Taiyuan St., Jhubei City,
5  * Hsinchu County 302,
6  * Taiwan, R.O.C.
7  *
8  * (c) Copyright 2002-2007, Ralink Technology, Inc.
9  *
10  * This program is free software; you can redistribute it and/or modify  *
11  * it under the terms of the GNU General Public License as published by  *
12  * the Free Software Foundation; either version 2 of the License, or     *
13  * (at your option) any later version.                                   *
14  *                                                                       *
15  * This program is distributed in the hope that it will be useful,       *
16  * but WITHOUT ANY WARRANTY; without even the implied warranty of        *
17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
18  * GNU General Public License for more details.                          *
19  *                                                                       *
20  * You should have received a copy of the GNU General Public License     *
21  * along with this program; if not, write to the                         *
22  * Free Software Foundation, Inc.,                                       *
23  * 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *
24  *                                                                       *
25  *************************************************************************
26
27         Module Name:
28         sync.c
29
30         Abstract:
31
32         Revision History:
33         Who                     When                    What
34         --------        ----------              ----------------------------------------------
35         John Chang      2004-09-01      modified for rt2561/2661
36 */
37 #include "../rt_config.h"
38
39 // 2.4 Ghz channel plan index in the TxPower arrays.
40 #define BG_BAND_REGION_0_START  0                       // 1,2,3,4,5,6,7,8,9,10,11
41 #define BG_BAND_REGION_0_SIZE   11
42 #define BG_BAND_REGION_1_START  0                       // 1,2,3,4,5,6,7,8,9,10,11,12,13
43 #define BG_BAND_REGION_1_SIZE   13
44 #define BG_BAND_REGION_2_START  9                       // 10,11
45 #define BG_BAND_REGION_2_SIZE   2
46 #define BG_BAND_REGION_3_START  9                       // 10,11,12,13
47 #define BG_BAND_REGION_3_SIZE   4
48 #define BG_BAND_REGION_4_START  13                      // 14
49 #define BG_BAND_REGION_4_SIZE   1
50 #define BG_BAND_REGION_5_START  0                       // 1,2,3,4,5,6,7,8,9,10,11,12,13,14
51 #define BG_BAND_REGION_5_SIZE   14
52 #define BG_BAND_REGION_6_START  2                       // 3,4,5,6,7,8,9
53 #define BG_BAND_REGION_6_SIZE   7
54 #define BG_BAND_REGION_7_START  4                       // 5,6,7,8,9,10,11,12,13
55 #define BG_BAND_REGION_7_SIZE   9
56 #define BG_BAND_REGION_31_START 0                       // 1,2,3,4,5,6,7,8,9,10,11,12,13,14
57 #define BG_BAND_REGION_31_SIZE  14
58
59 // 5 Ghz channel plan index in the TxPower arrays.
60 UCHAR A_BAND_REGION_0_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165};
61 UCHAR A_BAND_REGION_1_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140};
62 UCHAR A_BAND_REGION_2_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64};
63 UCHAR A_BAND_REGION_3_CHANNEL_LIST[]={52, 56, 60, 64, 149, 153, 157, 161};
64 UCHAR A_BAND_REGION_4_CHANNEL_LIST[]={149, 153, 157, 161, 165};
65 UCHAR A_BAND_REGION_5_CHANNEL_LIST[]={149, 153, 157, 161};
66 UCHAR A_BAND_REGION_6_CHANNEL_LIST[]={36, 40, 44, 48};
67 UCHAR A_BAND_REGION_7_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165};
68 UCHAR A_BAND_REGION_8_CHANNEL_LIST[]={52, 56, 60, 64};
69 UCHAR A_BAND_REGION_9_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 132, 136, 140, 149, 153, 157, 161, 165};
70 UCHAR A_BAND_REGION_10_CHANNEL_LIST[]={36, 40, 44, 48, 149, 153, 157, 161, 165};
71 UCHAR A_BAND_REGION_11_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 149, 153, 157, 161};
72
73 //BaSizeArray follows the 802.11n definition as MaxRxFactor.  2^(13+factor) bytes. When factor =0, it's about Ba buffer size =8.
