• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /******************************************************************************
2  *
3  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12  * more details.
13  *
14  ******************************************************************************/
15 #define _RTL8188E_CMD_C_
16 
17 #include <osdep_service.h>
18 #include <drv_types.h>
19 #include <recv_osdep.h>
20 #include <mlme_osdep.h>
21 #include <rtw_ioctl_set.h>
22 
23 #include <rtl8188e_hal.h>
24 
25 #define RTL88E_MAX_H2C_BOX_NUMS		4
26 #define RTL88E_MAX_CMD_LEN		7
27 #define RTL88E_MESSAGE_BOX_SIZE		4
28 #define RTL88E_EX_MESSAGE_BOX_SIZE	4
29 
_is_fw_read_cmd_down(struct adapter * adapt,u8 msgbox_num)30 static u8 _is_fw_read_cmd_down(struct adapter *adapt, u8 msgbox_num)
31 {
32 	u8 read_down = false;
33 	int	retry_cnts = 100;
34 
35 	u8 valid;
36 
37 	do {
38 		valid = usb_read8(adapt, REG_HMETFR) & BIT(msgbox_num);
39 		if (0 == valid)
40 			read_down = true;
41 	} while ((!read_down) && (retry_cnts--));
42 
43 	return read_down;
44 }
45 
46 /*****************************************
47 * H2C Msg format :
48 * 0x1DF - 0x1D0
49 *| 31 - 8	| 7-5	 4 - 0	|
50 *| h2c_msg	|Class_ID CMD_ID	|
51 *
52 * Extend 0x1FF - 0x1F0
53 *|31 - 0	  |
54 *|ext_msg|
55 ******************************************/
FillH2CCmd_88E(struct adapter * adapt,u8 ElementID,u32 CmdLen,u8 * pCmdBuffer)56 static s32 FillH2CCmd_88E(struct adapter *adapt, u8 ElementID, u32 CmdLen, u8 *pCmdBuffer)
57 {
58 	u8 bcmd_down = false;
59 	s32 retry_cnts = 100;
60 	u8 h2c_box_num;
61 	u32 msgbox_addr;
62 	u32 msgbox_ex_addr;
63 	u8 cmd_idx, ext_cmd_len;
64 	u32 h2c_cmd = 0;
65 	u32 h2c_cmd_ex = 0;
66 	s32 ret = _FAIL;
67 
68 
69 	if (!adapt->bFWReady) {
70 		DBG_88E("FillH2CCmd_88E(): return H2C cmd because fw is not ready\n");
71 		return ret;
72 	}
73 
74 	if (!pCmdBuffer)
75 		goto exit;
76 	if (CmdLen > RTL88E_MAX_CMD_LEN)
77 		goto exit;
78 	if (adapt->bSurpriseRemoved)
79 		goto exit;
80 
81 	/* pay attention to if  race condition happened in  H2C cmd setting. */
82 	do {
83 		h2c_box_num = adapt->HalData->LastHMEBoxNum;
84 
85 		if (!_is_fw_read_cmd_down(adapt, h2c_box_num)) {
86 			DBG_88E(" fw read cmd failed...\n");
87 			goto exit;
88 		}
89 
90 		*(u8 *)(&h2c_cmd) = ElementID;
91 
92 		if (CmdLen <= 3) {
93 			memcpy((u8 *)(&h2c_cmd)+1, pCmdBuffer, CmdLen);
94 		} else {
95 			memcpy((u8 *)(&h2c_cmd)+1, pCmdBuffer, 3);
96 			ext_cmd_len = CmdLen-3;
97 			memcpy((u8 *)(&h2c_cmd_ex), pCmdBuffer+3, ext_cmd_len);
98 
99 			/* Write Ext command */
100 			msgbox_ex_addr = REG_HMEBOX_EXT_0 + (h2c_box_num * RTL88E_EX_MESSAGE_BOX_SIZE);
101 			for (cmd_idx = 0; cmd_idx < ext_cmd_len; cmd_idx++) {
102 				usb_write8(adapt, msgbox_ex_addr+cmd_idx, *((u8 *)(&h2c_cmd_ex)+cmd_idx));
103 			}
104 		}
105 		/*  Write command */
106 		msgbox_addr = REG_HMEBOX_0 + (h2c_box_num * RTL88E_MESSAGE_BOX_SIZE);
107 		for (cmd_idx = 0; cmd_idx < RTL88E_MESSAGE_BOX_SIZE; cmd_idx++) {
108 			usb_write8(adapt, msgbox_addr+cmd_idx, *((u8 *)(&h2c_cmd)+cmd_idx));
109 		}
110 		bcmd_down = true;
111 
112 		adapt->HalData->LastHMEBoxNum =
113 			(h2c_box_num+1) % RTL88E_MAX_H2C_BOX_NUMS;
