Attachment #327189 for bug #540589

View | Details | Raw Unified | Return to bug 540589
Collapse All | Expand All

Lines 99-104 static struct pci_device_id rt2860_pci_tbl[] __devinitdata = Link Here

(-)a/drivers/staging/rt2860/2860_main_dev.c (+7 lines)
99	{PCI_DEVICE(NIC_PCI_VENDOR_ID, NIC2760_PCI_DEVICE_ID)},	99	{PCI_DEVICE(NIC_PCI_VENDOR_ID, NIC2760_PCI_DEVICE_ID)},
100	{PCI_DEVICE(NIC_PCI_VENDOR_ID, NIC2790_PCIe_DEVICE_ID)},	100	{PCI_DEVICE(NIC_PCI_VENDOR_ID, NIC2790_PCIe_DEVICE_ID)},
101	{PCI_DEVICE(VEN_AWT_PCI_VENDOR_ID, VEN_AWT_PCIe_DEVICE_ID)},	101	{PCI_DEVICE(VEN_AWT_PCI_VENDOR_ID, VEN_AWT_PCIe_DEVICE_ID)},
		102	{PCI_DEVICE(EDIMAX_PCI_VENDOR_ID, 0x7708)},
		103	{PCI_DEVICE(EDIMAX_PCI_VENDOR_ID, 0x7728)},
		104	{PCI_DEVICE(EDIMAX_PCI_VENDOR_ID, 0x7758)},
		105	{PCI_DEVICE(EDIMAX_PCI_VENDOR_ID, 0x7727)},
		106	{PCI_DEVICE(EDIMAX_PCI_VENDOR_ID, 0x7738)},
		107	{PCI_DEVICE(EDIMAX_PCI_VENDOR_ID, 0x7748)},
		108	{PCI_DEVICE(EDIMAX_PCI_VENDOR_ID, 0x7768)},
102	{0,} // terminate list	109	{0,} // terminate list
103	};	110	};
104		111




#ifndef __AP_H__
#define __AP_H__



// ========================= AP RTMP.h ================================



// =============================================================
//      Function Prototypes
// =============================================================

// ap_data.c

BOOLEAN APBridgeToWirelessSta(
    IN  PRTMP_ADAPTER   pAd,
    IN  PUCHAR          pHeader,
    IN  UINT            HdrLen,
    IN  PUCHAR          pData,
    IN  UINT            DataLen,
    IN  ULONG           fromwdsidx);

BOOLEAN APHandleRxDoneInterrupt(
    IN  PRTMP_ADAPTER   pAd);

VOID	APSendPackets(
	IN	NDIS_HANDLE		MiniportAdapterContext,
	IN	PPNDIS_PACKET	ppPacketArray,
	IN	UINT			NumberOfPackets);

NDIS_STATUS APSendPacket(
    IN  PRTMP_ADAPTER   pAd,
    IN  PNDIS_PACKET    pPacket);


NDIS_STATUS APHardTransmit(
	IN	PRTMP_ADAPTER	pAd,
	IN	TX_BLK			*pTxBlk,
	IN	UCHAR			QueIdx);

VOID APRxEAPOLFrameIndicate(
	IN	PRTMP_ADAPTER	pAd,
	IN	MAC_TABLE_ENTRY	*pEntry,
	IN	RX_BLK			*pRxBlk,
	IN	UCHAR			FromWhichBSSID);

NDIS_STATUS APCheckRxError(
	IN	PRTMP_ADAPTER	pAd,
	IN	PRT28XX_RXD_STRUC		pRxD,
	IN	UCHAR			Wcid);

BOOLEAN APCheckClass2Class3Error(
    IN  PRTMP_ADAPTER   pAd,
	IN ULONG Wcid,
	IN  PHEADER_802_11  pHeader);

VOID APHandleRxPsPoll(
	IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			pAddr,
	IN	USHORT			Aid,
    IN	BOOLEAN			isActive);

VOID    RTMPDescriptorEndianChange(
    IN  PUCHAR          pData,
    IN  ULONG           DescriptorType);

VOID    RTMPFrameEndianChange(
    IN  PRTMP_ADAPTER   pAd,
    IN  PUCHAR          pData,
    IN  ULONG           Dir,
    IN  BOOLEAN         FromRxDoneInt);

// ap_assoc.c

VOID APAssocStateMachineInit(
    IN  PRTMP_ADAPTER   pAd,
    IN  STATE_MACHINE *S,
    OUT STATE_MACHINE_FUNC Trans[]);

VOID  APPeerAssocReqAction(
    IN  PRTMP_ADAPTER   pAd,
    IN  MLME_QUEUE_ELEM *Elem);

VOID  APPeerReassocReqAction(
    IN  PRTMP_ADAPTER   pAd,
    IN  MLME_QUEUE_ELEM *Elem);

VOID  APPeerDisassocReqAction(
    IN  PRTMP_ADAPTER   pAd,
    IN  MLME_QUEUE_ELEM *Elem);

VOID MbssKickOutStas(
	IN PRTMP_ADAPTER pAd,
	IN INT apidx,
	IN USHORT Reason);

VOID APMlmeKickOutSta(
    IN PRTMP_ADAPTER pAd,
	IN PUCHAR pStaAddr,
	IN UCHAR Wcid,
	IN USHORT Reason);

VOID APMlmeDisassocReqAction(
    IN PRTMP_ADAPTER pAd,
    IN MLME_QUEUE_ELEM *Elem);

VOID  APCls3errAction(
    IN  PRTMP_ADAPTER   pAd,
	IN 	ULONG Wcid,
    IN	PHEADER_802_11	pHeader);


USHORT APBuildAssociation(
    IN PRTMP_ADAPTER pAd,
    IN MAC_TABLE_ENTRY *pEntry,
    IN USHORT CapabilityInfo,
    IN UCHAR  MaxSupportedRateIn500Kbps,
    IN UCHAR  *RSN,
    IN UCHAR  *pRSNLen,
    IN BOOLEAN bWmmCapable,
    IN ULONG  RalinkIe,
	IN HT_CAPABILITY_IE		*pHtCapability,
	IN UCHAR		 HtCapabilityLen,
    OUT USHORT *pAid);

// ap_auth.c

void APAuthStateMachineInit(
    IN PRTMP_ADAPTER pAd,
    IN STATE_MACHINE *Sm,
    OUT STATE_MACHINE_FUNC Trans[]);

VOID APMlmeDeauthReqAction(
    IN PRTMP_ADAPTER pAd,
    IN MLME_QUEUE_ELEM *Elem);

VOID APCls2errAction(
    IN PRTMP_ADAPTER pAd,
	IN 	ULONG Wcid,
    IN	PHEADER_802_11	pHeader);

// ap_authrsp.c

VOID APAuthRspStateMachineInit(
    IN PRTMP_ADAPTER pAd,
    IN PSTATE_MACHINE Sm,
    IN STATE_MACHINE_FUNC Trans[]);

VOID APPeerAuthAtAuthRspIdleAction(
    IN  PRTMP_ADAPTER   pAd,
    IN  MLME_QUEUE_ELEM *Elem);

VOID APPeerDeauthReqAction(
    IN PRTMP_ADAPTER	pAd,
    IN MLME_QUEUE_ELEM *Elem);

VOID APPeerAuthSimpleRspGenAndSend(
    IN  PRTMP_ADAPTER   pAd,
    IN  PHEADER_802_11 pHdr80211,
    IN  USHORT Alg,
    IN  USHORT Seq,
    IN  USHORT StatusCode);

// ap_connect.c

BOOLEAN BeaconTransmitRequired(
	IN PRTMP_ADAPTER	pAd,
	IN INT				apidx);

VOID APMakeBssBeacon(
    IN  PRTMP_ADAPTER   pAd,
	IN	INT				apidx);

VOID  APUpdateBeaconFrame(
    IN  PRTMP_ADAPTER   pAd,
	IN	INT				apidx);

VOID APMakeAllBssBeacon(
    IN  PRTMP_ADAPTER   pAd);

VOID  APUpdateAllBeaconFrame(
    IN  PRTMP_ADAPTER   pAd);


// ap_sync.c

VOID APSyncStateMachineInit(
    IN PRTMP_ADAPTER pAd,
    IN STATE_MACHINE *Sm,
    OUT STATE_MACHINE_FUNC Trans[]);

VOID APScanTimeout(
	IN PVOID SystemSpecific1,
	IN PVOID FunctionContext,
	IN PVOID SystemSpecific2,
	IN PVOID SystemSpecific3);

VOID APInvalidStateWhenScan(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID APScanTimeoutAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID APPeerProbeReqAction(
    IN  PRTMP_ADAPTER pAd,
    IN  MLME_QUEUE_ELEM *Elem);

VOID APPeerBeaconAction(
    IN PRTMP_ADAPTER pAd,
    IN MLME_QUEUE_ELEM *Elem);

VOID APMlmeScanReqAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID APPeerBeaconAtScanAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID APScanCnclAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID ApSiteSurvey(
	IN PRTMP_ADAPTER pAd);

VOID SupportRate(
	IN PUCHAR SupRate,
	IN UCHAR SupRateLen,
	IN PUCHAR ExtRate,
	IN UCHAR ExtRateLen,
	OUT PUCHAR *Rates,
	OUT PUCHAR RatesLen,
	OUT PUCHAR pMaxSupportRate);


BOOLEAN ApScanRunning(
	IN PRTMP_ADAPTER pAd);

// ap_wpa.c

VOID APWpaStateMachineInit(
    IN  PRTMP_ADAPTER   pAd,
    IN  STATE_MACHINE *Sm,
    OUT STATE_MACHINE_FUNC Trans[]);

// ap_mlme.c

VOID APMlmePeriodicExec(
    IN  PRTMP_ADAPTER   pAd);

VOID APMlmeSelectTxRateTable(
	IN PRTMP_ADAPTER		pAd,
	IN PMAC_TABLE_ENTRY		pEntry,
	IN PUCHAR				*ppTable,
	IN PUCHAR				pTableSize,
	IN PUCHAR				pInitTxRateIdx);

VOID APMlmeSetTxRate(
	IN PRTMP_ADAPTER		pAd,
	IN PMAC_TABLE_ENTRY		pEntry,
	IN PRTMP_TX_RATE_SWITCH	pTxRate);

VOID APMlmeDynamicTxRateSwitching(
    IN PRTMP_ADAPTER pAd);

VOID APQuickResponeForRateUpExec(
    IN PVOID SystemSpecific1,
    IN PVOID FunctionContext,
    IN PVOID SystemSpecific2,
    IN PVOID SystemSpecific3);

BOOLEAN APMsgTypeSubst(
    IN PRTMP_ADAPTER pAd,
    IN PFRAME_802_11 pFrame,
    OUT INT *Machine,
    OUT INT *MsgType);

VOID APQuickResponeForRateUpExec(
    IN PVOID SystemSpecific1,
    IN PVOID FunctionContext,
    IN PVOID SystemSpecific2,
    IN PVOID SystemSpecific3);

#ifdef RT2870
VOID BeaconUpdateExec(
    IN PVOID SystemSpecific1,

	IN PRTMP_ADAPTER	pAd,
	IN BOOLEAN			bPiggyBack);

VOID APAsicEvaluateRxAnt(
	IN PRTMP_ADAPTER	pAd);

VOID APAsicRxAntEvalTimeout(
	IN PRTMP_ADAPTER	pAd);

// ap.c

VOID APSwitchChannel(
	IN PRTMP_ADAPTER pAd,
	IN INT Channel);

NDIS_STATUS APInitialize(
    IN  PRTMP_ADAPTER   pAd);

VOID APShutdown(
    IN PRTMP_ADAPTER    pAd);

VOID APStartUp(
    IN  PRTMP_ADAPTER   pAd);

VOID APStop(
    IN  PRTMP_ADAPTER   pAd);

VOID APCleanupPsQueue(
    IN  PRTMP_ADAPTER   pAd,
    IN  PQUEUE_HEADER   pQueue);

VOID MacTableReset(
    IN  PRTMP_ADAPTER   pAd);


    IN  PRTMP_ADAPTER   pAd,
    IN  PUCHAR          pAddr);

VOID MacTableMaintenance(
    IN PRTMP_ADAPTER pAd);

UINT32 MacTableAssocStaNumGet(
	IN PRTMP_ADAPTER pAd);

MAC_TABLE_ENTRY *APSsPsInquiry(
    IN  PRTMP_ADAPTER   pAd,
    IN  PUCHAR          pAddr,
    OUT SST             *Sst,
    OUT USHORT          *Aid,
    OUT UCHAR           *PsMode,
    OUT UCHAR           *Rate);

BOOLEAN APPsIndicate(
    IN  PRTMP_ADAPTER   pAd,
    IN  PUCHAR          pAddr,
	IN ULONG Wcid,
    IN  UCHAR           Psm);

VOID ApLogEvent(
    IN PRTMP_ADAPTER    pAd,
    IN PUCHAR           pAddr,
    IN USHORT           Event);

VOID APUpdateOperationMode(
    IN PRTMP_ADAPTER pAd);

VOID APUpdateCapabilityAndErpIe(
	IN PRTMP_ADAPTER pAd);

BOOLEAN ApCheckAccessControlList(
	IN PRTMP_ADAPTER pAd,
	IN PUCHAR        pAddr,
	IN UCHAR         Apidx);

VOID ApUpdateAccessControlList(
    IN PRTMP_ADAPTER pAd,
    IN UCHAR         Apidx);

VOID ApEnqueueNullFrame(
	IN PRTMP_ADAPTER pAd,
	IN PUCHAR        pAddr,
	IN UCHAR         TxRate,
	IN UCHAR         PID,
	IN UCHAR         apidx,
    IN BOOLEAN       bQosNull,
    IN BOOLEAN       bEOSP,
    IN UCHAR         OldUP);

VOID ApSendFrame(
    IN  PRTMP_ADAPTER   pAd,
    IN  PVOID           pBuffer,
    IN  ULONG           Length,
    IN  UCHAR           TxRate,
    IN  UCHAR           PID);

VOID ApEnqueueAckFrame(
    IN PRTMP_ADAPTER pAd,
    IN PUCHAR        pAddr,
    IN UCHAR         TxRate,
	IN UCHAR         apidx);

UCHAR APAutoSelectChannel(
	IN PRTMP_ADAPTER pAd,
	IN BOOLEAN Optimal);

// ap_sanity.c


BOOLEAN PeerAssocReqCmmSanity(
    IN PRTMP_ADAPTER pAd,
	IN BOOLEAN isRessoc,
    IN VOID *Msg,
    IN ULONG MsgLen,
    OUT PUCHAR pAddr2,
    OUT USHORT *pCapabilityInfo,
    OUT USHORT *pListenInterval,
    OUT PUCHAR pApAddr,
    OUT UCHAR *pSsidLen,
    OUT char *Ssid,
    OUT UCHAR *pRatesLen,
    OUT UCHAR Rates[],
    OUT UCHAR *RSN,
    OUT UCHAR *pRSNLen,
    OUT BOOLEAN *pbWmmCapable,
    OUT ULONG  *pRalinkIe,
    OUT UCHAR		 *pHtCapabilityLen,
    OUT HT_CAPABILITY_IE *pHtCapability);

BOOLEAN PeerDisassocReqSanity(
    IN PRTMP_ADAPTER pAd,
    IN VOID *Msg,
    IN ULONG MsgLen,
    OUT PUCHAR pAddr2,
    OUT USHORT *Reason);

BOOLEAN PeerDeauthReqSanity(
    IN PRTMP_ADAPTER pAd,
    IN VOID *Msg,
    IN ULONG MsgLen,
    OUT PUCHAR pAddr2,
    OUT USHORT *Reason);

BOOLEAN APPeerAuthSanity(
    IN PRTMP_ADAPTER pAd,
    IN VOID *Msg,
    IN ULONG MsgLen,
	OUT PUCHAR pAddr1,
    OUT PUCHAR pAddr2,
    OUT USHORT *Alg,
    OUT USHORT *Seq,
    OUT USHORT *Status,
    CHAR *ChlgText);

BOOLEAN APPeerProbeReqSanity(
    IN PRTMP_ADAPTER pAd,
    IN VOID *Msg,
    IN ULONG MsgLen,
    OUT PUCHAR pAddr2,
    OUT CHAR Ssid[],
    OUT UCHAR *SsidLen);

BOOLEAN APPeerBeaconAndProbeRspSanity(
    IN PRTMP_ADAPTER pAd,
    IN VOID *Msg,
    IN ULONG MsgLen,
    OUT PUCHAR pAddr2,
    OUT PUCHAR pBssid,
    OUT CHAR Ssid[],
    OUT UCHAR *SsidLen,
    OUT UCHAR *BssType,
    OUT USHORT *BeaconPeriod,
    OUT UCHAR *Channel,
    OUT LARGE_INTEGER *Timestamp,
    OUT USHORT *CapabilityInfo,
    OUT UCHAR Rate[],
    OUT UCHAR *RateLen,
    OUT BOOLEAN *ExtendedRateIeExist,
    OUT UCHAR *Erp);


// ================== end of AP RTMP.h ========================


#endif  // __AP_H__


Lines 524-535 static CH_REGION ChRegion[] = Link Here

(-)a/drivers/staging/rt2860/chlist.h (-5 lines)
524	JAP,	524	JAP,
525	{	525	{
526	{ 1, 14, 20, BOTH, FALSE}, // 2.4 G, ch 1~14	526	{ 1, 14, 20, BOTH, FALSE}, // 2.4 G, ch 1~14
527	#ifndef RT30xx
528	{ 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48	527	{ 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
529	#endif
530	#ifdef RT30xx
531	{ 34, 4, 23, IDOR, FALSE}, // 5G, ch 34~46
532	#endif
533	{ 0}, // end	528	{ 0}, // end
534	}	529	}
535	},	530	},




							  sizeof(FRAME_BAR),	  &FrameBar,
							  END_OF_ARGS);

			MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);

#ifndef RT30xx
				MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
#endif
#ifdef RT30xx
				MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
#endif
			}
			MlmeFreeMemory(pAd, pOutBuffer);
		}
	}

Lines 531-542 VOID BAOriSessionSetUp( Link Here

(-)a/drivers/staging/rt2860/common/ba_action.c (-15 / +4 lines)
531	pBAEntry->TimeOutValue = TimeOut;	531	pBAEntry->TimeOutValue = TimeOut;
532	pBAEntry->pAdapter = pAd;	532	pBAEntry->pAdapter = pAd;
533		533
534	#ifdef RT30xx
535	DBGPRINT(RT_DEBUG_TRACE,("Send AddBA to %02x:%02x:%02x:%02x:%02x:%02x Tid:%d isForced:%d Wcid:%d\n"	534	DBGPRINT(RT_DEBUG_TRACE,("Send AddBA to %02x:%02x:%02x:%02x:%02x:%02x Tid:%d isForced:%d Wcid:%d\n"
536	,pEntry->Addr[0],pEntry->Addr[1],pEntry->Addr[2]	535	,pEntry->Addr[0],pEntry->Addr[1],pEntry->Addr[2]
537	,pEntry->Addr[3],pEntry->Addr[4],pEntry->Addr[5]	536	,pEntry->Addr[3],pEntry->Addr[4],pEntry->Addr[5]
538	,TID,isForced,pEntry->Aid));	537	,TID,isForced,pEntry->Aid));
539	#endif
540		538
541	if (!(pEntry->TXBAbitmap & (1<<TID)))	539	if (!(pEntry->TXBAbitmap & (1<<TID)))
542	{	540	{
Lines 869-874 VOID BAOriSessionTearDown( Link Here
869	// force send specified TID DelBA	867	// force send specified TID DelBA
870	MLME_DELBA_REQ_STRUCT DelbaReq;	868	MLME_DELBA_REQ_STRUCT DelbaReq;
871	MLME_QUEUE_ELEM Elem = (MLME_QUEUE_ELEM ) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);	869	MLME_QUEUE_ELEM Elem = (MLME_QUEUE_ELEM ) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
		870	if (Elem == NULL)
		871	return;
872		872
873	NdisZeroMemory(&DelbaReq, sizeof(DelbaReq));	873	NdisZeroMemory(&DelbaReq, sizeof(DelbaReq));
874	NdisZeroMemory(Elem, sizeof(MLME_QUEUE_ELEM));	874	NdisZeroMemory(Elem, sizeof(MLME_QUEUE_ELEM));
Lines 902-907 VOID BAOriSessionTearDown( Link Here
902	{	902	{
903	MLME_DELBA_REQ_STRUCT DelbaReq;	903	MLME_DELBA_REQ_STRUCT DelbaReq;
904	MLME_QUEUE_ELEM Elem = (MLME_QUEUE_ELEM ) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);	904	MLME_QUEUE_ELEM Elem = (MLME_QUEUE_ELEM ) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
		905	if (Elem == NULL)
		906	return;
905		907
906	NdisZeroMemory(&DelbaReq, sizeof(DelbaReq));	908	NdisZeroMemory(&DelbaReq, sizeof(DelbaReq));
907	NdisZeroMemory(Elem, sizeof(MLME_QUEUE_ELEM));	909	NdisZeroMemory(Elem, sizeof(MLME_QUEUE_ELEM));
Lines 1078-1093 VOID BAOriSessionSetupTimeout( Link Here
1078	AddbaReq.Token = pBAEntry->Token;	1080	AddbaReq.Token = pBAEntry->Token;
1079	MlmeEnqueue(pAd, ACTION_STATE_MACHINE, MT2_MLME_ADD_BA_CATE, sizeof(MLME_ADDBA_REQ_STRUCT), (PVOID)&AddbaReq);	1081	MlmeEnqueue(pAd, ACTION_STATE_MACHINE, MT2_MLME_ADD_BA_CATE, sizeof(MLME_ADDBA_REQ_STRUCT), (PVOID)&AddbaReq);
1080	RT28XX_MLME_HANDLER(pAd);	1082	RT28XX_MLME_HANDLER(pAd);
1081	#ifndef RT30xx
1082	DBGPRINT(RT_DEBUG_TRACE,("BA Ori Session Timeout(%d) : Send ADD BA again\n", pBAEntry->Token));
1083	#endif
1084	#ifdef RT30xx
1085	DBGPRINT(RT_DEBUG_TRACE,("BA Ori Session Timeout(%d) to %02x:%02x:%02x:%02x:%02x:%02x Tid:%d Wcid:%d\n"	1083	DBGPRINT(RT_DEBUG_TRACE,("BA Ori Session Timeout(%d) to %02x:%02x:%02x:%02x:%02x:%02x Tid:%d Wcid:%d\n"
1086	,pBAEntry->Token	1084	,pBAEntry->Token
1087	,pEntry->Addr[0],pEntry->Addr[1],pEntry->Addr[2]	1085	,pEntry->Addr[0],pEntry->Addr[1],pEntry->Addr[2]
1088	,pEntry->Addr[3],pEntry->Addr[4],pEntry->Addr[5]	1086	,pEntry->Addr[3],pEntry->Addr[4],pEntry->Addr[5]
1089	,pBAEntry->TID,pEntry->Aid));	1087	,pBAEntry->TID,pEntry->Aid));
1090	#endif
1091	pBAEntry->Token++;	1088	pBAEntry->Token++;
1092	RTMPSetTimer(&pBAEntry->ORIBATimer, ORI_BA_SESSION_TIMEOUT);	1089	RTMPSetTimer(&pBAEntry->ORIBATimer, ORI_BA_SESSION_TIMEOUT);
1093	}	1090	}
Lines 1391-1400 VOID SendPSMPAction( Link Here
1391	//ULONG Idx;	1388	//ULONG Idx;
1392	FRAME_PSMP_ACTION Frame;	1389	FRAME_PSMP_ACTION Frame;
1393	ULONG FrameLen;	1390	ULONG FrameLen;
1394	#ifdef RT30xx
1395	UCHAR bbpdata=0;	1391	UCHAR bbpdata=0;
1396	UINT32 macdata;	1392	UINT32 macdata;
1397	#endif // RT30xx //
1398		1393
1399	NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory	1394	NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
1400	if (NStatus != NDIS_STATUS_SUCCESS)	1395	if (NStatus != NDIS_STATUS_SUCCESS)
Lines 1410-1416 VOID SendPSMPAction( Link Here
1410	switch (Psmp)	1405	switch (Psmp)
1411	{	1406	{
1412	case MMPS_ENABLE:	1407	case MMPS_ENABLE:
1413	#ifdef RT30xx
1414	if (IS_RT3090(pAd))	1408	if (IS_RT3090(pAd))
1415	{	1409	{
1416	// disable MMPS BBP control register	1410	// disable MMPS BBP control register
Lines 1423-1433 VOID SendPSMPAction( Link Here
1423	macdata &= ~(0x09); //bit 0, 3	1417	macdata &= ~(0x09); //bit 0, 3
1424	RTMP_IO_WRITE32(pAd, 0x1210, macdata);	1418	RTMP_IO_WRITE32(pAd, 0x1210, macdata);
1425	}	1419	}
1426	#endif // RT30xx //
1427	Frame.Psmp = 0;	1420	Frame.Psmp = 0;
1428	break;	1421	break;
1429	case MMPS_DYNAMIC:	1422	case MMPS_DYNAMIC:
1430	#ifdef RT30xx
1431	if (IS_RT3090(pAd))	1423	if (IS_RT3090(pAd))
1432	{	1424	{
1433	// enable MMPS BBP control register	1425	// enable MMPS BBP control register
Lines 1440-1450 VOID SendPSMPAction( Link Here
1440	macdata \|= 0x09; //bit 0, 3	1432	macdata \|= 0x09; //bit 0, 3
1441	RTMP_IO_WRITE32(pAd, 0x1210, macdata);	1433	RTMP_IO_WRITE32(pAd, 0x1210, macdata);
1442	}	1434	}
1443	#endif // RT30xx //
1444	Frame.Psmp = 3;	1435	Frame.Psmp = 3;
1445	break;	1436	break;
1446	case MMPS_STATIC:	1437	case MMPS_STATIC:
1447	#ifdef RT30xx
1448	if (IS_RT3090(pAd))	1438	if (IS_RT3090(pAd))
1449	{	1439	{
1450	// enable MMPS BBP control register	1440	// enable MMPS BBP control register
Lines 1457-1463 VOID SendPSMPAction( Link Here
1457	macdata \|= 0x09; //bit 0, 3	1447	macdata \|= 0x09; //bit 0, 3
1458	RTMP_IO_WRITE32(pAd, 0x1210, macdata);	1448	RTMP_IO_WRITE32(pAd, 0x1210, macdata);
1459	}	1449	}
1460	#endif // RT30xx //
1461	Frame.Psmp = 1;	1450	Frame.Psmp = 1;
1462	break;	1451	break;
1463	}	1452	}




	return Status;
}
#endif
#ifdef RT30xx
NDIS_STATUS MlmeDataHardTransmit(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR	QueIdx,
	IN	PNDIS_PACKET	pPacket);

#define MAX_DATAMM_RETRY	3
/*
	========================================================================

	Routine Description:
		API for MLME to transmit management frame to AP (BSS Mode)
	or station (IBSS Mode)

	Arguments:
		pAd Pointer to our adapter
		pData		Pointer to the outgoing 802.11 frame
		Length		Size of outgoing management frame

	Return Value:
		NDIS_STATUS_FAILURE
		NDIS_STATUS_PENDING
		NDIS_STATUS_SUCCESS

	IRQL = PASSIVE_LEVEL
	IRQL = DISPATCH_LEVEL

	Note:

	========================================================================
*/
NDIS_STATUS MiniportDataMMRequest(
							 IN  PRTMP_ADAPTER   pAd,
							 IN  UCHAR           QueIdx,
							 IN  PUCHAR          pData,
							 IN  UINT            Length)
{
	PNDIS_PACKET    pPacket;
	NDIS_STATUS  Status = NDIS_STATUS_SUCCESS;
	ULONG    FreeNum;
	int 	retry = 0;
	UCHAR           IrqState;
	UCHAR			rtmpHwHdr[TXINFO_SIZE + TXWI_SIZE]; //RTMP_HW_HDR_LEN];

	ASSERT(Length <= MGMT_DMA_BUFFER_SIZE);

	// 2860C use Tx Ring
	IrqState = pAd->irq_disabled;

	do
	{
		// Reset is in progress, stop immediately
		if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS) ||
			 RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST)||
			!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_START_UP))
		{
			Status = NDIS_STATUS_FAILURE;
			break;
		}

		// Check Free priority queue
		// Since we use PBF Queue2 for management frame.  Its corresponding DMA ring should be using TxRing.

		// 2860C use Tx Ring

		// free Tx(QueIdx) resources
		FreeNum = GET_TXRING_FREENO(pAd, QueIdx);

		if ((FreeNum > 0))
		{
			// We need to reserve space for rtmp hardware header. i.e., TxWI for RT2860 and TxInfo+TxWI for RT2870
			NdisZeroMemory(&rtmpHwHdr, (TXINFO_SIZE + TXWI_SIZE));
			Status = RTMPAllocateNdisPacket(pAd, &pPacket, (PUCHAR)&rtmpHwHdr, (TXINFO_SIZE + TXWI_SIZE), pData, Length);
			if (Status != NDIS_STATUS_SUCCESS)
			{
				DBGPRINT(RT_DEBUG_WARN, ("MiniportMMRequest (error:: can't allocate NDIS PACKET)\n"));
				break;
			}

			//pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_CCK;
			//pAd->CommonCfg.MlmeRate = RATE_2;


			Status = MlmeDataHardTransmit(pAd, QueIdx, pPacket);
			if (Status != NDIS_STATUS_SUCCESS)
				RTMPFreeNdisPacket(pAd, pPacket);
			retry = MAX_DATAMM_RETRY;
		}
		else
		{
			retry ++;

			printk("retry %d\n", retry);
			pAd->RalinkCounters.MgmtRingFullCount++;

			if (retry >= MAX_DATAMM_RETRY)
			{
				DBGPRINT(RT_DEBUG_ERROR, ("Qidx(%d), not enough space in DataRing, MgmtRingFullCount=%ld!\n",
											QueIdx, pAd->RalinkCounters.MgmtRingFullCount));
			}
		}

	} while (retry < MAX_DATAMM_RETRY);


	return Status;
}
#endif /* RT30xx */

/*
	========================================================================

}
#endif /* RT2860 */

#ifdef RT30xx
NDIS_STATUS MlmeDataHardTransmit(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR	QueIdx,
	IN	PNDIS_PACKET	pPacket)
{
	if ((pAd->CommonCfg.RadarDetect.RDMode != RD_NORMAL_MODE)
		)
	{
		return NDIS_STATUS_FAILURE;
	}

#ifdef RT2870
	return MlmeHardTransmitMgmtRing(pAd,QueIdx,pPacket);
#endif // RT2870 //
}
#endif /* RT30xx */

NDIS_STATUS MlmeHardTransmitMgmtRing(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR	QueIdx,

	}

	return TRUE;

#ifdef RT30xx
FillTxBlkErr:
	return FALSE;
#endif
}



	TX_BLK			TxBlk;
	TX_BLK			*pTxBlk;

#ifdef DBG_DIAGNOSE
	BOOLEAN			firstRound;
	RtmpDiagStruct	*pDiagStruct = &pAd->DiagStruct;
#endif


	if (QIdx == NUM_OF_TX_RING)


		RT28XX_START_DEQUEUE(pAd, QueIdx, IrqFlags);

#ifdef DBG_DIAGNOSE
		firstRound = ((QueIdx == 0) ? TRUE : FALSE);
#endif // DBG_DIAGNOSE //

		while (1)
		{

			DEQUEUE_LOCK(&pAd->irq_lock, bIntContext, IrqFlags);
			if (&pAd->TxSwQueue[QueIdx] == NULL)
			{
#ifdef DBG_DIAGNOSE
				if (firstRound == TRUE)
					pDiagStruct->TxSWQueCnt[pDiagStruct->ArrayCurIdx][0]++;
#endif // DBG_DIAGNOSE //
				DEQUEUE_UNLOCK(&pAd->irq_lock, bIntContext, IrqFlags);
				break;
			}
#ifdef RT2860
			FreeNumber[QueIdx] = GET_TXRING_FREENO(pAd, QueIdx);

#ifdef DBG_DIAGNOSE
			if (firstRound == TRUE)
			{
				UCHAR	txDescNumLevel, txSwQNumLevel;

				txDescNumLevel = (TX_RING_SIZE - FreeNumber[QueIdx]); // Number of occupied hw desc.
				txDescNumLevel = ((txDescNumLevel <=15) ? txDescNumLevel : 15);
				pDiagStruct->TxDescCnt[pDiagStruct->ArrayCurIdx][txDescNumLevel]++;

				txSwQNumLevel = ((pAd->TxSwQueue[QueIdx].Number <=7) ? pAd->TxSwQueue[QueIdx].Number : 8);
				pDiagStruct->TxSWQueCnt[pDiagStruct->ArrayCurIdx][txSwQNumLevel]++;

				firstRound = FALSE;
			}
#endif // DBG_DIAGNOSE //

			if (FreeNumber[QueIdx] <= 5)
			{

		}
	}

#ifdef DBG_DIAGNOSE
		if (pTxBlk->QueIdx== 0)
		{
			pAd->DiagStruct.TxDataCnt[pAd->DiagStruct.ArrayCurIdx]++;
			pAd->DiagStruct.TxMcsCnt[pAd->DiagStruct.ArrayCurIdx][pTxWI->MCS]++;
		}
#endif // DBG_DIAGNOSE //

	// for rate adapation
	pTxWI->PacketId = pTxWI->MCS;

		}
	}

#ifdef DBG_DIAGNOSE
	if (pTxBlk->QueIdx== 0)
	{
		pAd->DiagStruct.TxDataCnt[pAd->DiagStruct.ArrayCurIdx]++;
		pAd->DiagStruct.TxMcsCnt[pAd->DiagStruct.ArrayCurIdx][pTxWI->MCS]++;
	}
#endif // DBG_DIAGNOSE //

	pTxWI->MPDUtotalByteCount = pTxBlk->MpduHeaderLen + pTxBlk->SrcBufLen;



	DBGPRINT(RT_DEBUG_TRACE, ("<== RTMPHandleRxCoherentInterrupt \n"));
}


VOID DBGPRINT_TX_RING(
	IN PRTMP_ADAPTER  pAd,
	IN UCHAR          QueIdx)
{
	UINT32		Ac0Base;
	UINT32		Ac0HwIdx = 0, Ac0SwIdx = 0, AC0freeIdx;
	int			i;
	PULONG	ptemp;

	DBGPRINT_RAW(RT_DEBUG_TRACE, ("=====================================================\n "  ));
	switch (QueIdx)
	{
		case QID_AC_BE:
			RTMP_IO_READ32(pAd, TX_BASE_PTR0, &Ac0Base);
			RTMP_IO_READ32(pAd, TX_CTX_IDX0, &Ac0SwIdx);
			RTMP_IO_READ32(pAd, TX_DTX_IDX0, &Ac0HwIdx);
			DBGPRINT_RAW(RT_DEBUG_TRACE, ("All QID_AC_BE DESCRIPTOR  \n "  ));
			for (i=0;i<TX_RING_SIZE;i++)
			{
				ptemp= (PULONG)pAd->TxRing[QID_AC_BE].Cell[i].AllocVa;
				DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d]  %08lx: %08lx: %08lx: %08lx\n " , i, *ptemp,*(ptemp+1),*(ptemp+2),*(ptemp+3)));
			}
			DBGPRINT_RAW(RT_DEBUG_TRACE, ("  \n "  ));
			break;
		case QID_AC_BK:
			RTMP_IO_READ32(pAd, TX_BASE_PTR1, &Ac0Base);
			RTMP_IO_READ32(pAd, TX_CTX_IDX1, &Ac0SwIdx);
			RTMP_IO_READ32(pAd, TX_DTX_IDX1, &Ac0HwIdx);
			DBGPRINT_RAW(RT_DEBUG_TRACE, ("All QID_AC_BK DESCRIPTOR  \n "  ));
			for (i=0;i<TX_RING_SIZE;i++)
			{
				ptemp= (PULONG)pAd->TxRing[QID_AC_BK].Cell[i].AllocVa;
				DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d]  %08lx: %08lx: %08lx: %08lx\n " , i, *ptemp,*(ptemp+1),*(ptemp+2),*(ptemp+3)));
			}
			DBGPRINT_RAW(RT_DEBUG_TRACE, ("  \n "  ));
			break;
		case QID_AC_VI:
			RTMP_IO_READ32(pAd, TX_BASE_PTR2, &Ac0Base);
			RTMP_IO_READ32(pAd, TX_CTX_IDX2, &Ac0SwIdx);
			RTMP_IO_READ32(pAd, TX_DTX_IDX2, &Ac0HwIdx);
			DBGPRINT_RAW(RT_DEBUG_TRACE, ("All QID_AC_VI DESCRIPTOR \n "  ));
			for (i=0;i<TX_RING_SIZE;i++)
			{
				ptemp= (PULONG)pAd->TxRing[QID_AC_VI].Cell[i].AllocVa;
				DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d]  %08lx: %08lx: %08lx: %08lx\n " , i, *ptemp,*(ptemp+1),*(ptemp+2),*(ptemp+3)));
			}
			DBGPRINT_RAW(RT_DEBUG_TRACE, ("  \n "  ));
			break;
		case QID_AC_VO:
			RTMP_IO_READ32(pAd, TX_BASE_PTR3, &Ac0Base);
			RTMP_IO_READ32(pAd, TX_CTX_IDX3, &Ac0SwIdx);
			RTMP_IO_READ32(pAd, TX_DTX_IDX3, &Ac0HwIdx);
			DBGPRINT_RAW(RT_DEBUG_TRACE, ("All QID_AC_VO DESCRIPTOR \n "  ));
			for (i=0;i<TX_RING_SIZE;i++)
			{
				ptemp= (PULONG)pAd->TxRing[QID_AC_VO].Cell[i].AllocVa;
				DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d]  %08lx: %08lx: %08lx: %08lx\n " , i, *ptemp,*(ptemp+1),*(ptemp+2),*(ptemp+3)));
			}
			DBGPRINT_RAW(RT_DEBUG_TRACE, ("  \n "  ));
			break;
		case QID_MGMT:
			RTMP_IO_READ32(pAd, TX_BASE_PTR5, &Ac0Base);
			RTMP_IO_READ32(pAd, TX_CTX_IDX5, &Ac0SwIdx);
			RTMP_IO_READ32(pAd, TX_DTX_IDX5, &Ac0HwIdx);
			DBGPRINT_RAW(RT_DEBUG_TRACE, (" All QID_MGMT  DESCRIPTOR \n "  ));
			for (i=0;i<MGMT_RING_SIZE;i++)
			{
				ptemp= (PULONG)pAd->MgmtRing.Cell[i].AllocVa;
				DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d]  %08lx: %08lx: %08lx: %08lx\n " , i, *ptemp,*(ptemp+1),*(ptemp+2),*(ptemp+3)));
			}
			DBGPRINT_RAW(RT_DEBUG_TRACE, ("  \n "  ));
			break;

		default:
			DBGPRINT_ERR(("DBGPRINT_TX_RING(Ring %d) not supported\n", QueIdx));
			break;
	}
	AC0freeIdx = pAd->TxRing[QueIdx].TxSwFreeIdx;

	DBGPRINT(RT_DEBUG_TRACE,("TxRing%d, TX_DTX_IDX=%d, TX_CTX_IDX=%d\n", QueIdx, Ac0HwIdx, Ac0SwIdx));
	DBGPRINT_RAW(RT_DEBUG_TRACE,(" 	TxSwFreeIdx[%d]", AC0freeIdx));
	DBGPRINT_RAW(RT_DEBUG_TRACE,("	pending-NDIS=%ld\n", pAd->RalinkCounters.PendingNdisPacketCount));


}


VOID DBGPRINT_RX_RING(
	IN PRTMP_ADAPTER  pAd)
{
	UINT32		Ac0Base;
	UINT32		Ac0HwIdx = 0, Ac0SwIdx = 0, AC0freeIdx;
	int			i;
	UINT32	*ptemp;

	DBGPRINT_RAW(RT_DEBUG_TRACE, ("=====================================================\n "  ));
	RTMP_IO_READ32(pAd, RX_BASE_PTR, &Ac0Base);
	RTMP_IO_READ32(pAd, RX_CRX_IDX, &Ac0SwIdx);
	RTMP_IO_READ32(pAd, RX_DRX_IDX, &Ac0HwIdx);
	AC0freeIdx = pAd->RxRing.RxSwReadIdx;

	DBGPRINT_RAW(RT_DEBUG_TRACE, ("All RX DSP  \n "  ));
	for (i=0;i<RX_RING_SIZE;i++)
	{
		ptemp = (UINT32 *)pAd->RxRing.Cell[i].AllocVa;
		DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d]  %08x: %08x: %08x: %08x\n " , i, *ptemp,*(ptemp+1),*(ptemp+2),*(ptemp+3)));
	}
	DBGPRINT(RT_DEBUG_TRACE,("RxRing, RX_DRX_IDX=%d, RX_CRX_IDX=%d \n", Ac0HwIdx, Ac0SwIdx));
	DBGPRINT_RAW(RT_DEBUG_TRACE,(" 	RxSwReadIdx [%d]=", AC0freeIdx));
	DBGPRINT_RAW(RT_DEBUG_TRACE,("	pending-NDIS=%ld\n", pAd->RalinkCounters.PendingNdisPacketCount));
}
#endif /* RT2860 */

/*

{
	DBGPRINT(RT_DEBUG_TRACE,("SCAN done, resume MSDU transmission ...\n"));

#ifdef RT30xx
	// After finish BSS_SCAN_IN_PROGRESS, we need to restore Current R66 value
	// R66 should not be 0
	if (pAd->BbpTuning.R66CurrentValue == 0)

		pAd->BbpTuning.R66CurrentValue = 0x38;
		DBGPRINT_ERR(("RTMPResumeMsduTransmission, R66CurrentValue=0...\n"));
	}

	RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, pAd->BbpTuning.R66CurrentValue);

	RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);

		{
		    // avoid local heap overflow, use dyanamic allocation
		   MLME_QUEUE_ELEM *Elem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
		   if (Elem == NULL)
			return;
		   memmove(Elem->Msg+(LENGTH_802_11 + LENGTH_802_1_H), pPayload, PayloadSize);
		   Elem->MsgLen = LENGTH_802_11 + LENGTH_802_1_H + PayloadSize;
		   WpaEAPOLKeyAction(pAd, Elem);

	if (pAd->MacTab.Size == 0)
	{
		pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode = 0;
#ifdef RT2860
		AsicUpdateProtect(pAd, 0 /*pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode*/, (ALLN_SETPROTECT), TRUE, 0 /*pAd->MacTab.fAnyStationNonGF*/);
#else
		// edit by johnli, fix "in_interrupt" error when call "MacTableDeleteEntry" in Rx tasklet
		// Set MAC register value according operation mode
		RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_UPDATE_PROTECT, NULL, 0);
#endif
	}





 *************************************************************************
*/

#include <linux/sched.h>
#include "../rt_config.h"

INT	Show_SSID_Proc(

		pAd->CommonCfg.DesiredHtPhy.RxSTBC = 0;
	}

#ifndef RT30xx
#ifdef RT2870
	/* Frank recommend ,If not, Tx maybe block in high power. Rx has no problem*/
	if(IS_RT3070(pAd) && ((pAd->RfIcType == RFIC_3020) || (pAd->RfIcType == RFIC_2020)))
	{
		pAd->CommonCfg.HtCapability.HtCapInfo.TxSTBC = 0;
		pAd->CommonCfg.DesiredHtPhy.TxSTBC = 0;
	}
#endif // RT2870 //
#endif

	if(pHTPhyMode->SHORTGI == GI_400)
	{
		pAd->CommonCfg.HtCapability.HtCapInfo.ShortGIfor20 = 1;

	if (Value == 0)
	{
		pAd->CommonCfg.BACapability.field.AutoBA = FALSE;
#ifdef RT30xx
		pAd->CommonCfg.BACapability.field.Policy = BA_NOTUSE;
#endif
	}
    else if (Value == 1)
	{
		pAd->CommonCfg.BACapability.field.AutoBA = TRUE;
#ifdef RT30xx
		pAd->CommonCfg.BACapability.field.Policy = IMMED_BA;
#endif
	}
	else
		return FALSE; //Invalid argument

    pAd->CommonCfg.REGBACapability.field.AutoBA = pAd->CommonCfg.BACapability.field.AutoBA;
#ifdef RT30xx
    pAd->CommonCfg.REGBACapability.field.Policy = pAd->CommonCfg.BACapability.field.Policy;

	SetCommonHT(pAd);

	DBGPRINT(RT_DEBUG_TRACE, ("Set_HtAutoBa_Proc::(HtAutoBa=%d)\n",pAd->CommonCfg.BACapability.field.AutoBA));

	{
		case Ndis802_11AuthModeOpen:
			return "OPEN";
#if defined(RT2860) || defined(RT30xx)
        default:
#endif
		case Ndis802_11AuthModeWPAPSK:
			return "WPAPSK";
		case Ndis802_11AuthModeShared:

			return "WPAPSKWPA2PSK";
        case Ndis802_11AuthModeWPA1WPA2:
			return "WPA1WPA2";
#ifndef RT30xx
		case Ndis802_11AuthModeWPANone:
			return "WPANONE";
#ifdef RT2870
		default:
			return "UNKNOW";
#endif
#endif
	}
}






	return NetWorkType;
}

/*
    ==========================================================================
    Description:
        WPA message sanity check
    Return:
        TRUE if all parameters are OK, FALSE otherwise
    ==========================================================================
 */
BOOLEAN PeerWpaMessageSanity(
    IN 	PRTMP_ADAPTER 		pAd,
    IN 	PEAPOL_PACKET 		pMsg,
    IN 	ULONG 				MsgLen,
    IN 	UCHAR				MsgType,
    IN 	MAC_TABLE_ENTRY  	*pEntry)
{
	UCHAR			mic[LEN_KEY_DESC_MIC], digest[80], KEYDATA[MAX_LEN_OF_RSNIE];
	BOOLEAN			bReplayDiff = FALSE;
	BOOLEAN			bWPA2 = FALSE;
	KEY_INFO		EapolKeyInfo;
	UCHAR			GroupKeyIndex = 0;


	NdisZeroMemory(mic, sizeof(mic));
	NdisZeroMemory(digest, sizeof(digest));
	NdisZeroMemory(KEYDATA, sizeof(KEYDATA));
	NdisZeroMemory((PUCHAR)&EapolKeyInfo, sizeof(EapolKeyInfo));

	NdisMoveMemory((PUCHAR)&EapolKeyInfo, (PUCHAR)&pMsg->KeyDesc.KeyInfo, sizeof(KEY_INFO));

	*((USHORT *)&EapolKeyInfo) = cpu2le16(*((USHORT *)&EapolKeyInfo));

	// Choose WPA2 or not
	if ((pEntry->AuthMode == Ndis802_11AuthModeWPA2) || (pEntry->AuthMode == Ndis802_11AuthModeWPA2PSK))
		bWPA2 = TRUE;

	// 0. Check MsgType
	if ((MsgType > EAPOL_GROUP_MSG_2) || (MsgType < EAPOL_PAIR_MSG_1))
	{
		DBGPRINT(RT_DEBUG_ERROR, ("The message type is invalid(%d)! \n", MsgType));
		return FALSE;
	}

	// 1. Replay counter check
 	if (MsgType == EAPOL_PAIR_MSG_1 || MsgType == EAPOL_PAIR_MSG_3 || MsgType == EAPOL_GROUP_MSG_1)	// For supplicant
    {
    	// First validate replay counter, only accept message with larger replay counter.
		// Let equal pass, some AP start with all zero replay counter
		UCHAR	ZeroReplay[LEN_KEY_DESC_REPLAY];

        NdisZeroMemory(ZeroReplay, LEN_KEY_DESC_REPLAY);
		if ((RTMPCompareMemory(pMsg->KeyDesc.ReplayCounter, pEntry->R_Counter, LEN_KEY_DESC_REPLAY) != 1) &&
			(RTMPCompareMemory(pMsg->KeyDesc.ReplayCounter, ZeroReplay, LEN_KEY_DESC_REPLAY) != 0))
    	{
			bReplayDiff = TRUE;
    	}
 	}
	else if (MsgType == EAPOL_PAIR_MSG_2 || MsgType == EAPOL_PAIR_MSG_4 || MsgType == EAPOL_GROUP_MSG_2)	// For authenticator
	{
		// check Replay Counter coresponds to MSG from authenticator, otherwise discard
    	if (!NdisEqualMemory(pMsg->KeyDesc.ReplayCounter, pEntry->R_Counter, LEN_KEY_DESC_REPLAY))
    	{
			bReplayDiff = TRUE;
    	}
	}

	// Replay Counter different condition
	if (bReplayDiff)
	{
		// send wireless event - for replay counter different
		if (pAd->CommonCfg.bWirelessEvent)
			RTMPSendWirelessEvent(pAd, IW_REPLAY_COUNTER_DIFF_EVENT_FLAG, pEntry->Addr, pEntry->apidx, 0);

		if (MsgType < EAPOL_GROUP_MSG_1)
		{
           	DBGPRINT(RT_DEBUG_ERROR, ("Replay Counter Different in pairwise msg %d of 4-way handshake!\n", MsgType));
		}
		else
		{
			DBGPRINT(RT_DEBUG_ERROR, ("Replay Counter Different in group msg %d of 2-way handshake!\n", (MsgType - EAPOL_PAIR_MSG_4)));
		}

		hex_dump("Receive replay counter ", pMsg->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
		hex_dump("Current replay counter ", pEntry->R_Counter, LEN_KEY_DESC_REPLAY);
        return FALSE;
	}

	// 2. Verify MIC except Pairwise Msg1
	if (MsgType != EAPOL_PAIR_MSG_1)
	{
		UCHAR			rcvd_mic[LEN_KEY_DESC_MIC];

		// Record the received MIC for check later
		NdisMoveMemory(rcvd_mic, pMsg->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
		NdisZeroMemory(pMsg->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);

        if (pEntry->WepStatus == Ndis802_11Encryption2Enabled)	// TKIP
        {
            hmac_md5(pEntry->PTK, LEN_EAP_MICK, (PUCHAR)pMsg, MsgLen, mic);
        }
        else if (pEntry->WepStatus == Ndis802_11Encryption3Enabled)	// AES
        {
            HMAC_SHA1((PUCHAR)pMsg, MsgLen, pEntry->PTK, LEN_EAP_MICK, digest);
            NdisMoveMemory(mic, digest, LEN_KEY_DESC_MIC);
        }

        if (!NdisEqualMemory(rcvd_mic, mic, LEN_KEY_DESC_MIC))
        {
			// send wireless event - for MIC different
			if (pAd->CommonCfg.bWirelessEvent)
				RTMPSendWirelessEvent(pAd, IW_MIC_DIFF_EVENT_FLAG, pEntry->Addr, pEntry->apidx, 0);

			if (MsgType < EAPOL_GROUP_MSG_1)
			{
            	DBGPRINT(RT_DEBUG_ERROR, ("MIC Different in pairwise msg %d of 4-way handshake!\n", MsgType));
			}
			else
			{
				DBGPRINT(RT_DEBUG_ERROR, ("MIC Different in group msg %d of 2-way handshake!\n", (MsgType - EAPOL_PAIR_MSG_4)));
			}

			hex_dump("Received MIC", rcvd_mic, LEN_KEY_DESC_MIC);
			hex_dump("Desired  MIC", mic, LEN_KEY_DESC_MIC);

			return FALSE;
        }
	}

	// Extract the context of the Key Data field if it exist
	// The field in pairwise_msg_2_WPA1(WPA2) & pairwise_msg_3_WPA1 is un-encrypted.
	// The field in group_msg_1_WPA1(WPA2) & pairwise_msg_3_WPA2 is encrypted.
	if (pMsg->KeyDesc.KeyDataLen[1] > 0)
	{
		// Decrypt this field
		if ((MsgType == EAPOL_PAIR_MSG_3 && bWPA2) || (MsgType == EAPOL_GROUP_MSG_1))
		{
			if(pEntry->WepStatus == Ndis802_11Encryption3Enabled)
			{
				// AES
				AES_GTK_KEY_UNWRAP(&pEntry->PTK[16], KEYDATA, pMsg->KeyDesc.KeyDataLen[1],pMsg->KeyDesc.KeyData);
			}
			else
			{
				INT 	i;
				UCHAR   Key[32];
				// Decrypt TKIP GTK
				// Construct 32 bytes RC4 Key
				NdisMoveMemory(Key, pMsg->KeyDesc.KeyIv, 16);
				NdisMoveMemory(&Key[16], &pEntry->PTK[16], 16);
				ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, Key, 32);
				//discard first 256 bytes
				for(i = 0; i < 256; i++)
					ARCFOUR_BYTE(&pAd->PrivateInfo.WEPCONTEXT);
				// Decrypt GTK. Becareful, there is no ICV to check the result is correct or not
				ARCFOUR_DECRYPT(&pAd->PrivateInfo.WEPCONTEXT, KEYDATA, pMsg->KeyDesc.KeyData, pMsg->KeyDesc.KeyDataLen[1]);
			}

			if (!bWPA2 && (MsgType == EAPOL_GROUP_MSG_1))
				GroupKeyIndex = EapolKeyInfo.KeyIndex;

		}
		else if ((MsgType == EAPOL_PAIR_MSG_2) || (MsgType == EAPOL_PAIR_MSG_3 && !bWPA2))
		{
			NdisMoveMemory(KEYDATA, pMsg->KeyDesc.KeyData, pMsg->KeyDesc.KeyDataLen[1]);
		}
		else
		{

			return TRUE;
		}

		// Parse Key Data field to
		// 1. verify RSN IE for pairwise_msg_2_WPA1(WPA2) ,pairwise_msg_3_WPA1(WPA2)
		// 2. verify KDE format for pairwise_msg_3_WPA2, group_msg_1_WPA2
		// 3. update shared key for pairwise_msg_3_WPA2, group_msg_1_WPA1(WPA2)
		if (!RTMPParseEapolKeyData(pAd, KEYDATA, pMsg->KeyDesc.KeyDataLen[1], GroupKeyIndex, MsgType, bWPA2, pEntry))
		{
			return FALSE;
		}
	}

	return TRUE;

}




// WPA OUI
UCHAR		OUI_WPA_NONE_AKM[4]		= {0x00, 0x50, 0xF2, 0x00};
UCHAR       OUI_WPA_VERSION[4]      = {0x00, 0x50, 0xF2, 0x01};
#ifndef RT30xx
UCHAR       OUI_WPA_WEP40[4]      = {0x00, 0x50, 0xF2, 0x01};
#endif
UCHAR       OUI_WPA_TKIP[4]     = {0x00, 0x50, 0xF2, 0x02};
UCHAR       OUI_WPA_CCMP[4]     = {0x00, 0x50, 0xF2, 0x04};
#ifndef RT30xx
UCHAR       OUI_WPA_WEP104[4]      = {0x00, 0x50, 0xF2, 0x05};
#endif
UCHAR       OUI_WPA_8021X_AKM[4]	= {0x00, 0x50, 0xF2, 0x01};
UCHAR       OUI_WPA_PSK_AKM[4]      = {0x00, 0x50, 0xF2, 0x02};
// WPA2 OUI

UCHAR       OUI_WPA2_CCMP[4]        = {0x00, 0x0F, 0xAC, 0x04};
UCHAR       OUI_WPA2_8021X_AKM[4]   = {0x00, 0x0F, 0xAC, 0x01};
UCHAR       OUI_WPA2_PSK_AKM[4]   	= {0x00, 0x0F, 0xAC, 0x02};
#ifndef RT30xx
UCHAR       OUI_WPA2_WEP104[4]   = {0x00, 0x0F, 0xAC, 0x05};
#endif
// MSA OUI
UCHAR   	OUI_MSA_8021X_AKM[4]    = {0x00, 0x0F, 0xAC, 0x05};		// Not yet final - IEEE 802.11s-D1.06
UCHAR   	OUI_MSA_PSK_AKM[4]   	= {0x00, 0x0F, 0xAC, 0x06};		// Not yet final - IEEE 802.11s-D1.06

                break;
        }

#ifndef RT30xx
		if ((pAd->OpMode == OPMODE_STA) &&
			(pAd->StaCfg.GroupCipher != Ndis802_11Encryption2Enabled) &&
			(pAd->StaCfg.GroupCipher != Ndis802_11Encryption3Enabled))

					break;
			}
		}

		// swap for big-endian platform
		pRsnie_cipher->version = cpu2le16(pRsnie_cipher->version);
	    pRsnie_cipher->ucount = cpu2le16(pRsnie_cipher->ucount);

                break;
        }

#ifndef RT30xx
		if ((pAd->OpMode == OPMODE_STA) &&
			(pAd->StaCfg.GroupCipher != Ndis802_11Encryption2Enabled) &&
			(pAd->StaCfg.GroupCipher != Ndis802_11Encryption3Enabled))

					break;
			}
		}

		// swap for big-endian platform
		pRsnie_cipher->version = cpu2le16(pRsnie_cipher->version);
	    pRsnie_cipher->ucount = cpu2le16(pRsnie_cipher->ucount);

    return TRUE;
}


/*
    ==========================================================================
    Description:
        ENCRYPT AES GTK before sending in EAPOL frame.
        AES GTK length = 128 bit,  so fix blocks for aes-key-wrap as 2 in this function.
        This function references to RFC 3394 for aes key wrap algorithm.
    Return:
    ==========================================================================
*/
VOID AES_GTK_KEY_WRAP(
    IN UCHAR    *key,
    IN UCHAR    *plaintext,
    IN UCHAR    p_len,
    OUT UCHAR   *ciphertext)
{
    UCHAR       A[8], BIN[16], BOUT[16];
    UCHAR       R[512];
    INT         num_blocks = p_len/8;   // unit:64bits
    INT         i, j;
    aes_context aesctx;
    UCHAR       xor;

    rtmp_aes_set_key(&aesctx, key, 128);

    // Init IA
    for (i = 0; i < 8; i++)
        A[i] = 0xa6;

    //Input plaintext
    for (i = 0; i < num_blocks; i++)
    {
        for (j = 0 ; j < 8; j++)
            R[8 * (i + 1) + j] = plaintext[8 * i + j];
    }

    // Key Mix
    for (j = 0; j < 6; j++)
    {
        for(i = 1; i <= num_blocks; i++)
        {
            //phase 1
            NdisMoveMemory(BIN, A, 8);
            NdisMoveMemory(&BIN[8], &R[8 * i], 8);
            rtmp_aes_encrypt(&aesctx, BIN, BOUT);

            NdisMoveMemory(A, &BOUT[0], 8);
            xor = num_blocks * j + i;
            A[7] = BOUT[7] ^ xor;
            NdisMoveMemory(&R[8 * i], &BOUT[8], 8);
        }
    }

    // Output ciphertext
    NdisMoveMemory(ciphertext, A, 8);

    for (i = 1; i <= num_blocks; i++)
    {
        for (j = 0 ; j < 8; j++)
            ciphertext[8 * i + j] = R[8 * i + j];
    }
}


/*
	========================================================================



	os_free_mem(NULL, R);
}

/*
    ==========================================================================
    Description:
		Report the EAP message type

	Arguments:
		msg		-	EAPOL_PAIR_MSG_1
					EAPOL_PAIR_MSG_2
					EAPOL_PAIR_MSG_3
					EAPOL_PAIR_MSG_4
					EAPOL_GROUP_MSG_1
					EAPOL_GROUP_MSG_2

    Return:
         message type string

    ==========================================================================
*/
CHAR *GetEapolMsgType(CHAR msg)
{
    if(msg == EAPOL_PAIR_MSG_1)
        return "Pairwise Message 1";
    else if(msg == EAPOL_PAIR_MSG_2)
        return "Pairwise Message 2";
	else if(msg == EAPOL_PAIR_MSG_3)
        return "Pairwise Message 3";
	else if(msg == EAPOL_PAIR_MSG_4)
        return "Pairwise Message 4";
	else if(msg == EAPOL_GROUP_MSG_1)
        return "Group Message 1";
	else if(msg == EAPOL_GROUP_MSG_2)
        return "Group Message 2";
    else
    	return "Invalid Message";
}


/*
    ========================================================================

    Routine Description:
    Check Sanity RSN IE of EAPoL message

    Arguments:

    Return Value:


    ========================================================================
*/
BOOLEAN RTMPCheckRSNIE(
	IN  PRTMP_ADAPTER   pAd,
	IN  PUCHAR          pData,
	IN  UCHAR           DataLen,
	IN  MAC_TABLE_ENTRY *pEntry,
	OUT	UCHAR			*Offset)
{
	PUCHAR              pVIE;
	UCHAR               len;
	PEID_STRUCT         pEid;
	BOOLEAN				result = FALSE;

	pVIE = pData;
	len	 = DataLen;
	*Offset = 0;

	while (len > sizeof(RSNIE2))
	{
		pEid = (PEID_STRUCT) pVIE;
		// WPA RSN IE
		if ((pEid->Eid == IE_WPA) && (NdisEqualMemory(pEid->Octet, WPA_OUI, 4)))
		{
			if ((pEntry->AuthMode == Ndis802_11AuthModeWPA || pEntry->AuthMode == Ndis802_11AuthModeWPAPSK) &&
				(NdisEqualMemory(pVIE, pEntry->RSN_IE, pEntry->RSNIE_Len)) &&
				(pEntry->RSNIE_Len == (pEid->Len + 2)))
			{
					result = TRUE;
			}

			*Offset += (pEid->Len + 2);
		}
		// WPA2 RSN IE
		else if ((pEid->Eid == IE_RSN) && (NdisEqualMemory(pEid->Octet + 2, RSN_OUI, 3)))
		{
			if ((pEntry->AuthMode == Ndis802_11AuthModeWPA2 || pEntry->AuthMode == Ndis802_11AuthModeWPA2PSK) &&
				(NdisEqualMemory(pVIE, pEntry->RSN_IE, pEntry->RSNIE_Len)) &&
				(pEntry->RSNIE_Len == (pEid->Len + 2))/* ToDo-AlbertY for mesh*/)
			{
					result = TRUE;
			}

			*Offset += (pEid->Len + 2);
		}
		else
		{
			break;
		}

		pVIE += (pEid->Len + 2);
		len  -= (pEid->Len + 2);
	}


	return result;

}


/*
    ========================================================================

    Routine Description:
    Parse KEYDATA field.  KEYDATA[] May contain 2 RSN IE and optionally GTK.
    GTK  is encaptulated in KDE format at  p.83 802.11i D10

    Arguments:

    Return Value:

    Note:
        802.11i D10

    ========================================================================
*/
BOOLEAN RTMPParseEapolKeyData(
	IN  PRTMP_ADAPTER   pAd,
	IN  PUCHAR          pKeyData,
	IN  UCHAR           KeyDataLen,
	IN	UCHAR			GroupKeyIndex,
	IN	UCHAR			MsgType,
	IN	BOOLEAN			bWPA2,
	IN  MAC_TABLE_ENTRY *pEntry)
{
    PKDE_ENCAP          pKDE = NULL;
    PUCHAR              pMyKeyData = pKeyData;
    UCHAR               KeyDataLength = KeyDataLen;
    UCHAR               GTKLEN = 0;
	UCHAR				DefaultIdx = 0;
	UCHAR				skip_offset;

	// Verify The RSN IE contained in pairewise_msg_2 && pairewise_msg_3 and skip it
	if (MsgType == EAPOL_PAIR_MSG_2 || MsgType == EAPOL_PAIR_MSG_3)
    {
		// Check RSN IE whether it is WPA2/WPA2PSK
		if (!RTMPCheckRSNIE(pAd, pKeyData, KeyDataLen, pEntry, &skip_offset))
		{
			// send wireless event - for RSN IE different
			if (pAd->CommonCfg.bWirelessEvent)
				RTMPSendWirelessEvent(pAd, IW_RSNIE_DIFF_EVENT_FLAG, pEntry->Addr, pEntry->apidx, 0);

        	DBGPRINT(RT_DEBUG_ERROR, ("RSN_IE Different in msg %d of 4-way handshake!\n", MsgType));
			hex_dump("Receive RSN_IE ", pKeyData, KeyDataLen);
			hex_dump("Desired RSN_IE ", pEntry->RSN_IE, pEntry->RSNIE_Len);

			return FALSE;
    	}
    	else
		{
			if (bWPA2 && MsgType == EAPOL_PAIR_MSG_3)
			{
				// skip RSN IE
				pMyKeyData += skip_offset;
				KeyDataLength -= skip_offset;
				DBGPRINT(RT_DEBUG_TRACE, ("RTMPParseEapolKeyData ==> WPA2/WPA2PSK RSN IE matched in Msg 3, Length(%d) \n", skip_offset));
			}
			else
				return TRUE;
		}
	}

