// SPDX-License-Identifier: GPL-2.0
/* Copyright(c) 2007 - 2012 Realtek Corporation. */

#define _IOCTL_LINUX_C_

#include "../include/osdep_service.h"
#include "../include/drv_types.h"
#include "../include/wlan_bssdef.h"
#include "../include/rtw_debug.h"
#include "../include/wifi.h"
#include "../include/rtw_mlme.h"
#include "../include/rtw_mlme_ext.h"
#include "../include/rtw_ioctl.h"
#include "../include/rtw_ioctl_set.h"
#include "../include/rtw_mp_ioctl.h"
#include "../include/usb_ops.h"
#include "../include/rtl8188e_hal.h"

#include "../include/rtw_mp.h"
#include "../include/rtw_iol.h"

#define RTL_IOCTL_WPA_SUPPLICANT        (SIOCIWFIRSTPRIV + 30)

#define SCAN_ITEM_SIZE 768
#define MAX_CUSTOM_LEN 64
#define RATE_COUNT 4

/*  combo scan */
#define WEXT_CSCAN_AMOUNT 9
#define WEXT_CSCAN_BUF_LEN              360
#define WEXT_CSCAN_HEADER               "CSCAN S\x01\x00\x00S\x00"
#define WEXT_CSCAN_HEADER_SIZE          12
#define WEXT_CSCAN_SSID_SECTION         'S'
#define WEXT_CSCAN_CHANNEL_SECTION      'C'
#define WEXT_CSCAN_NPROBE_SECTION       'N'
#define WEXT_CSCAN_ACTV_DWELL_SECTION   'A'
#define WEXT_CSCAN_PASV_DWELL_SECTION   'P'
#define WEXT_CSCAN_HOME_DWELL_SECTION   'H'
#define WEXT_CSCAN_TYPE_SECTION         'T'

static struct mp_ioctl_handler mp_ioctl_hdl[] = {
/*0*/   GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_start_test_hdl, OID_RT_PRO_START_TEST)
        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_stop_test_hdl, OID_RT_PRO_STOP_TEST)

        GEN_HANDLER(sizeof(struct rwreg_param), rtl8188eu_oid_rt_pro_read_register_hdl, OID_RT_PRO_READ_REGISTER)
        GEN_HANDLER(sizeof(struct rwreg_param), rtl8188eu_oid_rt_pro_write_register_hdl, OID_RT_PRO_WRITE_REGISTER)
        GEN_HANDLER(sizeof(struct bb_reg_param), rtl8188eu_oid_rt_pro_read_bb_reg_hdl, OID_RT_PRO_READ_BB_REG)
/*5*/   GEN_HANDLER(sizeof(struct bb_reg_param), rtl8188eu_oid_rt_pro_write_bb_reg_hdl, OID_RT_PRO_WRITE_BB_REG)
        GEN_HANDLER(sizeof(struct rf_reg_param), rtl8188eu_oid_rt_pro_read_rf_reg_hdl, OID_RT_PRO_RF_READ_REGISTRY)
        GEN_HANDLER(sizeof(struct rf_reg_param), rtl8188eu_oid_rt_pro_write_rf_reg_hdl, OID_RT_PRO_RF_WRITE_REGISTRY)

        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_channel_direct_call_hdl, OID_RT_PRO_SET_CHANNEL_DIRECT_CALL)
        GEN_HANDLER(sizeof(struct txpower_param), rtl8188eu_oid_rt_pro_set_tx_power_control_hdl, OID_RT_PRO_SET_TX_POWER_CONTROL)
/*10*/  GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_data_rate_hdl, OID_RT_PRO_SET_DATA_RATE)
        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_set_bandwidth_hdl, OID_RT_SET_BANDWIDTH)
        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_antenna_bb_hdl, OID_RT_PRO_SET_ANTENNA_BB)

        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_continuous_tx_hdl, OID_RT_PRO_SET_CONTINUOUS_TX)
        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_single_carrier_tx_hdl, OID_RT_PRO_SET_SINGLE_CARRIER_TX)
/*15*/  GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_carrier_suppression_tx_hdl, OID_RT_PRO_SET_CARRIER_SUPPRESSION_TX)
        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_single_tone_tx_hdl, OID_RT_PRO_SET_SINGLE_TONE_TX)

        EXT_MP_IOCTL_HANDLER(0, xmit_packet, 0)

        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_set_rx_packet_type_hdl, OID_RT_SET_RX_PACKET_TYPE)
        GEN_HANDLER(0, rtl8188eu_oid_rt_reset_phy_rx_packet_count_hdl, OID_RT_RESET_PHY_RX_PACKET_COUNT)
/*20*/  GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_phy_rx_packet_received_hdl, OID_RT_GET_PHY_RX_PACKET_RECEIVED)
        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_phy_rx_packet_crc32_error_hdl, OID_RT_GET_PHY_RX_PACKET_CRC32_ERROR)

        GEN_HANDLER(sizeof(struct eeprom_rw_param), NULL, 0)
        GEN_HANDLER(sizeof(struct eeprom_rw_param), NULL, 0)
        GEN_HANDLER(sizeof(struct efuse_access_struct), rtl8188eu_oid_rt_pro_efuse_hdl, OID_RT_PRO_EFUSE)
/*25*/  GEN_HANDLER(0, rtl8188eu_oid_rt_pro_efuse_map_hdl, OID_RT_PRO_EFUSE_MAP)
        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_efuse_max_size_hdl, OID_RT_GET_EFUSE_MAX_SIZE)
        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_efuse_current_size_hdl, OID_RT_GET_EFUSE_CURRENT_SIZE)

        GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_thermal_meter_hdl, OID_RT_PRO_GET_THERMAL_METER)
        GEN_HANDLER(sizeof(u8), rtl8188eu_oid_rt_pro_set_power_tracking_hdl, OID_RT_PRO_SET_POWER_TRACKING)
/*30*/  GEN_HANDLER(sizeof(u8), rtl8188eu_oid_rt_set_power_down_hdl, OID_RT_SET_POWER_DOWN)
/*31*/  GEN_HANDLER(0, rtl8188eu_oid_rt_pro_trigger_gpio_hdl, 0)
};

static u32 rtw_rates[] = {1000000, 2000000, 5500000, 11000000,
        6000000, 9000000, 12000000, 18000000, 24000000, 36000000,
        48000000, 54000000};

void indicate_wx_scan_complete_event(struct adapter *padapter)
{
        union iwreq_data wrqu;

        memset(&wrqu, 0, sizeof(union iwreq_data));
        wireless_send_event(padapter->pnetdev, SIOCGIWSCAN, &wrqu, NULL);
}

void rtw_indicate_wx_assoc_event(struct adapter *padapter)
{
        union iwreq_data wrqu;
        struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;

        memset(&wrqu, 0, sizeof(union iwreq_data));

        wrqu.ap_addr.sa_family = ARPHRD_ETHER;

        memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);

        DBG_88E_LEVEL(_drv_always_, "assoc success\n");
        wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
}

void rtw_indicate_wx_disassoc_event(struct adapter *padapter)
{
        union iwreq_data wrqu;

        memset(&wrqu, 0, sizeof(union iwreq_data));

        wrqu.ap_addr.sa_family = ARPHRD_ETHER;
        memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);

        DBG_88E_LEVEL(_drv_always_, "indicate disassoc\n");
        wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
}

static char *translate_scan(struct adapter *padapter,
                            struct iw_request_info *info,
                            struct wlan_network *pnetwork,
                            char *start, char *stop)
{
        struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
        struct iw_event iwe;
        u16 cap;
        __le16 le_tmp;
        u32 ht_ielen = 0;
        char *custom;
        char *p;
        u16 max_rate = 0, rate, ht_cap = false;
        u32 i = 0;
        u8 bw_40MHz = 0, short_GI = 0;
        u16 mcs_rate = 0;
        u8 ss, sq;
#ifdef CONFIG_88EU_P2P
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
                u32     blnGotP2PIE = false;

