git.oblomov.eu Git - linux-2.6/blob - drivers/staging/rt2860/sta/sync.c

   1 /*
   2  *************************************************************************
   3  * Ralink Tech Inc.
   4  * 5F., No.36, Taiyuan St., Jhubei City,
   5  * Hsinchu County 302,
   6  * Taiwan, R.O.C.
   7  *
   8  * (c) Copyright 2002-2007, Ralink Technology, Inc.
   9  *
  10  * This program is free software; you can redistribute it and/or modify  *
  11  * it under the terms of the GNU General Public License as published by  *
  12  * the Free Software Foundation; either version 2 of the License, or     *
  13  * (at your option) any later version.                                   *
  14  *                                                                       *
  15  * This program is distributed in the hope that it will be useful,       *
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of        *
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
  18  * GNU General Public License for more details.                          *
  19  *                                                                       *
  20  * You should have received a copy of the GNU General Public License     *
  21  * along with this program; if not, write to the                         *
  22  * Free Software Foundation, Inc.,                                       *
  23  * 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *
  24  *                                                                       *
  25  *************************************************************************
  26
  27         Module Name:
  28         sync.c
  29
  30         Abstract:
  31
  32         Revision History:
  33         Who                     When                    What
  34         --------        ----------              ----------------------------------------------
  35         John Chang      2004-09-01      modified for rt2561/2661
  36         Jan Lee         2006-08-01      modified for rt2860 for 802.11n
  37 */
  38 #include "../rt_config.h"
  39
  40 #define AC0_DEF_TXOP            0
  41 #define AC1_DEF_TXOP            0
  42 #define AC2_DEF_TXOP            94
  43 #define AC3_DEF_TXOP            47
  44
  45 VOID    AdhocTurnOnQos(
  46         IN  PRTMP_ADAPTER pAd)
  47 {
  48         // Turn on QOs if use HT rate.
  49         if (pAd->CommonCfg.APEdcaParm.bValid == FALSE)
  50         {
  51                 pAd->CommonCfg.APEdcaParm.bValid = TRUE;
  52                 pAd->CommonCfg.APEdcaParm.Aifsn[0] = 3;
  53                 pAd->CommonCfg.APEdcaParm.Aifsn[1] = 7;
  54                 pAd->CommonCfg.APEdcaParm.Aifsn[2] = 1;
  55                 pAd->CommonCfg.APEdcaParm.Aifsn[3] = 1;
  56
  57                 pAd->CommonCfg.APEdcaParm.Cwmin[0] = 4;
  58                 pAd->CommonCfg.APEdcaParm.Cwmin[1] = 4;
  59                 pAd->CommonCfg.APEdcaParm.Cwmin[2] = 3;
  60                 pAd->CommonCfg.APEdcaParm.Cwmin[3] = 2;
  61
  62                 pAd->CommonCfg.APEdcaParm.Cwmax[0] = 10;
  63                 pAd->CommonCfg.APEdcaParm.Cwmax[1] = 6;
  64                 pAd->CommonCfg.APEdcaParm.Cwmax[2] = 4;
  65                 pAd->CommonCfg.APEdcaParm.Cwmax[3] = 3;
  66
  67                 pAd->CommonCfg.APEdcaParm.Txop[0]  = 0;
  68                 pAd->CommonCfg.APEdcaParm.Txop[1]  = 0;
  69                 pAd->CommonCfg.APEdcaParm.Txop[2]  = AC2_DEF_TXOP;
  70                 pAd->CommonCfg.APEdcaParm.Txop[3]  = AC3_DEF_TXOP;
  71         }
  72         AsicSetEdcaParm(pAd, &pAd->CommonCfg.APEdcaParm);
  73 }
  74
  75 /*
  76         ==========================================================================
  77         Description:
  78                 The sync state machine,
  79         Parameters:
  80                 Sm - pointer to the state machine
  81         Note:
  82                 the state machine looks like the following
  83
  84         ==========================================================================
  85  */
  86 VOID SyncStateMachineInit(
  87         IN PRTMP_ADAPTER pAd,
  88         IN STATE_MACHINE *Sm,
  89         OUT STATE_MACHINE_FUNC Trans[])
  90 {
  91         StateMachineInit(Sm, Trans, MAX_SYNC_STATE, MAX_SYNC_MSG, (STATE_MACHINE_FUNC)Drop, SYNC_IDLE, SYNC_MACHINE_BASE);
  92
  93         // column 1
  94         StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)MlmeScanReqAction);
  95         StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)MlmeJoinReqAction);
  96         StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)MlmeStartReqAction);
  97         StateMachineSetAction(Sm, SYNC_IDLE, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeacon);
  98         StateMachineSetAction(Sm, SYNC_IDLE, MT2_PEER_PROBE_REQ, (STATE_MACHINE_FUNC)PeerProbeReqAction);
  99
 100         //column 2
 101         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenScan);
 102         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenJoin);
 103         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenStart);
 104         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeaconAtJoinAction);
 105         StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_BEACON_TIMEOUT, (STATE_MACHINE_FUNC)BeaconTimeoutAtJoinAction);
 106
 107         // column 3
 108         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenScan);
 109         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenJoin);
 110         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenStart);
 111         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeaconAtScanAction);
 112         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_PEER_PROBE_RSP, (STATE_MACHINE_FUNC)PeerBeaconAtScanAction);
 113         StateMachineSetAction(Sm, SCAN_LISTEN, MT2_SCAN_TIMEOUT, (STATE_MACHINE_FUNC)ScanTimeoutAction);
 114
 115         // timer init
 116         RTMPInitTimer(pAd, &pAd->MlmeAux.BeaconTimer, GET_TIMER_FUNCTION(BeaconTimeout), pAd, FALSE);
 117         RTMPInitTimer(pAd, &pAd->MlmeAux.ScanTimer, GET_TIMER_FUNCTION(ScanTimeout), pAd, FALSE);
 118 }
 119
 120 /*
 121         ==========================================================================
 122         Description:
 123                 Beacon timeout handler, executed in timer thread
 124
 125         IRQL = DISPATCH_LEVEL
 126
 127         ==========================================================================
 128  */
 129 VOID BeaconTimeout(
 130         IN PVOID SystemSpecific1,
 131         IN PVOID FunctionContext,
 132         IN PVOID SystemSpecific2,
 133         IN PVOID SystemSpecific3)
 134 {
 135         RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
 136
 137         DBGPRINT(RT_DEBUG_TRACE,("SYNC - BeaconTimeout\n"));
 138
 139         // Do nothing if the driver is starting halt state.
 140         // This might happen when timer already been fired before cancel timer with mlmehalt
 141         if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))
 142                 return;
 143
 144 #ifdef DOT11_N_SUPPORT
 145         if ((pAd->CommonCfg.BBPCurrentBW == BW_40)
 146                 )
 147         {
 148                 UCHAR        BBPValue = 0;
 149                 AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
 150                 AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
 151                 RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
 152                 BBPValue &= (~0x18);
 153                 BBPValue |= 0x10;
 154                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
 155                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to 40MHz channel %d, Total BSS[%02d]\n",pAd->CommonCfg.CentralChannel, pAd->ScanTab.BssNr));
 156         }
 157 #endif // DOT11_N_SUPPORT //
 158
 159         MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_BEACON_TIMEOUT, 0, NULL);
 160         RT28XX_MLME_HANDLER(pAd);
 161 }
 162
 163 /*
 164         ==========================================================================
 165         Description:
 166                 Scan timeout handler, executed in timer thread
 167
 168         IRQL = DISPATCH_LEVEL
 169
 170         ==========================================================================
 171  */
 172 VOID ScanTimeout(
 173         IN PVOID SystemSpecific1,
 174         IN PVOID FunctionContext,
 175         IN PVOID SystemSpecific2,
 176         IN PVOID SystemSpecific3)
 177 {
 178         RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
 179
 180
 181         // Do nothing if the driver is starting halt state.
 182         // This might happen when timer already been fired before cancel timer with mlmehalt
 183         if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))
 184                 return;
 185
 186         if (MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_SCAN_TIMEOUT, 0, NULL))
 187         {
 188                 RT28XX_MLME_HANDLER(pAd);
 189         }
 190         else
 191         {
 192                 // To prevent SyncMachine.CurrState is SCAN_LISTEN forever.
 193                 pAd->MlmeAux.Channel = 0;
 194                 ScanNextChannel(pAd);
 195                 if (pAd->CommonCfg.bWirelessEvent)
 196                 {
 197                         RTMPSendWirelessEvent(pAd, IW_SCAN_ENQUEUE_FAIL_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
 198                 }
 199         }
 200 }
 201
 202 /*
 203         ==========================================================================
 204         Description:
 205                 MLME SCAN req state machine procedure
 206         ==========================================================================
 207  */
 208 VOID MlmeScanReqAction(
 209         IN PRTMP_ADAPTER pAd,
 210         IN MLME_QUEUE_ELEM *Elem)
 211 {
 212         UCHAR          Ssid[MAX_LEN_OF_SSID], SsidLen, ScanType, BssType, BBPValue = 0;
 213         BOOLEAN        TimerCancelled;
 214         ULONG              Now;
 215         USHORT         Status;
 216         PHEADER_802_11 pHdr80211;
 217         PUCHAR         pOutBuffer = NULL;
 218         NDIS_STATUS    NStatus;
 219
 220         // Check the total scan tries for one single OID command
 221         // If this is the CCX 2.0 Case, skip that!
 222         if ( !RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_START_UP))
 223         {
 224                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeScanReqAction before Startup\n"));
 225                 return;
 226         }
 227
 228         // Increase the scan retry counters.
 229         pAd->StaCfg.ScanCnt++;
 230
 231     if ((OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE)) &&
 232         (IDLE_ON(pAd)) &&
 233                 (pAd->StaCfg.bRadio == TRUE) &&
 234                 (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_IDLE_RADIO_OFF)))
 235         {
 236                 RT28xxPciAsicRadioOn(pAd, GUI_IDLE_POWER_SAVE);
 237         }
 238
 239         // first check the parameter sanity
 240         if (MlmeScanReqSanity(pAd,
 241                                                   Elem->Msg,
 242                                                   Elem->MsgLen,
 243                                                   &BssType,
 244                                                   Ssid,
 245                                                   &SsidLen,
 246                                                   &ScanType))
 247         {
 248
 249                 // Check for channel load and noise hist request
 250                 // Suspend MSDU only at scan request, not the last two mentioned
 251                 if ((ScanType == SCAN_CISCO_NOISE) || (ScanType == SCAN_CISCO_CHANNEL_LOAD))
 252                 {
 253                         if (pAd->StaCfg.CCXScanChannel != pAd->CommonCfg.Channel)
 254                                 RTMPSuspendMsduTransmission(pAd);                       // Suspend MSDU transmission here
 255                 }
 256                 else
 257                 {
 258                         // Suspend MSDU transmission here
 259                         RTMPSuspendMsduTransmission(pAd);
 260                 }
 261
 262                 //
 263                 // To prevent data lost.
 264                 // Send an NULL data with turned PSM bit on to current associated AP before SCAN progress.