114 
115 	} while ((!bcmd_down) && (retry_cnts--));
116 
117 	ret = _SUCCESS;
118 
119 exit:
120 
121 
122 	return ret;
123 }
124 
125 /* bitmap[0:27] = tx_rate_bitmap */
126 /* bitmap[28:31]= Rate Adaptive id */
127 /* arg[0:4] = macid */
128 /* arg[5] = Short GI */
rtw_hal_add_ra_tid(struct adapter * pAdapter,u32 bitmap,u8 arg,u8 rssi_level)129 void rtw_hal_add_ra_tid(struct adapter *pAdapter, u32 bitmap, u8 arg, u8 rssi_level)
130 {
131 	struct odm_dm_struct *odmpriv = &pAdapter->HalData->odmpriv;
132 
133 	u8 macid, init_rate, raid, shortGIrate = false;
134 
135 	macid = arg&0x1f;
136 
137 	raid = (bitmap>>28) & 0x0f;
138 	bitmap &= 0x0fffffff;
139 
140 	if (rssi_level != DM_RATR_STA_INIT)
141 		bitmap = ODM_Get_Rate_Bitmap(odmpriv, macid, bitmap, rssi_level);
142 
143 	bitmap |= ((raid<<28)&0xf0000000);
144 
145 	init_rate = get_highest_rate_idx(bitmap&0x0fffffff)&0x3f;
146 
147 	shortGIrate = (arg & BIT(5)) ? true : false;
148 
149 	if (shortGIrate)
150 		init_rate |= BIT(6);
151 
152 	raid = (bitmap>>28) & 0x0f;
153 
154 	bitmap &= 0x0fffffff;
155 
156 	DBG_88E("%s=> mac_id:%d, raid:%d, ra_bitmap=0x%x, shortGIrate=0x%02x\n",
157 		__func__, macid, raid, bitmap, shortGIrate);
158 
159 	ODM_RA_UpdateRateInfo_8188E(odmpriv, macid, raid, bitmap, shortGIrate);
160 }
161 
rtl8188e_set_FwPwrMode_cmd(struct adapter * adapt,u8 Mode)162 void rtl8188e_set_FwPwrMode_cmd(struct adapter *adapt, u8 Mode)
163 {
164 	struct setpwrmode_parm H2CSetPwrMode;
165 	struct pwrctrl_priv *pwrpriv = &adapt->pwrctrlpriv;
166 	u8 RLBM = 0; /*  0:Min, 1:Max, 2:User define */
167 
168 	DBG_88E("%s: Mode=%d SmartPS=%d UAPSD=%d\n", __func__,
169 		Mode, pwrpriv->smart_ps, adapt->registrypriv.uapsd_enable);
170 
171 	switch (Mode) {
172 	case PS_MODE_ACTIVE:
173 		H2CSetPwrMode.Mode = 0;
174 		break;
175 	case PS_MODE_MIN:
176 		H2CSetPwrMode.Mode = 1;
177 		break;
178 	case PS_MODE_MAX:
179 		RLBM = 1;
180 		H2CSetPwrMode.Mode = 1;
181 		break;
182 	case PS_MODE_DTIM:
183 		RLBM = 2;
184 		H2CSetPwrMode.Mode = 1;
185 		break;
186 	case PS_MODE_UAPSD_WMM:
187 		H2CSetPwrMode.Mode = 2;
188 		break;
189 	default:
190 		H2CSetPwrMode.Mode = 0;
191 		break;
192 	}
193 
194 	H2CSetPwrMode.SmartPS_RLBM = (((pwrpriv->smart_ps<<4)&0xf0) | (RLBM & 0x0f));
195 
196 	H2CSetPwrMode.AwakeInterval = 1;
197 
198 	H2CSetPwrMode.bAllQueueUAPSD = adapt->registrypriv.uapsd_enable;
199 
200 	if (Mode > 0)
201 		H2CSetPwrMode.PwrState = 0x00;/*  AllON(0x0C), RFON(0x04), RFOFF(0x00) */
202 	else
203 		H2CSetPwrMode.PwrState = 0x0C;/*  AllON(0x0C), RFON(0x04), RFOFF(0x00) */
204 
205 	FillH2CCmd_88E(adapt, H2C_PS_PWR_MODE, sizeof(H2CSetPwrMode), (u8 *)&H2CSetPwrMode);
206 
207 }
208 
rtl8188e_set_FwMediaStatus_cmd(struct adapter * adapt,__le16 mstatus_rpt)209 void rtl8188e_set_FwMediaStatus_cmd(struct adapter *adapt, __le16 mstatus_rpt)
210 {
211 	u8 opmode, macid;
212 	u16 mst_rpt = le16_to_cpu(mstatus_rpt);
213 
214 	opmode = (u8)mst_rpt;
215 	macid = (u8)(mst_rpt >> 8);
216 
217 	DBG_88E("### %s: MStatus=%x MACID=%d\n", __func__, opmode, macid);
218 	FillH2CCmd_88E(adapt, H2C_COM_MEDIA_STATUS_RPT, sizeof(mst_rpt), (u8 *)&mst_rpt);
219 }
220 