	DBGPRINT(RT_DEBUG_TRACE,("RTMPParseEapolKeyData ==> KeyDataLength %d without RSN_IE \n", KeyDataLength));

	// Parse EKD format in pairwise_msg_3_WPA2 && group_msg_1_WPA2
	if (bWPA2 && (MsgType == EAPOL_PAIR_MSG_3 || MsgType == EAPOL_GROUP_MSG_1))
	{
		if (KeyDataLength >= 8)	// KDE format exclude GTK length
    	{
        	pKDE = (PKDE_ENCAP) pMyKeyData;


			DefaultIdx = pKDE->GTKEncap.Kid;

			// Sanity check - KED length
			if (KeyDataLength < (pKDE->Len + 2))
    		{
        		DBGPRINT(RT_DEBUG_ERROR, ("ERROR: The len from KDE is too short \n"));
        		return FALSE;
    		}

			// Get GTK length - refer to IEEE 802.11i-2004 p.82
			GTKLEN = pKDE->Len -6;
			if (GTKLEN < LEN_AES_KEY)
			{
				DBGPRINT(RT_DEBUG_ERROR, ("ERROR: GTK Key length is too short (%d) \n", GTKLEN));
        		return FALSE;
			}

    	}
		else
    	{
			DBGPRINT(RT_DEBUG_ERROR, ("ERROR: KDE format length is too short \n"));
	        return FALSE;
    	}

		DBGPRINT(RT_DEBUG_TRACE, ("GTK in KDE format ,DefaultKeyID=%d, KeyLen=%d \n", DefaultIdx, GTKLEN));
		// skip it
		pMyKeyData += 8;
		KeyDataLength -= 8;

	}
	else if (!bWPA2 && MsgType == EAPOL_GROUP_MSG_1)
	{
		DefaultIdx = GroupKeyIndex;
		DBGPRINT(RT_DEBUG_TRACE, ("GTK DefaultKeyID=%d \n", DefaultIdx));
	}

	// Sanity check - shared key index must be 1 ~ 3
	if (DefaultIdx < 1 || DefaultIdx > 3)
    {
     	DBGPRINT(RT_DEBUG_ERROR, ("ERROR: GTK Key index(%d) is invalid in %s %s \n", DefaultIdx, ((bWPA2) ? "WPA2" : "WPA"), GetEapolMsgType(MsgType)));
        return FALSE;
    }

	return TRUE;

}


/*
	========================================================================

	Routine Description:
		Construct EAPoL message for WPA handshaking
		Its format is below,

		+--------------------+
		| Protocol Version	 |  1 octet
		+--------------------+
		| Protocol Type		 |	1 octet
		+--------------------+
		| Body Length		 |  2 octets
		+--------------------+
		| Descriptor Type	 |	1 octet
		+--------------------+
		| Key Information    |	2 octets
		+--------------------+
		| Key Length	     |  1 octet
		+--------------------+
		| Key Repaly Counter |	8 octets
		+--------------------+
		| Key Nonce		     |  32 octets
		+--------------------+
		| Key IV			 |  16 octets
		+--------------------+
		| Key RSC			 |  8 octets
		+--------------------+
		| Key ID or Reserved |	8 octets
		+--------------------+
		| Key MIC			 |	16 octets
		+--------------------+
		| Key Data Length	 |	2 octets
		+--------------------+
		| Key Data			 |	n octets
		+--------------------+


	Arguments:
		pAd			Pointer	to our adapter

	Return Value:
		None

	Note:

	========================================================================
*/
VOID	ConstructEapolMsg(
	IN 	PRTMP_ADAPTER    	pAd,
    IN 	UCHAR				AuthMode,
    IN 	UCHAR				WepStatus,
    IN 	UCHAR				GroupKeyWepStatus,
    IN 	UCHAR				MsgType,
    IN	UCHAR				DefaultKeyIdx,
    IN 	UCHAR				*ReplayCounter,
	IN 	UCHAR				*KeyNonce,
	IN	UCHAR				*TxRSC,
	IN	UCHAR				*PTK,
	IN	UCHAR				*GTK,
	IN	UCHAR				*RSNIE,
	IN	UCHAR				RSNIE_Len,
    OUT PEAPOL_PACKET       pMsg)
{
	BOOLEAN	bWPA2 = FALSE;

	// Choose WPA2 or not
	if ((AuthMode == Ndis802_11AuthModeWPA2) || (AuthMode == Ndis802_11AuthModeWPA2PSK))
		bWPA2 = TRUE;

    // Init Packet and Fill header
    pMsg->ProVer = EAPOL_VER;
    pMsg->ProType = EAPOLKey;

	// Default 95 bytes, the EAPoL-Key descriptor exclude Key-data field
	pMsg->Body_Len[1] = LEN_EAPOL_KEY_MSG;

	// Fill in EAPoL descriptor
	if (bWPA2)
		pMsg->KeyDesc.Type = WPA2_KEY_DESC;
	else
		pMsg->KeyDesc.Type = WPA1_KEY_DESC;

	// Fill in Key information, refer to IEEE Std 802.11i-2004 page 78
	// When either the pairwise or the group cipher is AES, the DESC_TYPE_AES(2) shall be used.
	pMsg->KeyDesc.KeyInfo.KeyDescVer =
        	(((WepStatus == Ndis802_11Encryption3Enabled) || (GroupKeyWepStatus == Ndis802_11Encryption3Enabled)) ? (DESC_TYPE_AES) : (DESC_TYPE_TKIP));

	// Specify Key Type as Group(0) or Pairwise(1)
	if (MsgType >= EAPOL_GROUP_MSG_1)
		pMsg->KeyDesc.KeyInfo.KeyType = GROUPKEY;
	else
		pMsg->KeyDesc.KeyInfo.KeyType = PAIRWISEKEY;

	// Specify Key Index, only group_msg1_WPA1
	if (!bWPA2 && (MsgType >= EAPOL_GROUP_MSG_1))
		pMsg->KeyDesc.KeyInfo.KeyIndex = DefaultKeyIdx;

	if (MsgType == EAPOL_PAIR_MSG_3)
		pMsg->KeyDesc.KeyInfo.Install = 1;

	if ((MsgType == EAPOL_PAIR_MSG_1) || (MsgType == EAPOL_PAIR_MSG_3) || (MsgType == EAPOL_GROUP_MSG_1))
		pMsg->KeyDesc.KeyInfo.KeyAck = 1;

	if (MsgType != EAPOL_PAIR_MSG_1)
		pMsg->KeyDesc.KeyInfo.KeyMic = 1;

	if ((bWPA2 && (MsgType >= EAPOL_PAIR_MSG_3)) || (!bWPA2 && (MsgType >= EAPOL_GROUP_MSG_1)))
    {
       	pMsg->KeyDesc.KeyInfo.Secure = 1;
    }

	if (bWPA2 && ((MsgType == EAPOL_PAIR_MSG_3) || (MsgType == EAPOL_GROUP_MSG_1)))
    {
        pMsg->KeyDesc.KeyInfo.EKD_DL = 1;
    }

	// key Information element has done.
	*(USHORT *)(&pMsg->KeyDesc.KeyInfo) = cpu2le16(*(USHORT *)(&pMsg->KeyDesc.KeyInfo));

	// Fill in Key Length
	{
		if (MsgType >= EAPOL_GROUP_MSG_1)
		{
			// the length of group key cipher
			pMsg->KeyDesc.KeyLength[1] = ((GroupKeyWepStatus == Ndis802_11Encryption2Enabled) ? TKIP_GTK_LENGTH : LEN_AES_KEY);
		}
		else
		{
			// the length of pairwise key cipher
			pMsg->KeyDesc.KeyLength[1] = ((WepStatus == Ndis802_11Encryption2Enabled) ? LEN_TKIP_KEY : LEN_AES_KEY);
		}
	}

 	// Fill in replay counter
    NdisMoveMemory(pMsg->KeyDesc.ReplayCounter, ReplayCounter, LEN_KEY_DESC_REPLAY);

	// Fill Key Nonce field
	// ANonce : pairwise_msg1 & pairwise_msg3
	// SNonce : pairwise_msg2
	// GNonce : group_msg1_wpa1
	if ((MsgType <= EAPOL_PAIR_MSG_3) || ((!bWPA2 && (MsgType == EAPOL_GROUP_MSG_1))))
    	NdisMoveMemory(pMsg->KeyDesc.KeyNonce, KeyNonce, LEN_KEY_DESC_NONCE);

	// Fill key IV - WPA2 as 0, WPA1 as random
	if (!bWPA2 && (MsgType == EAPOL_GROUP_MSG_1))
	{
		// Suggest IV be random number plus some number,
		NdisMoveMemory(pMsg->KeyDesc.KeyIv, &KeyNonce[16], LEN_KEY_DESC_IV);
        pMsg->KeyDesc.KeyIv[15] += 2;
	}

    // Fill Key RSC field
    // It contains the RSC for the GTK being installed.
	if ((MsgType == EAPOL_PAIR_MSG_3 && bWPA2) || (MsgType == EAPOL_GROUP_MSG_1))
	{
        NdisMoveMemory(pMsg->KeyDesc.KeyRsc, TxRSC, 6);
	}

	// Clear Key MIC field for MIC calculation later
    NdisZeroMemory(pMsg->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);

	ConstructEapolKeyData(pAd,
						  AuthMode,
						  WepStatus,
						  GroupKeyWepStatus,
						  MsgType,
						  DefaultKeyIdx,
						  bWPA2,
						  PTK,
						  GTK,
						  RSNIE,
						  RSNIE_Len,
						  pMsg);

	// Calculate MIC and fill in KeyMic Field except Pairwise Msg 1.
	if (MsgType != EAPOL_PAIR_MSG_1)
	{
		CalculateMIC(pAd, WepStatus, PTK, pMsg);
	}

	DBGPRINT(RT_DEBUG_TRACE, ("===> ConstructEapolMsg for %s %s\n", ((bWPA2) ? "WPA2" : "WPA"), GetEapolMsgType(MsgType)));
	DBGPRINT(RT_DEBUG_TRACE, ("	     Body length = %d \n", pMsg->Body_Len[1]));
	DBGPRINT(RT_DEBUG_TRACE, ("	     Key length  = %d \n", pMsg->KeyDesc.KeyLength[1]));


}

/*
	========================================================================

	Routine Description:
		Construct the Key Data field of EAPoL message

	Arguments:
		pAd			Pointer	to our adapter
		Elem		Message body

	Return Value:
		None

	Note:

	========================================================================
*/
VOID	ConstructEapolKeyData(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			AuthMode,
	IN	UCHAR			WepStatus,
	IN	UCHAR			GroupKeyWepStatus,
	IN 	UCHAR			MsgType,
	IN	UCHAR			DefaultKeyIdx,
	IN	BOOLEAN			bWPA2Capable,
	IN	UCHAR			*PTK,
	IN	UCHAR			*GTK,
	IN	UCHAR			*RSNIE,
	IN	UCHAR			RSNIE_LEN,
	OUT PEAPOL_PACKET   pMsg)
{
	UCHAR		*mpool, *Key_Data, *Rc4GTK;
	UCHAR       ekey[(LEN_KEY_DESC_IV+LEN_EAP_EK)];
	UCHAR		data_offset;


	if (MsgType == EAPOL_PAIR_MSG_1 || MsgType == EAPOL_PAIR_MSG_4 || MsgType == EAPOL_GROUP_MSG_2)
		return;

	// allocate memory pool
	os_alloc_mem(pAd, (PUCHAR *)&mpool, 1500);

    if (mpool == NULL)
		return;

	/* Rc4GTK Len = 512 */
	Rc4GTK = (UCHAR *) ROUND_UP(mpool, 4);
	/* Key_Data Len = 512 */
	Key_Data = (UCHAR *) ROUND_UP(Rc4GTK + 512, 4);

	NdisZeroMemory(Key_Data, 512);
	pMsg->KeyDesc.KeyDataLen[1] = 0;
	data_offset = 0;

	// Encapsulate RSNIE in pairwise_msg2 & pairwise_msg3
	if (RSNIE_LEN && ((MsgType == EAPOL_PAIR_MSG_2) || (MsgType == EAPOL_PAIR_MSG_3)))
	{
		if (bWPA2Capable)
			Key_Data[data_offset + 0] = IE_WPA2;
		else
			Key_Data[data_offset + 0] = IE_WPA;

        Key_Data[data_offset + 1] = RSNIE_LEN;
		NdisMoveMemory(&Key_Data[data_offset + 2], RSNIE, RSNIE_LEN);
		data_offset += (2 + RSNIE_LEN);
	}

	// Encapsulate KDE format in pairwise_msg3_WPA2 & group_msg1_WPA2
	if (bWPA2Capable && ((MsgType == EAPOL_PAIR_MSG_3) || (MsgType == EAPOL_GROUP_MSG_1)))
	{
		// Key Data Encapsulation (KDE) format - 802.11i-2004  Figure-43w and Table-20h
        Key_Data[data_offset + 0] = 0xDD;

		if (GroupKeyWepStatus == Ndis802_11Encryption3Enabled)
		{
			Key_Data[data_offset + 1] = 0x16;// 4+2+16(OUI+DataType+DataField)
		}
		else
		{
			Key_Data[data_offset + 1] = 0x26;// 4+2+32(OUI+DataType+DataField)
		}

        Key_Data[data_offset + 2] = 0x00;
        Key_Data[data_offset + 3] = 0x0F;
        Key_Data[data_offset + 4] = 0xAC;
        Key_Data[data_offset + 5] = 0x01;

		// GTK KDE format - 802.11i-2004  Figure-43x
        Key_Data[data_offset + 6] = (DefaultKeyIdx & 0x03);
        Key_Data[data_offset + 7] = 0x00;	// Reserved Byte

		data_offset += 8;
	}


	// Encapsulate GTK and encrypt the key-data field with KEK.
	// Only for pairwise_msg3_WPA2 and group_msg1
	if ((MsgType == EAPOL_PAIR_MSG_3 && bWPA2Capable) || (MsgType == EAPOL_GROUP_MSG_1))
	{
		// Fill in GTK
		if (GroupKeyWepStatus == Ndis802_11Encryption3Enabled)
		{
			NdisMoveMemory(&Key_Data[data_offset], GTK, LEN_AES_KEY);
			data_offset += LEN_AES_KEY;
		}
		else
		{
			NdisMoveMemory(&Key_Data[data_offset], GTK, TKIP_GTK_LENGTH);
			data_offset += TKIP_GTK_LENGTH;
		}

		// Still dont know why, but if not append will occur "GTK not include in MSG3"
		// Patch for compatibility between zero config and funk
		if (MsgType == EAPOL_PAIR_MSG_3 && bWPA2Capable)
		{
			if (GroupKeyWepStatus == Ndis802_11Encryption3Enabled)
			{
				Key_Data[data_offset + 0] = 0xDD;
				Key_Data[data_offset + 1] = 0;
				data_offset += 2;
			}
			else
			{
				Key_Data[data_offset + 0] = 0xDD;
				Key_Data[data_offset + 1] = 0;
				Key_Data[data_offset + 2] = 0;
				Key_Data[data_offset + 3] = 0;
				Key_Data[data_offset + 4] = 0;
				Key_Data[data_offset + 5] = 0;
				data_offset += 6;
			}
		}

		// Encrypt the data material in key data field
		if (WepStatus == Ndis802_11Encryption3Enabled)
		{
			AES_GTK_KEY_WRAP(&PTK[16], Key_Data, data_offset, Rc4GTK);
            // AES wrap function will grow 8 bytes in length
            data_offset += 8;
		}
		else
		{
			// PREPARE Encrypted  "Key DATA" field.  (Encrypt GTK with RC4, usinf PTK[16]->[31] as Key, IV-field as IV)
			// put TxTsc in Key RSC field
			pAd->PrivateInfo.FCSCRC32 = PPPINITFCS32;   //Init crc32.

			// ekey is the contanetion of IV-field, and PTK[16]->PTK[31]
			NdisMoveMemory(ekey, pMsg->KeyDesc.KeyIv, LEN_KEY_DESC_IV);
			NdisMoveMemory(&ekey[LEN_KEY_DESC_IV], &PTK[16], LEN_EAP_EK);
			ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, ekey, sizeof(ekey));  //INIT SBOX, KEYLEN+3(IV)
			pAd->PrivateInfo.FCSCRC32 = RTMP_CALC_FCS32(pAd->PrivateInfo.FCSCRC32, Key_Data, data_offset);
			WPAARCFOUR_ENCRYPT(&pAd->PrivateInfo.WEPCONTEXT, Rc4GTK, Key_Data, data_offset);
		}

		NdisMoveMemory(pMsg->KeyDesc.KeyData, Rc4GTK, data_offset);
	}
	else
	{
		NdisMoveMemory(pMsg->KeyDesc.KeyData, Key_Data, data_offset);
	}

	// set key data length field and total length
	pMsg->KeyDesc.KeyDataLen[1] = data_offset;
    pMsg->Body_Len[1] += data_offset;

	os_free_mem(pAd, mpool);

}

/*
	========================================================================

	Routine Description:
		Calcaulate MIC. It is used during 4-ways handsharking.

	Arguments:
		pAd				-	pointer to our pAdapter context
    	PeerWepStatus	-	indicate the encryption type

	Return Value:

	Note:

	========================================================================
*/
VOID	CalculateMIC(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			PeerWepStatus,
	IN	UCHAR			*PTK,
	OUT PEAPOL_PACKET   pMsg)
{
    UCHAR   *OutBuffer;
	ULONG	FrameLen = 0;
	UCHAR	mic[LEN_KEY_DESC_MIC];
	UCHAR	digest[80];

	// allocate memory for MIC calculation
	os_alloc_mem(pAd, (PUCHAR *)&OutBuffer, 512);

    if (OutBuffer == NULL)
    {
		DBGPRINT(RT_DEBUG_ERROR, ("!!!CalculateMIC: no memory!!!\n"));
		return;
    }

	// make a frame for calculating MIC.
    MakeOutgoingFrame(OutBuffer,            	&FrameLen,
                      pMsg->Body_Len[1] + 4,  	pMsg,
                      END_OF_ARGS);

	NdisZeroMemory(mic, sizeof(mic));

	// Calculate MIC
    if (PeerWepStatus == Ndis802_11Encryption3Enabled)
 	{
		HMAC_SHA1(OutBuffer,  FrameLen, PTK, LEN_EAP_MICK, digest);
		NdisMoveMemory(mic, digest, LEN_KEY_DESC_MIC);
	}
	else
	{
		hmac_md5(PTK,  LEN_EAP_MICK, OutBuffer, FrameLen, mic);
	}

	// store the calculated MIC
	NdisMoveMemory(pMsg->KeyDesc.KeyMic, mic, LEN_KEY_DESC_MIC);

	os_free_mem(pAd, OutBuffer);
}

/*
	========================================================================

	Routine Description:
		Some received frames can't decrypt by Asic, so decrypt them by software.

	Arguments:
		pAd				-	pointer to our pAdapter context
    	PeerWepStatus	-	indicate the encryption type

	Return Value:
		NDIS_STATUS_SUCCESS		-	decryption successful
		NDIS_STATUS_FAILURE		-	decryption failure

	========================================================================
*/
NDIS_STATUS	RTMPSoftDecryptBroadCastData(
	IN	PRTMP_ADAPTER					pAd,
	IN	RX_BLK							*pRxBlk,
	IN  NDIS_802_11_ENCRYPTION_STATUS 	GroupCipher,
	IN  PCIPHER_KEY						pShard_key)
{
	PRXWI_STRUC			pRxWI = pRxBlk->pRxWI;



	// handle WEP decryption
	if (GroupCipher == Ndis802_11Encryption1Enabled)
    {
		if (RTMPSoftDecryptWEP(pAd, pRxBlk->pData, pRxWI->MPDUtotalByteCount, pShard_key))
		{

			//Minus IV[4] & ICV[4]
			pRxWI->MPDUtotalByteCount -= 8;
		}
		else
		{
			DBGPRINT(RT_DEBUG_ERROR, ("ERROR : Software decrypt WEP data fails.\n"));
			// give up this frame
			return NDIS_STATUS_FAILURE;
		}
	}
	// handle TKIP decryption
	else if (GroupCipher == Ndis802_11Encryption2Enabled)
	{
		if (RTMPSoftDecryptTKIP(pAd, pRxBlk->pData, pRxWI->MPDUtotalByteCount, 0, pShard_key))
		{

			//Minus 8 bytes MIC, 8 bytes IV/EIV, 4 bytes ICV
			pRxWI->MPDUtotalByteCount -= 20;
		}
        else
		{
			DBGPRINT(RT_DEBUG_ERROR, ("ERROR : RTMPSoftDecryptTKIP Failed\n"));
			// give up this frame
			return NDIS_STATUS_FAILURE;
        }
	}
	// handle AES decryption
	else if (GroupCipher == Ndis802_11Encryption3Enabled)
	{
		if (RTMPSoftDecryptAES(pAd, pRxBlk->pData, pRxWI->MPDUtotalByteCount , pShard_key))
		{

			//8 bytes MIC, 8 bytes IV/EIV (CCMP Header)
			pRxWI->MPDUtotalByteCount -= 16;
		}
		else
		{
			DBGPRINT(RT_DEBUG_ERROR, ("ERROR : RTMPSoftDecryptAES Failed\n"));
			// give up this frame
			return NDIS_STATUS_FAILURE;
		}
	}
	else
	{
		// give up this frame
		return NDIS_STATUS_FAILURE;
	}

	return NDIS_STATUS_SUCCESS;

}





        RaiseClock(pAd, &x);

        RTMP_IO_READ32(pAd, E2PROM_CSR, &x);

	LowerClock(pAd, &x); /* prevent read failed */

        x &= ~(EEDI);
        if(x & EEDO)
            data |= 1;

#ifndef RT30xx
        LowerClock(pAd, &x);
#endif
    }

    return data;

    UINT32		x;
    USHORT		data;

#ifdef RT2870
	if (pAd->NicConfig2.field.AntDiversity)
    {
    	pAd->EepromAccess = TRUE;
    }
//2008/09/11:KH add to support efuse<--
//2008/09/11:KH add to support efuse-->
{
#endif
    Offset /= 2;
    // reset bits and set EECS

    x |= EECS;
    RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);

#ifdef RT30xx
	// patch can not access e-Fuse issue
    if (!IS_RT3090(pAd))
    {
#endif
	// kick a pulse
	RaiseClock(pAd, &x);
	LowerClock(pAd, &x);
#ifdef RT30xx
    }
#endif

    // output the read_opcode and register number in that order
    ShiftOutBits(pAd, EEPROM_READ_OPCODE, 3);


    EEpromCleanup(pAd);

#ifdef RT2870
	// Antenna and EEPROM access are both using EESK pin,
    // Therefor we should avoid accessing EESK at the same time
    // Then restore antenna after EEPROM access

	    pAd->EepromAccess = FALSE;
	    AsicSetRxAnt(pAd, pAd->RxAnt.Pair1PrimaryRxAnt);
    }
}
#endif
    return data;
}	//ReadEEprom

{
    UINT32 x;

#ifdef RT2870
	if (pAd->NicConfig2.field.AntDiversity)
    {
    	pAd->EepromAccess = TRUE;
    }
	//2008/09/11:KH add to support efuse<--
//2008/09/11:KH add to support efuse-->
	{
#endif
	Offset /= 2;


    x |= EECS;
    RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);

#ifdef RT30xx
	// patch can not access e-Fuse issue
    if (!IS_RT3090(pAd))
    {
#endif
	// kick a pulse
	RaiseClock(pAd, &x);
	LowerClock(pAd, &x);
#ifdef RT30xx
    }
#endif

    // output the read_opcode ,register number and data in that order
    ShiftOutBits(pAd, EEPROM_WRITE_OPCODE, 3);


    EEpromCleanup(pAd);

#ifdef RT2870
	// Antenna and EEPROM access are both using EESK pin,
    // Therefor we should avoid accessing EESK at the same time
    // Then restore antenna after EEPROM access

	    pAd->EepromAccess = FALSE;
	    AsicSetRxAnt(pAd, pAd->RxAnt.Pair1PrimaryRxAnt);
    }
}
#endif
}

#ifdef RT2870
#ifdef RT30xx
/*
	========================================================================


{
	CHAR					*src;
	struct file				*srcf;
	INT 					retval;
   	mm_segment_t			orgfs;
	UCHAR					*buffer;
	UCHAR					BinFileSize=0;

		kfree(buffer);
		return FALSE;
	}

#if 0
	orgfsuid = current->fsuid;
	orgfsgid = current->fsgid;
	current->fsuid=current->fsgid = 0;
#endif
    	orgfs = get_fs();
   	 set_fs(KERNEL_DS);


		DBGPRINT(RT_DEBUG_TRACE, ("--> Error %d closing %s\n", -retval, src));
	}
	set_fs(orgfs);

	current->fsuid = orgfsuid;
	current->fsgid = orgfsgid;
#endif
	for(j=0;j<i;j++)
	{
		DBGPRINT(RT_DEBUG_TRACE, ("%02X ",buffer[j]));


	return TRUE;
}
#endif
#endif // RT30xx //
//2008/09/11:KH add to support efuse-->





UCHAR	WPA_OUI[] = {0x00, 0x50, 0xf2, 0x01};
UCHAR	RSN_OUI[] = {0x00, 0x0f, 0xac};
UCHAR	WAPI_OUI[] = {0x00, 0x14, 0x72};
UCHAR   WME_INFO_ELEM[]  = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01};
UCHAR   WME_PARM_ELEM[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
UCHAR	Ccx2QosInfo[] = {0x00, 0x40, 0x96, 0x04};

UCHAR  Wpa2Ie	 = IE_WPA2;
UCHAR  IbssIe	 = IE_IBSS_PARM;
UCHAR  Ccx2Ie	 = IE_CCX_V2;
#ifdef RT2870
UCHAR  WapiIe	 = IE_WAPI;
#endif

extern UCHAR	WPA_OUI[];


	{13,   247,	 2,  2},
	{14,   248,	 2,  4},
};
#ifndef RT30xx
#define	NUM_OF_3020_CHNL	(sizeof(FreqItems3020) / sizeof(FREQUENCY_ITEM))
#endif
#ifdef RT30xx
//2008/07/10:KH Modified to share this variable
UCHAR	NUM_OF_3020_CHNL=(sizeof(FreqItems3020) / sizeof(FREQUENCY_ITEM));
#endif

/*
	==========================================================================

		}

		//else if ((pAd->StaActive.SupRateLen == 4) && (pAd->StaActive.ExtRateLen == 0) && (pAd->StaActive.SupportedPhyInfo.MCSSet[0] == 0) && (pAd->StaActive.SupportedPhyInfo.MCSSet[1] == 0))
		if (pEntry->RateLen == 4)
#ifndef RT30xx
//Iverson mark for Adhoc b mode,sta will use rate 54  Mbps when connect with sta b/g/n mode
			&& (pEntry->HTCapability.MCSSet[0] == 0) && (pEntry->HTCapability.MCSSet[1] == 0)
#endif
			)
		{// B only AP
			*ppTable = RateSwitchTable11B;
			*pTableSize = RateSwitchTable11B[0];

		(pAd->StaCfg.Psm == PWR_ACTIVE) &&
#ifdef RT2860
		RTMP_TEST_PSFLAG(pAd, fRTMP_PS_CAN_GO_SLEEP))
#else
#if !defined(RT2860) && !defined(RT30xx)
		(pAd->Mlme.CntlMachine.CurrState == CNTL_IDLE))
#endif
#ifndef RT30xx
	{
		NdisGetSystemUpTime(&pAd->Mlme.LastSendNULLpsmTime);
		pAd->RalinkCounters.RxCountSinceLastNULL = 0;
		MlmeSetPsmBit(pAd, PWR_SAVE);
		if (!(pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable))
		{
			RTMPSendNullFrame(pAd, pAd->CommonCfg.TxRate, FALSE);
		}
		else
		{
			RTMPSendNullFrame(pAd, pAd->CommonCfg.TxRate, TRUE);
		}
	}
#endif
#ifdef RT30xx
//		(! RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
		(pAd->Mlme.CntlMachine.CurrState == CNTL_IDLE) /*&&
		(pAd->RalinkCounters.OneSecTxNoRetryOkCount == 0) &&
		(pAd->RalinkCounters.OneSecTxRetryOkCount == 0)*/)
	{
		// add by johnli, use Rx OK data count per second to calculate throughput
		// If Ttraffic is too high ( > 400 Rx per second), don't go to sleep mode. If tx rate is low, use low criteria
		// Mode=CCK/MCS=3 => 11 Mbps, Mode=OFDM/MCS=3 => 18 Mbps
		if (((pAd->StaCfg.HTPhyMode.field.MCS <= 3) &&
/* Iverson mark
				(pAd->StaCfg.HTPhyMode.field.MODE <= MODE_OFDM) &&
*/
				(pAd->RalinkCounters.OneSecRxOkDataCnt < (ULONG)100)) ||
			((pAd->StaCfg.HTPhyMode.field.MCS > 3) &&
/* Iverson mark
			(pAd->StaCfg.HTPhyMode.field.MODE > MODE_OFDM) &&
*/
			(pAd->RalinkCounters.OneSecRxOkDataCnt < (ULONG)400)))
		{
				// Get this time

			}
		}
	}
#endif
}

// IRQL = PASSIVE_LEVEL

	RTMP_IO_READ32(pAd, AUTO_RSP_CFG, &csr4.word);
	csr4.field.AckCtsPsmBit = (psm == PWR_SAVE)? 1:0;
	RTMP_IO_WRITE32(pAd, AUTO_RSP_CFG, csr4.word);

	DBGPRINT(RT_DEBUG_TRACE, ("MlmeSetPsmBit = %d\n", psm));
#endif
}

// IRQL = DISPATCH_LEVEL

	}
	else
	{
#ifdef RT30xx
		/* avoid  Hidden SSID form beacon to overwirite correct SSID from probe response */
		if ((SSID_EQUAL(Ssid, SsidLen, Tab->BssEntry[Idx].Ssid, Tab->BssEntry[Idx].SsidLen)) ||
			(NdisEqualMemory(Tab->BssEntry[Idx].Ssid, ZeroSsid, Tab->BssEntry[Idx].SsidLen)))
		{
#endif
		BssEntrySet(pAd, &Tab->BssEntry[Idx], pBssid, Ssid, SsidLen, BssType, BeaconPeriod,CfParm, AtimWin,
					CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,pHtCapability, pAddHtInfo,HtCapabilityLen, AddHtInfoLen,
					NewExtChanOffset, ChannelNo, Rssi, TimeStamp, CkipFlag, pEdcaParm, pQosCapability, pQbssLoad, LengthVIE, pVIE);
#ifdef RT30xx
		}
#endif
	}

	return Idx;

							continue;

					// check group cipher
					if (pInBss->WPA.GroupCipher != Ndis802_11GroupWEP40Enabled &&
					    pInBss->WPA.GroupCipher != Ndis802_11GroupWEP104Enabled &&
					    pAd->StaCfg.WepStatus < pInBss->WPA.GroupCipher)
						(pInBss->WPA.GroupCipher != Ndis802_11GroupWEP104Enabled))
#endif
#ifdef RT30xx
					if (pAd->StaCfg.WepStatus < pInBss->WPA.GroupCipher)
#endif
						continue;

					// check pairwise cipher, skip if none matched

							continue;

					// check group cipher
					if (pInBss->WPA2.GroupCipher != Ndis802_11GroupWEP40Enabled &&
					    pInBss->WPA2.GroupCipher != Ndis802_11GroupWEP104Enabled &&
					    pAd->StaCfg.WepStatus < pInBss->WPA2.GroupCipher)
						(pInBss->WPA2.GroupCipher != Ndis802_11GroupWEP104Enabled))
#endif
#ifdef RT30xx
					if (pAd->StaCfg.WepStatus < pInBss->WPA2.GroupCipher)
#endif
						continue;

					// check pairwise cipher, skip if none matched

				switch (*pTmp)
				{
					case 1:
#ifndef RT30xx
						pBss->WPA.GroupCipher = Ndis802_11GroupWEP40Enabled;
						break;
					case 5:
						pBss->WPA.GroupCipher = Ndis802_11GroupWEP104Enabled;
#endif
#ifdef RT30xx
					case 5:	// Although WEP is not allowed in WPA related auth mode, we parse it anyway
						pBss->WPA.GroupCipher = Ndis802_11Encryption1Enabled;
#endif
						break;
					case 2:
						pBss->WPA.GroupCipher = Ndis802_11Encryption2Enabled;

				switch (pCipher->Type)
				{
					case 1:
#ifndef RT30xx
						pBss->WPA2.GroupCipher = Ndis802_11GroupWEP40Enabled;
						break;
					case 5:
						pBss->WPA2.GroupCipher = Ndis802_11GroupWEP104Enabled;
#endif
#ifdef RT30xx
					case 5:	// Although WEP is not allowed in WPA related auth mode, we parse it anyway
						pBss->WPA2.GroupCipher = Ndis802_11Encryption1Enabled;
#endif
						break;
					case 2:
						pBss->WPA2.GroupCipher = Ndis802_11Encryption2Enabled;

	}
}

#ifdef RT2870
/*
	========================================================================

	Routine Description: Write RT30xx RF register through MAC

	Arguments:

	Return Value:

	IRQL =

	Note:

	========================================================================
*/
NTSTATUS RT30xxWriteRFRegister(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			RegID,
	IN	UCHAR			Value)
{
	RF_CSR_CFG_STRUC	rfcsr;
	UINT				i = 0;

	do
	{
		RTMP_IO_READ32(pAd, RF_CSR_CFG, &rfcsr.word);

		if (!rfcsr.field.RF_CSR_KICK)
			break;
		i++;
	}
	while ((i < RETRY_LIMIT) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)));

	if ((i == RETRY_LIMIT) || (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
	{
		DBGPRINT_RAW(RT_DEBUG_ERROR, ("Retry count exhausted or device removed!!!\n"));
		return STATUS_UNSUCCESSFUL;
	}

	rfcsr.field.RF_CSR_WR = 1;
	rfcsr.field.RF_CSR_KICK = 1;
	rfcsr.field.TESTCSR_RFACC_REGNUM = RegID;
	rfcsr.field.RF_CSR_DATA = Value;

	RTMP_IO_WRITE32(pAd, RF_CSR_CFG, rfcsr.word);

	return STATUS_SUCCESS;
}


/*
	========================================================================

	Routine Description: Read RT30xx RF register through MAC

	Arguments:

	Return Value:

	IRQL =

	Note:

	========================================================================
*/
NTSTATUS RT30xxReadRFRegister(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			RegID,
	IN	PUCHAR			pValue)
{
	RF_CSR_CFG_STRUC	rfcsr;
	UINT				i=0, k=0;

	for (i=0; i<MAX_BUSY_COUNT; i++)
	{
		RTMP_IO_READ32(pAd, RF_CSR_CFG, &rfcsr.word);

		if (rfcsr.field.RF_CSR_KICK == BUSY)
		{
			continue;
		}
		rfcsr.word = 0;
		rfcsr.field.RF_CSR_WR = 0;
		rfcsr.field.RF_CSR_KICK = 1;
		rfcsr.field.TESTCSR_RFACC_REGNUM = RegID;
		RTMP_IO_WRITE32(pAd, RF_CSR_CFG, rfcsr.word);
		for (k=0; k<MAX_BUSY_COUNT; k++)
		{
			RTMP_IO_READ32(pAd, RF_CSR_CFG, &rfcsr.word);

			if (rfcsr.field.RF_CSR_KICK == IDLE)
				break;
		}
		if ((rfcsr.field.RF_CSR_KICK == IDLE) &&
			(rfcsr.field.TESTCSR_RFACC_REGNUM == RegID))
		{
			*pValue = (UCHAR)rfcsr.field.RF_CSR_DATA;
			break;
		}
	}
	if (rfcsr.field.RF_CSR_KICK == BUSY)
	{
		DBGPRINT_ERR(("RF read R%d=0x%x fail, i[%d], k[%d]\n", RegID, rfcsr.word,i,k));
		return STATUS_UNSUCCESSFUL;
	}

	return STATUS_SUCCESS;
}
#endif // RT30xx //

#ifdef RT30xx
// add by johnli, RF power sequence setup
/*
	==========================================================================
	Description:

		RTMP_IO_WRITE32(pAd, LDO_CFG0, MACValue);
	}
}
#endif
#endif // RT30xx //

/*
	==========================================================================

	RTMP_RF_REGS *RFRegTable;

	// Search Tx power value
#ifdef RT30xx
	// We can't use ChannelList to search channel, since some central channl's txpowr doesn't list
	// in ChannelList, so use TxPower array instead.
	//

			break;
		}
	}
#endif
#ifndef RT30xx
	for (index = 0; index < pAd->ChannelListNum; index++)
	{
		if (Channel == pAd->ChannelList[index].Channel)
		{
			TxPwer = pAd->ChannelList[index].Power;
			TxPwer2 = pAd->ChannelList[index].Power2;
			break;
		}
	}
#endif

	if (index == MAX_NUM_OF_CHANNELS)
	{
#ifndef RT30xx
		DBGPRINT(RT_DEBUG_ERROR, ("AsicSwitchChannel: Cant find the Channel#%d \n", Channel));
#endif
#ifdef RT30xx
		DBGPRINT(RT_DEBUG_ERROR, ("AsicSwitchChannel: Can't find the Channel#%d \n", Channel));
#endif
	}

#ifdef RT2870
	// The RF programming sequence is difference between 3xxx and 2xxx
	if ((IS_RT3070(pAd) || IS_RT3090(pAd)) && (
	     (pAd->RfIcType == RFIC_3022) || (pAd->RfIcType == RFIC_3021) ||
	     (pAd->RfIcType == RFIC_3020) || (pAd->RfIcType == RFIC_2020)))
#endif
#ifndef RT30xx
	if (IS_RT3070(pAd) && ((pAd->RfIcType == RFIC_3020) || (pAd->RfIcType == RFIC_2020)))
#endif
	{
		/* modify by WY for Read RF Reg. error */
		UCHAR RFValue;

				RT30xxWriteRFRegister(pAd, RF_R02, FreqItems3020[index].N);
				RT30xxWriteRFRegister(pAd, RF_R03, FreqItems3020[index].K);

#ifndef RT30xx
				RT30xxReadRFRegister(pAd, RF_R06, (PUCHAR)&RFValue);
				RFValue = (RFValue & 0xFC) | FreqItems3020[index].R;
				RT30xxWriteRFRegister(pAd, RF_R06, (UCHAR)RFValue);

				// Set Tx Power
				RT30xxReadRFRegister(pAd, RF_R12, (PUCHAR)&RFValue);
				RFValue = (RFValue & 0xE0) | TxPwer;
				RT30xxWriteRFRegister(pAd, RF_R12, (UCHAR)RFValue);

				// Set RF offset
				RT30xxReadRFRegister(pAd, RF_R23, (PUCHAR)&RFValue);
				RFValue = (RFValue & 0x80) | pAd->RfFreqOffset;
				RT30xxWriteRFRegister(pAd, RF_R23, (UCHAR)RFValue);
#endif
#ifdef RT30xx
				RT30xxReadRFRegister(pAd, RF_R06, &RFValue);
				RFValue = (RFValue & 0xFC) | FreqItems3020[index].R;
				RT30xxWriteRFRegister(pAd, RF_R06, RFValue);

				RT30xxReadRFRegister(pAd, RF_R23, &RFValue);
				RFValue = (RFValue & 0x80) | pAd->RfFreqOffset;
				RT30xxWriteRFRegister(pAd, RF_R23, RFValue);
#endif

				// Set BW
				if (!bScan && (pAd->CommonCfg.BBPCurrentBW == BW_40))

				{
					RFValue = pAd->Mlme.CaliBW20RfR24;
				}
#ifndef RT30xx
				RT30xxWriteRFRegister(pAd, RF_R24, (UCHAR)RFValue);

				// Enable RF tuning
				RT30xxReadRFRegister(pAd, RF_R07, (PUCHAR)&RFValue);
				RFValue = RFValue | 0x1;
				RT30xxWriteRFRegister(pAd, RF_R07, (UCHAR)RFValue);

				// latch channel for future usage.
				pAd->LatchRfRegs.Channel = Channel;
#endif
#ifdef RT30xx
				RT30xxWriteRFRegister(pAd, RF_R24, RFValue);
				RT30xxWriteRFRegister(pAd, RF_R31, RFValue);


					FreqItems3020[index].N,
					FreqItems3020[index].K,
					FreqItems3020[index].R));
#endif

				break;
			}
		}

#ifndef RT30xx
		DBGPRINT(RT_DEBUG_TRACE, ("SwitchChannel#%d(RF=%d, Pwr0=%d, Pwr1=%d, %dT), N=0x%02X, K=0x%02X, R=0x%02X\n",
			Channel,
			pAd->RfIcType,

			FreqItems3020[index].N,
			FreqItems3020[index].K,
			FreqItems3020[index].R));
#endif
	}
	else
#endif // RT2870 //

{
}

/*
	==========================================================================
	Description:

	IRQL = PASSIVE_LEVEL
	IRQL = DISPATCH_LEVEL

	==========================================================================
 */
VOID	AsicAntennaSelect(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			Channel)
{
#ifdef RT30xx
			if (pAd->Mlme.OneSecPeriodicRound % 2 == 1)
			{
				// patch for AsicSetRxAnt failed
				pAd->RxAnt.EvaluatePeriod = 0;

				// check every 2 second. If rcv-beacon less than 5 in the past 2 second, then AvgRSSI is no longer a
				// valid indication of the distance between this AP and its clients.
				if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
				{
					SHORT	realavgrssi1;

					// if no traffic then reset average rssi to trigger evaluation
					if (pAd->StaCfg.NumOfAvgRssiSample < 5)
					{
						pAd->RxAnt.Pair1LastAvgRssi = (-99);
						pAd->RxAnt.Pair2LastAvgRssi = (-99);
						DBGPRINT(RT_DEBUG_TRACE, ("MlmePeriodicExec: no traffic/beacon, reset RSSI\n"));
					}

					pAd->StaCfg.NumOfAvgRssiSample = 0;
					realavgrssi1 = (pAd->RxAnt.Pair1AvgRssi[pAd->RxAnt.Pair1PrimaryRxAnt] >> 3);

					DBGPRINT(RT_DEBUG_TRACE,("Ant-realrssi0(%d), Lastrssi0(%d), EvaluateStableCnt=%d\n", realavgrssi1, pAd->RxAnt.Pair1LastAvgRssi, pAd->RxAnt.EvaluateStableCnt));

					// if the difference between two rssi is larger or less than 5, then evaluate the other antenna
					if ((pAd->RxAnt.EvaluateStableCnt < 2) || (realavgrssi1 > (pAd->RxAnt.Pair1LastAvgRssi + 5)) || (realavgrssi1 < (pAd->RxAnt.Pair1LastAvgRssi - 5)))
					{
						pAd->RxAnt.Pair1LastAvgRssi = realavgrssi1;
						AsicEvaluateRxAnt(pAd);
					}
				}
				else
				{
					// if not connected, always switch antenna to try to connect
					UCHAR	temp;

					temp = pAd->RxAnt.Pair1PrimaryRxAnt;
					pAd->RxAnt.Pair1PrimaryRxAnt = pAd->RxAnt.Pair1SecondaryRxAnt;
					pAd->RxAnt.Pair1SecondaryRxAnt = temp;

					DBGPRINT(RT_DEBUG_TRACE, ("MlmePeriodicExec: no connect, switch to another one to try connection\n"));

					AsicSetRxAnt(pAd, pAd->RxAnt.Pair1PrimaryRxAnt);
				}
			}
#endif /* RT30xx */
}

/*
	========================================================================

	Routine Description:
		Antenna miscellaneous setting.

	Arguments:
		pAd						Pointer to our adapter
		BandState				Indicate current Band State.

	Return Value:
		None

	IRQL <= DISPATCH_LEVEL

	Note:
		1.) Frame End type control
			only valid for G only (RF_2527 & RF_2529)
			0: means DPDT, set BBP R4 bit 5 to 1
			1: means SPDT, set BBP R4 bit 5 to 0


	========================================================================
*/
VOID	AsicAntennaSetting(
	IN	PRTMP_ADAPTER	pAd,
	IN	ABGBAND_STATE	BandState)
{
}

VOID AsicRfTuningExec(
	IN PVOID SystemSpecific1,
	IN PVOID FunctionContext,

				Ac2Cfg.field.AcTxop = 5;
			}

#ifdef RT2870
			if (pAd->RfIcType == RFIC_3020 || pAd->RfIcType == RFIC_2020)
			{
				// Tuning for WiFi WMM S3-T07: connexant legacy sta ==> broadcom 11n sta.
				Ac2Cfg.field.Aifsn = 5;
			}
#endif
		}

		Ac3Cfg.field.AcTxop = pEdcaParm->Txop[QID_AC_VO];

		}

		AifsnCsr.field.Aifsn3 = Ac3Cfg.field.Aifsn - 1; //pEdcaParm->Aifsn[QID_AC_VO]; //for TGn wifi test
#ifdef RT2870
		if (pAd->RfIcType == RFIC_3020 || pAd->RfIcType == RFIC_2020)
			AifsnCsr.field.Aifsn2 = 0x2; //pEdcaParm->Aifsn[QID_AC_VI]; //for WiFi WMM S4-T04.
#endif

		RTMP_IO_WRITE32(pAd, WMM_AIFSN_CFG, AifsnCsr.word);

		NdisMoveMemory(&pAd->CommonCfg.APEdcaParm, pEdcaParm, sizeof(EDCA_PARM));

	SlotTime = (bUseShortSlotTime)? 9 : 20;

	{
#ifndef RT30xx
		// force using short SLOT time for FAE to demo performance when TxBurst is ON
		if (((pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE) && (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED)))
			|| ((pAd->StaActive.SupportedPhyInfo.bHtEnable == TRUE) && (pAd->CommonCfg.BACapability.field.Policy == BA_NOTUSE))

			// And we will not set to short slot when bEnableTxBurst is TRUE.
		}
		else if (pAd->CommonCfg.bEnableTxBurst)
#endif
#ifdef RT30xx
		if (pAd->CommonCfg.bEnableTxBurst)
#endif
			SlotTime = 9;
	}


	return larger;
}

#ifdef RT2870
// Antenna divesity use GPIO3 and EESK pin for control
// Antenna and EEPROM access are both using EESK pin,
// Therefor we should avoid accessing EESK at the same time

	IN PRTMP_ADAPTER	pAd,
	IN UCHAR			Ant)
{
#ifdef RT30xx
	UINT32	Value;
	UINT32	x;


		RTMP_IO_WRITE32(pAd, GPIO_CTRL_CFG, Value);
		DBGPRINT_RAW(RT_DEBUG_TRACE, ("AsicSetRxAnt, switch to aux antenna\n"));
	}
#endif // RT30xx //
}
#endif

/*
    ========================================================================

{
	UCHAR	BBPR3 = 0;

	if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS |
				fRTMP_ADAPTER_HALT_IN_PROGRESS |
				fRTMP_ADAPTER_RADIO_OFF |
				fRTMP_ADAPTER_NIC_NOT_EXIST |
				fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)
				|| OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE)
								fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
			return;

		if (pAd->StaCfg.Psm == PWR_SAVE)
			return;
	}

	RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BBPR3);
	BBPR3 &= (~0x18);
	if(pAd->Antenna.field.RxPath == 3)
	{
		BBPR3 |= (0x10);
	}
	else if(pAd->Antenna.field.RxPath == 2)
	{
		BBPR3 |= (0x8);
	}
	else if(pAd->Antenna.field.RxPath == 1)
	{
		BBPR3 |= (0x0);
	}
	RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBPR3);

#ifdef RT2860
    	pAd->StaCfg.BBPR3 = BBPR3;
#endif
#ifdef RT2870
				|| (pAd->EepromAccess)
		)
	{
		ULONG	TxTotalCnt = pAd->RalinkCounters.OneSecTxNoRetryOkCount +
								pAd->RalinkCounters.OneSecTxRetryOkCount +
								pAd->RalinkCounters.OneSecTxFailCount;

		if (TxTotalCnt > 50)
		{
			RTMPSetTimer(&pAd->Mlme.RxAntEvalTimer, 20);
			pAd->Mlme.bLowThroughput = FALSE;
		}
		else
		{
			RTMPSetTimer(&pAd->Mlme.RxAntEvalTimer, 300);
			pAd->Mlme.bLowThroughput = TRUE;
		}
	}
#endif
				)
			return;
	if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS	|
							fRTMP_ADAPTER_HALT_IN_PROGRESS	|
							fRTMP_ADAPTER_RADIO_OFF			|
							fRTMP_ADAPTER_NIC_NOT_EXIST		|
							fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS) ||
							OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE)
#ifdef RT30xx
							|| (pAd->EepromAccess)
#endif // RT30xx //
							)
		return;


	{
		//if (pAd->StaCfg.Psm == PWR_SAVE)
		//	return;
	}

#ifdef RT30xx
	// two antenna selection mechanism- one is antenna diversity, the other is failed antenna remove
	// one is antenna diversity:there is only one antenna can rx and tx
	// the other is failed antenna remove:two physical antenna can rx and tx

			RTMPSetTimer(&pAd->Mlme.RxAntEvalTimer, 300);
	}
	else
#endif
	{
		if (pAd->StaCfg.Psm == PWR_SAVE)
			return;

			BBPR3 |= (0x0);
		}
		RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBPR3);

#ifdef RT2860
		pAd->StaCfg.BBPR3 = BBPR3;
#endif
	}
#endif /* RT30xx */

	if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED)
		)

	UCHAR			BBPR3 = 0;
	CHAR			larger = -127, rssi0, rssi1, rssi2;

#ifndef RT30xx
	{
		if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)	||
			RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)		||
			RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF)			||
			RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST))
			return;

		if (pAd->StaCfg.Psm == PWR_SAVE)
			return;


		// if the traffic is low, use average rssi as the criteria
		if (pAd->Mlme.bLowThroughput == TRUE)
		{
			rssi0 = pAd->StaCfg.RssiSample.LastRssi0;
			rssi1 = pAd->StaCfg.RssiSample.LastRssi1;
			rssi2 = pAd->StaCfg.RssiSample.LastRssi2;
		}
		else
		{
			rssi0 = pAd->StaCfg.RssiSample.AvgRssi0;
			rssi1 = pAd->StaCfg.RssiSample.AvgRssi1;
			rssi2 = pAd->StaCfg.RssiSample.AvgRssi2;
		}

		if(pAd->Antenna.field.RxPath == 3)
		{
			larger = max(rssi0, rssi1);

			if (larger > (rssi2 + 20))
				pAd->Mlme.RealRxPath = 2;
			else
				pAd->Mlme.RealRxPath = 3;
		}
		else if(pAd->Antenna.field.RxPath == 2)
		{
			if (rssi0 > (rssi1 + 20))
				pAd->Mlme.RealRxPath = 1;
			else
				pAd->Mlme.RealRxPath = 2;
		}

		RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BBPR3);
		BBPR3 &= (~0x18);
		if(pAd->Mlme.RealRxPath == 3)
		{
			BBPR3 |= (0x10);
		}
		else if(pAd->Mlme.RealRxPath == 2)
		{
			BBPR3 |= (0x8);
		}
		else if(pAd->Mlme.RealRxPath == 1)
		{
			BBPR3 |= (0x0);
		}
		RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBPR3);
#ifdef RT2860
		pAd->StaCfg.BBPR3 = BBPR3;
#endif
	}
#endif /* RT30xx */
#ifdef RT30xx
	if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS	|
							fRTMP_ADAPTER_HALT_IN_PROGRESS	|
							fRTMP_ADAPTER_RADIO_OFF			|
							fRTMP_ADAPTER_NIC_NOT_EXIST)
							|| OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE)
#ifdef RT2870
							|| (pAd->EepromAccess)
#endif
							)
		return;

	{
#ifdef RT30xx
		//	return;

		if (pAd->NicConfig2.field.AntDiversity)
		{
			if ((pAd->RxAnt.RcvPktNumWhenEvaluate != 0) && (pAd->RxAnt.Pair1AvgRssi[pAd->RxAnt.Pair1SecondaryRxAnt] >= pAd->RxAnt.Pair1AvgRssi[pAd->RxAnt.Pair1PrimaryRxAnt]))

					pAd->RxAnt.Pair1PrimaryRxAnt, (pAd->RxAnt.Pair1AvgRssi[0] >> 3), (pAd->RxAnt.Pair1AvgRssi[1] >> 3), pAd->RxAnt.RcvPktNumWhenEvaluate));
		}
		else
#endif
		{
			if (pAd->StaCfg.Psm == PWR_SAVE)
				return;

				BBPR3 |= (0x0);
			}
			RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBPR3);
#ifdef RT2860
			pAd->StaCfg.BBPR3 = BBPR3;
#endif
		}
	}
#endif /* RT30xx */
}



VOID APSDPeriodicExec(
	IN PVOID SystemSpecific1,
	IN PVOID FunctionContext,

#ifdef RT2870
			// RT3070 is a no LNA solution, it should have different control regarding to AGC gain control
			// Otherwise, it will have some throughput side effect when low RSSI
#ifndef RT30xx
			if (IS_RT3070(pAd))
#endif
#ifdef RT30xx
			if (IS_RT30xx(pAd))
#endif
			{
				if (Rssi > RSSI_FOR_MID_LOW_SENSIBILITY)
				{
					R66 = 0x1C + 2*GET_LNA_GAIN(pAd) + 0x20;
					if (OrigR66Value != R66)
					{
#ifndef RT30xx
						RTUSBWriteBBPRegister(pAd, BBP_R66, R66);
#endif
#ifdef RT30xx
						RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
#endif
					}
				}
				else
				{
					R66 = 0x1C + 2*GET_LNA_GAIN(pAd);
					if (OrigR66Value != R66)
					{
#ifndef RT30xx
						RTUSBWriteBBPRegister(pAd, BBP_R66, R66);
#endif
#ifdef RT30xx
						RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
#endif
					}
				}
			}
			else

	UCHAR			index;
	RTMP_RF_REGS	*RFRegTable;

#ifdef RT30xx
	// The RF programming sequence is difference between 3xxx and 2xxx
	if (IS_RT3090(pAd))
	{
		RT30xxLoadRFSleepModeSetup(pAd);  // add by johnli,  RF power sequence setup, load RF sleep-mode setup
		return;
	}

	{
#endif // RT30xx //
	RFRegTable = RF2850RegTable;

	switch (pAd->RfIcType)

		default:
			break;
	}
#ifdef RT30xx
	}
#endif // RT30xx //

}



	UCHAR			index;
	RTMP_RF_REGS	*RFRegTable;

#ifdef RT30xx
	// The RF programming sequence is difference between 3xxx and 2xxx
	if (IS_RT3090(pAd))
		return;

	else
	{
#endif // RT30xx //
	RFRegTable = RF2850RegTable;

	switch (pAd->RfIcType)

			break;
	}

#ifndef RT30xx
	DBGPRINT(RT_DEBUG_TRACE, ("AsicTurnOnRFClk#%d(RF=%d, ) , R2=0x%08x\n",
		Channel,
		pAd->RfIcType,
		R2));
#endif
#ifdef RT30xx
	}
#endif // RT30xx //
}





    Jan Lee  2006-09-15    RT2860. Change for 802.11n , EEPROM, Led, BA, HT.
*/
#include "../rt_config.h"
#ifndef RT30xx
#ifdef RT2860
#include "firmware.h"
#include <linux/bitrev.h>
#endif
#ifdef RT2870
/* New firmware handles both RT2870 and RT3070. */
#endif
#endif
#ifdef RT30xx
#include "../../rt3070/firmware.h"
#endif



char*   CipherName[] = {"none","wep64","wep128","TKIP","AES","CKIP64","CKIP128"};

const unsigned short ccitt_16Table[] = {
	0x0000, 0x1021, 0x2042, 0x3063, 0x4084, 0x50A5, 0x60C6, 0x70E7,
	0x8108, 0x9129, 0xA14A, 0xB16B, 0xC18C, 0xD1AD, 0xE1CE, 0xF1EF,
	0x1231, 0x0210, 0x3273, 0x2252, 0x52B5, 0x4294, 0x72F7, 0x62D6,
	0x9339, 0x8318, 0xB37B, 0xA35A, 0xD3BD, 0xC39C, 0xF3FF, 0xE3DE,
	0x2462, 0x3443, 0x0420, 0x1401, 0x64E6, 0x74C7, 0x44A4, 0x5485,
	0xA56A, 0xB54B, 0x8528, 0x9509, 0xE5EE, 0xF5CF, 0xC5AC, 0xD58D,
	0x3653, 0x2672, 0x1611, 0x0630, 0x76D7, 0x66F6, 0x5695, 0x46B4,
	0xB75B, 0xA77A, 0x9719, 0x8738, 0xF7DF, 0xE7FE, 0xD79D, 0xC7BC,
	0x48C4, 0x58E5, 0x6886, 0x78A7, 0x0840, 0x1861, 0x2802, 0x3823,
	0xC9CC, 0xD9ED, 0xE98E, 0xF9AF, 0x8948, 0x9969, 0xA90A, 0xB92B,
	0x5AF5, 0x4AD4, 0x7AB7, 0x6A96, 0x1A71, 0x0A50, 0x3A33, 0x2A12,
	0xDBFD, 0xCBDC, 0xFBBF, 0xEB9E, 0x9B79, 0x8B58, 0xBB3B, 0xAB1A,
	0x6CA6, 0x7C87, 0x4CE4, 0x5CC5, 0x2C22, 0x3C03, 0x0C60, 0x1C41,
	0xEDAE, 0xFD8F, 0xCDEC, 0xDDCD, 0xAD2A, 0xBD0B, 0x8D68, 0x9D49,
	0x7E97, 0x6EB6, 0x5ED5, 0x4EF4, 0x3E13, 0x2E32, 0x1E51, 0x0E70,
	0xFF9F, 0xEFBE, 0xDFDD, 0xCFFC, 0xBF1B, 0xAF3A, 0x9F59, 0x8F78,
	0x9188, 0x81A9, 0xB1CA, 0xA1EB, 0xD10C, 0xC12D, 0xF14E, 0xE16F,
	0x1080, 0x00A1, 0x30C2, 0x20E3, 0x5004, 0x4025, 0x7046, 0x6067,
	0x83B9, 0x9398, 0xA3FB, 0xB3DA, 0xC33D, 0xD31C, 0xE37F, 0xF35E,
	0x02B1, 0x1290, 0x22F3, 0x32D2, 0x4235, 0x5214, 0x6277, 0x7256,
	0xB5EA, 0xA5CB, 0x95A8, 0x8589, 0xF56E, 0xE54F, 0xD52C, 0xC50D,
	0x34E2, 0x24C3, 0x14A0, 0x0481, 0x7466, 0x6447, 0x5424, 0x4405,
	0xA7DB, 0xB7FA, 0x8799, 0x97B8, 0xE75F, 0xF77E, 0xC71D, 0xD73C,
	0x26D3, 0x36F2, 0x0691, 0x16B0, 0x6657, 0x7676, 0x4615, 0x5634,
	0xD94C, 0xC96D, 0xF90E, 0xE92F, 0x99C8, 0x89E9, 0xB98A, 0xA9AB,
	0x5844, 0x4865, 0x7806, 0x6827, 0x18C0, 0x08E1, 0x3882, 0x28A3,
	0xCB7D, 0xDB5C, 0xEB3F, 0xFB1E, 0x8BF9, 0x9BD8, 0xABBB, 0xBB9A,
	0x4A75, 0x5A54, 0x6A37, 0x7A16, 0x0AF1, 0x1AD0, 0x2AB3, 0x3A92,
	0xFD2E, 0xED0F, 0xDD6C, 0xCD4D, 0xBDAA, 0xAD8B, 0x9DE8, 0x8DC9,
	0x7C26, 0x6C07, 0x5C64, 0x4C45, 0x3CA2, 0x2C83, 0x1CE0, 0x0CC1,
	0xEF1F, 0xFF3E, 0xCF5D, 0xDF7C, 0xAF9B, 0xBFBA, 0x8FD9, 0x9FF8,
	0x6E17, 0x7E36, 0x4E55, 0x5E74, 0x2E93, 0x3EB2, 0x0ED1, 0x1EF0
};
#define ByteCRC16(v, crc) \
	(unsigned short)((crc << 8) ^  ccitt_16Table[((crc >> 8) ^ (v)) & 255])

#ifdef RT2870
unsigned char BitReverse(unsigned char x)
{
	int i;
	unsigned char Temp=0;
	for(i=0; ; i++)
	{
		if(x & 0x80)	Temp |= 0x80;
		if(i==7)		break;
		x	<<= 1;
		Temp >>= 1;
	}
	return Temp;
}
#endif

//
// BBP register initialization set
//

        {RF_R06,          0x02},
        {RF_R07,          0x70},
        {RF_R09,          0x0F},
#ifndef RT30xx
        {RF_R10,          0x71},
#endif
#ifdef RT30xx
        {RF_R10,          0x41},
#endif
        {RF_R11,          0x21},
        {RF_R12,          0x7B},
        {RF_R14,          0x90},

        {RF_R21,          0xDB},
        {RF_R24,          0x16},
        {RF_R25,          0x01},
#ifndef RT30xx
        {RF_R27,          0x03},
#endif
        {RF_R29,          0x1F},
};
#define	NUM_RF_REG_PARMS	(sizeof(RT30xx_RFRegTable) / sizeof(REG_PAIR))


	========================================================================
*/
#ifndef RT30xx
VOID RTUSBFilterCalibration(
	IN PRTMP_ADAPTER pAd)
{
	UCHAR	R55x = 0, value, FilterTarget = 0x1E, BBPValue;
	UINT	loop = 0, count = 0, loopcnt = 0, ReTry = 0;
	UCHAR	RF_R24_Value = 0;

	// Give bbp filter initial value
	pAd->Mlme.CaliBW20RfR24 = 0x16;
	pAd->Mlme.CaliBW40RfR24 = 0x36;  //Bit[5] must be 1 for BW 40

	do
	{
		if (loop == 1)	//BandWidth = 40 MHz
		{
			// Write 0x27 to RF_R24 to program filter
			RF_R24_Value = 0x27;
			RT30xxWriteRFRegister(pAd, RF_R24, RF_R24_Value);
			FilterTarget = 0x19;

			// when calibrate BW40, BBP mask must set to BW40.
			RTUSBReadBBPRegister(pAd, BBP_R4, &BBPValue);
			BBPValue&= (~0x18);
			BBPValue|= (0x10);
			RTUSBWriteBBPRegister(pAd, BBP_R4, BBPValue);
		}
		else			//BandWidth = 20 MHz
		{
			// Write 0x07 to RF_R24 to program filter
			RF_R24_Value = 0x07;
			RT30xxWriteRFRegister(pAd, RF_R24, RF_R24_Value);
			FilterTarget = 0x16;
		}

		// Write 0x01 to RF_R22 to enable baseband loopback mode
		RT30xxReadRFRegister(pAd, RF_R22, &value);
		value |= 0x01;
		RT30xxWriteRFRegister(pAd, RF_R22, value);

		// Write 0x00 to BBP_R24 to set power & frequency of passband test tone
		RTUSBWriteBBPRegister(pAd, BBP_R24, 0);

		do
		{
			// Write 0x90 to BBP_R25 to transmit test tone
			RTUSBWriteBBPRegister(pAd, BBP_R25, 0x90);

			RTMPusecDelay(1000);
			// Read BBP_R55[6:0] for received power, set R55x = BBP_R55[6:0]
			RTUSBReadBBPRegister(pAd, BBP_R55, &value);
			R55x = value & 0xFF;

		} while ((ReTry++ < 100) && (R55x == 0));

		// Write 0x06 to BBP_R24 to set power & frequency of stopband test tone
		RTUSBWriteBBPRegister(pAd, BBP_R24, 0x06);

		while(TRUE)
		{
			// Write 0x90 to BBP_R25 to transmit test tone
			RTUSBWriteBBPRegister(pAd, BBP_R25, 0x90);

			//We need to wait for calibration
			RTMPusecDelay(1000);
			RTUSBReadBBPRegister(pAd, BBP_R55, &value);
			value &= 0xFF;
			if ((R55x - value) < FilterTarget)
			{
				RF_R24_Value ++;
			}
			else if ((R55x - value) == FilterTarget)
			{
				RF_R24_Value ++;
				count ++;
			}
			else
			{
				break;
			}

			// prevent infinite loop cause driver hang.
			if (loopcnt++ > 100)
			{
				DBGPRINT(RT_DEBUG_ERROR, ("RTUSBFilterCalibration - can't find a valid value, loopcnt=%d stop calibrating", loopcnt));
				break;
			}

			// Write RF_R24 to program filter
			RT30xxWriteRFRegister(pAd, RF_R24, RF_R24_Value);
		}

		if (count > 0)
		{
			RF_R24_Value = RF_R24_Value - ((count) ? (1) : (0));
		}

		// Store for future usage
		if (loopcnt < 100)
		{
			if (loop++ == 0)
			{
				//BandWidth = 20 MHz
				pAd->Mlme.CaliBW20RfR24 = (UCHAR)RF_R24_Value;
			}
			else
			{
				//BandWidth = 40 MHz
				pAd->Mlme.CaliBW40RfR24 = (UCHAR)RF_R24_Value;
				break;
			}
		}
		else
			break;

		RT30xxWriteRFRegister(pAd, RF_R24, RF_R24_Value);

		// reset count
		count = 0;
	} while(TRUE);

	//
	// Set back to initial state
	//
	RTUSBWriteBBPRegister(pAd, BBP_R24, 0);

	RT30xxReadRFRegister(pAd, RF_R22, &value);
	value &= ~(0x01);
	RT30xxWriteRFRegister(pAd, RF_R22, value);

	// set BBP back to BW20
	RTUSBReadBBPRegister(pAd, BBP_R4, &BBPValue);
	BBPValue&= (~0x18);
	RTUSBWriteBBPRegister(pAd, BBP_R4, BBPValue);

	DBGPRINT(RT_DEBUG_TRACE, ("RTUSBFilterCalibration - CaliBW20RfR24=0x%x, CaliBW40RfR24=0x%x\n", pAd->Mlme.CaliBW20RfR24, pAd->Mlme.CaliBW40RfR24));
}
#endif /* RT30xx */
#ifdef RT30xx
VOID RTMPFilterCalibration(
	IN PRTMP_ADAPTER pAd)
{

	UCHAR	RF_R24_Value = 0;

	// Give bbp filter initial value
#ifndef RT2870
	pAd->Mlme.CaliBW20RfR24 = 0x16;
	pAd->Mlme.CaliBW40RfR24 = 0x36;  //Bit[5] must be 1 for BW 40
#else
	pAd->Mlme.CaliBW20RfR24 = 0x1F;
	pAd->Mlme.CaliBW40RfR24 = 0x2F; //Bit[5] must be 1 for BW 40
#endif
	do
	{
		if (loop == 1)	//BandWidth = 40 MHz

			BBPValue&= (~0x18);
			BBPValue|= (0x10);
			RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
#ifdef RT2870
			// set to BW40
			RT30xxReadRFRegister(pAd, RF_R31, &value);
			value |= 0x20;
			RT30xxWriteRFRegister(pAd, RF_R31, value);
#endif
		}
		else			//BandWidth = 20 MHz
		{

				FilterTarget = 0x13;
			else
				FilterTarget = 0x16;
#ifdef RT2870
			// set to BW20
			RT30xxReadRFRegister(pAd, RF_R31, &value);
			value &= (~0x20);
			RT30xxWriteRFRegister(pAd, RF_R31, value);
#endif
		}

		// Write 0x01 to RF_R22 to enable baseband loopback mode


	DBGPRINT(RT_DEBUG_TRACE, ("RTMPFilterCalibration - CaliBW20RfR24=0x%x, CaliBW40RfR24=0x%x\n", pAd->Mlme.CaliBW20RfR24, pAd->Mlme.CaliBW40RfR24));
}
#endif /* RT30xx */

VOID NICInitRT30xxRFRegisters(IN PRTMP_ADAPTER pAd)
{
	INT i;
	// Driver must read EEPROM to get RfIcType before initial RF registers
	// Initialize RF register to default value
#ifndef RT30xx
        if (IS_RT3070(pAd) && ((pAd->RfIcType == RFIC_3020) ||(pAd->RfIcType == RFIC_2020)))
        {
                // Init RF calibration
                // Driver should toggle RF R30 bit7 before init RF registers
                ULONG RfReg = 0;
                RT30xxReadRFRegister(pAd, RF_R30, (PUCHAR)&RfReg);
                RfReg |= 0x80;
                RT30xxWriteRFRegister(pAd, RF_R30, (UCHAR)RfReg);
                RTMPusecDelay(1000);
                RfReg &= 0x7F;
                RT30xxWriteRFRegister(pAd, RF_R30, (UCHAR)RfReg);

                // Initialize RF register to default value
                for (i = 0; i < NUM_RF_REG_PARMS; i++)
                {
                        RT30xxWriteRFRegister(pAd, RT30xx_RFRegTable[i].Register, RT30xx_RFRegTable[i].Value);
                }

                //For RF filter Calibration
                RTUSBFilterCalibration(pAd);
        }
#endif
#ifdef RT30xx
	if (IS_RT3070(pAd) || IS_RT3071(pAd))
	{
		// Init RF calibration

			RT30xxWriteRFRegister(pAd, RT30xx_RFRegTable[i].Register, RT30xx_RFRegTable[i].Value);
		}

		// add by johnli
		if (IS_RT3070(pAd))
		{
			//  Update MAC 0x05D4 from 01xxxxxx to 0Dxxxxxx (voltage 1.2V to 1.35V) for RT3070 to improve yield rate

			RT30xxLoadRFNormalModeSetup(pAd);
		}
	}
#endif
}
#endif // RT2870 //


	Antenna.word = pAd->EEPROMDefaultValue[0];
	if (Antenna.word == 0xFFFF)
	{
#ifdef RT30xx
		if(IS_RT3090(pAd))
		{
			Antenna.word = 0;

		}
		else
		{
#endif // RT30xx //
		Antenna.word = 0;
		Antenna.field.RfIcType = RFIC_2820;
		Antenna.field.TxPath = 1;
		Antenna.field.RxPath = 2;
		DBGPRINT(RT_DEBUG_WARN, ("E2PROM error, hard code as 0x%04x\n", Antenna.word));
#ifdef RT30xx
		}
#endif // RT30xx //
	}

	// Choose the desired Tx&Rx stream.