 265                 // And should send an NULL data with turned PSM bit off to AP, when scan progress done
 266                 //
 267                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) && (INFRA_ON(pAd)))
 268                 {
 269                         NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer);
 270                         if (NStatus     == NDIS_STATUS_SUCCESS)
 271                         {
 272                                 pHdr80211 = (PHEADER_802_11) pOutBuffer;
 273                                 MgtMacHeaderInit(pAd, pHdr80211, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
 274                                 pHdr80211->Duration = 0;
 275                                 pHdr80211->FC.Type = BTYPE_DATA;
 276                                 pHdr80211->FC.PwrMgmt = PWR_SAVE;
 277
 278                                 // Send using priority queue
 279                                 MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
 280                                 DBGPRINT(RT_DEBUG_TRACE, ("MlmeScanReqAction -- Send PSM Data frame for off channel RM\n"));
 281                                 MlmeFreeMemory(pAd, pOutBuffer);
 282                                 RTMPusecDelay(5000);
 283                         }
 284                 }
 285
 286                 NdisGetSystemUpTime(&Now);
 287                 pAd->StaCfg.LastScanTime = Now;
 288                 // reset all the timers
 289                 RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 290                 RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
 291
 292                 // record desired BSS parameters
 293                 pAd->MlmeAux.BssType = BssType;
 294                 pAd->MlmeAux.ScanType = ScanType;
 295                 pAd->MlmeAux.SsidLen = SsidLen;
 296         NdisZeroMemory(pAd->MlmeAux.Ssid, MAX_LEN_OF_SSID);
 297                 NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
 298
 299                 // start from the first channel
 300                 pAd->MlmeAux.Channel = FirstChannel(pAd);
 301
 302                 // Change the scan channel when dealing with CCX beacon report
 303                 if ((ScanType == SCAN_CISCO_PASSIVE) || (ScanType == SCAN_CISCO_ACTIVE) ||
 304                         (ScanType == SCAN_CISCO_CHANNEL_LOAD) || (ScanType == SCAN_CISCO_NOISE))
 305                         pAd->MlmeAux.Channel = pAd->StaCfg.CCXScanChannel;
 306
 307                 // Let BBP register at 20MHz to do scan
 308                 RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
 309                 BBPValue &= (~0x18);
 310                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
 311                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BBP R4 to 20MHz.l\n"));
 312                 ScanNextChannel(pAd);
 313         }
 314         else
 315         {
 316                 DBGPRINT_ERR(("SYNC - MlmeScanReqAction() sanity check fail\n"));
 317                 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 318                 Status = MLME_INVALID_FORMAT;
 319                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
 320         }
 321 }
 322
 323 /*
 324         ==========================================================================
 325         Description:
 326                 MLME JOIN req state machine procedure
 327         ==========================================================================
 328  */
 329 VOID MlmeJoinReqAction(
 330         IN PRTMP_ADAPTER pAd,
 331         IN MLME_QUEUE_ELEM *Elem)
 332 {
 333         UCHAR        BBPValue = 0;
 334         BSS_ENTRY    *pBss;
 335         BOOLEAN       TimerCancelled;
 336         HEADER_802_11 Hdr80211;
 337         NDIS_STATUS   NStatus;
 338         ULONG         FrameLen = 0;
 339         PUCHAR        pOutBuffer = NULL;
 340         PUCHAR        pSupRate = NULL;
 341         UCHAR         SupRateLen;
 342         PUCHAR        pExtRate = NULL;
 343         UCHAR         ExtRateLen;
 344         UCHAR         ASupRate[] = {0x8C, 0x12, 0x98, 0x24, 0xb0, 0x48, 0x60, 0x6C};
 345         UCHAR         ASupRateLen = sizeof(ASupRate)/sizeof(UCHAR);
 346         MLME_JOIN_REQ_STRUCT *pInfo = (MLME_JOIN_REQ_STRUCT *)(Elem->Msg);
 347
 348         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeJoinReqAction(BSS #%ld)\n", pInfo->BssIdx));
 349
 350     if ((OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE)) &&
 351         (IDLE_ON(pAd)) &&
 352                 (pAd->StaCfg.bRadio == TRUE) &&
 353                 (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_IDLE_RADIO_OFF)))
 354         {
 355                 RT28xxPciAsicRadioOn(pAd, GUI_IDLE_POWER_SAVE);
 356         }
 357
 358         // reset all the timers
 359         RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
 360         RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 361
 362         pBss = &pAd->MlmeAux.SsidBssTab.BssEntry[pInfo->BssIdx];
 363
 364         // record the desired SSID & BSSID we're waiting for
 365         COPY_MAC_ADDR(pAd->MlmeAux.Bssid, pBss->Bssid);
 366
 367         // If AP's SSID is not hidden, it is OK for updating ssid to MlmeAux again.
 368         if (pBss->Hidden == 0)
 369         {
 370                 NdisMoveMemory(pAd->MlmeAux.Ssid, pBss->Ssid, pBss->SsidLen);
 371                 pAd->MlmeAux.SsidLen = pBss->SsidLen;
 372         }
 373
 374         pAd->MlmeAux.BssType = pBss->BssType;
 375         pAd->MlmeAux.Channel = pBss->Channel;
 376         pAd->MlmeAux.CentralChannel = pBss->CentralChannel;
 377
 378 #ifdef EXT_BUILD_CHANNEL_LIST
 379         // Country IE of the AP will be evaluated and will be used.
 380         if ((pAd->StaCfg.IEEE80211dClientMode != Rt802_11_D_None) &&
 381                 (pBss->bHasCountryIE == TRUE))
 382         {
 383                 NdisMoveMemory(&pAd->CommonCfg.CountryCode[0], &pBss->CountryString[0], 2);
 384                 if (pBss->CountryString[2] == 'I')
 385                         pAd->CommonCfg.Geography = IDOR;
 386                 else if (pBss->CountryString[2] == 'O')
 387                         pAd->CommonCfg.Geography = ODOR;
 388                 else
 389                         pAd->CommonCfg.Geography = BOTH;
 390                 BuildChannelListEx(pAd);
 391         }
 392 #endif // EXT_BUILD_CHANNEL_LIST //
 393
 394         // Let BBP register at 20MHz to do scan
 395         RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
 396         BBPValue &= (~0x18);
 397         RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
 398         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BBP R4 to 20MHz.l\n"));
 399
 400         // switch channel and waiting for beacon timer
 401         AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, FALSE);
 402         AsicLockChannel(pAd, pAd->MlmeAux.Channel);
 403         RTMPSetTimer(&pAd->MlmeAux.BeaconTimer, JOIN_TIMEOUT);
 404
 405     do
 406         {
 407                 if (((pAd->CommonCfg.bIEEE80211H == 1) &&
 408             (pAd->MlmeAux.Channel > 14) &&
 409              RadarChannelCheck(pAd, pAd->MlmeAux.Channel))
 410 #ifdef CARRIER_DETECTION_SUPPORT // Roger sync Carrier
 411              || (pAd->CommonCfg.CarrierDetect.Enable == TRUE)
 412 #endif // CARRIER_DETECTION_SUPPORT //
 413             )
 414                 {
 415                         //
 416                         // We can't send any Probe request frame to meet 802.11h.
 417                         //
 418                         if (pBss->Hidden == 0)
 419                                 break;
 420                 }
 421
 422                 //
 423                 // send probe request
 424                 //
 425                 NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
 426                 if (NStatus == NDIS_STATUS_SUCCESS)
 427                 {
 428                         if (pAd->MlmeAux.Channel <= 14)
 429                         {
 430                                 pSupRate = pAd->CommonCfg.SupRate;
 431                                 SupRateLen = pAd->CommonCfg.SupRateLen;
 432                                 pExtRate = pAd->CommonCfg.ExtRate;
 433                                 ExtRateLen = pAd->CommonCfg.ExtRateLen;
 434                         }
 435                         else
 436                         {
 437                                 //
 438                                 // Overwrite Support Rate, CCK rate are not allowed
 439                                 //
 440                                 pSupRate = ASupRate;
 441                                 SupRateLen = ASupRateLen;
 442                                 ExtRateLen = 0;
 443                         }
 444
 445                         if (pAd->MlmeAux.BssType == BSS_INFRA)
 446                                 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, pAd->MlmeAux.Bssid, pAd->MlmeAux.Bssid);
 447                         else
 448                                 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
 449
 450                         MakeOutgoingFrame(pOutBuffer,               &FrameLen,
 451                                                           sizeof(HEADER_802_11),    &Hdr80211,
 452                                                           1,                        &SsidIe,
 453                                                           1,                        &pAd->MlmeAux.SsidLen,
 454                                                           pAd->MlmeAux.SsidLen,     pAd->MlmeAux.Ssid,
 455                                                           1,                        &SupRateIe,
 456                                                           1,                        &SupRateLen,
 457                                                           SupRateLen,               pSupRate,
 458                                                           END_OF_ARGS);
 459
 460                         if (ExtRateLen)
 461                         {
 462                                 ULONG Tmp;
 463                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &Tmp,
 464                                                                   1,                                &ExtRateIe,
 465                                                                   1,                                &ExtRateLen,
 466                                                                   ExtRateLen,                       pExtRate,
 467                                                                   END_OF_ARGS);
 468                                 FrameLen += Tmp;
 469                         }
 470
 471
 472                         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
 473                         MlmeFreeMemory(pAd, pOutBuffer);
 474                 }
 475     } while (FALSE);
 476
 477         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - Switch to ch %d, Wait BEACON from %02x:%02x:%02x:%02x:%02x:%02x\n",
 478                 pBss->Channel, pBss->Bssid[0], pBss->Bssid[1], pBss->Bssid[2], pBss->Bssid[3], pBss->Bssid[4], pBss->Bssid[5]));
 479
 480         pAd->Mlme.SyncMachine.CurrState = JOIN_WAIT_BEACON;
 481 }
 482
 483 /*
 484         ==========================================================================
 485         Description:
 486                 MLME START Request state machine procedure, starting an IBSS
 487         ==========================================================================
 488  */
 489 VOID MlmeStartReqAction(
 490         IN PRTMP_ADAPTER pAd,
 491         IN MLME_QUEUE_ELEM *Elem)
 492 {
 493         UCHAR         Ssid[MAX_LEN_OF_SSID], SsidLen;
 494         BOOLEAN       TimerCancelled;
 495
 496         // New for WPA security suites
 497         UCHAR                                           VarIE[MAX_VIE_LEN];     // Total VIE length = MAX_VIE_LEN - -5
 498         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 499         LARGE_INTEGER                           TimeStamp;
 500         BOOLEAN Privacy;
 501         USHORT Status;
 502
 503         // Init Variable IE structure
 504         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 505         pVIE->Length = 0;
 506         TimeStamp.u.LowPart  = 0;
 507         TimeStamp.u.HighPart = 0;
 508
 509         if (MlmeStartReqSanity(pAd, Elem->Msg, Elem->MsgLen, Ssid, &SsidLen))
 510         {
 511                 // reset all the timers
 512                 RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
 513                 RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 514
 515                 //
 516                 // Start a new IBSS. All IBSS parameters are decided now....