                /*      User is doing the P2P device discovery */
                /*      The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE. */
                /*      If not, the driver should ignore this AP and go to the next AP. */

                /*      Verifying the SSID */
                if (!memcmp(pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN)) {
                        u32     p2pielen = 0;

                        if (pnetwork->network.Reserved[0] == 2) {/*  Probe Request */
                                /*      Verifying the P2P IE */
                                if (rtw_get_p2p_ie(pnetwork->network.IEs, pnetwork->network.IELength, NULL, &p2pielen))
                                        blnGotP2PIE = true;
                        } else {/*  Beacon or Probe Respones */
                                /*      Verifying the P2P IE */
                                if (rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen))
                                        blnGotP2PIE = true;
                        }
                }

                if (!blnGotP2PIE)
                        return start;
        }
#endif /* CONFIG_88EU_P2P */

        /*  AP MAC address  */
        iwe.cmd = SIOCGIWAP;
        iwe.u.ap_addr.sa_family = ARPHRD_ETHER;

        memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
        start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);

        /* Add the ESSID */
        iwe.cmd = SIOCGIWESSID;
        iwe.u.data.flags = 1;
        iwe.u.data.length = min_t(u16, pnetwork->network.Ssid.SsidLength, 32);
        start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);

        /* parsing HT_CAP_IE */
        p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength - 12);

        if (p && ht_ielen > 0) {
                struct ieee80211_ht_cap *pht_capie;

                ht_cap = true;
                pht_capie = (struct ieee80211_ht_cap *)(p + 2);
                memcpy(&mcs_rate, pht_capie->mcs.rx_mask, 2);
                bw_40MHz = (le16_to_cpu(pht_capie->cap_info) &
                            IEEE80211_HT_CAP_SUP_WIDTH_20_40) ? 1 : 0;
                short_GI = (le16_to_cpu(pht_capie->cap_info) &
                            (IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40)) ? 1 : 0;
        }

        /* Add the protocol name */
        iwe.cmd = SIOCGIWNAME;
        if ((rtw_is_cckratesonly_included((u8 *)&pnetwork->network.SupportedRates))) {
                if (ht_cap)
                        snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
                else
                snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
        } else if ((rtw_is_cckrates_included((u8 *)&pnetwork->network.SupportedRates))) {
                if (ht_cap)
                        snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
                else
                        snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
        } else {
                if (ht_cap)
                        snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
                else
                        snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
        }

        start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);

          /* Add mode */
        iwe.cmd = SIOCGIWMODE;
        memcpy(&le_tmp, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);

        cap = le16_to_cpu(le_tmp);

        if (cap & (WLAN_CAPABILITY_IBSS | WLAN_CAPABILITY_BSS)) {
                if (cap & WLAN_CAPABILITY_BSS)
                        iwe.u.mode = IW_MODE_MASTER;
                else
                        iwe.u.mode = IW_MODE_ADHOC;

                start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
        }

        if (pnetwork->network.Configuration.DSConfig < 1)
                pnetwork->network.Configuration.DSConfig = 1;

         /* Add frequency/channel */
        iwe.cmd = SIOCGIWFREQ;
        iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
        iwe.u.freq.e = 1;
        iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
        start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);

        /* Add encryption capability */
        iwe.cmd = SIOCGIWENCODE;
        if (cap & WLAN_CAPABILITY_PRIVACY)
                iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
        else
                iwe.u.data.flags = IW_ENCODE_DISABLED;
        iwe.u.data.length = 0;
        start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);

        /*Add basic and extended rates */
        max_rate = 0;
        custom = kzalloc(MAX_CUSTOM_LEN, GFP_ATOMIC);
        if (!custom)
                return start;
        p = custom;
        p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
        while (pnetwork->network.SupportedRates[i] != 0) {
                rate = pnetwork->network.SupportedRates[i] & 0x7F;
                if (rate > max_rate)
                        max_rate = rate;
                p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
                              "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
                i++;
        }

        if (ht_cap) {
                if (mcs_rate & 0x8000)/* MCS15 */
                        max_rate = (bw_40MHz) ? ((short_GI) ? 300 : 270) : ((short_GI) ? 144 : 130);
                else if (mcs_rate & 0x0080)/* MCS7 */
                        ;
                else/* default MCS7 */
                        max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);

                max_rate = max_rate * 2;/* Mbps/2; */
        }

        iwe.cmd = SIOCGIWRATE;
        iwe.u.bitrate.fixed = 0;
        iwe.u.bitrate.disabled = 0;
        iwe.u.bitrate.value = max_rate * 500000;
        start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);

        /* parsing WPA/WPA2 IE */
        {
                u8 *buf;
                u8 *wpa_ie, *rsn_ie;
                u16 wpa_len = 0, rsn_len = 0;
                u8 *p;

                buf = kzalloc(MAX_WPA_IE_LEN, GFP_ATOMIC);
                if (!buf)
                        goto exit;
                wpa_ie = kzalloc(255, GFP_ATOMIC);
                if (!wpa_ie) {
                        kfree(buf);
                        goto exit;
                }
                rsn_ie = kzalloc(255, GFP_ATOMIC);
                if (!rsn_ie) {
                        kfree(buf);
                        kfree(wpa_ie);
                        goto exit;
                }
                rtw_get_sec_ie(pnetwork->network.IEs, pnetwork->network.IELength, rsn_ie, &rsn_len, wpa_ie, &wpa_len);

                if (wpa_len > 0) {
                        p = buf;
                        memset(buf, 0, MAX_WPA_IE_LEN);
                        p += sprintf(p, "wpa_ie =");
                        for (i = 0; i < wpa_len; i++)
                                p += sprintf(p, "%02x", wpa_ie[i]);

                        memset(&iwe, 0, sizeof(iwe));
                        iwe.cmd = IWEVCUSTOM;
                        iwe.u.data.length = strlen(buf);
                        start = iwe_stream_add_point(info, start, stop, &iwe, buf);

                        memset(&iwe, 0, sizeof(iwe));
                        iwe.cmd = IWEVGENIE;
                        iwe.u.data.length = wpa_len;
                        start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
                }
                if (rsn_len > 0) {
                        p = buf;
                        memset(buf, 0, MAX_WPA_IE_LEN);
                        p += sprintf(p, "rsn_ie =");
                        for (i = 0; i < rsn_len; i++)
                                p += sprintf(p, "%02x", rsn_ie[i]);
                        memset(&iwe, 0, sizeof(iwe));
                        iwe.cmd = IWEVCUSTOM;
                        iwe.u.data.length = strlen(buf);
                        start = iwe_stream_add_point(info, start, stop, &iwe, buf);

                        memset(&iwe, 0, sizeof(iwe));
                        iwe.cmd = IWEVGENIE;
                        iwe.u.data.length = rsn_len;
                        start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
                }
                kfree(buf);
                kfree(wpa_ie);
                kfree(rsn_ie);
        }

        {/* parsing WPS IE */
                uint cnt = 0, total_ielen;
                u8 *wpsie_ptr = NULL;
                uint wps_ielen = 0;

                u8 *ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
                total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;

                while (cnt < total_ielen) {
                        if (rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen > 2)) {
                                wpsie_ptr = &ie_ptr[cnt];
                                iwe.cmd = IWEVGENIE;
                                iwe.u.data.length = (u16)wps_ielen;
                                start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
                        }
                        cnt += ie_ptr[cnt + 1] + 2; /* goto next */
                }
        }