74 UCHAR BaSizeArray[4] = {8,16,32,64};
75
76 /*
77         ==========================================================================
78         Description:
79                 Update StaCfg->ChannelList[] according to 1) Country Region 2) RF IC type,
80                 and 3) PHY-mode user selected.
81                 The outcome is used by driver when doing site survey.
82
83         IRQL = PASSIVE_LEVEL
84         IRQL = DISPATCH_LEVEL
85
86         ==========================================================================
87  */
88 VOID BuildChannelList(
89         IN PRTMP_ADAPTER pAd)
90 {
91         UCHAR i, j, index=0, num=0;
92         PUCHAR  pChannelList = NULL;
93
94         NdisZeroMemory(pAd->ChannelList, MAX_NUM_OF_CHANNELS * sizeof(CHANNEL_TX_POWER));
95
96         // if not 11a-only mode, channel list starts from 2.4Ghz band
97         if ((pAd->CommonCfg.PhyMode != PHY_11A)
98                 && (pAd->CommonCfg.PhyMode != PHY_11AN_MIXED) && (pAd->CommonCfg.PhyMode != PHY_11N_5G)
99         )
100         {
101                 switch (pAd->CommonCfg.CountryRegion  & 0x7f)
102                 {
103                         case REGION_0_BG_BAND:  // 1 -11
104                                 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_0_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_0_SIZE);
105                                 index += BG_BAND_REGION_0_SIZE;
106                                 break;
107                         case REGION_1_BG_BAND:  // 1 - 13
108                                 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_1_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_1_SIZE);
109                                 index += BG_BAND_REGION_1_SIZE;
110                                 break;
111                         case REGION_2_BG_BAND:  // 10 - 11
112                                 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_2_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_2_SIZE);
113                                 index += BG_BAND_REGION_2_SIZE;
114                                 break;
115                         case REGION_3_BG_BAND:  // 10 - 13
116                                 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_3_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_3_SIZE);
117                                 index += BG_BAND_REGION_3_SIZE;
118                                 break;
119                         case REGION_4_BG_BAND:  // 14
120                                 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_4_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_4_SIZE);
121                                 index += BG_BAND_REGION_4_SIZE;
122                                 break;
123                         case REGION_5_BG_BAND:  // 1 - 14
124                                 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_5_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_5_SIZE);
125                                 index += BG_BAND_REGION_5_SIZE;
126                                 break;
127                         case REGION_6_BG_BAND:  // 3 - 9
128                                 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_6_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_6_SIZE);
129                                 index += BG_BAND_REGION_6_SIZE;
130                                 break;
131                         case REGION_7_BG_BAND:  // 5 - 13
132                                 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_7_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_7_SIZE);
133                                 index += BG_BAND_REGION_7_SIZE;
134                                 break;
135                         case REGION_31_BG_BAND: // 1 - 14
136                                 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_31_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_31_SIZE);
137                                 index += BG_BAND_REGION_31_SIZE;
138                                 break;
139                         default:            // Error. should never happen
140                                 break;
141                 }
142                 for (i=0; i<index; i++)
143                         pAd->ChannelList[i].MaxTxPwr = 20;
144         }
145
146         if ((pAd->CommonCfg.PhyMode == PHY_11A) || (pAd->CommonCfg.PhyMode == PHY_11ABG_MIXED)
147                 || (pAd->CommonCfg.PhyMode == PHY_11ABGN_MIXED) || (pAd->CommonCfg.PhyMode == PHY_11AN_MIXED)
148                 || (pAd->CommonCfg.PhyMode == PHY_11AGN_MIXED) || (pAd->CommonCfg.PhyMode == PHY_11N_5G)
149         )
150         {
151                 switch (pAd->CommonCfg.CountryRegionForABand & 0x7f)
152                 {
153                         case REGION_0_A_BAND:
154                                 num = sizeof(A_BAND_REGION_0_CHANNEL_LIST)/sizeof(UCHAR);
155                                 pChannelList = A_BAND_REGION_0_CHANNEL_LIST;
156                                 break;
157                         case REGION_1_A_BAND:
158                                 num = sizeof(A_BAND_REGION_1_CHANNEL_LIST)/sizeof(UCHAR);