 517                 //
 518                 DBGPRINT(RT_DEBUG_TRACE, ("MlmeStartReqAction - Start a new IBSS. All IBSS parameters are decided now.... \n"));
 519                 pAd->MlmeAux.BssType           = BSS_ADHOC;
 520                 NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
 521                 pAd->MlmeAux.SsidLen           = SsidLen;
 522
 523                 // generate a radom number as BSSID
 524                 MacAddrRandomBssid(pAd, pAd->MlmeAux.Bssid);
 525                 DBGPRINT(RT_DEBUG_TRACE, ("MlmeStartReqAction - generate a radom number as BSSID \n"));
 526
 527                 Privacy = (pAd->StaCfg.WepStatus == Ndis802_11Encryption1Enabled) ||
 528                                   (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
 529                                   (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled);
 530                 pAd->MlmeAux.CapabilityInfo    = CAP_GENERATE(0,1,Privacy, (pAd->CommonCfg.TxPreamble == Rt802_11PreambleShort), 1, 0);
 531                 pAd->MlmeAux.BeaconPeriod      = pAd->CommonCfg.BeaconPeriod;
 532                 pAd->MlmeAux.AtimWin           = pAd->StaCfg.AtimWin;
 533                 pAd->MlmeAux.Channel           = pAd->CommonCfg.Channel;
 534
 535                 pAd->CommonCfg.CentralChannel  = pAd->CommonCfg.Channel;
 536                 pAd->MlmeAux.CentralChannel    = pAd->CommonCfg.CentralChannel;
 537
 538                 pAd->MlmeAux.SupRateLen= pAd->CommonCfg.SupRateLen;
 539                 NdisMoveMemory(pAd->MlmeAux.SupRate, pAd->CommonCfg.SupRate, MAX_LEN_OF_SUPPORTED_RATES);
 540                 RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
 541                 pAd->MlmeAux.ExtRateLen = pAd->CommonCfg.ExtRateLen;
 542                 NdisMoveMemory(pAd->MlmeAux.ExtRate, pAd->CommonCfg.ExtRate, MAX_LEN_OF_SUPPORTED_RATES);
 543                 RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
 544 #ifdef DOT11_N_SUPPORT
 545                 if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
 546                 {
 547                         RTMPUpdateHTIE(&pAd->CommonCfg.DesiredHtPhy, &pAd->StaCfg.DesiredHtPhyInfo.MCSSet[0], &pAd->MlmeAux.HtCapability, &pAd->MlmeAux.AddHtInfo);
 548                         pAd->MlmeAux.HtCapabilityLen = sizeof(HT_CAPABILITY_IE);
 549                         // Not turn pAd->StaActive.SupportedHtPhy.bHtEnable = TRUE here.
 550                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC -pAd->StaActive.SupportedHtPhy.bHtEnable = TRUE\n"));
 551                 }
 552                 else
 553 #endif // DOT11_N_SUPPORT //
 554                 {
 555                         pAd->MlmeAux.HtCapabilityLen = 0;
 556                         pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
 557                 }
 558                 // temporarily not support QOS in IBSS
 559                 NdisZeroMemory(&pAd->MlmeAux.APEdcaParm, sizeof(EDCA_PARM));
 560                 NdisZeroMemory(&pAd->MlmeAux.APQbssLoad, sizeof(QBSS_LOAD_PARM));
 561                 NdisZeroMemory(&pAd->MlmeAux.APQosCapability, sizeof(QOS_CAPABILITY_PARM));
 562
 563                 AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, FALSE);
 564                 AsicLockChannel(pAd, pAd->MlmeAux.Channel);
 565
 566                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeStartReqAction(ch= %d,sup rates= %d, ext rates=%d)\n",
 567                         pAd->MlmeAux.Channel, pAd->MlmeAux.SupRateLen, pAd->MlmeAux.ExtRateLen));
 568
 569                 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 570                 Status = MLME_SUCCESS;
 571                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
 572         }
 573         else
 574         {
 575                 DBGPRINT_ERR(("SYNC - MlmeStartReqAction() sanity check fail.\n"));
 576                 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 577                 Status = MLME_INVALID_FORMAT;
 578                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
 579         }
 580 }
 581
 582 /*
 583         ==========================================================================
 584         Description:
 585                 peer sends beacon back when scanning
 586         ==========================================================================
 587  */
 588 VOID PeerBeaconAtScanAction(
 589         IN PRTMP_ADAPTER pAd,
 590         IN MLME_QUEUE_ELEM *Elem)
 591 {
 592         UCHAR           Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
 593         UCHAR           Ssid[MAX_LEN_OF_SSID], BssType, Channel, NewChannel,
 594                                         SsidLen, DtimCount, DtimPeriod, BcastFlag, MessageToMe;
 595         CF_PARM         CfParm;
 596         USHORT          BeaconPeriod, AtimWin, CapabilityInfo;
 597         PFRAME_802_11   pFrame;
 598         LARGE_INTEGER   TimeStamp;
 599         UCHAR           Erp;
 600         UCHAR           SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
 601         UCHAR                   SupRateLen, ExtRateLen;
 602         USHORT                  LenVIE;
 603         UCHAR                   CkipFlag;
 604         UCHAR                   AironetCellPowerLimit;
 605         EDCA_PARM       EdcaParm;
 606         QBSS_LOAD_PARM  QbssLoad;
 607         QOS_CAPABILITY_PARM QosCapability;
 608         ULONG                                           RalinkIe;
 609         UCHAR                                           VarIE[MAX_VIE_LEN];             // Total VIE length = MAX_VIE_LEN - -5
 610         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 611         HT_CAPABILITY_IE                HtCapability;
 612         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
 613         UCHAR                   HtCapabilityLen = 0, PreNHtCapabilityLen = 0;
 614         UCHAR                   AddHtInfoLen;
 615         UCHAR                   NewExtChannelOffset = 0xff;
 616
 617         pFrame = (PFRAME_802_11) Elem->Msg;
 618         // Init Variable IE structure
 619         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 620         pVIE->Length = 0;
 621 #ifdef DOT11_N_SUPPORT
 622     RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
 623         RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
 624 #endif // DOT11_N_SUPPORT //
 625
 626         if (PeerBeaconAndProbeRspSanity(pAd,
 627                                                                 Elem->Msg,
 628                                                                 Elem->MsgLen,
 629                                                                 Elem->Channel,
 630                                                                 Addr2,
 631                                                                 Bssid,
 632                                                                 Ssid,
 633                                                                 &SsidLen,
 634                                                                 &BssType,
 635                                                                 &BeaconPeriod,
 636                                                                 &Channel,
 637                                                                 &NewChannel,
 638                                                                 &TimeStamp,
 639                                                                 &CfParm,
 640                                                                 &AtimWin,
 641                                                                 &CapabilityInfo,
 642                                                                 &Erp,
 643                                                                 &DtimCount,
 644                                                                 &DtimPeriod,
 645                                                                 &BcastFlag,
 646                                                                 &MessageToMe,
 647                                                                 SupRate,
 648                                                                 &SupRateLen,
 649                                                                 ExtRate,
 650                                                                 &ExtRateLen,
 651                                                                 &CkipFlag,
 652                                                                 &AironetCellPowerLimit,
 653                                                                 &EdcaParm,
 654                                                                 &QbssLoad,
 655                                                                 &QosCapability,
 656                                                                 &RalinkIe,
 657                                                                 &HtCapabilityLen,
 658                                                                 &PreNHtCapabilityLen,
 659                                                                 &HtCapability,
 660                                                                 &AddHtInfoLen,
 661                                                                 &AddHtInfo,
 662                                                                 &NewExtChannelOffset,
 663                                                                 &LenVIE,
 664                                                                 pVIE))
 665         {
 666                 ULONG Idx;
 667                 CHAR Rssi = 0;
 668
 669                 Idx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
 670                 if (Idx != BSS_NOT_FOUND)
 671                         Rssi = pAd->ScanTab.BssEntry[Idx].Rssi;
 672
 673                 Rssi = RTMPMaxRssi(pAd, ConvertToRssi(pAd, Elem->Rssi0, RSSI_0), ConvertToRssi(pAd, Elem->Rssi1, RSSI_1), ConvertToRssi(pAd, Elem->Rssi2, RSSI_2));
 674
 675
 676 #ifdef DOT11_N_SUPPORT
 677                 if ((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0))
 678                         HtCapabilityLen = SIZE_HT_CAP_IE;
 679 #endif // DOT11_N_SUPPORT //
 680                 if ((pAd->StaCfg.CCXReqType != MSRN_TYPE_UNUSED) && (Channel == pAd->StaCfg.CCXScanChannel))
 681                 {
 682                         Idx = BssTableSetEntry(pAd, &pAd->StaCfg.CCXBssTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
 683                                                  &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen,ExtRate, ExtRateLen, &HtCapability,
 684                                                  &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, Rssi, TimeStamp, CkipFlag,
 685                                                  &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
 686                         if (Idx != BSS_NOT_FOUND)
 687                         {
 688                                 NdisMoveMemory(pAd->StaCfg.CCXBssTab.BssEntry[Idx].PTSF, &Elem->Msg[24], 4);
 689                                 NdisMoveMemory(&pAd->StaCfg.CCXBssTab.BssEntry[Idx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
 690                                 NdisMoveMemory(&pAd->StaCfg.CCXBssTab.BssEntry[Idx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
 691                                 if (pAd->StaCfg.CCXReqType == MSRN_TYPE_BEACON_REQ)
 692                                         AironetAddBeaconReport(pAd, Idx, Elem);
 693                         }
 694                 }
 695                 else
 696                 {
 697                         Idx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
 698                                                   &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,  &HtCapability,
 699                                                  &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, Rssi, TimeStamp, CkipFlag,
 700                                                  &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
 701 #ifdef DOT11_N_SUPPORT
 702 #ifdef DOT11N_DRAFT3
 703                         if (pAd->ChannelList[pAd->CommonCfg.ChannelListIdx].bEffectedChannel == TRUE)
 704                         {
 705                                 UCHAR           RegClass;
 706                                 PeerBeaconAndProbeRspSanity2(pAd, Elem->Msg, Elem->MsgLen, &RegClass);
 707                                 TriEventTableSetEntry(pAd, &pAd->CommonCfg.TriggerEventTab, Bssid, &HtCapability, HtCapabilityLen, RegClass, Channel);
 708                         }
 709 #endif // DOT11N_DRAFT3 //
 710 #endif // DOT11_N_SUPPORT //
 711                         if (Idx != BSS_NOT_FOUND)
 712                         {
 713                                 NdisMoveMemory(pAd->ScanTab.BssEntry[Idx].PTSF, &Elem->Msg[24], 4);
 714                                 NdisMoveMemory(&pAd->ScanTab.BssEntry[Idx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
 715                                 NdisMoveMemory(&pAd->ScanTab.BssEntry[Idx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
 716                         }
 717                 }
 718         }
 719         // sanity check fail, ignored
 720 }
 721
 722 /*
 723         ==========================================================================
 724         Description:
 725                 When waiting joining the (I)BSS, beacon received from external
 726         ==========================================================================
 727  */
 728 VOID PeerBeaconAtJoinAction(
 729         IN PRTMP_ADAPTER pAd,
 730         IN MLME_QUEUE_ELEM *Elem)
 731 {
 732         UCHAR         Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
 733         UCHAR         Ssid[MAX_LEN_OF_SSID], SsidLen, BssType, Channel, MessageToMe,
 734                                   DtimCount, DtimPeriod, BcastFlag, NewChannel;
 735         LARGE_INTEGER TimeStamp;
 736         USHORT        BeaconPeriod, AtimWin, CapabilityInfo;
 737         CF_PARM       Cf;
 738         BOOLEAN       TimerCancelled;
 739         UCHAR         Erp;
 740         UCHAR         SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
 741         UCHAR             SupRateLen, ExtRateLen;
 742         UCHAR         CkipFlag;
 743         USHORT            LenVIE;
 744         UCHAR             AironetCellPowerLimit;
 745         EDCA_PARM       EdcaParm;
 746         QBSS_LOAD_PARM  QbssLoad;
 747         QOS_CAPABILITY_PARM QosCapability;
 748         USHORT        Status;
 749         UCHAR                                           VarIE[MAX_VIE_LEN];             // Total VIE length = MAX_VIE_LEN - -5
 750         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
 751         ULONG           RalinkIe;
 752         ULONG         Idx;
 753         HT_CAPABILITY_IE                HtCapability;
 754         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
 755         UCHAR                           HtCapabilityLen = 0, PreNHtCapabilityLen = 0;
 756         UCHAR                   AddHtInfoLen;
 757         UCHAR                   NewExtChannelOffset = 0xff;
 758 #ifdef DOT11_N_SUPPORT
 759         UCHAR                   CentralChannel;
 760 #endif // DOT11_N_SUPPORT //
 761
 762         // Init Variable IE structure
 763         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
 764         pVIE->Length = 0;
 765     RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
 766         RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
 767
 768
 769         if (PeerBeaconAndProbeRspSanity(pAd,
 770                                                                 Elem->Msg,
 771                                                                 Elem->MsgLen,
 772                                                                 Elem->Channel,
 773                                                                 Addr2,
 774                                                                 Bssid,
 775                                                                 Ssid,
 776                                                                 &SsidLen,
 777                                                                 &BssType,
 778                                                                 &BeaconPeriod,
 779                                                                 &Channel,
 780                                                                 &NewChannel,
 781                                                                 &TimeStamp,
 782                                                                 &Cf,
 783                                                                 &AtimWin,
 784                                                                 &CapabilityInfo,
 785                                                                 &Erp,
 786                                                                 &DtimCount,
 787                                                                 &DtimPeriod,
 788                                                                 &BcastFlag,
 789                                                                 &MessageToMe,
 790                                                                 SupRate,
 791                                                                 &SupRateLen,
 792                                                                 ExtRate,
 793                                                                 &ExtRateLen,
 794                                                                 &CkipFlag,
 795                                                                 &AironetCellPowerLimit,
 796                                                                 &EdcaParm,
 797                                                                 &QbssLoad,
 798                                                                 &QosCapability,
 799                                                                 &RalinkIe,
 800                                                                 &HtCapabilityLen,
 801                                                                 &PreNHtCapabilityLen,
 802                                                                 &HtCapability,
 803                                                                 &AddHtInfoLen,
 804                                                                 &AddHtInfo,
 805                                                                 &NewExtChannelOffset,
 806                                                                 &LenVIE,
 807                                                                 pVIE))
 808         {
 809                 // Disqualify 11b only adhoc when we are in 11g only adhoc mode
 810                 if ((BssType == BSS_ADHOC) && (pAd->CommonCfg.PhyMode == PHY_11G) && ((SupRateLen+ExtRateLen)< 12))
 811                         return;
 812
 813                 // BEACON from desired BSS/IBSS found. We should be able to decide most
 814                 // BSS parameters here.