        /* Add quality statistics */
        iwe.cmd = IWEVQUAL;
        iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED | IW_QUAL_NOISE_INVALID;

        if (check_fwstate(pmlmepriv, _FW_LINKED) &&
            is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network)) {
                ss = padapter->recvpriv.signal_strength;
                sq = padapter->recvpriv.signal_qual;
        } else {
                ss = pnetwork->network.PhyInfo.SignalStrength;
                sq = pnetwork->network.PhyInfo.SignalQuality;
        }

        iwe.u.qual.level = (u8)ss;
        iwe.u.qual.qual = (u8)sq;   /*  signal quality */
        iwe.u.qual.noise = 0; /*  noise level */
        start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
exit:
        kfree(custom);
        return start;
}

static int wpa_set_auth_algs(struct net_device *dev, u32 value)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        int ret = 0;

        if ((value & AUTH_ALG_SHARED_KEY) && (value & AUTH_ALG_OPEN_SYSTEM)) {
                DBG_88E("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n", value);
                padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
                padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
                padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
        } else if (value & AUTH_ALG_SHARED_KEY) {
                DBG_88E("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n", value);
                padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;

                padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
                padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
        } else if (value & AUTH_ALG_OPEN_SYSTEM) {
                DBG_88E("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
                if (padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK) {
                        padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
                        padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
                }
        } else if (value & AUTH_ALG_LEAP) {
                DBG_88E("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
        } else {
                DBG_88E("wpa_set_auth_algs, error!\n");
                ret = -EINVAL;
        }
        return ret;
}

static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
{
        int ret = 0;
        u32 wep_key_idx, wep_key_len, wep_total_len;
        struct ndis_802_11_wep   *pwep = NULL;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
        struct security_priv *psecuritypriv = &padapter->securitypriv;
#ifdef CONFIG_88EU_P2P
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;
#endif /* CONFIG_88EU_P2P */

        param->u.crypt.err = 0;
        param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';

        if (param_len < (u32)((u8 *)param->u.crypt.key - (u8 *)param) + param->u.crypt.key_len) {
                ret =  -EINVAL;
                goto exit;
        }

        if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
            param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
            param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
                if (param->u.crypt.idx >= WEP_KEYS) {
                        ret = -EINVAL;
                        goto exit;
                }
        } else {
                ret = -EINVAL;
                goto exit;
        }

        if (strcmp(param->u.crypt.alg, "WEP") == 0) {
                DBG_88E("wpa_set_encryption, crypt.alg = WEP\n");

                padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
                padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
                padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;

                wep_key_idx = param->u.crypt.idx;
                wep_key_len = param->u.crypt.key_len;

                DBG_88E("(1)wep_key_idx =%d\n", wep_key_idx);

                if (wep_key_idx > WEP_KEYS)
                        return -EINVAL;

                if (wep_key_len > 0) {
                        wep_key_len = wep_key_len <= 5 ? 5 : 13;
                        wep_total_len = wep_key_len + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
                        pwep = kmalloc(wep_total_len, GFP_KERNEL);
                        if (!pwep)
                                goto exit;

                        memset(pwep, 0, wep_total_len);
                        pwep->KeyLength = wep_key_len;
                        pwep->Length = wep_total_len;
                        if (wep_key_len == 13) {
                                padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
                                padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
                        }
                } else {
                        ret = -EINVAL;
                        goto exit;
                }
                pwep->KeyIndex = wep_key_idx;
                pwep->KeyIndex |= 0x80000000;
                memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
                if (param->u.crypt.set_tx) {
                        DBG_88E("wep, set_tx = 1\n");
                        if (rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
                                ret = -EOPNOTSUPP;
                } else {
                        DBG_88E("wep, set_tx = 0\n");
                        if (wep_key_idx >= WEP_KEYS) {
                                ret = -EOPNOTSUPP;
                                goto exit;
                        }
                        memcpy(&psecuritypriv->dot11DefKey[wep_key_idx].skey[0], pwep->KeyMaterial, pwep->KeyLength);
                        psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
                        rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0);
                }
                goto exit;
        }

        if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) { /*  802_1x */
                struct sta_info *psta, *pbcmc_sta;
                struct sta_priv *pstapriv = &padapter->stapriv;

                if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE)) { /* sta mode */
                        psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
                        if (!psta) {
                                ;
                        } else {
                                if (strcmp(param->u.crypt.alg, "none") != 0)
                                        psta->ieee8021x_blocked = false;

                                if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled) ||
                                    (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
                                        psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;

                                if (param->u.crypt.set_tx == 1) { /* pairwise key */
                                        memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));

                                        if (strcmp(param->u.crypt.alg, "TKIP") == 0) { /* set mic key */
                                                memcpy(psta->dot11tkiptxmickey.skey, &param->u.crypt.key[16], 8);
                                                memcpy(psta->dot11tkiprxmickey.skey, &param->u.crypt.key[24], 8);
                                                padapter->securitypriv.busetkipkey = false;
                                        }

                                        DBG_88E(" ~~~~set sta key:unicastkey\n");

                                        rtw_setstakey_cmd(padapter, (unsigned char *)psta, true);
                                } else { /* group key */
                                        memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
                                        memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey, &param->u.crypt.key[16], 8);
                                        memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey, &param->u.crypt.key[24], 8);
                                        padapter->securitypriv.binstallGrpkey = true;
                                        DBG_88E(" ~~~~set sta key:groupkey\n");

                                        padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;

                                        rtw_set_key(padapter, &padapter->securitypriv, param->u.crypt.idx, 1);
#ifdef CONFIG_88EU_P2P
                                        if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
                                                rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
#endif /* CONFIG_88EU_P2P */
                                }
                        }
                        pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
                        if (!pbcmc_sta) {
                                ;
                        } else {
                                /* Jeff: don't disable ieee8021x_blocked while clearing key */
                                if (strcmp(param->u.crypt.alg, "none") != 0)
                                        pbcmc_sta->ieee8021x_blocked = false;

                                if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled) ||
                                    (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
                                        pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
                        }
                }
        }

exit:

        kfree(pwep);

        return ret;
}

static int rtw_set_wpa_ie(struct adapter *padapter, char *pie, unsigned short ielen)
{
        u8 *buf = NULL;
        int group_cipher = 0, pairwise_cipher = 0;
        int ret = 0;
#ifdef CONFIG_88EU_P2P
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;
#endif /* CONFIG_88EU_P2P */

        if (ielen > MAX_WPA_IE_LEN || !pie) {
                _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
                if (!pie)
                        return ret;
                else
                        return -EINVAL;
        }

        if (ielen) {
                buf = kzalloc(ielen, GFP_KERNEL);
                if (!buf) {
                        ret =  -ENOMEM;
                        goto exit;
                }

                memcpy(buf, pie, ielen);

                /* dump */
                {
                        int i;
                        DBG_88E("\n wpa_ie(length:%d):\n", ielen);
                        for (i = 0; i < ielen; i += 8)
                                DBG_88E("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x\n", buf[i], buf[i + 1], buf[i + 2], buf[i + 3], buf[i + 4], buf[i + 5], buf[i + 6], buf[i + 7]);
                }

                if (ielen < RSN_HEADER_LEN) {
                        ret  = -1;
                        goto exit;
                }

                if (rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
                        padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
                        padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK;
                        memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
                }

                if (rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
                        padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
                        padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK;
                        memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
                }

                switch (group_cipher) {
                case WPA_CIPHER_NONE:
                        padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
                        break;
                case WPA_CIPHER_WEP40:
                        padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
                        break;
                case WPA_CIPHER_TKIP:
                        padapter->securitypriv.dot118021XGrpPrivacy = _TKIP_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
                        break;
                case WPA_CIPHER_CCMP:
                        padapter->securitypriv.dot118021XGrpPrivacy = _AES_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
                        break;
                case WPA_CIPHER_WEP104:
                        padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
                        break;
                }

                switch (pairwise_cipher) {
                case WPA_CIPHER_NONE:
                        padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
                        break;
                case WPA_CIPHER_WEP40:
                        padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
                        break;
                case WPA_CIPHER_TKIP:
                        padapter->securitypriv.dot11PrivacyAlgrthm = _TKIP_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
                        break;
                case WPA_CIPHER_CCMP:
                        padapter->securitypriv.dot11PrivacyAlgrthm = _AES_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
                        break;
                case WPA_CIPHER_WEP104:
                        padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
                        break;
                }