ConstructBeacon(struct adapter * adapt,u8 * pframe,u32 * pLength)221 static void ConstructBeacon(struct adapter *adapt, u8 *pframe, u32 *pLength)
222 {
223 	struct ieee80211_hdr *pwlanhdr;
224 	__le16 *fctrl;
225 	u32 rate_len, pktlen;
226 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
227 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
228 	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
229 	u8 bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
230 
231 	pwlanhdr = (struct ieee80211_hdr *)pframe;
232 
233 	fctrl = &pwlanhdr->frame_control;
234 	*(fctrl) = 0;
235 
236 	ether_addr_copy(pwlanhdr->addr1, bc_addr);
237 	ether_addr_copy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)));
238 	ether_addr_copy(pwlanhdr->addr3, cur_network->MacAddress);
239 
240 	SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
241 	SetFrameSubType(pframe, WIFI_BEACON);
242 
243 	pframe += sizeof(struct ieee80211_hdr_3addr);
244 	pktlen = sizeof(struct ieee80211_hdr_3addr);
245 
246 	/* timestamp will be inserted by hardware */
247 	pframe += 8;
248 	pktlen += 8;
249 
250 	/*  beacon interval: 2 bytes */
251 	memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2);
252 
253 	pframe += 2;
254 	pktlen += 2;
255 
256 	/*  capability info: 2 bytes */
257 	memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
258 
259 	pframe += 2;
260 	pktlen += 2;
261 
262 	if ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE) {
263 		pktlen += cur_network->IELength - sizeof(struct ndis_802_11_fixed_ie);
264 		memcpy(pframe, cur_network->IEs+sizeof(struct ndis_802_11_fixed_ie), pktlen);
265 
266 		goto _ConstructBeacon;
267 	}
268 
269 	/* below for ad-hoc mode */
270 
271 	/*  SSID */
272 	pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pktlen);
273 
274 	/*  supported rates... */
275 	rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
276 	pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, min_t(u32, rate_len, 8), cur_network->SupportedRates, &pktlen);
277 
278 	/*  DS parameter set */
279 	pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pktlen);
280 
281 	if ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) {
282 		u32 ATIMWindow;
283 		/*  IBSS Parameter Set... */
284 		ATIMWindow = 0;
285 		pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pktlen);
286 	}
287 
288 	/* todo: ERP IE */
289 
290 	/*  EXTERNDED SUPPORTED RATE */
291 	if (rate_len > 8)
292 		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pktlen);
293 
294 	/* todo:HT for adhoc */
295 
296 _ConstructBeacon:
297 
298 	if ((pktlen + TXDESC_SIZE) > 512) {
299 		DBG_88E("beacon frame too large\n");
300 		return;
301 	}
302 
303 	*pLength = pktlen;
304 }
305 
ConstructPSPoll(struct adapter * adapt,u8 * pframe,u32 * pLength)306 static void ConstructPSPoll(struct adapter *adapt, u8 *pframe, u32 *pLength)
307 {
308 	struct ieee80211_hdr *pwlanhdr;
309 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
310 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
311 	__le16 *fctrl;
312 	struct wlan_bssid_ex *pnetwork = &(pmlmeinfo->network);
313 
314 	pwlanhdr = (struct ieee80211_hdr *)pframe;
315 
316 	/*  Frame control. */