	NicConfig2.word = pAd->EEPROMDefaultValue[1];

	{
#ifndef RT30xx
		NicConfig2.word = 0;
#endif
		if ((NicConfig2.word & 0x00ff) == 0xff)
		{
			NicConfig2.word &= 0xff00;


	RTMPReadTxPwrPerRate(pAd);

#ifdef RT30xx
	if (IS_RT30xx(pAd))
	{
		eFusePhysicalReadRegisters(pAd, EFUSE_TAG, 2, &value);
		pAd->EFuseTag = (value & 0xff);
	}
#endif // RT30xx //

	DBGPRINT(RT_DEBUG_TRACE, ("<-- NICReadEEPROMParameters\n"));
}


		}
	}

#ifndef RT2870
	Antenna.word = pAd->Antenna.word;
#else
#ifdef RT30xx
	Antenna.word = pAd->EEPROMDefaultValue[0];
	if (Antenna.word == 0xFFFF)
	{

	pAd->Mlme.RealRxPath = (UCHAR) Antenna.field.RxPath;
	pAd->RfIcType = (UCHAR) Antenna.field.RfIcType;

#ifdef RT2870
	DBGPRINT(RT_DEBUG_WARN, ("pAd->RfIcType = %d, RealRxPath=%d, TxPath = %d\n", pAd->RfIcType, pAd->Mlme.RealRxPath,Antenna.field.TxPath));

	// Save the antenna for future use

#endif
	NicConfig2.word = pAd->EEPROMDefaultValue[1];

#ifdef RT2870
	{
		if ((NicConfig2.word & 0x00ff) == 0xff)
		{

	// Save the antenna for future use
	pAd->NicConfig2.word = NicConfig2.word;

#ifdef RT2870
	// set default antenna as main
	if (pAd->RfIcType == RFIC_3020)
		AsicSetRxAnt(pAd, pAd->RxAnt.Pair1PrimaryRxAnt);

		pAd->bAutoTxAgcA = pAd->bAutoTxAgcG = TRUE;
	else
		pAd->bAutoTxAgcA = pAd->bAutoTxAgcG = FALSE;

	/* BBP has been programmed so reset to UNKNOWN_BAND */
	// upate inside of AsicAntennaSelect, so reset to UNKNOWN_BAND!!
	//
	pAd->CommonCfg.BandState = UNKNOWN_BAND;

	RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BBPR3);

	UINT32			MacCsr0 = 0;
	NTSTATUS		Status;
	UCHAR			Value = 0xff;
#endif // RT2870 //
#ifdef RT30xx
	UINT32			eFuseCtrl;
#endif
	USHORT			KeyIdx;
	INT				i,apidx;


#endif // RT3070 //
		RTMP_IO_WRITE32(pAd, (USHORT)MACRegTable[Index].Register, MACRegTable[Index].Value);
	}

#ifndef RT30xx
	if(IS_RT3070(pAd))
	{
		// According to Frank Hsu (from Gary Tsao)
		RTMP_IO_WRITE32(pAd, (USHORT)TX_SW_CFG0, 0x00000400);

		// Initialize RT3070 serial MAC registers which is different from RT2870 serial
		RTUSBWriteMACRegister(pAd, TX_SW_CFG1, 0);
		RTUSBWriteMACRegister(pAd, TX_SW_CFG2, 0);
	}
#endif
#endif // RT2870 //


	{
		for (Index = 0; Index < NUM_STA_MAC_REG_PARMS; Index++)
		{

		}
	}

#ifdef RT30xx
	// Initialize RT3070 serial MAc registers which is different from RT2870 serial
	if (IS_RT3090(pAd))
	{

			RTMP_IO_WRITE32(pAd, TX_SW_CFG2, 0x0);
		}
	}
#ifdef RT2870
	else if (IS_RT3070(pAd))
	{
		RTMP_IO_WRITE32(pAd, TX_SW_CFG1, 0);

		RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBPRegTable[Index].Register, BBPRegTable[Index].Value);
	}

#ifndef RT2870
	// for rt2860E and after, init BBP_R84 with 0x19. This is for extension channel overlapping IOT.
	if ((pAd->MACVersion&0xffff) != 0x0101)
		RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R84, 0x19);
#else
#ifdef RT2870
	//write RT3070 BBP wchich different with 2870 after write RT2870 BBP
	if (IS_RT3070(pAd))
	{
		RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, 0x0a);
		RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R84, 0x99);
		RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R105, 0x05);
	}
#endif // RT2870 //
#endif
#ifdef RT30xx
	// for rt2860E and after, init BBP_R84 with 0x19. This is for extension channel overlapping IOT.
	// RT3090 should not program BBP R84 to 0x19, otherwise TX will block.
	if (((pAd->MACVersion&0xffff) != 0x0101) && (!IS_RT30xx(pAd)))

	Counter&=0xffffff00;
	Counter|=0x000001e;
	RTMP_IO_WRITE32(pAd, USB_CYC_CFG, Counter);

#ifdef RT30xx
	pAd->bUseEfuse=FALSE;
	RTMP_IO_READ32(pAd, EFUSE_CTRL, &eFuseCtrl);
	pAd->bUseEfuse = ( (eFuseCtrl & 0x80000000) == 0x80000000) ? 1 : 0;

	else
	{
			DBGPRINT(RT_DEBUG_TRACE, ("NVM is EEPROM\n"));

	}
#endif

	{
		// for rt2860E and after, init TXOP_CTRL_CFG with 0x583f. This is for extension channel overlapping IOT.

		pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt7.field.AggSize16Count / 16);
	}

#ifdef DBG_DIAGNOSE
	{
		RtmpDiagStruct	*pDiag;
		COUNTER_RALINK	*pRalinkCounters;
		UCHAR			ArrayCurIdx, i;

		pDiag = &pAd->DiagStruct;
		pRalinkCounters = &pAd->RalinkCounters;
		ArrayCurIdx = pDiag->ArrayCurIdx;

		if (pDiag->inited == 0)
		{
			NdisZeroMemory(pDiag, sizeof(struct _RtmpDiagStrcut_));
			pDiag->ArrayStartIdx = pDiag->ArrayCurIdx = 0;
			pDiag->inited = 1;
		}
		else
		{
			// Tx
			pDiag->TxFailCnt[ArrayCurIdx] = TxStaCnt0.field.TxFailCount;
			pDiag->TxAggCnt[ArrayCurIdx] = TxAggCnt.field.AggTxCount;
			pDiag->TxNonAggCnt[ArrayCurIdx] = TxAggCnt.field.NonAggTxCount;
			pDiag->TxAMPDUCnt[ArrayCurIdx][0] = TxAggCnt0.field.AggSize1Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][1] = TxAggCnt0.field.AggSize2Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][2] = TxAggCnt1.field.AggSize3Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][3] = TxAggCnt1.field.AggSize4Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][4] = TxAggCnt2.field.AggSize5Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][5] = TxAggCnt2.field.AggSize6Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][6] = TxAggCnt3.field.AggSize7Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][7] = TxAggCnt3.field.AggSize8Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][8] = TxAggCnt4.field.AggSize9Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][9] = TxAggCnt4.field.AggSize10Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][10] = TxAggCnt5.field.AggSize11Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][11] = TxAggCnt5.field.AggSize12Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][12] = TxAggCnt6.field.AggSize13Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][13] = TxAggCnt6.field.AggSize14Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][14] = TxAggCnt7.field.AggSize15Count;
			pDiag->TxAMPDUCnt[ArrayCurIdx][15] = TxAggCnt7.field.AggSize16Count;

			pDiag->RxCrcErrCnt[ArrayCurIdx] = RxStaCnt0.field.CrcErr;

			INC_RING_INDEX(pDiag->ArrayCurIdx,  DIAGNOSE_TIME);
			ArrayCurIdx = pDiag->ArrayCurIdx;
			for (i =0; i < 9; i++)
			{
				pDiag->TxDescCnt[ArrayCurIdx][i]= 0;
				pDiag->TxSWQueCnt[ArrayCurIdx][i] =0;
				pDiag->TxMcsCnt[ArrayCurIdx][i] = 0;
				pDiag->RxMcsCnt[ArrayCurIdx][i] = 0;
			}
			pDiag->TxDataCnt[ArrayCurIdx] = 0;
			pDiag->TxFailCnt[ArrayCurIdx] = 0;
			pDiag->RxDataCnt[ArrayCurIdx] = 0;
			pDiag->RxCrcErrCnt[ArrayCurIdx]  = 0;
			for (i = 9; i < 24; i++) // 3*3
			{
				pDiag->TxDescCnt[ArrayCurIdx][i] = 0;
				pDiag->TxMcsCnt[ArrayCurIdx][i] = 0;
				pDiag->RxMcsCnt[ArrayCurIdx][i] = 0;
}

			if (pDiag->ArrayCurIdx == pDiag->ArrayStartIdx)
				INC_RING_INDEX(pDiag->ArrayStartIdx,  DIAGNOSE_TIME);
		}

	}
#endif // DBG_DIAGNOSE //


}

		}
	}

#ifdef RT2870
	pAd->EepromAccess = FALSE;
#endif
	pAd->Antenna.word = 0;





	if ((pMeasureReportInfo = kmalloc(sizeof(MEASURE_RPI_REPORT), GFP_ATOMIC)) == NULL)
	{
#ifndef RT30xx
		DBGPRINT(RT_DEBUG_ERROR, ("%s unable to alloc memory for measure report buffer (size=%zu).\n", __func__, sizeof(MEASURE_RPI_REPORT)));
#endif
#ifdef RT30xx
		DBGPRINT(RT_DEBUG_ERROR, ("%s unable to alloc memory for measure report buffer (size=%d).\n", __func__, sizeof(MEASURE_RPI_REPORT)));
#endif
		return;
	}





VOID RTMPCleanRadarDuration(
	IN PRTMP_ADAPTER	pAd);

VOID RTMPPrepareRDCTSFrame(
	IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			pDA,
	IN	ULONG			Duration,
	IN  UCHAR           RTSRate,
	IN  ULONG           CTSBaseAddr,
	IN  UCHAR			FrameGap);

VOID RTMPPrepareRadarDetectParams(
	IN PRTMP_ADAPTER	pAd);


INT Set_ChMovingTime_Proc(
	IN PRTMP_ADAPTER pAd,
	IN PUCHAR arg);




/*
 *************************************************************************
 * Ralink Tech Inc.
 * 5F., No.36, Taiyuan St., Jhubei City,
 * Hsinchu County 302,
 * Taiwan, R.O.C.
 *
 * (c) Copyright 2002-2007, Ralink Technology, Inc.
 *
 * This program is free software; you can redistribute it and/or modify  *
 * it under the terms of the GNU General Public License as published by  *
 * the Free Software Foundation; either version 2 of the License, or     *
 * (at your option) any later version.                                   *
 *                                                                       *
 * This program is distributed in the hope that it will be useful,       *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of        *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
 * GNU General Public License for more details.                          *
 *                                                                       *
 * You should have received a copy of the GNU General Public License     *
 * along with this program; if not, write to the                         *
 * Free Software Foundation, Inc.,                                       *
 * 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *
 *                                                                       *
 *************************************************************************
 */

#ifndef __LINK_LIST_H__
#define __LINK_LIST_H__

typedef struct _LIST_ENTRY
{
	struct _LIST_ENTRY *pNext;
} LIST_ENTRY, *PLIST_ENTRY;

typedef struct _LIST_HEADR
{
	PLIST_ENTRY pHead;
	PLIST_ENTRY pTail;
	UCHAR size;
} LIST_HEADER, *PLIST_HEADER;

static inline VOID initList(
	IN PLIST_HEADER pList)
{
	pList->pHead = pList->pTail = NULL;
	pList->size = 0;
	return;
}

static inline VOID insertTailList(
	IN PLIST_HEADER pList,
	IN PLIST_ENTRY pEntry)
{
	pEntry->pNext = NULL;
	if (pList->pTail)
		pList->pTail->pNext = pEntry;
	else
		pList->pHead = pEntry;
	pList->pTail = pEntry;
	pList->size++;

	return;
}

static inline PLIST_ENTRY removeHeadList(
	IN PLIST_HEADER pList)
{
	PLIST_ENTRY pNext;
	PLIST_ENTRY pEntry;

	pEntry = pList->pHead;
	if (pList->pHead != NULL)
	{
		pNext = pList->pHead->pNext;
		pList->pHead = pNext;
		if (pNext == NULL)
			pList->pTail = NULL;
		pList->size--;
	}
	return pEntry;
}

static inline int getListSize(
	IN PLIST_HEADER pList)
{
	return pList->size;
}

static inline PLIST_ENTRY delEntryList(
	IN PLIST_HEADER pList,
	IN PLIST_ENTRY pEntry)
{
	PLIST_ENTRY pCurEntry;
	PLIST_ENTRY pPrvEntry;

	if(pList->pHead == NULL)
		return NULL;

	if(pEntry == pList->pHead)
	{
		pCurEntry = pList->pHead;
		pList->pHead = pCurEntry->pNext;

		if(pList->pHead == NULL)
			pList->pTail = NULL;

		pList->size--;
		return pCurEntry;
	}

	pPrvEntry = pList->pHead;
	pCurEntry = pPrvEntry->pNext;
	while(pCurEntry != NULL)
	{
		if (pEntry == pCurEntry)
		{
			pPrvEntry->pNext = pCurEntry->pNext;

			if(pEntry == pList->pTail)
				pList->pTail = pPrvEntry;

			pList->size--;
			break;
		}
		pPrvEntry = pCurEntry;
		pCurEntry = pPrvEntry->pNext;
	}

	return pCurEntry;
}

#endif // ___LINK_LIST_H__ //





//
#define	OID_GET_SET_TOGGLE			0x8000

#define OID_802_11_ADD_WEP			0x0112
#define OID_802_11_DISASSOCIATE			0x0114
#define OID_802_11_BSSID_LIST_SCAN		0x0508
#define OID_802_11_SSID				0x0509
#define OID_802_11_BSSID			0x050A
#define OID_802_11_MIC_FAILURE_REPORT_FRAME	0x0528
#define	OID_802_11_NUMBER_OF_ANTENNAS				0x010B
#define	OID_802_11_RX_ANTENNA_SELECTED				0x010C
#define	OID_802_11_TX_ANTENNA_SELECTED				0x010D
#define	OID_802_11_SUPPORTED_RATES					0x010E
#define	OID_802_11_ADD_WEP							0x0112
#define	OID_802_11_REMOVE_WEP						0x0113
#define	OID_802_11_DISASSOCIATE						0x0114
#define	OID_802_11_PRIVACY_FILTER					0x0118
#define	OID_802_11_ASSOCIATION_INFORMATION			0x011E
#define	OID_802_11_TEST								0x011F
#define	RT_OID_802_11_COUNTRY_REGION				0x0507
#define	OID_802_11_BSSID_LIST_SCAN					0x0508
#define	OID_802_11_SSID								0x0509
#define	OID_802_11_BSSID							0x050A
#define	RT_OID_802_11_RADIO							0x050B
#define	RT_OID_802_11_PHY_MODE						0x050C
#define	RT_OID_802_11_STA_CONFIG					0x050D
#define	OID_802_11_DESIRED_RATES					0x050E
#define	RT_OID_802_11_PREAMBLE						0x050F
#define	OID_802_11_WEP_STATUS						0x0510
#define	OID_802_11_AUTHENTICATION_MODE				0x0511
#define	OID_802_11_INFRASTRUCTURE_MODE				0x0512
#define	RT_OID_802_11_RESET_COUNTERS				0x0513
#define	OID_802_11_RTS_THRESHOLD					0x0514
#define	OID_802_11_FRAGMENTATION_THRESHOLD			0x0515
#define	OID_802_11_POWER_MODE						0x0516
#define	OID_802_11_TX_POWER_LEVEL					0x0517
#define	RT_OID_802_11_ADD_WPA						0x0518
#define	OID_802_11_REMOVE_KEY						0x0519
#define	OID_802_11_ADD_KEY							0x0520
#define	OID_802_11_CONFIGURATION					0x0521
#define	OID_802_11_TX_PACKET_BURST					0x0522
#define	RT_OID_802_11_QUERY_NOISE_LEVEL				0x0523
#define	RT_OID_802_11_EXTRA_INFO					0x0524
#ifdef	DBG
#define	RT_OID_802_11_HARDWARE_REGISTER				0x0525
#endif
#define OID_802_11_ENCRYPTION_STATUS            OID_802_11_WEP_STATUS
#define OID_802_11_DEAUTHENTICATION                 0x0526
#define OID_802_11_DROP_UNENCRYPTED                 0x0527
#define OID_802_11_MIC_FAILURE_REPORT_FRAME         0x0528

// For 802.1x daemin using to require current driver configuration
#define OID_802_11_RADIUS_QUERY_SETTING				0x0540

#define	RT_OID_DEVICE_NAME							0x0607
#define	RT_OID_VERSION_INFO							0x0608
#define	OID_802_11_BSSID_LIST						0x0609
#define	OID_802_3_CURRENT_ADDRESS					0x060A
#define	OID_GEN_MEDIA_CONNECT_STATUS				0x060B
#define	RT_OID_802_11_QUERY_LINK_STATUS				0x060C
#define	OID_802_11_RSSI								0x060D
#define	OID_802_11_STATISTICS						0x060E
#define	OID_GEN_RCV_OK								0x060F
#define	OID_GEN_RCV_NO_BUFFER						0x0610
#define	RT_OID_802_11_QUERY_EEPROM_VERSION			0x0611
#define	RT_OID_802_11_QUERY_FIRMWARE_VERSION		0x0612
#define	RT_OID_802_11_QUERY_LAST_RX_RATE			0x0613
#define	RT_OID_802_11_TX_POWER_LEVEL_1				0x0614
#define	RT_OID_802_11_QUERY_PIDVID					0x0615

#define OID_SET_COUNTERMEASURES                     0x0616
#define OID_802_11_SET_IEEE8021X                    0x0617
#define OID_802_11_SET_IEEE8021X_REQUIRE_KEY        0x0618
#define OID_802_11_PMKID                            0x0620
#define RT_OID_WPA_SUPPLICANT_SUPPORT               0x0621
#define RT_OID_WE_VERSION_COMPILED                  0x0622
#define RT_OID_NEW_DRIVER                           0x0623


//rt2860 , kathy
#define	RT_OID_802_11_SNR_0							0x0630
#define	RT_OID_802_11_SNR_1							0x0631
#define	RT_OID_802_11_QUERY_LAST_TX_RATE			0x0632
#define	RT_OID_802_11_QUERY_HT_PHYMODE				0x0633
#define	RT_OID_802_11_SET_HT_PHYMODE				0x0634
#define	OID_802_11_RELOAD_DEFAULTS					0x0635
#define	RT_OID_802_11_QUERY_APSD_SETTING			0x0636
#define	RT_OID_802_11_SET_APSD_SETTING				0x0637
#define	RT_OID_802_11_QUERY_APSD_PSM				0x0638
#define	RT_OID_802_11_SET_APSD_PSM					0x0639
#define	RT_OID_802_11_QUERY_DLS						0x063A
#define	RT_OID_802_11_SET_DLS						0x063B
#define	RT_OID_802_11_QUERY_DLS_PARAM				0x063C
#define	RT_OID_802_11_SET_DLS_PARAM					0x063D
#define RT_OID_802_11_QUERY_WMM              		0x063E
#define RT_OID_802_11_SET_WMM      					0x063F
#define RT_OID_802_11_QUERY_IMME_BA_CAP				0x0640
#define RT_OID_802_11_SET_IMME_BA_CAP				0x0641
#define RT_OID_802_11_QUERY_BATABLE					0x0642
#define RT_OID_802_11_ADD_IMME_BA					0x0643
#define RT_OID_802_11_TEAR_IMME_BA					0x0644
#define RT_OID_DRIVER_DEVICE_NAME                   0x0645
#define RT_OID_802_11_QUERY_DAT_HT_PHYMODE          0x0646
#define RT_OID_QUERY_MULTIPLE_CARD_SUPPORT          0x0647

// Ralink defined OIDs
// Dennis Lee move to platform specific

#define	RT_OID_802_11_BSSID					  (OID_GET_SET_TOGGLE |	OID_802_11_BSSID)
#define	RT_OID_802_11_SSID					  (OID_GET_SET_TOGGLE |	OID_802_11_SSID)
#define	RT_OID_802_11_INFRASTRUCTURE_MODE	  (OID_GET_SET_TOGGLE |	OID_802_11_INFRASTRUCTURE_MODE)
#define	RT_OID_802_11_ADD_WEP				  (OID_GET_SET_TOGGLE |	OID_802_11_ADD_WEP)
#define	RT_OID_802_11_ADD_KEY				  (OID_GET_SET_TOGGLE |	OID_802_11_ADD_KEY)
#define	RT_OID_802_11_REMOVE_WEP			  (OID_GET_SET_TOGGLE |	OID_802_11_REMOVE_WEP)
#define	RT_OID_802_11_REMOVE_KEY			  (OID_GET_SET_TOGGLE |	OID_802_11_REMOVE_KEY)
#define	RT_OID_802_11_DISASSOCIATE			  (OID_GET_SET_TOGGLE |	OID_802_11_DISASSOCIATE)
#define	RT_OID_802_11_AUTHENTICATION_MODE	  (OID_GET_SET_TOGGLE |	OID_802_11_AUTHENTICATION_MODE)
#define	RT_OID_802_11_PRIVACY_FILTER		  (OID_GET_SET_TOGGLE |	OID_802_11_PRIVACY_FILTER)
#define	RT_OID_802_11_BSSID_LIST_SCAN		  (OID_GET_SET_TOGGLE |	OID_802_11_BSSID_LIST_SCAN)
#define	RT_OID_802_11_WEP_STATUS			  (OID_GET_SET_TOGGLE |	OID_802_11_WEP_STATUS)
#define	RT_OID_802_11_RELOAD_DEFAULTS		  (OID_GET_SET_TOGGLE |	OID_802_11_RELOAD_DEFAULTS)
#define	RT_OID_802_11_NETWORK_TYPE_IN_USE	  (OID_GET_SET_TOGGLE |	OID_802_11_NETWORK_TYPE_IN_USE)
#define	RT_OID_802_11_TX_POWER_LEVEL		  (OID_GET_SET_TOGGLE |	OID_802_11_TX_POWER_LEVEL)
#define	RT_OID_802_11_RSSI_TRIGGER			  (OID_GET_SET_TOGGLE |	OID_802_11_RSSI_TRIGGER)
#define	RT_OID_802_11_FRAGMENTATION_THRESHOLD (OID_GET_SET_TOGGLE |	OID_802_11_FRAGMENTATION_THRESHOLD)
#define	RT_OID_802_11_RTS_THRESHOLD			  (OID_GET_SET_TOGGLE |	OID_802_11_RTS_THRESHOLD)
#define	RT_OID_802_11_RX_ANTENNA_SELECTED	  (OID_GET_SET_TOGGLE |	OID_802_11_RX_ANTENNA_SELECTED)
#define	RT_OID_802_11_TX_ANTENNA_SELECTED	  (OID_GET_SET_TOGGLE |	OID_802_11_TX_ANTENNA_SELECTED)
#define	RT_OID_802_11_SUPPORTED_RATES		  (OID_GET_SET_TOGGLE |	OID_802_11_SUPPORTED_RATES)
#define	RT_OID_802_11_DESIRED_RATES			  (OID_GET_SET_TOGGLE |	OID_802_11_DESIRED_RATES)
#define	RT_OID_802_11_CONFIGURATION			  (OID_GET_SET_TOGGLE |	OID_802_11_CONFIGURATION)
#define	RT_OID_802_11_POWER_MODE			  (OID_GET_SET_TOGGLE |	OID_802_11_POWER_MODE)

typedef enum _NDIS_802_11_STATUS_TYPE
{
    Ndis802_11StatusType_Authentication,

    Ndis802_11Encryption3KeyAbsent,
    Ndis802_11Encryption4Enabled,	// TKIP or AES mix
    Ndis802_11Encryption4KeyAbsent,
#ifndef RT30xx
    Ndis802_11GroupWEP40Enabled,
	Ndis802_11GroupWEP104Enabled,
#endif
} NDIS_802_11_WEP_STATUS, *PNDIS_802_11_WEP_STATUS,
  NDIS_802_11_ENCRYPTION_STATUS, *PNDIS_802_11_ENCRYPTION_STATUS;


     NDIS_802_11_AUTHENTICATION_ENCRYPTION AuthenticationEncryptionSupported[1];
} NDIS_802_11_CAPABILITY, *PNDIS_802_11_CAPABILITY;

#if WIRELESS_EXT <= 11
#ifndef SIOCDEVPRIVATE
#define SIOCDEVPRIVATE                              0x8BE0
#endif
#define SIOCIWFIRSTPRIV								SIOCDEVPRIVATE
#endif

#ifdef RT30xx
#define RT_PRIV_IOCTL_EXT							(SIOCIWFIRSTPRIV + 0x01) // Sync. with AP for wsc upnp daemon
#endif
#define RTPRIV_IOCTL_SET							(SIOCIWFIRSTPRIV + 0x02)

#ifdef DBG
#define RTPRIV_IOCTL_BBP                            (SIOCIWFIRSTPRIV + 0x03)
#define RTPRIV_IOCTL_MAC                            (SIOCIWFIRSTPRIV + 0x05)
#ifdef RT30xx
#define RTPRIV_IOCTL_RF                             (SIOCIWFIRSTPRIV + 0x13)
#endif
#define RTPRIV_IOCTL_E2P                            (SIOCIWFIRSTPRIV + 0x07)
#endif

#define RTPRIV_IOCTL_STATISTICS                     (SIOCIWFIRSTPRIV + 0x09)
#define RTPRIV_IOCTL_ADD_PMKID_CACHE                (SIOCIWFIRSTPRIV + 0x0A)
#define RTPRIV_IOCTL_RADIUS_DATA                    (SIOCIWFIRSTPRIV + 0x0C)

    RAIO_OFF = 10,
    RAIO_ON = 11,
	SHOW_CFG_VALUE = 20,
#if !defined(RT2860)
	SHOW_ADHOC_ENTRY_INFO = 21,
#endif
};

#define OID_802_11_BUILD_CHANNEL_EX				0x0714
#define OID_802_11_GET_CH_LIST					0x0715
#define OID_802_11_GET_COUNTRY_CODE				0x0716
#define OID_802_11_GET_CHANNEL_GEOGRAPHY		0x0717

#ifdef RT30xx
#define RT_OID_WSC_SET_PASSPHRASE                   0x0740 // passphrase for wpa(2)-psk
#define RT_OID_WSC_DRIVER_AUTO_CONNECT              0x0741
#define RT_OID_WSC_QUERY_DEFAULT_PROFILE            0x0742
#define RT_OID_WSC_SET_CONN_BY_PROFILE_INDEX        0x0743
#define RT_OID_WSC_SET_ACTION                       0x0744
#define RT_OID_WSC_SET_SSID                         0x0745
#define RT_OID_WSC_SET_PIN_CODE                     0x0746
#define RT_OID_WSC_SET_MODE                         0x0747 // PIN or PBC
#define RT_OID_WSC_SET_CONF_MODE                    0x0748 // Enrollee or Registrar
#define RT_OID_WSC_SET_PROFILE                      0x0749

#define RT_OID_802_11_WSC_QUERY_PROFILE				0x0750
// for consistency with RT61
#define RT_OID_WSC_QUERY_STATUS						0x0751
#define RT_OID_WSC_PIN_CODE							0x0752
#define RT_OID_WSC_UUID								0x0753
#define RT_OID_WSC_SET_SELECTED_REGISTRAR			0x0754
#define RT_OID_WSC_EAPMSG							0x0755
#define RT_OID_WSC_MANUFACTURER						0x0756
#define RT_OID_WSC_MODEL_NAME						0x0757
#define RT_OID_WSC_MODEL_NO							0x0758
#define RT_OID_WSC_SERIAL_NO						0x0759
#define RT_OID_WSC_MAC_ADDRESS						0x0760
#endif

#ifdef LLTD_SUPPORT
// for consistency with RT61
#define RT_OID_GET_PHY_MODE                         0x761

Lines 292-297 rt2860_interrupt(int irq, void *dev_instance); Link Here

(-)a/drivers/staging/rt2860/rt2860.h (+2 lines)
292	#define VEN_AWT_PCIe_DEVICE_ID 0x1059	292	#define VEN_AWT_PCIe_DEVICE_ID 0x1059
293	#define VEN_AWT_PCI_VENDOR_ID 0x1A3B	293	#define VEN_AWT_PCI_VENDOR_ID 0x1A3B
294		294
		295	#define EDIMAX_PCI_VENDOR_ID 0x1432
		296
295	// For RTMPPCIePowerLinkCtrlRestore () function	297	// For RTMPPCIePowerLinkCtrlRestore () function
296	#define RESTORE_HALT 1	298	#define RESTORE_HALT 1
297	#define RESTORE_WAKEUP 2	299	#define RESTORE_WAKEUP 2




#define PCI_EECTRL			0x0004
#define PCI_MCUCTRL			0x0008

typedef int NTSTATUS;
#define	OPT_14			0x114

#define	OPT_14			0x114
#define	RETRY_LIMIT             10
#define STATUS_SUCCESS				0x00
#define STATUS_UNSUCCESSFUL 		0x01
#endif

//
// SCH/DMA registers - base address 0x0200

#define 	PBF_DBG 	 	 0x043c
#define     PBF_CAP_CTRL     0x0440

#ifdef RT30xx
// eFuse registers
#define EFUSE_CTRL              0x0580
#define EFUSE_DATA0             0x0590


#define LDO_CFG0 				0x05d4
#define GPIO_SWITCH				0x05dc
#endif /* RT30xx */

//
//  4  MAC  registers

#define BBP_R22                     22
#define BBP_R24                     24
#define BBP_R25                     25
#ifdef RT30xx
#define BBP_R31                     31
#endif
#define BBP_R49                     49 //TSSI
#define BBP_R50                     50
#define BBP_R51                     51

#define BBP_R73                     73
#define BBP_R75						75
#define BBP_R77                     77
#ifdef RT30xx
#define BBP_R79                     79
#define BBP_R80                     80
#endif
#define BBP_R81                     81
#define BBP_R82                     82
#define BBP_R83                     83

#define BBP_R121                    121
#define BBP_R122                    122
#define BBP_R123                    123
#ifdef RT30xx
#define BBP_R138                    138 // add by johnli, RF power sequence setup, ADC dynamic on/off control
#endif // RT30xx //


#define BBPR94_DEFAULT              0x06 // Add 1 value will gain 1db

		USHORT		EnableWPSPBC:1;                 // WPS PBC Control bit
		USHORT		BW40MAvailForG:1;			// 0:enable, 1:disable
		USHORT		BW40MAvailForA:1;			// 0:enable, 1:disable
#ifndef RT30xx
		USHORT		Rsv2:6;                 // must be 0
#endif
#ifdef RT30xx
		USHORT		Rsv1:1;					// must be 0
		USHORT		AntDiversity:1;			// Antenna diversity
		USHORT		Rsv2:3;					// must be 0
		USHORT		DACTestBit:1;			// control if driver should patch the DAC issue
#endif
	}	field;
	USHORT			word;
}	EEPROM_NIC_CONFIG2_STRUC, *PEEPROM_NIC_CONFIG2_STRUC;

Lines 68-76 Link Here

(-)a/drivers/staging/rt2860/rt_config.h (-4 lines)
68	#include "igmp_snoop.h"	68	#include "igmp_snoop.h"
69	#endif // IGMP_SNOOP_SUPPORT //	69	#endif // IGMP_SNOOP_SUPPORT //
70		70
71	#ifdef IKANOS_VX_1X0
72	#include "vr_ikans.h"
73	#endif // IKANOS_VX_1X0 //
74
75	#endif // __RT_CONFIG_H__	71	#endif // __RT_CONFIG_H__
76		72




 *************************************************************************
 */

#include <linux/sched.h>
#include "rt_config.h"

ULONG	RTDebugLevel = RT_DEBUG_ERROR;

	if ((skb = __dev_alloc_skb(HdrLen + DataSize + 2, MEM_ALLOC_FLAG)) != NULL)
	{
		skb_reserve(skb, 2);
		NdisMoveMemory(skb_tail_pointer(skb), pHeader802_3, HdrLen);
		skb_put(skb, HdrLen);
		NdisMoveMemory(skb_tail_pointer(skb), pData, DataSize);
		skb_put(skb, DataSize);
		skb->dev = get_netdev_from_bssid(pAd, FromWhichBSSID);
		pPacket = OSPKT_TO_RTPKT(skb);

	pRxPkt = RTPKT_TO_OSPKT(pPacket);

    /* Push up the protocol stack */
#ifdef IKANOS_VX_1X0
	IKANOS_DataFrameRx(pAd, pRxPkt->dev, pRxPkt, pRxPkt->len);
#else
	pRxPkt->protocol = eth_type_trans(pRxPkt, pRxPkt->dev);

	netif_rx(pRxPkt);
#endif // IKANOS_VX_1X0 //
}



	IN	UCHAR			BssIdx,
	IN	CHAR			Rssi)
{
#if WIRELESS_EXT >= 15

	union 	iwreq_data      wrqu;
	PUCHAR 	pBuf = NULL, pBufPtr = NULL;

		if (pAddr)
			pBufPtr += sprintf(pBufPtr, "(RT2860) STA(%02x:%02x:%02x:%02x:%02x:%02x) ", PRINT_MAC(pAddr));
		else if (BssIdx < MAX_MBSSID_NUM)
			pBufPtr += sprintf(pBufPtr, "(RT2860) BSS(wlan%d) ", BssIdx);
		else
			pBufPtr += sprintf(pBufPtr, "(RT2860) ");


	}
	else
		DBGPRINT(RT_DEBUG_ERROR, ("%s : Can't allocate memory for wireless event.\n", __func__));
#else
	DBGPRINT(RT_DEBUG_ERROR, ("%s : The Wireless Extension MUST be v15 or newer.\n", __func__));
#endif  /* WIRELESS_EXT >= 15 */
}

void send_monitor_packets(


    if (pRxBlk->DataSize + sizeof(wlan_ng_prism2_header) > RX_BUFFER_AGGRESIZE)
    {
#ifndef RT30xx
        DBGPRINT(RT_DEBUG_ERROR, ("%s : Size is too large! (%zu)\n", __func__, pRxBlk->DataSize + sizeof(wlan_ng_prism2_header)));
#endif
#ifdef RT30xx
        DBGPRINT(RT_DEBUG_ERROR, ("%s : Size is too large! (%d)\n", __func__, pRxBlk->DataSize + sizeof(wlan_ng_prism2_header)));
#endif
		goto err_free_sk_buff;
    }





#include <linux/ctype.h>
#include <linux/vmalloc.h>


#ifdef RT30xx
#include <linux/wireless.h>
#endif
#include <net/iw_handler.h>

// load firmware


// add by kathy

/* order of "if defined()" is important, because for 3070 driver
   both RT2870 and RT3070 are defined */
#if defined(RT2860)
 #define STA_PROFILE_PATH			"/etc/Wireless/RT2860STA/RT2860STA.dat"
 #define STA_RTMP_FIRMWARE_FILE_NAME "/etc/Wireless/RT2860STA/RT2860STA.bin"
 #define STA_NIC_DEVICE_NAME			"RT2860STA"
 #define STA_DRIVER_VERSION			"1.8.1.1"
#elif defined(RT3070)
 #define STA_PROFILE_PATH			"/etc/Wireless/RT3070STA/RT3070STA.dat"
 #define STA_RT2870_IMAGE_FILE_NAME  "/etc/Wireless/RT3070STA/rt2870.bin"
 #define STA_NIC_DEVICE_NAME			"RT3070STA"
 #define STA_DRIVER_VERSION			"2.0.1.0"
#elif defined(RT2870)
 #define STA_PROFILE_PATH			"/etc/Wireless/RT2870STA/RT2870STA.dat"
 #define STA_RT2870_IMAGE_FILE_NAME  "/etc/Wireless/RT2870STA/rt2870.bin"
 #define STA_NIC_DEVICE_NAME			"RT2870STA"
 #define STA_DRIVER_VERSION			"1.4.0.0"
#endif

#ifdef RT2860

#define NDIS_PACKET_TYPE_BROADCAST		2
#define NDIS_PACKET_TYPE_ALL_MULTICAST	3

#ifndef RT30xx
typedef	struct pid *	THREAD_PID;
#define	THREAD_PID_INIT_VALUE	NULL
#define	GET_PID(_v)	find_get_pid(_v)
#define	GET_PID_NUMBER(_v)	pid_nr(_v)
#define CHECK_PID_LEGALITY(_pid)	if (pid_nr(_pid) >= 0)
#define KILL_THREAD_PID(_A, _B, _C)	kill_pid(_A, _B, _C)
#endif

struct os_lock  {
	spinlock_t		lock;
	unsigned long  	flags;

#ifdef RT2870
	struct usb_device		*pUsb_Dev;

#ifndef RT30xx
	THREAD_PID				MLMEThr_pid;
	THREAD_PID				RTUSBCmdThr_pid;
	THREAD_PID				TimerQThr_pid;
#endif
#ifdef RT30xx
	struct pid	*MLMEThr_pid;
	struct pid	*RTUSBCmdThr_pid;
	struct pid	*TimerQThr_pid;
#endif
#endif // RT2870 //

	struct tasklet_struct 	rx_done_task;

	INT 					ioctl_if;
};

typedef struct _VIRTUAL_ADAPTER
{
	struct net_device		*RtmpDev;
	struct net_device		*VirtualDev;
} VIRTUAL_ADAPTER, PVIRTUAL_ADAPTER;

#undef  ASSERT
#define ASSERT(x)


}

#ifdef RT2860
#if defined(INF_TWINPASS) || defined(INF_DANUBE) || defined(IKANOS_VX_1X0)
//Patch for ASIC turst read/write bug, needs to remove after metel fix
#define RTMP_IO_READ32(_A, _R, _pV)									\
{																	\
    if ((_A)->bPCIclkOff == FALSE)                                      \
    {                                                                   \
	(*_pV = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)));		\
	(*_pV = readl((void *)((_A)->CSRBaseAddress + (_R))));			\
	(*_pV = SWAP32(*((UINT32 *)(_pV))));                           \
    }                                                                   \
}
#define RTMP_IO_FORCE_READ32(_A, _R, _pV)							\
{																	\
	(*_pV = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)));		\
	(*_pV = readl((void *)((_A)->CSRBaseAddress + (_R))));			\
	(*_pV = SWAP32(*((UINT32 *)(_pV))));                           \
}
#define RTMP_IO_READ8(_A, _R, _pV)									\
{																	\
	(*_pV = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)));		\
	(*_pV = readb((void *)((_A)->CSRBaseAddress + (_R))));			\
}
#define RTMP_IO_WRITE32(_A, _R, _V)									\
{																	\
    if ((_A)->bPCIclkOff == FALSE)                                      \
    {                                                                   \
	UINT32	_Val;													\
	_Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0));		\
	_Val = SWAP32(_V);												\
	writel(_Val, (void *)((_A)->CSRBaseAddress + (_R)));			\
    }                                                                   \
}
#define RTMP_IO_WRITE8(_A, _R, _V)									\
{																	\
	UINT	Val;													\
	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0));		\
	writeb((_V), (PUCHAR)((_A)->CSRBaseAddress + (_R)));			\
}
#define RTMP_IO_WRITE16(_A, _R, _V)									\
{																	\
	UINT	Val;													\
	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0));		\
	writew(SWAP16((_V)), (PUSHORT)((_A)->CSRBaseAddress + (_R)));	\
}
#else
//Patch for ASIC turst read/write bug, needs to remove after metel fix
#define RTMP_IO_READ32(_A, _R, _pV)								\
{																\

	writel(_V, (void *)((_A)->CSRBaseAddress + (_R)));								\
    }                                                               \
}
#if defined(BRCM_6358)
#define RTMP_IO_WRITE8(_A, _R, _V)            \
{                    \
	ULONG Val;                \
	UCHAR _i;                \
	_i = (_R & 0x3);             \
	Val = readl((void *)((_A)->CSRBaseAddress + (_R - _i)));   \
	Val = Val & (~(0x000000ff << ((_i)*8)));         \
	Val = Val | ((ULONG)_V << ((_i)*8));         \
	writel((Val), (void *)((_A)->CSRBaseAddress + (_R - _i)));    \
}
#else
#define RTMP_IO_WRITE8(_A, _R, _V)												\
{																				\
	UINT	Val;																\
	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0));			\
	writeb((_V), (PUCHAR)((_A)->CSRBaseAddress + (_R)));		\
}
#endif
#define RTMP_IO_WRITE16(_A, _R, _V)												\
{																				\
	UINT	Val;																\
	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0));			\
	writew((_V), (PUSHORT)((_A)->CSRBaseAddress + (_R)));	\
}
#endif
#endif /* RT2860 */
#ifdef RT2870
//Patch for ASIC turst read/write bug, needs to remove after metel fix





extern	const struct iw_handler_def rt28xx_iw_handler_def;

#if WIRELESS_EXT >= 12
// This function will be called when query /proc
struct iw_statistics *rt28xx_get_wireless_stats(
    IN struct net_device *net_dev);
#endif

struct net_device_stats *RT28xx_get_ether_stats(
    IN  struct net_device *net_dev);

	BOOLEAN 		Cancelled = FALSE;
	UINT32			i = 0;
#ifdef RT2870
	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(unlink_wakeup);
	DECLARE_WAITQUEUE(wait, current);

	//RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_REMOVE_IN_PROGRESS);

	NICInitRT30xxRFRegisters(pAd);
#endif // RT2870 //

#ifdef IKANOS_VX_1X0
	VR_IKANOS_FP_Init(pAd->ApCfg.BssidNum, pAd->PermanentAddress);
#endif // IKANOS_VX_1X0 //

		//
	// Initialize RF register to default value

	AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
	AsicLockChannel(pAd, pAd->CommonCfg.Channel);

#ifndef RT2870
	// 8051 firmware require the signal during booting time.
	AsicSendCommandToMcu(pAd, 0x72, 0xFF, 0x00, 0x00);
#endif

static const struct net_device_ops rt2860_netdev_ops = {
	.ndo_open		= MainVirtualIF_open,
	.ndo_stop		= MainVirtualIF_close,
	.ndo_do_ioctl		= rt28xx_sta_ioctl,
	.ndo_get_stats		= RT28xx_get_ether_stats,
	.ndo_validate_addr	= NULL,
	.ndo_set_mac_address	= eth_mac_addr,
	.ndo_change_mtu		= eth_change_mtu,
#ifdef IKANOS_VX_1X0
	.ndo_start_xmit		= IKANOS_DataFramesTx,
#else
	.ndo_start_xmit		= rt28xx_send_packets,
#endif
};

/* Must not be called for mdev and apdev */

	CHAR    slot_name[IFNAMSIZ];
	struct net_device   *device;

#if WIRELESS_EXT >= 12
	if (pAd->OpMode == OPMODE_STA)
	{
		dev->wireless_handlers = &rt28xx_iw_handler_def;
	}
#endif //WIRELESS_EXT >= 12

#if WIRELESS_EXT < 21
		dev->get_wireless_stats = rt28xx_get_wireless_stats;
#endif
	dev->priv_flags = INT_MAIN;
	dev->netdev_ops = &rt2860_netdev_ops;
	// find available device name
	for (i = 0; i < 8; i++)
	{
		sprintf(slot_name, "wlan%d", i);

		device = dev_get_by_name(dev_net(dev), slot_name);
		if (device != NULL)

	}
	else
	{
		sprintf(dev->name, "wlan%d", i);
		Status = NDIS_STATUS_SUCCESS;
	}



	// Allocate RTMP_ADAPTER miniport adapter structure
	handle = kmalloc(sizeof(struct os_cookie), GFP_KERNEL);
	if (handle == NULL)
		goto err_out_free_netdev;;
	RT28XX_HANDLE_DEV_ASSIGN(handle, dev_p);

	status = RTMPAllocAdapterBlock(handle, &pAd);

} /* End of CfgInitHook */


#if WIRELESS_EXT >= 12
// This function will be called when query /proc
struct iw_statistics *rt28xx_get_wireless_stats(
    IN struct net_device *net_dev)

	DBGPRINT(RT_DEBUG_TRACE, ("<--- rt28xx_get_wireless_stats\n"));
	return &pAd->iw_stats;
} /* End of rt28xx_get_wireless_stats */
#endif // WIRELESS_EXT //





}

INT rt28xx_ioctl(
	IN	struct net_device	*net_dev,
	IN	OUT	struct ifreq	*rq,
	IN	INT					cmd)
{
	VIRTUAL_ADAPTER	*pVirtualAd = NULL;
	RTMP_ADAPTER	*pAd = NULL;
	INT				ret = 0;

	if (net_dev->priv_flags == INT_MAIN)
	{
		pAd = net_dev->ml_priv;
	}
	else
	{
		pVirtualAd = net_dev->ml_priv;
		pAd = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAd == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}

	ret = rt28xx_sta_ioctl(net_dev, rq, cmd);

	return ret;
}

/*
    ========================================================================





				CipherAlg = CIPHER_WEP128;
			pAd->SharedKey[i][idx].CipherAlg = CipherAlg;

			DBGPRINT(RT_DEBUG_TRACE, ("I/F(wlan%d) Key%dStr=%s and type=%s\n", i, idx+1, keybuff, (KeyType == 0) ? "Hex":"Ascii"));
			return 1;
		}
		else

				CipherAlg = CIPHER_WEP128;
			pAd->SharedKey[i][idx].CipherAlg = CipherAlg;

			DBGPRINT(RT_DEBUG_TRACE, ("I/F(wlan%d) Key%dStr=%s and type=%s\n", i, idx+1, keybuff, (KeyType == 0) ? "Hex":"Ascii"));
			return 1;
		}
		else
		{//Invalid key length
			DBGPRINT(RT_DEBUG_ERROR, ("I/F(wlan%d) Key%dStr is Invalid key length! KeyLen = %ld!\n", i, idx+1, KeyLen));
			return 0;
		}
	}

{
	PUCHAR					src = NULL;
	struct file				*srcf;
	INT 					retval;
   	mm_segment_t			orgfs;
	CHAR					*buffer;
	CHAR					*tmpbuf;


	src = STA_PROFILE_PATH;

	// Save uid and gid used for filesystem access.
	// Set user and group to 0 (root)
#ifndef RT30xx
	orgfsuid = current_fsuid();
	orgfsgid = current_fsgid();
	/* Hm, can't really do this nicely anymore, so rely on these files
	 * being set to the proper permission to read them... */
	/* current->cred->fsuid = current->cred->fsgid = 0; */
#endif
    orgfs = get_fs();
    set_fs(KERNEL_DS);


					//WirelessEvent
					if(RTMPGetKeyParameter("WirelessEvent", tmpbuf, 10, buffer))
					{
#if WIRELESS_EXT >= 15
					    if(simple_strtol(tmpbuf, 0, 10) != 0)
							pAd->CommonCfg.bWirelessEvent = simple_strtol(tmpbuf, 0, 10);
						else
							pAd->CommonCfg.bWirelessEvent = 0;	// disable
#else
						pAd->CommonCfg.bWirelessEvent = 0;	// disable
#endif
   						DBGPRINT(RT_DEBUG_TRACE, ("WirelessEvent=%d\n", pAd->CommonCfg.bWirelessEvent));
					}
					if(RTMPGetKeyParameter("WiFiTest", tmpbuf, 10, buffer))

								DBGPRINT(RT_DEBUG_TRACE, ("TGnWifiTest=%d\n", pAd->StaCfg.bTGnWifiTest));
						}
					}

#ifdef RT30xx
						{
							if(RTMPGetKeyParameter("AntDiversity", tmpbuf, 10, buffer))
							{
								for (i = 0, macptr = rstrtok(tmpbuf,";"); macptr; macptr = rstrtok(NULL,";"), i++)
								{
									if(simple_strtol(macptr, 0, 10) != 0)  //Enable
										pAd->CommonCfg.bRxAntDiversity = TRUE;
									else //Disable
										pAd->CommonCfg.bRxAntDiversity = FALSE;

									DBGPRINT(RT_DEBUG_ERROR, ("AntDiversity=%d\n", pAd->CommonCfg.bRxAntDiversity));
								}
							}
						}
#endif // RT30xx //
				}
			}
			else

        if (Value == 0)
        {
            pAd->CommonCfg.BACapability.field.AutoBA = FALSE;
#ifdef RT30xx
	    pAd->CommonCfg.BACapability.field.Policy = BA_NOTUSE;
#endif
        }
        else
        {
            pAd->CommonCfg.BACapability.field.AutoBA = TRUE;
#ifdef RT30xx
	    pAd->CommonCfg.BACapability.field.Policy = IMMED_BA;
#endif
        }
        pAd->CommonCfg.REGBACapability.field.AutoBA = pAd->CommonCfg.BACapability.field.AutoBA;
#ifdef RT30xx
	pAd->CommonCfg.REGBACapability.field.Policy = pAd->CommonCfg.BACapability.field.Policy;
#endif
        DBGPRINT(RT_DEBUG_TRACE, ("HT: Auto BA  = %s\n", (Value==0) ? "Disable" : "Enable"));
    }





#ifndef __RTMP_H__
#define __RTMP_H__

#include "link_list.h"
#include "spectrum_def.h"

#include "aironet.h"

//#define DBG_DIAGNOSE		1

#define VIRTUAL_IF_INC(__pAd) ((__pAd)->VirtualIfCnt++)
#define VIRTUAL_IF_DEC(__pAd) ((__pAd)->VirtualIfCnt--)
#define VIRTUAL_IF_NUM(__pAd) ((__pAd)->VirtualIfCnt)

extern UCHAR  Wpa2Ie;
extern UCHAR  IbssIe;
extern UCHAR  Ccx2Ie;
#ifdef RT30xx
extern UCHAR  WapiIe;
#endif

extern UCHAR  WPA_OUI[];
extern UCHAR  RSN_OUI[];
#ifdef RT30xx
extern UCHAR  WAPI_OUI[];
#endif
extern UCHAR  WME_INFO_ELEM[];
extern UCHAR  WME_PARM_ELEM[];
extern UCHAR  Ccx2QosInfo[];

    (_idx) = (_idx+1) % (_RingSize);       \
}

#ifdef RT2870
// We will have a cost down version which mac version is 0x3090xxxx
#define IS_RT3090(_pAd)				((((_pAd)->MACVersion & 0xffff0000) == 0x30710000) || (((_pAd)->MACVersion & 0xffff0000) == 0x30900000))
#else
#define IS_RT3090(_pAd)				0
#endif
#define IS_RT3070(_pAd)				(((_pAd)->MACVersion & 0xffff0000) == 0x30700000)
#ifdef RT2870
#define IS_RT3071(_pAd)				(((_pAd)->MACVersion & 0xffff0000) == 0x30710000)
#define IS_RT2070(_pAd)				(((_pAd)->RfIcType == RFIC_2020) || ((_pAd)->EFuseTag == 0x27))

#define IS_RT30xx(_pAd)				(((_pAd)->MACVersion & 0xfff00000) == 0x30700000)
#endif


#define BBP_IO_READ8_BY_REG_ID(_A, _I, _pV)   		RTUSBReadBBPRegister(_A, _I, _pV)
#endif // RT2870 //

#ifdef RT30xx
#define RTMP_RF_IO_READ8_BY_REG_ID(_A, _I, _pV)    RT30xxReadRFRegister(_A, _I, _pV)
#define RTMP_RF_IO_WRITE8_BY_REG_ID(_A, _I, _V)    RT30xxWriteRFRegister(_A, _I, _V)
#endif // RT30xx //

#define     MAP_CHANNEL_ID_TO_KHZ(ch, khz)  {               \
                switch (ch)                                 \
                {                                           \

}
#endif // RT2870 //

#ifdef RT30xx
//Need to collect each ant's rssi concurrently
//rssi1 is report to pair2 Ant and rss2 is reprot to pair1 Ant when 4 Ant
#define COLLECT_RX_ANTENNA_AVERAGE_RSSI(_pAd, _rssi1, _rssi2)					\

		_pAd->RxAnt.RcvPktNumWhenEvaluate++;								\
	}																		\
}
#endif // RT30xx //


#define NDIS_QUERY_BUFFER(_NdisBuf, _ppVA, _pBufLen)                    \
    NdisQueryBuffer(_NdisBuf, _ppVA, _pBufLen)


typedef struct _SOFT_RX_ANT_DIVERSITY_STRUCT {
	UCHAR     EvaluatePeriod;		 // 0:not evalute status, 1: evaluate status, 2: switching status
#ifdef RT2870
	UCHAR     EvaluateStableCnt;
#endif
	UCHAR     Pair1PrimaryRxAnt;     // 0:Ant-E1, 1:Ant-E2


	BOOLEAN				NdisRadioStateOff; //For HCT 12.0, set this flag to TRUE instead of called MlmeRadioOff.
	ABGBAND_STATE		BandState;		// For setting BBP used on B/G or A mode.
#ifdef RT30xx
	BOOLEAN				bRxAntDiversity; // 0:disable, 1:enable Software Rx Antenna Diversity.
#endif

	// IEEE802.11H--DFS.
	RADAR_DETECT_STRUCT	RadarDetect;

    BOOLEAN		AdhocBGJoined;		// Indicate Adhoc B/G Join.
    BOOLEAN		Adhoc20NJoined;		// Indicate Adhoc 20MHz N Join.
#endif
	// New for WPA, windows want us to keep association information and
	// Fixed IEs from last association response
	NDIS_802_11_ASSOCIATION_INFORMATION     AssocInfo;
	USHORT       ReqVarIELen;                // Length of next VIE include EID & Length


}INF_USB_CONFIG;

#ifdef IKANOS_VX_1X0
	typedef void (*IkanosWlanTxCbFuncP)(void *, void *);

	struct IKANOS_TX_INFO
	{
		struct net_device *netdev;
		IkanosWlanTxCbFuncP *fp;
	};
#endif // IKANOS_VX_1X0 //

#ifdef DBG_DIAGNOSE
#define DIAGNOSE_TIME	10   // 10 sec
typedef struct _RtmpDiagStrcut_
{	// Diagnosis Related element
	unsigned char		inited;
	unsigned char 	qIdx;
	unsigned char 	ArrayStartIdx;
	unsigned char		ArrayCurIdx;
	// Tx Related Count
	USHORT			TxDataCnt[DIAGNOSE_TIME];
	USHORT			TxFailCnt[DIAGNOSE_TIME];
	USHORT			TxDescCnt[DIAGNOSE_TIME][24]; // 3*3	// TxDesc queue length in scale of 0~14, >=15
	USHORT			TxMcsCnt[DIAGNOSE_TIME][24]; // 3*3
	USHORT			TxSWQueCnt[DIAGNOSE_TIME][9];		// TxSwQueue length in scale of 0, 1, 2, 3, 4, 5, 6, 7, >=8

	USHORT			TxAggCnt[DIAGNOSE_TIME];
	USHORT			TxNonAggCnt[DIAGNOSE_TIME];
	USHORT			TxAMPDUCnt[DIAGNOSE_TIME][24]; // 3*3 // 10 sec, TxDMA APMDU Aggregation count in range from 0 to 15, in setp of 1.
	USHORT			TxRalinkCnt[DIAGNOSE_TIME];			// TxRalink Aggregation Count in 1 sec scale.
	USHORT			TxAMSDUCnt[DIAGNOSE_TIME];			// TxAMSUD Aggregation Count in 1 sec scale.

	// Rx Related Count
	USHORT			RxDataCnt[DIAGNOSE_TIME];			// Rx Total Data count.
	USHORT			RxCrcErrCnt[DIAGNOSE_TIME];
	USHORT			RxMcsCnt[DIAGNOSE_TIME][24]; // 3*3
}RtmpDiagStruct;
#endif // DBG_DIAGNOSE //


//

	ULONG                   EepromVersion;          // byte 0: version, byte 1: revision, byte 2~3: unused
	UCHAR                   EEPROMAddressNum;       // 93c46=6  93c66=8
	USHORT                  EEPROMDefaultValue[NUM_EEPROM_BBP_PARMS];
#ifdef RT2870
	BOOLEAN                 EepromAccess;
	UCHAR                   EFuseTag;
#endif
	ULONG                   FirmwareVersion;        // byte 0: Minor version, byte 1: Major version, otherwise unused.