                _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
                {/* set wps_ie */
                        u16 cnt = 0;
                        u8 eid, wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};

                        while (cnt < ielen) {
                                eid = buf[cnt];
                                if ((eid == _VENDOR_SPECIFIC_IE_) && (!memcmp(&buf[cnt + 2], wps_oui, 4))) {
                                        DBG_88E("SET WPS_IE\n");

                                        padapter->securitypriv.wps_ie_len = ((buf[cnt + 1] + 2) < (MAX_WPA_IE_LEN << 2)) ? (buf[cnt + 1] + 2) : (MAX_WPA_IE_LEN << 2);

                                        memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);

                                        set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
#ifdef CONFIG_88EU_P2P
                                        if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
                                                rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
#endif /* CONFIG_88EU_P2P */
                                        cnt += buf[cnt + 1] + 2;
                                        break;
                                } else {
                                        cnt += buf[cnt + 1] + 2; /* goto next */
                                }
                        }
                }
        }

exit:
        kfree(buf);
        return ret;
}

typedef unsigned char   NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX];

static int rtw_wx_get_name(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        u32 ht_ielen = 0;
        char *p;
        u8 ht_cap = false;
        struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;
        struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
        NDIS_802_11_RATES_EX *prates = NULL;

        if (check_fwstate(pmlmepriv, _FW_LINKED | WIFI_ADHOC_MASTER_STATE)) {
                /* parsing HT_CAP_IE */
                p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength - 12);
                if (p && ht_ielen > 0)
                        ht_cap = true;

                prates = &pcur_bss->SupportedRates;

                if (rtw_is_cckratesonly_included((u8 *)prates)) {
                        if (ht_cap)
                                snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
                        else
                                snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
                } else if (rtw_is_cckrates_included((u8 *)prates)) {
                        if (ht_cap)
                                snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
                        else
                                snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
                } else {
                        if (ht_cap)
                                snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
                        else
                                snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
                }
        } else {
                snprintf(wrqu->name, IFNAMSIZ, "unassociated");
        }



        return 0;
}

static int rtw_wx_get_freq(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;
        struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;

        if (check_fwstate(pmlmepriv, _FW_LINKED)) {
                /* wrqu->freq.m = ieee80211_wlan_frequencies[pcur_bss->Configuration.DSConfig-1] * 100000; */
                wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
                wrqu->freq.e = 1;
                wrqu->freq.i = pcur_bss->Configuration.DSConfig;
        } else {
                wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
                wrqu->freq.e = 1;
                wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
        }

        return 0;
}

static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
                             union iwreq_data *wrqu, char *b)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        enum ndis_802_11_network_infra networkType;
        int ret = 0;



        if (_FAIL == rtw_pwr_wakeup(padapter)) {
                ret = -EPERM;
                goto exit;
        }

        if (!padapter->hw_init_completed) {
                ret = -EPERM;
                goto exit;
        }

        switch (wrqu->mode) {
        case IW_MODE_AUTO:
                networkType = Ndis802_11AutoUnknown;
                DBG_88E("set_mode = IW_MODE_AUTO\n");
                break;
        case IW_MODE_ADHOC:
                networkType = Ndis802_11IBSS;
                DBG_88E("set_mode = IW_MODE_ADHOC\n");
                break;
        case IW_MODE_MASTER:
                networkType = Ndis802_11APMode;
                DBG_88E("set_mode = IW_MODE_MASTER\n");
                break;
        case IW_MODE_INFRA:
                networkType = Ndis802_11Infrastructure;
                DBG_88E("set_mode = IW_MODE_INFRA\n");
                break;
        default:
                ret = -EINVAL;
                goto exit;
        }
        if (!rtw_set_802_11_infrastructure_mode(padapter, networkType)) {
                ret = -EPERM;
                goto exit;
        }
        rtw_setopmode_cmd(padapter, networkType);
exit:

        return ret;
}

static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
                             union iwreq_data *wrqu, char *b)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;

        if (check_fwstate(pmlmepriv, WIFI_STATION_STATE))
                wrqu->mode = IW_MODE_INFRA;
        else if  ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) ||
                  (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)))
                wrqu->mode = IW_MODE_ADHOC;
        else if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
                wrqu->mode = IW_MODE_MASTER;
        else
                wrqu->mode = IW_MODE_AUTO;



        return 0;
}

static int rtw_wx_set_pmkid(struct net_device *dev,
                            struct iw_request_info *a,
                            union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        u8   j, blInserted = false;
        int  ret = false;
        struct security_priv *psecuritypriv = &padapter->securitypriv;
        struct iw_pmksa *pPMK = (struct iw_pmksa *)extra;
        u8     strZeroMacAddress[ETH_ALEN] = {0x00};
        u8     strIssueBssid[ETH_ALEN] = {0x00};

        memcpy(strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
        if (pPMK->cmd == IW_PMKSA_ADD) {
                DBG_88E("[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n");
                if (!memcmp(strIssueBssid, strZeroMacAddress, ETH_ALEN))
                        return ret;
                else
                        ret = true;
                blInserted = false;

                /* overwrite PMKID */
                for (j = 0; j < NUM_PMKID_CACHE; j++) {
                        if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN)) {
                                /*  BSSID is matched, the same AP => rewrite with new PMKID. */
                                DBG_88E("[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n");
                                memcpy(psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
                                psecuritypriv->PMKIDList[j].bUsed = true;
                                psecuritypriv->PMKIDIndex = j + 1;
                                blInserted = true;
                                break;
                        }
                }

                if (!blInserted) {
                        /*  Find a new entry */
                        DBG_88E("[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
                                psecuritypriv->PMKIDIndex);

                        memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
                        memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);

                        psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].bUsed = true;
                        psecuritypriv->PMKIDIndex++;
                        if (psecuritypriv->PMKIDIndex == 16)
                                psecuritypriv->PMKIDIndex = 0;
                }
        } else if (pPMK->cmd == IW_PMKSA_REMOVE) {
                DBG_88E("[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n");
                ret = true;
                for (j = 0; j < NUM_PMKID_CACHE; j++) {
                        if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN)) {
                                /*  BSSID is matched, the same AP => Remove this PMKID information and reset it. */
                                memset(psecuritypriv->PMKIDList[j].Bssid, 0x00, ETH_ALEN);
                                psecuritypriv->PMKIDList[j].bUsed = false;
                                break;
                        }
               }
        } else if (pPMK->cmd == IW_PMKSA_FLUSH) {
                DBG_88E("[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n");
                memset(&psecuritypriv->PMKIDList[0], 0x00, sizeof(struct rt_pmkid_list) * NUM_PMKID_CACHE);
                psecuritypriv->PMKIDIndex = 0;
                ret = true;
        }
        return ret;
}

static int rtw_wx_get_sens(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        wrqu->sens.value = 0;
        wrqu->sens.fixed = 0;   /* no auto select */
        wrqu->sens.disabled = 1;
        return 0;
}

static int rtw_wx_get_range(struct net_device *dev,
                                struct iw_request_info *info,
                                union iwreq_data *wrqu, char *extra)
{
        struct iw_range *range = (struct iw_range *)extra;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;

        u16 val;
        int i;

        wrqu->data.length = sizeof(*range);
        memset(range, 0, sizeof(*range));

        /* Let's try to keep this struct in the same order as in
         * linux/include/wireless.h
         */

        /* TODO: See what values we can set, and remove the ones we can't
         * set, or fill them with some default data.
         */