317 	fctrl = &pwlanhdr->frame_control;
318 	*(fctrl) = 0;
319 	SetPwrMgt(fctrl);
320 	SetFrameSubType(pframe, WIFI_PSPOLL);
321 
322 	/*  AID. */
323 	SetDuration(pframe, (pmlmeinfo->aid | 0xc000));
324 
325 	/*  BSSID. */
326 	ether_addr_copy(pwlanhdr->addr1, pnetwork->MacAddress);
327 
328 	/*  TA. */
329 	ether_addr_copy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)));
330 
331 	*pLength = 16;
332 }
333 
ConstructNullFunctionData(struct adapter * adapt,u8 * pframe,u32 * pLength,u8 * StaAddr,u8 bQoS,u8 AC,u8 bEosp,u8 bForcePowerSave)334 static void ConstructNullFunctionData(struct adapter *adapt, u8 *pframe,
335 	u32 *pLength,
336 	u8 *StaAddr,
337 	u8 bQoS,
338 	u8 AC,
339 	u8 bEosp,
340 	u8 bForcePowerSave)
341 {
342 	struct ieee80211_hdr *pwlanhdr;
343 	__le16 *fctrl;
344 	u32 pktlen;
345 	struct mlme_priv *pmlmepriv = &adapt->mlmepriv;
346 	struct wlan_network		*cur_network = &pmlmepriv->cur_network;
347 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
348 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
349 	struct wlan_bssid_ex *pnetwork = &(pmlmeinfo->network);
350 
351 	pwlanhdr = (struct ieee80211_hdr *)pframe;
352 
353 	fctrl = &pwlanhdr->frame_control;
354 	*(fctrl) = 0;
355 	if (bForcePowerSave)
356 		SetPwrMgt(fctrl);
357 
358 	switch (cur_network->network.InfrastructureMode) {
359 	case Ndis802_11Infrastructure:
360 		SetToDs(fctrl);
361 		ether_addr_copy(pwlanhdr->addr1, pnetwork->MacAddress);
362 		ether_addr_copy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)));
363 		ether_addr_copy(pwlanhdr->addr3, StaAddr);
364 		break;
365 	case Ndis802_11APMode:
366 		SetFrDs(fctrl);
367 		ether_addr_copy(pwlanhdr->addr1, StaAddr);
368 		ether_addr_copy(pwlanhdr->addr2, pnetwork->MacAddress);
369 		ether_addr_copy(pwlanhdr->addr3, myid(&(adapt->eeprompriv)));
370 		break;
371 	case Ndis802_11IBSS:
372 	default:
373 		ether_addr_copy(pwlanhdr->addr1, StaAddr);
374 		ether_addr_copy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)));
375 		ether_addr_copy(pwlanhdr->addr3, pnetwork->MacAddress);
376 		break;
377 	}
378 
379 	SetSeqNum(pwlanhdr, 0);
380 
381 	if (bQoS) {
382 		struct ieee80211_qos_hdr *pwlanqoshdr;
383 
384 		SetFrameSubType(pframe, WIFI_QOS_DATA_NULL);
385 
386 		pwlanqoshdr = (struct ieee80211_qos_hdr *)pframe;
387 		SetPriority(&pwlanqoshdr->qos_ctrl, AC);
388 		SetEOSP(&pwlanqoshdr->qos_ctrl, bEosp);
389 
390 		pktlen = sizeof(struct ieee80211_qos_hdr);
391 	} else {
392 		SetFrameSubType(pframe, WIFI_DATA_NULL);
393 
394 		pktlen = sizeof(struct ieee80211_hdr_3addr);
395 	}
396 
397 	*pLength = pktlen;
398 }
399 
ConstructProbeRsp(struct adapter * adapt,u8 * pframe,u32 * pLength,u8 * StaAddr,bool bHideSSID)400 static void ConstructProbeRsp(struct adapter *adapt, u8 *pframe, u32 *pLength, u8 *StaAddr, bool bHideSSID)
401 {
402 	struct ieee80211_hdr *pwlanhdr;
403 	__le16 *fctrl;
404 	u8 *mac, *bssid;
405 	u32 pktlen;
406 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
407 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
408 	struct wlan_bssid_ex	*cur_network = &(pmlmeinfo->network);
409 
410 	pwlanhdr = (struct ieee80211_hdr *)pframe;
411 
412 	mac = myid(&(adapt->eeprompriv));