159                                 pChannelList = A_BAND_REGION_1_CHANNEL_LIST;
160                                 break;
161                         case REGION_2_A_BAND:
162                                 num = sizeof(A_BAND_REGION_2_CHANNEL_LIST)/sizeof(UCHAR);
163                                 pChannelList = A_BAND_REGION_2_CHANNEL_LIST;
164                                 break;
165                         case REGION_3_A_BAND:
166                                 num = sizeof(A_BAND_REGION_3_CHANNEL_LIST)/sizeof(UCHAR);
167                                 pChannelList = A_BAND_REGION_3_CHANNEL_LIST;
168                                 break;
169                         case REGION_4_A_BAND:
170                                 num = sizeof(A_BAND_REGION_4_CHANNEL_LIST)/sizeof(UCHAR);
171                                 pChannelList = A_BAND_REGION_4_CHANNEL_LIST;
172                                 break;
173                         case REGION_5_A_BAND:
174                                 num = sizeof(A_BAND_REGION_5_CHANNEL_LIST)/sizeof(UCHAR);
175                                 pChannelList = A_BAND_REGION_5_CHANNEL_LIST;
176                                 break;
177                         case REGION_6_A_BAND:
178                                 num = sizeof(A_BAND_REGION_6_CHANNEL_LIST)/sizeof(UCHAR);
179                                 pChannelList = A_BAND_REGION_6_CHANNEL_LIST;
180                                 break;
181                         case REGION_7_A_BAND:
182                                 num = sizeof(A_BAND_REGION_7_CHANNEL_LIST)/sizeof(UCHAR);
183                                 pChannelList = A_BAND_REGION_7_CHANNEL_LIST;
184                                 break;
185                         case REGION_8_A_BAND:
186                                 num = sizeof(A_BAND_REGION_8_CHANNEL_LIST)/sizeof(UCHAR);
187                                 pChannelList = A_BAND_REGION_8_CHANNEL_LIST;
188                                 break;
189                         case REGION_9_A_BAND:
190                                 num = sizeof(A_BAND_REGION_9_CHANNEL_LIST)/sizeof(UCHAR);
191                                 pChannelList = A_BAND_REGION_9_CHANNEL_LIST;
192                                 break;
193
194                         case REGION_10_A_BAND:
195                                 num = sizeof(A_BAND_REGION_10_CHANNEL_LIST)/sizeof(UCHAR);
196                                 pChannelList = A_BAND_REGION_10_CHANNEL_LIST;
197                                 break;
198
199                         case REGION_11_A_BAND:
200                                 num = sizeof(A_BAND_REGION_11_CHANNEL_LIST)/sizeof(UCHAR);
201                                 pChannelList = A_BAND_REGION_11_CHANNEL_LIST;
202                                 break;
203
204                         default:            // Error. should never happen
205                                 DBGPRINT(RT_DEBUG_WARN,("countryregion=%d not support", pAd->CommonCfg.CountryRegionForABand));
206                                 break;
207                 }
208
209                 if (num != 0)
210                 {
211                         UCHAR RadarCh[15]={52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140};
212                         for (i=0; i<num; i++)
213                         {
214                                 for (j=0; j<MAX_NUM_OF_CHANNELS; j++)
215                                 {
216                                         if (pChannelList[i] == pAd->TxPower[j].Channel)
217                                                 NdisMoveMemory(&pAd->ChannelList[index+i], &pAd->TxPower[j], sizeof(CHANNEL_TX_POWER));
218                                         }
219                                 for (j=0; j<15; j++)
220                                 {
221                                         if (pChannelList[i] == RadarCh[j])
222                                                 pAd->ChannelList[index+i].DfsReq = TRUE;
223                                 }
224                                 pAd->ChannelList[index+i].MaxTxPwr = 20;
225                         }
226                         index += num;
227                 }
228         }
229
230         pAd->ChannelListNum = index;
231         DBGPRINT(RT_DEBUG_TRACE,("country code=%d/%d, RFIC=%d, PHY mode=%d, support %d channels\n",
232                 pAd->CommonCfg.CountryRegion, pAd->CommonCfg.CountryRegionForABand, pAd->RfIcType, pAd->CommonCfg.PhyMode, pAd->ChannelListNum));
233 #ifdef DBG
234         for (i=0;i<pAd->ChannelListNum;i++)
235         {
236                 DBGPRINT_RAW(RT_DEBUG_TRACE,("BuildChannel # %d :: Pwr0 = %d, Pwr1 =%d, \n ", pAd->ChannelList[i].Channel, pAd->ChannelList[i].Power, pAd->ChannelList[i].Power2));
237         }
238 #endif
239 }
240
241 /*
242         ==========================================================================
243         Description:
244                 This routine return the first channel number according to the country
245                 code selection and RF IC selection (signal band or dual band). It is called
246                 whenever driver need to start a site survey of all supported channels.