	ULONG					OneSecondnonBEpackets;		// record non BE packets per second

#if WIRELESS_EXT >= 12
    struct iw_statistics    iw_stats;
#endif

	struct net_device_stats	stats;


	UCHAR					flg_be_adjust;
	ULONG					be_adjust_last_time;

#ifdef IKANOS_VX_1X0
	struct IKANOS_TX_INFO	IkanosTxInfo;
	struct IKANOS_TX_INFO	IkanosRxInfo[MAX_MBSSID_NUM + MAX_WDS_ENTRY + MAX_APCLI_NUM + MAX_MESH_NUM];
#endif // IKANOS_VX_1X0 //


#ifdef DBG_DIAGNOSE
	RtmpDiagStruct	DiagStruct;
#endif // DBG_DIAGNOSE //


	UINT8					PM_FlgSuspend;

#ifdef RT2870
//======efuse
	BOOLEAN		bUseEfuse;
#endif
#endif // RT30xx //

} RTMP_ADAPTER, *PRTMP_ADAPTER;

//

}
#endif /* RT2860 */

BOOLEAN RTMPCheckForHang(
	IN  NDIS_HANDLE MiniportAdapterContext
	);

VOID  RTMPHalt(
	IN  NDIS_HANDLE MiniportAdapterContext
	);

//
//  Private routines in rtmp_init.c
//

	IN  PRTMP_ADAPTER   pAd
	);

NDIS_STATUS RTMPFindAdapter(
	IN  PRTMP_ADAPTER   pAd,
	IN  NDIS_HANDLE     WrapperConfigurationContext
	);

NDIS_STATUS	RTMPReadParametersHook(
	IN	PRTMP_ADAPTER pAd
	);

	IN  PRTMP_ADAPTER   pAd,
	IN  UCHAR           RingType);

VOID RxTest(
	IN  PRTMP_ADAPTER   pAd);

NDIS_STATUS DbgSendPacket(
	IN  PRTMP_ADAPTER   pAd,
	IN  PNDIS_PACKET    pPacket);

VOID UserCfgInit(
	IN  PRTMP_ADAPTER   pAd);


VOID RTMPPatchMacBbpBug(
	IN  PRTMP_ADAPTER   pAd);

VOID RTMPPatchCardBus(
	IN	PRTMP_ADAPTER	pAdapter);

VOID RTMPPatchRalinkCardBus(
	IN	PRTMP_ADAPTER	pAdapter,
	IN	ULONG			Bus);

ULONG RTMPReadCBConfig(
	IN	ULONG	Bus,
	IN	ULONG	Slot,
	IN	ULONG	Func,
	IN	ULONG	Offset);

VOID RTMPWriteCBConfig(
	IN	ULONG	Bus,
	IN	ULONG	Slot,
	IN	ULONG	Func,
	IN	ULONG	Offset,
	IN	ULONG	Value);

VOID RTMPInitTimer(
	IN  PRTMP_ADAPTER           pAd,
	IN  PRALINK_TIMER_STRUCT    pTimer,

	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID StaPublicAction(
	IN PRTMP_ADAPTER pAd,
	IN UCHAR Bss2040Coexist);

VOID PeerBSSTranAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID PeerHTAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

	IN UINT8 Category,
	IN UINT8 ActCode);

BOOLEAN QosBADataParse(
	IN PRTMP_ADAPTER	pAd,
	IN BOOLEAN bAMSDU,
	IN PUCHAR p8023Header,
	IN UCHAR	WCID,
	IN UCHAR	TID,
	IN USHORT Sequence,
	IN UCHAR DataOffset,
	IN USHORT Datasize,
	IN UINT   CurRxIndex);

BOOLEAN CntlEnqueueForRecv(
    IN	PRTMP_ADAPTER	pAd,
	IN ULONG Wcid,
    IN ULONG MsgLen,
	IN PFRAME_BA_REQ pMsg);

VOID BaAutoManSwitch(
	IN	PRTMP_ADAPTER	pAd);

VOID HTIOTCheck(
	IN	PRTMP_ADAPTER	pAd,
	IN    UCHAR     BatRecIdx);

//
// Private routines in rtmp_data.c
//
BOOLEAN RTMPHandleRxDoneInterrupt(
	IN  PRTMP_ADAPTER   pAd);

VOID RTMPHandleTxDoneInterrupt(
	IN  PRTMP_ADAPTER   pAd);

BOOLEAN RTMPHandleTxRingDmaDoneInterrupt(
	IN  PRTMP_ADAPTER   pAd,
	IN  INT_SOURCE_CSR_STRUC TxRingBitmap);

	IN	UCHAR			QueIdx,
	IN	PUCHAR			pData,
	IN  UINT            Length);

NDIS_STATUS MiniportDataMMRequest(
	 IN  PRTMP_ADAPTER   pAd,
	 IN  UCHAR           QueIdx,
	 IN  PUCHAR          pData,
	 IN  UINT            Length);
#endif
VOID RTMPSendNullFrame(
	IN  PRTMP_ADAPTER   pAd,
	IN  UCHAR           TxRate,

	IN  UCHAR           QueIdx,
	IN  UCHAR			FrameGap);


NDIS_STATUS RTMPApplyPacketFilter(
	IN  PRTMP_ADAPTER   pAd,
	IN  PRT28XX_RXD_STRUC      pRxD,
	IN  PHEADER_802_11  pHeader);

PQUEUE_HEADER   RTMPCheckTxSwQueue(
	IN  PRTMP_ADAPTER   pAd,
	OUT UCHAR           *QueIdx);

	IN	PNDIS_PACKET	pPacket);


VOID RTMPCckBbpTuning(
	IN	PRTMP_ADAPTER	pAd,
	IN	UINT			TxRate);

//
// Private routines in rtmp_wep.c
//

	IN  PUCHAR          pDest,
	IN  UINT            Len);

BOOLEAN	RTMPDecryptData(
	IN	PRTMP_ADAPTER	pAdapter,
	IN	PUCHAR			pSrc,
	IN	UINT			Len,
	IN	UINT			idx);

BOOLEAN	RTMPSoftDecryptWEP(
	IN PRTMP_ADAPTER 	pAd,
	IN PUCHAR			pData,

	IN PRTMP_ADAPTER pAd,
	IN UCHAR Channel) ;

VOID AsicAntennaSelect(
	IN  PRTMP_ADAPTER   pAd,
	IN  UCHAR           Channel);

VOID AsicAntennaSetting(
	IN	PRTMP_ADAPTER	pAd,
	IN	ABGBAND_STATE	BandState);

VOID AsicRfTuningExec(
	IN PVOID SystemSpecific1,
	IN PVOID FunctionContext,

	IN OUT	PRTMP_ADAPTER pAd,
	IN		BA_ORI_ENTRY	*pBAORIEntry);

VOID BATableDeleteRECEntry(
	IN OUT	PRTMP_ADAPTER pAd,
	IN		BA_REC_ENTRY	*pBARECEntry);

VOID BATableTearORIEntry(
	IN OUT	PRTMP_ADAPTER pAd,
	IN		UCHAR TID,
	IN		UCHAR Wcid,
	IN		BOOLEAN bForceDelete,
	IN		BOOLEAN ALL);

VOID BATableTearRECEntry(
	IN OUT	PRTMP_ADAPTER pAd,
	IN		UCHAR TID,
	IN		UCHAR WCID,
	IN		BOOLEAN ALL);

VOID  BssEntrySet(
	IN  PRTMP_ADAPTER   pAd,
	OUT PBSS_ENTRY pBss,

	IN PVOID SystemSpecific3);

//----------------------------------------------
VOID MlmeDisassocReqAction(
	IN  PRTMP_ADAPTER   pAd,
	IN  MLME_QUEUE_ELEM *Elem);

VOID MlmeAssocReqAction(
	IN  PRTMP_ADAPTER   pAd,
	IN  MLME_QUEUE_ELEM *Elem);

	IN PVOID SystemSpecific2,
	IN PVOID SystemSpecific3);

VOID MlmeScanReqAction(
	IN  PRTMP_ADAPTER   pAd,
	IN  MLME_QUEUE_ELEM *Elem);

VOID InvalidStateWhenScan(
	IN  PRTMP_ADAPTER   pAd,
	IN  MLME_QUEUE_ELEM *Elem);

	IN  PRTMP_ADAPTER   pAd,
	IN  MLME_QUEUE_ELEM *Elem);

VOID PeerBeacon(
	IN  PRTMP_ADAPTER   pAd,
	IN  MLME_QUEUE_ELEM *Elem);

VOID EnqueueProbeRequest(
	IN PRTMP_ADAPTER pAd);


	OUT PUCHAR pAddr2,
	OUT USHORT *Reason);

BOOLEAN PeerWpaMessageSanity(
    IN 	PRTMP_ADAPTER 		pAd,
    IN 	PEAPOL_PACKET 		pMsg,
    IN 	ULONG 				MsgLen,
    IN 	UCHAR				MsgType,
    IN 	MAC_TABLE_ENTRY  	*pEntry);

BOOLEAN PeerDeauthSanity(
	IN  PRTMP_ADAPTER   pAd,
	IN  VOID *Msg,

	IN PVOID SystemSpecific2,
	IN PVOID SystemSpecific3);

VOID LinkUpExec(
	IN PVOID SystemSpecific1,
	IN PVOID FunctionContext,
	IN PVOID SystemSpecific2,
	IN PVOID SystemSpecific3);

VOID STAMlmePeriodicExec(
	PRTMP_ADAPTER pAd);


	IN PVOID SystemSpecific2,
	IN PVOID SystemSpecific3);

VOID AsicBbpTuning1(
	IN PRTMP_ADAPTER pAd);

VOID AsicBbpTuning2(
	IN PRTMP_ADAPTER pAd);

VOID RTMPUpdateMlmeRate(
	IN PRTMP_ADAPTER	pAd);


	IN CHAR				Rssi1,
	IN CHAR				Rssi2);

#ifdef RT30xx
VOID AsicSetRxAnt(
	IN PRTMP_ADAPTER	pAd,
	IN UCHAR			Ant);
#endif

VOID AsicEvaluateRxAnt(
	IN PRTMP_ADAPTER	pAd);

	IN PRTMP_ADAPTER pAd,
	IN UCHAR         AironetCellPowerLimit);

VOID RaiseClock(
	IN  PRTMP_ADAPTER   pAd,
	IN  UINT32 *x);

VOID LowerClock(
	IN  PRTMP_ADAPTER   pAd,
	IN  UINT32 *x);

USHORT ShiftInBits(
	IN  PRTMP_ADAPTER   pAd);

VOID ShiftOutBits(
	IN  PRTMP_ADAPTER   pAd,
	IN  USHORT data,
	IN  USHORT count);

VOID EEpromCleanup(
	IN  PRTMP_ADAPTER   pAd);

VOID EWDS(
	IN  PRTMP_ADAPTER   pAd);

VOID EWEN(
	IN  PRTMP_ADAPTER   pAd);

USHORT RTMP_EEPROM_READ16(
	IN  PRTMP_ADAPTER   pAd,
	IN  USHORT Offset);

	IN PRTMP_ADAPTER pAd,
	IN struct iwreq *wrq);

VOID RTMPIndicateWPA2Status(
	IN  PRTMP_ADAPTER  pAdapter);

VOID	RTMPOPModeSwitching(
	IN	PRTMP_ADAPTER	pAd);

VOID    RTMPAddBSSIDCipher(
    IN  PRTMP_ADAPTER   pAd,
	IN	UCHAR	Aid,

	IN  UCHAR			BssIdx,
	IN	CHAR			Rssi);

VOID	NICUpdateCntlCounters(
	IN	PRTMP_ADAPTER	pAd,
	IN	PHEADER_802_11	pHeader,
	IN    UCHAR			SubType,
	IN	PRXWI_STRUC 	pRxWI);
//
// prototype in wpa.c
//

VOID    AironetCreateBeaconReportFromBssTable(
	IN  PRTMP_ADAPTER       pAd);

VOID    DBGPRINT_TX_RING(
	IN PRTMP_ADAPTER  pAd,
	IN UCHAR          QueIdx);

VOID DBGPRINT_RX_RING(
	IN PRTMP_ADAPTER  pAd);

CHAR    ConvertToRssi(
	IN PRTMP_ADAPTER  pAd,
	IN CHAR				Rssi,
	IN UCHAR    RssiNumber);

VOID APAsicEvaluateRxAnt(
	IN PRTMP_ADAPTER	pAd);


VOID APAsicRxAntEvalTimeout(
	IN PRTMP_ADAPTER	pAd);

//
// function prototype in cmm_wpa.c
//

	IN	UCHAR	c_len,
	IN  UCHAR   *ciphertext);

BOOLEAN RTMPCheckRSNIE(
	IN  PRTMP_ADAPTER   pAd,
	IN  PUCHAR          pData,
	IN  UCHAR           DataLen,
	IN  MAC_TABLE_ENTRY *pEntry,
	OUT	UCHAR			*Offset);

BOOLEAN RTMPParseEapolKeyData(
	IN  PRTMP_ADAPTER   pAd,
	IN  PUCHAR          pKeyData,
	IN  UCHAR           KeyDataLen,
	IN	UCHAR			GroupKeyIndex,
	IN	UCHAR			MsgType,
	IN	BOOLEAN			bWPA2,
	IN  MAC_TABLE_ENTRY *pEntry);

VOID	ConstructEapolMsg(
	IN 	PRTMP_ADAPTER    	pAd,
    IN 	UCHAR				PeerAuthMode,
    IN 	UCHAR				PeerWepStatus,
    IN 	UCHAR				MyGroupKeyWepStatus,
    IN 	UCHAR				MsgType,
    IN	UCHAR				DefaultKeyIdx,
    IN 	UCHAR				*ReplayCounter,
	IN 	UCHAR				*KeyNonce,
	IN	UCHAR				*TxRSC,
	IN	UCHAR				*PTK,
	IN	UCHAR				*GTK,
	IN	UCHAR				*RSNIE,
	IN	UCHAR				RSNIE_Len,
    OUT PEAPOL_PACKET       pMsg);

VOID	CalculateMIC(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			PeerWepStatus,
	IN	UCHAR			*PTK,
	OUT PEAPOL_PACKET   pMsg);

NDIS_STATUS	RTMPSoftDecryptBroadCastData(
	IN	PRTMP_ADAPTER					pAd,
	IN	RX_BLK							*pRxBlk,
	IN  NDIS_802_11_ENCRYPTION_STATUS 	GroupCipher,
	IN  PCIPHER_KEY						pShard_key);

VOID	ConstructEapolKeyData(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			PeerAuthMode,
	IN	UCHAR			PeerWepStatus,
	IN	UCHAR			GroupKeyWepStatus,
	IN 	UCHAR			MsgType,
	IN	UCHAR			DefaultKeyIdx,
	IN	BOOLEAN			bWPA2Capable,
	IN	UCHAR			*PTK,
	IN	UCHAR			*GTK,
	IN	UCHAR			*RSNIE,
	IN	UCHAR			RSNIE_LEN,
	OUT PEAPOL_PACKET   pMsg);

VOID RTMPMakeRSNIE(
	IN  PRTMP_ADAPTER   pAd,
	IN  UINT            AuthMode,

// function prototype in ap_wpa.c
//

BOOLEAN APWpaMsgTypeSubst(
	IN UCHAR    EAPType,
	OUT INT *MsgType) ;

MAC_TABLE_ENTRY *PACInquiry(
	IN  PRTMP_ADAPTER   pAd,
	IN  ULONG           Wcid);

BOOLEAN RTMPCheckMcast(
	IN PRTMP_ADAPTER pAd,
	IN PEID_STRUCT      eid_ptr,
	IN MAC_TABLE_ENTRY  *pEntry);

BOOLEAN RTMPCheckUcast(
	IN PRTMP_ADAPTER pAd,
	IN PEID_STRUCT      eid_ptr,
	IN MAC_TABLE_ENTRY  *pEntry);

BOOLEAN RTMPCheckAUTH(
	IN PRTMP_ADAPTER pAd,
	IN PEID_STRUCT      eid_ptr,
	IN MAC_TABLE_ENTRY  *pEntry);

VOID WPAStart4WayHS(
	IN  PRTMP_ADAPTER   pAd,
	IN  MAC_TABLE_ENTRY *pEntry,
	IN	ULONG			TimeInterval);

VOID WPAStart2WayGroupHS(
	IN  PRTMP_ADAPTER   pAd,
	IN  MAC_TABLE_ENTRY *pEntry);

VOID APWpaEAPPacketAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID APWpaEAPOLStartAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID APWpaEAPOLLogoffAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID APWpaEAPOLKeyAction(
	IN PRTMP_ADAPTER pAd,
	IN MLME_QUEUE_ELEM *Elem);

VOID APWpaEAPOLASFAlertAction(
	IN  PRTMP_ADAPTER    pAd,
	IN  MLME_QUEUE_ELEM  *Elem);

VOID HandleCounterMeasure(
	IN PRTMP_ADAPTER pAd,
	IN MAC_TABLE_ENTRY  *pEntry);

VOID PeerPairMsg2Action(
	IN PRTMP_ADAPTER pAd,
	IN MAC_TABLE_ENTRY  *pEntry,
	IN MLME_QUEUE_ELEM *Elem);

VOID PeerPairMsg4Action(
	IN PRTMP_ADAPTER pAd,
	IN MAC_TABLE_ENTRY  *pEntry,
	IN MLME_QUEUE_ELEM *Elem);

VOID CMTimerExec(
	IN PVOID SystemSpecific1,
	IN PVOID FunctionContext,
	IN PVOID SystemSpecific2,
	IN PVOID SystemSpecific3);

VOID WPARetryExec(
	IN PVOID SystemSpecific1,
	IN PVOID FunctionContext,
	IN PVOID SystemSpecific2,
	IN PVOID SystemSpecific3);

VOID EnqueueStartForPSKExec(
    IN PVOID SystemSpecific1,
    IN PVOID FunctionContext,
    IN PVOID SystemSpecific2,
    IN PVOID SystemSpecific3);

VOID RTMPHandleSTAKey(
    IN PRTMP_ADAPTER    pAdapter,
    IN MAC_TABLE_ENTRY  *pEntry,
    IN MLME_QUEUE_ELEM  *Elem);

VOID PeerGroupMsg2Action(
	IN  PRTMP_ADAPTER    pAd,
	IN  PMAC_TABLE_ENTRY pEntry,
	IN  VOID             *Msg,
	IN  UINT             MsgLen);

VOID PairDisAssocAction(
	IN  PRTMP_ADAPTER    pAd,
	IN  PMAC_TABLE_ENTRY pEntry,
	IN  USHORT           Reason);

VOID MlmeDeAuthAction(
	IN  PRTMP_ADAPTER    pAd,
	IN  PMAC_TABLE_ENTRY pEntry,
	IN  USHORT           Reason);

VOID GREKEYPeriodicExec(
	IN  PVOID   SystemSpecific1,
	IN  PVOID   FunctionContext,
	IN  PVOID   SystemSpecific2,
	IN  PVOID   SystemSpecific3);

VOID CountGTK(
	IN  UCHAR   *PMK,
	IN  UCHAR   *GNonce,
	IN  UCHAR   *AA,
	OUT UCHAR   *output,
	IN  UINT    len);

VOID    GetSmall(
	IN  PVOID   pSrc1,
	IN  PVOID   pSrc2,
	OUT PUCHAR  out,
	IN  ULONG   Length);

VOID    GetLarge(
	IN  PVOID   pSrc1,
	IN  PVOID   pSrc2,
	OUT PUCHAR  out,
	IN  ULONG   Length);

VOID APGenRandom(
	IN PRTMP_ADAPTER pAd,
	OUT UCHAR       *random);

VOID AES_GTK_KEY_WRAP(
	IN UCHAR *key,
	IN UCHAR *plaintext,
	IN UCHAR p_len,
	OUT UCHAR *ciphertext);

VOID    WpaSend(
    IN  PRTMP_ADAPTER   pAdapter,
    IN  PUCHAR          pPacket,
    IN  ULONG           Len);

VOID    APToWirelessSta(
	IN  PRTMP_ADAPTER   pAd,
	IN  MAC_TABLE_ENTRY *pEntry,
	IN  PUCHAR          pHeader802_3,
	IN  UINT            HdrLen,
	IN  PUCHAR          pData,
	IN  UINT            DataLen,
    IN	BOOLEAN			bClearFrame);

VOID RTMPAddPMKIDCache(
	IN  PRTMP_ADAPTER   		pAd,
	IN	INT						apidx,
	IN	PUCHAR				pAddr,
	IN	UCHAR					*PMKID,
	IN	UCHAR					*PMK);

INT RTMPSearchPMKIDCache(
	IN  PRTMP_ADAPTER   pAd,
	IN	INT				apidx,
	IN	PUCHAR		pAddr);

VOID RTMPDeletePMKIDCache(
	IN  PRTMP_ADAPTER   pAd,
	IN	INT				apidx,
	IN  INT				idx);

VOID RTMPMaintainPMKIDCache(
	IN  PRTMP_ADAPTER   pAd);

VOID	RTMPSendTriggerFrame(
	IN	PRTMP_ADAPTER	pAd,
	IN	PVOID			pBuffer,
	IN	ULONG			Length,
	IN  UCHAR           TxRate,
	IN	BOOLEAN			bQosNull);

#ifdef RT30xx
VOID RTMPFilterCalibration(
	IN PRTMP_ADAPTER pAd);
#endif // RT30xx //

/* timeout -- ms */
VOID RTMP_SetPeriodicTimer(
	IN	NDIS_MINIPORT_TIMER *pTimer,

	IN	PRTMP_ADAPTER	pAd,
	IN	PNDIS_PACKET	pPacket);


UINT Handle_AMSDU_Packet(
	IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			pData,
	IN	ULONG			DataSize,
	IN  UCHAR			FromWhichBSSID);


void convert_802_11_to_802_3_packet(
	IN	PRTMP_ADAPTER	pAd,
	IN	PNDIS_PACKET	pPacket,
	IN	PUCHAR			p8023hdr,
	IN	PUCHAR			pData,
	IN	ULONG			DataSize,
	IN  UCHAR			FromWhichBSSID);


PNET_DEV get_netdev_from_bssid(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			FromWhichBSSID);

	IN	PRTMP_ADAPTER	pAd,
	IN	PNDIS_PACKET	pOldPkt);

PNDIS_PACKET duplicate_pkt_with_VLAN(
	IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			pHeader802_3,
    IN  UINT            HdrLen,
	IN	PUCHAR			pData,
	IN	ULONG			DataSize,
	IN	UCHAR			FromWhichBSSID);

PNDIS_PACKET duplicate_pkt_with_WPI(
	IN	PRTMP_ADAPTER	pAd,
	IN	PNDIS_PACKET	pPacket,
	IN	UINT32			ext_head_len,
	IN	UINT32			ext_tail_len);

UCHAR VLAN_8023_Header_Copy(
	IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			pHeader802_3,
	IN	UINT            HdrLen,
	OUT PUCHAR			pData,
	IN	UCHAR			FromWhichBSSID);

void ba_flush_reordering_timeout_mpdus(
	IN PRTMP_ADAPTER	pAd,
	IN PBA_REC_ENTRY	pBAEntry,

BOOLEAN ba_reordering_resource_init(PRTMP_ADAPTER pAd, int num);
void ba_reordering_resource_release(PRTMP_ADAPTER pAd);

ULONG AutoChBssInsertEntry(
	IN PRTMP_ADAPTER pAd,
	IN PUCHAR pBssid,
	IN CHAR Ssid[],
	IN UCHAR SsidLen,
	IN UCHAR ChannelNo,
	IN CHAR Rssi);

void AutoChBssTableInit(
	IN PRTMP_ADAPTER pAd);

void ChannelInfoInit(
	IN PRTMP_ADAPTER pAd);

void AutoChBssTableDestroy(
	IN PRTMP_ADAPTER pAd);

void ChannelInfoDestroy(
	IN PRTMP_ADAPTER pAd);

UCHAR New_ApAutoSelectChannel(
	IN PRTMP_ADAPTER pAd);

BOOLEAN rtstrmactohex(
	IN char *s1,
	IN char *s2);

	IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			arg);

//Dls ,	kathy
VOID RTMPSendDLSTearDownFrame(
	IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			pDA);

//Block ACK
VOID QueryBATABLE(
	IN  PRTMP_ADAPTER pAd,
	OUT PQUERYBA_TABLE pBAT);

INT	    WpaCheckEapCode(
	IN  PRTMP_ADAPTER   	pAd,
	IN  PUCHAR				pFrame,

    IN  PRTMP_ADAPTER       pAd,
    IN  BOOLEAN             bUnicast);

VOID    SendAssocIEsToWpaSupplicant(
    IN  PRTMP_ADAPTER       pAd);

int wext_notify_event_assoc(
	IN  RTMP_ADAPTER *pAd);

VOID Handle_BSS_Width_Trigger_Events(
	IN PRTMP_ADAPTER pAd);

void build_ext_channel_switch_ie(
	IN PRTMP_ADAPTER pAd,
	IN HT_EXT_CHANNEL_SWITCH_ANNOUNCEMENT_IE *pIE);

BOOLEAN APRxDoneInterruptHandle(
	IN	PRTMP_ADAPTER	pAd);

BOOLEAN STARxDoneInterruptHandle(
	IN	PRTMP_ADAPTER	pAd,
	IN	BOOLEAN			argc);

		_pRxBlk->DataSize, _pRemovedLLCSNAP);                                   \
}

BOOLEAN APFowardWirelessStaToWirelessSta(
	IN	PRTMP_ADAPTER	pAd,
	IN	PNDIS_PACKET	pPacket,
	IN	ULONG			FromWhichBSSID);

VOID Announce_or_Forward_802_3_Packet(
	IN	PRTMP_ADAPTER	pAd,
	IN	PNDIS_PACKET	pPacket,
	IN	UCHAR			FromWhichBSSID);

VOID Sta_Announce_or_Forward_802_3_Packet(
	IN	PRTMP_ADAPTER	pAd,
	IN	PNDIS_PACKET	pPacket,

	IN RSSI_SAMPLE		*pRssi,
	IN PRXWI_STRUC		pRxWI);

PNDIS_PACKET GetPacketFromRxRing(
	IN		PRTMP_ADAPTER	pAd,
	OUT		PRT28XX_RXD_STRUC		pSaveRxD,
	OUT		BOOLEAN			*pbReschedule,
	IN OUT	UINT32			*pRxPending);

PNDIS_PACKET RTMPDeFragmentDataFrame(
	IN	PRTMP_ADAPTER	pAd,
	IN	RX_BLK			*pRxBlk);

	IN	PRTMP_ADAPTER	pAd,
	IN	RX_BLK			*pRxBlk);

#if WIRELESS_EXT >= 12
// This function will be called when query /proc
struct iw_statistics *rt28xx_get_wireless_stats(
    IN struct net_device *net_dev);
#endif

VOID    RTMPSetDesiredRates(
    IN  PRTMP_ADAPTER   pAdapter,

	IN ULONG BeaconLen,
	IN ULONG UpdatePos);

INT rt28xx_ioctl(
	IN	struct net_device	*net_dev,
	IN	OUT	struct ifreq	*rq,
	IN	INT			cmd);

INT rt28xx_sta_ioctl(
	IN	struct net_device	*net_dev,
	IN	OUT	struct ifreq	*rq,
	IN	INT			cmd);

BOOLEAN RT28XXSecurityKeyAdd(
	IN		PRTMP_ADAPTER		pAd,
	IN		ULONG				apidx,
	IN		ULONG				KeyIdx,
	IN		MAC_TABLE_ENTRY 	*pEntry);

////////////////////////////////////////
PNDIS_PACKET GetPacketFromRxRing(
	IN		PRTMP_ADAPTER	pAd,

	IN PRTMP_ADAPTER 	pAd,
	IN	UCHAR			Channel);

#ifdef RT30xx
NTSTATUS RT30xxWriteRFRegister(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			RegID,

	IN	UCHAR			RegID,
	IN	PUCHAR			pValue);

//2008/09/11:KH add to support efuse<--
UCHAR eFuseReadRegisters(
	IN	PRTMP_ADAPTER	pAd,
	IN	USHORT Offset,

	IN	USHORT Length,
	OUT	USHORT* pData);

NDIS_STATUS NICLoadEEPROM(
	IN PRTMP_ADAPTER pAd);

BOOLEAN bNeedLoadEEPROM(
	IN	PRTMP_ADAPTER	pAd);
//2008/09/11:KH add to support efuse-->
#endif // RT30xx //

#ifdef RT30xx
// add by johnli, RF power sequence setup
VOID RT30xxLoadRFNormalModeSetup(
	IN PRTMP_ADAPTER 	pAd);



VOID RT30xxReverseRFSleepModeSetup(
	IN PRTMP_ADAPTER 	pAd);
// end johnli
#endif // RT30xx //

#ifdef RT2870
//

	IN	ULONG			BulkOutSize,
	IN	usb_complete_t	Func);

VOID	RTUSBInitRxDesc(
	IN	PRTMP_ADAPTER	pAd,
	IN	PRX_CONTEXT		pRxContext);

VOID RTUSBCleanUpDataBulkOutQueue(
	IN	PRTMP_ADAPTER	pAd);


	IN	PRTMP_ADAPTER	pAd,
	IN  PRX_CONTEXT		pRxContext);

VOID RTUSBBulkRxHandle(
	IN unsigned long data);

//
// Function Prototype in rtusb_io.c
//

	IN	PRTMP_ADAPTER	pAd,
	IN	UINT32			Value);

#ifndef RT30xx
NTSTATUS	RT30xxWriteRFRegister(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			RegID,
	IN	UCHAR			Value);

NTSTATUS	RT30xxReadRFRegister(
	IN	PRTMP_ADAPTER	pAd,
	IN	UCHAR			RegID,
	IN	PUCHAR			pValue);
#endif

NTSTATUS RTUSB_VendorRequest(
	IN	PRTMP_ADAPTER	pAd,
	IN	UINT32			TransferFlags,

NTSTATUS	RTUSBVenderReset(
	IN	PRTMP_ADAPTER	pAd);

NDIS_STATUS RTUSBSetHardWareRegister(
	IN	PRTMP_ADAPTER	pAdapter,
	IN	PVOID			pBuf);

NDIS_STATUS RTUSBQueryHardWareRegister(
	IN	PRTMP_ADAPTER	pAdapter,
	IN	PVOID			pBuf);

VOID CMDHandler(
    IN PRTMP_ADAPTER pAd);


VOID AsicRxAntEvalAction(
	IN PRTMP_ADAPTER pAd);

void append_pkt(
	IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			pHeader802_3,
    IN  UINT            HdrLen,
	IN	PUCHAR			pData,
	IN	ULONG			DataSize,
	OUT  PNDIS_PACKET	*ppPacket);

UINT deaggregate_AMSDU_announce(
	IN	PRTMP_ADAPTER	pAd,
	PNDIS_PACKET		pPacket,
	IN	PUCHAR			pData,
	IN	ULONG			DataSize);

NDIS_STATUS	RTMPCheckRxError(
	IN	PRTMP_ADAPTER	pAd,
	IN	PHEADER_802_11	pHeader,
	IN	PRXWI_STRUC	pRxWI,
	IN	PRT28XX_RXD_STRUC	pRxINFO);


VOID RTUSBMlmeHardTransmit(
	IN	PRTMP_ADAPTER	pAd,
	IN	PMGMT_STRUC		pMgmt);

INT MlmeThread(
	IN PVOID Context);


	IN PRTMP_ADAPTER pAd);
#endif // RT2870 //

////////////////////////////////////////

VOID QBSS_LoadInit(
 	IN		RTMP_ADAPTER	*pAd);

UINT32 QBSS_LoadElementAppend(
 	IN		RTMP_ADAPTER	*pAd,
	OUT		UINT8			*buf_p);

VOID QBSS_LoadUpdate(
 	IN		RTMP_ADAPTER	*pAd);

///////////////////////////////////////
INT RTMPShowCfgValue(
	IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			pName,


PCHAR   RTMPGetRalinkEncryModeStr(
    IN  USHORT encryMode);
//////////////////////////////////////

VOID AsicStaBbpTuning(
	IN PRTMP_ADAPTER pAd);


__inline INT VIRTUAL_IF_UP(PRTMP_ADAPTER pAd)
{
extern VOID MeshMakeBeacon(IN PRTMP_ADAPTER pAd, IN UCHAR idx);
extern VOID MeshUpdateBeaconFrame(IN PRTMP_ADAPTER pAd, IN UCHAR idx);

	if (VIRTUAL_IF_NUM(pAd) == 0)
	{
		if (rt28xx_open(pAd->net_dev) != 0)




	UCHAR		part[4];			/* for conversion of message to u32 for mmh   */
}	MIC_CONTEXT, *PMIC_CONTEXT;

VOID	CKIP_key_permute(
	OUT	UCHAR	*PK,			/* output permuted key */
	IN	UCHAR	*CK,			/* input CKIP key */
	IN	UCHAR	toDsFromDs,		/* input toDs/FromDs bits */
	IN	UCHAR	*piv);			/* input pointer to IV */

VOID	RTMPCkipMicInit(
	IN	PMIC_CONTEXT		pContext,
	IN	PUCHAR				CK);

VOID RTMPMicUpdate(
    IN  PMIC_CONTEXT        pContext,
    IN  PUCHAR              pOctets,
    IN  INT                 len);

ULONG RTMPMicGetCoefficient(
    IN  PMIC_CONTEXT         pContext);

VOID xor_128(
    IN  PUCHAR              a,
    IN  PUCHAR              b,

    IN  PUCHAR              in,
    OUT PUCHAR              out);

VOID RTMPAesEncrypt(
    IN  PUCHAR              key,
    IN  PUCHAR              data,
    IN  PUCHAR              ciphertext);

VOID RTMPMicFinal(
    IN  PMIC_CONTEXT        pContext,
    OUT UCHAR               digest[4]);

VOID RTMPCkipInsertCMIC(
    IN  PRTMP_ADAPTER   pAd,
    OUT PUCHAR          pMIC,
    IN  PUCHAR          p80211hdr,
    IN  PNDIS_PACKET    pPacket,
    IN  PCIPHER_KEY     pKey,
    IN  PUCHAR          mic_snap);

#endif //__RTMP_CKIPMIC_H__




#define MAX_PACKETS_IN_PS_QUEUE				128	//32
#define WMM_NUM_OF_AC                       4  /* AC0, AC1, AC2, and AC3 */

#ifdef RT30xx
//2008/09/11:KH add to support efuse<--
#define MAX_EEPROM_BIN_FILE_SIZE					1024
//2008/09/11:KH add to support efuse-->
#endif

// RxFilter
#define STANORMAL	 0x17f97

// For 802.11n D3.03
//#define IE_NEW_EXT_CHA_OFFSET             62    // 802.11n d1. New extension channel offset elemet
#define IE_SECONDARY_CH_OFFSET		62	// 802.11n D3.03	Secondary Channel Offset element
#ifdef RT2870
#define IE_WAPI							68		// WAPI information element
#endif
#define IE_2040_BSS_COEXIST               72    // 802.11n D3.0.3
#define IE_2040_BSS_INTOLERANT_REPORT     73    // 802.11n D3.03
#define IE_OVERLAPBSS_SCAN_PARM           74    // 802.11n D3.03

#define AP_CNTL_STATE_MACHINE           15
#define AP_WPA_STATE_MACHINE            16

#ifdef RT30xx
#define WSC_STATE_MACHINE            17
#define WSC_UPNP_STATE_MACHINE		    18
#endif

//
// STA's CONTROL/CONNECT state machine: states, events, total function #
//

#define RFIC_2750                   4       // 2.4G/5G 1T2R
#define RFIC_3020                   5       // 2.4G 1T1R
#define RFIC_2020                   6       // 2.4G B/G
#ifdef RT30xx
#define RFIC_3021                   7       // 2.4G 1T2R
#define RFIC_3022                   8       // 2.4G 2T2R
#endif

// LED Status.
#define LED_LINK_DOWN               0




				RSNIe = IE_WPA2;
			}

#ifdef RT30xx
#ifdef SIOCSIWGENIE
			if (pAd->StaCfg.WpaSupplicantUP != 1)
#endif // SIOCSIWGENIE //
#endif
            RTMPMakeRSNIE(pAd, pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus, BSS0);

            // Check for WPA PMK cache list

				}
			}

#ifdef RT30xx
#ifdef SIOCSIWGENIE
			if (pAd->StaCfg.WpaSupplicantUP == 1)
			{
				MakeOutgoingFrame(pOutBuffer + FrameLen,    		&tmp,

		                        	END_OF_ARGS);
			}
			else
#endif
#endif
			{
				MakeOutgoingFrame(pOutBuffer + FrameLen,    		&tmp,
				              		1,                              &RSNIe,


			FrameLen += tmp;

#ifdef RT30xx
#ifdef SIOCSIWGENIE
			if (pAd->StaCfg.WpaSupplicantUP != 1)
#endif
#endif
			{
	            // Append Variable IE
	            NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &RSNIe, 1);

    union iwreq_data    wrqu;
    char custom[IW_CUSTOM_MAX] = {0};

#if WIRELESS_EXT > 17
    if (pAd->StaCfg.ReqVarIELen <= IW_CUSTOM_MAX)
    {
        wrqu.data.length = pAd->StaCfg.ReqVarIELen;

    }
    else
        DBGPRINT(RT_DEBUG_TRACE, ("pAd->StaCfg.ReqVarIELen > MAX_CUSTOM_LEN\n"));
#else
    if (((pAd->StaCfg.ReqVarIELen*2) + 17) <= IW_CUSTOM_MAX)
    {
        UCHAR   idx;
        wrqu.data.length = (pAd->StaCfg.ReqVarIELen*2) + 17;
        sprintf(custom, "ASSOCINFO(ReqIEs=");
        for (idx=0; idx<pAd->StaCfg.ReqVarIELen; idx++)
                sprintf(custom + strlen(custom), "%02x", pAd->StaCfg.ReqVarIEs[idx]);
        wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, custom);
    }
    else
        DBGPRINT(RT_DEBUG_TRACE, ("(pAd->StaCfg.ReqVarIELen*2) + 17 > MAX_CUSTOM_LEN\n"));
#endif

	return 0;





		OPSTATUS_SET_FLAG(pAd, fOP_STATUS_ADHOC_ON);
		OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_INFRA_ON);

#ifdef RT30xx
		if ((pAd->CommonCfg.HtCapability.HtCapInfo.ChannelWidth  == BW_40) &&
			(pAd->CommonCfg.AddHTInfo.AddHtInfo.ExtChanOffset == EXTCHA_ABOVE))
		{

		{
			pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel - 2;
		}
#endif
#ifdef RT2870
		if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
			AdhocTurnOnQos(pAd);

		pAd->MacTab.Size = 1;	// infra mode always set MACtab size =1.
		pAd->MacTab.Content[BSSID_WCID].Sst = SST_ASSOC;
		pAd->MacTab.Content[BSSID_WCID].AuthState = SST_ASSOC;
#ifdef RT30xx
		pAd->MacTab.Content[BSSID_WCID].AuthMode = pAd->StaCfg.AuthMode;
#endif
		pAd->MacTab.Content[BSSID_WCID].WepStatus = pAd->StaCfg.WepStatus;
        NdisReleaseSpinLock(&pAd->MacTabLock);


	// Txop can only be modified when RDG is off, WMM is disable and TxBurst is enable
	//
	// if 1. Legacy AP WMM on,  or 2. 11n AP, AMPDU disable.  Force turn off burst no matter what bEnableTxBurst is.
	if (
		!(pAd->CommonCfg.RxStream == 1 && pAd->CommonCfg.TxStream == 1) &&
		(((pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED))
		|| ((pAd->StaActive.SupportedPhyInfo.bHtEnable == TRUE) && (pAd->CommonCfg.BACapability.field.Policy == BA_NOTUSE))))
#endif
#ifndef RT30xx
	if (((pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE) && (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED)))
		|| ((pAd->StaActive.SupportedPhyInfo.bHtEnable == TRUE) && (pAd->CommonCfg.BACapability.field.Policy == BA_NOTUSE)))
#endif
	{
		RTMP_IO_READ32(pAd, EDCA_AC0_CFG, &Data);
		Data  &= 0xFFFFFF00;

		wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
	}

#ifdef RT30xx
	if (IS_RT3090(pAd))
	{
		UINT32				macdata;

		macdata &= ~(0x09);	//bit 0, 3
		RTMP_IO_WRITE32(pAd, 0x1210, macdata);
	}
#endif // RT30xx //
}

/*




	{

		// We should collect RSSI not only U2M data but also my beacon
		if (pAd->RxAnt.EvaluatePeriod == 0 &&
		    pHeader->FC.SubType == SUBTYPE_BEACON &&
		    MAC_ADDR_EQUAL(&pAd->CommonCfg.Bssid, &pHeader->Addr2)) {
#endif
#ifndef RT30xx
		if ((pHeader->FC.SubType == SUBTYPE_BEACON) && (MAC_ADDR_EQUAL(&pAd->CommonCfg.Bssid, &pHeader->Addr2)))
#endif
		{
			Update_Rssi_Sample(pAd, &pAd->StaCfg.RssiSample, pRxWI);

			pAd->StaCfg.LastSNR0 = (UCHAR)(pRxWI->SNR0);
			pAd->StaCfg.LastSNR1 = (UCHAR)(pRxWI->SNR1);
		}

#ifdef RT2870
		// collect rssi information for antenna diversity
		if (pAd->NicConfig2.field.AntDiversity)
		{

					pAd->StaCfg.NumOfAvgRssiSample ++;
			}
		}
#endif

		// First check the size, it MUST not exceed the mlme queue size
		if (pRxWI->MPDUtotalByteCount > MGMT_DMA_BUFFER_SIZE)

Lines 1116-1125 VOID PeerBeacon( Link Here

(-)a/drivers/staging/rt2860/sta/sync.c (-2 lines)
1116	// Add the safeguard against the mismatch of adhoc wep status	1116	// Add the safeguard against the mismatch of adhoc wep status
1117	if (pAd->StaCfg.WepStatus != pAd->ScanTab.BssEntry[Bssidx].WepStatus)	1117	if (pAd->StaCfg.WepStatus != pAd->ScanTab.BssEntry[Bssidx].WepStatus)
1118	{	1118	{
1119	#ifdef RT30xx
1120	DBGPRINT(RT_DEBUG_TRACE, ("SYNC - Not matched wep status %d %d\n", pAd->StaCfg.WepStatus, pAd->ScanTab.BssEntry[Bssidx].WepStatus));	1119	DBGPRINT(RT_DEBUG_TRACE, ("SYNC - Not matched wep status %d %d\n", pAd->StaCfg.WepStatus, pAd->ScanTab.BssEntry[Bssidx].WepStatus));
1121	DBGPRINT(RT_DEBUG_TRACE, ("bssid=%s\n", pAd->ScanTab.BssEntry[Bssidx].Bssid));	1120	DBGPRINT(RT_DEBUG_TRACE, ("bssid=%s\n", pAd->ScanTab.BssEntry[Bssidx].Bssid));
1122	#endif
1123	return;	1121	return;
1124	}	1122	}
1125		1123




			pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;
		else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
			pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;
#ifndef RT30xx
		else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled)
			pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP64;
		else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)
			pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP128;
#endif

    	//hex_dump("Group Key :", pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key, LEN_TKIP_EK);
	}

	// Get GTK length - refer to IEEE 802.11i-2004 p.82
	GTKLEN = pKDE->Len -6;

#ifdef RT30xx
	if (GTKLEN < LEN_AES_KEY)
#endif
#ifndef RT30xx
	if (GTKLEN < MIN_LEN_OF_GTK)
#endif
	{
		DBGPRINT(RT_DEBUG_ERROR, ("ERROR: GTK Key length is too short (%d) \n", GTKLEN));
        return FALSE;

		pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;
	else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
		pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;
#ifndef RT30xx
	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled)
		pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP64;
	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)
		pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP128;
#endif

	return TRUE;





	  0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "radio_on" },
	{ SHOW_CFG_VALUE,
	  IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "show" },
#if !defined(RT2860) && !defined(RT30xx)
	{ SHOW_ADHOC_ENTRY_INFO,
	  0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "adhocEntry" },
#endif
/* --- sub-ioctls relations --- */

#ifdef DBG
{ RTPRIV_IOCTL_BBP,
  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
  "bbp"},
{ RTPRIV_IOCTL_MAC,
  IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024,
  "mac"},
#ifdef RT30xx
{ RTPRIV_IOCTL_RF,
  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
  "rf"},
#endif // RT30xx //
{ RTPRIV_IOCTL_E2P,
  IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024,
  "e2p"},
#endif  /* DBG */

{ RTPRIV_IOCTL_STATISTICS,
  0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
  "stat"},

    IN	PRTMP_ADAPTER	pAd,
	IN	PUCHAR			arg);

#ifdef DBG
#if !defined(RT2860) && !defined(RT30xx)
VOID RTMPIoctlBBP(
	IN	PRTMP_ADAPTER	pAdapter,
	IN	struct iwreq	*wrq);
#endif

VOID RTMPIoctlMAC(
	IN	PRTMP_ADAPTER	pAdapter,
	IN	struct iwreq	*wrq);

VOID RTMPIoctlE2PROM(
    IN  PRTMP_ADAPTER   pAdapter,
    IN  struct iwreq    *wrq);

#ifdef RT30xx
VOID RTMPIoctlRF(
    IN  PRTMP_ADAPTER   pAdapter,
    IN  struct iwreq    *wrq);
#endif // RT30xx //
#endif // DBG //


NDIS_STATUS RTMPWPANoneAddKeyProc(
    IN  PRTMP_ADAPTER   pAd,
    IN	PVOID			pBuf);

	IN	PRTMP_ADAPTER	pAdapter,
	IN	PUCHAR			arg);

#if !defined(RT2860) && !defined(RT30xx)
INT	Show_Adhoc_MacTable_Proc(
	IN	PRTMP_ADAPTER	pAd,
	IN	PCHAR			extra);
#endif

static struct {
	CHAR *name;
	INT (*set_proc)(PRTMP_ADAPTER pAdapter, PUCHAR arg);

    {"ForceGF",		        		Set_ForceGF_Proc},
	{"LongRetry",	        		Set_LongRetryLimit_Proc},
	{"ShortRetry",	        		Set_ShortRetryLimit_Proc},
#ifdef RT2870
#ifdef RT30xx
	{"efuseFreeNumber",				set_eFuseGetFreeBlockCount_Proc},
	{"efuseDump",					set_eFusedump_Proc},
	{"efuseLoadFromBin",				set_eFuseLoadFromBin_Proc},
#endif
//2008/09/11:KH add to support efuse-->
	{NULL,}
};


		   char *name, char *extra)
{
//	PRTMP_ADAPTER pAdapter = dev->ml_priv;
	strncpy(name, RT28xx_CHIP_NAME " Wireless", IFNAMSIZ);
    strncpy(name, "RT2860 Wireless", IFNAMSIZ);
#endif
#ifdef RT2870
	strncpy(name, "RT2870 Wireless", IFNAMSIZ);
#endif // RT2870 //
	return 0;
}


		   struct iw_request_info *info,
		   struct iw_freq *freq, char *extra)
{
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
	UCHAR ch = pAdapter->CommonCfg.Channel;
	PRTMP_ADAPTER pAdapter = NULL;
#endif
#ifdef RT30xx
	PRTMP_ADAPTER pAdapter;
#endif
	UCHAR ch;
	ULONG	m;

	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
#ifndef RT30xx
		if (pVirtualAd && pVirtualAd->RtmpDev)
#endif
			pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}

		ch = pAdapter->CommonCfg.Channel;

	DBGPRINT(RT_DEBUG_TRACE,("==>rt_ioctl_giwfreq  %d\n", ch));

    MAP_CHANNEL_ID_TO_KHZ(ch, m);

		   struct iw_request_info *info,
		   __u32 *mode, char *extra)
{
#ifndef RT30xx
	PRTMP_ADAPTER 	pAdapter = NULL;
	VIRTUAL_ADAPTER *pVirtualAd = NULL;

	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
		if (pVirtualAd && pVirtualAd->RtmpDev)
			pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}
#endif
#ifdef RT30xx
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
#endif

	if (ADHOC_ON(pAdapter))
		*mode = IW_MODE_ADHOC;

		   struct iw_request_info *info,
		   struct iw_point *data, char *extra)
{
#ifndef RT30xx
	PRTMP_ADAPTER 	pAdapter = NULL;
	VIRTUAL_ADAPTER *pVirtualAd = NULL;
#endif
#ifdef RT30xx
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
#endif
	struct iw_range *range = (struct iw_range *) extra;
	u16 val;
	int i;

#ifndef RT30xx
	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
		if (pVirtualAd && pVirtualAd->RtmpDev)
			pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}
#endif

	DBGPRINT(RT_DEBUG_TRACE ,("===>rt_ioctl_giwrange\n"));
	data->length = sizeof(struct iw_range);
	memset(range, 0, sizeof(struct iw_range));

	range->min_frag = 256;
	range->max_frag = 2346;

#if WIRELESS_EXT > 17
	/* IW_ENC_CAPA_* bit field */
	range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
					IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
#endif

	return 0;
}

		      struct iw_request_info *info,
		      struct sockaddr *ap_addr, char *extra)
{
#ifndef RT30xx
	PRTMP_ADAPTER 	pAdapter = NULL;
	VIRTUAL_ADAPTER *pVirtualAd = NULL;

	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
		if (pVirtualAd && pVirtualAd->RtmpDev)
			pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}
#endif
#ifdef RT30xx
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
#endif

	if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
	{

	return 0;
}

#ifdef SIOCGIWSCAN
int rt_ioctl_siwscan(struct net_device *dev,
			struct iw_request_info *info,
			struct iw_point *data, char *extra)

	char *current_ev = extra, *previous_ev = extra;
	char *end_buf;
	char *current_val, custom[MAX_CUSTOM_LEN] = {0};
#ifndef IWEVGENIE
	char idx;
#endif // IWEVGENIE //
	struct iw_event iwe;

	if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))

		return 0;
	}

#if WIRELESS_EXT >= 17
    if (data->length > 0)
        end_buf = extra + data->length;
    else
        end_buf = extra + IW_SCAN_MAX_DATA;
#else
    end_buf = extra + IW_SCAN_MAX_DATA;
#endif

	for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
	{
		if (current_ev >= end_buf)
			return -E2BIG;
#if WIRELESS_EXT >= 17
            return -E2BIG;
#else
			break;
#endif
        }

		//MAC address
		//================================


        previous_ev = current_ev;
		current_ev = iwe_stream_add_event(info, current_ev,end_buf, &iwe, IW_EV_ADDR_LEN);
#ifdef RT30xx
        if (current_ev == previous_ev)
		return -E2BIG;
            return -E2BIG;
#else
			break;
#endif

		/*
		Protocol:


		previous_ev = current_ev;
		current_ev	 = iwe_stream_add_event(info, current_ev, end_buf, &iwe, IW_EV_ADDR_LEN);
#endif /* RT30xx */
        if (current_ev == previous_ev)
		return -E2BIG;
            return -E2BIG;
#else
			break;
#endif

		//ESSID
		//================================

        previous_ev = current_ev;
		current_ev = iwe_stream_add_point(info, current_ev,end_buf, &iwe, pAdapter->ScanTab.BssEntry[i].Ssid);
        if (current_ev == previous_ev)
		return -E2BIG;
            return -E2BIG;
#else
			break;
#endif

		//Network Type
		//================================

        previous_ev = current_ev;
		current_ev = iwe_stream_add_event(info, current_ev, end_buf, &iwe,  IW_EV_UINT_LEN);
        if (current_ev == previous_ev)
		return -E2BIG;
            return -E2BIG;
#else
			break;
#endif

		//Channel and Frequency
		//================================

		previous_ev = current_ev;
		current_ev = iwe_stream_add_event(info, current_ev, end_buf, &iwe, IW_EV_FREQ_LEN);
        if (current_ev == previous_ev)
		return -E2BIG;
            return -E2BIG;
#else
			break;
#endif

        //Add quality statistics
        //================================

        set_quality(pAdapter, &iwe.u.qual, pAdapter->ScanTab.BssEntry[i].Rssi);
    	current_ev = iwe_stream_add_event(info, current_ev, end_buf, &iwe, IW_EV_QUAL_LEN);
        if (current_ev == previous_ev)
		return -E2BIG;
            return -E2BIG;
#else
			break;
#endif

		//Encyption key
		//================================

        previous_ev = current_ev;
        current_ev = iwe_stream_add_point(info, current_ev, end_buf,&iwe, (char *)pAdapter->SharedKey[BSS0][(iwe.u.data.flags & IW_ENCODE_INDEX)-1].Key);
        if (current_ev == previous_ev)
		return -E2BIG;
            return -E2BIG;
#else
			break;
#endif

		//Bit Rate
		//================================

        	if((current_val-current_ev)>IW_EV_LCP_LEN)
            	current_ev = current_val;
        	else
			return -E2BIG;
                return -E2BIG;
#else
			    break;
#endif
        }

#ifdef IWEVGENIE
		//WPA IE
		if (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen > 0)
		{

			iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].WpaIE.IELen;
			current_ev = iwe_stream_add_point(info, current_ev, end_buf, &iwe, custom);
			if (current_ev == previous_ev)
				return -E2BIG;
                return -E2BIG;
#else
			    break;
#endif
		}

		//WPA2 IE

			iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].RsnIE.IELen;
			current_ev = iwe_stream_add_point(info, current_ev, end_buf, &iwe, custom);
			if (current_ev == previous_ev)
				return -E2BIG;
                return -E2BIG;
#else
			    break;
#endif
        }
#else
        //WPA IE
		//================================
        if (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen > 0)
        {
    		NdisZeroMemory(&iwe, sizeof(iwe));
			memset(&custom[0], 0, MAX_CUSTOM_LEN);
    		iwe.cmd = IWEVCUSTOM;
            iwe.u.data.length = (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen * 2) + 7;
            NdisMoveMemory(custom, "wpa_ie=", 7);
            for (idx = 0; idx < pAdapter->ScanTab.BssEntry[i].WpaIE.IELen; idx++)
                sprintf(custom + strlen(custom), "%02x", pAdapter->ScanTab.BssEntry[i].WpaIE.IE[idx]);
            previous_ev = current_ev;
    		current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe,  custom);
            if (current_ev == previous_ev)
#if WIRELESS_EXT >= 17
                return -E2BIG;
#else
			    break;
#endif
        }

        //WPA2 IE
        if (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen > 0)
        {
    		NdisZeroMemory(&iwe, sizeof(iwe));
			memset(&custom[0], 0, MAX_CUSTOM_LEN);
    		iwe.cmd = IWEVCUSTOM;
            iwe.u.data.length = (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen * 2) + 7;
            NdisMoveMemory(custom, "rsn_ie=", 7);
			for (idx = 0; idx < pAdapter->ScanTab.BssEntry[i].RsnIE.IELen; idx++)
                sprintf(custom + strlen(custom), "%02x", pAdapter->ScanTab.BssEntry[i].RsnIE.IE[idx]);
            previous_ev = current_ev;
    		current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe,  custom);
            if (current_ev == previous_ev)
#if WIRELESS_EXT >= 17
                return -E2BIG;
#else
			    break;
#endif
        }
#endif // IWEVGENIE //
	}

	data->length = current_ev - extra;

	DBGPRINT(RT_DEBUG_ERROR ,("===>rt_ioctl_giwscan. %d(%d) BSS returned, data->length = %d\n",i , pAdapter->ScanTab.BssNr, data->length));
	return 0;
}
#endif

int rt_ioctl_siwessid(struct net_device *dev,
			 struct iw_request_info *info,

			 struct iw_request_info *info,
			 struct iw_point *data, char *essid)
{
#ifndef RT30xx
	PRTMP_ADAPTER 	pAdapter = NULL;
	VIRTUAL_ADAPTER *pVirtualAd = NULL;

	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
		if (pVirtualAd && pVirtualAd->RtmpDev)
			pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}
#endif
#ifdef RT30xx
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
#endif

	data->flags = 1;
    if (MONITOR_ON(pAdapter))

			 struct iw_request_info *info,
			 struct iw_point *data, char *nickname)
{
#ifndef RT30xx
	PRTMP_ADAPTER 	pAdapter = NULL;
	VIRTUAL_ADAPTER *pVirtualAd = NULL;

	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
		if (pVirtualAd && pVirtualAd->RtmpDev)
			pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}
#endif
#ifdef RT30xx
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
#endif

	if (data->length > strlen(pAdapter->nickname) + 1)
		data->length = strlen(pAdapter->nickname) + 1;

		       struct iw_request_info *info,
		       struct iw_param *rts, char *extra)
{
#ifndef RT30xx
	PRTMP_ADAPTER 	pAdapter = NULL;
	VIRTUAL_ADAPTER *pVirtualAd = NULL;

	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
		if (pVirtualAd && pVirtualAd->RtmpDev)
			pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}
#endif
#ifdef RT30xx
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
#endif

	//check if the interface is down
    	if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))


	if (frag->disabled)
		val = MAX_FRAG_THRESHOLD;
	else if (frag->value >= MIN_FRAG_THRESHOLD && frag->value <= MAX_FRAG_THRESHOLD)
		val = __cpu_to_le16(frag->value & ~0x1); /* even numbers only */
	else if (frag->value == 0)
	    val = MAX_FRAG_THRESHOLD;
	else

			struct iw_request_info *info,
			struct iw_param *frag, char *extra)
{
#ifndef RT30xx
	PRTMP_ADAPTER 	pAdapter = NULL;
	VIRTUAL_ADAPTER *pVirtualAd = NULL;

	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
		if (pVirtualAd && pVirtualAd->RtmpDev)
			pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}
#endif
#ifdef RT30xx
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
#endif

	//check if the interface is down
    	if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))

        pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
        pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
        goto done;
	} else if (
		 (erq->flags & IW_ENCODE_RESTRICTED || erq->flags & IW_ENCODE_OPEN)) {
	else if ((erq->length == 0) &&
             (erq->flags & IW_ENCODE_RESTRICTED || erq->flags & IW_ENCODE_OPEN))
#endif
#ifdef RT30xx
	else if (erq->flags & IW_ENCODE_RESTRICTED || erq->flags & IW_ENCODE_OPEN)
#endif
	{
		STA_PORT_SECURED(pAdapter);
		pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
		pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;

			pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
    	else
			pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
#ifndef RT30xx
        goto done;
#endif
	}

    if (erq->length > 0)

            //Using default key
			keyIdx = pAdapter->StaCfg.DefaultKeyId;
        }
#ifdef RT30xx
		else
		{
			pAdapter->StaCfg.DefaultKeyId=keyIdx;
		}
#endif

        NdisZeroMemory(pAdapter->SharedKey[BSS0][keyIdx].Key,  16);


			  struct iw_request_info *info,
			  struct iw_point *erq, char *key)
{
#ifdef RT30xx
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
#endif
	int kid;
#ifndef RT30xx
	PRTMP_ADAPTER 	pAdapter = NULL;
	VIRTUAL_ADAPTER *pVirtualAd = NULL;

	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
		if (pVirtualAd && pVirtualAd->RtmpDev)
			pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}
#endif

	//check if the interface is down
	if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))

rt_ioctl_setparam(struct net_device *dev, struct iw_request_info *info,
			 void *w, char *extra)
{
	PRTMP_ADAPTER pAdapter = dev->ml_priv;
	POS_COOKIE pObj = (POS_COOKIE)pAdapter->OS_Cookie;
	POS_COOKIE pObj;
	char *this_char = extra;
	char *value;
	int  Status=0;

	if (dev->priv_flags == INT_MAIN)
	{
		pAdapter = dev->ml_priv;
	}
	else
	{
		pVirtualAd = dev->ml_priv;
		pAdapter = pVirtualAd->RtmpDev->ml_priv;
	}
	pObj = (POS_COOKIE) pAdapter->OS_Cookie;

	if (pAdapter == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}

	{
		pObj->ioctl_if_type = INT_MAIN;
        pObj->ioctl_if = MAIN_MBSSID;

		struct iw_point *wrq, char *extra)
{
    INT				Status = 0;
    PRTMP_ADAPTER pAd = dev->ml_priv;
    POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
	POS_COOKIE		pObj;
    u32             subcmd = wrq->flags;

	if (dev->priv_flags == INT_MAIN)
		pAd = dev->ml_priv;
	else
	{
		pVirtualAd = dev->ml_priv;
		pAd = pVirtualAd->RtmpDev->ml_priv;
	}
	pObj = (POS_COOKIE) pAd->OS_Cookie;

	if (pAd == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}

    if (extra == NULL)
    {
        wrq->length = 0;

					wrq->length = strlen(extra) + 1; // 1: size of '\0'
			}
			break;
#if !defined(RT2860) && !defined(RT30xx)
		case SHOW_ADHOC_ENTRY_INFO:
			Show_Adhoc_MacTable_Proc(pAd, extra);
			wrq->length = strlen(extra) + 1; // 1: size of '\0'
			break;
#endif
        default:
            DBGPRINT(RT_DEBUG_TRACE, ("%s - unknow subcmd = %d\n", __func__, subcmd));
            break;

    return Status;
}

#ifdef SIOCSIWMLME
int rt_ioctl_siwmlme(struct net_device *dev,
			   struct iw_request_info *info,
			   union iwreq_data *wrqu,


	return 0;
}
#endif // SIOCSIWMLME //

#if WIRELESS_EXT > 17
int rt_ioctl_siwauth(struct net_device *dev,
			  struct iw_request_info *info,
			  union iwreq_data *wrqu, char *extra)


                NdisZeroMemory(pAdapter->SharedKey[BSS0][keyIdx].Key,  16);
			    NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, ext->key, ext->key_len);
#ifndef RT30xx
				if (pAdapter->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled ||
					pAdapter->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)
				{

    				// Indicate Connected for GUI
    				pAdapter->IndicateMediaState = NdisMediaStateConnected;
				}
#endif
    			break;
            case IW_ENCODE_ALG_TKIP:
                DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_TKIP - keyIdx = %d, ext->key_len = %d\n", __func__, keyIdx, ext->key_len));

	return 0;
}

#ifdef SIOCSIWGENIE
int rt_ioctl_siwgenie(struct net_device *dev,
			  struct iw_request_info *info,
			  union iwreq_data *wrqu, char *extra)


	return 0;
}
#endif // SIOCSIWGENIE //

int rt_ioctl_giwgenie(struct net_device *dev,
			       struct iw_request_info *info,

		return 0;
	}

#ifdef SIOCSIWGENIE
	if (pAd->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
	{
	if (wrqu->data.length < pAd->StaCfg.RSNIE_Len)

	memcpy(extra, &pAd->StaCfg.RSN_IE[0], pAd->StaCfg.RSNIE_Len);
	}
	else
#endif // SIOCSIWGENIE //
	{
		UCHAR RSNIe = IE_WPA;



	return 0;
}
#endif // #if WIRELESS_EXT > 17

#ifdef DBG
static int
rt_private_ioctl_bbp(struct net_device *dev, struct iw_request_info *info,
		struct iw_point *wrq, char *extra)
			{
	CHAR				*this_char;
	CHAR				*value = NULL;
	UCHAR				regBBP = 0;
	UINT32				bbpId;
	UINT32				bbpValue;
	BOOLEAN				bIsPrintAllBBP = FALSE;
	INT					Status = 0;
    PRTMP_ADAPTER       pAdapter = dev->ml_priv;


	memset(extra, 0x00, IW_PRIV_SIZE_MASK);

	if (wrq->length > 1) //No parameters.
				{
		sprintf(extra, "\n");

		//Parsing Read or Write
		this_char = wrq->pointer;
		DBGPRINT(RT_DEBUG_TRACE, ("this_char=%s\n", this_char));
		if (!*this_char)
			goto next;

		if ((value = rtstrchr(this_char, '=')) != NULL)
			*value++ = 0;

		if (!value || !*value)
		{ //Read
			DBGPRINT(RT_DEBUG_TRACE, ("this_char=%s, value=%s\n", this_char, value));
			if (sscanf(this_char, "%d", &(bbpId)) == 1)
			{
#ifndef RT30xx
				if (bbpId <= 136)
#endif // RT30xx //
#ifdef RT30xx
				if (bbpId <= 138)  // edit by johnli, RF power sequence setup, add BBP R138 for ADC dynamic on/off control
#endif // RT30xx //
				{
					{
					RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, &regBBP);
					}
					sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X\n", bbpId, bbpId*2, regBBP);
                    wrq->length = strlen(extra) + 1; // 1: size of '\0'
					DBGPRINT(RT_DEBUG_TRACE, ("msg=%s\n", extra));
				}
				else
				{//Invalid parametes, so default printk all bbp
					bIsPrintAllBBP = TRUE;
					goto next;
				}
			}
			else
			{ //Invalid parametes, so default printk all bbp
				bIsPrintAllBBP = TRUE;
				goto next;
			}
		}
		else
		{ //Write
			if ((sscanf(this_char, "%d", &(bbpId)) == 1) && (sscanf(value, "%x", &(bbpValue)) == 1))
			{
#ifndef RT30xx
				if (bbpId <= 136)
#endif // RT30xx //
#ifdef RT30xx
				if (bbpId <= 138)  // edit by johnli, RF power sequence setup, add BBP R138 for ADC dynamic on/off control
#endif // RT30xx //
				{
					{
					    RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, bbpId, bbpValue);
    					//Read it back for showing
    					RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, &regBBP);
			}
					sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X\n", bbpId, bbpId*2, regBBP);
                    wrq->length = strlen(extra) + 1; // 1: size of '\0'
					DBGPRINT(RT_DEBUG_TRACE, ("msg=%s\n", extra));
				}
				else
				{//Invalid parametes, so default printk all bbp
					bIsPrintAllBBP = TRUE;
					goto next;
				}
			}
			else
			{ //Invalid parametes, so default printk all bbp
				bIsPrintAllBBP = TRUE;
				goto next;
			}
		}
		}
	else
		bIsPrintAllBBP = TRUE;

next:
	if (bIsPrintAllBBP)
	{
		memset(extra, 0x00, IW_PRIV_SIZE_MASK);
		sprintf(extra, "\n");
#ifndef RT30xx
		for (bbpId = 0; bbpId <= 136; bbpId++)
#endif // RT30xx //
#ifdef RT30xx
		for (bbpId = 0; bbpId <= 138; bbpId++)  // edit by johnli, RF power sequence setup, add BBP R138 for ADC dynamic on/off control
#endif // RT30xx //
		{
		    if (strlen(extra) >= (IW_PRIV_SIZE_MASK - 10))
                break;
			RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, &regBBP);
#ifndef RT30xx
			sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X    ", bbpId, bbpId*2, regBBP);
			if (bbpId%5 == 4)
				sprintf(extra+strlen(extra), "\n");
#endif
#ifdef RT30xx
			sprintf(extra+strlen(extra), "%03d = %02X\n", bbpId, regBBP);  // edit by johnli, change display format
#endif
		}

        wrq->length = strlen(extra) + 1; // 1: size of '\0'
        DBGPRINT(RT_DEBUG_TRACE, ("wrq->length = %d\n", wrq->length));
	}