        /* ~5 Mb/s real (802.11b) */
        range->throughput = 5 * 1000 * 1000;

        /* signal level threshold range */

        /* percent values between 0 and 100. */
        range->max_qual.qual = 100;
        range->max_qual.level = 100;
        range->max_qual.noise = 100;
        range->max_qual.updated = 7; /* Updated all three */

        range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
        /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
        range->avg_qual.level = 178; /* -78 dBm */
        range->avg_qual.noise = 0;
        range->avg_qual.updated = 7; /* Updated all three */

        range->num_bitrates = RATE_COUNT;

        for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++)
                range->bitrate[i] = rtw_rates[i];

        range->min_frag = MIN_FRAG_THRESHOLD;
        range->max_frag = MAX_FRAG_THRESHOLD;

        range->pm_capa = 0;

        range->we_version_compiled = WIRELESS_EXT;
        range->we_version_source = 16;

        for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
                /*  Include only legal frequencies for some countries */
                if (pmlmeext->channel_set[i].ChannelNum != 0) {
                        range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
                        range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
                        range->freq[val].e = 1;
                        val++;
                }

                if (val == IW_MAX_FREQUENCIES)
                        break;
        }

        range->num_channels = val;
        range->num_frequency = val;

/*  The following code will proivde the security capability to network manager. */
/*  If the driver doesn't provide this capability to network manager, */
/*  the WPA/WPA2 routers can't be chosen in the network manager. */

/*
#define IW_SCAN_CAPA_NONE               0x00
#define IW_SCAN_CAPA_ESSID              0x01
#define IW_SCAN_CAPA_BSSID              0x02
#define IW_SCAN_CAPA_CHANNEL            0x04
#define IW_SCAN_CAPA_MODE               0x08
#define IW_SCAN_CAPA_RATE               0x10
#define IW_SCAN_CAPA_TYPE               0x20
#define IW_SCAN_CAPA_TIME               0x40
*/

        range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |

                          IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;

        range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE |
                           IW_SCAN_CAPA_BSSID | IW_SCAN_CAPA_CHANNEL |
                           IW_SCAN_CAPA_MODE | IW_SCAN_CAPA_RATE;


        return 0;
}

/* set bssid flow */
/* s1. rtw_set_802_11_infrastructure_mode() */
/* s2. rtw_set_802_11_authentication_mode() */
/* s3. set_802_11_encryption_mode() */
/* s4. rtw_set_802_11_bssid() */
static int rtw_wx_set_wap(struct net_device *dev,
                         struct iw_request_info *info,
                         union iwreq_data *awrq,
                         char *extra)
{
        uint ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct sockaddr *temp = (struct sockaddr *)awrq;
        struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;
        struct list_head *phead;
        u8 *dst_bssid, *src_bssid;
        struct __queue *queue   = &pmlmepriv->scanned_queue;
        struct  wlan_network    *pnetwork = NULL;
        enum ndis_802_11_auth_mode      authmode;



        if (_FAIL == rtw_pwr_wakeup(padapter)) {
                ret = -1;
                goto exit;
        }

        if (!padapter->bup) {
                ret = -1;
                goto exit;
        }

        if (temp->sa_family != ARPHRD_ETHER) {
                ret = -EINVAL;
                goto exit;
        }

        authmode = padapter->securitypriv.ndisauthtype;
        spin_lock_bh(&queue->lock);
        phead = get_list_head(queue);
        pmlmepriv->pscanned = phead->next;

        while (phead != pmlmepriv->pscanned) {

                pnetwork = container_of(pmlmepriv->pscanned, struct wlan_network, list);

                pmlmepriv->pscanned = pmlmepriv->pscanned->next;

                dst_bssid = pnetwork->network.MacAddress;

                src_bssid = temp->sa_data;

                if ((!memcmp(dst_bssid, src_bssid, ETH_ALEN))) {
                        if (!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode)) {
                                ret = -1;
                                spin_unlock_bh(&queue->lock);
                                goto exit;
                        }

                        break;
                }
        }
        spin_unlock_bh(&queue->lock);

        rtw_set_802_11_authentication_mode(padapter, authmode);
        /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
        if (!rtw_set_802_11_bssid(padapter, temp->sa_data)) {
                ret = -1;
                goto exit;
        }

exit:



        return ret;
}

static int rtw_wx_get_wap(struct net_device *dev,
                            struct iw_request_info *info,
                            union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;
        struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;

        wrqu->ap_addr.sa_family = ARPHRD_ETHER;

        memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);

        if (check_fwstate(pmlmepriv, _FW_LINKED) ||
            check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
            check_fwstate(pmlmepriv, WIFI_AP_STATE))
                memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
        else
                memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);



        return 0;
}

static int rtw_wx_set_mlme(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        u16 reason;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct iw_mlme *mlme = (struct iw_mlme *)extra;

        if (!mlme)
                return -1;

        DBG_88E("%s\n", __func__);

        reason = mlme->reason_code;

        DBG_88E("%s, cmd =%d, reason =%d\n", __func__, mlme->cmd, reason);

        switch (mlme->cmd) {
        case IW_MLME_DEAUTH:
                if (!rtw_set_802_11_disassociate(padapter))
                        ret = -1;
                break;
        case IW_MLME_DISASSOC:
                if (!rtw_set_802_11_disassociate(padapter))
                        ret = -1;
                break;
        default:
                return -EOPNOTSUPP;
        }
        return ret;
}

static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
                             union iwreq_data *wrqu, char *extra)
{
        u8 _status = false;
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
        struct ndis_802_11_ssid ssid[RTW_SSID_SCAN_AMOUNT];
#ifdef CONFIG_88EU_P2P
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;
#endif /* CONFIG_88EU_P2P */

        if (padapter->registrypriv.mp_mode == 1) {
                if (check_fwstate(pmlmepriv, WIFI_MP_STATE)) {
                        ret = -1;
                        goto exit;
                }
        }
        if (_FAIL == rtw_pwr_wakeup(padapter)) {
                ret = -1;
                goto exit;
        }

        if (padapter->bDriverStopped) {
                DBG_88E("bDriverStopped =%d\n", padapter->bDriverStopped);
                ret = -1;
                goto exit;
        }

        if (!padapter->bup) {
                ret = -1;
                goto exit;
        }

        if (!padapter->hw_init_completed) {
                ret = -1;
                goto exit;
        }

        /*  When Busy Traffic, driver do not site survey. So driver return success. */
        /*  wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout. */
        /*  modify by thomas 2011-02-22. */
        if (pmlmepriv->LinkDetectInfo.bBusyTraffic) {
                indicate_wx_scan_complete_event(padapter);
                goto exit;
        }

        if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY | _FW_UNDER_LINKING)) {
                indicate_wx_scan_complete_event(padapter);
                goto exit;
        }

/*      For the DMP WiFi Display project, the driver won't to scan because */
/*      the pmlmepriv->scan_interval is always equal to 3. */
/*      So, the wpa_supplicant won't find out the WPS SoftAP. */

#ifdef CONFIG_88EU_P2P
        if (pwdinfo->p2p_state != P2P_STATE_NONE) {
                rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
                rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
                rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_FULL);
                rtw_free_network_queue(padapter, true);
        }
#endif /* CONFIG_88EU_P2P */

        memset(ssid, 0, sizeof(struct ndis_802_11_ssid) * RTW_SSID_SCAN_AMOUNT);

        if (wrqu->data.length == sizeof(struct iw_scan_req)) {
                struct iw_scan_req *req = (struct iw_scan_req *)extra;

                if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
                        int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);

                        memcpy(ssid[0].Ssid, req->essid, len);
                        ssid[0].SsidLength = len;

                        DBG_88E("IW_SCAN_THIS_ESSID, ssid =%s, len =%d\n", req->essid, req->essid_len);

                        spin_lock_bh(&pmlmepriv->lock);

                        _status = rtw_sitesurvey_cmd(padapter, ssid, 1, NULL, 0);