 815                 // Q. But what happen if this JOIN doesn't conclude a successful ASSOCIATEION?
 816                 //    Do we need to receover back all parameters belonging to previous BSS?
 817                 // A. Should be not. There's no back-door recover to previous AP. It still need
 818                 //    a new JOIN-AUTH-ASSOC sequence.
 819                 if (MAC_ADDR_EQUAL(pAd->MlmeAux.Bssid, Bssid))
 820                 {
 821                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - receive desired BEACON at JoinWaitBeacon... Channel = %d\n", Channel));
 822                         RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
 823
 824                         // Update RSSI to prevent No signal display when cards first initialized
 825                         pAd->StaCfg.RssiSample.LastRssi0        = ConvertToRssi(pAd, Elem->Rssi0, RSSI_0);
 826                         pAd->StaCfg.RssiSample.LastRssi1        = ConvertToRssi(pAd, Elem->Rssi1, RSSI_1);
 827                         pAd->StaCfg.RssiSample.LastRssi2        = ConvertToRssi(pAd, Elem->Rssi2, RSSI_2);
 828                         pAd->StaCfg.RssiSample.AvgRssi0 = pAd->StaCfg.RssiSample.LastRssi0;
 829                         pAd->StaCfg.RssiSample.AvgRssi0X8       = pAd->StaCfg.RssiSample.AvgRssi0 << 3;
 830                         pAd->StaCfg.RssiSample.AvgRssi1 = pAd->StaCfg.RssiSample.LastRssi1;
 831                         pAd->StaCfg.RssiSample.AvgRssi1X8       = pAd->StaCfg.RssiSample.AvgRssi1 << 3;
 832                         pAd->StaCfg.RssiSample.AvgRssi2 = pAd->StaCfg.RssiSample.LastRssi2;
 833                         pAd->StaCfg.RssiSample.AvgRssi2X8       = pAd->StaCfg.RssiSample.AvgRssi2 << 3;
 834
 835                         //
 836                         // We need to check if SSID only set to any, then we can record the current SSID.
 837                         // Otherwise will cause hidden SSID association failed.
 838                         //
 839                         if (pAd->MlmeAux.SsidLen == 0)
 840                         {
 841                                 NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
 842                                 pAd->MlmeAux.SsidLen = SsidLen;
 843                         }
 844                         else
 845                         {
 846                                 Idx = BssSsidTableSearch(&pAd->ScanTab, Bssid, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen, Channel);
 847
 848                                 if (Idx != BSS_NOT_FOUND)
 849                                 {
 850                                         //
 851                                         // Multiple SSID case, used correct CapabilityInfo
 852                                         //
 853                                         CapabilityInfo = pAd->ScanTab.BssEntry[Idx].CapabilityInfo;
 854                                 }
 855                         }
 856                         NdisMoveMemory(pAd->MlmeAux.Bssid, Bssid, MAC_ADDR_LEN);
 857                         pAd->MlmeAux.CapabilityInfo = CapabilityInfo & SUPPORTED_CAPABILITY_INFO;
 858                         pAd->MlmeAux.BssType = BssType;
 859                         pAd->MlmeAux.BeaconPeriod = BeaconPeriod;
 860                         pAd->MlmeAux.Channel = Channel;
 861                         pAd->MlmeAux.AtimWin = AtimWin;
 862                         pAd->MlmeAux.CfpPeriod = Cf.CfpPeriod;
 863                         pAd->MlmeAux.CfpMaxDuration = Cf.CfpMaxDuration;
 864                         pAd->MlmeAux.APRalinkIe = RalinkIe;
 865
 866                         // Copy AP's supported rate to MlmeAux for creating assoication request
 867                         // Also filter out not supported rate
 868                         pAd->MlmeAux.SupRateLen = SupRateLen;
 869                         NdisMoveMemory(pAd->MlmeAux.SupRate, SupRate, SupRateLen);
 870                         RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
 871                         pAd->MlmeAux.ExtRateLen = ExtRateLen;
 872                         NdisMoveMemory(pAd->MlmeAux.ExtRate, ExtRate, ExtRateLen);
 873                         RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
 874
 875             NdisZeroMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, 16);
 876 #ifdef DOT11_N_SUPPORT
 877                         pAd->MlmeAux.NewExtChannelOffset = NewExtChannelOffset;
 878                         pAd->MlmeAux.HtCapabilityLen = HtCapabilityLen;
 879
 880                         // filter out un-supported ht rates
 881                         if (((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0)) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
 882                         {
 883                                 RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
 884                                 RTMPMoveMemory(&pAd->MlmeAux.AddHtInfo, &AddHtInfo, SIZE_ADD_HT_INFO_IE);
 885
 886                                 // StaActive.SupportedHtPhy.MCSSet stores Peer AP's 11n Rx capability
 887                                 NdisMoveMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, HtCapability.MCSSet, 16);
 888                                 pAd->MlmeAux.NewExtChannelOffset = NewExtChannelOffset;
 889                                 pAd->MlmeAux.HtCapabilityLen = SIZE_HT_CAP_IE;
 890                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = TRUE;
 891                                 if (PreNHtCapabilityLen > 0)
 892                                         pAd->StaActive.SupportedPhyInfo.bPreNHt = TRUE;
 893                                 RTMPCheckHt(pAd, BSSID_WCID, &HtCapability, &AddHtInfo);
 894                                 // Copy AP Parameter to StaActive.  This is also in LinkUp.
 895                                 DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAtJoinAction! (MpduDensity=%d, MaxRAmpduFactor=%d, BW=%d)\n",
 896                                         pAd->StaActive.SupportedHtPhy.MpduDensity, pAd->StaActive.SupportedHtPhy.MaxRAmpduFactor, HtCapability.HtCapInfo.ChannelWidth));
 897
 898                                 if (AddHtInfoLen > 0)
 899                                 {
 900                                         CentralChannel = AddHtInfo.ControlChan;
 901                                         // Check again the Bandwidth capability of this AP.
 902                                         if ((AddHtInfo.ControlChan > 2)&& (AddHtInfo.AddHtInfo.ExtChanOffset == EXTCHA_BELOW) && (HtCapability.HtCapInfo.ChannelWidth == BW_40))
 903                                         {
 904                                                 CentralChannel = AddHtInfo.ControlChan - 2;
 905                                         }
 906                                         else if ((AddHtInfo.AddHtInfo.ExtChanOffset == EXTCHA_ABOVE) && (HtCapability.HtCapInfo.ChannelWidth == BW_40))
 907                                         {
 908                                                 CentralChannel = AddHtInfo.ControlChan + 2;
 909                                         }
 910
 911                                         // Check Error .
 912                                         if (pAd->MlmeAux.CentralChannel != CentralChannel)
 913                                                 DBGPRINT(RT_DEBUG_ERROR, ("PeerBeaconAtJoinAction HT===>Beacon Central Channel = %d, Control Channel = %d. Mlmeaux CentralChannel = %d\n", CentralChannel, AddHtInfo.ControlChan, pAd->MlmeAux.CentralChannel));
 914
 915                                         DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAtJoinAction HT===>Central Channel = %d, Control Channel = %d,  .\n", CentralChannel, AddHtInfo.ControlChan));
 916
 917                                 }
 918
 919                         }
 920                         else
 921 #endif // DOT11_N_SUPPORT //
 922                         {
 923                                 // To prevent error, let legacy AP must have same CentralChannel and Channel.
 924                                 if ((HtCapabilityLen == 0) && (PreNHtCapabilityLen == 0))
 925                                         pAd->MlmeAux.CentralChannel = pAd->MlmeAux.Channel;
 926
 927                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
 928                                 RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
 929                                 RTMPZeroMemory(&pAd->MlmeAux.AddHtInfo, SIZE_ADD_HT_INFO_IE);
 930                         }
 931
 932                         RTMPUpdateMlmeRate(pAd);
 933
 934                         // copy QOS related information
 935                         if ((pAd->CommonCfg.bWmmCapable)
 936 #ifdef DOT11_N_SUPPORT
 937                                  || (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
 938 #endif // DOT11_N_SUPPORT //
 939                                 )
 940                         {
 941                                 NdisMoveMemory(&pAd->MlmeAux.APEdcaParm, &EdcaParm, sizeof(EDCA_PARM));
 942                                 NdisMoveMemory(&pAd->MlmeAux.APQbssLoad, &QbssLoad, sizeof(QBSS_LOAD_PARM));
 943                                 NdisMoveMemory(&pAd->MlmeAux.APQosCapability, &QosCapability, sizeof(QOS_CAPABILITY_PARM));
 944                         }
 945                         else
 946                         {
 947                                 NdisZeroMemory(&pAd->MlmeAux.APEdcaParm, sizeof(EDCA_PARM));
 948                                 NdisZeroMemory(&pAd->MlmeAux.APQbssLoad, sizeof(QBSS_LOAD_PARM));
 949                                 NdisZeroMemory(&pAd->MlmeAux.APQosCapability, sizeof(QOS_CAPABILITY_PARM));
 950                         }
 951
 952                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - after JOIN, SupRateLen=%d, ExtRateLen=%d\n",
 953                                                                                 pAd->MlmeAux.SupRateLen, pAd->MlmeAux.ExtRateLen));
 954
 955 #ifdef LEAP_SUPPORT
 956                         // Update CkipFlag
 957                         pAd->StaCfg.CkipFlag = CkipFlag;
 958
 959                         // Keep TimeStamp for Re-Association used.