247         Return:
248                 ch - the first channel number of current country code setting
249
250         IRQL = PASSIVE_LEVEL
251
252         ==========================================================================
253  */
254 UCHAR FirstChannel(
255         IN PRTMP_ADAPTER pAd)
256 {
257         return pAd->ChannelList[0].Channel;
258 }
259
260 /*
261         ==========================================================================
262         Description:
263                 This routine returns the next channel number. This routine is called
264                 during driver need to start a site survey of all supported channels.
265         Return:
266                 next_channel - the next channel number valid in current country code setting.
267         Note:
268                 return 0 if no more next channel
269         ==========================================================================
270  */
271 UCHAR NextChannel(
272         IN PRTMP_ADAPTER pAd,
273         IN UCHAR channel)
274 {
275         int i;
276         UCHAR next_channel = 0;
277
278         for (i = 0; i < (pAd->ChannelListNum - 1); i++)
279                 if (channel == pAd->ChannelList[i].Channel)
280                 {
281                         next_channel = pAd->ChannelList[i+1].Channel;
282                         break;
283         }
284         return next_channel;
285 }
286
287 /*
288         ==========================================================================
289         Description:
290                 This routine is for Cisco Compatible Extensions 2.X
291                 Spec31. AP Control of Client Transmit Power
292         Return:
293                 None
294         Note:
295            Required by Aironet dBm(mW)
296                    0dBm(1mW),   1dBm(5mW), 13dBm(20mW), 15dBm(30mW),
297                   17dBm(50mw), 20dBm(100mW)
298
299            We supported
300                    3dBm(Lowest), 6dBm(10%), 9dBm(25%), 12dBm(50%),
301                   14dBm(75%),   15dBm(100%)
302
303                 The client station's actual transmit power shall be within +/- 5dB of
304                 the minimum value or next lower value.
305         ==========================================================================
306  */
307 VOID ChangeToCellPowerLimit(
308         IN PRTMP_ADAPTER pAd,
309         IN UCHAR         AironetCellPowerLimit)
310 {
311         //valud 0xFF means that hasn't found power limit information
312         //from the AP's Beacon/Probe response.
313         if (AironetCellPowerLimit == 0xFF)
314                 return;
315
316         if (AironetCellPowerLimit < 6) //Used Lowest Power Percentage.