413 	bssid = cur_network->MacAddress;
414 
415 	fctrl = &pwlanhdr->frame_control;
416 	*(fctrl) = 0;
417 	ether_addr_copy(pwlanhdr->addr1, StaAddr);
418 	ether_addr_copy(pwlanhdr->addr2, mac);
419 	ether_addr_copy(pwlanhdr->addr3, bssid);
420 
421 	SetSeqNum(pwlanhdr, 0);
422 	SetFrameSubType(fctrl, WIFI_PROBERSP);
423 
424 	pktlen = sizeof(struct ieee80211_hdr_3addr);
425 	pframe += pktlen;
426 
427 	if (cur_network->IELength > MAX_IE_SZ)
428 		return;
429 
430 	memcpy(pframe, cur_network->IEs, cur_network->IELength);
431 	pframe += cur_network->IELength;
432 	pktlen += cur_network->IELength;
433 
434 	*pLength = pktlen;
435 }
436 
437 /*  */
438 /*  Description: Fill the reserved packets that FW will use to RSVD page. */
439 /*			Now we just send 4 types packet to rsvd page. */
440 /*			(1)Beacon, (2)Ps-poll, (3)Null data, (4)ProbeRsp. */
441 /*	Input: */
442 /*	    bDLFinished - false: At the first time we will send all the packets as a large packet to Hw, */
443 /*						so we need to set the packet length to total length. */
444 /*			      true: At the second time, we should send the first packet (default:beacon) */
445 /*						to Hw again and set the length in descriptor to the real beacon length. */
446 /*  2009.10.15 by tynli. */
SetFwRsvdPagePkt(struct adapter * adapt,bool bDLFinished)447 static void SetFwRsvdPagePkt(struct adapter *adapt, bool bDLFinished)
448 {
449 	struct xmit_frame	*pmgntframe;
450 	struct pkt_attrib	*pattrib;
451 	struct xmit_priv *pxmitpriv;
452 	struct mlme_ext_priv *pmlmeext;
453 	struct mlme_ext_info	*pmlmeinfo;
454 	u32 BeaconLength = 0, ProbeRspLength = 0, PSPollLength;
455 	u32 NullDataLength, QosNullLength;
456 	u8 *ReservedPagePacket;
457 	u8 PageNum, PageNeed, TxDescLen;
458 	u16 BufIndex;
459 	u32 TotalPacketLen;
460 	struct rsvdpage_loc RsvdPageLoc;
461 	struct wlan_bssid_ex *pnetwork;
462 
463 	DBG_88E("%s\n", __func__);
464 	ReservedPagePacket = kzalloc(1000, GFP_KERNEL);
465 	if (!ReservedPagePacket) {
466 		DBG_88E("%s: alloc ReservedPagePacket fail!\n", __func__);
467 		return;
468 	}
469 
470 	pxmitpriv = &adapt->xmitpriv;
471 	pmlmeext = &adapt->mlmeextpriv;
472 	pmlmeinfo = &pmlmeext->mlmext_info;
473 	pnetwork = &(pmlmeinfo->network);
474 
475 	TxDescLen = TXDESC_SIZE;
476 	PageNum = 0;
477 
478 	/* 3 (1) beacon * 2 pages */
479 	BufIndex = TXDESC_OFFSET;
480 	ConstructBeacon(adapt, &ReservedPagePacket[BufIndex], &BeaconLength);
481 
482 	/*  When we count the first page size, we need to reserve description size for the RSVD */
483 	/*  packet, it will be filled in front of the packet in TXPKTBUF. */
484 	PageNeed = (u8)PageNum_128(TxDescLen + BeaconLength);
485 	/*  To reserved 2 pages for beacon buffer. 2010.06.24. */
486 	if (PageNeed == 1)
487 		PageNeed += 1;
488 	PageNum += PageNeed;
489 	adapt->HalData->FwRsvdPageStartOffset = PageNum;
490 
491 	BufIndex += PageNeed*128;
492 
493 	/* 3 (2) ps-poll *1 page */
494 	RsvdPageLoc.LocPsPoll = PageNum;
495 	ConstructPSPoll(adapt, &ReservedPagePacket[BufIndex], &PSPollLength);
496 	rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], PSPollLength, true, false);
497 
498 	PageNeed = (u8)PageNum_128(TxDescLen + PSPollLength);