	DBGPRINT(RT_DEBUG_TRACE, ("<==rt_private_ioctl_bbp\n\n"));

    return Status;
}
#endif // DBG //

int rt_ioctl_siwrate(struct net_device *dev,
			struct iw_request_info *info,

	(iw_handler) NULL,				        /* SIOCGIWTHRSPY */
	(iw_handler) rt_ioctl_siwap,            /* SIOCSIWAP     */
	(iw_handler) rt_ioctl_giwap,		    /* SIOCGIWAP     */
#ifdef SIOCSIWMLME
	(iw_handler) rt_ioctl_siwmlme,	        /* SIOCSIWMLME   */
#else
	(iw_handler) NULL,				        /* SIOCSIWMLME */
#endif // SIOCSIWMLME //
	(iw_handler) rt_ioctl_iwaplist,		    /* SIOCGIWAPLIST */
#ifdef SIOCGIWSCAN
	(iw_handler) rt_ioctl_siwscan,		    /* SIOCSIWSCAN   */
	(iw_handler) rt_ioctl_giwscan,		    /* SIOCGIWSCAN   */
#else
	(iw_handler) NULL,				        /* SIOCSIWSCAN   */
	(iw_handler) NULL,				        /* SIOCGIWSCAN   */
#endif /* SIOCGIWSCAN */
	(iw_handler) rt_ioctl_siwessid,		    /* SIOCSIWESSID  */
	(iw_handler) rt_ioctl_giwessid,		    /* SIOCGIWESSID  */
	(iw_handler) rt_ioctl_siwnickn,		    /* SIOCSIWNICKN  */

	(iw_handler) NULL,		                /* SIOCGIWPOWER  */
	(iw_handler) NULL,						/* -- hole -- */
	(iw_handler) NULL,						/* -- hole -- */
#if WIRELESS_EXT > 17
    (iw_handler) rt_ioctl_siwgenie,         /* SIOCSIWGENIE  */
	(iw_handler) rt_ioctl_giwgenie,         /* SIOCGIWGENIE  */
	(iw_handler) rt_ioctl_siwauth,		    /* SIOCSIWAUTH   */

	(iw_handler) rt_ioctl_siwencodeext,	    /* SIOCSIWENCODEEXT */
	(iw_handler) rt_ioctl_giwencodeext,		/* SIOCGIWENCODEEXT */
	(iw_handler) rt_ioctl_siwpmksa,         /* SIOCSIWPMKSA  */
#endif
};

static const iw_handler rt_priv_handlers[] = {
	(iw_handler) NULL, /* + 0x00 */
	(iw_handler) NULL, /* + 0x01 */
	(iw_handler) rt_ioctl_setparam, /* + 0x02 */
#ifdef DBG
	(iw_handler) rt_private_ioctl_bbp, /* + 0x03 */
#else
	(iw_handler) NULL, /* + 0x03 */
#endif
	(iw_handler) NULL, /* + 0x04 */
	(iw_handler) NULL, /* + 0x05 */
	(iw_handler) NULL, /* + 0x06 */

#endif
};

INT RTMPSetInformation(
    IN  PRTMP_ADAPTER pAdapter,
    IN  OUT struct ifreq    *rq,
    IN  INT                 cmd)
{
    struct iwreq                        *wrq = (struct iwreq *) rq;
    NDIS_802_11_SSID                    Ssid;
    NDIS_802_11_MAC_ADDRESS             Bssid;
    RT_802_11_PHY_MODE                  PhyMode;
    RT_802_11_STA_CONFIG                StaConfig;
    NDIS_802_11_RATES                   aryRates;
    RT_802_11_PREAMBLE                  Preamble;
    NDIS_802_11_WEP_STATUS              WepStatus;
    NDIS_802_11_AUTHENTICATION_MODE     AuthMode = Ndis802_11AuthModeMax;
    NDIS_802_11_NETWORK_INFRASTRUCTURE  BssType;
    NDIS_802_11_RTS_THRESHOLD           RtsThresh;
    NDIS_802_11_FRAGMENTATION_THRESHOLD FragThresh;
    NDIS_802_11_POWER_MODE              PowerMode;
    PNDIS_802_11_KEY                    pKey = NULL;
    PNDIS_802_11_WEP			        pWepKey =NULL;
    PNDIS_802_11_REMOVE_KEY             pRemoveKey = NULL;
    NDIS_802_11_CONFIGURATION           Config, *pConfig = NULL;
    NDIS_802_11_NETWORK_TYPE            NetType;
    ULONG                               Now;
    UINT                                KeyIdx = 0;
    INT                                 Status = NDIS_STATUS_SUCCESS, MaxPhyMode = PHY_11G;
    ULONG                               PowerTemp;
    BOOLEAN                             RadioState;
    BOOLEAN                             StateMachineTouched = FALSE;
	OID_SET_HT_PHYMODE					HT_PhyMode;	//11n ,kathy
    PNDIS_802_11_PMKID                  pPmkId = NULL;
    BOOLEAN				                IEEE8021xState = FALSE;
    BOOLEAN				                IEEE8021x_required_keys = FALSE;
    UCHAR                               wpa_supplicant_enable = 0;

	MaxPhyMode = PHY_11N_5G;

	DBGPRINT(RT_DEBUG_TRACE, ("-->RTMPSetInformation(),	0x%08x\n", cmd&0x7FFF));
    switch(cmd & 0x7FFF) {
        case RT_OID_802_11_COUNTRY_REGION:
            if (wrq->u.data.length < sizeof(UCHAR))
                Status = -EINVAL;
			// Only avaliable when EEPROM not programming
            else if (!(pAdapter->CommonCfg.CountryRegion & 0x80) && !(pAdapter->CommonCfg.CountryRegionForABand & 0x80))
            {
                ULONG   Country;
                UCHAR	TmpPhy;

				Status = copy_from_user(&Country, wrq->u.data.pointer, wrq->u.data.length);
				pAdapter->CommonCfg.CountryRegion = (UCHAR)(Country & 0x000000FF);
				pAdapter->CommonCfg.CountryRegionForABand = (UCHAR)((Country >> 8) & 0x000000FF);
                TmpPhy = pAdapter->CommonCfg.PhyMode;
				pAdapter->CommonCfg.PhyMode = 0xff;
				// Build all corresponding channel information
				RTMPSetPhyMode(pAdapter, TmpPhy);
				SetCommonHT(pAdapter);
				DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_COUNTRY_REGION (A:%d  B/G:%d)\n", pAdapter->CommonCfg.CountryRegionForABand,
				    pAdapter->CommonCfg.CountryRegion));
            }
            break;
        case OID_802_11_BSSID_LIST_SCAN:
            Now = jiffies;
			DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_BSSID_LIST_SCAN, TxCnt = %d \n", pAdapter->RalinkCounters.LastOneSecTotalTxCount));

            if (MONITOR_ON(pAdapter))
            {
                DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is in Monitor Mode now !!!\n"));
                break;
            }

			//Benson add 20080527, when radio off, sta don't need to scan
			if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_RADIO_OFF))
				break;

			if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
			{
                DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is scanning now !!!\n"));
				pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
				Status = NDIS_STATUS_SUCCESS;
                break;
            }

			if (pAdapter->RalinkCounters.LastOneSecTotalTxCount > 100)
            {
                DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
				Status = NDIS_STATUS_SUCCESS;
				pAdapter->StaCfg.ScanCnt = 99;		// Prevent auto scan triggered by this OID
				break;
            }

            if ((OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED)) &&
				((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
				(pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
				(pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) ||
				(pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)) &&
                (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
            {
                DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, Port Not Secured! ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
				Status = NDIS_STATUS_SUCCESS;
				pAdapter->StaCfg.ScanCnt = 99;		// Prevent auto scan triggered by this OID
				break;
            }


            if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
            {
                RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
                DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
            }

            // tell CNTL state machine to call NdisMSetInformationComplete() after completing
            // this request, because this request is initiated by NDIS.
            pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
            // Reset allowed scan retries
            pAdapter->StaCfg.ScanCnt = 0;
            pAdapter->StaCfg.LastScanTime = Now;

			pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
            RTMP_SET_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
            MlmeEnqueue(pAdapter,
                        MLME_CNTL_STATE_MACHINE,
                        OID_802_11_BSSID_LIST_SCAN,
                        0,
                        NULL);

            Status = NDIS_STATUS_SUCCESS;
            StateMachineTouched = TRUE;
            break;
        case OID_802_11_SSID:
            if (wrq->u.data.length != sizeof(NDIS_802_11_SSID))
                Status = -EINVAL;
            else
            {
            	PCHAR pSsidString = NULL;
                Status = copy_from_user(&Ssid, wrq->u.data.pointer, wrq->u.data.length);

				DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SSID (Len=%d,Ssid=%s)\n", Ssid.SsidLength, Ssid.Ssid));
                if (Ssid.SsidLength > MAX_LEN_OF_SSID)
                    Status = -EINVAL;
                else
                {
                	if (Ssid.SsidLength == 0)
                	{
                		Set_SSID_Proc(pAdapter, "");
                	}
					else
                	{
	                	pSsidString = (CHAR *) kmalloc(MAX_LEN_OF_SSID+1, MEM_ALLOC_FLAG);
						if (pSsidString)
						{
							NdisZeroMemory(pSsidString, MAX_LEN_OF_SSID+1);
							NdisMoveMemory(pSsidString, Ssid.Ssid, Ssid.SsidLength);
	                		Set_SSID_Proc(pAdapter, pSsidString);
							kfree(pSsidString);
						}
						else
							Status = -ENOMEM;
                	}
                }
            }
            break;
        case OID_802_11_BSSID:
            if (wrq->u.data.length != sizeof(NDIS_802_11_MAC_ADDRESS))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&Bssid, wrq->u.data.pointer, wrq->u.data.length);

                // tell CNTL state machine to call NdisMSetInformationComplete() after completing
                // this request, because this request is initiated by NDIS.
                pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;

				// Prevent to connect AP again in STAMlmePeriodicExec
				pAdapter->MlmeAux.AutoReconnectSsidLen= 32;

                // Reset allowed scan retries
				pAdapter->StaCfg.ScanCnt = 0;

                if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
                {
                    RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
                    DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
                }
                MlmeEnqueue(pAdapter,
                            MLME_CNTL_STATE_MACHINE,
                            OID_802_11_BSSID,
                            sizeof(NDIS_802_11_MAC_ADDRESS),
                            (VOID *)&Bssid);
                Status = NDIS_STATUS_SUCCESS;
                StateMachineTouched = TRUE;

                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_BSSID %02x:%02x:%02x:%02x:%02x:%02x\n",
                                        Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
            }
            break;
        case RT_OID_802_11_RADIO:
            if (wrq->u.data.length != sizeof(BOOLEAN))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&RadioState, wrq->u.data.pointer, wrq->u.data.length);
                DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_RADIO (=%d)\n", RadioState));
                if (pAdapter->StaCfg.bSwRadio != RadioState)
                {
                    pAdapter->StaCfg.bSwRadio = RadioState;
                    if (pAdapter->StaCfg.bRadio != (pAdapter->StaCfg.bHwRadio && pAdapter->StaCfg.bSwRadio))
                    {
                        pAdapter->StaCfg.bRadio = (pAdapter->StaCfg.bHwRadio && pAdapter->StaCfg.bSwRadio);
                        if (pAdapter->StaCfg.bRadio == TRUE)
                        {
                            MlmeRadioOn(pAdapter);
                            // Update extra information
							pAdapter->ExtraInfo = EXTRA_INFO_CLEAR;
                        }
                        else
                        {
                            MlmeRadioOff(pAdapter);
                            // Update extra information
							pAdapter->ExtraInfo = SW_RADIO_OFF;
                        }
                    }
                }
            }
            break;
        case RT_OID_802_11_PHY_MODE:
            if (wrq->u.data.length != sizeof(RT_802_11_PHY_MODE))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&PhyMode, wrq->u.data.pointer, wrq->u.data.length);
				if (PhyMode <= MaxPhyMode)
				{
                	RTMPSetPhyMode(pAdapter, PhyMode);
					SetCommonHT(pAdapter);
				}
                DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_PHY_MODE (=%d)\n", PhyMode));
            }
            break;
        case RT_OID_802_11_STA_CONFIG:
            if (wrq->u.data.length != sizeof(RT_802_11_STA_CONFIG))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&StaConfig, wrq->u.data.pointer, wrq->u.data.length);
                pAdapter->CommonCfg.bEnableTxBurst = StaConfig.EnableTxBurst;
                pAdapter->CommonCfg.UseBGProtection = StaConfig.UseBGProtection;
                pAdapter->CommonCfg.bUseShortSlotTime = 1; // 2003-10-30 always SHORT SLOT capable
                if ((pAdapter->CommonCfg.PhyMode != StaConfig.AdhocMode) &&
					(StaConfig.AdhocMode <= MaxPhyMode))
                {
                    // allow dynamic change of "USE OFDM rate or not" in ADHOC mode
                    // if setting changed, need to reset current TX rate as well as BEACON frame format
#ifdef RT30xx
                    pAdapter->CommonCfg.PhyMode = StaConfig.AdhocMode;
#endif
                    if (pAdapter->StaCfg.BssType == BSS_ADHOC)
                    {
#ifndef RT30xx
						pAdapter->CommonCfg.PhyMode = StaConfig.AdhocMode;
#endif
                    	RTMPSetPhyMode(pAdapter, PhyMode);
                        MlmeUpdateTxRates(pAdapter, FALSE, 0);
                        MakeIbssBeacon(pAdapter);           // re-build BEACON frame
                        AsicEnableIbssSync(pAdapter);   // copy to on-chip memory
                    }
                }
                DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_STA_CONFIG (Burst=%d, Protection=%ld,ShortSlot=%d\n",
                                        pAdapter->CommonCfg.bEnableTxBurst,
                                        pAdapter->CommonCfg.UseBGProtection,
                                        pAdapter->CommonCfg.bUseShortSlotTime));
            }
            break;
        case OID_802_11_DESIRED_RATES:
            if (wrq->u.data.length != sizeof(NDIS_802_11_RATES))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&aryRates, wrq->u.data.pointer, wrq->u.data.length);
                NdisZeroMemory(pAdapter->CommonCfg.DesireRate, MAX_LEN_OF_SUPPORTED_RATES);
                NdisMoveMemory(pAdapter->CommonCfg.DesireRate, &aryRates, sizeof(NDIS_802_11_RATES));
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DESIRED_RATES (%02x,%02x,%02x,%02x,%02x,%02x,%02x,%02x)\n",
                    pAdapter->CommonCfg.DesireRate[0],pAdapter->CommonCfg.DesireRate[1],
                    pAdapter->CommonCfg.DesireRate[2],pAdapter->CommonCfg.DesireRate[3],
                    pAdapter->CommonCfg.DesireRate[4],pAdapter->CommonCfg.DesireRate[5],
                    pAdapter->CommonCfg.DesireRate[6],pAdapter->CommonCfg.DesireRate[7] ));
                // Changing DesiredRate may affect the MAX TX rate we used to TX frames out
                MlmeUpdateTxRates(pAdapter, FALSE, 0);
            }
            break;
        case RT_OID_802_11_PREAMBLE:
            if (wrq->u.data.length != sizeof(RT_802_11_PREAMBLE))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&Preamble, wrq->u.data.pointer, wrq->u.data.length);
                if (Preamble == Rt802_11PreambleShort)
                {
                    pAdapter->CommonCfg.TxPreamble = Preamble;
                    MlmeSetTxPreamble(pAdapter, Rt802_11PreambleShort);
                }
                else if ((Preamble == Rt802_11PreambleLong) || (Preamble == Rt802_11PreambleAuto))
                {
                    // if user wants AUTO, initialize to LONG here, then change according to AP's
                    // capability upon association.
                    pAdapter->CommonCfg.TxPreamble = Preamble;
                    MlmeSetTxPreamble(pAdapter, Rt802_11PreambleLong);
                }
                else
                {
                    Status = -EINVAL;
                    break;
                }
                DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_PREAMBLE (=%d)\n", Preamble));
            }
            break;
        case OID_802_11_WEP_STATUS:
            if (wrq->u.data.length != sizeof(NDIS_802_11_WEP_STATUS))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&WepStatus, wrq->u.data.pointer, wrq->u.data.length);
                // Since TKIP, AES, WEP are all supported. It should not have any invalid setting
                if (WepStatus <= Ndis802_11Encryption3KeyAbsent)
                {
                    if (pAdapter->StaCfg.WepStatus != WepStatus)
                    {
                        // Config has changed
                        pAdapter->bConfigChanged = TRUE;
                    }
                    pAdapter->StaCfg.WepStatus     = WepStatus;
                    pAdapter->StaCfg.OrigWepStatus = WepStatus;
                    pAdapter->StaCfg.PairCipher    = WepStatus;
                	pAdapter->StaCfg.GroupCipher   = WepStatus;
                }
                else
                {
                    Status  = -EINVAL;
                    break;
                }
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEP_STATUS (=%d)\n",WepStatus));
            }
            break;
        case OID_802_11_AUTHENTICATION_MODE:
            if (wrq->u.data.length != sizeof(NDIS_802_11_AUTHENTICATION_MODE))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&AuthMode, wrq->u.data.pointer, wrq->u.data.length);
                if (AuthMode > Ndis802_11AuthModeMax)
                {
                    Status  = -EINVAL;
                    break;
                }
                else
                {
                    if (pAdapter->StaCfg.AuthMode != AuthMode)
                    {
                        // Config has changed
                        pAdapter->bConfigChanged = TRUE;
                    }
                    pAdapter->StaCfg.AuthMode = AuthMode;
                }
                pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_AUTHENTICATION_MODE (=%d) \n",pAdapter->StaCfg.AuthMode));
            }
            break;
        case OID_802_11_INFRASTRUCTURE_MODE:
            if (wrq->u.data.length != sizeof(NDIS_802_11_NETWORK_INFRASTRUCTURE))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&BssType, wrq->u.data.pointer, wrq->u.data.length);

				if (BssType == Ndis802_11IBSS)
					Set_NetworkType_Proc(pAdapter, "Adhoc");
				else if (BssType == Ndis802_11Infrastructure)
					Set_NetworkType_Proc(pAdapter, "Infra");
				else if (BssType == Ndis802_11Monitor)
					Set_NetworkType_Proc(pAdapter, "Monitor");
				else
				{
					Status  = -EINVAL;
					DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_INFRASTRUCTURE_MODE (unknown)\n"));
				}
			}
			break;
	 case OID_802_11_REMOVE_WEP:
            DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_WEP\n"));
            if (wrq->u.data.length != sizeof(NDIS_802_11_KEY_INDEX))
            {
				Status = -EINVAL;
            }
            else
            {
				KeyIdx = *(NDIS_802_11_KEY_INDEX *) wrq->u.data.pointer;

				if (KeyIdx & 0x80000000)
				{
					// Should never set default bit when remove key
					Status = -EINVAL;
				}
				else
				{
					KeyIdx = KeyIdx & 0x0fffffff;
					if (KeyIdx >= 4){
						Status = -EINVAL;
					}
					else
					{
						pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = 0;
						pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_NONE;
						AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)KeyIdx);
					}
				}
            }
            break;
        case RT_OID_802_11_RESET_COUNTERS:
            NdisZeroMemory(&pAdapter->WlanCounters, sizeof(COUNTER_802_11));
            NdisZeroMemory(&pAdapter->Counters8023, sizeof(COUNTER_802_3));
            NdisZeroMemory(&pAdapter->RalinkCounters, sizeof(COUNTER_RALINK));
            pAdapter->Counters8023.RxNoBuffer   = 0;
			pAdapter->Counters8023.GoodReceives = 0;
			pAdapter->Counters8023.RxNoBuffer   = 0;
#ifdef RT2870
			pAdapter->BulkOutComplete	= 0;
			pAdapter->BulkOutCompleteOther= 0;
			pAdapter->BulkOutCompleteCancel = 0;
			pAdapter->BulkOutReq = 0;
			pAdapter->BulkInReq= 0;
			pAdapter->BulkInComplete = 0;
			pAdapter->BulkInCompleteFail = 0;
#endif // RT2870 //
            DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_RESET_COUNTERS \n"));
            break;
        case OID_802_11_RTS_THRESHOLD:
            if (wrq->u.data.length != sizeof(NDIS_802_11_RTS_THRESHOLD))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&RtsThresh, wrq->u.data.pointer, wrq->u.data.length);
                if (RtsThresh > MAX_RTS_THRESHOLD)
                    Status  = -EINVAL;
                else
                    pAdapter->CommonCfg.RtsThreshold = (USHORT)RtsThresh;
            }
            DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_RTS_THRESHOLD (=%ld)\n",RtsThresh));
            break;
        case OID_802_11_FRAGMENTATION_THRESHOLD:
            if (wrq->u.data.length != sizeof(NDIS_802_11_FRAGMENTATION_THRESHOLD))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&FragThresh, wrq->u.data.pointer, wrq->u.data.length);
                pAdapter->CommonCfg.bUseZeroToDisableFragment = FALSE;
                if (FragThresh > MAX_FRAG_THRESHOLD || FragThresh < MIN_FRAG_THRESHOLD)
                {
                    if (FragThresh == 0)
                    {
                        pAdapter->CommonCfg.FragmentThreshold = MAX_FRAG_THRESHOLD;
                        pAdapter->CommonCfg.bUseZeroToDisableFragment = TRUE;
                    }
                    else
                        Status  = -EINVAL;
                }
                else
                    pAdapter->CommonCfg.FragmentThreshold = (USHORT)FragThresh;
            }
            DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_FRAGMENTATION_THRESHOLD (=%ld) \n",FragThresh));
            break;
        case OID_802_11_POWER_MODE:
            if (wrq->u.data.length != sizeof(NDIS_802_11_POWER_MODE))
                Status = -EINVAL;
            else
            {
                Status = copy_from_user(&PowerMode, wrq->u.data.pointer, wrq->u.data.length);
                if (PowerMode == Ndis802_11PowerModeCAM)
                	Set_PSMode_Proc(pAdapter, "CAM");
                else if (PowerMode == Ndis802_11PowerModeMAX_PSP)
                	Set_PSMode_Proc(pAdapter, "Max_PSP");
                else if (PowerMode == Ndis802_11PowerModeFast_PSP)
					Set_PSMode_Proc(pAdapter, "Fast_PSP");
                else if (PowerMode == Ndis802_11PowerModeLegacy_PSP)
					Set_PSMode_Proc(pAdapter, "Legacy_PSP");
                else
                    Status = -EINVAL;
            }
            DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_POWER_MODE (=%d)\n",PowerMode));
            break;
         case RT_OID_802_11_TX_POWER_LEVEL_1:
			if (wrq->u.data.length  < sizeof(ULONG))
				Status = -EINVAL;
			else
			{
				Status = copy_from_user(&PowerTemp, wrq->u.data.pointer, wrq->u.data.length);
				if (PowerTemp > 100)
					PowerTemp = 0xffffffff;  // AUTO
				pAdapter->CommonCfg.TxPowerDefault = PowerTemp; //keep current setting.
					pAdapter->CommonCfg.TxPowerPercentage = pAdapter->CommonCfg.TxPowerDefault;
                DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_TX_POWER_LEVEL_1 (=%ld)\n", pAdapter->CommonCfg.TxPowerPercentage));
			}
	        break;
		case OID_802_11_NETWORK_TYPE_IN_USE:
			if (wrq->u.data.length != sizeof(NDIS_802_11_NETWORK_TYPE))
				Status = -EINVAL;
			else
			{
				Status = copy_from_user(&NetType, wrq->u.data.pointer, wrq->u.data.length);

				if (NetType == Ndis802_11DS)
					RTMPSetPhyMode(pAdapter, PHY_11B);
				else if (NetType == Ndis802_11OFDM24)
					RTMPSetPhyMode(pAdapter, PHY_11BG_MIXED);
				else if (NetType == Ndis802_11OFDM5)
					RTMPSetPhyMode(pAdapter, PHY_11A);
				else
					Status = -EINVAL;

				if (Status == NDIS_STATUS_SUCCESS)
					SetCommonHT(pAdapter);

                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_NETWORK_TYPE_IN_USE (=%d)\n",NetType));
		    }
			break;
        // For WPA PSK PMK key
        case RT_OID_802_11_ADD_WPA:
            pKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
            if(pKey == NULL)
            {
                Status = -ENOMEM;
                break;
            }

            Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
            if (pKey->Length != wrq->u.data.length)
            {
                Status  = -EINVAL;
                DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA, Failed!!\n"));
            }
            else
            {
                if ((pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPAPSK) &&
				    (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPA2PSK) &&
				    (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone) )
                {
                    Status = -EOPNOTSUPP;
                    DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA, Failed!! [AuthMode != WPAPSK/WPA2PSK/WPANONE]\n"));
                }
                else if ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
						 (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
						 (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPANone) )     // Only for WPA PSK mode
				{
                    NdisMoveMemory(pAdapter->StaCfg.PMK, &pKey->KeyMaterial, pKey->KeyLength);
                    // Use RaConfig as PSK agent.
                    // Start STA supplicant state machine
                    if (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone)
                        pAdapter->StaCfg.WpaState = SS_START;

                    DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
                }
                else
                {
                    pAdapter->StaCfg.WpaState = SS_NOTUSE;
                    DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
                }
            }
            kfree(pKey);
            break;
        case OID_802_11_REMOVE_KEY:
            pRemoveKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
            if(pRemoveKey == NULL)
            {
                Status = -ENOMEM;
                break;
            }

            Status = copy_from_user(pRemoveKey, wrq->u.data.pointer, wrq->u.data.length);
            if (pRemoveKey->Length != wrq->u.data.length)
            {
                Status  = -EINVAL;
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!\n"));
            }
            else
            {
                if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
                {
                    RTMPWPARemoveKeyProc(pAdapter, pRemoveKey);
                    DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Remove WPA Key!!\n"));
                }
                else
                {
                    KeyIdx = pRemoveKey->KeyIndex;

                    if (KeyIdx & 0x80000000)
                    {
                        // Should never set default bit when remove key
                        Status  = -EINVAL;
                        DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!(Should never set default bit when remove key)\n"));
                    }
                    else
                    {
                        KeyIdx = KeyIdx & 0x0fffffff;
                        if (KeyIdx > 3)
                        {
                            Status  = -EINVAL;
                            DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!(KeyId[%d] out of range)\n", KeyIdx));
                        }
                        else
                        {
                            pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = 0;
                            pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_NONE;
                            AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)KeyIdx);
                            DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY (id=0x%x, Len=%d-byte)\n", pRemoveKey->KeyIndex, pRemoveKey->Length));
                        }
                    }
                }
            }
            kfree(pRemoveKey);
            break;
        // New for WPA
        case OID_802_11_ADD_KEY:
            pKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
            if(pKey == NULL)
            {
                Status = -ENOMEM;
                break;
            }
            Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
            if (pKey->Length != wrq->u.data.length)
            {
                Status  = -EINVAL;
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_KEY, Failed!!\n"));
            }
            else
            {
                RTMPAddKey(pAdapter, pKey);
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_KEY (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
            }
            kfree(pKey);
            break;
        case OID_802_11_CONFIGURATION:
            if (wrq->u.data.length != sizeof(NDIS_802_11_CONFIGURATION))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&Config, wrq->u.data.pointer, wrq->u.data.length);
                pConfig = &Config;

                if ((pConfig->BeaconPeriod >= 20) && (pConfig->BeaconPeriod <=400))
                     pAdapter->CommonCfg.BeaconPeriod = (USHORT) pConfig->BeaconPeriod;

                pAdapter->StaActive.AtimWin = (USHORT) pConfig->ATIMWindow;
                MAP_KHZ_TO_CHANNEL_ID(pConfig->DSConfig, pAdapter->CommonCfg.Channel);
                //
				// Save the channel on MlmeAux for CntlOidRTBssidProc used.
				//
				pAdapter->MlmeAux.Channel = pAdapter->CommonCfg.Channel;

                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_CONFIGURATION (BeacnPeriod=%ld,AtimW=%ld,Ch=%d)\n",
                    pConfig->BeaconPeriod, pConfig->ATIMWindow, pAdapter->CommonCfg.Channel));
                // Config has changed
                pAdapter->bConfigChanged = TRUE;
            }
            break;
		case RT_OID_802_11_SET_HT_PHYMODE:
			if (wrq->u.data.length	!= sizeof(OID_SET_HT_PHYMODE))
				Status = -EINVAL;
			else
			{
			    POID_SET_HT_PHYMODE	pHTPhyMode = &HT_PhyMode;

				Status = copy_from_user(&HT_PhyMode, wrq->u.data.pointer, wrq->u.data.length);
				DBGPRINT(RT_DEBUG_TRACE, ("Set::pHTPhyMode	(PhyMode = %d,TransmitNo = %d, HtMode =	%d,	ExtOffset =	%d , MCS = %d, BW =	%d,	STBC = %d, SHORTGI = %d) \n",
				pHTPhyMode->PhyMode, pHTPhyMode->TransmitNo,pHTPhyMode->HtMode,pHTPhyMode->ExtOffset,
				pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC,	pHTPhyMode->SHORTGI));
				if (pAdapter->CommonCfg.PhyMode	>= PHY_11ABGN_MIXED)
					RTMPSetHT(pAdapter,	pHTPhyMode);
			}
			DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_HT_PHYMODE(MCS=%d,BW=%d,SGI=%d,STBC=%d)\n",
				pAdapter->StaCfg.HTPhyMode.field.MCS, pAdapter->StaCfg.HTPhyMode.field.BW, pAdapter->StaCfg.HTPhyMode.field.ShortGI,
				pAdapter->StaCfg.HTPhyMode.field.STBC));
			break;
		case RT_OID_802_11_SET_APSD_SETTING:
			if (wrq->u.data.length != sizeof(ULONG))
				Status = -EINVAL;
			else
			{
				ULONG apsd ;
				Status = copy_from_user(&apsd, wrq->u.data.pointer,	wrq->u.data.length);

				/*-------------------------------------------------------------------
				|B31~B7	|	B6~B5	 |	 B4	 |	 B3	 |	B2	 |	B1	 |	   B0		|
				---------------------------------------------------------------------
				| Rsvd	| Max SP Len | AC_VO | AC_VI | AC_BK | AC_BE | APSD	Capable	|
				---------------------------------------------------------------------*/
				pAdapter->CommonCfg.bAPSDCapable = (apsd & 0x00000001) ? TRUE :	FALSE;
				pAdapter->CommonCfg.bAPSDAC_BE = ((apsd	& 0x00000002) >> 1)	? TRUE : FALSE;
				pAdapter->CommonCfg.bAPSDAC_BK = ((apsd	& 0x00000004) >> 2)	? TRUE : FALSE;
				pAdapter->CommonCfg.bAPSDAC_VI = ((apsd	& 0x00000008) >> 3)	? TRUE : FALSE;
				pAdapter->CommonCfg.bAPSDAC_VO = ((apsd	& 0x00000010) >> 4)	? TRUE : FALSE;
				pAdapter->CommonCfg.MaxSPLength	= (UCHAR)((apsd	& 0x00000060) >> 5);

				DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_APSD_SETTING (apsd=0x%lx, APSDCap=%d, [BE,BK,VI,VO]=[%d/%d/%d/%d],	MaxSPLen=%d)\n", apsd, pAdapter->CommonCfg.bAPSDCapable,
					pAdapter->CommonCfg.bAPSDAC_BE,	pAdapter->CommonCfg.bAPSDAC_BK,	pAdapter->CommonCfg.bAPSDAC_VI,	pAdapter->CommonCfg.bAPSDAC_VO,	pAdapter->CommonCfg.MaxSPLength));
			}
			break;

		case RT_OID_802_11_SET_APSD_PSM:
			if (wrq->u.data.length	!= sizeof(ULONG))
				Status = -EINVAL;
			else
			{
				// Driver needs	to notify AP when PSM changes
				Status = copy_from_user(&pAdapter->CommonCfg.bAPSDForcePowerSave, wrq->u.data.pointer, wrq->u.data.length);
				if (pAdapter->CommonCfg.bAPSDForcePowerSave	!= pAdapter->StaCfg.Psm)
				{
					MlmeSetPsmBit(pAdapter,	pAdapter->CommonCfg.bAPSDForcePowerSave);
					RTMPSendNullFrame(pAdapter,	pAdapter->CommonCfg.TxRate,	TRUE);
				}
				DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_APSD_PSM (bAPSDForcePowerSave:%d)\n",	pAdapter->CommonCfg.bAPSDForcePowerSave));
			}
			break;

		case RT_OID_802_11_SET_WMM:
			if (wrq->u.data.length	!= sizeof(BOOLEAN))
				Status = -EINVAL;
			else
			{
				Status = copy_from_user(&pAdapter->CommonCfg.bWmmCapable, wrq->u.data.pointer, wrq->u.data.length);
				DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_WMM (=%d)	\n", pAdapter->CommonCfg.bWmmCapable));
			}
			break;

		case OID_802_11_DISASSOCIATE:
			//
			// Set NdisRadioStateOff to	TRUE, instead of called	MlmeRadioOff.
			// Later on, NDIS_802_11_BSSID_LIST_EX->NumberOfItems should be	0
			// when	query OID_802_11_BSSID_LIST.
			//
			// TRUE:  NumberOfItems	will set to	0.
			// FALSE: NumberOfItems	no change.
			//
			pAdapter->CommonCfg.NdisRadioStateOff =	TRUE;
			// Set to immediately send the media disconnect	event
			pAdapter->MlmeAux.CurrReqIsFromNdis	= TRUE;
			DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DISASSOCIATE	\n"));

			if (INFRA_ON(pAdapter))
			{
				if (pAdapter->Mlme.CntlMachine.CurrState !=	CNTL_IDLE)
				{
					RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
					DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME	busy, reset	MLME state machine !!!\n"));
				}

				MlmeEnqueue(pAdapter,
					MLME_CNTL_STATE_MACHINE,
					OID_802_11_DISASSOCIATE,
					0,
					NULL);

				StateMachineTouched	= TRUE;
			}
			break;
		case RT_OID_802_11_SET_IMME_BA_CAP:
				if (wrq->u.data.length != sizeof(OID_BACAP_STRUC))
					Status = -EINVAL;
				else
				{
					OID_BACAP_STRUC Orde ;
					Status = copy_from_user(&Orde, wrq->u.data.pointer, wrq->u.data.length);
					if (Orde.Policy > BA_NOTUSE)
					{
						Status = NDIS_STATUS_INVALID_DATA;
					}
					else if (Orde.Policy == BA_NOTUSE)
					{
						pAdapter->CommonCfg.BACapability.field.Policy = BA_NOTUSE;
						pAdapter->CommonCfg.BACapability.field.MpduDensity = Orde.MpduDensity;
						pAdapter->CommonCfg.DesiredHtPhy.MpduDensity = Orde.MpduDensity;
						pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable = Orde.AmsduEnable;
						pAdapter->CommonCfg.DesiredHtPhy.AmsduSize= Orde.AmsduSize;
						pAdapter->CommonCfg.DesiredHtPhy.MimoPs= Orde.MMPSmode;
						pAdapter->CommonCfg.BACapability.field.MMPSmode = Orde.MMPSmode;
						// UPdata to HT IE
						pAdapter->CommonCfg.HtCapability.HtCapInfo.MimoPs = Orde.MMPSmode;
						pAdapter->CommonCfg.HtCapability.HtCapInfo.AMsduSize = Orde.AmsduSize;
						pAdapter->CommonCfg.HtCapability.HtCapParm.MpduDensity = Orde.MpduDensity;
					}
					else
					{
                        pAdapter->CommonCfg.BACapability.field.AutoBA = Orde.AutoBA;
						pAdapter->CommonCfg.BACapability.field.Policy = IMMED_BA; // we only support immediate BA.
						pAdapter->CommonCfg.BACapability.field.MpduDensity = Orde.MpduDensity;
						pAdapter->CommonCfg.DesiredHtPhy.MpduDensity = Orde.MpduDensity;
						pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable = Orde.AmsduEnable;
						pAdapter->CommonCfg.DesiredHtPhy.AmsduSize= Orde.AmsduSize;
						pAdapter->CommonCfg.DesiredHtPhy.MimoPs = Orde.MMPSmode;
						pAdapter->CommonCfg.BACapability.field.MMPSmode = Orde.MMPSmode;

						// UPdata to HT IE
						pAdapter->CommonCfg.HtCapability.HtCapInfo.MimoPs = Orde.MMPSmode;
						pAdapter->CommonCfg.HtCapability.HtCapInfo.AMsduSize = Orde.AmsduSize;
						pAdapter->CommonCfg.HtCapability.HtCapParm.MpduDensity = Orde.MpduDensity;

						if (pAdapter->CommonCfg.BACapability.field.RxBAWinLimit > MAX_RX_REORDERBUF)
							pAdapter->CommonCfg.BACapability.field.RxBAWinLimit = MAX_RX_REORDERBUF;

					}

					pAdapter->CommonCfg.REGBACapability.word = pAdapter->CommonCfg.BACapability.word;
					DBGPRINT(RT_DEBUG_TRACE, ("Set::(Orde.AutoBA = %d) (Policy=%d)(ReBAWinLimit=%d)(TxBAWinLimit=%d)(AutoMode=%d)\n",Orde.AutoBA, pAdapter->CommonCfg.BACapability.field.Policy,
						pAdapter->CommonCfg.BACapability.field.RxBAWinLimit,pAdapter->CommonCfg.BACapability.field.TxBAWinLimit, pAdapter->CommonCfg.BACapability.field.AutoBA));
					DBGPRINT(RT_DEBUG_TRACE, ("Set::(MimoPs = %d)(AmsduEnable = %d) (AmsduSize=%d)(MpduDensity=%d)\n",pAdapter->CommonCfg.DesiredHtPhy.MimoPs, pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable,
						pAdapter->CommonCfg.DesiredHtPhy.AmsduSize, pAdapter->CommonCfg.DesiredHtPhy.MpduDensity));
				}

				break;
		case RT_OID_802_11_ADD_IMME_BA:
			DBGPRINT(RT_DEBUG_TRACE, (" Set :: RT_OID_802_11_ADD_IMME_BA \n"));
			if (wrq->u.data.length != sizeof(OID_ADD_BA_ENTRY))
					Status = -EINVAL;
			else
			{
				UCHAR		        index;
				OID_ADD_BA_ENTRY    BA;
				MAC_TABLE_ENTRY     *pEntry;

				Status = copy_from_user(&BA, wrq->u.data.pointer, wrq->u.data.length);
				if (BA.TID > 15)
				{
					Status = NDIS_STATUS_INVALID_DATA;
					break;
				}
				else
				{
					//BATableInsertEntry
					//As ad-hoc mode, BA pair is not limited to only BSSID. so add via OID.
					index = BA.TID;
					// in ad hoc mode, when adding BA pair, we should insert this entry into MACEntry too
					pEntry = MacTableLookup(pAdapter, BA.MACAddr);
					if (!pEntry)
					{
						DBGPRINT(RT_DEBUG_TRACE, ("RT_OID_802_11_ADD_IMME_BA. break on no connection.----:%x:%x\n", BA.MACAddr[4], BA.MACAddr[5]));
						break;
					}
					if (BA.IsRecipient == FALSE)
					{
					    if (pEntry->bIAmBadAtheros == TRUE)
							pAdapter->CommonCfg.BACapability.field.RxBAWinLimit = 0x10;

						BAOriSessionSetUp(pAdapter, pEntry, index, 0, 100, TRUE);
					}
					else
					{
						//BATableInsertEntry(pAdapter, pEntry->Aid, BA.MACAddr, 0, 0xffff, BA.TID, BA.nMSDU, BA.IsRecipient);
					}

					DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_IMME_BA. Rec = %d. Mac = %x:%x:%x:%x:%x:%x . \n",
						BA.IsRecipient, BA.MACAddr[0], BA.MACAddr[1], BA.MACAddr[2], BA.MACAddr[2]
						, BA.MACAddr[4], BA.MACAddr[5]));
				}
			}
			break;

		case RT_OID_802_11_TEAR_IMME_BA:
			DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA \n"));
			if (wrq->u.data.length != sizeof(OID_ADD_BA_ENTRY))
					Status = -EINVAL;
			else
			{
				POID_ADD_BA_ENTRY	pBA;
				MAC_TABLE_ENTRY *pEntry;

				pBA = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);

				if (pBA == NULL)
				{
					DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA kmalloc() can't allocate enough memory\n"));
					Status = NDIS_STATUS_FAILURE;
				}
				else
				{
					Status = copy_from_user(pBA, wrq->u.data.pointer, wrq->u.data.length);
					DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA(TID=%d, bAllTid=%d)\n", pBA->TID, pBA->bAllTid));

					if (!pBA->bAllTid && (pBA->TID > NUM_OF_TID))
					{
						Status = NDIS_STATUS_INVALID_DATA;
						break;
					}

					if (pBA->IsRecipient == FALSE)
					{
						pEntry = MacTableLookup(pAdapter, pBA->MACAddr);
						DBGPRINT(RT_DEBUG_TRACE, (" pBA->IsRecipient == FALSE\n"));
						if (pEntry)
						{
							DBGPRINT(RT_DEBUG_TRACE, (" pBA->pEntry\n"));
							BAOriSessionTearDown(pAdapter, pEntry->Aid, pBA->TID, FALSE, TRUE);
						}
						else
							DBGPRINT(RT_DEBUG_TRACE, ("Set :: Not found pEntry \n"));
					}
					else
					{
						pEntry = MacTableLookup(pAdapter, pBA->MACAddr);
						if (pEntry)
						{
							BARecSessionTearDown( pAdapter, (UCHAR)pEntry->Aid, pBA->TID, TRUE);
						}
						else
							DBGPRINT(RT_DEBUG_TRACE, ("Set :: Not found pEntry \n"));
					}
					kfree(pBA);
				}
            }
            break;
        // For WPA_SUPPLICANT to set static wep key
    	case OID_802_11_ADD_WEP:
    	    pWepKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);

    	    if(pWepKey == NULL)
            {
                Status = -ENOMEM;
				DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed!!\n"));
                break;
            }
            Status = copy_from_user(pWepKey, wrq->u.data.pointer, wrq->u.data.length);
            if (Status)
            {
                Status  = -EINVAL;
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed (length mismatch)!!\n"));
            }
            else
            {
		        KeyIdx = pWepKey->KeyIndex & 0x0fffffff;
                // KeyIdx must be 0 ~ 3
                if (KeyIdx > 4)
    			{
                    Status  = -EINVAL;
                    DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed (KeyIdx must be smaller than 4)!!\n"));
                }
                else
                {
                    UCHAR CipherAlg = 0;
                    PUCHAR Key;

                    // set key material and key length
                    NdisZeroMemory(pAdapter->SharedKey[BSS0][KeyIdx].Key, 16);
                    pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = (UCHAR) pWepKey->KeyLength;
                    NdisMoveMemory(pAdapter->SharedKey[BSS0][KeyIdx].Key, &pWepKey->KeyMaterial, pWepKey->KeyLength);

                    switch(pWepKey->KeyLength)
                    {
                        case 5:
                            CipherAlg = CIPHER_WEP64;
                            break;
                        case 13:
                            CipherAlg = CIPHER_WEP128;
                            break;
                        default:
                            DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, only support CIPHER_WEP64(len:5) & CIPHER_WEP128(len:13)!!\n"));
                            Status = -EINVAL;
                            break;
                    }
                    pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CipherAlg;

                    // Default key for tx (shared key)
                    if (pWepKey->KeyIndex & 0x80000000)
                    {
                        // set key material and key length
                        NdisZeroMemory(pAdapter->StaCfg.DesireSharedKey[KeyIdx].Key, 16);
                        pAdapter->StaCfg.DesireSharedKey[KeyIdx].KeyLen = (UCHAR) pWepKey->KeyLength;
                        NdisMoveMemory(pAdapter->StaCfg.DesireSharedKey[KeyIdx].Key, &pWepKey->KeyMaterial, pWepKey->KeyLength);
                        pAdapter->StaCfg.DesireSharedKeyId = KeyIdx;
                        pAdapter->StaCfg.DesireSharedKey[KeyIdx].CipherAlg = CipherAlg;
                        pAdapter->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
                    }
#ifndef RT30xx
#ifdef RT2860
					if ((pAdapter->StaCfg.WpaSupplicantUP != 0) &&
#endif
#ifdef RT2870
					if ((pAdapter->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE) &&
#endif
						(pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA))
					{
						Key = pWepKey->KeyMaterial;

						// Set Group key material to Asic
    					AsicAddSharedKeyEntry(pAdapter, BSS0, KeyIdx, CipherAlg, Key, NULL, NULL);

						// Update WCID attribute table and IVEIV table for this group key table
						RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, NULL);

						STA_PORT_SECURED(pAdapter);

        				// Indicate Connected for GUI
        				pAdapter->IndicateMediaState = NdisMediaStateConnected;
					}
                    else if (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED)
#endif
#ifdef RT30xx
                    if (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED)
#endif
                    {
                        Key = pAdapter->SharedKey[BSS0][KeyIdx].Key;

                        // Set key material and cipherAlg to Asic
        				AsicAddSharedKeyEntry(pAdapter, BSS0, KeyIdx, CipherAlg, Key, NULL, NULL);

                        if (pWepKey->KeyIndex & 0x80000000)
                        {
                            PMAC_TABLE_ENTRY pEntry = &pAdapter->MacTab.Content[BSSID_WCID];
                            // Assign group key info
    						RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, NULL);
    						// Assign pairwise key info
    						RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, pEntry);
                        }
                    }
					DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP (id=0x%x, Len=%d-byte), %s\n", pWepKey->KeyIndex, pWepKey->KeyLength, (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED) ? "Port Secured":"Port NOT Secured"));
				}
            }
            kfree(pWepKey);
            break;
	    case OID_SET_COUNTERMEASURES:
            if (wrq->u.data.length != sizeof(int))
                Status  = -EINVAL;
            else
            {
                int enabled = 0;
                Status = copy_from_user(&enabled, wrq->u.data.pointer, wrq->u.data.length);
                if (enabled == 1)
                    pAdapter->StaCfg.bBlockAssoc = TRUE;
                else
                    // WPA MIC error should block association attempt for 60 seconds
                    pAdapter->StaCfg.bBlockAssoc = FALSE;
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_SET_COUNTERMEASURES bBlockAssoc=%s\n", pAdapter->StaCfg.bBlockAssoc ? "TRUE":"FALSE"));
            }
	        break;
        case RT_OID_WPA_SUPPLICANT_SUPPORT:
			if (wrq->u.data.length != sizeof(UCHAR))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&wpa_supplicant_enable, wrq->u.data.pointer, wrq->u.data.length);
    			pAdapter->StaCfg.WpaSupplicantUP = wpa_supplicant_enable;
    			DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_WPA_SUPPLICANT_SUPPORT (=%d)\n", pAdapter->StaCfg.WpaSupplicantUP));
			}
            break;
        case OID_802_11_DEAUTHENTICATION:
            if (wrq->u.data.length != sizeof(MLME_DEAUTH_REQ_STRUCT))
                Status  = -EINVAL;
            else
            {
                MLME_DEAUTH_REQ_STRUCT      *pInfo;
				MLME_QUEUE_ELEM *MsgElem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);

                pInfo = (MLME_DEAUTH_REQ_STRUCT *) MsgElem->Msg;
                Status = copy_from_user(pInfo, wrq->u.data.pointer, wrq->u.data.length);
                MlmeDeauthReqAction(pAdapter, MsgElem);
				kfree(MsgElem);

                if (INFRA_ON(pAdapter))
                {
                    LinkDown(pAdapter, FALSE);
                    pAdapter->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
                }
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DEAUTHENTICATION (Reason=%d)\n", pInfo->Reason));
            }
            break;
        case OID_802_11_DROP_UNENCRYPTED:
            if (wrq->u.data.length != sizeof(int))
                Status  = -EINVAL;
            else
            {
                int enabled = 0;
                Status = copy_from_user(&enabled, wrq->u.data.pointer, wrq->u.data.length);
                if (enabled == 1)
                    pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
                else
                    pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
				NdisAcquireSpinLock(&pAdapter->MacTabLock);
				pAdapter->MacTab.Content[BSSID_WCID].PortSecured = pAdapter->StaCfg.PortSecured;
				NdisReleaseSpinLock(&pAdapter->MacTabLock);
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DROP_UNENCRYPTED (=%d)\n", enabled));
            }
            break;
        case OID_802_11_SET_IEEE8021X:
            if (wrq->u.data.length != sizeof(BOOLEAN))
                Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&IEEE8021xState, wrq->u.data.pointer, wrq->u.data.length);
		        pAdapter->StaCfg.IEEE8021X = IEEE8021xState;
                DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SET_IEEE8021X (=%d)\n", IEEE8021xState));
            }
            break;
        case OID_802_11_SET_IEEE8021X_REQUIRE_KEY:
			if (wrq->u.data.length != sizeof(BOOLEAN))
				 Status  = -EINVAL;
            else
            {
                Status = copy_from_user(&IEEE8021x_required_keys, wrq->u.data.pointer, wrq->u.data.length);
				pAdapter->StaCfg.IEEE8021x_required_keys = IEEE8021x_required_keys;
				DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SET_IEEE8021X_REQUIRE_KEY (%d)\n", IEEE8021x_required_keys));
			}
			break;
        case OID_802_11_PMKID:
	        pPmkId = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);

	        if(pPmkId == NULL) {
                Status = -ENOMEM;
                break;
            }
            Status = copy_from_user(pPmkId, wrq->u.data.pointer, wrq->u.data.length);

	        // check the PMKID information
	        if (pPmkId->BSSIDInfoCount == 0)
                NdisZeroMemory(pAdapter->StaCfg.SavedPMK, sizeof(BSSID_INFO)*PMKID_NO);
	        else
	        {
		        PBSSID_INFO	pBssIdInfo;
		        UINT		BssIdx;
		        UINT		CachedIdx;

		        for (BssIdx = 0; BssIdx < pPmkId->BSSIDInfoCount; BssIdx++)
		        {
			        // point to the indexed BSSID_INFO structure
			        pBssIdInfo = (PBSSID_INFO) ((PUCHAR) pPmkId + 2 * sizeof(UINT) + BssIdx * sizeof(BSSID_INFO));
			        // Find the entry in the saved data base.
			        for (CachedIdx = 0; CachedIdx < pAdapter->StaCfg.SavedPMKNum; CachedIdx++)
			        {
				        // compare the BSSID
				        if (NdisEqualMemory(pBssIdInfo->BSSID, pAdapter->StaCfg.SavedPMK[CachedIdx].BSSID, sizeof(NDIS_802_11_MAC_ADDRESS)))
					        break;
			        }

			        // Found, replace it
			        if (CachedIdx < PMKID_NO)
			        {
				        DBGPRINT(RT_DEBUG_OFF, ("Update OID_802_11_PMKID, idx = %d\n", CachedIdx));
				        NdisMoveMemory(&pAdapter->StaCfg.SavedPMK[CachedIdx], pBssIdInfo, sizeof(BSSID_INFO));
				        pAdapter->StaCfg.SavedPMKNum++;
			        }
			        // Not found, replace the last one
			        else
			        {
				        // Randomly replace one
				        CachedIdx = (pBssIdInfo->BSSID[5] % PMKID_NO);
				        DBGPRINT(RT_DEBUG_OFF, ("Update OID_802_11_PMKID, idx = %d\n", CachedIdx));
				        NdisMoveMemory(&pAdapter->StaCfg.SavedPMK[CachedIdx], pBssIdInfo, sizeof(BSSID_INFO));
			        }
		        }
			}
			if(pPmkId)
				kfree(pPmkId);
	        break;
        default:
            DBGPRINT(RT_DEBUG_TRACE, ("Set::unknown IOCTL's subcmd = 0x%08x\n", cmd));
            Status = -EOPNOTSUPP;
            break;
    }


    return Status;
}

INT RTMPQueryInformation(
    IN  PRTMP_ADAPTER pAdapter,
    IN  OUT struct ifreq    *rq,
    IN  INT                 cmd)
{
    struct iwreq                        *wrq = (struct iwreq *) rq;
    NDIS_802_11_BSSID_LIST_EX           *pBssidList = NULL;
    PNDIS_WLAN_BSSID_EX                 pBss;
    NDIS_802_11_SSID                    Ssid;
    NDIS_802_11_CONFIGURATION           *pConfiguration = NULL;
    RT_802_11_LINK_STATUS               *pLinkStatus = NULL;
    RT_802_11_STA_CONFIG                *pStaConfig = NULL;
    NDIS_802_11_STATISTICS              *pStatistics = NULL;
    NDIS_802_11_RTS_THRESHOLD           RtsThresh;
    NDIS_802_11_FRAGMENTATION_THRESHOLD FragThresh;
    NDIS_802_11_POWER_MODE              PowerMode;
    NDIS_802_11_NETWORK_INFRASTRUCTURE  BssType;
    RT_802_11_PREAMBLE                  PreamType;
    NDIS_802_11_AUTHENTICATION_MODE     AuthMode;
    NDIS_802_11_WEP_STATUS              WepStatus;
    NDIS_MEDIA_STATE                    MediaState;
    ULONG                               BssBufSize, ulInfo=0, NetworkTypeList[4], apsd = 0;
    USHORT                              BssLen = 0;
    PUCHAR                              pBuf = NULL, pPtr;
    INT                                 Status = NDIS_STATUS_SUCCESS;
    UINT                                we_version_compiled;
    UCHAR                               i, Padding = 0;
    BOOLEAN                             RadioState;
	UCHAR	driverVersion[8];
    OID_SET_HT_PHYMODE			        *pHTPhyMode = NULL;

    switch(cmd)
    {
        case RT_OID_DEVICE_NAME:
            wrq->u.data.length = sizeof(STA_NIC_DEVICE_NAME);
            Status = copy_to_user(wrq->u.data.pointer, STA_NIC_DEVICE_NAME, wrq->u.data.length);
            break;
        case RT_OID_VERSION_INFO:
			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_VERSION_INFO \n"));
			wrq->u.data.length = 8*sizeof(UCHAR);
			sprintf(&driverVersion[0], "%s", STA_DRIVER_VERSION);
			driverVersion[7] = '\0';
			if (copy_to_user(wrq->u.data.pointer, &driverVersion, wrq->u.data.length))
            {
				Status = -EFAULT;
            }
            break;
        case OID_802_11_BSSID_LIST:
            if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
            {
            	/*
            	 * Still scanning, indicate the caller should try again.
            	 */
            	DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID_LIST (Still scanning)\n"));
				return -EAGAIN;
            }
            DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID_LIST (%d BSS returned)\n",pAdapter->ScanTab.BssNr));
			pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
            // Claculate total buffer size required
            BssBufSize = sizeof(ULONG);

            for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
            {
                // Align pointer to 4 bytes boundary.
                //Padding = 4 - (pAdapter->ScanTab.BssEntry[i].VarIELen & 0x0003);
                //if (Padding == 4)
                //    Padding = 0;
                BssBufSize += (sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen + Padding);
            }

            // For safety issue, we add 256 bytes just in case
            BssBufSize += 256;
            // Allocate the same size as passed from higher layer
            pBuf = kmalloc(BssBufSize, MEM_ALLOC_FLAG);
            if(pBuf == NULL)
            {
                Status = -ENOMEM;
                break;
            }
            // Init 802_11_BSSID_LIST_EX structure
            NdisZeroMemory(pBuf, BssBufSize);
            pBssidList = (PNDIS_802_11_BSSID_LIST_EX) pBuf;
            pBssidList->NumberOfItems = pAdapter->ScanTab.BssNr;

            // Calculate total buffer length
            BssLen = 4; // Consist of NumberOfItems
            // Point to start of NDIS_WLAN_BSSID_EX
            // pPtr = pBuf + sizeof(ULONG);
            pPtr = (PUCHAR) &pBssidList->Bssid[0];
            for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
            {
                pBss = (PNDIS_WLAN_BSSID_EX) pPtr;
                NdisMoveMemory(&pBss->MacAddress, &pAdapter->ScanTab.BssEntry[i].Bssid, MAC_ADDR_LEN);
                if ((pAdapter->ScanTab.BssEntry[i].Hidden == 1) && (pAdapter->StaCfg.bShowHiddenSSID == FALSE))
                {
                    //
					// We must return this SSID during 4way handshaking, otherwise Aegis will failed to parse WPA infomation
					// and then failed to send EAPOl farame.
					//
					if ((pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA) && (pAdapter->StaCfg.PortSecured != WPA_802_1X_PORT_SECURED))
					{
						pBss->Ssid.SsidLength = pAdapter->ScanTab.BssEntry[i].SsidLen;
						NdisMoveMemory(pBss->Ssid.Ssid, pAdapter->ScanTab.BssEntry[i].Ssid, pAdapter->ScanTab.BssEntry[i].SsidLen);
					}
					else
                    	pBss->Ssid.SsidLength = 0;
                }
                else
                {
                    pBss->Ssid.SsidLength = pAdapter->ScanTab.BssEntry[i].SsidLen;
                    NdisMoveMemory(pBss->Ssid.Ssid, pAdapter->ScanTab.BssEntry[i].Ssid, pAdapter->ScanTab.BssEntry[i].SsidLen);
                }
                pBss->Privacy = pAdapter->ScanTab.BssEntry[i].Privacy;
                pBss->Rssi = pAdapter->ScanTab.BssEntry[i].Rssi - pAdapter->BbpRssiToDbmDelta;
                pBss->NetworkTypeInUse = NetworkTypeInUseSanity(&pAdapter->ScanTab.BssEntry[i]);
                pBss->Configuration.Length = sizeof(NDIS_802_11_CONFIGURATION);
                pBss->Configuration.BeaconPeriod = pAdapter->ScanTab.BssEntry[i].BeaconPeriod;
                pBss->Configuration.ATIMWindow = pAdapter->ScanTab.BssEntry[i].AtimWin;

                MAP_CHANNEL_ID_TO_KHZ(pAdapter->ScanTab.BssEntry[i].Channel, pBss->Configuration.DSConfig);

                if (pAdapter->ScanTab.BssEntry[i].BssType == BSS_INFRA)
                    pBss->InfrastructureMode = Ndis802_11Infrastructure;
                else
                    pBss->InfrastructureMode = Ndis802_11IBSS;

                NdisMoveMemory(pBss->SupportedRates, pAdapter->ScanTab.BssEntry[i].SupRate, pAdapter->ScanTab.BssEntry[i].SupRateLen);
                NdisMoveMemory(pBss->SupportedRates + pAdapter->ScanTab.BssEntry[i].SupRateLen,
                               pAdapter->ScanTab.BssEntry[i].ExtRate,
                               pAdapter->ScanTab.BssEntry[i].ExtRateLen);

                if (pAdapter->ScanTab.BssEntry[i].VarIELen == 0)
                {
                    pBss->IELength = sizeof(NDIS_802_11_FIXED_IEs);
                    NdisMoveMemory(pBss->IEs, &pAdapter->ScanTab.BssEntry[i].FixIEs, sizeof(NDIS_802_11_FIXED_IEs));
                    pPtr = pPtr + sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs);
                }
                else
                {
                    pBss->IELength = (ULONG)(sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen);
                    pPtr = pPtr + sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs);
                    NdisMoveMemory(pBss->IEs, &pAdapter->ScanTab.BssEntry[i].FixIEs, sizeof(NDIS_802_11_FIXED_IEs));
                    NdisMoveMemory(pBss->IEs + sizeof(NDIS_802_11_FIXED_IEs), pAdapter->ScanTab.BssEntry[i].VarIEs, pAdapter->ScanTab.BssEntry[i].VarIELen);
                    pPtr += pAdapter->ScanTab.BssEntry[i].VarIELen;
                }
                pBss->Length = (ULONG)(sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen + Padding);

#if WIRELESS_EXT < 17
                if ((BssLen + pBss->Length) < wrq->u.data.length)
                BssLen += pBss->Length;
                else
                {
                    pBssidList->NumberOfItems = i;
                    break;
                }
#else
                BssLen += pBss->Length;
#endif
            }

#if WIRELESS_EXT < 17
            wrq->u.data.length = BssLen;
#else
            if (BssLen > wrq->u.data.length)
            {
                kfree(pBssidList);
                return -E2BIG;
            }
            else
                wrq->u.data.length = BssLen;
#endif
            Status = copy_to_user(wrq->u.data.pointer, pBssidList, BssLen);
            kfree(pBssidList);
            break;
        case OID_802_3_CURRENT_ADDRESS:
            wrq->u.data.length = MAC_ADDR_LEN;
            Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
            break;
        case OID_GEN_MEDIA_CONNECT_STATUS:
            if (pAdapter->IndicateMediaState == NdisMediaStateConnected)
                MediaState = NdisMediaStateConnected;
            else
                MediaState = NdisMediaStateDisconnected;

            wrq->u.data.length = sizeof(NDIS_MEDIA_STATE);
            Status = copy_to_user(wrq->u.data.pointer, &MediaState, wrq->u.data.length);
            break;
        case OID_802_11_BSSID:
            if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
            {
                Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Bssid, sizeof(NDIS_802_11_MAC_ADDRESS));

            }
            else
            {
                DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID(=EMPTY)\n"));
                Status = -ENOTCONN;
            }
            break;
        case OID_802_11_SSID:
			NdisZeroMemory(&Ssid, sizeof(NDIS_802_11_SSID));
			NdisZeroMemory(Ssid.Ssid, MAX_LEN_OF_SSID);
            Ssid.SsidLength = pAdapter->CommonCfg.SsidLen;
			memcpy(Ssid.Ssid, pAdapter->CommonCfg.Ssid,	Ssid.SsidLength);
            wrq->u.data.length = sizeof(NDIS_802_11_SSID);
            Status = copy_to_user(wrq->u.data.pointer, &Ssid, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_SSID (Len=%d, ssid=%s)\n", Ssid.SsidLength,Ssid.Ssid));
            break;
        case RT_OID_802_11_QUERY_LINK_STATUS:
            pLinkStatus = (RT_802_11_LINK_STATUS *) kmalloc(sizeof(RT_802_11_LINK_STATUS), MEM_ALLOC_FLAG);
            if (pLinkStatus)
            {
                pLinkStatus->CurrTxRate = RateIdTo500Kbps[pAdapter->CommonCfg.TxRate];   // unit : 500 kbps
                pLinkStatus->ChannelQuality = pAdapter->Mlme.ChannelQuality;
                pLinkStatus->RxByteCount = pAdapter->RalinkCounters.ReceivedByteCount;
                pLinkStatus->TxByteCount = pAdapter->RalinkCounters.TransmittedByteCount;
        		pLinkStatus->CentralChannel = pAdapter->CommonCfg.CentralChannel;
                wrq->u.data.length = sizeof(RT_802_11_LINK_STATUS);
                Status = copy_to_user(wrq->u.data.pointer, pLinkStatus, wrq->u.data.length);
                kfree(pLinkStatus);
                DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LINK_STATUS\n"));
            }
            else
            {
                DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LINK_STATUS(kmalloc failed)\n"));
                Status = -EFAULT;
            }
            break;
        case OID_802_11_CONFIGURATION:
            pConfiguration = (NDIS_802_11_CONFIGURATION *) kmalloc(sizeof(NDIS_802_11_CONFIGURATION), MEM_ALLOC_FLAG);
            if (pConfiguration)
            {
                pConfiguration->Length = sizeof(NDIS_802_11_CONFIGURATION);
                pConfiguration->BeaconPeriod = pAdapter->CommonCfg.BeaconPeriod;
                pConfiguration->ATIMWindow = pAdapter->StaActive.AtimWin;
                MAP_CHANNEL_ID_TO_KHZ(pAdapter->CommonCfg.Channel, pConfiguration->DSConfig);
                wrq->u.data.length = sizeof(NDIS_802_11_CONFIGURATION);
                Status = copy_to_user(wrq->u.data.pointer, pConfiguration, wrq->u.data.length);
                DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CONFIGURATION(BeaconPeriod=%ld,AtimW=%ld,Channel=%d) \n",
                                        pConfiguration->BeaconPeriod, pConfiguration->ATIMWindow, pAdapter->CommonCfg.Channel));
				kfree(pConfiguration);
            }
            else
            {
                DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CONFIGURATION(kmalloc failed)\n"));
                Status = -EFAULT;
            }
            break;
		case RT_OID_802_11_SNR_0:
			if ((pAdapter->StaCfg.LastSNR0 > 0))
			{
				ulInfo = ((0xeb	- pAdapter->StaCfg.LastSNR0) * 3) /	16 ;
				wrq->u.data.length = sizeof(ulInfo);
				Status = copy_to_user(wrq->u.data.pointer, &ulInfo,	wrq->u.data.length);
				DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_SNR_0(0x=%lx)\n", ulInfo));
			}
            else
			    Status = -EFAULT;
			break;
		case RT_OID_802_11_SNR_1:
			if ((pAdapter->Antenna.field.RxPath	> 1) &&
                (pAdapter->StaCfg.LastSNR1 > 0))
			{
				ulInfo = ((0xeb	- pAdapter->StaCfg.LastSNR1) * 3) /	16 ;
				wrq->u.data.length = sizeof(ulInfo);
				Status = copy_to_user(wrq->u.data.pointer, &ulInfo,	wrq->u.data.length);
				DBGPRINT(RT_DEBUG_TRACE,("Query::RT_OID_802_11_SNR_1(0x=%lx)\n",ulInfo));
			}
			else
				Status = -EFAULT;
            DBGPRINT(RT_DEBUG_TRACE,("Query::RT_OID_802_11_SNR_1(pAdapter->StaCfg.LastSNR1=%d)\n",pAdapter->StaCfg.LastSNR1));
			break;
        case OID_802_11_RSSI_TRIGGER:
            ulInfo = pAdapter->StaCfg.RssiSample.LastRssi0 - pAdapter->BbpRssiToDbmDelta;
            wrq->u.data.length = sizeof(ulInfo);
            Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_RSSI_TRIGGER(=%ld)\n", ulInfo));
            break;
		case OID_802_11_RSSI:
        case RT_OID_802_11_RSSI:
			ulInfo = pAdapter->StaCfg.RssiSample.LastRssi0;
			wrq->u.data.length = sizeof(ulInfo);
			Status = copy_to_user(wrq->u.data.pointer, &ulInfo,	wrq->u.data.length);
			break;
		case RT_OID_802_11_RSSI_1:
            ulInfo = pAdapter->StaCfg.RssiSample.LastRssi1;
			wrq->u.data.length = sizeof(ulInfo);
			Status = copy_to_user(wrq->u.data.pointer, &ulInfo,	wrq->u.data.length);
			break;
        case RT_OID_802_11_RSSI_2:
            ulInfo = pAdapter->StaCfg.RssiSample.LastRssi2;
			wrq->u.data.length = sizeof(ulInfo);
			Status = copy_to_user(wrq->u.data.pointer, &ulInfo,	wrq->u.data.length);
			break;
        case OID_802_11_STATISTICS:
            pStatistics = (NDIS_802_11_STATISTICS *) kmalloc(sizeof(NDIS_802_11_STATISTICS), MEM_ALLOC_FLAG);
            if (pStatistics)
            {
                DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_STATISTICS \n"));
                // add the most up-to-date h/w raw counters into software counters
			    NICUpdateRawCounters(pAdapter);