317                 pAd->CommonCfg.TxPowerPercentage = 6;
318         else if (AironetCellPowerLimit < 9)
319                 pAd->CommonCfg.TxPowerPercentage = 10;
320         else if (AironetCellPowerLimit < 12)
321                 pAd->CommonCfg.TxPowerPercentage = 25;
322         else if (AironetCellPowerLimit < 14)
323                 pAd->CommonCfg.TxPowerPercentage = 50;
324         else if (AironetCellPowerLimit < 15)
325                 pAd->CommonCfg.TxPowerPercentage = 75;
326         else
327                 pAd->CommonCfg.TxPowerPercentage = 100; //else used maximum
328
329         if (pAd->CommonCfg.TxPowerPercentage > pAd->CommonCfg.TxPowerDefault)
330                 pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
331
332 }
333
334 CHAR    ConvertToRssi(
335         IN PRTMP_ADAPTER pAd,
336         IN      CHAR                    Rssi,
337         IN  UCHAR   RssiNumber)
338 {
339         UCHAR   RssiOffset, LNAGain;
340
341         // Rssi equals to zero should be an invalid value
342         if (Rssi == 0)
343                 return -99;
344
345         LNAGain = GET_LNA_GAIN(pAd);
346     if (pAd->LatchRfRegs.Channel > 14)
347     {
348         if (RssiNumber == 0)
349                         RssiOffset = pAd->ARssiOffset0;
350                 else if (RssiNumber == 1)
351                         RssiOffset = pAd->ARssiOffset1;
352                 else
353                         RssiOffset = pAd->ARssiOffset2;
354     }
355     else
356     {
357         if (RssiNumber == 0)
358                         RssiOffset = pAd->BGRssiOffset0;
359                 else if (RssiNumber == 1)
360                         RssiOffset = pAd->BGRssiOffset1;
361                 else
362                         RssiOffset = pAd->BGRssiOffset2;
363     }
364
365     return (-12 - RssiOffset - LNAGain - Rssi);
366 }
367
368 /*
369         ==========================================================================
370         Description:
371                 Scan next channel
372         ==========================================================================
373  */
374 VOID ScanNextChannel(
375         IN PRTMP_ADAPTER pAd)
376 {
377         HEADER_802_11   Hdr80211;
378         PUCHAR          pOutBuffer = NULL;
379         NDIS_STATUS     NStatus;
380         ULONG           FrameLen = 0;
381         UCHAR           SsidLen = 0, ScanType = pAd->MlmeAux.ScanType, BBPValue = 0;
382         USHORT          Status;
383         PHEADER_802_11  pHdr80211;
384         UINT                    ScanTimeIn5gChannel = SHORT_CHANNEL_TIME;
385
386         IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
387         {
388                 if (MONITOR_ON(pAd))
389                         return;
390         }
391
392         if (pAd->MlmeAux.Channel == 0)
393         {
394                 if ((pAd->CommonCfg.BBPCurrentBW == BW_40)
395                         && (INFRA_ON(pAd)
396                                 || (pAd->OpMode == OPMODE_AP))
397                         )
398                 {
399                         AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
400                         AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
401                         RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
402                         BBPValue &= (~0x18);
403                         BBPValue |= 0x10;
404                         RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
405                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to 40MHz channel %d, Total BSS[%02d]\n",pAd->CommonCfg.CentralChannel, pAd->ScanTab.BssNr));
406                 }
407                 else
408                 {
409                         AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
410                         AsicLockChannel(pAd, pAd->CommonCfg.Channel);
411                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to channel %d, Total BSS[%02d]\n",pAd->CommonCfg.Channel, pAd->ScanTab.BssNr));
412                 }
413
414                 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
415                 {
416                         //
417                         // To prevent data lost.
418                         // Send an NULL data with turned PSM bit on to current associated AP before SCAN progress.