 960                         if (LEAP_CCKM_ON(pAd) && (pAd->StaCfg.CCKMLinkUpFlag == TRUE))
 961                                 pAd->StaCfg.CCKMBeaconAtJoinTimeStamp = TimeStamp;
 962 #endif // LEAP_SUPPORT //
 963
 964                         if (AironetCellPowerLimit != 0xFF)
 965                         {
 966                                 //We need to change our TxPower for CCX 2.0 AP Control of Client Transmit Power
 967                                 ChangeToCellPowerLimit(pAd, AironetCellPowerLimit);
 968                         }
 969                         else  //Used the default TX Power Percentage.
 970                                 pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
 971
 972                         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
 973                         Status = MLME_SUCCESS;
 974                         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
 975                 }
 976                 // not to me BEACON, ignored
 977         }
 978         // sanity check fail, ignore this frame
 979 }
 980
 981 /*
 982         ==========================================================================
 983         Description:
 984                 receive BEACON from peer
 985
 986         IRQL = DISPATCH_LEVEL
 987
 988         ==========================================================================
 989  */
 990 VOID PeerBeacon(
 991         IN PRTMP_ADAPTER pAd,
 992         IN MLME_QUEUE_ELEM *Elem)
 993 {
 994         UCHAR         Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
 995         CHAR          Ssid[MAX_LEN_OF_SSID];
 996         CF_PARM       CfParm;
 997         UCHAR         SsidLen, MessageToMe=0, BssType, Channel, NewChannel, index=0;
 998         UCHAR         DtimCount=0, DtimPeriod=0, BcastFlag=0;
 999         USHORT        CapabilityInfo, AtimWin, BeaconPeriod;
1000         LARGE_INTEGER TimeStamp;
1001         USHORT        TbttNumToNextWakeUp;
1002         UCHAR         Erp;
1003         UCHAR         SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
1004         UCHAR             SupRateLen, ExtRateLen;
1005         UCHAR             CkipFlag;
1006         USHORT        LenVIE;
1007         UCHAR             AironetCellPowerLimit;
1008         EDCA_PARM       EdcaParm;
1009         QBSS_LOAD_PARM  QbssLoad;
1010         QOS_CAPABILITY_PARM QosCapability;
1011         ULONG           RalinkIe;
1012         // New for WPA security suites
1013         UCHAR                                           VarIE[MAX_VIE_LEN];             // Total VIE length = MAX_VIE_LEN - -5
1014         NDIS_802_11_VARIABLE_IEs        *pVIE = NULL;
1015         HT_CAPABILITY_IE                HtCapability;
1016         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
1017         UCHAR                   HtCapabilityLen, PreNHtCapabilityLen;
1018         UCHAR                   AddHtInfoLen;
1019         UCHAR                   NewExtChannelOffset = 0xff;
1020
1021
1022 #ifdef RALINK_ATE
1023     if (ATE_ON(pAd))
1024     {
1025                 return;
1026     }
1027 #endif // RALINK_ATE //
1028
1029         if (!(INFRA_ON(pAd) || ADHOC_ON(pAd)
1030                 ))
1031                 return;
1032
1033         // Init Variable IE structure
1034         pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
1035         pVIE->Length = 0;
1036     RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
1037         RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
1038
1039         if (PeerBeaconAndProbeRspSanity(pAd,
1040                                                                 Elem->Msg,
1041                                                                 Elem->MsgLen,
1042                                                                 Elem->Channel,
1043                                                                 Addr2,
1044                                                                 Bssid,
1045                                                                 Ssid,
1046                                                                 &SsidLen,
1047                                                                 &BssType,
1048                                                                 &BeaconPeriod,
1049                                                                 &Channel,
1050                                                                 &NewChannel,
1051                                                                 &TimeStamp,
1052                                                                 &CfParm,
1053                                                                 &AtimWin,
1054                                                                 &CapabilityInfo,
1055                                                                 &Erp,
1056                                                                 &DtimCount,
1057                                                                 &DtimPeriod,
1058                                                                 &BcastFlag,
1059                                                                 &MessageToMe,
1060                                                                 SupRate,
1061                                                                 &SupRateLen,
1062                                                                 ExtRate,
1063                                                                 &ExtRateLen,
1064                                                                 &CkipFlag,
1065                                                                 &AironetCellPowerLimit,
1066                                                                 &EdcaParm,
1067                                                                 &QbssLoad,
1068                                                                 &QosCapability,
1069                                                                 &RalinkIe,
1070                                                                 &HtCapabilityLen,
1071                                                                 &PreNHtCapabilityLen,
1072                                                                 &HtCapability,
1073                                                                 &AddHtInfoLen,
1074                                                                 &AddHtInfo,
1075                                                                 &NewExtChannelOffset,
1076                                                                 &LenVIE,
1077                                                                 pVIE))
1078         {
1079                 BOOLEAN is_my_bssid, is_my_ssid;
1080                 ULONG   Bssidx, Now;
1081                 BSS_ENTRY *pBss;
1082                 CHAR            RealRssi = RTMPMaxRssi(pAd, ConvertToRssi(pAd, Elem->Rssi0, RSSI_0), ConvertToRssi(pAd, Elem->Rssi1, RSSI_1), ConvertToRssi(pAd, Elem->Rssi2, RSSI_2));
1083
1084                 is_my_bssid = MAC_ADDR_EQUAL(Bssid, pAd->CommonCfg.Bssid)? TRUE : FALSE;
1085                 is_my_ssid = SSID_EQUAL(Ssid, SsidLen, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen)? TRUE:FALSE;
1086
1087
1088                 // ignore BEACON not for my SSID
1089                 if ((! is_my_ssid) && (! is_my_bssid))
1090                         return;
1091
1092                 // It means STA waits disassoc completely from this AP, ignores this beacon.
1093                 if (pAd->Mlme.CntlMachine.CurrState == CNTL_WAIT_DISASSOC)
1094                         return;
1095
1096 #ifdef DOT11_N_SUPPORT
1097                 // Copy Control channel for this BSSID.
1098                 if (AddHtInfoLen != 0)
1099                         Channel = AddHtInfo.ControlChan;
1100
1101                 if ((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0))
1102                         HtCapabilityLen = SIZE_HT_CAP_IE;
1103 #endif // DOT11_N_SUPPORT //
1104
1105                 //
1106                 // Housekeeping "SsidBssTab" table for later-on ROAMing usage.
1107                 //
1108                 Bssidx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
1109                 if (Bssidx == BSS_NOT_FOUND)
1110                 {
1111                         // discover new AP of this network, create BSS entry
1112                         Bssidx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
1113                                                  &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,
1114                                                 &HtCapability, &AddHtInfo,HtCapabilityLen,AddHtInfoLen,NewExtChannelOffset, Channel,
1115                                                 RealRssi, TimeStamp, CkipFlag, &EdcaParm, &QosCapability,
1116                                                 &QbssLoad, LenVIE, pVIE);
1117                         if (Bssidx == BSS_NOT_FOUND) // return if BSS table full
1118                                 return;
1119
1120                         NdisMoveMemory(pAd->ScanTab.BssEntry[Bssidx].PTSF, &Elem->Msg[24], 4);
1121                         NdisMoveMemory(&pAd->ScanTab.BssEntry[Bssidx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
1122                         NdisMoveMemory(&pAd->ScanTab.BssEntry[Bssidx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
1123
1124
1125
1126                 }
1127
1128                 if ((pAd->CommonCfg.bIEEE80211H == 1) && (NewChannel != 0) && (Channel != NewChannel))
1129                 {
1130                         // Switching to channel 1 can prevent from rescanning the current channel immediately (by auto reconnection).
1131                         // In addition, clear the MLME queue and the scan table to discard the RX packets and previous scanning results.
1132                         AsicSwitchChannel(pAd, 1, FALSE);
1133                         AsicLockChannel(pAd, 1);
1134                     LinkDown(pAd, FALSE);
1135                         MlmeQueueInit(&pAd->Mlme.Queue);
1136                         BssTableInit(&pAd->ScanTab);
1137                     RTMPusecDelay(1000000);             // use delay to prevent STA do reassoc
1138
1139                         // channel sanity check
1140                         for (index = 0 ; index < pAd->ChannelListNum; index++)
1141                         {
1142                                 if (pAd->ChannelList[index].Channel == NewChannel)
1143                                 {
1144                                         pAd->ScanTab.BssEntry[Bssidx].Channel = NewChannel;
1145                                         pAd->CommonCfg.Channel = NewChannel;
1146                                         AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
1147                                         AsicLockChannel(pAd, pAd->CommonCfg.Channel);
1148                                         DBGPRINT(RT_DEBUG_TRACE, ("PeerBeacon - STA receive channel switch announcement IE (New Channel =%d)\n", NewChannel));
1149                                         break;
1150                                 }
1151                         }
1152
1153                         if (index >= pAd->ChannelListNum)
1154                         {
1155                                 DBGPRINT_ERR(("PeerBeacon(can not find New Channel=%d in ChannelList[%d]\n", pAd->CommonCfg.Channel, pAd->ChannelListNum));
1156                         }
1157                 }
1158
1159                 // if the ssid matched & bssid unmatched, we should select the bssid with large value.
1160                 // This might happened when two STA start at the same time
1161                 if ((! is_my_bssid) && ADHOC_ON(pAd))
1162                 {
1163                         INT     i;
1164
1165                         // Add the safeguard against the mismatch of adhoc wep status
1166                         if (pAd->StaCfg.WepStatus != pAd->ScanTab.BssEntry[Bssidx].WepStatus)
1167                         {
1168                                 return;
1169                         }
1170
1171                         // collapse into the ADHOC network which has bigger BSSID value.
1172                         for (i = 0; i < 6; i++)
1173                         {
1174                                 if (Bssid[i] > pAd->CommonCfg.Bssid[i])
1175                                 {
1176                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - merge to the IBSS with bigger BSSID=%02x:%02x:%02x:%02x:%02x:%02x\n",
1177                                                 Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
1178                                         AsicDisableSync(pAd);
1179                                         COPY_MAC_ADDR(pAd->CommonCfg.Bssid, Bssid);
1180                                         AsicSetBssid(pAd, pAd->CommonCfg.Bssid);
1181                                         MakeIbssBeacon(pAd);        // re-build BEACON frame
1182                                         AsicEnableIbssSync(pAd);    // copy BEACON frame to on-chip memory
1183                                         is_my_bssid = TRUE;
1184                                         break;
1185                                 }
1186                                 else if (Bssid[i] < pAd->CommonCfg.Bssid[i])
1187                                         break;
1188                         }
1189                 }
1190
1191
1192                 NdisGetSystemUpTime(&Now);
1193                 pBss = &pAd->ScanTab.BssEntry[Bssidx];
1194                 pBss->Rssi = RealRssi;       // lastest RSSI
1195                 pBss->LastBeaconRxTime = Now;   // last RX timestamp
1196
1197                 //
1198                 // BEACON from my BSSID - either IBSS or INFRA network
1199                 //
1200                 if (is_my_bssid)
1201                 {
1202                         RXWI_STRUC      RxWI;
1203
1204                         pAd->StaCfg.DtimCount = DtimCount;
1205                         pAd->StaCfg.DtimPeriod = DtimPeriod;
1206                         pAd->StaCfg.LastBeaconRxTime = Now;
1207
1208
1209                         RxWI.RSSI0 = Elem->Rssi0;
1210                         RxWI.RSSI1 = Elem->Rssi1;
1211                         RxWI.RSSI2 = Elem->Rssi2;
1212
1213                         Update_Rssi_Sample(pAd, &pAd->StaCfg.RssiSample, &RxWI);
1214                         if (AironetCellPowerLimit != 0xFF)
1215                         {
1216                                 //
1217                                 // We get the Cisco (ccx) "TxPower Limit" required
1218                                 // Changed to appropriate TxPower Limit for Ciso Compatible Extensions
1219                                 //
1220                                 ChangeToCellPowerLimit(pAd, AironetCellPowerLimit);
1221                         }
1222                         else
1223                         {
1224                                 //
1225                                 // AironetCellPowerLimit equal to 0xFF means the Cisco (ccx) "TxPower Limit" not exist.