                // Sanity check for calculation of sucessful count
                if (pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart < pAdapter->WlanCounters.RetryCount.QuadPart)
                    pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart = pAdapter->WlanCounters.RetryCount.QuadPart;

                pStatistics->TransmittedFragmentCount.QuadPart = pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart;
                pStatistics->MulticastTransmittedFrameCount.QuadPart = pAdapter->WlanCounters.MulticastTransmittedFrameCount.QuadPart;
                pStatistics->FailedCount.QuadPart = pAdapter->WlanCounters.FailedCount.QuadPart;
                pStatistics->RetryCount.QuadPart = pAdapter->WlanCounters.RetryCount.QuadPart;
                pStatistics->MultipleRetryCount.QuadPart = pAdapter->WlanCounters.MultipleRetryCount.QuadPart;
                pStatistics->RTSSuccessCount.QuadPart = pAdapter->WlanCounters.RTSSuccessCount.QuadPart;
                pStatistics->RTSFailureCount.QuadPart = pAdapter->WlanCounters.RTSFailureCount.QuadPart;
                pStatistics->ACKFailureCount.QuadPart = pAdapter->WlanCounters.ACKFailureCount.QuadPart;
                pStatistics->FrameDuplicateCount.QuadPart = pAdapter->WlanCounters.FrameDuplicateCount.QuadPart;
                pStatistics->ReceivedFragmentCount.QuadPart = pAdapter->WlanCounters.ReceivedFragmentCount.QuadPart;
                pStatistics->MulticastReceivedFrameCount.QuadPart = pAdapter->WlanCounters.MulticastReceivedFrameCount.QuadPart;
#ifdef DBG
                pStatistics->FCSErrorCount = pAdapter->RalinkCounters.RealFcsErrCount;
#else
                pStatistics->FCSErrorCount.QuadPart = pAdapter->WlanCounters.FCSErrorCount.QuadPart;
                pStatistics->FrameDuplicateCount.u.LowPart = pAdapter->WlanCounters.FrameDuplicateCount.u.LowPart / 100;
#endif
                wrq->u.data.length = sizeof(NDIS_802_11_STATISTICS);
                Status = copy_to_user(wrq->u.data.pointer, pStatistics, wrq->u.data.length);
                kfree(pStatistics);
            }
            else
            {
                DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_STATISTICS(kmalloc failed)\n"));
                Status = -EFAULT;
            }
            break;
        case OID_GEN_RCV_OK:
            ulInfo = pAdapter->Counters8023.GoodReceives;
            wrq->u.data.length = sizeof(ulInfo);
            Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
            break;
        case OID_GEN_RCV_NO_BUFFER:
            ulInfo = pAdapter->Counters8023.RxNoBuffer;
            wrq->u.data.length = sizeof(ulInfo);
            Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
            break;
        case RT_OID_802_11_PHY_MODE:
            ulInfo = (ULONG)pAdapter->CommonCfg.PhyMode;
            wrq->u.data.length = sizeof(ulInfo);
            Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PHY_MODE (=%ld)\n", ulInfo));
            break;
        case RT_OID_802_11_STA_CONFIG:
            pStaConfig = (RT_802_11_STA_CONFIG *) kmalloc(sizeof(RT_802_11_STA_CONFIG), MEM_ALLOC_FLAG);
            if (pStaConfig)
            {
                DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG\n"));
                pStaConfig->EnableTxBurst = pAdapter->CommonCfg.bEnableTxBurst;
                pStaConfig->EnableTurboRate = 0;
                pStaConfig->UseBGProtection = pAdapter->CommonCfg.UseBGProtection;
                pStaConfig->UseShortSlotTime = pAdapter->CommonCfg.bUseShortSlotTime;
                //pStaConfig->AdhocMode = pAdapter->StaCfg.AdhocMode;
                pStaConfig->HwRadioStatus = (pAdapter->StaCfg.bHwRadio == TRUE) ? 1 : 0;
                pStaConfig->Rsv1 = 0;
                pStaConfig->SystemErrorBitmap = pAdapter->SystemErrorBitmap;
                wrq->u.data.length = sizeof(RT_802_11_STA_CONFIG);
                Status = copy_to_user(wrq->u.data.pointer, pStaConfig, wrq->u.data.length);
                kfree(pStaConfig);
            }
            else
            {
                DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
                Status = -EFAULT;
            }
            break;
        case OID_802_11_RTS_THRESHOLD:
            RtsThresh = pAdapter->CommonCfg.RtsThreshold;
            wrq->u.data.length = sizeof(RtsThresh);
            Status = copy_to_user(wrq->u.data.pointer, &RtsThresh, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_RTS_THRESHOLD(=%ld)\n", RtsThresh));
            break;
        case OID_802_11_FRAGMENTATION_THRESHOLD:
            FragThresh = pAdapter->CommonCfg.FragmentThreshold;
            if (pAdapter->CommonCfg.bUseZeroToDisableFragment == TRUE)
                FragThresh = 0;
            wrq->u.data.length = sizeof(FragThresh);
            Status = copy_to_user(wrq->u.data.pointer, &FragThresh, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_FRAGMENTATION_THRESHOLD(=%ld)\n", FragThresh));
            break;
        case OID_802_11_POWER_MODE:
            PowerMode = pAdapter->StaCfg.WindowsPowerMode;
            wrq->u.data.length = sizeof(PowerMode);
            Status = copy_to_user(wrq->u.data.pointer, &PowerMode, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_POWER_MODE(=%d)\n", PowerMode));
            break;
        case RT_OID_802_11_RADIO:
            RadioState = (BOOLEAN) pAdapter->StaCfg.bSwRadio;
            wrq->u.data.length = sizeof(RadioState);
            Status = copy_to_user(wrq->u.data.pointer, &RadioState, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_RADIO (=%d)\n", RadioState));
            break;
        case OID_802_11_INFRASTRUCTURE_MODE:
            if (pAdapter->StaCfg.BssType == BSS_ADHOC)
                BssType = Ndis802_11IBSS;
            else if (pAdapter->StaCfg.BssType == BSS_INFRA)
                BssType = Ndis802_11Infrastructure;
            else if (pAdapter->StaCfg.BssType == BSS_MONITOR)
                BssType = Ndis802_11Monitor;
            else
                BssType = Ndis802_11AutoUnknown;

            wrq->u.data.length = sizeof(BssType);
            Status = copy_to_user(wrq->u.data.pointer, &BssType, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_INFRASTRUCTURE_MODE(=%d)\n", BssType));
            break;
        case RT_OID_802_11_PREAMBLE:
            PreamType = pAdapter->CommonCfg.TxPreamble;
            wrq->u.data.length = sizeof(PreamType);
            Status = copy_to_user(wrq->u.data.pointer, &PreamType, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PREAMBLE(=%d)\n", PreamType));
            break;
        case OID_802_11_AUTHENTICATION_MODE:
            AuthMode = pAdapter->StaCfg.AuthMode;
            wrq->u.data.length = sizeof(AuthMode);
            Status = copy_to_user(wrq->u.data.pointer, &AuthMode, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_AUTHENTICATION_MODE(=%d)\n", AuthMode));
            break;
        case OID_802_11_WEP_STATUS:
            WepStatus = pAdapter->StaCfg.WepStatus;
            wrq->u.data.length = sizeof(WepStatus);
            Status = copy_to_user(wrq->u.data.pointer, &WepStatus, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_WEP_STATUS(=%d)\n", WepStatus));
            break;
        case OID_802_11_TX_POWER_LEVEL:
			wrq->u.data.length = sizeof(ULONG);
			Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.TxPower, wrq->u.data.length);
			DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_TX_POWER_LEVEL %x\n",pAdapter->CommonCfg.TxPower));
			break;
        case RT_OID_802_11_TX_POWER_LEVEL_1:
            wrq->u.data.length = sizeof(ULONG);
            Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.TxPowerPercentage, wrq->u.data.length);
			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_TX_POWER_LEVEL_1 (=%ld)\n", pAdapter->CommonCfg.TxPowerPercentage));
			break;
        case OID_802_11_NETWORK_TYPES_SUPPORTED:
			if ((pAdapter->RfIcType	== RFIC_2850) || (pAdapter->RfIcType ==	RFIC_2750))
			{
				NetworkTypeList[0] = 3;                 // NumberOfItems = 3
				NetworkTypeList[1] = Ndis802_11DS;      // NetworkType[1] = 11b
				NetworkTypeList[2] = Ndis802_11OFDM24;  // NetworkType[2] = 11g
				NetworkTypeList[3] = Ndis802_11OFDM5;   // NetworkType[3] = 11a
                wrq->u.data.length = 16;
				Status = copy_to_user(wrq->u.data.pointer, &NetworkTypeList[0], wrq->u.data.length);
			}
			else
			{
				NetworkTypeList[0] = 2;                 // NumberOfItems = 2
				NetworkTypeList[1] = Ndis802_11DS;      // NetworkType[1] = 11b
				NetworkTypeList[2] = Ndis802_11OFDM24;  // NetworkType[2] = 11g
			    wrq->u.data.length = 12;
				Status = copy_to_user(wrq->u.data.pointer, &NetworkTypeList[0], wrq->u.data.length);
			}
			DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_NETWORK_TYPES_SUPPORTED\n"));
				break;
	    case OID_802_11_NETWORK_TYPE_IN_USE:
            wrq->u.data.length = sizeof(ULONG);
			if (pAdapter->CommonCfg.PhyMode == PHY_11A)
				ulInfo = Ndis802_11OFDM5;
			else if ((pAdapter->CommonCfg.PhyMode == PHY_11BG_MIXED) || (pAdapter->CommonCfg.PhyMode == PHY_11G))
				ulInfo = Ndis802_11OFDM24;
			else
				ulInfo = Ndis802_11DS;
            Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
			break;
        case RT_OID_802_11_QUERY_LAST_RX_RATE:
            ulInfo = (ULONG)pAdapter->LastRxRate;
            wrq->u.data.length = sizeof(ulInfo);
			Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LAST_RX_RATE (=%ld)\n", ulInfo));
			break;
		case RT_OID_802_11_QUERY_LAST_TX_RATE:
			//ulInfo = (ULONG)pAdapter->LastTxRate;
			ulInfo = (ULONG)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word;
			wrq->u.data.length = sizeof(ulInfo);
			Status = copy_to_user(wrq->u.data.pointer, &ulInfo,	wrq->u.data.length);
			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LAST_TX_RATE (=%lx)\n", ulInfo));
			break;
        case RT_OID_802_11_QUERY_EEPROM_VERSION:
            wrq->u.data.length = sizeof(ULONG);
            Status = copy_to_user(wrq->u.data.pointer, &pAdapter->EepromVersion, wrq->u.data.length);
            break;
        case RT_OID_802_11_QUERY_FIRMWARE_VERSION:
            wrq->u.data.length = sizeof(ULONG);
            Status = copy_to_user(wrq->u.data.pointer, &pAdapter->FirmwareVersion, wrq->u.data.length);
			break;
	    case RT_OID_802_11_QUERY_NOISE_LEVEL:
			wrq->u.data.length = sizeof(UCHAR);
			Status = copy_to_user(wrq->u.data.pointer, &pAdapter->BbpWriteLatch[66], wrq->u.data.length);
			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_NOISE_LEVEL (=%d)\n", pAdapter->BbpWriteLatch[66]));
			break;
	    case RT_OID_802_11_EXTRA_INFO:
			wrq->u.data.length = sizeof(ULONG);
			Status = copy_to_user(wrq->u.data.pointer, &pAdapter->ExtraInfo, wrq->u.data.length);
	        DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_EXTRA_INFO (=%ld)\n", pAdapter->ExtraInfo));
	        break;
	    case RT_OID_WE_VERSION_COMPILED:
	        wrq->u.data.length = sizeof(UINT);
	        we_version_compiled = WIRELESS_EXT;
	        Status = copy_to_user(wrq->u.data.pointer, &we_version_compiled, wrq->u.data.length);
	        break;
		case RT_OID_802_11_QUERY_APSD_SETTING:
			apsd = (pAdapter->CommonCfg.bAPSDCapable | (pAdapter->CommonCfg.bAPSDAC_BE << 1) | (pAdapter->CommonCfg.bAPSDAC_BK << 2)
				| (pAdapter->CommonCfg.bAPSDAC_VI << 3)	| (pAdapter->CommonCfg.bAPSDAC_VO << 4)	| (pAdapter->CommonCfg.MaxSPLength << 5));

			wrq->u.data.length = sizeof(ULONG);
			Status = copy_to_user(wrq->u.data.pointer, &apsd, wrq->u.data.length);
			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_APSD_SETTING (=0x%lx,APSDCap=%d,AC_BE=%d,AC_BK=%d,AC_VI=%d,AC_VO=%d,MAXSPLen=%d)\n",
				apsd,pAdapter->CommonCfg.bAPSDCapable,pAdapter->CommonCfg.bAPSDAC_BE,pAdapter->CommonCfg.bAPSDAC_BK,pAdapter->CommonCfg.bAPSDAC_VI,pAdapter->CommonCfg.bAPSDAC_VO,pAdapter->CommonCfg.MaxSPLength));
			break;
		case RT_OID_802_11_QUERY_APSD_PSM:
			wrq->u.data.length = sizeof(ULONG);
			Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bAPSDForcePowerSave, wrq->u.data.length);
			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_APSD_PSM (=%d)\n", pAdapter->CommonCfg.bAPSDForcePowerSave));
			break;
		case RT_OID_802_11_QUERY_WMM:
			wrq->u.data.length = sizeof(BOOLEAN);
			Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bWmmCapable, wrq->u.data.length);
			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_WMM (=%d)\n",	pAdapter->CommonCfg.bWmmCapable));
			break;
        case RT_OID_NEW_DRIVER:
            {
                UCHAR enabled = 1;
    	        wrq->u.data.length = sizeof(UCHAR);
    	        Status = copy_to_user(wrq->u.data.pointer, &enabled, wrq->u.data.length);
                DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_NEW_DRIVER (=%d)\n", enabled));
            }
	        break;
        case RT_OID_WPA_SUPPLICANT_SUPPORT:
	        wrq->u.data.length = sizeof(UCHAR);
	        Status = copy_to_user(wrq->u.data.pointer, &pAdapter->StaCfg.WpaSupplicantUP, wrq->u.data.length);
            DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_WPA_SUPPLICANT_SUPPORT (=%d)\n", pAdapter->StaCfg.WpaSupplicantUP));
	        break;
        case RT_OID_DRIVER_DEVICE_NAME:
            DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_DRIVER_DEVICE_NAME \n"));
			wrq->u.data.length = 16;
			if (copy_to_user(wrq->u.data.pointer, pAdapter->StaCfg.dev_name, wrq->u.data.length))
			{
				Status = -EFAULT;
			}
            break;
        case RT_OID_802_11_QUERY_HT_PHYMODE:
            pHTPhyMode = (OID_SET_HT_PHYMODE *) kmalloc(sizeof(OID_SET_HT_PHYMODE), MEM_ALLOC_FLAG);
            if (pHTPhyMode)
            {
                pHTPhyMode->PhyMode = pAdapter->CommonCfg.PhyMode;
    			pHTPhyMode->HtMode = (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE;
    			pHTPhyMode->BW = (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.BW;
    			pHTPhyMode->MCS= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.MCS;
    			pHTPhyMode->SHORTGI= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.ShortGI;
    			pHTPhyMode->STBC= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.STBC;

    			pHTPhyMode->ExtOffset = ((pAdapter->CommonCfg.CentralChannel < pAdapter->CommonCfg.Channel) ? (EXTCHA_BELOW) : (EXTCHA_ABOVE));
                wrq->u.data.length = sizeof(OID_SET_HT_PHYMODE);
                if (copy_to_user(wrq->u.data.pointer, pHTPhyMode, wrq->u.data.length))
    			{
    				Status = -EFAULT;
    			}
    			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_HT_PHYMODE (PhyMode = %d, MCS =%d, BW = %d, STBC = %d, ExtOffset=%d)\n",
    				pHTPhyMode->HtMode, pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->ExtOffset));
    			DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (.word = %x )\n", pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word));
            }
            else
            {
                DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
                Status = -EFAULT;
            }
            break;
        case RT_OID_802_11_COUNTRY_REGION:
            DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_COUNTRY_REGION \n"));
			wrq->u.data.length = sizeof(ulInfo);
            ulInfo = pAdapter->CommonCfg.CountryRegionForABand;
            ulInfo = (ulInfo << 8)|(pAdapter->CommonCfg.CountryRegion);
			if (copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length))
            {
				Status = -EFAULT;
            }
            break;
        case RT_OID_802_11_QUERY_DAT_HT_PHYMODE:
            pHTPhyMode = (OID_SET_HT_PHYMODE *) kmalloc(sizeof(OID_SET_HT_PHYMODE), MEM_ALLOC_FLAG);
            if (pHTPhyMode)
            {
                pHTPhyMode->PhyMode = pAdapter->CommonCfg.PhyMode;
    			pHTPhyMode->HtMode = (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.HTMODE;
    			pHTPhyMode->BW = (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.BW;
    			pHTPhyMode->MCS= (UCHAR)pAdapter->StaCfg.DesiredTransmitSetting.field.MCS;
    			pHTPhyMode->SHORTGI= (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.ShortGI;
    			pHTPhyMode->STBC= (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.STBC;

                wrq->u.data.length = sizeof(OID_SET_HT_PHYMODE);
                if (copy_to_user(wrq->u.data.pointer, pHTPhyMode, wrq->u.data.length))
    			{
    				Status = -EFAULT;
    			}
    			DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_HT_PHYMODE (PhyMode = %d, MCS =%d, BW = %d, STBC = %d, ExtOffset=%d)\n",
    				pHTPhyMode->HtMode, pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->ExtOffset));
    			DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (.word = %x )\n", pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word));
            }
            else
            {
                DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
                Status = -EFAULT;
            }
            break;
        case RT_OID_QUERY_MULTIPLE_CARD_SUPPORT:
			wrq->u.data.length = sizeof(UCHAR);
            i = 0;
			if (copy_to_user(wrq->u.data.pointer, &i, wrq->u.data.length))
            {
				Status = -EFAULT;
            }
            DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_QUERY_MULTIPLE_CARD_SUPPORT(=%d) \n", i));
            break;

		case OID_802_11_BUILD_CHANNEL_EX:
			{
				UCHAR value;
				DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BUILD_CHANNEL_EX \n"));
				wrq->u.data.length = sizeof(UCHAR);
				DBGPRINT(RT_DEBUG_TRACE, ("Doesn't support EXT_BUILD_CHANNEL_LIST.\n"));
				value = 0;
				Status = copy_to_user(wrq->u.data.pointer, &value, 1);
				DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
			}
			break;

		case OID_802_11_GET_CH_LIST:
			{
				PRT_CHANNEL_LIST_INFO pChListBuf;

				DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_CH_LIST \n"));
				if (pAdapter->ChannelListNum == 0)
				{
					wrq->u.data.length = 0;
					break;
				}

				pChListBuf = (RT_CHANNEL_LIST_INFO *) kmalloc(sizeof(RT_CHANNEL_LIST_INFO), MEM_ALLOC_FLAG);
				if (pChListBuf == NULL)
				{
					wrq->u.data.length = 0;
					break;
				}

				pChListBuf->ChannelListNum = pAdapter->ChannelListNum;
				for (i = 0; i < pChListBuf->ChannelListNum; i++)
					pChListBuf->ChannelList[i] = pAdapter->ChannelList[i].Channel;

				wrq->u.data.length = sizeof(RT_CHANNEL_LIST_INFO);
				Status = copy_to_user(wrq->u.data.pointer, pChListBuf, sizeof(RT_CHANNEL_LIST_INFO));
				DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));

				if (pChListBuf)
					kfree(pChListBuf);
			}
			break;

		case OID_802_11_GET_COUNTRY_CODE:
			DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_COUNTRY_CODE \n"));
			wrq->u.data.length = 2;
			Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.CountryCode, 2);
			DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
			break;

		case OID_802_11_GET_CHANNEL_GEOGRAPHY:
			DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_CHANNEL_GEOGRAPHY \n"));
			wrq->u.data.length = 1;
			Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Geography, 1);
			DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
			break;

        default:
            DBGPRINT(RT_DEBUG_TRACE, ("Query::unknown IOCTL's subcmd = 0x%08x\n", cmd));
            Status = -EOPNOTSUPP;
            break;
    }
    return Status;
}

INT rt28xx_sta_ioctl(
	IN	struct net_device	*net_dev,
	IN	OUT	struct ifreq	*rq,
	IN	INT					cmd)
{
	RTMP_ADAPTER *pAd = net_dev->ml_priv;
	POS_COOKIE pObj = (POS_COOKIE)pAd->OS_Cookie;
	RTMP_ADAPTER        *pAd = NULL;
	struct iwreq        *wrq = (struct iwreq *) rq;
	BOOLEAN				StateMachineTouched = FALSE;
	INT					Status = NDIS_STATUS_SUCCESS;
	USHORT				subcmd;

	if (net_dev->priv_flags == INT_MAIN)
	{
		pAd = net_dev->ml_priv;
	}
	else
	{
		pVirtualAd = net_dev->ml_priv;
		pAd = pVirtualAd->RtmpDev->ml_priv;
	}
	pObj = (POS_COOKIE) pAd->OS_Cookie;

	if (pAd == NULL)
	{
		/* if 1st open fail, pAd will be free;
		   So the net_dev->ml_priv will be NULL in 2rd open */
		return -ENETDOWN;
	}

    //check if the interface is down
    if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))

		case SIOCGIWRANGE:	//Get range of parameters
		case SIOCGIWRETRY:	//get retry limits and lifetime
		case SIOCSIWRETRY:	//set retry limits and lifetime
			Status = -EOPNOTSUPP;
			break;
		case RT_PRIV_IOCTL:
		case RT_PRIV_IOCTL_EXT:
			Status = -EOPNOTSUPP;
#endif
			subcmd = wrq->u.data.flags;
			if( subcmd & OID_GET_SET_TOGGLE)
				Status = RTMPSetInformation(pAd, rq, subcmd);
			else
				Status = RTMPQueryInformation(pAd, rq, subcmd);
			break;
		case SIOCGIWPRIV:
			if (wrq->u.data.pointer)

		case RTPRIV_IOCTL_GSITESURVEY:
			RTMPIoctlGetSiteSurvey(pAd, wrq);
		    break;
#ifdef DBG
		case RTPRIV_IOCTL_MAC:
			RTMPIoctlMAC(pAd, wrq);
			break;
		case RTPRIV_IOCTL_E2P:
			RTMPIoctlE2PROM(pAd, wrq);
			break;
#ifdef RT30xx
		case RTPRIV_IOCTL_RF:
			RTMPIoctlRF(pAd, wrq);
			break;
#endif // RT30xx //
#endif // DBG //
        case SIOCETHTOOL:
                break;
		default:

    return TRUE;
}

#ifdef DBG
/*
    ==========================================================================
    Description:
        Read / Write MAC
    Arguments:
        pAdapter                    Pointer to our adapter
        wrq                         Pointer to the ioctl argument

    Return Value:
        None

    Note:
        Usage:
               1.) iwpriv ra0 mac 0        ==> read MAC where Addr=0x0
               2.) iwpriv ra0 mac 0=12     ==> write MAC where Addr=0x0, value=12
    ==========================================================================
*/
VOID RTMPIoctlMAC(
	IN	PRTMP_ADAPTER	pAdapter,
	IN	struct iwreq	*wrq)
{
	CHAR				*this_char;
	CHAR				*value;
	INT					j = 0, k = 0;
	CHAR				msg[1024];
	CHAR				arg[255];
	ULONG				macAddr = 0;
	UCHAR				temp[16], temp2[16];
	UINT32				macValue = 0;
	INT					Status;
#ifdef RT30xx
	BOOLEAN				bIsPrintAllMAC = FALSE;
#endif

	memset(msg, 0x00, 1024);
	if (wrq->u.data.length > 1) //No parameters.
	{
	    Status = copy_from_user(arg, wrq->u.data.pointer, (wrq->u.data.length > 255) ? 255 : wrq->u.data.length);
		sprintf(msg, "\n");

		//Parsing Read or Write
	    this_char = arg;
		if (!*this_char)
			goto next;

		if ((value = rtstrchr(this_char, '=')) != NULL)
			*value++ = 0;

		if (!value || !*value)
		{ //Read
			// Sanity check
			if(strlen(this_char) > 4)
				goto next;

			j = strlen(this_char);
			while(j-- > 0)
			{
				if(this_char[j] > 'f' || this_char[j] < '0')
					return;
			}

			// Mac Addr
			k = j = strlen(this_char);
			while(j-- > 0)
			{
				this_char[4-k+j] = this_char[j];
			}

			while(k < 4)
				this_char[3-k++]='0';
			this_char[4]='\0';

			if(strlen(this_char) == 4)
			{
				AtoH(this_char, temp, 2);
				macAddr = *temp*256 + temp[1];
				if (macAddr < 0xFFFF)
				{
					RTMP_IO_READ32(pAdapter, macAddr, &macValue);
					DBGPRINT(RT_DEBUG_TRACE, ("MacAddr=%lx, MacValue=%x\n", macAddr, macValue));
					sprintf(msg+strlen(msg), "[0x%08lX]:%08X  ", macAddr , macValue);
				}
				else
#ifndef RT30xx
				{//Invalid parametes, so default printk all bbp
#endif
#ifdef RT30xx
				{//Invalid parametes, so default printk all mac
					bIsPrintAllMAC = TRUE;
#endif
					goto next;
				}
			}
		}
		else
		{ //Write
			memcpy(&temp2, value, strlen(value));
			temp2[strlen(value)] = '\0';

			// Sanity check
			if((strlen(this_char) > 4) || strlen(temp2) > 8)
				goto next;

			j = strlen(this_char);
			while(j-- > 0)
			{
				if(this_char[j] > 'f' || this_char[j] < '0')
					return;
			}

			j = strlen(temp2);
			while(j-- > 0)
			{
				if(temp2[j] > 'f' || temp2[j] < '0')
					return;
			}

			//MAC Addr
			k = j = strlen(this_char);
			while(j-- > 0)
			{
				this_char[4-k+j] = this_char[j];
			}

			while(k < 4)
				this_char[3-k++]='0';
			this_char[4]='\0';

			//MAC value
			k = j = strlen(temp2);
			while(j-- > 0)
			{
				temp2[8-k+j] = temp2[j];
			}

			while(k < 8)
				temp2[7-k++]='0';
			temp2[8]='\0';

			{
				AtoH(this_char, temp, 2);
				macAddr = *temp*256 + temp[1];

				AtoH(temp2, temp, 4);
				macValue = *temp*256*256*256 + temp[1]*256*256 + temp[2]*256 + temp[3];

				// debug mode
				if (macAddr == (HW_DEBUG_SETTING_BASE + 4))
				{
					// 0x2bf4: byte0 non-zero: enable R17 tuning, 0: disable R17 tuning
                    if (macValue & 0x000000ff)
                    {
                        pAdapter->BbpTuning.bEnable = TRUE;
                        DBGPRINT(RT_DEBUG_TRACE,("turn on R17 tuning\n"));
                    }
                    else
                    {
                        UCHAR R66;
                        pAdapter->BbpTuning.bEnable = FALSE;
                        R66 = 0x26 + GET_LNA_GAIN(pAdapter);
						RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R66, (0x26 + GET_LNA_GAIN(pAdapter)));
                        DBGPRINT(RT_DEBUG_TRACE,("turn off R17 tuning, restore to 0x%02x\n", R66));
                    }
					return;
				}

				DBGPRINT(RT_DEBUG_TRACE, ("MacAddr=%02lx, MacValue=0x%x\n", macAddr, macValue));

				RTMP_IO_WRITE32(pAdapter, macAddr, macValue);
				sprintf(msg+strlen(msg), "[0x%08lX]:%08X  ", macAddr, macValue);
			}
		}
	}
#ifdef RT30xx
	else
		bIsPrintAllMAC = TRUE;
#endif
next:
#ifdef RT30xx
	if (bIsPrintAllMAC)
	{
		struct file		*file_w;
		PCHAR			fileName = "MacDump.txt";
		mm_segment_t	orig_fs;

		orig_fs = get_fs();
		set_fs(KERNEL_DS);

		// open file
		file_w = filp_open(fileName, O_WRONLY|O_CREAT, 0);
		if (IS_ERR(file_w))
		{
			DBGPRINT(RT_DEBUG_TRACE, ("-->2) %s: Error %ld opening %s\n", __func__, -PTR_ERR(file_w), fileName));
		}
		else
		{
			if (file_w->f_op && file_w->f_op->write)
			{
				file_w->f_pos = 0;
				macAddr = 0x1000;

				while (macAddr <= 0x1800)
				{
					RTMP_IO_READ32(pAdapter, macAddr, &macValue);
					sprintf(msg, "%08lx = %08X\n", macAddr, macValue);

					// write data to file
					file_w->f_op->write(file_w, msg, strlen(msg), &file_w->f_pos);

					printk("%s", msg);
					macAddr += 4;
				}
				sprintf(msg, "\nDump all MAC values to %s\n", fileName);
			}
			filp_close(file_w, NULL);
		}
		set_fs(orig_fs);
	}
#endif /* RT30xx */
	if(strlen(msg) == 1)
		sprintf(msg+strlen(msg), "===>Error command format!");

	// Copy the information into the user buffer
	wrq->u.data.length = strlen(msg);
	Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);

	DBGPRINT(RT_DEBUG_TRACE, ("<==RTMPIoctlMAC\n\n"));
}

/*
    ==========================================================================
    Description:
        Read / Write E2PROM
    Arguments:
        pAdapter                    Pointer to our adapter
        wrq                         Pointer to the ioctl argument

    Return Value:
        None

    Note:
        Usage:
               1.) iwpriv ra0 e2p 0     	==> read E2PROM where Addr=0x0
               2.) iwpriv ra0 e2p 0=1234    ==> write E2PROM where Addr=0x0, value=1234
    ==========================================================================
*/
VOID RTMPIoctlE2PROM(
	IN	PRTMP_ADAPTER	pAdapter,
	IN	struct iwreq	*wrq)
{
	CHAR				*this_char;
	CHAR				*value;
	INT					j = 0, k = 0;
	CHAR				msg[1024];
	CHAR				arg[255];
	USHORT				eepAddr = 0;
	UCHAR				temp[16], temp2[16];
	USHORT				eepValue;
	int					Status;
#ifdef RT30xx
	BOOLEAN				bIsPrintAllE2P = FALSE;
#endif

	memset(msg, 0x00, 1024);
	if (wrq->u.data.length > 1) //No parameters.
	{
	    Status = copy_from_user(arg, wrq->u.data.pointer, (wrq->u.data.length > 255) ? 255 : wrq->u.data.length);
		sprintf(msg, "\n");

	    //Parsing Read or Write
		this_char = arg;


		if (!*this_char)
			goto next;

		if ((value = rtstrchr(this_char, '=')) != NULL)
			*value++ = 0;

		if (!value || !*value)
		{ //Read

			// Sanity check
			if(strlen(this_char) > 4)
				goto next;

			j = strlen(this_char);
			while(j-- > 0)
			{
				if(this_char[j] > 'f' || this_char[j] < '0')
					return;
			}

			// E2PROM addr
			k = j = strlen(this_char);
			while(j-- > 0)
			{
				this_char[4-k+j] = this_char[j];
			}

			while(k < 4)
				this_char[3-k++]='0';
			this_char[4]='\0';

			if(strlen(this_char) == 4)
			{
				AtoH(this_char, temp, 2);
				eepAddr = *temp*256 + temp[1];
				if (eepAddr < 0xFFFF)
				{
					RT28xx_EEPROM_READ16(pAdapter, eepAddr, eepValue);
					sprintf(msg+strlen(msg), "[0x%04X]:0x%04X  ", eepAddr , eepValue);
				}
				else
				{//Invalid parametes, so default printk all bbp
#ifdef RT30xx
					bIsPrintAllE2P = TRUE;
#endif
					goto next;
				}
			}
		}
		else
		{ //Write
			memcpy(&temp2, value, strlen(value));
			temp2[strlen(value)] = '\0';

			// Sanity check
			if((strlen(this_char) > 4) || strlen(temp2) > 8)
				goto next;

			j = strlen(this_char);
			while(j-- > 0)
			{
				if(this_char[j] > 'f' || this_char[j] < '0')
					return;
			}
			j = strlen(temp2);
			while(j-- > 0)
			{
				if(temp2[j] > 'f' || temp2[j] < '0')
					return;
			}

			//MAC Addr
			k = j = strlen(this_char);
			while(j-- > 0)
			{
				this_char[4-k+j] = this_char[j];
			}

			while(k < 4)
				this_char[3-k++]='0';
			this_char[4]='\0';

			//MAC value
			k = j = strlen(temp2);
			while(j-- > 0)
			{
				temp2[4-k+j] = temp2[j];
			}

			while(k < 4)
				temp2[3-k++]='0';
			temp2[4]='\0';

			AtoH(this_char, temp, 2);
			eepAddr = *temp*256 + temp[1];

			AtoH(temp2, temp, 2);
			eepValue = *temp*256 + temp[1];

			RT28xx_EEPROM_WRITE16(pAdapter, eepAddr, eepValue);
			sprintf(msg+strlen(msg), "[0x%02X]:%02X  ", eepAddr, eepValue);
		}
	}
#ifdef RT30xx
	else
		bIsPrintAllE2P = TRUE;
#endif
next:
#ifdef RT30xx
	if (bIsPrintAllE2P)
	{
		struct file		*file_w;
		PCHAR			fileName = "EEPROMDump.txt";
		mm_segment_t	orig_fs;

		orig_fs = get_fs();
		set_fs(KERNEL_DS);

		// open file
		file_w = filp_open(fileName, O_WRONLY|O_CREAT, 0);
		if (IS_ERR(file_w))
		{
			DBGPRINT(RT_DEBUG_TRACE, ("-->2) %s: Error %ld opening %s\n", __func__, -PTR_ERR(file_w), fileName));
		}
		else
		{
			if (file_w->f_op && file_w->f_op->write)
			{
				file_w->f_pos = 0;
				eepAddr = 0x00;

				while (eepAddr <= 0xFE)
				{
					RT28xx_EEPROM_READ16(pAdapter, eepAddr, eepValue);
					sprintf(msg, "%08x = %04x\n", eepAddr , eepValue);

					// write data to file
					file_w->f_op->write(file_w, msg, strlen(msg), &file_w->f_pos);

					printk("%s", msg);
					eepAddr += 2;
				}
				sprintf(msg, "\nDump all EEPROM values to %s\n", fileName);
			}
			filp_close(file_w, NULL);
		}
		set_fs(orig_fs);
	}
#endif /* RT30xx */
	if(strlen(msg) == 1)
		sprintf(msg+strlen(msg), "===>Error command format!");


	// Copy the information into the user buffer
	wrq->u.data.length = strlen(msg);
	Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);

	DBGPRINT(RT_DEBUG_TRACE, ("<==RTMPIoctlE2PROM\n"));
}
#ifdef RT30xx
/*
    ==========================================================================
    Description:
        Read / Write RF register
Arguments:
    pAdapter                    Pointer to our adapter
    wrq                         Pointer to the ioctl argument

    Return Value:
        None

    Note:
        Usage:
               1.) iwpriv ra0 rf                ==> read all RF registers
               2.) iwpriv ra0 rf 1              ==> read RF where RegID=1
               3.) iwpriv ra0 rf 1=10		    ==> write RF R1=0x10
    ==========================================================================
*/
VOID RTMPIoctlRF(
	IN	PRTMP_ADAPTER	pAdapter,
	IN	struct iwreq	*wrq)
{
	CHAR				*this_char;
	CHAR				*value;
	UCHAR				regRF = 0;
	CHAR				msg[2048];
	CHAR				arg[255];
	INT					rfId;
	LONG				rfValue;
	int					Status;
	BOOLEAN				bIsPrintAllRF = FALSE;


	memset(msg, 0x00, 2048);
	if (wrq->u.data.length > 1) //No parameters.
	{
	    Status = copy_from_user(arg, wrq->u.data.pointer, (wrq->u.data.length > 255) ? 255 : wrq->u.data.length);
		sprintf(msg, "\n");

	    //Parsing Read or Write
		this_char = arg;
		if (!*this_char)
			goto next;

		if ((value = strchr(this_char, '=')) != NULL)
			*value++ = 0;

		if (!value || !*value)
		{ //Read
			if (sscanf(this_char, "%d", &(rfId)) == 1)
			{
				if (rfId <= 31)
				{
					// In RT2860 ATE mode, we do not load 8051 firmware.
                                            //We must access RF directly.
                    // For RT2870 ATE mode, ATE_RF_IO_WRITE8(/READ8)_BY_REG_ID are redefined.
					// according to Andy, Gary, David require.
					// the command rf shall read rf register directly for dubug.
					// BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, &regBBP);
					RT30xxReadRFRegister(pAdapter, rfId, &regRF);

					sprintf(msg+strlen(msg), "R%02d[0x%02x]:%02X  ", rfId, rfId*2, regRF);
				}
				else
				{//Invalid parametes, so default printk all RF
					bIsPrintAllRF = TRUE;
					goto next;
				}
			}
			else
			{ //Invalid parametes, so default printk all RF
				bIsPrintAllRF = TRUE;
				goto next;
			}
		}
		else
		{ //Write
			if ((sscanf(this_char, "%d", &(rfId)) == 1) && (sscanf(value, "%lx", &(rfValue)) == 1))
			{
				if (rfId <= 31)
				{
					// In RT2860 ATE mode, we do not load 8051 firmware.
					// We should access RF registers directly.
                    // For RT2870 ATE mode, ATE_RF_IO_WRITE8/READ8_BY_REG_ID are redefined.
						{
							// according to Andy, Gary, David require.
							// the command RF shall read/write RF register directly for dubug.
							//BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, &regBBP);
					                //BBP_IO_WRITE8_BY_REG_ID(pAdapter, (UCHAR)bbpId,(UCHAR) bbpValue);
							RT30xxReadRFRegister(pAdapter, rfId, &regRF);
							RT30xxWriteRFRegister(pAdapter, (UCHAR)rfId,(UCHAR) rfValue);
					                //Read it back for showing
							//BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, &regBBP);
							RT30xxReadRFRegister(pAdapter, rfId, &regRF);
					                sprintf(msg+strlen(msg), "R%02d[0x%02X]:%02X\n", rfId, rfId*2, regRF);
				                }
				}
				else
				{//Invalid parametes, so default printk all RF
					bIsPrintAllRF = TRUE;
				}
			}
			else
			{ //Invalid parametes, so default printk all RF
				bIsPrintAllRF = TRUE;
			}
		}
	}
	else
		bIsPrintAllRF = TRUE;
next:
	if (bIsPrintAllRF)
	{
		memset(msg, 0x00, 2048);
		sprintf(msg, "\n");
		for (rfId = 0; rfId <= 31; rfId++)
		{
			// according to Andy, Gary, David require.
			// the command RF shall read/write RF register directly for dubug.
			RT30xxReadRFRegister(pAdapter, rfId, &regRF);
			sprintf(msg+strlen(msg), "%03d = %02X\n", rfId, regRF);
		}
		// Copy the information into the user buffer
		DBGPRINT(RT_DEBUG_TRACE, ("strlen(msg)=%d\n", (UINT32)strlen(msg)));
		wrq->u.data.length = strlen(msg);
		if (copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length))
		{
			DBGPRINT(RT_DEBUG_TRACE, ("%s: copy_to_user() fail\n", __func__));
		}
	}
	else
	{
		if(strlen(msg) == 1)
			sprintf(msg+strlen(msg), "===>Error command format!");

		DBGPRINT(RT_DEBUG_TRACE, ("copy to user [msg=%s]\n", msg));
		// Copy the information into the user buffer
		DBGPRINT(RT_DEBUG_TRACE, ("strlen(msg) =%d\n", (UINT32)strlen(msg)));

		// Copy the information into the user buffer
		wrq->u.data.length = strlen(msg);
		Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);
	}

	DBGPRINT(RT_DEBUG_TRACE, ("<==RTMPIoctlRF\n\n"));
}
#endif // RT30xx //
#endif // DBG //




INT Set_TGnWifiTest_Proc(
    IN  PRTMP_ADAPTER   pAd,
    IN  PUCHAR          arg)

	DBGPRINT(RT_DEBUG_TRACE, ("IF Set_ShortRetryLimit_Proc::(tx_rty_cfg=0x%x)\n", tx_rty_cfg.word));
	return TRUE;
}

#if !defined(RT2860) && !defined(RT30xx)
INT	Show_Adhoc_MacTable_Proc(
	IN	PRTMP_ADAPTER	pAd,
	IN	PCHAR			extra)
{
	INT i;

	sprintf(extra, "\n");

	sprintf(extra + strlen(extra), "HT Operating Mode : %d\n", pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode);

	sprintf(extra + strlen(extra), "\n%-19s%-4s%-4s%-7s%-7s%-7s%-10s%-6s%-6s%-6s%-6s\n",
			"MAC", "AID", "BSS", "RSSI0", "RSSI1", "RSSI2", "PhMd", "BW", "MCS", "SGI", "STBC");

	for (i=1; i<MAX_LEN_OF_MAC_TABLE; i++)
	{
		PMAC_TABLE_ENTRY pEntry = &pAd->MacTab.Content[i];

		if (strlen(extra) > (IW_PRIV_SIZE_MASK - 30))
		    break;
		if ((pEntry->ValidAsCLI || pEntry->ValidAsApCli) && (pEntry->Sst == SST_ASSOC))
		{
			sprintf(extra + strlen(extra), "%02X:%02X:%02X:%02X:%02X:%02X  ",
				pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2],
				pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5]);
			sprintf(extra + strlen(extra), "%-4d", (int)pEntry->Aid);
			sprintf(extra + strlen(extra), "%-4d", (int)pEntry->apidx);
			sprintf(extra + strlen(extra), "%-7d", pEntry->RssiSample.AvgRssi0);
			sprintf(extra + strlen(extra), "%-7d", pEntry->RssiSample.AvgRssi1);
			sprintf(extra + strlen(extra), "%-7d", pEntry->RssiSample.AvgRssi2);
			sprintf(extra + strlen(extra), "%-10s", GetPhyMode(pEntry->HTPhyMode.field.MODE));
			sprintf(extra + strlen(extra), "%-6s", GetBW(pEntry->HTPhyMode.field.BW));
			sprintf(extra + strlen(extra), "%-6d", pEntry->HTPhyMode.field.MCS);
			sprintf(extra + strlen(extra), "%-6d", pEntry->HTPhyMode.field.ShortGI);
			sprintf(extra + strlen(extra), "%-6d", pEntry->HTPhyMode.field.STBC);
			sprintf(extra + strlen(extra), "%-10d, %d, %d%%\n", pEntry->DebugFIFOCount, pEntry->DebugTxCount,
						(pEntry->DebugTxCount) ? ((pEntry->DebugTxCount-pEntry->DebugFIFOCount)*100/pEntry->DebugTxCount) : 0);
			sprintf(extra, "%s\n", extra);
		}
	}

	return TRUE;
}
#endif /* RT2870 */

Lines 90-98 Link Here

(-)a/drivers/staging/rt2860/wpa.h (-3 lines)
90	#define TKIP_AP_RXMICK_OFFSET (TKIP_AP_TXMICK_OFFSET+LEN_TKIP_TXMICK)	90	#define TKIP_AP_RXMICK_OFFSET (TKIP_AP_TXMICK_OFFSET+LEN_TKIP_TXMICK)
91	#define TKIP_GTK_LENGTH ((LEN_TKIP_EK)+(LEN_TKIP_RXMICK)+(LEN_TKIP_TXMICK))	91	#define TKIP_GTK_LENGTH ((LEN_TKIP_EK)+(LEN_TKIP_RXMICK)+(LEN_TKIP_TXMICK))
92	#define LEN_PTK ((LEN_EAP_KEY)+(LEN_TKIP_KEY))	92	#define LEN_PTK ((LEN_EAP_KEY)+(LEN_TKIP_KEY))
93	#ifndef RT30xx
94	#define MIN_LEN_OF_GTK 5
95	#endif
96		93
97	// RSN IE Length definition	94	// RSN IE Length definition
98	#define MAX_LEN_OF_RSNIE 90	95	#define MAX_LEN_OF_RSNIE 90

Return to bug 540589

Lines 1052-1238 NDIS_802_11_NETWORK_TYPE NetworkTypeInUseSanity( Link Here

(-)a/drivers/staging/rt2860/common/cmm_sanity.c (-184 lines)
1052		1052
1053	return NetWorkType;	1053	return NetWorkType;
1054	}	1054	}
1055
1056	/*
1057	==========================================================================
1058	Description:
1059	WPA message sanity check
1060	Return:
1061	TRUE if all parameters are OK, FALSE otherwise
1062	==========================================================================
1063	*/
1064	BOOLEAN PeerWpaMessageSanity(
1065	IN PRTMP_ADAPTER pAd,
1066	IN PEAPOL_PACKET pMsg,
1067	IN ULONG MsgLen,
1068	IN UCHAR MsgType,
1069	IN MAC_TABLE_ENTRY *pEntry)
1070	{
1071	UCHAR mic[LEN_KEY_DESC_MIC], digest[80], KEYDATA[MAX_LEN_OF_RSNIE];
1072	BOOLEAN bReplayDiff = FALSE;
1073	BOOLEAN bWPA2 = FALSE;
1074	KEY_INFO EapolKeyInfo;
1075	UCHAR GroupKeyIndex = 0;
1076
1077
1078	NdisZeroMemory(mic, sizeof(mic));
1079	NdisZeroMemory(digest, sizeof(digest));
1080	NdisZeroMemory(KEYDATA, sizeof(KEYDATA));
1081	NdisZeroMemory((PUCHAR)&EapolKeyInfo, sizeof(EapolKeyInfo));
1082
1083	NdisMoveMemory((PUCHAR)&EapolKeyInfo, (PUCHAR)&pMsg->KeyDesc.KeyInfo, sizeof(KEY_INFO));
1084
1085	((USHORT )&EapolKeyInfo) = cpu2le16(((USHORT )&EapolKeyInfo));
1086
1087	// Choose WPA2 or not
1088	if ((pEntry->AuthMode == Ndis802_11AuthModeWPA2) \|\| (pEntry->AuthMode == Ndis802_11AuthModeWPA2PSK))
1089	bWPA2 = TRUE;
1090
1091	// 0. Check MsgType
1092	if ((MsgType > EAPOL_GROUP_MSG_2) \|\| (MsgType < EAPOL_PAIR_MSG_1))
1093	{
1094	DBGPRINT(RT_DEBUG_ERROR, ("The message type is invalid(%d)! \n", MsgType));
1095	return FALSE;
1096	}
1097
1098	// 1. Replay counter check
1099	if (MsgType == EAPOL_PAIR_MSG_1 \|\| MsgType == EAPOL_PAIR_MSG_3 \|\| MsgType == EAPOL_GROUP_MSG_1) // For supplicant
1100	{
1101	// First validate replay counter, only accept message with larger replay counter.
1102	// Let equal pass, some AP start with all zero replay counter
1103	UCHAR ZeroReplay[LEN_KEY_DESC_REPLAY];
1104
1105	NdisZeroMemory(ZeroReplay, LEN_KEY_DESC_REPLAY);
1106	if ((RTMPCompareMemory(pMsg->KeyDesc.ReplayCounter, pEntry->R_Counter, LEN_KEY_DESC_REPLAY) != 1) &&
1107	(RTMPCompareMemory(pMsg->KeyDesc.ReplayCounter, ZeroReplay, LEN_KEY_DESC_REPLAY) != 0))
1108	{
1109	bReplayDiff = TRUE;
1110	}
1111	}
1112	else if (MsgType == EAPOL_PAIR_MSG_2 \|\| MsgType == EAPOL_PAIR_MSG_4 \|\| MsgType == EAPOL_GROUP_MSG_2) // For authenticator
1113	{
1114	// check Replay Counter coresponds to MSG from authenticator, otherwise discard
1115	if (!NdisEqualMemory(pMsg->KeyDesc.ReplayCounter, pEntry->R_Counter, LEN_KEY_DESC_REPLAY))
1116	{
1117	bReplayDiff = TRUE;
1118	}
1119	}
1120
1121	// Replay Counter different condition
1122	if (bReplayDiff)
1123	{
1124	// send wireless event - for replay counter different
1125	if (pAd->CommonCfg.bWirelessEvent)
1126	RTMPSendWirelessEvent(pAd, IW_REPLAY_COUNTER_DIFF_EVENT_FLAG, pEntry->Addr, pEntry->apidx, 0);
1127
1128	if (MsgType < EAPOL_GROUP_MSG_1)
1129	{
1130	DBGPRINT(RT_DEBUG_ERROR, ("Replay Counter Different in pairwise msg %d of 4-way handshake!\n", MsgType));
1131	}
1132	else
1133	{
1134	DBGPRINT(RT_DEBUG_ERROR, ("Replay Counter Different in group msg %d of 2-way handshake!\n", (MsgType - EAPOL_PAIR_MSG_4)));
1135	}
1136
1137	hex_dump("Receive replay counter ", pMsg->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
1138	hex_dump("Current replay counter ", pEntry->R_Counter, LEN_KEY_DESC_REPLAY);
1139	return FALSE;
1140	}
1141
1142	// 2. Verify MIC except Pairwise Msg1
1143	if (MsgType != EAPOL_PAIR_MSG_1)
1144	{
1145	UCHAR rcvd_mic[LEN_KEY_DESC_MIC];
1146
1147	// Record the received MIC for check later
1148	NdisMoveMemory(rcvd_mic, pMsg->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
1149	NdisZeroMemory(pMsg->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
1150
1151	if (pEntry->WepStatus == Ndis802_11Encryption2Enabled) // TKIP
1152	{
1153	hmac_md5(pEntry->PTK, LEN_EAP_MICK, (PUCHAR)pMsg, MsgLen, mic);
1154	}
1155	else if (pEntry->WepStatus == Ndis802_11Encryption3Enabled) // AES
1156	{
1157	HMAC_SHA1((PUCHAR)pMsg, MsgLen, pEntry->PTK, LEN_EAP_MICK, digest);
1158	NdisMoveMemory(mic, digest, LEN_KEY_DESC_MIC);
1159	}
1160
1161	if (!NdisEqualMemory(rcvd_mic, mic, LEN_KEY_DESC_MIC))
1162	{
1163	// send wireless event - for MIC different
1164	if (pAd->CommonCfg.bWirelessEvent)
1165	RTMPSendWirelessEvent(pAd, IW_MIC_DIFF_EVENT_FLAG, pEntry->Addr, pEntry->apidx, 0);
1166
1167	if (MsgType < EAPOL_GROUP_MSG_1)
1168	{
1169	DBGPRINT(RT_DEBUG_ERROR, ("MIC Different in pairwise msg %d of 4-way handshake!\n", MsgType));
1170	}
1171	else
1172	{
1173	DBGPRINT(RT_DEBUG_ERROR, ("MIC Different in group msg %d of 2-way handshake!\n", (MsgType - EAPOL_PAIR_MSG_4)));
1174	}
1175
1176	hex_dump("Received MIC", rcvd_mic, LEN_KEY_DESC_MIC);
1177	hex_dump("Desired MIC", mic, LEN_KEY_DESC_MIC);
1178
1179	return FALSE;
1180	}
1181	}
1182
1183	// Extract the context of the Key Data field if it exist
1184	// The field in pairwise_msg_2_WPA1(WPA2) & pairwise_msg_3_WPA1 is un-encrypted.
1185	// The field in group_msg_1_WPA1(WPA2) & pairwise_msg_3_WPA2 is encrypted.
1186	if (pMsg->KeyDesc.KeyDataLen[1] > 0)
1187	{
1188	// Decrypt this field
1189	if ((MsgType == EAPOL_PAIR_MSG_3 && bWPA2) \|\| (MsgType == EAPOL_GROUP_MSG_1))
1190	{
1191	if(pEntry->WepStatus == Ndis802_11Encryption3Enabled)
1192	{
1193	// AES
1194	AES_GTK_KEY_UNWRAP(&pEntry->PTK[16], KEYDATA, pMsg->KeyDesc.KeyDataLen[1],pMsg->KeyDesc.KeyData);
1195	}
1196	else
1197	{
1198	INT i;
1199	UCHAR Key[32];
1200	// Decrypt TKIP GTK
1201	// Construct 32 bytes RC4 Key
1202	NdisMoveMemory(Key, pMsg->KeyDesc.KeyIv, 16);
1203	NdisMoveMemory(&Key[16], &pEntry->PTK[16], 16);
1204	ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, Key, 32);
1205	//discard first 256 bytes
1206	for(i = 0; i < 256; i++)
1207	ARCFOUR_BYTE(&pAd->PrivateInfo.WEPCONTEXT);
1208	// Decrypt GTK. Becareful, there is no ICV to check the result is correct or not
1209	ARCFOUR_DECRYPT(&pAd->PrivateInfo.WEPCONTEXT, KEYDATA, pMsg->KeyDesc.KeyData, pMsg->KeyDesc.KeyDataLen[1]);
1210	}
1211
1212	if (!bWPA2 && (MsgType == EAPOL_GROUP_MSG_1))
1213	GroupKeyIndex = EapolKeyInfo.KeyIndex;
1214
1215	}
1216	else if ((MsgType == EAPOL_PAIR_MSG_2) \|\| (MsgType == EAPOL_PAIR_MSG_3 && !bWPA2))
1217	{
1218	NdisMoveMemory(KEYDATA, pMsg->KeyDesc.KeyData, pMsg->KeyDesc.KeyDataLen[1]);
1219	}
1220	else
1221	{
1222
1223	return TRUE;
1224	}
1225
1226	// Parse Key Data field to
1227	// 1. verify RSN IE for pairwise_msg_2_WPA1(WPA2) ,pairwise_msg_3_WPA1(WPA2)
1228	// 2. verify KDE format for pairwise_msg_3_WPA2, group_msg_1_WPA2
1229	// 3. update shared key for pairwise_msg_3_WPA2, group_msg_1_WPA1(WPA2)
1230	if (!RTMPParseEapolKeyData(pAd, KEYDATA, pMsg->KeyDesc.KeyDataLen[1], GroupKeyIndex, MsgType, bWPA2, pEntry))
1231	{
1232	return FALSE;
1233	}
1234	}
1235
1236	return TRUE;
1237
1238	}

Lines 1570-1581 static VOID PeerMeasureReportAction( Link Here

(-)a/drivers/staging/rt2860/common/spectrum.c (-5 lines)
1570		1570
1571	if ((pMeasureReportInfo = kmalloc(sizeof(MEASURE_RPI_REPORT), GFP_ATOMIC)) == NULL)	1571	if ((pMeasureReportInfo = kmalloc(sizeof(MEASURE_RPI_REPORT), GFP_ATOMIC)) == NULL)
1572	{	1572	{
1573	#ifndef RT30xx
1574	DBGPRINT(RT_DEBUG_ERROR, ("%s unable to alloc memory for measure report buffer (size=%zu).\n", __func__, sizeof(MEASURE_RPI_REPORT)));	1573	DBGPRINT(RT_DEBUG_ERROR, ("%s unable to alloc memory for measure report buffer (size=%zu).\n", __func__, sizeof(MEASURE_RPI_REPORT)));
1575	#endif
1576	#ifdef RT30xx
1577	DBGPRINT(RT_DEBUG_ERROR, ("%s unable to alloc memory for measure report buffer (size=%d).\n", __func__, sizeof(MEASURE_RPI_REPORT)));
1578	#endif
1579	return;	1574	return;
1580	}	1575	}
1581		1576

Lines 1171-1177 VOID LinkUp( Link Here

(-)a/drivers/staging/rt2860/sta/connect.c (-13 / +2 lines)
1171	OPSTATUS_SET_FLAG(pAd, fOP_STATUS_ADHOC_ON);	1171	OPSTATUS_SET_FLAG(pAd, fOP_STATUS_ADHOC_ON);
1172	OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_INFRA_ON);	1172	OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_INFRA_ON);
1173		1173
1174	#ifdef RT30xx
1175	if ((pAd->CommonCfg.HtCapability.HtCapInfo.ChannelWidth == BW_40) &&	1174	if ((pAd->CommonCfg.HtCapability.HtCapInfo.ChannelWidth == BW_40) &&
1176	(pAd->CommonCfg.AddHTInfo.AddHtInfo.ExtChanOffset == EXTCHA_ABOVE))	1175	(pAd->CommonCfg.AddHTInfo.AddHtInfo.ExtChanOffset == EXTCHA_ABOVE))
1177	{	1176	{
Lines 1183-1189 VOID LinkUp( Link Here
1183	{	1182	{
1184	pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel - 2;	1183	pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel - 2;
1185	}	1184	}
1186	#endif
1187	#ifdef RT2870	1185	#ifdef RT2870
1188	if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)	1186	if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
1189	AdhocTurnOnQos(pAd);	1187	AdhocTurnOnQos(pAd);
Lines 1585-1593 VOID LinkUp( Link Here
1585	pAd->MacTab.Size = 1; // infra mode always set MACtab size =1.	1583	pAd->MacTab.Size = 1; // infra mode always set MACtab size =1.
1586	pAd->MacTab.Content[BSSID_WCID].Sst = SST_ASSOC;	1584	pAd->MacTab.Content[BSSID_WCID].Sst = SST_ASSOC;
1587	pAd->MacTab.Content[BSSID_WCID].AuthState = SST_ASSOC;	1585	pAd->MacTab.Content[BSSID_WCID].AuthState = SST_ASSOC;
1588	#ifdef RT30xx
1589	pAd->MacTab.Content[BSSID_WCID].AuthMode = pAd->StaCfg.AuthMode;	1586	pAd->MacTab.Content[BSSID_WCID].AuthMode = pAd->StaCfg.AuthMode;
1590	#endif
1591	pAd->MacTab.Content[BSSID_WCID].WepStatus = pAd->StaCfg.WepStatus;	1587	pAd->MacTab.Content[BSSID_WCID].WepStatus = pAd->StaCfg.WepStatus;
1592	NdisReleaseSpinLock(&pAd->MacTabLock);	1588	NdisReleaseSpinLock(&pAd->MacTabLock);
1593		1589
Lines 1711-1725 VOID LinkUp( Link Here
1711	// Txop can only be modified when RDG is off, WMM is disable and TxBurst is enable	1707	// Txop can only be modified when RDG is off, WMM is disable and TxBurst is enable
1712	//	1708	//
1713	// if 1. Legacy AP WMM on, or 2. 11n AP, AMPDU disable. Force turn off burst no matter what bEnableTxBurst is.	1709	// if 1. Legacy AP WMM on, or 2. 11n AP, AMPDU disable. Force turn off burst no matter what bEnableTxBurst is.
1714	#ifdef RT30xx	1710	if (
1715	if (!((pAd->CommonCfg.RxStream == 1)&&(pAd->CommonCfg.TxStream == 1)) &&	1711	!(pAd->CommonCfg.RxStream == 1 && pAd->CommonCfg.TxStream == 1) &&
1716	(((pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED))	1712	(((pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED))
1717	\|\| ((pAd->StaActive.SupportedPhyInfo.bHtEnable == TRUE) && (pAd->CommonCfg.BACapability.field.Policy == BA_NOTUSE))))	1713	\|\| ((pAd->StaActive.SupportedPhyInfo.bHtEnable == TRUE) && (pAd->CommonCfg.BACapability.field.Policy == BA_NOTUSE))))
1718	#endif
1719	#ifndef RT30xx
1720	if (((pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE) && (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED)))
1721	\|\| ((pAd->StaActive.SupportedPhyInfo.bHtEnable == TRUE) && (pAd->CommonCfg.BACapability.field.Policy == BA_NOTUSE)))
1722	#endif
1723	{	1714	{
1724	RTMP_IO_READ32(pAd, EDCA_AC0_CFG, &Data);	1715	RTMP_IO_READ32(pAd, EDCA_AC0_CFG, &Data);
1725	Data &= 0xFFFFFF00;	1716	Data &= 0xFFFFFF00;
Lines 2101-2107 VOID LinkDown( Link Here
2101	wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);	2092	wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
2102	}	2093	}
2103		2094
2104	#ifdef RT30xx
2105	if (IS_RT3090(pAd))	2095	if (IS_RT3090(pAd))
2106	{	2096	{
2107	UINT32 macdata;	2097	UINT32 macdata;
Lines 2115-2121 VOID LinkDown( Link Here
2115	macdata &= ~(0x09); //bit 0, 3	2105	macdata &= ~(0x09); //bit 0, 3
2116	RTMP_IO_WRITE32(pAd, 0x1210, macdata);	2106	RTMP_IO_WRITE32(pAd, 0x1210, macdata);
2117	}	2107	}
2118	#endif // RT30xx //
2119	}	2108	}
2120		2109
2121	/*	2110	/*

Lines 575-595 VOID STAHandleRxMgmtFrame( Link Here

(-)a/drivers/staging/rt2860/sta/rtmp_data.c (-10 / +5 lines)
575	{	575	{
576		576
577	// We should collect RSSI not only U2M data but also my beacon	577	// We should collect RSSI not only U2M data but also my beacon
578	#ifdef RT30xx	578	if (pAd->RxAnt.EvaluatePeriod == 0 &&
579	if ((pHeader->FC.SubType == SUBTYPE_BEACON) && (MAC_ADDR_EQUAL(&pAd->CommonCfg.Bssid, &pHeader->Addr2))	579	pHeader->FC.SubType == SUBTYPE_BEACON &&
580	&& (pAd->RxAnt.EvaluatePeriod == 0))	580	MAC_ADDR_EQUAL(&pAd->CommonCfg.Bssid, &pHeader->Addr2)) {
581	#endif
582	#ifndef RT30xx
583	if ((pHeader->FC.SubType == SUBTYPE_BEACON) && (MAC_ADDR_EQUAL(&pAd->CommonCfg.Bssid, &pHeader->Addr2)))
584	#endif
585	{
586	Update_Rssi_Sample(pAd, &pAd->StaCfg.RssiSample, pRxWI);	581	Update_Rssi_Sample(pAd, &pAd->StaCfg.RssiSample, pRxWI);
587		582
588	pAd->StaCfg.LastSNR0 = (UCHAR)(pRxWI->SNR0);	583	pAd->StaCfg.LastSNR0 = (UCHAR)(pRxWI->SNR0);
589	pAd->StaCfg.LastSNR1 = (UCHAR)(pRxWI->SNR1);	584	pAd->StaCfg.LastSNR1 = (UCHAR)(pRxWI->SNR1);
590	}	585	}
591		586
592	#ifdef RT30xx	587	#ifdef RT2870
593	// collect rssi information for antenna diversity	588	// collect rssi information for antenna diversity
594	if (pAd->NicConfig2.field.AntDiversity)	589	if (pAd->NicConfig2.field.AntDiversity)
595	{	590	{
Lines 599-605 VOID STAHandleRxMgmtFrame( Link Here
599	pAd->StaCfg.NumOfAvgRssiSample ++;	594	pAd->StaCfg.NumOfAvgRssiSample ++;
600	}	595	}
601	}	596	}
602	#endif // RT30xx //	597	#endif
603		598
604	// First check the size, it MUST not exceed the mlme queue size	599	// First check the size, it MUST not exceed the mlme queue size
605	if (pRxWI->MPDUtotalByteCount > MGMT_DMA_BUFFER_SIZE)	600	if (pRxWI->MPDUtotalByteCount > MGMT_DMA_BUFFER_SIZE)