                        spin_unlock_bh(&pmlmepriv->lock);
                } else if (req->scan_type == IW_SCAN_TYPE_PASSIVE) {
                        DBG_88E("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
                }
        } else {
                if (wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE &&
                    !memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)) {
                        int len = wrqu->data.length - WEXT_CSCAN_HEADER_SIZE;
                        char *pos = extra + WEXT_CSCAN_HEADER_SIZE;
                        char section;
                        char sec_len;
                        int ssid_index = 0;

                        while (len >= 1) {
                                section = *(pos++);
                                len -= 1;

                                switch (section) {
                                case WEXT_CSCAN_SSID_SECTION:
                                        if (len < 1) {
                                                len = 0;
                                                break;
                                        }
                                        sec_len = *(pos++); len -= 1;
                                        if (sec_len > 0 && sec_len <= len) {
                                                ssid[ssid_index].SsidLength = sec_len;
                                                memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
                                                ssid_index++;
                                        }
                                        pos += sec_len;
                                        len -= sec_len;
                                        break;
                                case WEXT_CSCAN_TYPE_SECTION:
                                case WEXT_CSCAN_CHANNEL_SECTION:
                                        pos += 1;
                                        len -= 1;
                                        break;
                                case WEXT_CSCAN_PASV_DWELL_SECTION:
                                case WEXT_CSCAN_HOME_DWELL_SECTION:
                                case WEXT_CSCAN_ACTV_DWELL_SECTION:
                                        pos += 2;
                                        len -= 2;
                                        break;
                                default:
                                        len = 0; /*  stop parsing */
                                }
                        }

                        /* it has still some scan parameter to parse, we only do this now... */
                        _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
                } else {
                        _status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
                }
        }

        if (!_status)
                ret = -1;

exit:

        return ret;
}

static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
                             union iwreq_data *wrqu, char *extra)
{
        struct list_head *plist, *phead;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;
        struct __queue *queue   = &pmlmepriv->scanned_queue;
        struct  wlan_network    *pnetwork = NULL;
        char *ev = extra;
        char *stop = ev + wrqu->data.length;
        u32 ret = 0;
        u32 cnt = 0;
        u32 wait_for_surveydone;
        int wait_status;
#ifdef CONFIG_88EU_P2P
        struct  wifidirect_info *pwdinfo = &padapter->wdinfo;
#endif /* CONFIG_88EU_P2P */

        if (padapter->pwrctrlpriv.brfoffbyhw && padapter->bDriverStopped) {
                ret = -EINVAL;
                goto exit;
        }

#ifdef CONFIG_88EU_P2P
        if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
                /*      P2P is enabled */
                wait_for_surveydone = 200;
        } else {
                /*      P2P is disabled */
                wait_for_surveydone = 100;
        }
#else
        {
                wait_for_surveydone = 100;
        }
#endif /* CONFIG_88EU_P2P */

        wait_status = _FW_UNDER_SURVEY | _FW_UNDER_LINKING;

        while (check_fwstate(pmlmepriv, wait_status)) {
                msleep(30);
                cnt++;
                if (cnt > wait_for_surveydone)
                        break;
        }

        spin_lock_bh(&pmlmepriv->scanned_queue.lock);

        phead = get_list_head(queue);
        plist = phead->next;

        while (phead != plist) {
                if ((stop - ev) < SCAN_ITEM_SIZE) {
                        ret = -E2BIG;
                        break;
                }

                pnetwork = container_of(plist, struct wlan_network, list);

                /* report network only if the current channel set contains the channel to which this network belongs */
                if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0)
                        ev = translate_scan(padapter, a, pnetwork, ev, stop);

                plist = plist->next;
        }

        spin_unlock_bh(&pmlmepriv->scanned_queue.lock);

        wrqu->data.length = ev - extra;
        wrqu->data.flags = 0;

exit:

        return ret;
}

/* set ssid flow */
/* s1. rtw_set_802_11_infrastructure_mode() */
/* s2. set_802_11_authenticaion_mode() */
/* s3. set_802_11_encryption_mode() */
/* s4. rtw_set_802_11_ssid() */
static int rtw_wx_set_essid(struct net_device *dev,
                              struct iw_request_info *a,
                              union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
        struct __queue *queue = &pmlmepriv->scanned_queue;
        struct list_head *phead;
        struct wlan_network *pnetwork = NULL;
        enum ndis_802_11_auth_mode authmode;
        struct ndis_802_11_ssid ndis_ssid;
        u8 *dst_ssid, *src_ssid;

        uint ret = 0, len;

        if (_FAIL == rtw_pwr_wakeup(padapter)) {
                ret = -1;
                goto exit;
        }

        if (!padapter->bup) {
                ret = -1;
                goto exit;
        }

        if (wrqu->essid.length > IW_ESSID_MAX_SIZE) {
                ret = -E2BIG;
                goto exit;
        }

        if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
                ret = -1;
                goto exit;
        }

        authmode = padapter->securitypriv.ndisauthtype;
        DBG_88E("=>%s\n", __func__);
        if (wrqu->essid.flags && wrqu->essid.length) {
                len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;

                if (wrqu->essid.length != 33)
                        DBG_88E("ssid =%s, len =%d\n", extra, wrqu->essid.length);

                memset(&ndis_ssid, 0, sizeof(struct ndis_802_11_ssid));
                ndis_ssid.SsidLength = len;
                memcpy(ndis_ssid.Ssid, extra, len);
                src_ssid = ndis_ssid.Ssid;

                spin_lock_bh(&queue->lock);
                phead = get_list_head(queue);
                pmlmepriv->pscanned = phead->next;

                while (phead != pmlmepriv->pscanned) {
                        pnetwork = container_of(pmlmepriv->pscanned, struct wlan_network, list);

                        pmlmepriv->pscanned = pmlmepriv->pscanned->next;

                        dst_ssid = pnetwork->network.Ssid.Ssid;

                        if ((!memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength)) &&
                            (pnetwork->network.Ssid.SsidLength == ndis_ssid.SsidLength)) {

                                if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
                                        if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
                                                continue;
                                }

                                if (!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode)) {
                                        ret = -1;
                                        spin_unlock_bh(&queue->lock);
                                        goto exit;
                                }

                                break;
                        }
                }
                spin_unlock_bh(&queue->lock);
                rtw_set_802_11_authentication_mode(padapter, authmode);
                if (!rtw_set_802_11_ssid(padapter, &ndis_ssid)) {
                        ret = -1;
                        goto exit;
                }
        }

exit:

        DBG_88E("<=%s, ret %d\n", __func__, ret);



        return ret;
}

static int rtw_wx_get_essid(struct net_device *dev,
                              struct iw_request_info *a,
                              union iwreq_data *wrqu, char *extra)
{
        u32 len, ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;
        struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;

        if ((check_fwstate(pmlmepriv, _FW_LINKED)) ||
            (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE))) {
                len = pcur_bss->Ssid.SsidLength;
                memcpy(extra, pcur_bss->Ssid.Ssid, len);
        } else {
                len = 0;
                *extra = 0;
        }
        wrqu->essid.length = len;
        wrqu->essid.flags = 1;

        return ret;
}

static int rtw_wx_set_rate(struct net_device *dev,
                              struct iw_request_info *a,
                              union iwreq_data *wrqu, char *extra)
{
        int i, ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        u8 datarates[NumRates];
        u32     target_rate = wrqu->bitrate.value;
        u32     fixed = wrqu->bitrate.fixed;
        u32     ratevalue = 0;
        u8 mpdatarate[NumRates] = {11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};

        if (target_rate == -1) {
                ratevalue = 11;
                goto set_rate;
        }
        target_rate = target_rate / 100000;