419                         // Now, we need to send an NULL data with turned PSM bit off to AP, when scan progress done
420                         //
421                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) && (INFRA_ON(pAd)))
422                         {
423                                 NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer);
424                                 if (NStatus     == NDIS_STATUS_SUCCESS)
425                                 {
426                                         pHdr80211 = (PHEADER_802_11) pOutBuffer;
427                                         MgtMacHeaderInit(pAd, pHdr80211, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
428                                         pHdr80211->Duration = 0;
429                                         pHdr80211->FC.Type = BTYPE_DATA;
430                                         pHdr80211->FC.PwrMgmt = (pAd->StaCfg.Psm == PWR_SAVE);
431
432                                         // Send using priority queue
433                                         MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
434                                         DBGPRINT(RT_DEBUG_TRACE, ("MlmeScanReqAction -- Send PSM Data frame\n"));
435                                         MlmeFreeMemory(pAd, pOutBuffer);
436                                         RTMPusecDelay(5000);
437                                 }
438                         }
439
440                         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
441                         Status = MLME_SUCCESS;
442                         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
443                 }
444
445                 RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
446         }
447         else
448         {
449                 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
450                 {
451                 // BBP and RF are not accessible in PS mode, we has to wake them up first
452                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
453                                 AsicForceWakeup(pAd, FROM_TX);
454
455                         // leave PSM during scanning. otherwise we may lost ProbeRsp & BEACON
456                         if (pAd->StaCfg.Psm == PWR_SAVE)
457                                 MlmeSetPsmBit(pAd, PWR_ACTIVE);
458                 }
459
460                 AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, TRUE);
461                 AsicLockChannel(pAd, pAd->MlmeAux.Channel);
462
463                 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
464                 {
465                         if (pAd->MlmeAux.Channel > 14)
466                         {
467                                 if ((pAd->CommonCfg.bIEEE80211H == 1) && RadarChannelCheck(pAd, pAd->MlmeAux.Channel))
468                                 {
469                                         ScanType = SCAN_PASSIVE;
470                                         ScanTimeIn5gChannel = MIN_CHANNEL_TIME;
471                                 }
472                         }
473                 }
474
475                 //Global country domain(ch1-11:active scan, ch12-14 passive scan)
476                 if ((pAd->MlmeAux.Channel <= 14) && (pAd->MlmeAux.Channel >= 12) && ((pAd->CommonCfg.CountryRegion & 0x7f) == REGION_31_BG_BAND))
477                 {
478                         ScanType = SCAN_PASSIVE;
479                 }
480
481                 // We need to shorten active scan time in order for WZC connect issue
482                 // Chnage the channel scan time for CISCO stuff based on its IAPP announcement
483                 if (ScanType == FAST_SCAN_ACTIVE)
484                         RTMPSetTimer(&pAd->MlmeAux.ScanTimer, FAST_ACTIVE_SCAN_TIME);
485                 else if (((ScanType == SCAN_CISCO_ACTIVE) ||
486                                 (ScanType == SCAN_CISCO_PASSIVE) ||
487                                 (ScanType == SCAN_CISCO_CHANNEL_LOAD) ||
488                                 (ScanType == SCAN_CISCO_NOISE)) && (pAd->OpMode == OPMODE_STA))
489                 {
490                         if (pAd->StaCfg.CCXScanTime < 25)
491                                 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, pAd->StaCfg.CCXScanTime * 2);
492                         else
493                                 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, pAd->StaCfg.CCXScanTime);
494                 }
495                 else // must be SCAN_PASSIVE or SCAN_ACTIVE
496                 {
497                         if ((pAd->CommonCfg.PhyMode == PHY_11ABG_MIXED)
498                                 || (pAd->CommonCfg.PhyMode == PHY_11ABGN_MIXED) || (pAd->CommonCfg.PhyMode == PHY_11AGN_MIXED)
499                         )
500                         {
501                                 if (pAd->MlmeAux.Channel > 14)
502                                         RTMPSetTimer(&pAd->MlmeAux.ScanTimer, ScanTimeIn5gChannel);
503                                 else
504                                 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, MIN_CHANNEL_TIME);
505                         }
506                         else
507                                 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, MAX_CHANNEL_TIME);
508                 }
509
510                 if ((ScanType == SCAN_ACTIVE) || (ScanType == FAST_SCAN_ACTIVE) ||
511                         (ScanType == SCAN_CISCO_ACTIVE))
512                 {
513                         NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
514                         if (NStatus != NDIS_STATUS_SUCCESS)
515                         {
516                                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - ScanNextChannel() allocate memory fail\n"));
517
518                                 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
519                                 {
520                                         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
521                                         Status = MLME_FAIL_NO_RESOURCE;
522                                         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
523                                 }
524
525                                 return;
526                         }
527
528                         // There is no need to send broadcast probe request if active scan is in effect.