Lines 40-329 Link Here

(-)a/drivers/staging/rt2860/ap.h (-453 lines)
40	#ifndef __AP_H__	40	#ifndef __AP_H__
41	#define __AP_H__	41	#define __AP_H__
42		42
43
44
45	// ========================= AP RTMP.h ================================
46
47
48
49	// =============================================================
50	// Function Prototypes
51	// =============================================================
52
53	// ap_data.c
54
55	BOOLEAN APBridgeToWirelessSta(
56	IN PRTMP_ADAPTER pAd,
57	IN PUCHAR pHeader,
58	IN UINT HdrLen,
59	IN PUCHAR pData,
60	IN UINT DataLen,
61	IN ULONG fromwdsidx);
62
63	BOOLEAN APHandleRxDoneInterrupt(
64	IN PRTMP_ADAPTER pAd);
65
66	VOID APSendPackets(
67	IN NDIS_HANDLE MiniportAdapterContext,
68	IN PPNDIS_PACKET ppPacketArray,
69	IN UINT NumberOfPackets);
70
71	NDIS_STATUS APSendPacket(
72	IN PRTMP_ADAPTER pAd,
73	IN PNDIS_PACKET pPacket);
74
75
76	NDIS_STATUS APHardTransmit(
77	IN PRTMP_ADAPTER pAd,
78	IN TX_BLK *pTxBlk,
79	IN UCHAR QueIdx);
80
81	VOID APRxEAPOLFrameIndicate(
82	IN PRTMP_ADAPTER pAd,
83	IN MAC_TABLE_ENTRY *pEntry,
84	IN RX_BLK *pRxBlk,
85	IN UCHAR FromWhichBSSID);
86
87	NDIS_STATUS APCheckRxError(
88	IN PRTMP_ADAPTER pAd,
89	IN PRT28XX_RXD_STRUC pRxD,
90	IN UCHAR Wcid);
91
92	BOOLEAN APCheckClass2Class3Error(
93	IN PRTMP_ADAPTER pAd,
94	IN ULONG Wcid,
95	IN PHEADER_802_11 pHeader);
96
97	VOID APHandleRxPsPoll(
98	IN PRTMP_ADAPTER pAd,
99	IN PUCHAR pAddr,
100	IN USHORT Aid,
101	IN BOOLEAN isActive);
102
103	VOID RTMPDescriptorEndianChange(
104	IN PUCHAR pData,
105	IN ULONG DescriptorType);
106
107	VOID RTMPFrameEndianChange(
108	IN PRTMP_ADAPTER pAd,
109	IN PUCHAR pData,
110	IN ULONG Dir,
111	IN BOOLEAN FromRxDoneInt);
112
113	// ap_assoc.c
114
115	VOID APAssocStateMachineInit(
116	IN PRTMP_ADAPTER pAd,
117	IN STATE_MACHINE *S,
118	OUT STATE_MACHINE_FUNC Trans[]);
119
120	VOID APPeerAssocReqAction(
121	IN PRTMP_ADAPTER pAd,
122	IN MLME_QUEUE_ELEM *Elem);
123
124	VOID APPeerReassocReqAction(
125	IN PRTMP_ADAPTER pAd,
126	IN MLME_QUEUE_ELEM *Elem);
127
128	VOID APPeerDisassocReqAction(
129	IN PRTMP_ADAPTER pAd,
130	IN MLME_QUEUE_ELEM *Elem);
131
132	VOID MbssKickOutStas(
133	IN PRTMP_ADAPTER pAd,
134	IN INT apidx,
135	IN USHORT Reason);
136
137	VOID APMlmeKickOutSta(
138	IN PRTMP_ADAPTER pAd,
139	IN PUCHAR pStaAddr,
140	IN UCHAR Wcid,
141	IN USHORT Reason);
142
143	VOID APMlmeDisassocReqAction(
144	IN PRTMP_ADAPTER pAd,
145	IN MLME_QUEUE_ELEM *Elem);
146
147	VOID APCls3errAction(
148	IN PRTMP_ADAPTER pAd,
149	IN ULONG Wcid,
150	IN PHEADER_802_11 pHeader);
151
152
153	USHORT APBuildAssociation(
154	IN PRTMP_ADAPTER pAd,
155	IN MAC_TABLE_ENTRY *pEntry,
156	IN USHORT CapabilityInfo,
157	IN UCHAR MaxSupportedRateIn500Kbps,
158	IN UCHAR *RSN,
159	IN UCHAR *pRSNLen,
160	IN BOOLEAN bWmmCapable,
161	IN ULONG RalinkIe,
162	IN HT_CAPABILITY_IE *pHtCapability,
163	IN UCHAR HtCapabilityLen,
164	OUT USHORT *pAid);
165
166	// ap_auth.c
167
168	void APAuthStateMachineInit(
169	IN PRTMP_ADAPTER pAd,
170	IN STATE_MACHINE *Sm,
171	OUT STATE_MACHINE_FUNC Trans[]);
172
173	VOID APMlmeDeauthReqAction(
174	IN PRTMP_ADAPTER pAd,
175	IN MLME_QUEUE_ELEM *Elem);
176
177	VOID APCls2errAction(
178	IN PRTMP_ADAPTER pAd,
179	IN ULONG Wcid,
180	IN PHEADER_802_11 pHeader);
181
182	// ap_authrsp.c
183
184	VOID APAuthRspStateMachineInit(
185	IN PRTMP_ADAPTER pAd,
186	IN PSTATE_MACHINE Sm,
187	IN STATE_MACHINE_FUNC Trans[]);
188
189	VOID APPeerAuthAtAuthRspIdleAction(
190	IN PRTMP_ADAPTER pAd,
191	IN MLME_QUEUE_ELEM *Elem);
192
193	VOID APPeerDeauthReqAction(
194	IN PRTMP_ADAPTER pAd,
195	IN MLME_QUEUE_ELEM *Elem);
196
197	VOID APPeerAuthSimpleRspGenAndSend(
198	IN PRTMP_ADAPTER pAd,
199	IN PHEADER_802_11 pHdr80211,
200	IN USHORT Alg,
201	IN USHORT Seq,
202	IN USHORT StatusCode);
203
204	// ap_connect.c
205
206	BOOLEAN BeaconTransmitRequired(
207	IN PRTMP_ADAPTER pAd,
208	IN INT apidx);
209
210	VOID APMakeBssBeacon(
211	IN PRTMP_ADAPTER pAd,
212	IN INT apidx);
213
214	VOID APUpdateBeaconFrame(
215	IN PRTMP_ADAPTER pAd,
216	IN INT apidx);
217
218	VOID APMakeAllBssBeacon(
219	IN PRTMP_ADAPTER pAd);
220
221	VOID APUpdateAllBeaconFrame(
222	IN PRTMP_ADAPTER pAd);
223
224
225	// ap_sync.c
226
227	VOID APSyncStateMachineInit(
228	IN PRTMP_ADAPTER pAd,
229	IN STATE_MACHINE *Sm,
230	OUT STATE_MACHINE_FUNC Trans[]);
231
232	VOID APScanTimeout(
233	IN PVOID SystemSpecific1,
234	IN PVOID FunctionContext,
235	IN PVOID SystemSpecific2,
236	IN PVOID SystemSpecific3);
237
238	VOID APInvalidStateWhenScan(
239	IN PRTMP_ADAPTER pAd,
240	IN MLME_QUEUE_ELEM *Elem);
241
242	VOID APScanTimeoutAction(
243	IN PRTMP_ADAPTER pAd,
244	IN MLME_QUEUE_ELEM *Elem);
245
246	VOID APPeerProbeReqAction(
247	IN PRTMP_ADAPTER pAd,
248	IN MLME_QUEUE_ELEM *Elem);
249
250	VOID APPeerBeaconAction(
251	IN PRTMP_ADAPTER pAd,
252	IN MLME_QUEUE_ELEM *Elem);
253
254	VOID APMlmeScanReqAction(
255	IN PRTMP_ADAPTER pAd,
256	IN MLME_QUEUE_ELEM *Elem);
257
258	VOID APPeerBeaconAtScanAction(
259	IN PRTMP_ADAPTER pAd,
260	IN MLME_QUEUE_ELEM *Elem);
261
262	VOID APScanCnclAction(
263	IN PRTMP_ADAPTER pAd,
264	IN MLME_QUEUE_ELEM *Elem);
265
266	VOID ApSiteSurvey(
267	IN PRTMP_ADAPTER pAd);
268
269	VOID SupportRate(
270	IN PUCHAR SupRate,
271	IN UCHAR SupRateLen,
272	IN PUCHAR ExtRate,
273	IN UCHAR ExtRateLen,
274	OUT PUCHAR *Rates,
275	OUT PUCHAR RatesLen,
276	OUT PUCHAR pMaxSupportRate);
277
278
279	BOOLEAN ApScanRunning(
280	IN PRTMP_ADAPTER pAd);
281
282	// ap_wpa.c
283
284	VOID APWpaStateMachineInit(
285	IN PRTMP_ADAPTER pAd,
286	IN STATE_MACHINE *Sm,
287	OUT STATE_MACHINE_FUNC Trans[]);
288
289	// ap_mlme.c	43	// ap_mlme.c
290		44
291	VOID APMlmePeriodicExec(
292	IN PRTMP_ADAPTER pAd);
293
294	VOID APMlmeSelectTxRateTable(
295	IN PRTMP_ADAPTER pAd,
296	IN PMAC_TABLE_ENTRY pEntry,
297	IN PUCHAR *ppTable,
298	IN PUCHAR pTableSize,
299	IN PUCHAR pInitTxRateIdx);
300
301	VOID APMlmeSetTxRate(
302	IN PRTMP_ADAPTER pAd,
303	IN PMAC_TABLE_ENTRY pEntry,
304	IN PRTMP_TX_RATE_SWITCH pTxRate);
305
306	VOID APMlmeDynamicTxRateSwitching(
307	IN PRTMP_ADAPTER pAd);
308
309	VOID APQuickResponeForRateUpExec(
310	IN PVOID SystemSpecific1,
311	IN PVOID FunctionContext,
312	IN PVOID SystemSpecific2,
313	IN PVOID SystemSpecific3);
314
315	BOOLEAN APMsgTypeSubst(
316	IN PRTMP_ADAPTER pAd,
317	IN PFRAME_802_11 pFrame,
318	OUT INT *Machine,
319	OUT INT *MsgType);
320
321	VOID APQuickResponeForRateUpExec(
322	IN PVOID SystemSpecific1,
323	IN PVOID FunctionContext,
324	IN PVOID SystemSpecific2,
325	IN PVOID SystemSpecific3);
326
327	#ifdef RT2870	45	#ifdef RT2870
328	VOID BeaconUpdateExec(	46	VOID BeaconUpdateExec(
329	IN PVOID SystemSpecific1,	47	IN PVOID SystemSpecific1,
Lines 336-369 VOID RTMPSetPiggyBack( Link Here
336	IN PRTMP_ADAPTER pAd,	54	IN PRTMP_ADAPTER pAd,
337	IN BOOLEAN bPiggyBack);	55	IN BOOLEAN bPiggyBack);
338		56
339	VOID APAsicEvaluateRxAnt(
340	IN PRTMP_ADAPTER pAd);
341
342	VOID APAsicRxAntEvalTimeout(
343	IN PRTMP_ADAPTER pAd);
344
345	// ap.c	57	// ap.c
346		58
347	VOID APSwitchChannel(
348	IN PRTMP_ADAPTER pAd,
349	IN INT Channel);
350
351	NDIS_STATUS APInitialize(
352	IN PRTMP_ADAPTER pAd);
353
354	VOID APShutdown(
355	IN PRTMP_ADAPTER pAd);
356
357	VOID APStartUp(
358	IN PRTMP_ADAPTER pAd);
359
360	VOID APStop(
361	IN PRTMP_ADAPTER pAd);
362
363	VOID APCleanupPsQueue(
364	IN PRTMP_ADAPTER pAd,
365	IN PQUEUE_HEADER pQueue);
366
367	VOID MacTableReset(	59	VOID MacTableReset(
368	IN PRTMP_ADAPTER pAd);	60	IN PRTMP_ADAPTER pAd);
369		61
Lines 382-531 MAC_TABLE_ENTRY *MacTableLookup( Link Here
382	IN PRTMP_ADAPTER pAd,	74	IN PRTMP_ADAPTER pAd,
383	IN PUCHAR pAddr);	75	IN PUCHAR pAddr);
384		76
385	VOID MacTableMaintenance(
386	IN PRTMP_ADAPTER pAd);
387
388	UINT32 MacTableAssocStaNumGet(
389	IN PRTMP_ADAPTER pAd);
390
391	MAC_TABLE_ENTRY *APSsPsInquiry(
392	IN PRTMP_ADAPTER pAd,
393	IN PUCHAR pAddr,
394	OUT SST *Sst,
395	OUT USHORT *Aid,
396	OUT UCHAR *PsMode,
397	OUT UCHAR *Rate);
398
399	BOOLEAN APPsIndicate(
400	IN PRTMP_ADAPTER pAd,
401	IN PUCHAR pAddr,
402	IN ULONG Wcid,
403	IN UCHAR Psm);
404
405	VOID ApLogEvent(
406	IN PRTMP_ADAPTER pAd,
407	IN PUCHAR pAddr,
408	IN USHORT Event);
409
410	VOID APUpdateOperationMode(
411	IN PRTMP_ADAPTER pAd);
412
413	VOID APUpdateCapabilityAndErpIe(
414	IN PRTMP_ADAPTER pAd);
415
416	BOOLEAN ApCheckAccessControlList(
417	IN PRTMP_ADAPTER pAd,
418	IN PUCHAR pAddr,
419	IN UCHAR Apidx);
420
421	VOID ApUpdateAccessControlList(
422	IN PRTMP_ADAPTER pAd,
423	IN UCHAR Apidx);
424
425	VOID ApEnqueueNullFrame(
426	IN PRTMP_ADAPTER pAd,
427	IN PUCHAR pAddr,
428	IN UCHAR TxRate,
429	IN UCHAR PID,
430	IN UCHAR apidx,
431	IN BOOLEAN bQosNull,
432	IN BOOLEAN bEOSP,
433	IN UCHAR OldUP);
434
435	VOID ApSendFrame(
436	IN PRTMP_ADAPTER pAd,
437	IN PVOID pBuffer,
438	IN ULONG Length,
439	IN UCHAR TxRate,
440	IN UCHAR PID);
441
442	VOID ApEnqueueAckFrame(
443	IN PRTMP_ADAPTER pAd,
444	IN PUCHAR pAddr,
445	IN UCHAR TxRate,
446	IN UCHAR apidx);
447
448	UCHAR APAutoSelectChannel(
449	IN PRTMP_ADAPTER pAd,
450	IN BOOLEAN Optimal);
451
452	// ap_sanity.c
453
454
455	BOOLEAN PeerAssocReqCmmSanity(
456	IN PRTMP_ADAPTER pAd,
457	IN BOOLEAN isRessoc,
458	IN VOID *Msg,
459	IN ULONG MsgLen,
460	OUT PUCHAR pAddr2,
461	OUT USHORT *pCapabilityInfo,
462	OUT USHORT *pListenInterval,
463	OUT PUCHAR pApAddr,
464	OUT UCHAR *pSsidLen,
465	OUT char *Ssid,
466	OUT UCHAR *pRatesLen,
467	OUT UCHAR Rates[],
468	OUT UCHAR *RSN,
469	OUT UCHAR *pRSNLen,
470	OUT BOOLEAN *pbWmmCapable,
471	OUT ULONG *pRalinkIe,
472	OUT UCHAR *pHtCapabilityLen,
473	OUT HT_CAPABILITY_IE *pHtCapability);
474
475	BOOLEAN PeerDisassocReqSanity(
476	IN PRTMP_ADAPTER pAd,
477	IN VOID *Msg,
478	IN ULONG MsgLen,
479	OUT PUCHAR pAddr2,
480	OUT USHORT *Reason);
481
482	BOOLEAN PeerDeauthReqSanity(
483	IN PRTMP_ADAPTER pAd,
484	IN VOID *Msg,
485	IN ULONG MsgLen,
486	OUT PUCHAR pAddr2,
487	OUT USHORT *Reason);
488
489	BOOLEAN APPeerAuthSanity(
490	IN PRTMP_ADAPTER pAd,
491	IN VOID *Msg,
492	IN ULONG MsgLen,
493	OUT PUCHAR pAddr1,
494	OUT PUCHAR pAddr2,
495	OUT USHORT *Alg,
496	OUT USHORT *Seq,
497	OUT USHORT *Status,
498	CHAR *ChlgText);
499
500	BOOLEAN APPeerProbeReqSanity(
501	IN PRTMP_ADAPTER pAd,
502	IN VOID *Msg,
503	IN ULONG MsgLen,
504	OUT PUCHAR pAddr2,
505	OUT CHAR Ssid[],
506	OUT UCHAR *SsidLen);
507
508	BOOLEAN APPeerBeaconAndProbeRspSanity(
509	IN PRTMP_ADAPTER pAd,
510	IN VOID *Msg,
511	IN ULONG MsgLen,
512	OUT PUCHAR pAddr2,
513	OUT PUCHAR pBssid,
514	OUT CHAR Ssid[],
515	OUT UCHAR *SsidLen,
516	OUT UCHAR *BssType,
517	OUT USHORT *BeaconPeriod,
518	OUT UCHAR *Channel,
519	OUT LARGE_INTEGER *Timestamp,
520	OUT USHORT *CapabilityInfo,
521	OUT UCHAR Rate[],
522	OUT UCHAR *RateLen,
523	OUT BOOLEAN *ExtendedRateIeExist,
524	OUT UCHAR *Erp);
525
526
527	// ================== end of AP RTMP.h ========================
528
529
530	#endif // __AP_H__	77	#endif // __AP_H__
531		78

Lines 528-542 VOID SendRefreshBAR( Link Here

(-)a/drivers/staging/rt2860/common/action.c (-9 / +2 lines)
528	sizeof(FRAME_BAR), &FrameBar,	528	sizeof(FRAME_BAR), &FrameBar,
529	END_OF_ARGS);	529	END_OF_ARGS);
530		530
531	if (1) // Now we always send BAR.	531	MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
532	{	532
533	#ifndef RT30xx
534	MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
535	#endif
536	#ifdef RT30xx
537	MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
538	#endif
539	}
540	MlmeFreeMemory(pAd, pOutBuffer);	533	MlmeFreeMemory(pAd, pOutBuffer);
541	}	534	}
542	}	535	}

Lines 252-365 NDIS_STATUS MiniportMMRequestUnlock( Link Here

(-)a/drivers/staging/rt2860/common/cmm_data.c (-290 / +8 lines)
252	return Status;	252	return Status;
253	}	253	}
254	#endif	254	#endif
255	#ifdef RT30xx
256	NDIS_STATUS MlmeDataHardTransmit(
257	IN PRTMP_ADAPTER pAd,
258	IN UCHAR QueIdx,
259	IN PNDIS_PACKET pPacket);
260
261	#define MAX_DATAMM_RETRY 3
262	/*
263	========================================================================
264
265	Routine Description:
266	API for MLME to transmit management frame to AP (BSS Mode)
267	or station (IBSS Mode)
268
269	Arguments:
270	pAd Pointer to our adapter
271	pData Pointer to the outgoing 802.11 frame
272	Length Size of outgoing management frame
273
274	Return Value:
275	NDIS_STATUS_FAILURE
276	NDIS_STATUS_PENDING
277	NDIS_STATUS_SUCCESS
278
279	IRQL = PASSIVE_LEVEL
280	IRQL = DISPATCH_LEVEL
281
282	Note:
283
284	========================================================================
285	*/
286	NDIS_STATUS MiniportDataMMRequest(
287	IN PRTMP_ADAPTER pAd,
288	IN UCHAR QueIdx,
289	IN PUCHAR pData,
290	IN UINT Length)
291	{
292	PNDIS_PACKET pPacket;
293	NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
294	ULONG FreeNum;
295	int retry = 0;
296	UCHAR IrqState;
297	UCHAR rtmpHwHdr[TXINFO_SIZE + TXWI_SIZE]; //RTMP_HW_HDR_LEN];
298
299	ASSERT(Length <= MGMT_DMA_BUFFER_SIZE);
300
301	// 2860C use Tx Ring
302	IrqState = pAd->irq_disabled;
303
304	do
305	{
306	// Reset is in progress, stop immediately
307	if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS) \|\|
308	RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS \| fRTMP_ADAPTER_NIC_NOT_EXIST)\|\|
309	!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_START_UP))
310	{
311	Status = NDIS_STATUS_FAILURE;
312	break;
313	}
314
315	// Check Free priority queue
316	// Since we use PBF Queue2 for management frame. Its corresponding DMA ring should be using TxRing.
317
318	// 2860C use Tx Ring
319
320	// free Tx(QueIdx) resources
321	FreeNum = GET_TXRING_FREENO(pAd, QueIdx);
322
323	if ((FreeNum > 0))
324	{
325	// We need to reserve space for rtmp hardware header. i.e., TxWI for RT2860 and TxInfo+TxWI for RT2870
326	NdisZeroMemory(&rtmpHwHdr, (TXINFO_SIZE + TXWI_SIZE));
327	Status = RTMPAllocateNdisPacket(pAd, &pPacket, (PUCHAR)&rtmpHwHdr, (TXINFO_SIZE + TXWI_SIZE), pData, Length);
328	if (Status != NDIS_STATUS_SUCCESS)
329	{
330	DBGPRINT(RT_DEBUG_WARN, ("MiniportMMRequest (error:: can't allocate NDIS PACKET)\n"));
331	break;
332	}
333
334	//pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_CCK;
335	//pAd->CommonCfg.MlmeRate = RATE_2;
336
337
338	Status = MlmeDataHardTransmit(pAd, QueIdx, pPacket);
339	if (Status != NDIS_STATUS_SUCCESS)
340	RTMPFreeNdisPacket(pAd, pPacket);
341	retry = MAX_DATAMM_RETRY;
342	}
343	else
344	{
345	retry ++;
346
347	printk("retry %d\n", retry);
348	pAd->RalinkCounters.MgmtRingFullCount++;
349
350	if (retry >= MAX_DATAMM_RETRY)
351	{
352	DBGPRINT(RT_DEBUG_ERROR, ("Qidx(%d), not enough space in DataRing, MgmtRingFullCount=%ld!\n",
353	QueIdx, pAd->RalinkCounters.MgmtRingFullCount));
354	}
355	}
356
357	} while (retry < MAX_DATAMM_RETRY);
358
359
360	return Status;
361	}
362	#endif /* RT30xx */
363		255
364	/*	256	/*
365	========================================================================	257	========================================================================
Lines 588-611 NDIS_STATUS MlmeHardTransmitTxRing( Link Here
588	}	480	}
589	#endif /* RT2860 */	481	#endif /* RT2860 */
590		482
591	#ifdef RT30xx
592	NDIS_STATUS MlmeDataHardTransmit(
593	IN PRTMP_ADAPTER pAd,
594	IN UCHAR QueIdx,
595	IN PNDIS_PACKET pPacket)
596	{
597	if ((pAd->CommonCfg.RadarDetect.RDMode != RD_NORMAL_MODE)
598	)
599	{
600	return NDIS_STATUS_FAILURE;
601	}
602
603	#ifdef RT2870
604	return MlmeHardTransmitMgmtRing(pAd,QueIdx,pPacket);
605	#endif // RT2870 //
606	}
607	#endif /* RT30xx */
608
609	NDIS_STATUS MlmeHardTransmitMgmtRing(	483	NDIS_STATUS MlmeHardTransmitMgmtRing(
610	IN PRTMP_ADAPTER pAd,	484	IN PRTMP_ADAPTER pAd,
611	IN UCHAR QueIdx,	485	IN UCHAR QueIdx,
Lines 1013-1023 BOOLEAN RTMP_FillTxBlkInfo( Link Here
1013	}	887	}
1014		888
1015	return TRUE;	889	return TRUE;
1016
1017	#ifdef RT30xx
1018	FillTxBlkErr:
1019	return FALSE;
1020	#endif
1021	}	890	}
1022		891
1023		892
Lines 1096-1105 VOID RTMPDeQueuePacket( Link Here
1096	TX_BLK TxBlk;	965	TX_BLK TxBlk;
1097	TX_BLK *pTxBlk;	966	TX_BLK *pTxBlk;
1098		967
1099	#ifdef DBG_DIAGNOSE
1100	BOOLEAN firstRound;
1101	RtmpDiagStruct *pDiagStruct = &pAd->DiagStruct;
1102	#endif
1103		968
1104		969
1105	if (QIdx == NUM_OF_TX_RING)	970	if (QIdx == NUM_OF_TX_RING)
Lines 1119-1127 VOID RTMPDeQueuePacket( Link Here
1119		984
1120	RT28XX_START_DEQUEUE(pAd, QueIdx, IrqFlags);	985	RT28XX_START_DEQUEUE(pAd, QueIdx, IrqFlags);
1121		986
1122	#ifdef DBG_DIAGNOSE
1123	firstRound = ((QueIdx == 0) ? TRUE : FALSE);
1124	#endif // DBG_DIAGNOSE //
1125		987
1126	while (1)	988	while (1)
1127	{	989	{
Lines 1141-1171 VOID RTMPDeQueuePacket( Link Here
1141	DEQUEUE_LOCK(&pAd->irq_lock, bIntContext, IrqFlags);	1003	DEQUEUE_LOCK(&pAd->irq_lock, bIntContext, IrqFlags);
1142	if (&pAd->TxSwQueue[QueIdx] == NULL)	1004	if (&pAd->TxSwQueue[QueIdx] == NULL)
1143	{	1005	{
1144	#ifdef DBG_DIAGNOSE
1145	if (firstRound == TRUE)
1146	pDiagStruct->TxSWQueCnt[pDiagStruct->ArrayCurIdx][0]++;
1147	#endif // DBG_DIAGNOSE //
1148	DEQUEUE_UNLOCK(&pAd->irq_lock, bIntContext, IrqFlags);	1006	DEQUEUE_UNLOCK(&pAd->irq_lock, bIntContext, IrqFlags);
1149	break;	1007	break;
1150	}	1008	}
1151	#ifdef RT2860	1009	#ifdef RT2860
1152	FreeNumber[QueIdx] = GET_TXRING_FREENO(pAd, QueIdx);	1010	FreeNumber[QueIdx] = GET_TXRING_FREENO(pAd, QueIdx);
1153		1011
1154	#ifdef DBG_DIAGNOSE
1155	if (firstRound == TRUE)
1156	{
1157	UCHAR txDescNumLevel, txSwQNumLevel;
1158
1159	txDescNumLevel = (TX_RING_SIZE - FreeNumber[QueIdx]); // Number of occupied hw desc.
1160	txDescNumLevel = ((txDescNumLevel <=15) ? txDescNumLevel : 15);
1161	pDiagStruct->TxDescCnt[pDiagStruct->ArrayCurIdx][txDescNumLevel]++;
1162
1163	txSwQNumLevel = ((pAd->TxSwQueue[QueIdx].Number <=7) ? pAd->TxSwQueue[QueIdx].Number : 8);
1164	pDiagStruct->TxSWQueCnt[pDiagStruct->ArrayCurIdx][txSwQNumLevel]++;
1165
1166	firstRound = FALSE;
1167	}
1168	#endif // DBG_DIAGNOSE //
1169		1012
1170	if (FreeNumber[QueIdx] <= 5)	1013	if (FreeNumber[QueIdx] <= 5)
1171	{	1014	{
Lines 1533-1545 VOID RTMPWriteTxWI_Data( Link Here
1533	}	1376	}
1534	}	1377	}
1535		1378
1536	#ifdef DBG_DIAGNOSE
1537	if (pTxBlk->QueIdx== 0)
1538	{
1539	pAd->DiagStruct.TxDataCnt[pAd->DiagStruct.ArrayCurIdx]++;
1540	pAd->DiagStruct.TxMcsCnt[pAd->DiagStruct.ArrayCurIdx][pTxWI->MCS]++;
1541	}
1542	#endif // DBG_DIAGNOSE //
1543		1379
1544	// for rate adapation	1380	// for rate adapation
1545	pTxWI->PacketId = pTxWI->MCS;	1381	pTxWI->PacketId = pTxWI->MCS;
Lines 1598-1610 VOID RTMPWriteTxWI_Cache( Link Here
1598	}	1434	}
1599	}	1435	}
1600		1436
1601	#ifdef DBG_DIAGNOSE
1602	if (pTxBlk->QueIdx== 0)
1603	{
1604	pAd->DiagStruct.TxDataCnt[pAd->DiagStruct.ArrayCurIdx]++;
1605	pAd->DiagStruct.TxMcsCnt[pAd->DiagStruct.ArrayCurIdx][pTxWI->MCS]++;
1606	}
1607	#endif // DBG_DIAGNOSE //
1608		1437
1609	pTxWI->MPDUtotalByteCount = pTxBlk->MpduHeaderLen + pTxBlk->SrcBufLen;	1438	pTxWI->MPDUtotalByteCount = pTxBlk->MpduHeaderLen + pTxBlk->SrcBufLen;
1610		1439
Lines 2062-2180 VOID RTMPHandleRxCoherentInterrupt( Link Here
2062		1891
2063	DBGPRINT(RT_DEBUG_TRACE, ("<== RTMPHandleRxCoherentInterrupt \n"));	1892	DBGPRINT(RT_DEBUG_TRACE, ("<== RTMPHandleRxCoherentInterrupt \n"));
2064	}	1893	}
2065
2066
2067	VOID DBGPRINT_TX_RING(
2068	IN PRTMP_ADAPTER pAd,
2069	IN UCHAR QueIdx)
2070	{
2071	UINT32 Ac0Base;
2072	UINT32 Ac0HwIdx = 0, Ac0SwIdx = 0, AC0freeIdx;
2073	int i;
2074	PULONG ptemp;
2075
2076	DBGPRINT_RAW(RT_DEBUG_TRACE, ("=====================================================\n " ));
2077	switch (QueIdx)
2078	{
2079	case QID_AC_BE:
2080	RTMP_IO_READ32(pAd, TX_BASE_PTR0, &Ac0Base);
2081	RTMP_IO_READ32(pAd, TX_CTX_IDX0, &Ac0SwIdx);
2082	RTMP_IO_READ32(pAd, TX_DTX_IDX0, &Ac0HwIdx);
2083	DBGPRINT_RAW(RT_DEBUG_TRACE, ("All QID_AC_BE DESCRIPTOR \n " ));
2084	for (i=0;i<TX_RING_SIZE;i++)
2085	{
2086	ptemp= (PULONG)pAd->TxRing[QID_AC_BE].Cell[i].AllocVa;
2087	DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d] %08lx: %08lx: %08lx: %08lx\n " , i, ptemp,(ptemp+1),(ptemp+2),(ptemp+3)));
2088	}
2089	DBGPRINT_RAW(RT_DEBUG_TRACE, (" \n " ));
2090	break;
2091	case QID_AC_BK:
2092	RTMP_IO_READ32(pAd, TX_BASE_PTR1, &Ac0Base);
2093	RTMP_IO_READ32(pAd, TX_CTX_IDX1, &Ac0SwIdx);
2094	RTMP_IO_READ32(pAd, TX_DTX_IDX1, &Ac0HwIdx);
2095	DBGPRINT_RAW(RT_DEBUG_TRACE, ("All QID_AC_BK DESCRIPTOR \n " ));
2096	for (i=0;i<TX_RING_SIZE;i++)
2097	{
2098	ptemp= (PULONG)pAd->TxRing[QID_AC_BK].Cell[i].AllocVa;
2099	DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d] %08lx: %08lx: %08lx: %08lx\n " , i, ptemp,(ptemp+1),(ptemp+2),(ptemp+3)));
2100	}
2101	DBGPRINT_RAW(RT_DEBUG_TRACE, (" \n " ));
2102	break;
2103	case QID_AC_VI:
2104	RTMP_IO_READ32(pAd, TX_BASE_PTR2, &Ac0Base);
2105	RTMP_IO_READ32(pAd, TX_CTX_IDX2, &Ac0SwIdx);
2106	RTMP_IO_READ32(pAd, TX_DTX_IDX2, &Ac0HwIdx);
2107	DBGPRINT_RAW(RT_DEBUG_TRACE, ("All QID_AC_VI DESCRIPTOR \n " ));
2108	for (i=0;i<TX_RING_SIZE;i++)
2109	{
2110	ptemp= (PULONG)pAd->TxRing[QID_AC_VI].Cell[i].AllocVa;
2111	DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d] %08lx: %08lx: %08lx: %08lx\n " , i, ptemp,(ptemp+1),(ptemp+2),(ptemp+3)));
2112	}
2113	DBGPRINT_RAW(RT_DEBUG_TRACE, (" \n " ));
2114	break;
2115	case QID_AC_VO:
2116	RTMP_IO_READ32(pAd, TX_BASE_PTR3, &Ac0Base);
2117	RTMP_IO_READ32(pAd, TX_CTX_IDX3, &Ac0SwIdx);
2118	RTMP_IO_READ32(pAd, TX_DTX_IDX3, &Ac0HwIdx);
2119	DBGPRINT_RAW(RT_DEBUG_TRACE, ("All QID_AC_VO DESCRIPTOR \n " ));
2120	for (i=0;i<TX_RING_SIZE;i++)
2121	{
2122	ptemp= (PULONG)pAd->TxRing[QID_AC_VO].Cell[i].AllocVa;
2123	DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d] %08lx: %08lx: %08lx: %08lx\n " , i, ptemp,(ptemp+1),(ptemp+2),(ptemp+3)));
2124	}
2125	DBGPRINT_RAW(RT_DEBUG_TRACE, (" \n " ));
2126	break;
2127	case QID_MGMT:
2128	RTMP_IO_READ32(pAd, TX_BASE_PTR5, &Ac0Base);
2129	RTMP_IO_READ32(pAd, TX_CTX_IDX5, &Ac0SwIdx);
2130	RTMP_IO_READ32(pAd, TX_DTX_IDX5, &Ac0HwIdx);
2131	DBGPRINT_RAW(RT_DEBUG_TRACE, (" All QID_MGMT DESCRIPTOR \n " ));
2132	for (i=0;i<MGMT_RING_SIZE;i++)
2133	{
2134	ptemp= (PULONG)pAd->MgmtRing.Cell[i].AllocVa;
2135	DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d] %08lx: %08lx: %08lx: %08lx\n " , i, ptemp,(ptemp+1),(ptemp+2),(ptemp+3)));
2136	}
2137	DBGPRINT_RAW(RT_DEBUG_TRACE, (" \n " ));
2138	break;
2139
2140	default:
2141	DBGPRINT_ERR(("DBGPRINT_TX_RING(Ring %d) not supported\n", QueIdx));
2142	break;
2143	}
2144	AC0freeIdx = pAd->TxRing[QueIdx].TxSwFreeIdx;
2145
2146	DBGPRINT(RT_DEBUG_TRACE,("TxRing%d, TX_DTX_IDX=%d, TX_CTX_IDX=%d\n", QueIdx, Ac0HwIdx, Ac0SwIdx));
2147	DBGPRINT_RAW(RT_DEBUG_TRACE,(" TxSwFreeIdx[%d]", AC0freeIdx));
2148	DBGPRINT_RAW(RT_DEBUG_TRACE,(" pending-NDIS=%ld\n", pAd->RalinkCounters.PendingNdisPacketCount));
2149
2150
2151	}
2152
2153
2154	VOID DBGPRINT_RX_RING(
2155	IN PRTMP_ADAPTER pAd)
2156	{
2157	UINT32 Ac0Base;
2158	UINT32 Ac0HwIdx = 0, Ac0SwIdx = 0, AC0freeIdx;
2159	int i;
2160	UINT32 *ptemp;
2161
2162	DBGPRINT_RAW(RT_DEBUG_TRACE, ("=====================================================\n " ));
2163	RTMP_IO_READ32(pAd, RX_BASE_PTR, &Ac0Base);
2164	RTMP_IO_READ32(pAd, RX_CRX_IDX, &Ac0SwIdx);
2165	RTMP_IO_READ32(pAd, RX_DRX_IDX, &Ac0HwIdx);
2166	AC0freeIdx = pAd->RxRing.RxSwReadIdx;
2167
2168	DBGPRINT_RAW(RT_DEBUG_TRACE, ("All RX DSP \n " ));
2169	for (i=0;i<RX_RING_SIZE;i++)
2170	{
2171	ptemp = (UINT32 *)pAd->RxRing.Cell[i].AllocVa;
2172	DBGPRINT_RAW(RT_DEBUG_TRACE, ("[%02d] %08x: %08x: %08x: %08x\n " , i, ptemp,(ptemp+1),(ptemp+2),(ptemp+3)));
2173	}
2174	DBGPRINT(RT_DEBUG_TRACE,("RxRing, RX_DRX_IDX=%d, RX_CRX_IDX=%d \n", Ac0HwIdx, Ac0SwIdx));
2175	DBGPRINT_RAW(RT_DEBUG_TRACE,(" RxSwReadIdx [%d]=", AC0freeIdx));
2176	DBGPRINT_RAW(RT_DEBUG_TRACE,(" pending-NDIS=%ld\n", pAd->RalinkCounters.PendingNdisPacketCount));
2177	}
2178	#endif /* RT2860 */	1894	#endif /* RT2860 */
2179		1895
2180	/*	1896	/*
Lines 2235-2241 VOID RTMPResumeMsduTransmission( Link Here
2235	{	1951	{
2236	DBGPRINT(RT_DEBUG_TRACE,("SCAN done, resume MSDU transmission ...\n"));	1952	DBGPRINT(RT_DEBUG_TRACE,("SCAN done, resume MSDU transmission ...\n"));
2237		1953
2238	#ifdef RT30xx
2239	// After finish BSS_SCAN_IN_PROGRESS, we need to restore Current R66 value	1954	// After finish BSS_SCAN_IN_PROGRESS, we need to restore Current R66 value
2240	// R66 should not be 0	1955	// R66 should not be 0
2241	if (pAd->BbpTuning.R66CurrentValue == 0)	1956	if (pAd->BbpTuning.R66CurrentValue == 0)
Lines 2243-2249 VOID RTMPResumeMsduTransmission( Link Here
2243	pAd->BbpTuning.R66CurrentValue = 0x38;	1958	pAd->BbpTuning.R66CurrentValue = 0x38;
2244	DBGPRINT_ERR(("RTMPResumeMsduTransmission, R66CurrentValue=0...\n"));	1959	DBGPRINT_ERR(("RTMPResumeMsduTransmission, R66CurrentValue=0...\n"));
2245	}	1960	}
2246	#endif	1961
2247	RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, pAd->BbpTuning.R66CurrentValue);	1962	RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, pAd->BbpTuning.R66CurrentValue);
2248		1963
2249	RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);	1964	RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
Lines 2296-2301 UINT deaggregate_AMSDU_announce( Link Here
2296	{	2011	{
2297	// avoid local heap overflow, use dyanamic allocation	2012	// avoid local heap overflow, use dyanamic allocation
2298	MLME_QUEUE_ELEM Elem = (MLME_QUEUE_ELEM ) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);	2013	MLME_QUEUE_ELEM Elem = (MLME_QUEUE_ELEM ) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
		2014	if (Elem == NULL)
		2015	return;
2299	memmove(Elem->Msg+(LENGTH_802_11 + LENGTH_802_1_H), pPayload, PayloadSize);	2016	memmove(Elem->Msg+(LENGTH_802_11 + LENGTH_802_1_H), pPayload, PayloadSize);
2300	Elem->MsgLen = LENGTH_802_11 + LENGTH_802_1_H + PayloadSize;	2017	Elem->MsgLen = LENGTH_802_11 + LENGTH_802_1_H + PayloadSize;
2301	WpaEAPOLKeyAction(pAd, Elem);	2018	WpaEAPOLKeyAction(pAd, Elem);
Lines 2617-2627 BOOLEAN MacTableDeleteEntry( Link Here
2617	if (pAd->MacTab.Size == 0)	2334	if (pAd->MacTab.Size == 0)
2618	{	2335	{
2619	pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode = 0;	2336	pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode = 0;
2620	#ifndef RT30xx	2337	#ifdef RT2860
2621	AsicUpdateProtect(pAd, 0 /pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode/, (ALLN_SETPROTECT), TRUE, 0 /pAd->MacTab.fAnyStationNonGF/);	2338	AsicUpdateProtect(pAd, 0 /pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode/, (ALLN_SETPROTECT), TRUE, 0 /pAd->MacTab.fAnyStationNonGF/);
2622	#endif	2339	#else
2623	#ifdef RT30xx	2340	// edit by johnli, fix "in_interrupt" error when call "MacTableDeleteEntry" in Rx tasklet
2624	RT28XX_UPDATE_PROTECT(pAd); // edit by johnli, fix "in_interrupt" error when call "MacTableDeleteEntry" in Rx tasklet	2341	// Set MAC register value according operation mode
		2342	RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_UPDATE_PROTECT, NULL, 0);
2625	#endif	2343	#endif
2626	}	2344	}
2627		2345

Lines 25-30 Link Here

(-)a/drivers/staging/rt2860/common/cmm_info.c (-24 / +2 lines)
25	*************************************************************************	25	*************************************************************************
26	*/	26	*/
27		27
		28	#include <linux/sched.h>
28	#include "../rt_config.h"	29	#include "../rt_config.h"
29		30
30	INT Show_SSID_Proc(	31	INT Show_SSID_Proc(
Lines 1419-1435 VOID RTMPSetHT( Link Here
1419	pAd->CommonCfg.DesiredHtPhy.RxSTBC = 0;	1420	pAd->CommonCfg.DesiredHtPhy.RxSTBC = 0;
1420	}	1421	}
1421		1422
1422	#ifndef RT30xx
1423	#ifdef RT2870
1424	/* Frank recommend ,If not, Tx maybe block in high power. Rx has no problem*/
1425	if(IS_RT3070(pAd) && ((pAd->RfIcType == RFIC_3020) \|\| (pAd->RfIcType == RFIC_2020)))
1426	{
1427	pAd->CommonCfg.HtCapability.HtCapInfo.TxSTBC = 0;
1428	pAd->CommonCfg.DesiredHtPhy.TxSTBC = 0;
1429	}
1430	#endif // RT2870 //
1431	#endif
1432
1433	if(pHTPhyMode->SHORTGI == GI_400)	1423	if(pHTPhyMode->SHORTGI == GI_400)
1434	{	1424	{
1435	pAd->CommonCfg.HtCapability.HtCapInfo.ShortGIfor20 = 1;	1425	pAd->CommonCfg.HtCapability.HtCapInfo.ShortGIfor20 = 1;
Lines 2491-2514 INT Set_HtAutoBa_Proc( Link Here
2491	if (Value == 0)	2481	if (Value == 0)
2492	{	2482	{
2493	pAd->CommonCfg.BACapability.field.AutoBA = FALSE;	2483	pAd->CommonCfg.BACapability.field.AutoBA = FALSE;
2494	#ifdef RT30xx
2495	pAd->CommonCfg.BACapability.field.Policy = BA_NOTUSE;	2484	pAd->CommonCfg.BACapability.field.Policy = BA_NOTUSE;
2496	#endif
2497	}	2485	}
2498	else if (Value == 1)	2486	else if (Value == 1)
2499	{	2487	{
2500	pAd->CommonCfg.BACapability.field.AutoBA = TRUE;	2488	pAd->CommonCfg.BACapability.field.AutoBA = TRUE;
2501	#ifdef RT30xx
2502	pAd->CommonCfg.BACapability.field.Policy = IMMED_BA;	2489	pAd->CommonCfg.BACapability.field.Policy = IMMED_BA;
2503	#endif
2504	}	2490	}
2505	else	2491	else
2506	return FALSE; //Invalid argument	2492	return FALSE; //Invalid argument
2507		2493
2508	pAd->CommonCfg.REGBACapability.field.AutoBA = pAd->CommonCfg.BACapability.field.AutoBA;	2494	pAd->CommonCfg.REGBACapability.field.AutoBA = pAd->CommonCfg.BACapability.field.AutoBA;
2509	#ifdef RT30xx
2510	pAd->CommonCfg.REGBACapability.field.Policy = pAd->CommonCfg.BACapability.field.Policy;	2495	pAd->CommonCfg.REGBACapability.field.Policy = pAd->CommonCfg.BACapability.field.Policy;
2511	#endif	2496
2512	SetCommonHT(pAd);	2497	SetCommonHT(pAd);
2513		2498
2514	DBGPRINT(RT_DEBUG_TRACE, ("Set_HtAutoBa_Proc::(HtAutoBa=%d)\n",pAd->CommonCfg.BACapability.field.AutoBA));	2499	DBGPRINT(RT_DEBUG_TRACE, ("Set_HtAutoBa_Proc::(HtAutoBa=%d)\n",pAd->CommonCfg.BACapability.field.AutoBA));
Lines 2725-2733 PCHAR RTMPGetRalinkAuthModeStr( Link Here
2725	{	2710	{
2726	case Ndis802_11AuthModeOpen:	2711	case Ndis802_11AuthModeOpen:
2727	return "OPEN";	2712	return "OPEN";
2728	#if defined(RT2860) \|\| defined(RT30xx)
2729	default:
2730	#endif
2731	case Ndis802_11AuthModeWPAPSK:	2713	case Ndis802_11AuthModeWPAPSK:
2732	return "WPAPSK";	2714	return "WPAPSK";
2733	case Ndis802_11AuthModeShared:	2715	case Ndis802_11AuthModeShared:
Lines 2742-2755 PCHAR RTMPGetRalinkAuthModeStr( Link Here
2742	return "WPAPSKWPA2PSK";	2724	return "WPAPSKWPA2PSK";
2743	case Ndis802_11AuthModeWPA1WPA2:	2725	case Ndis802_11AuthModeWPA1WPA2:
2744	return "WPA1WPA2";	2726	return "WPA1WPA2";
2745	#ifndef RT30xx
2746	case Ndis802_11AuthModeWPANone:	2727	case Ndis802_11AuthModeWPANone:
2747	return "WPANONE";	2728	return "WPANONE";
2748	#ifdef RT2870
2749	default:	2729	default:
2750	return "UNKNOW";	2730	return "UNKNOW";
2751	#endif
2752	#endif
2753	}	2731	}
2754	}	2732	}
2755		2733

Lines 73-88 USHORT ShiftInBits( Link Here

(-)a/drivers/staging/rt2860/common/eeprom.c (-43 / +12 lines)
73	RaiseClock(pAd, &x);	73	RaiseClock(pAd, &x);
74		74
75	RTMP_IO_READ32(pAd, E2PROM_CSR, &x);	75	RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
76	#ifdef RT30xx	76
77	LowerClock(pAd, &x); //prevent read failed	77	LowerClock(pAd, &x); /* prevent read failed */
78	#endif	78
79	x &= ~(EEDI);	79	x &= ~(EEDI);
80	if(x & EEDO)	80	if(x & EEDO)
81	data \|= 1;	81	data \|= 1;
82
83	#ifndef RT30xx
84	LowerClock(pAd, &x);
85	#endif
86	}	82	}
87		83
88	return data;	84	return data;
Lines 185-198 USHORT RTMP_EEPROM_READ16( Link Here
185	UINT32 x;	181	UINT32 x;
186	USHORT data;	182	USHORT data;
187		183
188	#ifdef RT30xx	184	#ifdef RT2870
189	if (pAd->NicConfig2.field.AntDiversity)	185	if (pAd->NicConfig2.field.AntDiversity)
190	{	186	{
191	pAd->EepromAccess = TRUE;	187	pAd->EepromAccess = TRUE;
192	}	188	}
193	//2008/09/11:KH add to support efuse<--
194	//2008/09/11:KH add to support efuse-->
195	{
196	#endif	189	#endif
197	Offset /= 2;	190	Offset /= 2;
198	// reset bits and set EECS	191	// reset bits and set EECS
Lines 201-217 USHORT RTMP_EEPROM_READ16( Link Here
201	x \|= EECS;	194	x \|= EECS;
202	RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);	195	RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);
203		196
204	#ifdef RT30xx
205	// patch can not access e-Fuse issue	197	// patch can not access e-Fuse issue
206	if (!IS_RT3090(pAd))	198	if (!IS_RT3090(pAd))
207	{	199	{
208	#endif
209	// kick a pulse	200	// kick a pulse
210	RaiseClock(pAd, &x);	201	RaiseClock(pAd, &x);
211	LowerClock(pAd, &x);	202	LowerClock(pAd, &x);
212	#ifdef RT30xx
213	}	203	}
214	#endif
215		204
216	// output the read_opcode and register number in that order	205	// output the read_opcode and register number in that order
217	ShiftOutBits(pAd, EEPROM_READ_OPCODE, 3);	206	ShiftOutBits(pAd, EEPROM_READ_OPCODE, 3);
Lines 222-228 USHORT RTMP_EEPROM_READ16( Link Here
222		211
223	EEpromCleanup(pAd);	212	EEpromCleanup(pAd);
224		213
225	#ifdef RT30xx	214	#ifdef RT2870
226	// Antenna and EEPROM access are both using EESK pin,	215	// Antenna and EEPROM access are both using EESK pin,
227	// Therefor we should avoid accessing EESK at the same time	216	// Therefor we should avoid accessing EESK at the same time
228	// Then restore antenna after EEPROM access	217	// Then restore antenna after EEPROM access
Lines 231-237 USHORT RTMP_EEPROM_READ16( Link Here
231	pAd->EepromAccess = FALSE;	220	pAd->EepromAccess = FALSE;
232	AsicSetRxAnt(pAd, pAd->RxAnt.Pair1PrimaryRxAnt);	221	AsicSetRxAnt(pAd, pAd->RxAnt.Pair1PrimaryRxAnt);
233	}	222	}
234	}
235	#endif	223	#endif
236	return data;	224	return data;
237	} //ReadEEprom	225	} //ReadEEprom
Lines 243-256 VOID RTMP_EEPROM_WRITE16( Link Here
243	{	231	{
244	UINT32 x;	232	UINT32 x;
245		233
246	#ifdef RT30xx	234	#ifdef RT2870
247	if (pAd->NicConfig2.field.AntDiversity)	235	if (pAd->NicConfig2.field.AntDiversity)
248	{	236	{
249	pAd->EepromAccess = TRUE;	237	pAd->EepromAccess = TRUE;
250	}	238	}
251	//2008/09/11:KH add to support efuse<--
252	//2008/09/11:KH add to support efuse-->
253	{
254	#endif	239	#endif
255	Offset /= 2;	240	Offset /= 2;
256		241
Lines 262-278 VOID RTMP_EEPROM_WRITE16( Link Here
262	x \|= EECS;	247	x \|= EECS;
263	RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);	248	RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);
264		249
265	#ifdef RT30xx
266	// patch can not access e-Fuse issue	250	// patch can not access e-Fuse issue
267	if (!IS_RT3090(pAd))	251	if (!IS_RT3090(pAd))
268	{	252	{
269	#endif
270	// kick a pulse	253	// kick a pulse
271	RaiseClock(pAd, &x);	254	RaiseClock(pAd, &x);
272	LowerClock(pAd, &x);	255	LowerClock(pAd, &x);
273	#ifdef RT30xx
274	}	256	}
275	#endif
276		257
277	// output the read_opcode ,register number and data in that order	258	// output the read_opcode ,register number and data in that order
278	ShiftOutBits(pAd, EEPROM_WRITE_OPCODE, 3);	259	ShiftOutBits(pAd, EEPROM_WRITE_OPCODE, 3);
Lines 290-296 VOID RTMP_EEPROM_WRITE16( Link Here
290		271
291	EEpromCleanup(pAd);	272	EEpromCleanup(pAd);
292		273
293	#ifdef RT30xx	274	#ifdef RT2870
294	// Antenna and EEPROM access are both using EESK pin,	275	// Antenna and EEPROM access are both using EESK pin,
295	// Therefor we should avoid accessing EESK at the same time	276	// Therefor we should avoid accessing EESK at the same time
296	// Then restore antenna after EEPROM access	277	// Then restore antenna after EEPROM access
Lines 299-310 VOID RTMP_EEPROM_WRITE16( Link Here
299	pAd->EepromAccess = FALSE;	280	pAd->EepromAccess = FALSE;
300	AsicSetRxAnt(pAd, pAd->RxAnt.Pair1PrimaryRxAnt);	281	AsicSetRxAnt(pAd, pAd->RxAnt.Pair1PrimaryRxAnt);
301	}	282	}
302	}
303	#endif	283	#endif
304	}	284	}
305		285
306	//2008/09/11:KH add to support efuse<--	286	#ifdef RT2870
307	#ifdef RT30xx
308	/*	287	/*
309	========================================================================	288	========================================================================
310		289
Lines 1038-1044 INT set_eFuseLoadFromBin_Proc( Link Here
1038	{	1017	{
1039	CHAR *src;	1018	CHAR *src;
1040	struct file *srcf;	1019	struct file *srcf;
1041	INT retval, orgfsuid, orgfsgid;	1020	INT retval;
1042	mm_segment_t orgfs;	1021	mm_segment_t orgfs;
1043	UCHAR *buffer;	1022	UCHAR *buffer;
1044	UCHAR BinFileSize=0;	1023	UCHAR BinFileSize=0;
Lines 1078-1089 INT set_eFuseLoadFromBin_Proc( Link Here
1078	kfree(buffer);	1057	kfree(buffer);
1079	return FALSE;	1058	return FALSE;
1080	}	1059	}
1081	/* Don't change to uid 0, let the file be opened as the "normal" user */	1060
1082	#if 0
1083	orgfsuid = current->fsuid;
1084	orgfsgid = current->fsgid;
1085	current->fsuid=current->fsgid = 0;
1086	#endif
1087	orgfs = get_fs();	1061	orgfs = get_fs();
1088	set_fs(KERNEL_DS);	1062	set_fs(KERNEL_DS);
1089		1063
Lines 1146-1155 INT set_eFuseLoadFromBin_Proc( Link Here
1146	DBGPRINT(RT_DEBUG_TRACE, ("--> Error %d closing %s\n", -retval, src));	1120	DBGPRINT(RT_DEBUG_TRACE, ("--> Error %d closing %s\n", -retval, src));
1147	}	1121	}
1148	set_fs(orgfs);	1122	set_fs(orgfs);
1149	#if 0	1123
1150	current->fsuid = orgfsuid;
1151	current->fsgid = orgfsgid;
1152	#endif
1153	for(j=0;j<i;j++)	1124	for(j=0;j<i;j++)
1154	{	1125	{
1155	DBGPRINT(RT_DEBUG_TRACE, ("%02X ",buffer[j]));	1126	DBGPRINT(RT_DEBUG_TRACE, ("%02X ",buffer[j]));
Lines 1505-1510 NTSTATUS eFuseWriteRegistersFromBin( Link Here
1505		1476
1506	return TRUE;	1477	return TRUE;
1507	}	1478	}
1508		1479	#endif
1509	#endif // RT30xx //
1510	//2008/09/11:KH add to support efuse-->

Lines 77-94 ULONG RTMPReadRadarDuration( Link Here

(-)a/drivers/staging/rt2860/dfs.h (-12 lines)
77	VOID RTMPCleanRadarDuration(	77	VOID RTMPCleanRadarDuration(
78	IN PRTMP_ADAPTER pAd);	78	IN PRTMP_ADAPTER pAd);
79		79
80	VOID RTMPPrepareRDCTSFrame(
81	IN PRTMP_ADAPTER pAd,
82	IN PUCHAR pDA,
83	IN ULONG Duration,
84	IN UCHAR RTSRate,
85	IN ULONG CTSBaseAddr,
86	IN UCHAR FrameGap);
87
88	VOID RTMPPrepareRadarDetectParams(
89	IN PRTMP_ADAPTER pAd);
90
91
92	INT Set_ChMovingTime_Proc(	80	INT Set_ChMovingTime_Proc(
93	IN PRTMP_ADAPTER pAd,	81	IN PRTMP_ADAPTER pAd,
94	IN PUCHAR arg);	82	IN PUCHAR arg);

Lines 1-134 Link Here

(-)a/drivers/staging/rt2860/link_list.h (-134 lines)
1	/*
2	*************************************************************************
3	* Ralink Tech Inc.
4	* 5F., No.36, Taiyuan St., Jhubei City,
5	* Hsinchu County 302,
6	* Taiwan, R.O.C.
7	*
8	* (c) Copyright 2002-2007, Ralink Technology, Inc.
9	*
10	* This program is free software; you can redistribute it and/or modify *
11	* it under the terms of the GNU General Public License as published by *
12	* the Free Software Foundation; either version 2 of the License, or *
13	* (at your option) any later version. *
14	* *
15	* This program is distributed in the hope that it will be useful, *
16	* but WITHOUT ANY WARRANTY; without even the implied warranty of *
17	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
18	* GNU General Public License for more details. *
19	* *
20	* You should have received a copy of the GNU General Public License *
21	* along with this program; if not, write to the *
22	* Free Software Foundation, Inc., *
23	* 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
24	* *
25	*************************************************************************
26	*/
27
28	#ifndef __LINK_LIST_H__
29	#define __LINK_LIST_H__
30
31	typedef struct _LIST_ENTRY
32	{
33	struct _LIST_ENTRY *pNext;
34	} LIST_ENTRY, *PLIST_ENTRY;
35
36	typedef struct _LIST_HEADR
37	{
38	PLIST_ENTRY pHead;
39	PLIST_ENTRY pTail;
40	UCHAR size;
41	} LIST_HEADER, *PLIST_HEADER;
42
43	static inline VOID initList(
44	IN PLIST_HEADER pList)
45	{
46	pList->pHead = pList->pTail = NULL;
47	pList->size = 0;
48	return;
49	}
50
51	static inline VOID insertTailList(
52	IN PLIST_HEADER pList,
53	IN PLIST_ENTRY pEntry)
54	{
55	pEntry->pNext = NULL;
56	if (pList->pTail)
57	pList->pTail->pNext = pEntry;
58	else
59	pList->pHead = pEntry;
60	pList->pTail = pEntry;
61	pList->size++;
62
63	return;
64	}
65
66	static inline PLIST_ENTRY removeHeadList(
67	IN PLIST_HEADER pList)
68	{
69	PLIST_ENTRY pNext;
70	PLIST_ENTRY pEntry;
71
72	pEntry = pList->pHead;
73	if (pList->pHead != NULL)
74	{
75	pNext = pList->pHead->pNext;
76	pList->pHead = pNext;
77	if (pNext == NULL)
78	pList->pTail = NULL;
79	pList->size--;
80	}
81	return pEntry;
82	}
83
84	static inline int getListSize(
85	IN PLIST_HEADER pList)
86	{
87	return pList->size;
88	}
89
90	static inline PLIST_ENTRY delEntryList(
91	IN PLIST_HEADER pList,
92	IN PLIST_ENTRY pEntry)
93	{
94	PLIST_ENTRY pCurEntry;
95	PLIST_ENTRY pPrvEntry;
96
97	if(pList->pHead == NULL)
98	return NULL;
99
100	if(pEntry == pList->pHead)
101	{
102	pCurEntry = pList->pHead;
103	pList->pHead = pCurEntry->pNext;
104
105	if(pList->pHead == NULL)
106	pList->pTail = NULL;
107
108	pList->size--;
109	return pCurEntry;
110	}
111
112	pPrvEntry = pList->pHead;
113	pCurEntry = pPrvEntry->pNext;
114	while(pCurEntry != NULL)
115	{
116	if (pEntry == pCurEntry)
117	{
118	pPrvEntry->pNext = pCurEntry->pNext;
119
120	if(pEntry == pList->pTail)
121	pList->pTail = pPrvEntry;
122
123	pList->size--;
124	break;
125	}
126	pPrvEntry = pCurEntry;
127	pCurEntry = pPrvEntry->pNext;
128	}
129
130	return pCurEntry;
131	}
132
133	#endif // ___LINK_LIST_H__ //
134