        switch (target_rate) {
        case 10:
                ratevalue = 0;
                break;
        case 20:
                ratevalue = 1;
                break;
        case 55:
                ratevalue = 2;
                break;
        case 60:
                ratevalue = 3;
                break;
        case 90:
                ratevalue = 4;
                break;
        case 110:
                ratevalue = 5;
                break;
        case 120:
                ratevalue = 6;
                break;
        case 180:
                ratevalue = 7;
                break;
        case 240:
                ratevalue = 8;
                break;
        case 360:
                ratevalue = 9;
                break;
        case 480:
                ratevalue = 10;
                break;
        case 540:
                ratevalue = 11;
                break;
        default:
                ratevalue = 11;
                break;
        }

set_rate:

        for (i = 0; i < NumRates; i++) {
                if (ratevalue == mpdatarate[i]) {
                        datarates[i] = mpdatarate[i];
                        if (fixed == 0)
                                break;
                } else {
                        datarates[i] = 0xff;
                }
        }

        if (rtw_setdatarate_cmd(padapter, datarates) != _SUCCESS)
                ret = -1;

        return ret;
}

static int rtw_wx_get_rate(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        u16 max_rate = 0;

        max_rate = rtw_get_cur_max_rate((struct adapter *)rtw_netdev_priv(dev));

        if (max_rate == 0)
                return -EPERM;

        wrqu->bitrate.fixed = 0;        /* no auto select */
        wrqu->bitrate.value = max_rate * 100000;

        return 0;
}

static int rtw_wx_set_rts(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);



        if (wrqu->rts.disabled) {
                padapter->registrypriv.rts_thresh = 2347;
        } else {
                if (wrqu->rts.value < 0 ||
                    wrqu->rts.value > 2347)
                        return -EINVAL;

                padapter->registrypriv.rts_thresh = wrqu->rts.value;
        }

        DBG_88E("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);



        return 0;
}

static int rtw_wx_get_rts(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);



        DBG_88E("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);

        wrqu->rts.value = padapter->registrypriv.rts_thresh;
        wrqu->rts.fixed = 0;    /* no auto select */
        /* wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD); */



        return 0;
}

static int rtw_wx_set_frag(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);



        if (wrqu->frag.disabled) {
                padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
        } else {
                if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
                    wrqu->frag.value > MAX_FRAG_THRESHOLD)
                        return -EINVAL;

                padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
        }

        DBG_88E("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);



        return 0;
}

static int rtw_wx_get_frag(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);



        DBG_88E("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);

        wrqu->frag.value = padapter->xmitpriv.frag_len;
        wrqu->frag.fixed = 0;   /* no auto select */



        return 0;
}

static int rtw_wx_get_retry(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        wrqu->retry.value = 7;
        wrqu->retry.fixed = 0;  /* no auto select */
        wrqu->retry.disabled = 1;

        return 0;
}

static int rtw_wx_set_enc(struct net_device *dev,
                            struct iw_request_info *info,
                            union iwreq_data *wrqu, char *keybuf)
{
        u32 key, ret = 0;
        u32 keyindex_provided;
        struct ndis_802_11_wep   wep;
        enum ndis_802_11_auth_mode authmode;

        struct iw_point *erq = &wrqu->encoding;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
        DBG_88E("+rtw_wx_set_enc, flags = 0x%x\n", erq->flags);

        memset(&wep, 0, sizeof(struct ndis_802_11_wep));

        key = erq->flags & IW_ENCODE_INDEX;



        if (erq->flags & IW_ENCODE_DISABLED) {
                DBG_88E("EncryptionDisabled\n");
                padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
                padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
                padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
                padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
                authmode = Ndis802_11AuthModeOpen;
                padapter->securitypriv.ndisauthtype = authmode;

                goto exit;
        }

        if (key) {
                if (key > WEP_KEYS)
                        return -EINVAL;
                key--;
                keyindex_provided = 1;
        } else {
                keyindex_provided = 0;
                key = padapter->securitypriv.dot11PrivacyKeyIndex;
                DBG_88E("rtw_wx_set_enc, key =%d\n", key);
        }

        /* set authentication mode */
        if (erq->flags & IW_ENCODE_OPEN) {
                DBG_88E("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
                padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
                padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
                padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
                padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
                authmode = Ndis802_11AuthModeOpen;
                padapter->securitypriv.ndisauthtype = authmode;
        } else if (erq->flags & IW_ENCODE_RESTRICTED) {
                DBG_88E("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
                padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
                padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
                padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
                padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
                authmode = Ndis802_11AuthModeShared;
                padapter->securitypriv.ndisauthtype = authmode;
        } else {
                DBG_88E("rtw_wx_set_enc():erq->flags = 0x%x\n", erq->flags);

                padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
                padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
                padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
                padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
                authmode = Ndis802_11AuthModeOpen;
                padapter->securitypriv.ndisauthtype = authmode;
        }

        wep.KeyIndex = key;
        if (erq->length > 0) {
                wep.KeyLength = erq->length <= 5 ? 5 : 13;

                wep.Length = wep.KeyLength + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
        } else {
                wep.KeyLength = 0;

                if (keyindex_provided == 1) {
                        /*  set key_id only, no given KeyMaterial(erq->length == 0). */
                        padapter->securitypriv.dot11PrivacyKeyIndex = key;

                        DBG_88E("(keyindex_provided == 1), keyid =%d, key_len =%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);

                        switch (padapter->securitypriv.dot11DefKeylen[key]) {
                        case 5:
                                padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
                                break;
                        case 13:
                                padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
                                break;
                        default:
                                padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
                                break;
                        }

                        goto exit;
                }
        }

        wep.KeyIndex |= 0x80000000;

        memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);

        if (!rtw_set_802_11_add_wep(padapter, &wep)) {
                if (rf_on == pwrpriv->rf_pwrstate)
                        ret = -EOPNOTSUPP;
                goto exit;
        }

exit:



        return ret;
}

static int rtw_wx_get_enc(struct net_device *dev,
                            struct iw_request_info *info,
                            union iwreq_data *wrqu, char *keybuf)
{
        uint key, ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct iw_point *erq = &wrqu->encoding;
        struct  mlme_priv       *pmlmepriv = &padapter->mlmepriv;



        if (check_fwstate(pmlmepriv, _FW_LINKED) != true) {
                if (!check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) {
                        erq->length = 0;
                        erq->flags |= IW_ENCODE_DISABLED;
                        return 0;
                }
        }

        key = erq->flags & IW_ENCODE_INDEX;

        if (key) {
                if (key > WEP_KEYS)
                        return -EINVAL;
                key--;
        } else {
                key = padapter->securitypriv.dot11PrivacyKeyIndex;
        }

        erq->flags = key + 1;

        switch (padapter->securitypriv.ndisencryptstatus) {
        case Ndis802_11EncryptionNotSupported:
        case Ndis802_11EncryptionDisabled:
                erq->length = 0;
                erq->flags |= IW_ENCODE_DISABLED;
                break;
        case Ndis802_11Encryption1Enabled:
                erq->length = padapter->securitypriv.dot11DefKeylen[key];
                if (erq->length) {
                        memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);

                        erq->flags |= IW_ENCODE_ENABLED;