499 	PageNum += PageNeed;
500 
501 	BufIndex += PageNeed*128;
502 
503 	/* 3 (3) null data * 1 page */
504 	RsvdPageLoc.LocNullData = PageNum;
505 	ConstructNullFunctionData(adapt, &ReservedPagePacket[BufIndex], &NullDataLength, pnetwork->MacAddress, false, 0, 0, false);
506 	rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], NullDataLength, false, false);
507 
508 	PageNeed = (u8)PageNum_128(TxDescLen + NullDataLength);
509 	PageNum += PageNeed;
510 
511 	BufIndex += PageNeed*128;
512 
513 	/* 3 (4) probe response * 1page */
514 	RsvdPageLoc.LocProbeRsp = PageNum;
515 	ConstructProbeRsp(adapt, &ReservedPagePacket[BufIndex], &ProbeRspLength, pnetwork->MacAddress, false);
516 	rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], ProbeRspLength, false, false);
517 
518 	PageNeed = (u8)PageNum_128(TxDescLen + ProbeRspLength);
519 	PageNum += PageNeed;
520 
521 	BufIndex += PageNeed*128;
522 
523 	/* 3 (5) Qos null data */
524 	RsvdPageLoc.LocQosNull = PageNum;
525 	ConstructNullFunctionData(adapt, &ReservedPagePacket[BufIndex],
526 				  &QosNullLength, pnetwork->MacAddress, true, 0, 0, false);
527 	rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], QosNullLength, false, false);
528 
529 	PageNeed = (u8)PageNum_128(TxDescLen + QosNullLength);
530 	PageNum += PageNeed;
531 
532 	TotalPacketLen = BufIndex + QosNullLength;
533 	pmgntframe = alloc_mgtxmitframe(pxmitpriv);
534 	if (!pmgntframe)
535 		goto exit;
536 
537 	/*  update attribute */
538 	pattrib = &pmgntframe->attrib;
539 	update_mgntframe_attrib(adapt, pattrib);
540 	pattrib->qsel = 0x10;
541 	pattrib->last_txcmdsz = TotalPacketLen - TXDESC_OFFSET;
542 	pattrib->pktlen = pattrib->last_txcmdsz;
543 	memcpy(pmgntframe->buf_addr, ReservedPagePacket, TotalPacketLen);
544 
545 	rtw_hal_mgnt_xmit(adapt, pmgntframe);
546 
547 	DBG_88E("%s: Set RSVD page location to Fw\n", __func__);
548 	FillH2CCmd_88E(adapt, H2C_COM_RSVD_PAGE, sizeof(RsvdPageLoc), (u8 *)&RsvdPageLoc);
549 
550 exit:
551 	kfree(ReservedPagePacket);
552 }
553 
rtl8188e_set_FwJoinBssReport_cmd(struct adapter * adapt,u8 mstatus)554 void rtl8188e_set_FwJoinBssReport_cmd(struct adapter *adapt, u8 mstatus)
555 {
556 	struct hal_data_8188e *haldata = adapt->HalData;
557 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
558 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
559 	bool	bSendBeacon = false;
560 	bool	bcn_valid = false;
561 	u8 DLBcnCount = 0;
562 	u32 poll = 0;
563 
564 
565 	DBG_88E("%s mstatus(%x)\n", __func__, mstatus);
566 
567 	if (mstatus == 1) {
568 		/*  We should set AID, correct TSF, HW seq enable before set JoinBssReport to Fw in 88/92C. */
569 		/*  Suggested by filen. Added by tynli. */
570 		usb_write16(adapt, REG_BCN_PSR_RPT, (0xC000|pmlmeinfo->aid));
571 		/*  Do not set TSF again here or vWiFi beacon DMA INT will not work. */
572 
573 		/* Set REG_CR bit 8. DMA beacon by SW. */
574 		haldata->RegCR_1 |= BIT(0);
575 		usb_write8(adapt,  REG_CR+1, haldata->RegCR_1);
576 
577 		/*  Disable Hw protection for a time which revserd for Hw sending beacon. */
578 		/*  Fix download reserved page packet fail that access collision with the protection time. */