Lines 92-227 Link Here

(-)a/drivers/staging/rt2860/oid.h (-163 / +7 lines)
92	//	92	//
93	#define OID_GET_SET_TOGGLE 0x8000	93	#define OID_GET_SET_TOGGLE 0x8000
94		94
95	#define OID_802_11_NETWORK_TYPES_SUPPORTED 0x0103	95	#define OID_802_11_ADD_WEP 0x0112
96	#define OID_802_11_NETWORK_TYPE_IN_USE 0x0104	96	#define OID_802_11_DISASSOCIATE 0x0114
97	#define OID_802_11_RSSI_TRIGGER 0x0107	97	#define OID_802_11_BSSID_LIST_SCAN 0x0508
98	#define RT_OID_802_11_RSSI 0x0108 //rt2860 only , kathy	98	#define OID_802_11_SSID 0x0509
99	#define RT_OID_802_11_RSSI_1 0x0109 //rt2860 only , kathy	99	#define OID_802_11_BSSID 0x050A
100	#define RT_OID_802_11_RSSI_2 0x010A //rt2860 only , kathy	100	#define OID_802_11_MIC_FAILURE_REPORT_FRAME 0x0528
101	#define OID_802_11_NUMBER_OF_ANTENNAS 0x010B
102	#define OID_802_11_RX_ANTENNA_SELECTED 0x010C
103	#define OID_802_11_TX_ANTENNA_SELECTED 0x010D
104	#define OID_802_11_SUPPORTED_RATES 0x010E
105	#define OID_802_11_ADD_WEP 0x0112
106	#define OID_802_11_REMOVE_WEP 0x0113
107	#define OID_802_11_DISASSOCIATE 0x0114
108	#define OID_802_11_PRIVACY_FILTER 0x0118
109	#define OID_802_11_ASSOCIATION_INFORMATION 0x011E
110	#define OID_802_11_TEST 0x011F
111	#define RT_OID_802_11_COUNTRY_REGION 0x0507
112	#define OID_802_11_BSSID_LIST_SCAN 0x0508
113	#define OID_802_11_SSID 0x0509
114	#define OID_802_11_BSSID 0x050A
115	#define RT_OID_802_11_RADIO 0x050B
116	#define RT_OID_802_11_PHY_MODE 0x050C
117	#define RT_OID_802_11_STA_CONFIG 0x050D
118	#define OID_802_11_DESIRED_RATES 0x050E
119	#define RT_OID_802_11_PREAMBLE 0x050F
120	#define OID_802_11_WEP_STATUS 0x0510
121	#define OID_802_11_AUTHENTICATION_MODE 0x0511
122	#define OID_802_11_INFRASTRUCTURE_MODE 0x0512
123	#define RT_OID_802_11_RESET_COUNTERS 0x0513
124	#define OID_802_11_RTS_THRESHOLD 0x0514
125	#define OID_802_11_FRAGMENTATION_THRESHOLD 0x0515
126	#define OID_802_11_POWER_MODE 0x0516
127	#define OID_802_11_TX_POWER_LEVEL 0x0517
128	#define RT_OID_802_11_ADD_WPA 0x0518
129	#define OID_802_11_REMOVE_KEY 0x0519
130	#define OID_802_11_ADD_KEY 0x0520
131	#define OID_802_11_CONFIGURATION 0x0521
132	#define OID_802_11_TX_PACKET_BURST 0x0522
133	#define RT_OID_802_11_QUERY_NOISE_LEVEL 0x0523
134	#define RT_OID_802_11_EXTRA_INFO 0x0524
135	#ifdef DBG
136	#define RT_OID_802_11_HARDWARE_REGISTER 0x0525
137	#endif
138	#define OID_802_11_ENCRYPTION_STATUS OID_802_11_WEP_STATUS
139	#define OID_802_11_DEAUTHENTICATION 0x0526
140	#define OID_802_11_DROP_UNENCRYPTED 0x0527
141	#define OID_802_11_MIC_FAILURE_REPORT_FRAME 0x0528
142
143	// For 802.1x daemin using to require current driver configuration
144	#define OID_802_11_RADIUS_QUERY_SETTING 0x0540
145		101
146	#define RT_OID_DEVICE_NAME 0x0607	102	#define RT_OID_DEVICE_NAME 0x0607
147	#define RT_OID_VERSION_INFO 0x0608	103	#define RT_OID_VERSION_INFO 0x0608
148	#define OID_802_11_BSSID_LIST 0x0609
149	#define OID_802_3_CURRENT_ADDRESS 0x060A
150	#define OID_GEN_MEDIA_CONNECT_STATUS 0x060B	104	#define OID_GEN_MEDIA_CONNECT_STATUS 0x060B
151	#define RT_OID_802_11_QUERY_LINK_STATUS 0x060C
152	#define OID_802_11_RSSI 0x060D
153	#define OID_802_11_STATISTICS 0x060E
154	#define OID_GEN_RCV_OK 0x060F	105	#define OID_GEN_RCV_OK 0x060F
155	#define OID_GEN_RCV_NO_BUFFER 0x0610	106	#define OID_GEN_RCV_NO_BUFFER 0x0610
156	#define RT_OID_802_11_QUERY_EEPROM_VERSION 0x0611
157	#define RT_OID_802_11_QUERY_FIRMWARE_VERSION 0x0612
158	#define RT_OID_802_11_QUERY_LAST_RX_RATE 0x0613
159	#define RT_OID_802_11_TX_POWER_LEVEL_1 0x0614
160	#define RT_OID_802_11_QUERY_PIDVID 0x0615
161		107
162	#define OID_SET_COUNTERMEASURES 0x0616	108	#define OID_SET_COUNTERMEASURES 0x0616
163	#define OID_802_11_SET_IEEE8021X 0x0617
164	#define OID_802_11_SET_IEEE8021X_REQUIRE_KEY 0x0618
165	#define OID_802_11_PMKID 0x0620
166	#define RT_OID_WPA_SUPPLICANT_SUPPORT 0x0621	109	#define RT_OID_WPA_SUPPLICANT_SUPPORT 0x0621
167	#define RT_OID_WE_VERSION_COMPILED 0x0622	110	#define RT_OID_WE_VERSION_COMPILED 0x0622
168	#define RT_OID_NEW_DRIVER 0x0623	111	#define RT_OID_NEW_DRIVER 0x0623
169		112
170
171	//rt2860 , kathy	113	//rt2860 , kathy
172	#define RT_OID_802_11_SNR_0 0x0630
173	#define RT_OID_802_11_SNR_1 0x0631
174	#define RT_OID_802_11_QUERY_LAST_TX_RATE 0x0632
175	#define RT_OID_802_11_QUERY_HT_PHYMODE 0x0633
176	#define RT_OID_802_11_SET_HT_PHYMODE 0x0634
177	#define OID_802_11_RELOAD_DEFAULTS 0x0635
178	#define RT_OID_802_11_QUERY_APSD_SETTING 0x0636
179	#define RT_OID_802_11_SET_APSD_SETTING 0x0637
180	#define RT_OID_802_11_QUERY_APSD_PSM 0x0638
181	#define RT_OID_802_11_SET_APSD_PSM 0x0639
182	#define RT_OID_802_11_QUERY_DLS 0x063A
183	#define RT_OID_802_11_SET_DLS 0x063B
184	#define RT_OID_802_11_QUERY_DLS_PARAM 0x063C
185	#define RT_OID_802_11_SET_DLS_PARAM 0x063D
186	#define RT_OID_802_11_QUERY_WMM 0x063E
187	#define RT_OID_802_11_SET_WMM 0x063F
188	#define RT_OID_802_11_QUERY_IMME_BA_CAP 0x0640
189	#define RT_OID_802_11_SET_IMME_BA_CAP 0x0641
190	#define RT_OID_802_11_QUERY_BATABLE 0x0642
191	#define RT_OID_802_11_ADD_IMME_BA 0x0643
192	#define RT_OID_802_11_TEAR_IMME_BA 0x0644
193	#define RT_OID_DRIVER_DEVICE_NAME 0x0645	114	#define RT_OID_DRIVER_DEVICE_NAME 0x0645
194	#define RT_OID_802_11_QUERY_DAT_HT_PHYMODE 0x0646
195	#define RT_OID_QUERY_MULTIPLE_CARD_SUPPORT 0x0647	115	#define RT_OID_QUERY_MULTIPLE_CARD_SUPPORT 0x0647
196		116
197	// Ralink defined OIDs	117	// Ralink defined OIDs
198	// Dennis Lee move to platform specific	118	// Dennis Lee move to platform specific
199		119
200	#define RT_OID_802_11_BSSID (OID_GET_SET_TOGGLE \| OID_802_11_BSSID)
201	#define RT_OID_802_11_SSID (OID_GET_SET_TOGGLE \| OID_802_11_SSID)
202	#define RT_OID_802_11_INFRASTRUCTURE_MODE (OID_GET_SET_TOGGLE \| OID_802_11_INFRASTRUCTURE_MODE)
203	#define RT_OID_802_11_ADD_WEP (OID_GET_SET_TOGGLE \| OID_802_11_ADD_WEP)
204	#define RT_OID_802_11_ADD_KEY (OID_GET_SET_TOGGLE \| OID_802_11_ADD_KEY)
205	#define RT_OID_802_11_REMOVE_WEP (OID_GET_SET_TOGGLE \| OID_802_11_REMOVE_WEP)
206	#define RT_OID_802_11_REMOVE_KEY (OID_GET_SET_TOGGLE \| OID_802_11_REMOVE_KEY)
207	#define RT_OID_802_11_DISASSOCIATE (OID_GET_SET_TOGGLE \| OID_802_11_DISASSOCIATE)
208	#define RT_OID_802_11_AUTHENTICATION_MODE (OID_GET_SET_TOGGLE \| OID_802_11_AUTHENTICATION_MODE)
209	#define RT_OID_802_11_PRIVACY_FILTER (OID_GET_SET_TOGGLE \| OID_802_11_PRIVACY_FILTER)
210	#define RT_OID_802_11_BSSID_LIST_SCAN (OID_GET_SET_TOGGLE \| OID_802_11_BSSID_LIST_SCAN)
211	#define RT_OID_802_11_WEP_STATUS (OID_GET_SET_TOGGLE \| OID_802_11_WEP_STATUS)
212	#define RT_OID_802_11_RELOAD_DEFAULTS (OID_GET_SET_TOGGLE \| OID_802_11_RELOAD_DEFAULTS)
213	#define RT_OID_802_11_NETWORK_TYPE_IN_USE (OID_GET_SET_TOGGLE \| OID_802_11_NETWORK_TYPE_IN_USE)
214	#define RT_OID_802_11_TX_POWER_LEVEL (OID_GET_SET_TOGGLE \| OID_802_11_TX_POWER_LEVEL)
215	#define RT_OID_802_11_RSSI_TRIGGER (OID_GET_SET_TOGGLE \| OID_802_11_RSSI_TRIGGER)
216	#define RT_OID_802_11_FRAGMENTATION_THRESHOLD (OID_GET_SET_TOGGLE \| OID_802_11_FRAGMENTATION_THRESHOLD)
217	#define RT_OID_802_11_RTS_THRESHOLD (OID_GET_SET_TOGGLE \| OID_802_11_RTS_THRESHOLD)
218	#define RT_OID_802_11_RX_ANTENNA_SELECTED (OID_GET_SET_TOGGLE \| OID_802_11_RX_ANTENNA_SELECTED)
219	#define RT_OID_802_11_TX_ANTENNA_SELECTED (OID_GET_SET_TOGGLE \| OID_802_11_TX_ANTENNA_SELECTED)
220	#define RT_OID_802_11_SUPPORTED_RATES (OID_GET_SET_TOGGLE \| OID_802_11_SUPPORTED_RATES)
221	#define RT_OID_802_11_DESIRED_RATES (OID_GET_SET_TOGGLE \| OID_802_11_DESIRED_RATES)
222	#define RT_OID_802_11_CONFIGURATION (OID_GET_SET_TOGGLE \| OID_802_11_CONFIGURATION)
223	#define RT_OID_802_11_POWER_MODE (OID_GET_SET_TOGGLE \| OID_802_11_POWER_MODE)
224
225	typedef enum _NDIS_802_11_STATUS_TYPE	120	typedef enum _NDIS_802_11_STATUS_TYPE
226	{	121	{
227	Ndis802_11StatusType_Authentication,	122	Ndis802_11StatusType_Authentication,
Lines 535-544 typedef enum _NDIS_802_11_WEP_STATUS Link Here
535	Ndis802_11Encryption3KeyAbsent,	430	Ndis802_11Encryption3KeyAbsent,
536	Ndis802_11Encryption4Enabled, // TKIP or AES mix	431	Ndis802_11Encryption4Enabled, // TKIP or AES mix
537	Ndis802_11Encryption4KeyAbsent,	432	Ndis802_11Encryption4KeyAbsent,
538	#ifndef RT30xx
539	Ndis802_11GroupWEP40Enabled,	433	Ndis802_11GroupWEP40Enabled,
540	Ndis802_11GroupWEP104Enabled,	434	Ndis802_11GroupWEP104Enabled,
541	#endif
542	} NDIS_802_11_WEP_STATUS, *PNDIS_802_11_WEP_STATUS,	435	} NDIS_802_11_WEP_STATUS, *PNDIS_802_11_WEP_STATUS,
543	NDIS_802_11_ENCRYPTION_STATUS, *PNDIS_802_11_ENCRYPTION_STATUS;	436	NDIS_802_11_ENCRYPTION_STATUS, *PNDIS_802_11_ENCRYPTION_STATUS;
544		437
Lines 626-652 typedef struct _NDIS_802_11_CAPABILITY Link Here
626	NDIS_802_11_AUTHENTICATION_ENCRYPTION AuthenticationEncryptionSupported[1];	519	NDIS_802_11_AUTHENTICATION_ENCRYPTION AuthenticationEncryptionSupported[1];
627	} NDIS_802_11_CAPABILITY, *PNDIS_802_11_CAPABILITY;	520	} NDIS_802_11_CAPABILITY, *PNDIS_802_11_CAPABILITY;
628		521
629	#if WIRELESS_EXT <= 11
630	#ifndef SIOCDEVPRIVATE
631	#define SIOCDEVPRIVATE 0x8BE0
632	#endif
633	#define SIOCIWFIRSTPRIV SIOCDEVPRIVATE
634	#endif
635
636	#ifdef RT30xx
637	#define RT_PRIV_IOCTL_EXT (SIOCIWFIRSTPRIV + 0x01) // Sync. with AP for wsc upnp daemon	522	#define RT_PRIV_IOCTL_EXT (SIOCIWFIRSTPRIV + 0x01) // Sync. with AP for wsc upnp daemon
638	#endif
639	#define RTPRIV_IOCTL_SET (SIOCIWFIRSTPRIV + 0x02)	523	#define RTPRIV_IOCTL_SET (SIOCIWFIRSTPRIV + 0x02)
640		524
641	#ifdef DBG
642	#define RTPRIV_IOCTL_BBP (SIOCIWFIRSTPRIV + 0x03)
643	#define RTPRIV_IOCTL_MAC (SIOCIWFIRSTPRIV + 0x05)
644	#ifdef RT30xx
645	#define RTPRIV_IOCTL_RF (SIOCIWFIRSTPRIV + 0x13)
646	#endif
647	#define RTPRIV_IOCTL_E2P (SIOCIWFIRSTPRIV + 0x07)
648	#endif
649
650	#define RTPRIV_IOCTL_STATISTICS (SIOCIWFIRSTPRIV + 0x09)	525	#define RTPRIV_IOCTL_STATISTICS (SIOCIWFIRSTPRIV + 0x09)
651	#define RTPRIV_IOCTL_ADD_PMKID_CACHE (SIOCIWFIRSTPRIV + 0x0A)	526	#define RTPRIV_IOCTL_ADD_PMKID_CACHE (SIOCIWFIRSTPRIV + 0x0A)
652	#define RTPRIV_IOCTL_RADIUS_DATA (SIOCIWFIRSTPRIV + 0x0C)	527	#define RTPRIV_IOCTL_RADIUS_DATA (SIOCIWFIRSTPRIV + 0x0C)
Lines 667-708 enum { Link Here
667	RAIO_OFF = 10,	542	RAIO_OFF = 10,
668	RAIO_ON = 11,	543	RAIO_ON = 11,
669	SHOW_CFG_VALUE = 20,	544	SHOW_CFG_VALUE = 20,
670	#if !defined(RT2860) && !defined(RT30xx)	545	#if !defined(RT2860)
671	SHOW_ADHOC_ENTRY_INFO = 21,	546	SHOW_ADHOC_ENTRY_INFO = 21,
672	#endif	547	#endif
673	};	548	};
674		549
675	#define OID_802_11_BUILD_CHANNEL_EX 0x0714
676	#define OID_802_11_GET_CH_LIST 0x0715
677	#define OID_802_11_GET_COUNTRY_CODE 0x0716
678	#define OID_802_11_GET_CHANNEL_GEOGRAPHY 0x0717
679
680	#ifdef RT30xx
681	#define RT_OID_WSC_SET_PASSPHRASE 0x0740 // passphrase for wpa(2)-psk
682	#define RT_OID_WSC_DRIVER_AUTO_CONNECT 0x0741
683	#define RT_OID_WSC_QUERY_DEFAULT_PROFILE 0x0742
684	#define RT_OID_WSC_SET_CONN_BY_PROFILE_INDEX 0x0743
685	#define RT_OID_WSC_SET_ACTION 0x0744
686	#define RT_OID_WSC_SET_SSID 0x0745
687	#define RT_OID_WSC_SET_PIN_CODE 0x0746
688	#define RT_OID_WSC_SET_MODE 0x0747 // PIN or PBC
689	#define RT_OID_WSC_SET_CONF_MODE 0x0748 // Enrollee or Registrar
690	#define RT_OID_WSC_SET_PROFILE 0x0749
691
692	#define RT_OID_802_11_WSC_QUERY_PROFILE 0x0750
693	// for consistency with RT61
694	#define RT_OID_WSC_QUERY_STATUS 0x0751
695	#define RT_OID_WSC_PIN_CODE 0x0752
696	#define RT_OID_WSC_UUID 0x0753
697	#define RT_OID_WSC_SET_SELECTED_REGISTRAR 0x0754
698	#define RT_OID_WSC_EAPMSG 0x0755
699	#define RT_OID_WSC_MANUFACTURER 0x0756
700	#define RT_OID_WSC_MODEL_NAME 0x0757
701	#define RT_OID_WSC_MODEL_NO 0x0758
702	#define RT_OID_WSC_SERIAL_NO 0x0759
703	#define RT_OID_WSC_MAC_ADDRESS 0x0760
704	#endif
705
706	#ifdef LLTD_SUPPORT	550	#ifdef LLTD_SUPPORT
707	// for consistency with RT61	551	// for consistency with RT61
708	#define RT_OID_GET_PHY_MODE 0x761	552	#define RT_OID_GET_PHY_MODE 0x761

Lines 47-60 Link Here

(-)a/drivers/staging/rt2860/rt28xx.h (-20 / +2 lines)
47	#define PCI_EECTRL 0x0004	47	#define PCI_EECTRL 0x0004
48	#define PCI_MCUCTRL 0x0008	48	#define PCI_MCUCTRL 0x0008
49		49
50	#ifdef RT30xx	50	typedef int NTSTATUS;
51	#define OPT_14 0x114
52		51
53	typedef int NTSTATUS;	52	#define OPT_14 0x114
54	#define RETRY_LIMIT 10
55	#define STATUS_SUCCESS 0x00
56	#define STATUS_UNSUCCESSFUL 0x01
57	#endif
58		53
59	//	54	//
60	// SCH/DMA registers - base address 0x0200	55	// SCH/DMA registers - base address 0x0200
Lines 291-297 typedef union _USB_DMA_CFG_STRUC { Link Here
291	#define PBF_DBG 0x043c	286	#define PBF_DBG 0x043c
292	#define PBF_CAP_CTRL 0x0440	287	#define PBF_CAP_CTRL 0x0440
293		288
294	#ifdef RT30xx
295	// eFuse registers	289	// eFuse registers
296	#define EFUSE_CTRL 0x0580	290	#define EFUSE_CTRL 0x0580
297	#define EFUSE_DATA0 0x0590	291	#define EFUSE_DATA0 0x0590
Lines 319-325 typedef union _EFUSE_CTRL_STRUC { Link Here
319		313
320	#define LDO_CFG0 0x05d4	314	#define LDO_CFG0 0x05d4
321	#define GPIO_SWITCH 0x05dc	315	#define GPIO_SWITCH 0x05dc
322	#endif /* RT30xx */
323		316
324	//	317	//
325	// 4 MAC registers	318	// 4 MAC registers
Lines 1136-1144 typedef struct _HW_WCID_ENTRY { // 8-byte per entry Link Here
1136	#define BBP_R22 22	1129	#define BBP_R22 22
1137	#define BBP_R24 24	1130	#define BBP_R24 24
1138	#define BBP_R25 25	1131	#define BBP_R25 25
1139	#ifdef RT30xx
1140	#define BBP_R31 31	1132	#define BBP_R31 31
1141	#endif
1142	#define BBP_R49 49 //TSSI	1133	#define BBP_R49 49 //TSSI
1143	#define BBP_R50 50	1134	#define BBP_R50 50
1144	#define BBP_R51 51	1135	#define BBP_R51 51
Lines 1156-1165 typedef struct _HW_WCID_ENTRY { // 8-byte per entry Link Here
1156	#define BBP_R73 73	1147	#define BBP_R73 73
1157	#define BBP_R75 75	1148	#define BBP_R75 75
1158	#define BBP_R77 77	1149	#define BBP_R77 77
1159	#ifdef RT30xx
1160	#define BBP_R79 79	1150	#define BBP_R79 79
1161	#define BBP_R80 80	1151	#define BBP_R80 80
1162	#endif
1163	#define BBP_R81 81	1152	#define BBP_R81 81
1164	#define BBP_R82 82	1153	#define BBP_R82 82
1165	#define BBP_R83 83	1154	#define BBP_R83 83
Lines 1181-1189 typedef struct _HW_WCID_ENTRY { // 8-byte per entry Link Here
1181	#define BBP_R121 121	1170	#define BBP_R121 121
1182	#define BBP_R122 122	1171	#define BBP_R122 122
1183	#define BBP_R123 123	1172	#define BBP_R123 123
1184	#ifdef RT30xx
1185	#define BBP_R138 138 // add by johnli, RF power sequence setup, ADC dynamic on/off control	1173	#define BBP_R138 138 // add by johnli, RF power sequence setup, ADC dynamic on/off control
1186	#endif // RT30xx //
1187		1174
1188		1175
1189	#define BBPR94_DEFAULT 0x06 // Add 1 value will gain 1db	1176	#define BBPR94_DEFAULT 0x06 // Add 1 value will gain 1db
Lines 1607-1621 typedef union _EEPROM_NIC_CINFIG2_STRUC { Link Here
1607	USHORT EnableWPSPBC:1; // WPS PBC Control bit	1594	USHORT EnableWPSPBC:1; // WPS PBC Control bit
1608	USHORT BW40MAvailForG:1; // 0:enable, 1:disable	1595	USHORT BW40MAvailForG:1; // 0:enable, 1:disable
1609	USHORT BW40MAvailForA:1; // 0:enable, 1:disable	1596	USHORT BW40MAvailForA:1; // 0:enable, 1:disable
1610	#ifndef RT30xx
1611	USHORT Rsv2:6; // must be 0
1612	#endif
1613	#ifdef RT30xx
1614	USHORT Rsv1:1; // must be 0	1597	USHORT Rsv1:1; // must be 0
1615	USHORT AntDiversity:1; // Antenna diversity	1598	USHORT AntDiversity:1; // Antenna diversity
1616	USHORT Rsv2:3; // must be 0	1599	USHORT Rsv2:3; // must be 0
1617	USHORT DACTestBit:1; // control if driver should patch the DAC issue	1600	USHORT DACTestBit:1; // control if driver should patch the DAC issue
1618	#endif
1619	} field;	1601	} field;
1620	USHORT word;	1602	USHORT word;
1621	} EEPROM_NIC_CONFIG2_STRUC, *PEEPROM_NIC_CONFIG2_STRUC;	1603	} EEPROM_NIC_CONFIG2_STRUC, *PEEPROM_NIC_CONFIG2_STRUC;

Lines 25-30 Link Here

(-)a/drivers/staging/rt2860/rt_linux.c (-16 / +4 lines)
25	*************************************************************************	25	*************************************************************************
26	*/	26	*/
27		27
		28	#include <linux/sched.h>
28	#include "rt_config.h"	29	#include "rt_config.h"
29		30
30	ULONG RTDebugLevel = RT_DEBUG_ERROR;	31	ULONG RTDebugLevel = RT_DEBUG_ERROR;
Lines 537-545 PNDIS_PACKET duplicate_pkt( Link Here
537	if ((skb = __dev_alloc_skb(HdrLen + DataSize + 2, MEM_ALLOC_FLAG)) != NULL)	538	if ((skb = __dev_alloc_skb(HdrLen + DataSize + 2, MEM_ALLOC_FLAG)) != NULL)
538	{	539	{
539	skb_reserve(skb, 2);	540	skb_reserve(skb, 2);
540	NdisMoveMemory(skb->tail, pHeader802_3, HdrLen);	541	NdisMoveMemory(skb_tail_pointer(skb), pHeader802_3, HdrLen);
541	skb_put(skb, HdrLen);	542	skb_put(skb, HdrLen);
542	NdisMoveMemory(skb->tail, pData, DataSize);	543	NdisMoveMemory(skb_tail_pointer(skb), pData, DataSize);
543	skb_put(skb, DataSize);	544	skb_put(skb, DataSize);
544	skb->dev = get_netdev_from_bssid(pAd, FromWhichBSSID);	545	skb->dev = get_netdev_from_bssid(pAd, FromWhichBSSID);
545	pPacket = OSPKT_TO_RTPKT(skb);	546	pPacket = OSPKT_TO_RTPKT(skb);
Lines 662-674 void announce_802_3_packet( Link Here
662	pRxPkt = RTPKT_TO_OSPKT(pPacket);	663	pRxPkt = RTPKT_TO_OSPKT(pPacket);
663		664
664	/* Push up the protocol stack */	665	/* Push up the protocol stack */
665	#ifdef IKANOS_VX_1X0
666	IKANOS_DataFrameRx(pAd, pRxPkt->dev, pRxPkt, pRxPkt->len);
667	#else
668	pRxPkt->protocol = eth_type_trans(pRxPkt, pRxPkt->dev);	666	pRxPkt->protocol = eth_type_trans(pRxPkt, pRxPkt->dev);
669		667
670	netif_rx(pRxPkt);	668	netif_rx(pRxPkt);
671	#endif // IKANOS_VX_1X0 //
672	}	669	}
673		670
674		671
Lines 728-734 VOID RTMPSendWirelessEvent( Link Here
728	IN UCHAR BssIdx,	725	IN UCHAR BssIdx,
729	IN CHAR Rssi)	726	IN CHAR Rssi)
730	{	727	{
731	#if WIRELESS_EXT >= 15
732		728
733	union iwreq_data wrqu;	729	union iwreq_data wrqu;
734	PUCHAR pBuf = NULL, pBufPtr = NULL;	730	PUCHAR pBuf = NULL, pBufPtr = NULL;
Lines 776-782 VOID RTMPSendWirelessEvent( Link Here
776	if (pAddr)	772	if (pAddr)
777	pBufPtr += sprintf(pBufPtr, "(RT2860) STA(%02x:%02x:%02x:%02x:%02x:%02x) ", PRINT_MAC(pAddr));	773	pBufPtr += sprintf(pBufPtr, "(RT2860) STA(%02x:%02x:%02x:%02x:%02x:%02x) ", PRINT_MAC(pAddr));
778	else if (BssIdx < MAX_MBSSID_NUM)	774	else if (BssIdx < MAX_MBSSID_NUM)
779	pBufPtr += sprintf(pBufPtr, "(RT2860) BSS(ra%d) ", BssIdx);	775	pBufPtr += sprintf(pBufPtr, "(RT2860) BSS(wlan%d) ", BssIdx);
780	else	776	else
781	pBufPtr += sprintf(pBufPtr, "(RT2860) ");	777	pBufPtr += sprintf(pBufPtr, "(RT2860) ");
782		778
Lines 805-813 VOID RTMPSendWirelessEvent( Link Here
805	}	801	}
806	else	802	else
807	DBGPRINT(RT_DEBUG_ERROR, ("%s : Can't allocate memory for wireless event.\n", __func__));	803	DBGPRINT(RT_DEBUG_ERROR, ("%s : Can't allocate memory for wireless event.\n", __func__));
808	#else
809	DBGPRINT(RT_DEBUG_ERROR, ("%s : The Wireless Extension MUST be v15 or newer.\n", __func__));
810	#endif /* WIRELESS_EXT >= 15 */
811	}	804	}
812		805
813	void send_monitor_packets(	806	void send_monitor_packets(
Lines 834-845 void send_monitor_packets( Link Here
834		827
835	if (pRxBlk->DataSize + sizeof(wlan_ng_prism2_header) > RX_BUFFER_AGGRESIZE)	828	if (pRxBlk->DataSize + sizeof(wlan_ng_prism2_header) > RX_BUFFER_AGGRESIZE)
836	{	829	{
837	#ifndef RT30xx
838	DBGPRINT(RT_DEBUG_ERROR, ("%s : Size is too large! (%zu)\n", __func__, pRxBlk->DataSize + sizeof(wlan_ng_prism2_header)));	830	DBGPRINT(RT_DEBUG_ERROR, ("%s : Size is too large! (%zu)\n", __func__, pRxBlk->DataSize + sizeof(wlan_ng_prism2_header)));
839	#endif
840	#ifdef RT30xx
841	DBGPRINT(RT_DEBUG_ERROR, ("%s : Size is too large! (%d)\n", __func__, pRxBlk->DataSize + sizeof(wlan_ng_prism2_header)));
842	#endif
843	goto err_free_sk_buff;	831	goto err_free_sk_buff;
844	}	832	}
845		833

Lines 63-72 Link Here

(-)a/drivers/staging/rt2860/rt_linux.h (-101 / +17 lines)
63	#include <linux/ctype.h>	63	#include <linux/ctype.h>
64	#include <linux/vmalloc.h>	64	#include <linux/vmalloc.h>
65		65
66
67	#ifdef RT30xx
68	#include <linux/wireless.h>
69	#endif
70	#include <net/iw_handler.h>	66	#include <net/iw_handler.h>
71		67
72	// load firmware	68	// load firmware
Lines 90-111 typedef int (HARD_START_XMIT_FUNC)(struct sk_buff skb, struct net_device *net_ Link Here
90		86
91	// add by kathy	87	// add by kathy
92		88
93	#ifdef RT2860	89	/* order of "if defined()" is important, because for 3070 driver
94	#define STA_PROFILE_PATH "/etc/Wireless/RT2860STA/RT2860STA.dat"	90	both RT2870 and RT3070 are defined */
95	#define STA_RTMP_FIRMWARE_FILE_NAME "/etc/Wireless/RT2860STA/RT2860STA.bin"	91	#if defined(RT2860)
96	#define STA_NIC_DEVICE_NAME "RT2860STA"	92	#define STA_PROFILE_PATH "/etc/Wireless/RT2860STA/RT2860STA.dat"
97	#define STA_DRIVER_VERSION "1.8.1.1"	93	#define STA_RTMP_FIRMWARE_FILE_NAME "/etc/Wireless/RT2860STA/RT2860STA.bin"
98	#endif	94	#define STA_NIC_DEVICE_NAME "RT2860STA"
99	#ifdef RT2870	95	#define STA_DRIVER_VERSION "1.8.1.1"
100	#define STA_PROFILE_PATH "/etc/Wireless/RT2870STA/RT2870STA.dat"	96	#elif defined(RT3070)
101	#define STA_RT2870_IMAGE_FILE_NAME "/etc/Wireless/RT2870STA/rt2870.bin"	97	#define STA_PROFILE_PATH "/etc/Wireless/RT3070STA/RT3070STA.dat"
102	#define STA_NIC_DEVICE_NAME "RT2870STA"	98	#define STA_RT2870_IMAGE_FILE_NAME "/etc/Wireless/RT3070STA/rt2870.bin"
103	#ifndef RT30xx	99	#define STA_NIC_DEVICE_NAME "RT3070STA"
104	#define STA_DRIVER_VERSION "1.4.0.0"	100	#define STA_DRIVER_VERSION "2.0.1.0"
105	#endif	101	#elif defined(RT2870)
106	#ifdef RT30xx	102	#define STA_PROFILE_PATH "/etc/Wireless/RT2870STA/RT2870STA.dat"
107	#define STA_DRIVER_VERSION "2.0.1.0"	103	#define STA_RT2870_IMAGE_FILE_NAME "/etc/Wireless/RT2870STA/rt2870.bin"
108	#endif	104	#define STA_NIC_DEVICE_NAME "RT2870STA"
		105	#define STA_DRIVER_VERSION "1.4.0.0"
109	#endif	106	#endif
110		107
111	#ifdef RT2860	108	#ifdef RT2860
Lines 161-175 typedef int (HARD_START_XMIT_FUNC)(struct sk_buff skb, struct net_device *net_ Link Here
161	#define NDIS_PACKET_TYPE_BROADCAST 2	158	#define NDIS_PACKET_TYPE_BROADCAST 2
162	#define NDIS_PACKET_TYPE_ALL_MULTICAST 3	159	#define NDIS_PACKET_TYPE_ALL_MULTICAST 3
163		160
164	#ifndef RT30xx
165	typedef struct pid * THREAD_PID;
166	#define THREAD_PID_INIT_VALUE NULL
167	#define GET_PID(_v) find_get_pid(_v)
168	#define GET_PID_NUMBER(_v) pid_nr(_v)
169	#define CHECK_PID_LEGALITY(_pid) if (pid_nr(_pid) >= 0)
170	#define KILL_THREAD_PID(_A, _B, _C) kill_pid(_A, _B, _C)
171	#endif
172
173	struct os_lock {	161	struct os_lock {
174	spinlock_t lock;	162	spinlock_t lock;
175	unsigned long flags;	163	unsigned long flags;
Lines 185-200 struct os_cookie { Link Here
185	#ifdef RT2870	173	#ifdef RT2870
186	struct usb_device *pUsb_Dev;	174	struct usb_device *pUsb_Dev;
187		175
188	#ifndef RT30xx
189	THREAD_PID MLMEThr_pid;
190	THREAD_PID RTUSBCmdThr_pid;
191	THREAD_PID TimerQThr_pid;
192	#endif
193	#ifdef RT30xx
194	struct pid *MLMEThr_pid;	176	struct pid *MLMEThr_pid;
195	struct pid *RTUSBCmdThr_pid;	177	struct pid *RTUSBCmdThr_pid;
196	struct pid *TimerQThr_pid;	178	struct pid *TimerQThr_pid;
197	#endif
198	#endif // RT2870 //	179	#endif // RT2870 //
199		180
200	struct tasklet_struct rx_done_task;	181	struct tasklet_struct rx_done_task;
Lines 219-230 struct os_cookie { Link Here
219	INT ioctl_if;	200	INT ioctl_if;
220	};	201	};
221		202
222	typedef struct _VIRTUAL_ADAPTER
223	{
224	struct net_device *RtmpDev;
225	struct net_device *VirtualDev;
226	} VIRTUAL_ADAPTER, PVIRTUAL_ADAPTER;
227
228	#undef ASSERT	203	#undef ASSERT
229	#define ASSERT(x)	204	#define ASSERT(x)
230		205
Lines 444-494 extern ULONG RTDebugLevel; Link Here
444	}	419	}
445		420
446	#ifdef RT2860	421	#ifdef RT2860
447	#if defined(INF_TWINPASS) \|\| defined(INF_DANUBE) \|\| defined(IKANOS_VX_1X0)
448	//Patch for ASIC turst read/write bug, needs to remove after metel fix
449	#define RTMP_IO_READ32(_A, _R, _pV) \
450	{ \
451	if ((_A)->bPCIclkOff == FALSE) \
452	{ \
453	(_pV = readl((void )((_A)->CSRBaseAddress + MAC_CSR0))); \
454	(_pV = readl((void )((_A)->CSRBaseAddress + (_R)))); \
455	(_pV = SWAP32(((UINT32 *)(_pV)))); \
456	} \
457	}
458	#define RTMP_IO_FORCE_READ32(_A, _R, _pV) \
459	{ \
460	(_pV = readl((void )((_A)->CSRBaseAddress + MAC_CSR0))); \
461	(_pV = readl((void )((_A)->CSRBaseAddress + (_R)))); \
462	(_pV = SWAP32(((UINT32 *)(_pV)))); \
463	}
464	#define RTMP_IO_READ8(_A, _R, _pV) \
465	{ \
466	(_pV = readl((void )((_A)->CSRBaseAddress + MAC_CSR0))); \
467	(_pV = readb((void )((_A)->CSRBaseAddress + (_R)))); \
468	}
469	#define RTMP_IO_WRITE32(_A, _R, _V) \
470	{ \
471	if ((_A)->bPCIclkOff == FALSE) \
472	{ \
473	UINT32 _Val; \
474	_Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)); \
475	_Val = SWAP32(_V); \
476	writel(_Val, (void *)((_A)->CSRBaseAddress + (_R))); \
477	} \
478	}
479	#define RTMP_IO_WRITE8(_A, _R, _V) \
480	{ \
481	UINT Val; \
482	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)); \
483	writeb((_V), (PUCHAR)((_A)->CSRBaseAddress + (_R))); \
484	}
485	#define RTMP_IO_WRITE16(_A, _R, _V) \
486	{ \
487	UINT Val; \
488	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)); \
489	writew(SWAP16((_V)), (PUSHORT)((_A)->CSRBaseAddress + (_R))); \
490	}
491	#else
492	//Patch for ASIC turst read/write bug, needs to remove after metel fix	422	//Patch for ASIC turst read/write bug, needs to remove after metel fix
493	#define RTMP_IO_READ32(_A, _R, _pV) \	423	#define RTMP_IO_READ32(_A, _R, _pV) \
494	{ \	424	{ \
Lines 519-550 extern ULONG RTDebugLevel; Link Here
519	writel(_V, (void *)((_A)->CSRBaseAddress + (_R))); \	449	writel(_V, (void *)((_A)->CSRBaseAddress + (_R))); \
520	} \	450	} \
521	}	451	}
522	#if defined(BRCM_6358)
523	#define RTMP_IO_WRITE8(_A, _R, _V) \
524	{ \
525	ULONG Val; \
526	UCHAR _i; \
527	_i = (_R & 0x3); \
528	Val = readl((void *)((_A)->CSRBaseAddress + (_R - _i))); \
529	Val = Val & (~(0x000000ff << ((_i)*8))); \
530	Val = Val \| ((ULONG)_V << ((_i)*8)); \
531	writel((Val), (void *)((_A)->CSRBaseAddress + (_R - _i))); \
532	}
533	#else
534	#define RTMP_IO_WRITE8(_A, _R, _V) \	452	#define RTMP_IO_WRITE8(_A, _R, _V) \
535	{ \	453	{ \
536	UINT Val; \	454	UINT Val; \
537	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)); \	455	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)); \
538	writeb((_V), (PUCHAR)((_A)->CSRBaseAddress + (_R))); \	456	writeb((_V), (PUCHAR)((_A)->CSRBaseAddress + (_R))); \
539	}	457	}
540	#endif
541	#define RTMP_IO_WRITE16(_A, _R, _V) \	458	#define RTMP_IO_WRITE16(_A, _R, _V) \
542	{ \	459	{ \
543	UINT Val; \	460	UINT Val; \
544	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)); \	461	Val = readl((void *)((_A)->CSRBaseAddress + MAC_CSR0)); \
545	writew((_V), (PUSHORT)((_A)->CSRBaseAddress + (_R))); \	462	writew((_V), (PUSHORT)((_A)->CSRBaseAddress + (_R))); \
546	}	463	}
547	#endif
548	#endif /* RT2860 */	464	#endif /* RT2860 */
549	#ifdef RT2870	465	#ifdef RT2870
550	//Patch for ASIC turst read/write bug, needs to remove after metel fix	466	//Patch for ASIC turst read/write bug, needs to remove after metel fix

Lines 74-84 static void CfgInitHook(PRTMP_ADAPTER pAd); Link Here

(-)a/drivers/staging/rt2860/rt_main_dev.c (-52 / +7 lines)
74		74
75	extern const struct iw_handler_def rt28xx_iw_handler_def;	75	extern const struct iw_handler_def rt28xx_iw_handler_def;
76		76
77	#if WIRELESS_EXT >= 12
78	// This function will be called when query /proc	77	// This function will be called when query /proc
79	struct iw_statistics *rt28xx_get_wireless_stats(	78	struct iw_statistics *rt28xx_get_wireless_stats(
80	IN struct net_device *net_dev);	79	IN struct net_device *net_dev);
81	#endif
82		80
83	struct net_device_stats *RT28xx_get_ether_stats(	81	struct net_device_stats *RT28xx_get_ether_stats(
84	IN struct net_device *net_dev);	82	IN struct net_device *net_dev);
Lines 190-196 int rt28xx_close(IN PNET_DEV dev) Link Here
190	BOOLEAN Cancelled = FALSE;	188	BOOLEAN Cancelled = FALSE;
191	UINT32 i = 0;	189	UINT32 i = 0;
192	#ifdef RT2870	190	#ifdef RT2870
193	DECLARE_WAIT_QUEUE_HEAD(unlink_wakeup);	191	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(unlink_wakeup);
194	DECLARE_WAITQUEUE(wait, current);	192	DECLARE_WAITQUEUE(wait, current);
195		193
196	//RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_REMOVE_IN_PROGRESS);	194	//RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_REMOVE_IN_PROGRESS);
Lines 517-525 static int rt28xx_init(IN struct net_device *net_dev) Link Here
517	NICInitRT30xxRFRegisters(pAd);	515	NICInitRT30xxRFRegisters(pAd);
518	#endif // RT2870 //	516	#endif // RT2870 //
519		517
520	#ifdef IKANOS_VX_1X0
521	VR_IKANOS_FP_Init(pAd->ApCfg.BssidNum, pAd->PermanentAddress);
522	#endif // IKANOS_VX_1X0 //
523		518
524	//	519	//
525	// Initialize RF register to default value	520	// Initialize RF register to default value
Lines 527-533 static int rt28xx_init(IN struct net_device *net_dev) Link Here
527	AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);	522	AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
528	AsicLockChannel(pAd, pAd->CommonCfg.Channel);	523	AsicLockChannel(pAd, pAd->CommonCfg.Channel);
529		524
530	#ifndef RT30xx	525	#ifndef RT2870
531	// 8051 firmware require the signal during booting time.	526	// 8051 firmware require the signal during booting time.
532	AsicSendCommandToMcu(pAd, 0x72, 0xFF, 0x00, 0x00);	527	AsicSendCommandToMcu(pAd, 0x72, 0xFF, 0x00, 0x00);
533	#endif	528	#endif
Lines 675-690 err: Link Here
675	static const struct net_device_ops rt2860_netdev_ops = {	670	static const struct net_device_ops rt2860_netdev_ops = {
676	.ndo_open = MainVirtualIF_open,	671	.ndo_open = MainVirtualIF_open,
677	.ndo_stop = MainVirtualIF_close,	672	.ndo_stop = MainVirtualIF_close,
678	.ndo_do_ioctl = rt28xx_ioctl,	673	.ndo_do_ioctl = rt28xx_sta_ioctl,
679	.ndo_get_stats = RT28xx_get_ether_stats,	674	.ndo_get_stats = RT28xx_get_ether_stats,
680	.ndo_validate_addr = NULL,	675	.ndo_validate_addr = NULL,
681	.ndo_set_mac_address = eth_mac_addr,	676	.ndo_set_mac_address = eth_mac_addr,
682	.ndo_change_mtu = eth_change_mtu,	677	.ndo_change_mtu = eth_change_mtu,
683	#ifdef IKANOS_VX_1X0
684	.ndo_start_xmit = IKANOS_DataFramesTx,
685	#else
686	.ndo_start_xmit = rt28xx_send_packets,	678	.ndo_start_xmit = rt28xx_send_packets,
687	#endif
688	};	679	};
689		680
690	/* Must not be called for mdev and apdev */	681	/* Must not be called for mdev and apdev */
Lines 695-716 static NDIS_STATUS rt_ieee80211_if_setup(struct net_device *dev, PRTMP_ADAPTER p Link Here
695	CHAR slot_name[IFNAMSIZ];	686	CHAR slot_name[IFNAMSIZ];
696	struct net_device *device;	687	struct net_device *device;
697		688
698	#if WIRELESS_EXT >= 12
699	if (pAd->OpMode == OPMODE_STA)	689	if (pAd->OpMode == OPMODE_STA)
700	{	690	{
701	dev->wireless_handlers = &rt28xx_iw_handler_def;	691	dev->wireless_handlers = &rt28xx_iw_handler_def;
702	}	692	}
703	#endif //WIRELESS_EXT >= 12
704		693
705	#if WIRELESS_EXT < 21
706	dev->get_wireless_stats = rt28xx_get_wireless_stats;
707	#endif
708	dev->priv_flags = INT_MAIN;	694	dev->priv_flags = INT_MAIN;
709	dev->netdev_ops = &rt2860_netdev_ops;	695	dev->netdev_ops = &rt2860_netdev_ops;
710	// find available device name	696	// find available device name
711	for (i = 0; i < 8; i++)	697	for (i = 0; i < 8; i++)
712	{	698	{
713	sprintf(slot_name, "ra%d", i);	699	sprintf(slot_name, "wlan%d", i);
714		700
715	device = dev_get_by_name(dev_net(dev), slot_name);	701	device = dev_get_by_name(dev_net(dev), slot_name);
716	if (device != NULL)	702	if (device != NULL)
Lines 727-733 static NDIS_STATUS rt_ieee80211_if_setup(struct net_device *dev, PRTMP_ADAPTER p Link Here
727	}	713	}
728	else	714	else
729	{	715	{
730	sprintf(dev->name, "ra%d", i);	716	sprintf(dev->name, "wlan%d", i);
731	Status = NDIS_STATUS_SUCCESS;	717	Status = NDIS_STATUS_SUCCESS;
732	}	718	}
733		719
Lines 791-796 INT __devinit rt28xx_probe( Link Here
791		777
792	// Allocate RTMP_ADAPTER miniport adapter structure	778	// Allocate RTMP_ADAPTER miniport adapter structure
793	handle = kmalloc(sizeof(struct os_cookie), GFP_KERNEL);	779	handle = kmalloc(sizeof(struct os_cookie), GFP_KERNEL);
		780	if (handle == NULL)
		781	goto err_out_free_netdev;;
794	RT28XX_HANDLE_DEV_ASSIGN(handle, dev_p);	782	RT28XX_HANDLE_DEV_ASSIGN(handle, dev_p);
795		783
796	status = RTMPAllocAdapterBlock(handle, &pAd);	784	status = RTMPAllocAdapterBlock(handle, &pAd);
Lines 942-948 void CfgInitHook(PRTMP_ADAPTER pAd) Link Here
942	} /* End of CfgInitHook */	930	} /* End of CfgInitHook */
943		931
944		932
945	#if WIRELESS_EXT >= 12
946	// This function will be called when query /proc	933	// This function will be called when query /proc
947	struct iw_statistics *rt28xx_get_wireless_stats(	934	struct iw_statistics *rt28xx_get_wireless_stats(
948	IN struct net_device *net_dev)	935	IN struct net_device *net_dev)
Lines 976-982 struct iw_statistics *rt28xx_get_wireless_stats( Link Here
976	DBGPRINT(RT_DEBUG_TRACE, ("<--- rt28xx_get_wireless_stats\n"));	963	DBGPRINT(RT_DEBUG_TRACE, ("<--- rt28xx_get_wireless_stats\n"));
977	return &pAd->iw_stats;	964	return &pAd->iw_stats;
978	} /* End of rt28xx_get_wireless_stats */	965	} /* End of rt28xx_get_wireless_stats */
979	#endif // WIRELESS_EXT //
980		966
981		967
982		968
Lines 986-1022 void tbtt_tasklet(unsigned long data) Link Here
986		972
987	}	973	}
988		974
989	INT rt28xx_ioctl(
990	IN struct net_device *net_dev,
991	IN OUT struct ifreq *rq,
992	IN INT cmd)
993	{
994	VIRTUAL_ADAPTER *pVirtualAd = NULL;
995	RTMP_ADAPTER *pAd = NULL;
996	INT ret = 0;
997
998	if (net_dev->priv_flags == INT_MAIN)
999	{
1000	pAd = net_dev->ml_priv;
1001	}
1002	else
1003	{
1004	pVirtualAd = net_dev->ml_priv;
1005	pAd = pVirtualAd->RtmpDev->ml_priv;
1006	}
1007
1008	if (pAd == NULL)
1009	{
1010	/* if 1st open fail, pAd will be free;
1011	So the net_dev->ml_priv will be NULL in 2rd open */
1012	return -ENETDOWN;
1013	}
1014
1015	ret = rt28xx_sta_ioctl(net_dev, rq, cmd);
1016
1017	return ret;
1018	}
1019
1020	/*	975	/*
1021	========================================================================	976	========================================================================
1022		977

Lines 710-716 static int rtmp_parse_key_buffer_from_file(IN PRTMP_ADAPTER pAd,IN char *buffe Link Here

(-)a/drivers/staging/rt2860/rt_profile.c (-40 / +4 lines)
710	CipherAlg = CIPHER_WEP128;	710	CipherAlg = CIPHER_WEP128;
711	pAd->SharedKey[i][idx].CipherAlg = CipherAlg;	711	pAd->SharedKey[i][idx].CipherAlg = CipherAlg;
712		712
713	DBGPRINT(RT_DEBUG_TRACE, ("I/F(ra%d) Key%dStr=%s and type=%s\n", i, idx+1, keybuff, (KeyType == 0) ? "Hex":"Ascii"));	713	DBGPRINT(RT_DEBUG_TRACE, ("I/F(wlan%d) Key%dStr=%s and type=%s\n", i, idx+1, keybuff, (KeyType == 0) ? "Hex":"Ascii"));
714	return 1;	714	return 1;
715	}	715	}
716	else	716	else
Lines 731-742 static int rtmp_parse_key_buffer_from_file(IN PRTMP_ADAPTER pAd,IN char *buffe Link Here
731	CipherAlg = CIPHER_WEP128;	731	CipherAlg = CIPHER_WEP128;
732	pAd->SharedKey[i][idx].CipherAlg = CipherAlg;	732	pAd->SharedKey[i][idx].CipherAlg = CipherAlg;
733		733
734	DBGPRINT(RT_DEBUG_TRACE, ("I/F(ra%d) Key%dStr=%s and type=%s\n", i, idx+1, keybuff, (KeyType == 0) ? "Hex":"Ascii"));	734	DBGPRINT(RT_DEBUG_TRACE, ("I/F(wlan%d) Key%dStr=%s and type=%s\n", i, idx+1, keybuff, (KeyType == 0) ? "Hex":"Ascii"));
735	return 1;	735	return 1;
736	}	736	}
737	else	737	else
738	{//Invalid key length	738	{//Invalid key length
739	DBGPRINT(RT_DEBUG_ERROR, ("I/F(ra%d) Key%dStr is Invalid key length! KeyLen = %ld!\n", i, idx+1, KeyLen));	739	DBGPRINT(RT_DEBUG_ERROR, ("I/F(wlan%d) Key%dStr is Invalid key length! KeyLen = %ld!\n", i, idx+1, KeyLen));
740	return 0;	740	return 0;
741	}	741	}
742	}	742	}
Lines 860-866 NDIS_STATUS RTMPReadParametersHook( Link Here
860	{	860	{
861	PUCHAR src = NULL;	861	PUCHAR src = NULL;
862	struct file *srcf;	862	struct file *srcf;
863	INT retval, orgfsuid, orgfsgid;	863	INT retval;
864	mm_segment_t orgfs;	864	mm_segment_t orgfs;
865	CHAR *buffer;	865	CHAR *buffer;
866	CHAR *tmpbuf;	866	CHAR *tmpbuf;
Lines 884-898 NDIS_STATUS RTMPReadParametersHook( Link Here
884		884
885	src = STA_PROFILE_PATH;	885	src = STA_PROFILE_PATH;
886		886
887	// Save uid and gid used for filesystem access.
888	// Set user and group to 0 (root)
889	#ifndef RT30xx
890	orgfsuid = current_fsuid();
891	orgfsgid = current_fsgid();
892	/* Hm, can't really do this nicely anymore, so rely on these files
893	* being set to the proper permission to read them... */
894	/* current->cred->fsuid = current->cred->fsgid = 0; */
895	#endif
896	orgfs = get_fs();	887	orgfs = get_fs();
897	set_fs(KERNEL_DS);	888	set_fs(KERNEL_DS);
898		889
Lines 1230-1243 NDIS_STATUS RTMPReadParametersHook( Link Here
1230	//WirelessEvent	1221	//WirelessEvent
1231	if(RTMPGetKeyParameter("WirelessEvent", tmpbuf, 10, buffer))	1222	if(RTMPGetKeyParameter("WirelessEvent", tmpbuf, 10, buffer))
1232	{	1223	{
1233	#if WIRELESS_EXT >= 15
1234	if(simple_strtol(tmpbuf, 0, 10) != 0)	1224	if(simple_strtol(tmpbuf, 0, 10) != 0)
1235	pAd->CommonCfg.bWirelessEvent = simple_strtol(tmpbuf, 0, 10);	1225	pAd->CommonCfg.bWirelessEvent = simple_strtol(tmpbuf, 0, 10);
1236	else	1226	else
1237	pAd->CommonCfg.bWirelessEvent = 0; // disable	1227	pAd->CommonCfg.bWirelessEvent = 0; // disable
1238	#else
1239	pAd->CommonCfg.bWirelessEvent = 0; // disable
1240	#endif
1241	DBGPRINT(RT_DEBUG_TRACE, ("WirelessEvent=%d\n", pAd->CommonCfg.bWirelessEvent));	1228	DBGPRINT(RT_DEBUG_TRACE, ("WirelessEvent=%d\n", pAd->CommonCfg.bWirelessEvent));
1242	}	1229	}
1243	if(RTMPGetKeyParameter("WiFiTest", tmpbuf, 10, buffer))	1230	if(RTMPGetKeyParameter("WiFiTest", tmpbuf, 10, buffer))
Lines 1442-1464 NDIS_STATUS RTMPReadParametersHook( Link Here
1442	DBGPRINT(RT_DEBUG_TRACE, ("TGnWifiTest=%d\n", pAd->StaCfg.bTGnWifiTest));	1429	DBGPRINT(RT_DEBUG_TRACE, ("TGnWifiTest=%d\n", pAd->StaCfg.bTGnWifiTest));
1443	}	1430	}
1444	}	1431	}
1445
1446	#ifdef RT30xx
1447	{
1448	if(RTMPGetKeyParameter("AntDiversity", tmpbuf, 10, buffer))
1449	{
1450	for (i = 0, macptr = rstrtok(tmpbuf,";"); macptr; macptr = rstrtok(NULL,";"), i++)
1451	{
1452	if(simple_strtol(macptr, 0, 10) != 0) //Enable
1453	pAd->CommonCfg.bRxAntDiversity = TRUE;
1454	else //Disable
1455	pAd->CommonCfg.bRxAntDiversity = FALSE;
1456
1457	DBGPRINT(RT_DEBUG_ERROR, ("AntDiversity=%d\n", pAd->CommonCfg.bRxAntDiversity));
1458	}
1459	}
1460	}
1461	#endif // RT30xx //
1462	}	1432	}
1463	}	1433	}
1464	else	1434	else
Lines 1571-1591 static void HTParametersHook( Link Here
1571	if (Value == 0)	1541	if (Value == 0)
1572	{	1542	{
1573	pAd->CommonCfg.BACapability.field.AutoBA = FALSE;	1543	pAd->CommonCfg.BACapability.field.AutoBA = FALSE;
1574	#ifdef RT30xx
1575	pAd->CommonCfg.BACapability.field.Policy = BA_NOTUSE;	1544	pAd->CommonCfg.BACapability.field.Policy = BA_NOTUSE;
1576	#endif
1577	}	1545	}
1578	else	1546	else
1579	{	1547	{
1580	pAd->CommonCfg.BACapability.field.AutoBA = TRUE;	1548	pAd->CommonCfg.BACapability.field.AutoBA = TRUE;
1581	#ifdef RT30xx
1582	pAd->CommonCfg.BACapability.field.Policy = IMMED_BA;	1549	pAd->CommonCfg.BACapability.field.Policy = IMMED_BA;
1583	#endif
1584	}	1550	}
1585	pAd->CommonCfg.REGBACapability.field.AutoBA = pAd->CommonCfg.BACapability.field.AutoBA;	1551	pAd->CommonCfg.REGBACapability.field.AutoBA = pAd->CommonCfg.BACapability.field.AutoBA;
1586	#ifdef RT30xx
1587	pAd->CommonCfg.REGBACapability.field.Policy = pAd->CommonCfg.BACapability.field.Policy;	1552	pAd->CommonCfg.REGBACapability.field.Policy = pAd->CommonCfg.BACapability.field.Policy;
1588	#endif
1589	DBGPRINT(RT_DEBUG_TRACE, ("HT: Auto BA = %s\n", (Value==0) ? "Disable" : "Enable"));	1553	DBGPRINT(RT_DEBUG_TRACE, ("HT: Auto BA = %s\n", (Value==0) ? "Disable" : "Enable"));
1590	}	1554	}
1591		1555

Lines 46-69 typedef struct _MIC_CONTEXT { Link Here

(-)a/drivers/staging/rt2860/rtmp_ckipmic.h (-35 lines)
46	UCHAR part[4]; /* for conversion of message to u32 for mmh */	46	UCHAR part[4]; /* for conversion of message to u32 for mmh */
47	} MIC_CONTEXT, *PMIC_CONTEXT;	47	} MIC_CONTEXT, *PMIC_CONTEXT;
48		48
49	VOID CKIP_key_permute(
50	OUT UCHAR PK, / output permuted key */
51	IN UCHAR CK, / input CKIP key */
52	IN UCHAR toDsFromDs, /* input toDs/FromDs bits */
53	IN UCHAR piv); / input pointer to IV */
54
55	VOID RTMPCkipMicInit(
56	IN PMIC_CONTEXT pContext,
57	IN PUCHAR CK);
58
59	VOID RTMPMicUpdate(
60	IN PMIC_CONTEXT pContext,
61	IN PUCHAR pOctets,
62	IN INT len);
63
64	ULONG RTMPMicGetCoefficient(
65	IN PMIC_CONTEXT pContext);
66
67	VOID xor_128(	49	VOID xor_128(
68	IN PUCHAR a,	50	IN PUCHAR a,
69	IN PUCHAR b,	51	IN PUCHAR b,
Lines 93-113 VOID mix_column( Link Here
93	IN PUCHAR in,	75	IN PUCHAR in,
94	OUT PUCHAR out);	76	OUT PUCHAR out);
95		77
96	VOID RTMPAesEncrypt(
97	IN PUCHAR key,
98	IN PUCHAR data,
99	IN PUCHAR ciphertext);
100
101	VOID RTMPMicFinal(
102	IN PMIC_CONTEXT pContext,
103	OUT UCHAR digest[4]);
104
105	VOID RTMPCkipInsertCMIC(
106	IN PRTMP_ADAPTER pAd,
107	OUT PUCHAR pMIC,
108	IN PUCHAR p80211hdr,
109	IN PNDIS_PACKET pPacket,
110	IN PCIPHER_KEY pKey,
111	IN PUCHAR mic_snap);
112
113	#endif //__RTMP_CKIPMIC_H__	78	#endif //__RTMP_CKIPMIC_H__

Lines 148-158 Link Here

(-)a/drivers/staging/rt2860/rtmp_def.h (-14 lines)
148	#define MAX_PACKETS_IN_PS_QUEUE 128 //32	148	#define MAX_PACKETS_IN_PS_QUEUE 128 //32
149	#define WMM_NUM_OF_AC 4 /* AC0, AC1, AC2, and AC3 */	149	#define WMM_NUM_OF_AC 4 /* AC0, AC1, AC2, and AC3 */
150		150
151	#ifdef RT30xx
152	//2008/09/11:KH add to support efuse<--
153	#define MAX_EEPROM_BIN_FILE_SIZE 1024	151	#define MAX_EEPROM_BIN_FILE_SIZE 1024
154	//2008/09/11:KH add to support efuse-->
155	#endif
156		152
157	// RxFilter	153	// RxFilter
158	#define STANORMAL 0x17f97	154	#define STANORMAL 0x17f97
Lines 573-581 Link Here
573	// For 802.11n D3.03	569	// For 802.11n D3.03
574	//#define IE_NEW_EXT_CHA_OFFSET 62 // 802.11n d1. New extension channel offset elemet	570	//#define IE_NEW_EXT_CHA_OFFSET 62 // 802.11n d1. New extension channel offset elemet
575	#define IE_SECONDARY_CH_OFFSET 62 // 802.11n D3.03 Secondary Channel Offset element	571	#define IE_SECONDARY_CH_OFFSET 62 // 802.11n D3.03 Secondary Channel Offset element
576	#ifdef RT2870
577	#define IE_WAPI 68 // WAPI information element
578	#endif
579	#define IE_2040_BSS_COEXIST 72 // 802.11n D3.0.3	572	#define IE_2040_BSS_COEXIST 72 // 802.11n D3.0.3
580	#define IE_2040_BSS_INTOLERANT_REPORT 73 // 802.11n D3.03	573	#define IE_2040_BSS_INTOLERANT_REPORT 73 // 802.11n D3.03
581	#define IE_OVERLAPBSS_SCAN_PARM 74 // 802.11n D3.03	574	#define IE_OVERLAPBSS_SCAN_PARM 74 // 802.11n D3.03
Lines 624-634 Link Here
624	#define AP_CNTL_STATE_MACHINE 15	617	#define AP_CNTL_STATE_MACHINE 15
625	#define AP_WPA_STATE_MACHINE 16	618	#define AP_WPA_STATE_MACHINE 16
626		619
627	#ifdef RT30xx
628	#define WSC_STATE_MACHINE 17
629	#define WSC_UPNP_STATE_MACHINE 18
630	#endif
631
632	//	620	//
633	// STA's CONTROL/CONNECT state machine: states, events, total function #	621	// STA's CONTROL/CONNECT state machine: states, events, total function #
634	//	622	//
Lines 1215-1224 Link Here
1215	#define RFIC_2750 4 // 2.4G/5G 1T2R	1203	#define RFIC_2750 4 // 2.4G/5G 1T2R
1216	#define RFIC_3020 5 // 2.4G 1T1R	1204	#define RFIC_3020 5 // 2.4G 1T1R
1217	#define RFIC_2020 6 // 2.4G B/G	1205	#define RFIC_2020 6 // 2.4G B/G
1218	#ifdef RT30xx
1219	#define RFIC_3021 7 // 2.4G 1T2R	1206	#define RFIC_3021 7 // 2.4G 1T2R
1220	#define RFIC_3022 8 // 2.4G 2T2R	1207	#define RFIC_3022 8 // 2.4G 2T2R
1221	#endif
1222		1208
1223	// LED Status.	1209	// LED Status.
1224	#define LED_LINK_DOWN 0	1210	#define LED_LINK_DOWN 0

Lines 454-464 VOID MlmeAssocReqAction( Link Here

(-)a/drivers/staging/rt2860/sta/assoc.c (-26 lines)
454	RSNIe = IE_WPA2;	454	RSNIe = IE_WPA2;
455	}	455	}
456		456
457	#ifdef RT30xx
458	#ifdef SIOCSIWGENIE
459	if (pAd->StaCfg.WpaSupplicantUP != 1)	457	if (pAd->StaCfg.WpaSupplicantUP != 1)
460	#endif // SIOCSIWGENIE //
461	#endif
462	RTMPMakeRSNIE(pAd, pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus, BSS0);	458	RTMPMakeRSNIE(pAd, pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus, BSS0);
463		459
464	// Check for WPA PMK cache list	460	// Check for WPA PMK cache list
Lines 485-492 VOID MlmeAssocReqAction( Link Here
485	}	481	}
486	}	482	}
487		483
488	#ifdef RT30xx
489	#ifdef SIOCSIWGENIE
490	if (pAd->StaCfg.WpaSupplicantUP == 1)	484	if (pAd->StaCfg.WpaSupplicantUP == 1)
491	{	485	{
492	MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,	486	MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
Lines 494-501 VOID MlmeAssocReqAction( Link Here
494	END_OF_ARGS);	488	END_OF_ARGS);
495	}	489	}
496	else	490	else
497	#endif
498	#endif
499	{	491	{
500	MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,	492	MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
501	1, &RSNIe,	493	1, &RSNIe,
Lines 506-516 VOID MlmeAssocReqAction( Link Here
506		498
507	FrameLen += tmp;	499	FrameLen += tmp;
508		500
509	#ifdef RT30xx
510	#ifdef SIOCSIWGENIE
511	if (pAd->StaCfg.WpaSupplicantUP != 1)	501	if (pAd->StaCfg.WpaSupplicantUP != 1)
512	#endif
513	#endif
514	{	502	{
515	// Append Variable IE	503	// Append Variable IE
516	NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &RSNIe, 1);	504	NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &RSNIe, 1);
Lines 1503-1509 int wext_notify_event_assoc( Link Here
1503	union iwreq_data wrqu;	1491	union iwreq_data wrqu;
1504	char custom[IW_CUSTOM_MAX] = {0};	1492	char custom[IW_CUSTOM_MAX] = {0};
1505		1493
1506	#if WIRELESS_EXT > 17
1507	if (pAd->StaCfg.ReqVarIELen <= IW_CUSTOM_MAX)	1494	if (pAd->StaCfg.ReqVarIELen <= IW_CUSTOM_MAX)
1508	{	1495	{
1509	wrqu.data.length = pAd->StaCfg.ReqVarIELen;	1496	wrqu.data.length = pAd->StaCfg.ReqVarIELen;
Lines 1512-1530 int wext_notify_event_assoc( Link Here
1512	}	1499	}
1513	else	1500	else
1514	DBGPRINT(RT_DEBUG_TRACE, ("pAd->StaCfg.ReqVarIELen > MAX_CUSTOM_LEN\n"));	1501	DBGPRINT(RT_DEBUG_TRACE, ("pAd->StaCfg.ReqVarIELen > MAX_CUSTOM_LEN\n"));
1515	#else
1516	if (((pAd->StaCfg.ReqVarIELen*2) + 17) <= IW_CUSTOM_MAX)
1517	{
1518	UCHAR idx;
1519	wrqu.data.length = (pAd->StaCfg.ReqVarIELen*2) + 17;
1520	sprintf(custom, "ASSOCINFO(ReqIEs=");
1521	for (idx=0; idx<pAd->StaCfg.ReqVarIELen; idx++)
1522	sprintf(custom + strlen(custom), "%02x", pAd->StaCfg.ReqVarIEs[idx]);
1523	wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, custom);
1524	}
1525	else
1526	DBGPRINT(RT_DEBUG_TRACE, ("(pAd->StaCfg.ReqVarIELen*2) + 17 > MAX_CUSTOM_LEN\n"));
1527	#endif
1528		1502
1529	return 0;	1503	return 0;
1530		1504

Lines 1384-1395 VOID WpaGroupMsg1Action( Link Here

(-)a/drivers/staging/rt2860/sta/wpa.c (-9 lines)
1384	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;	1384	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;
1385	else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)	1385	else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
1386	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;	1386	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;
1387	#ifndef RT30xx
1388	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled)	1387	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled)
1389	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP64;	1388	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP64;
1390	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)	1389	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)
1391	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP128;	1390	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP128;
1392	#endif
1393		1391
1394	//hex_dump("Group Key :", pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key, LEN_TKIP_EK);	1392	//hex_dump("Group Key :", pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key, LEN_TKIP_EK);
1395	}	1393	}
Lines 1766-1777 BOOLEAN ParseKeyData( Link Here
1766	// Get GTK length - refer to IEEE 802.11i-2004 p.82	1764	// Get GTK length - refer to IEEE 802.11i-2004 p.82
1767	GTKLEN = pKDE->Len -6;	1765	GTKLEN = pKDE->Len -6;
1768		1766
1769	#ifdef RT30xx
1770	if (GTKLEN < LEN_AES_KEY)	1767	if (GTKLEN < LEN_AES_KEY)
1771	#endif
1772	#ifndef RT30xx
1773	if (GTKLEN < MIN_LEN_OF_GTK)
1774	#endif
1775	{	1768	{
1776	DBGPRINT(RT_DEBUG_ERROR, ("ERROR: GTK Key length is too short (%d) \n", GTKLEN));	1769	DBGPRINT(RT_DEBUG_ERROR, ("ERROR: GTK Key length is too short (%d) \n", GTKLEN));
1777	return FALSE;	1770	return FALSE;
Lines 1797-1808 BOOLEAN ParseKeyData( Link Here
1797	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;	1790	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;
1798	else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)	1791	else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
1799	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;	1792	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;
1800	#ifndef RT30xx
1801	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled)	1793	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled)
1802	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP64;	1794	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP64;
1803	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)	1795	else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)
1804	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP128;	1796	pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP128;
1805	#endif
1806		1797
1807	return TRUE;	1798	return TRUE;
1808		1799