1226                                 // Used the default TX Power Percentage, that set from UI.
1227                                 //
1228                                 pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
1229                         }
1230
1231                         // at least one 11b peer joined. downgrade the MaxTxRate to 11Mbps
1232                         // after last 11b peer left for several seconds, we'll auto switch back to 11G rate
1233                         // in MlmePeriodicExec()
1234                         if (ADHOC_ON(pAd) && (CAP_IS_IBSS_ON(CapabilityInfo)))
1235                         {
1236                                 BOOLEAN bRestart;
1237                 BOOLEAN bnRestart;
1238
1239                                 bRestart = FALSE;
1240                 bnRestart = FALSE;
1241
1242                                 do
1243                                 {
1244                                         if ((SupRateLen+ExtRateLen <= 4) && (pAd->CommonCfg.MaxTxRate > RATE_11))
1245                                         {
1246                                                 if (pAd->StaCfg.AdhocBOnlyJoined == FALSE)
1247                                                 {
1248                                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - 11b peer joined. down-grade to 11b TX rates \n"));
1249                                                         bRestart = TRUE;
1250                                                         NdisMoveMemory(pAd->StaActive.SupRate, SupRate, MAX_LEN_OF_SUPPORTED_RATES);
1251                                                         pAd->StaActive.SupRateLen = SupRateLen;
1252                                                         NdisMoveMemory(pAd->StaActive.ExtRate, ExtRate, MAX_LEN_OF_SUPPORTED_RATES);
1253                                                         pAd->StaActive.ExtRateLen = ExtRateLen;
1254                                                         pAd->StaCfg.AdhocBOnlyJoined = TRUE;
1255                                                         pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
1256                                                         AsicSetEdcaParm(pAd, NULL);
1257                                                 }
1258
1259                                                 // this timestamp is for MlmePeriodicExec() to check if all 11B peers have left
1260                                                 pAd->StaCfg.Last11bBeaconRxTime = Now;
1261                                                 break;
1262                                         }
1263 #ifdef DOT11_N_SUPPORT
1264                                         // Update Ht Phy.
1265                                         if ((pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
1266                                         {
1267                                                 if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) &&
1268                                                         !pAd->StaCfg.AdhocBGJoined &&
1269                                                         !pAd->StaCfg.AdhocBOnlyJoined)
1270                                                         AdhocTurnOnQos(pAd);
1271
1272                                                 // Handle rate switch issue when Adhoc mode
1273                                                 if ((SupRateLen+ExtRateLen >= 8) && (HtCapability.MCSSet[0] == 0) && (HtCapability.MCSSet[1] == 0))
1274                                                 {
1275                                                         if (pAd->StaCfg.AdhocBGJoined == FALSE)
1276                                                         {
1277                                                                 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - 11g peer joined. down-grade to 11g TX rates \n"));
1278                                                                 bRestart = TRUE;
1279                                                                 NdisMoveMemory(pAd->StaActive.SupRate, SupRate, MAX_LEN_OF_SUPPORTED_RATES);
1280                                                                 pAd->StaActive.SupRateLen = SupRateLen;
1281                                                                 NdisMoveMemory(pAd->StaActive.ExtRate, ExtRate, MAX_LEN_OF_SUPPORTED_RATES);
1282                                                                 pAd->StaActive.ExtRateLen = ExtRateLen;
1283                                                                 pAd->StaCfg.AdhocBGJoined = TRUE;
1284                                                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
1285                                                                 AsicSetEdcaParm(pAd, NULL);
1286                                                         }
1287
1288                                                         // this timestamp is for MlmePeriodicExec() to check if all 11g peers have left
1289                                                         pAd->StaCfg.Last11gBeaconRxTime = Now;
1290                                                         break;
1291                                                 }
1292                                                 else if (!pAd->StaCfg.AdhocBGJoined &&
1293                                                                  !pAd->StaCfg.AdhocBOnlyJoined &&
1294                                                                  (pAd->CommonCfg.RegTransmitSetting.field.BW == BW_40) &&
1295                                                                  (HtCapability.HtCapInfo.ChannelWidth == BW_20))
1296                                                 {
1297                                                         if (pAd->StaCfg.Adhoc20NJoined == FALSE)
1298                                                         {
1299                                                                 pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel;
1300
1301                                                                 pAd->StaCfg.Adhoc20NJoined = TRUE;
1302                                                                 NdisMoveMemory(&pAd->MlmeAux.HtCapability, &HtCapability, SIZE_HT_CAP_IE);
1303                                                                 if (AddHtInfoLen != 0)
1304                                                                         NdisMoveMemory(&pAd->MlmeAux.AddHtInfo, &AddHtInfo, AddHtInfoLen);
1305                                                                 NdisMoveMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, HtCapability.MCSSet, 16);
1306
1307                                                                 RTMPCheckHt(pAd, Elem->Wcid, &pAd->MlmeAux.HtCapability, &pAd->MlmeAux.AddHtInfo);
1308                                                                 COPY_HTSETTINGS_FROM_MLME_AUX_TO_ACTIVE_CFG(pAd);
1309                                                                 pAd->StaActive.SupportedPhyInfo.bHtEnable = TRUE;
1310                                                                 bRestart = TRUE;
1311                                                                 bnRestart = TRUE;
1312                                                         }
1313                                                         // this timestamp is for MlmePeriodicExec() to check if all 20MHz N peers have left
1314                                                         pAd->StaCfg.Last20NBeaconRxTime = Now;
1315                                                 }
1316
1317                                         }
1318                                         else
1319 #endif // DOT11_N_SUPPORT //
1320                                         {
1321                                                 RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
1322                                                 RTMPZeroMemory(&pAd->MlmeAux.AddHtInfo, SIZE_ADD_HT_INFO_IE);
1323                                         }
1324                                 }while (FALSE);
1325
1326                                 // If peer Adhoc is legacy mode, I don't need to call MlmeUpdateHtTxRates no matter I support HT or not
1327                                 if ((bRestart == TRUE) && (bnRestart == FALSE))
1328                                 {
1329                                         MlmeUpdateTxRates(pAd, FALSE, 0);
1330                                         MakeIbssBeacon(pAd);        // re-build BEACON frame
1331                                         AsicEnableIbssSync(pAd);    // copy to on-chip memory
1332                                 }
1333 #ifdef DOT11_N_SUPPORT
1334                                 else if ((bRestart == TRUE) && (bnRestart == TRUE))
1335                                 {
1336                                         MlmeUpdateTxRates(pAd, FALSE, BSS0);
1337                                         MlmeUpdateHtTxRates(pAd, BSS0);
1338                                         MakeIbssBeacon(pAd);        // re-build BEACON frame
1339                                         AsicEnableIbssSync(pAd);    // copy to on-chip memory
1340                                 }
1341 #endif // DOT11_N_SUPPORT //
1342
1343                                 // At least another peer in this IBSS, declare MediaState as CONNECTED
1344                                 if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
1345                                 {
1346                                         OPSTATUS_SET_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
1347
1348                                         pAd->IndicateMediaState = NdisMediaStateConnected;
1349                                         RTMP_IndicateMediaState(pAd);
1350                         pAd->ExtraInfo = GENERAL_LINK_UP;
1351                                         AsicSetBssid(pAd, pAd->CommonCfg.Bssid);
1352
1353                                         // 2003/03/12 - john
1354                                         // Make sure this entry in "ScanTab" table, thus complies to Microsoft's policy that
1355                                         // "site survey" result should always include the current connected network.
1356                                         //
1357                                         Bssidx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
1358                                         if (Bssidx == BSS_NOT_FOUND)
1359                                         {
1360                                                 Bssidx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
1361                                                                         &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen, &HtCapability,
1362                                                                         &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, RealRssi, TimeStamp, 0,
1363                                                                         &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
1364                                         }
1365                                         DBGPRINT(RT_DEBUG_TRACE, ("ADHOC  fOP_STATUS_MEDIA_STATE_CONNECTED.\n"));
1366                                 }
1367
1368                                 // Ad-hoc mode is using MAC address as BA session. So we need to continuously find newly joined adhoc station by receiving beacon.
1369                                 // To prevent always check this, we use wcid == RESERVED_WCID to recognize it as newly joined adhoc station.
1370                                 if (ADHOC_ON(pAd) && (Elem->Wcid == RESERVED_WCID))
1371                                 {
1372                                         UCHAR   idx;
1373                                         MAC_TABLE_ENTRY *pEntry;
1374
1375                                         // look up the existing table
1376                                         pEntry = MacTableLookup(pAd, Addr2);
1377                                         if (pEntry == NULL)
1378                                         {
1379                                                 // Another adhoc joining, add to our MAC table.
1380                                                 pEntry = MacTableInsertEntry(pAd, Addr2, BSS0, FALSE);
1381                                                 if (pEntry)
1382                                                 {
1383                                                         pEntry->Sst = SST_ASSOC;
1384                                                         idx = pAd->StaCfg.DefaultKeyId;
1385                                                         // After InsertEntry, Write to ASIC on-chip table.