579 		/*  2010.05.11. Added by tynli. */
580 		usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)&(~BIT(3)));
581 		usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL) | BIT(4));
582 
583 		if (haldata->RegFwHwTxQCtrl & BIT(6)) {
584 			DBG_88E("HalDownloadRSVDPage(): There is an Adapter is sending beacon.\n");
585 			bSendBeacon = true;
586 		}
587 
588 		/*  Set FWHW_TXQ_CTRL 0x422[6]=0 to tell Hw the packet is not a real beacon frame. */
589 		usb_write8(adapt, REG_FWHW_TXQ_CTRL+2, (haldata->RegFwHwTxQCtrl&(~BIT(6))));
590 		haldata->RegFwHwTxQCtrl &= (~BIT(6));
591 
592 		/*  Clear beacon valid check bit. */
593 		rtw_hal_set_hwreg(adapt, HW_VAR_BCN_VALID, NULL);
594 		DLBcnCount = 0;
595 		poll = 0;
596 		do {
597 			/*  download rsvd page. */
598 			SetFwRsvdPagePkt(adapt, false);
599 			DLBcnCount++;
600 			do {
601 				yield();
602 				/* mdelay(10); */
603 				/*  check rsvd page download OK. */
604 				rtw_hal_get_hwreg(adapt, HW_VAR_BCN_VALID, (u8 *)(&bcn_valid));
605 				poll++;
606 			} while (!bcn_valid && (poll%10) != 0 && !adapt->bSurpriseRemoved && !adapt->bDriverStopped);
607 		} while (!bcn_valid && DLBcnCount <= 100 && !adapt->bSurpriseRemoved && !adapt->bDriverStopped);
608 
609 		if (adapt->bSurpriseRemoved || adapt->bDriverStopped)
610 			;
611 		else if (!bcn_valid)
612 			DBG_88E("%s: 1 Download RSVD page failed! DLBcnCount:%u, poll:%u\n", __func__, DLBcnCount, poll);
613 		else
614 			DBG_88E("%s: 1 Download RSVD success! DLBcnCount:%u, poll:%u\n", __func__, DLBcnCount, poll);
615 		/*  */
616 		/*  We just can send the reserved page twice during the time that Tx thread is stopped (e.g. pnpsetpower) */
617 		/*  because we need to free the Tx BCN Desc which is used by the first reserved page packet. */
618 		/*  At run time, we cannot get the Tx Desc until it is released in TxHandleInterrupt() so we will return */
619 		/*  the beacon TCB in the following code. 2011.11.23. by tynli. */
620 		/*  */
621 
622 		/*  Enable Bcn */
623 		usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL) | BIT(3));
624 		usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)&(~BIT(4)));
625 
626 		/*  To make sure that if there exists an adapter which would like to send beacon. */
627 		/*  If exists, the origianl value of 0x422[6] will be 1, we should check this to */
628 		/*  prevent from setting 0x422[6] to 0 after download reserved page, or it will cause */
629 		/*  the beacon cannot be sent by HW. */
630 		/*  2010.06.23. Added by tynli. */
631 		if (bSendBeacon) {
632 			usb_write8(adapt, REG_FWHW_TXQ_CTRL+2, (haldata->RegFwHwTxQCtrl | BIT(6)));
633 			haldata->RegFwHwTxQCtrl |= BIT(6);
634 		}
635 
636 		/*  Update RSVD page location H2C to Fw. */
637 		if (bcn_valid) {
638 			rtw_hal_set_hwreg(adapt, HW_VAR_BCN_VALID, NULL);
639 			DBG_88E("Set RSVD page location to Fw.\n");
640 		}
641 
642 		/*  Do not enable HW DMA BCN or it will cause Pcie interface hang by timing issue. 2011.11.24. by tynli. */
643 		/*  Clear CR[8] or beacon packet will not be send to TxBuf anymore. */
644 		haldata->RegCR_1 &= (~BIT(0));
645 		usb_write8(adapt,  REG_CR+1, haldata->RegCR_1);
646 	}
647 }
648