529                         if ((ScanType == SCAN_ACTIVE) || (ScanType == FAST_SCAN_ACTIVE)
530                                 )
531                                 SsidLen = pAd->MlmeAux.SsidLen;
532                         else
533                                 SsidLen = 0;
534
535                         MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
536                         MakeOutgoingFrame(pOutBuffer,               &FrameLen,
537                                                           sizeof(HEADER_802_11),    &Hdr80211,
538                                                           1,                        &SsidIe,
539                                                           1,                        &SsidLen,
540                                                           SsidLen,                              pAd->MlmeAux.Ssid,
541                                                           1,                        &SupRateIe,
542                                                           1,                        &pAd->CommonCfg.SupRateLen,
543                                                           pAd->CommonCfg.SupRateLen,  pAd->CommonCfg.SupRate,
544                                                           END_OF_ARGS);
545
546                         if (pAd->CommonCfg.ExtRateLen)
547                         {
548                                 ULONG Tmp;
549                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &Tmp,
550                                                                   1,                                &ExtRateIe,
551                                                                   1,                                &pAd->CommonCfg.ExtRateLen,
552                                                                   pAd->CommonCfg.ExtRateLen,          pAd->CommonCfg.ExtRate,
553                                                                   END_OF_ARGS);
554                                 FrameLen += Tmp;
555                         }
556
557                         if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
558                         {
559                                 ULONG   Tmp;
560                                 UCHAR   HtLen;
561                                 UCHAR   BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
562
563                                 if (pAd->bBroadComHT == TRUE)
564                                 {
565                                         HtLen = pAd->MlmeAux.HtCapabilityLen + 4;
566
567                                         MakeOutgoingFrame(pOutBuffer + FrameLen,          &Tmp,
568                                                                         1,                                &WpaIe,
569                                                                         1,                                &HtLen,
570                                                                         4,                                &BROADCOM[0],
571                                                                         pAd->MlmeAux.HtCapabilityLen,     &pAd->MlmeAux.HtCapability,
572                                                                         END_OF_ARGS);
573                                 }
574                                 else
575                                 {
576                                         HtLen = pAd->MlmeAux.HtCapabilityLen;
577
578                                         MakeOutgoingFrame(pOutBuffer + FrameLen,          &Tmp,
579                                                                         1,                                &HtCapIe,
580                                                                         1,                                &HtLen,
581                                                                         HtLen,                            &pAd->CommonCfg.HtCapability,
582                                                                         END_OF_ARGS);
583                                 }
584                                 FrameLen += Tmp;
585                         }
586
587                         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
588                         MlmeFreeMemory(pAd, pOutBuffer);
589                 }
590
591                 // For SCAN_CISCO_PASSIVE, do nothing and silently wait for beacon or other probe reponse
592
593                 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
594                         pAd->Mlme.SyncMachine.CurrState = SCAN_LISTEN;
595         }
596 }
597
598 VOID MgtProbReqMacHeaderInit(
599         IN      PRTMP_ADAPTER   pAd,
600         IN OUT PHEADER_802_11 pHdr80211,
601         IN UCHAR SubType,
602         IN UCHAR ToDs,
603         IN PUCHAR pDA,
604         IN PUCHAR pBssid)
605 {
606         NdisZeroMemory(pHdr80211, sizeof(HEADER_802_11));
607
608         pHdr80211->FC.Type = BTYPE_MGMT;
609         pHdr80211->FC.SubType = SubType;
610         if (SubType == SUBTYPE_ACK)
611                 pHdr80211->FC.Type = BTYPE_CNTL;
612         pHdr80211->FC.ToDs = ToDs;
613         COPY_MAC_ADDR(pHdr80211->Addr1, pDA);
614         COPY_MAC_ADDR(pHdr80211->Addr2, pAd->CurrentAddress);
615         COPY_MAC_ADDR(pHdr80211->Addr3, pBssid);
616 }
617
618