1386                                                         RT28XX_STA_SECURITY_INFO_ADD(pAd, BSS0, idx, pEntry);
1387                                                         DBGPRINT(RT_DEBUG_TRACE, ("ADHOC %x:%x:%x:%x:%x:%x  join in.Entry=%d\n", Addr2[0],Addr2[1],Addr2[2],Addr2[3],Addr2[4],Addr2[5], pEntry->Aid));
1388
1389                                                         pEntry->HTPhyMode.word = pAd->StaCfg.HTPhyMode.word;
1390                                 if (HtCapabilityLen <= 0)
1391                                 {
1392                                     pEntry->HTPhyMode.field.STBC = 0;
1393                                     pEntry->HTPhyMode.field.BW = 0;
1394                                     pEntry->HTPhyMode.field.ShortGI = 0;
1395                                     if ((SupRateLen+ExtRateLen <= 4) && (pAd->CommonCfg.Channel <= 14))
1396                                                         {
1397                                                                 pEntry->HTPhyMode.field.MODE = MODE_CCK;
1398                                                         }
1399                                                         else
1400                                                         {
1401                                                                 pEntry->HTPhyMode.field.MODE = MODE_OFDM;
1402                                                         }
1403                                                                 MlmeUpdateTxRates(pAd, FALSE, 0);
1404                                 }
1405 #ifdef DOT11_N_SUPPORT
1406                                                         else
1407                                                         {
1408                                                                 MlmeUpdateTxRates(pAd, FALSE, 0);
1409                                                                 MlmeUpdateHtTxRates(pAd, BSS0);
1410                                                         }
1411 #endif // DOT11_N_SUPPORT //
1412
1413 #ifdef WPA_SUPPLICANT_SUPPORT
1414 #ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
1415                                 if (pAd->StaCfg.WpaSupplicantUP)
1416                                 {
1417                                     union iwreq_data    wrqu;
1418
1419                                     SendAssocIEsToWpaSupplicant(pAd);
1420                                     memset(&wrqu, 0, sizeof(wrqu));
1421                                     wrqu.data.flags = RT_ASSOC_EVENT_FLAG;
1422                                     wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
1423                                 }
1424 #endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
1425 #endif // WPA_SUPPLICANT_SUPPORT //
1426
1427 #ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
1428                                 {
1429                                     union iwreq_data    wrqu;
1430                                     wext_notify_event_assoc(pAd);
1431
1432                                     memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
1433                                     memcpy(wrqu.ap_addr.sa_data, pAd->MlmeAux.Bssid, MAC_ADDR_LEN);
1434                                     wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
1435
1436                                 }
1437 #endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
1438                                                 }
1439                                         }
1440                                 }
1441                         }
1442
1443                         if (INFRA_ON(pAd))
1444                         {
1445                                 BOOLEAN bUseShortSlot, bUseBGProtection;
1446
1447                                 // decide to use/change to -
1448                                 //      1. long slot (20 us) or short slot (9 us) time
1449                                 //      2. turn on/off RTS/CTS and/or CTS-to-self protection
1450                                 //      3. short preamble
1451
1452                                 //bUseShortSlot = pAd->CommonCfg.bUseShortSlotTime && CAP_IS_SHORT_SLOT(CapabilityInfo);
1453                                 bUseShortSlot = CAP_IS_SHORT_SLOT(CapabilityInfo);
1454                                 if (bUseShortSlot != OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SHORT_SLOT_INUSED))
1455                                         AsicSetSlotTime(pAd, bUseShortSlot);
1456
1457                                 bUseBGProtection = (pAd->CommonCfg.UseBGProtection == 1) ||    // always use
1458                                                                    ((pAd->CommonCfg.UseBGProtection == 0) && ERP_IS_USE_PROTECTION(Erp));
1459
1460                                 if (pAd->CommonCfg.Channel > 14) // always no BG protection in A-band. falsely happened when switching A/G band to a dual-band AP
1461                                         bUseBGProtection = FALSE;
1462
1463                                 if (bUseBGProtection != OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED))
1464                                 {
1465                                         if (bUseBGProtection)
1466                                         {
1467                                                 OPSTATUS_SET_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED);
1468                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, (OFDMSETPROTECT|CCKSETPROTECT|ALLN_SETPROTECT),FALSE,(pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1));
1469                                         }
1470                                         else
1471                                         {
1472                                                 OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED);
1473                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, (OFDMSETPROTECT|CCKSETPROTECT|ALLN_SETPROTECT),TRUE,(pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1));
1474                                         }
1475
1476                                         DBGPRINT(RT_DEBUG_WARN, ("SYNC - AP changed B/G protection to %d\n", bUseBGProtection));
1477                                 }
1478
1479 #ifdef DOT11_N_SUPPORT
1480                                 // check Ht protection mode. and adhere to the Non-GF device indication by AP.
1481                                 if ((AddHtInfoLen != 0) &&
1482                                         ((AddHtInfo.AddHtInfo2.OperaionMode != pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode) ||
1483                                         (AddHtInfo.AddHtInfo2.NonGfPresent != pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent)))
1484                                 {
1485                                         pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent = AddHtInfo.AddHtInfo2.NonGfPresent;
1486                                         pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode = AddHtInfo.AddHtInfo2.OperaionMode;
1487                                         if (pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1)
1488                                 {
1489                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, TRUE);
1490                                         }
1491                                         else
1492                                                 AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, FALSE);
1493
1494                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP changed N OperaionMode to %d\n", pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode));
1495                                 }
1496 #endif // DOT11_N_SUPPORT //
1497
1498                                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED) &&
1499                                         ERP_IS_USE_BARKER_PREAMBLE(Erp))
1500                                 {
1501                                         MlmeSetTxPreamble(pAd, Rt802_11PreambleLong);
1502                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP forced to use LONG preamble\n"));
1503                                 }
1504
1505                                 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED)    &&
1506                                         (EdcaParm.bValid == TRUE)                          &&
1507                                         (EdcaParm.EdcaUpdateCount != pAd->CommonCfg.APEdcaParm.EdcaUpdateCount))
1508                                 {
1509                                         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP change EDCA parameters(from %d to %d)\n",
1510                                                 pAd->CommonCfg.APEdcaParm.EdcaUpdateCount,
1511                                                 EdcaParm.EdcaUpdateCount));
1512                                         AsicSetEdcaParm(pAd, &EdcaParm);
1513                                 }
1514
1515                                 // copy QOS related information
1516                                 NdisMoveMemory(&pAd->CommonCfg.APQbssLoad, &QbssLoad, sizeof(QBSS_LOAD_PARM));
1517                                 NdisMoveMemory(&pAd->CommonCfg.APQosCapability, &QosCapability, sizeof(QOS_CAPABILITY_PARM));
1518                         }
1519
1520                         // only INFRASTRUCTURE mode support power-saving feature
1521                         if ((INFRA_ON(pAd) && (pAd->StaCfg.Psm == PWR_SAVE)) || (pAd->CommonCfg.bAPSDForcePowerSave))
1522                         {
1523                                 UCHAR FreeNumber;
1524                                 //  1. AP has backlogged unicast-to-me frame, stay AWAKE, send PSPOLL
1525                                 //  2. AP has backlogged broadcast/multicast frame and we want those frames, stay AWAKE
1526                                 //  3. we have outgoing frames in TxRing or MgmtRing, better stay AWAKE
1527                                 //  4. Psm change to PWR_SAVE, but AP not been informed yet, we better stay AWAKE
1528                                 //  5. otherwise, put PHY back to sleep to save battery.
1529                                 if (MessageToMe)
1530                                 {
1531                                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE))
1532                                         {
1533                                                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, pAd->StaCfg.BBPR3);
1534                                         }
1535                                         if (pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable &&
1536                                                 pAd->CommonCfg.bAPSDAC_BE && pAd->CommonCfg.bAPSDAC_BK && pAd->CommonCfg.bAPSDAC_VI && pAd->CommonCfg.bAPSDAC_VO)
1537                                         {
1538                                                 pAd->CommonCfg.bNeedSendTriggerFrame = TRUE;
1539                                         }
1540                                         else
1541                                                 RT28XX_PS_POLL_ENQUEUE(pAd);
1542                                 }
1543                                 else if (BcastFlag && (DtimCount == 0) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM))
1544                                 {
1545                                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE))
1546                                         {
1547                                                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, pAd->StaCfg.BBPR3);
1548                                         }
1549                                 }
1550                                 else if ((pAd->TxSwQueue[QID_AC_BK].Number != 0)                                                                                                        ||
1551                                                 (pAd->TxSwQueue[QID_AC_BE].Number != 0)                                                                                                         ||
1552                                                 (pAd->TxSwQueue[QID_AC_VI].Number != 0)                                                                                                         ||
1553                                                 (pAd->TxSwQueue[QID_AC_VO].Number != 0)                                                                                                         ||
1554                                                 (RTMPFreeTXDRequest(pAd, QID_AC_BK, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1555                                                 (RTMPFreeTXDRequest(pAd, QID_AC_BE, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1556                                                 (RTMPFreeTXDRequest(pAd, QID_AC_VI, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1557                                                 (RTMPFreeTXDRequest(pAd, QID_AC_VO, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS)      ||
1558                                                 (RTMPFreeTXDRequest(pAd, QID_MGMT, MGMT_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS))
1559                                 {
1560                                         // TODO: consider scheduled HCCA. might not be proper to use traditional DTIM-based power-saving scheme
1561                                         // can we cheat here (i.e. just check MGMT & AC_BE) for better performance?
1562                                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE))
1563                                         {
1564                                                 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, pAd->StaCfg.BBPR3);
1565                                         }
1566                                 }
1567                                 else
1568                                 {
1569                                         USHORT NextDtim = DtimCount;
1570
1571                                         if (NextDtim == 0)
1572                                                 NextDtim = DtimPeriod;
1573
1574                                         TbttNumToNextWakeUp = pAd->StaCfg.DefaultListenCount;
1575                                         if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM) && (TbttNumToNextWakeUp > NextDtim))
1576                                                 TbttNumToNextWakeUp = NextDtim;
1577
1578                                         if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
1579                                         {
1580                                                 // Set a flag to go to sleep . Then after parse this RxDoneInterrupt, will go to sleep mode.
1581                                                 RTMP_SET_PSFLAG(pAd, fRTMP_PS_GO_TO_SLEEP_NOW);
1582                                                 pAd->ThisTbttNumToNextWakeUp = TbttNumToNextWakeUp;
1583                                                 //AsicSleepThenAutoWakeup(pAd, TbttNumToNextWakeUp);
1584                                         }
1585                                 }
1586                         }
1587                 }
1588                 // not my BSSID, ignore it
1589         }
1590         // sanity check fail, ignore this frame
1591 }
1592
1593 /*
1594         ==========================================================================
1595         Description:
1596                 Receive PROBE REQ from remote peer when operating in IBSS mode
1597         ==========================================================================
1598  */
1599 VOID PeerProbeReqAction(
1600         IN PRTMP_ADAPTER pAd,
1601         IN MLME_QUEUE_ELEM *Elem)
1602 {
1603         UCHAR         Addr2[MAC_ADDR_LEN];
1604         CHAR          Ssid[MAX_LEN_OF_SSID];
1605         UCHAR         SsidLen;
1606 #ifdef DOT11_N_SUPPORT
1607         UCHAR             HtLen, AddHtLen, NewExtLen;
1608 #endif // DOT11_N_SUPPORT //
1609         HEADER_802_11 ProbeRspHdr;
1610         NDIS_STATUS   NStatus;
1611         PUCHAR        pOutBuffer = NULL;
1612         ULONG         FrameLen = 0;
1613         LARGE_INTEGER FakeTimestamp;
1614         UCHAR         DsLen = 1, IbssLen = 2;
1615         UCHAR         LocalErpIe[3] = {IE_ERP, 1, 0};
1616         BOOLEAN       Privacy;
1617         USHORT        CapabilityInfo;
1618         UCHAR             RSNIe = IE_WPA;
1619
1620         if (! ADHOC_ON(pAd))
1621                 return;
1622
1623         if (PeerProbeReqSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, Ssid, &SsidLen))
1624         {
1625                 if ((SsidLen == 0) || SSID_EQUAL(Ssid, SsidLen, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen))
1626                 {
1627                         // allocate and send out ProbeRsp frame
1628                         NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
1629                         if (NStatus != NDIS_STATUS_SUCCESS)
1630                                 return;
1631
1632                         //pAd->StaCfg.AtimWin = 0;  // ??????
1633
1634                         Privacy = (pAd->StaCfg.WepStatus == Ndis802_11Encryption1Enabled) ||
1635                                           (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
1636                                           (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled);
1637                         CapabilityInfo = CAP_GENERATE(0, 1, Privacy, (pAd->CommonCfg.TxPreamble == Rt802_11PreambleShort), 0, 0);
1638
1639                         MakeOutgoingFrame(pOutBuffer,                   &FrameLen,
1640                                                           sizeof(HEADER_802_11),        &ProbeRspHdr,
1641                                                           TIMESTAMP_LEN,                &FakeTimestamp,
1642                                                           2,                            &pAd->CommonCfg.BeaconPeriod,
1643                                                           2,                            &CapabilityInfo,
1644                                                           1,                            &SsidIe,
1645                                                           1,                            &pAd->CommonCfg.SsidLen,
1646                                                           pAd->CommonCfg.SsidLen,       pAd->CommonCfg.Ssid,
1647                                                           1,                            &SupRateIe,
1648                                                           1,                            &pAd->StaActive.SupRateLen,
1649                                                           pAd->StaActive.SupRateLen,    pAd->StaActive.SupRate,
1650                                                           1,                            &DsIe,
1651                                                           1,                            &DsLen,
1652                                                           1,                            &pAd->CommonCfg.Channel,
1653                                                           1,                            &IbssIe,
1654                                                           1,                            &IbssLen,
1655                                                           2,                            &pAd->StaActive.AtimWin,
1656                                                           END_OF_ARGS);
1657
1658                         if (pAd->StaActive.ExtRateLen)
1659                         {
1660                                 ULONG tmp;
1661                                 MakeOutgoingFrame(pOutBuffer + FrameLen,        &tmp,
1662                                                                   3,                            LocalErpIe,
1663                                                                   1,                            &ExtRateIe,
1664                                                                   1,                            &pAd->StaActive.ExtRateLen,
1665                                                                   pAd->StaActive.ExtRateLen,    &pAd->StaActive.ExtRate,
1666                                                                   END_OF_ARGS);
1667                                 FrameLen += tmp;
1668                         }
1669
1670                         // If adhoc secruity is set for WPA-None, append the cipher suite IE
1671                         if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
1672                         {
1673                                 ULONG tmp;
1674                                 MakeOutgoingFrame(pOutBuffer + FrameLen,                &tmp,
1675                                                                         1,                              &RSNIe,
1676                                                                         1,                              &pAd->StaCfg.RSNIE_Len,
1677                                                                         pAd->StaCfg.RSNIE_Len,          pAd->StaCfg.RSN_IE,
1678                                                                         END_OF_ARGS);
1679                                 FrameLen += tmp;
1680                         }
1681 #ifdef DOT11_N_SUPPORT
1682                         if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
1683                         {
1684                                 ULONG TmpLen;
1685                                 UCHAR   BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
1686                                 HtLen = sizeof(pAd->CommonCfg.HtCapability);
1687                                 AddHtLen = sizeof(pAd->CommonCfg.AddHTInfo);
1688                                 NewExtLen = 1;
1689                                 //New extension channel offset IE is included in Beacon, Probe Rsp or channel Switch Announcement Frame
1690                                 if (pAd->bBroadComHT == TRUE)
1691                                 {
1692                                         MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
1693                                                                   1,                                &WpaIe,
1694                                                                   4,                                &BROADCOM[0],
1695                                                                  pAd->MlmeAux.HtCapabilityLen,          &pAd->MlmeAux.HtCapability,
1696                                                                   END_OF_ARGS);
1697                                 }
1698                                 else
1699                                 {
1700                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
1701                                                                   1,                                &HtCapIe,
1702                                                                   1,                                &HtLen,
1703                                                                  sizeof(HT_CAPABILITY_IE),          &pAd->CommonCfg.HtCapability,
1704                                                                   1,                                &AddHtInfoIe,
1705                                                                   1,                                &AddHtLen,
1706                                                                  sizeof(ADD_HT_INFO_IE),          &pAd->CommonCfg.AddHTInfo,
1707                                                                   1,                                &NewExtChanIe,
1708                                                                   1,                                &NewExtLen,
1709                                                                  sizeof(NEW_EXT_CHAN_IE),          &pAd->CommonCfg.NewExtChanOffset,
1710                                                                   END_OF_ARGS);
1711                                 }
1712                                 FrameLen += TmpLen;
1713                         }
1714 #endif // DOT11_N_SUPPORT //
1715                         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
1716                         MlmeFreeMemory(pAd, pOutBuffer);
1717                 }
1718         }
1719 }
1720
1721 VOID BeaconTimeoutAtJoinAction(
1722         IN PRTMP_ADAPTER pAd,
1723         IN MLME_QUEUE_ELEM *Elem)
1724 {
1725         USHORT Status;
1726         DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BeaconTimeoutAtJoinAction\n"));
1727         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1728         Status = MLME_REJ_TIMEOUT;
1729         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
1730 }
1731
1732 /*
1733         ==========================================================================
1734         Description:
1735                 Scan timeout procedure. basically add channel index by 1 and rescan
1736         ==========================================================================
1737  */
1738 VOID ScanTimeoutAction(
1739         IN PRTMP_ADAPTER pAd,
1740         IN MLME_QUEUE_ELEM *Elem)
1741 {
1742         pAd->MlmeAux.Channel = NextChannel(pAd, pAd->MlmeAux.Channel);
1743
1744         // Only one channel scanned for CISCO beacon request
1745         if ((pAd->MlmeAux.ScanType == SCAN_CISCO_ACTIVE) ||
1746                 (pAd->MlmeAux.ScanType == SCAN_CISCO_PASSIVE) ||
1747                 (pAd->MlmeAux.ScanType == SCAN_CISCO_NOISE) ||
1748                 (pAd->MlmeAux.ScanType == SCAN_CISCO_CHANNEL_LOAD))
1749                 pAd->MlmeAux.Channel = 0;
1750
1751         // this routine will stop if pAd->MlmeAux.Channel == 0
1752         ScanNextChannel(pAd);
1753 }
1754
1755 /*
1756         ==========================================================================
1757         Description:
1758         ==========================================================================
1759  */
1760 VOID InvalidStateWhenScan(
1761         IN PRTMP_ADAPTER pAd,
1762         IN MLME_QUEUE_ELEM *Elem)
1763 {
1764         USHORT Status;
1765         DBGPRINT(RT_DEBUG_TRACE, ("AYNC - InvalidStateWhenScan(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
1766         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1767         Status = MLME_STATE_MACHINE_REJECT;
1768         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
1769 }
1770
1771 /*
1772         ==========================================================================
1773         Description:
1774         ==========================================================================
1775  */
1776 VOID InvalidStateWhenJoin(
1777         IN PRTMP_ADAPTER pAd,
1778         IN MLME_QUEUE_ELEM *Elem)
1779 {
1780         USHORT Status;
1781         DBGPRINT(RT_DEBUG_TRACE, ("InvalidStateWhenJoin(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
1782         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1783         Status = MLME_STATE_MACHINE_REJECT;
1784         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
1785 }
1786
1787 /*
1788         ==========================================================================
1789         Description:
1790         ==========================================================================
1791  */
1792 VOID InvalidStateWhenStart(
1793         IN PRTMP_ADAPTER pAd,
1794         IN MLME_QUEUE_ELEM *Elem)
1795 {
1796         USHORT Status;
1797         DBGPRINT(RT_DEBUG_TRACE, ("InvalidStateWhenStart(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
1798         pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
1799         Status = MLME_STATE_MACHINE_REJECT;
1800         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
1801 }
1802
1803 /*
1804         ==========================================================================
1805         Description:
1806
1807         IRQL = DISPATCH_LEVEL
1808
1809         ==========================================================================
1810  */
1811 VOID EnqueuePsPoll(
1812         IN PRTMP_ADAPTER pAd)
1813 {
1814 #ifdef RALINK_ATE
1815     if (ATE_ON(pAd))
1816     {
1817                 return;
1818     }
1819 #endif // RALINK_ATE //
1820
1821
1822         if (pAd->StaCfg.WindowsPowerMode == Ndis802_11PowerModeLegacy_PSP)
1823         pAd->PsPollFrame.FC.PwrMgmt = PWR_SAVE;
1824         MiniportMMRequest(pAd, 0, (PUCHAR)&pAd->PsPollFrame, sizeof(PSPOLL_FRAME));
1825 }
1826
1827
1828 /*
1829         ==========================================================================
1830         Description:
1831         ==========================================================================
1832  */
1833 VOID EnqueueProbeRequest(
1834         IN PRTMP_ADAPTER pAd)
1835 {
1836         NDIS_STATUS     NState;
1837         PUCHAR          pOutBuffer;
1838         ULONG           FrameLen = 0;
1839         HEADER_802_11   Hdr80211;
1840
1841         DBGPRINT(RT_DEBUG_TRACE, ("force out a ProbeRequest ...\n"));
1842
1843         NState = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
1844         if (NState == NDIS_STATUS_SUCCESS)
1845         {
1846                 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
1847
1848                 // this ProbeRequest explicitly specify SSID to reduce unwanted ProbeResponse
1849                 MakeOutgoingFrame(pOutBuffer,                     &FrameLen,
1850                                                   sizeof(HEADER_802_11),          &Hdr80211,
1851                                                   1,                              &SsidIe,
1852                                                   1,                              &pAd->CommonCfg.SsidLen,
1853                                                   pAd->CommonCfg.SsidLen,                 pAd->CommonCfg.Ssid,
1854                                                   1,                              &SupRateIe,
1855                                                   1,                              &pAd->StaActive.SupRateLen,
1856                                                   pAd->StaActive.SupRateLen,      pAd->StaActive.SupRate,
1857                                                   END_OF_ARGS);
1858                 MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
1859                 MlmeFreeMemory(pAd, pOutBuffer);
1860         }
1861
1862 }
1863
1864 #ifdef DOT11_N_SUPPORT
1865 #ifdef DOT11N_DRAFT3
1866 VOID BuildEffectedChannelList(
1867         IN PRTMP_ADAPTER pAd)
1868 {
1869         UCHAR           EChannel[11];
1870         UCHAR           i, j, k;
1871         UCHAR           UpperChannel = 0, LowerChannel = 0;
1872
1873         RTMPZeroMemory(EChannel, 11);
1874         i = 0;
1875         // Find upper channel and lower channel.
1876         if (pAd->CommonCfg.CentralChannel < pAd->CommonCfg.Channel)
1877         {
1878                 UpperChannel = pAd->CommonCfg.Channel;
1879                 LowerChannel = pAd->CommonCfg.CentralChannel;
1880         }
1881         else if (pAd->CommonCfg.CentralChannel > pAd->CommonCfg.Channel)
1882         {
1883                 UpperChannel = pAd->CommonCfg.CentralChannel;
1884                 LowerChannel = pAd->CommonCfg.Channel;
1885         }
1886         else
1887         {
1888                 return;
1889         }
1890
1891         // Record channels that is below lower channel..
1892         if (LowerChannel > 1)
1893         {
1894                 EChannel[0] = LowerChannel - 1;
1895                 i = 1;
1896                 if (LowerChannel > 2)
1897                 {
1898                         EChannel[1] = LowerChannel - 2;
1899                         i = 2;
1900                         if (LowerChannel > 3)
1901                         {
1902                                 EChannel[2] = LowerChannel - 3;
1903                                 i = 3;
1904                         }
1905                 }
1906         }
1907         // Record channels that is between  lower channel and upper channel.
1908         for (k = LowerChannel;k < UpperChannel;k++)
1909         {
1910                 EChannel[i] = k;
1911                 i++;
1912         }
1913         // Record channels that is above upper channel..
1914         if (LowerChannel < 11)
1915         {
1916                 EChannel[i] = UpperChannel + 1;
1917                 i++;
1918                 if (LowerChannel < 10)
1919                 {
1920                         EChannel[i] = LowerChannel + 2;
1921                         i++;
1922                         if (LowerChannel < 9)
1923                         {
1924                                 EChannel[i] = LowerChannel + 3;
1925                                 i++;
1926                         }
1927                 }
1928         }
1929         //
1930         for (j = 0;j < i;j++)
1931         {
1932                 for (k = 0;k < pAd->ChannelListNum;k++)
1933                 {
1934                         if (pAd->ChannelList[k].Channel == EChannel[j])
1935                         {
1936                                 pAd->ChannelList[k].bEffectedChannel = TRUE;
1937                                 DBGPRINT(RT_DEBUG_TRACE,(" EffectedChannel( =%d)\n", EChannel[j]));
1938                                 break;
1939                         }
1940                 }
1941         }
1942 }
1943 #endif // DOT11N_DRAFT3 //
1944 #endif // DOT11_N_SUPPORT //
1945
1946 BOOLEAN ScanRunning(
1947                 IN PRTMP_ADAPTER pAd)
1948 {
1949         return (pAd->Mlme.SyncMachine.CurrState == SCAN_LISTEN) ? TRUE : FALSE;
1950 }
1951