                        if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
                                erq->flags |= IW_ENCODE_OPEN;
                        else if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
                                erq->flags |= IW_ENCODE_RESTRICTED;
                } else {
                        erq->length = 0;
                        erq->flags |= IW_ENCODE_DISABLED;
                }
                break;
        case Ndis802_11Encryption2Enabled:
        case Ndis802_11Encryption3Enabled:
                erq->length = 16;
                erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
                break;
        default:
                erq->length = 0;
                erq->flags |= IW_ENCODE_DISABLED;
                break;
        }


        return ret;
}

static int rtw_wx_get_power(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        wrqu->power.value = 0;
        wrqu->power.fixed = 0;  /* no auto select */
        wrqu->power.disabled = 1;

        return 0;
}

static int rtw_wx_set_gen_ie(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        int ret;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);

        ret = rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
        return ret;
}

static int rtw_wx_set_auth(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct iw_param *param = (struct iw_param *)&wrqu->param;
        int ret = 0;

        switch (param->flags & IW_AUTH_INDEX) {
        case IW_AUTH_WPA_VERSION:
                break;
        case IW_AUTH_CIPHER_PAIRWISE:

                break;
        case IW_AUTH_CIPHER_GROUP:

                break;
        case IW_AUTH_KEY_MGMT:
                /*
                 *  ??? does not use these parameters
                 */
                break;
        case IW_AUTH_TKIP_COUNTERMEASURES:
                if (param->value) {
                        /*  wpa_supplicant is enabling the tkip countermeasure. */
                        padapter->securitypriv.btkip_countermeasure = true;
                } else {
                        /*  wpa_supplicant is disabling the tkip countermeasure. */
                        padapter->securitypriv.btkip_countermeasure = false;
                }
                break;
        case IW_AUTH_DROP_UNENCRYPTED:
                /* HACK:
                 *
                 * wpa_supplicant calls set_wpa_enabled when the driver
                 * is loaded and unloaded, regardless of if WPA is being
                 * used.  No other calls are made which can be used to
                 * determine if encryption will be used or not prior to
                 * association being expected.  If encryption is not being
                 * used, drop_unencrypted is set to false, else true -- we
                 * can use this to determine if the CAP_PRIVACY_ON bit should
                 * be set.
                 */

                if (padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled)
                        break;/* it means init value, or using wep, ndisencryptstatus = Ndis802_11Encryption1Enabled, */
                                        /*  then it needn't reset it; */

                if (param->value) {
                        padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
                        padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
                        padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
                        padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
                        padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
                }

                break;
        case IW_AUTH_80211_AUTH_ALG:
                /*
                 *  It's the starting point of a link layer connection using wpa_supplicant
                */
                if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
                        LeaveAllPowerSaveMode(padapter);
                        rtw_disassoc_cmd(padapter, 500, false);
                        DBG_88E("%s...call rtw_indicate_disconnect\n ", __func__);
                        rtw_indicate_disconnect(padapter);
                        rtw_free_assoc_resources(padapter, 1);
                }
                ret = wpa_set_auth_algs(dev, (u32)param->value);
                break;
        case IW_AUTH_WPA_ENABLED:
                break;
        case IW_AUTH_RX_UNENCRYPTED_EAPOL:
                break;
        case IW_AUTH_PRIVACY_INVOKED:
                break;
        default:
                return -EOPNOTSUPP;
        }

        return ret;
}

static int rtw_wx_set_enc_ext(struct net_device *dev,
                             struct iw_request_info *info,
                             union iwreq_data *wrqu, char *extra)
{
        char *alg_name;
        u32 param_len;
        struct ieee_param *param = NULL;
        struct iw_point *pencoding = &wrqu->encoding;
        struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
        int ret = 0;

        param_len = sizeof(struct ieee_param) + pext->key_len;
        param = kzalloc(param_len, GFP_KERNEL);
        if (!param)
                return -ENOMEM;

        param->cmd = IEEE_CMD_SET_ENCRYPTION;
        memset(param->sta_addr, 0xff, ETH_ALEN);

        switch (pext->alg) {
        case IW_ENCODE_ALG_NONE:
                /* todo: remove key */
                /* remove = 1; */
                alg_name = "none";
                break;
        case IW_ENCODE_ALG_WEP:
                alg_name = "WEP";
                break;
        case IW_ENCODE_ALG_TKIP:

                alg_name = "TKIP";
                break;
        case IW_ENCODE_ALG_CCMP:
                alg_name = "CCMP";
                break;
        default:
                return -1;
        }

        strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);

        if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
                param->u.crypt.set_tx = 1;

        /* cliW: WEP does not have group key
         * just not checking GROUP key setting
         */
        if ((pext->alg != IW_ENCODE_ALG_WEP) &&
            (pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY))
                param->u.crypt.set_tx = 0;

        param->u.crypt.idx = (pencoding->flags & 0x00FF) - 1;

        if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID)
                memcpy(param->u.crypt.seq, pext->rx_seq, 8);

        if (pext->key_len) {
                param->u.crypt.key_len = pext->key_len;
                memcpy(param->u.crypt.key, pext + 1, pext->key_len);
        }

        ret =  wpa_set_encryption(dev, param, param_len);

        kfree(param);
        return ret;
}

static int rtw_wx_get_nick(struct net_device *dev,
                           struct iw_request_info *info,
                           union iwreq_data *wrqu, char *extra)
{
        if (extra) {
                wrqu->data.length = 14;
                wrqu->data.flags = 1;
                memcpy(extra, "<WIFI@REALTEK>", 14);
        }

        /* dump debug info here */
        return 0;
}

static int rtw_wx_read32(struct net_device *dev,
                            struct iw_request_info *info,
                            union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter;
        struct iw_point *p;
        u16 len;
        u32 addr;
        u32 data32;
        u32 bytes;
        u8 *ptmp;

        padapter = (struct adapter *)rtw_netdev_priv(dev);
        p = &wrqu->data;
        len = p->length;
        ptmp = kmalloc(len, GFP_KERNEL);
        if (!ptmp)
                return -ENOMEM;

        if (copy_from_user(ptmp, p->pointer, len)) {
                kfree(ptmp);
                return -EFAULT;
        }

        bytes = 0;
        addr = 0;
        sscanf(ptmp, "%d,%x", &bytes, &addr);

        switch (bytes) {
        case 1:
                data32 = rtw_read8(padapter, addr);
                sprintf(extra, "0x%02X", data32);
                break;
        case 2:
                data32 = rtw_read16(padapter, addr);
                sprintf(extra, "0x%04X", data32);
                break;
        case 4:
                data32 = rtw_read32(padapter, addr);
                sprintf(extra, "0x%08X", data32);
                break;
        default:
                DBG_88E(KERN_INFO "%s: usage> read [bytes],[address(hex)]\n", __func__);
                return -EINVAL;
        }
        DBG_88E(KERN_INFO "%s: addr = 0x%08X data =%s\n", __func__, addr, extra);

        kfree(ptmp);
        return 0;
}

static int rtw_wx_write32(struct net_device *dev,
                            struct iw_request_info *info,
                            union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);

        u32 addr;
        u32 data32;
        u32 bytes;

        bytes = 0;
        addr = 0;
        data32 = 0;
        sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);

        switch (bytes) {
        case 1:
                rtw_write8(padapter, addr, (u8)data32);
                DBG_88E(KERN_INFO "%s: addr = 0x%08X data = 0x%02X\n", __func__, addr, (u8)data32);
                break;
        case 2:
                rtw_write16(padapter, addr, (u16)data32);
                DBG_88E(KERN_INFO "%s: addr = 0x%08X data = 0x%04X\n", __func__, addr, (u16)data32);
                break;
        case 4:
                rtw_write32(padapter, addr, data32);
                DBG_88E(KERN_INFO "%s: addr = 0x%08X data = 0x%08X\n", __func__, addr, data32);
                break;
        default:
                DBG_88E(KERN_INFO "%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
                return -EINVAL;
        }

        return 0;
}

static int rtw_wx_read_rf(struct net_device *dev,
                            struct iw_request_info *info,
                            union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        u32 path, addr, data32;

        path = *(u32 *)extra;
        addr = *((u32 *)extra + 1);
        data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
        /*
         * IMPORTANT!!
         * Only when wireless private ioctl is at odd order,
         * "extra" would be copied to user space.
         */
        sprintf(extra, "0x%05x", data32);

        return 0;
}

static int rtw_wx_write_rf(struct net_device *dev,
                            struct iw_request_info *info,
                            union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        u32 path, addr, data32;

        path = *(u32 *)extra;
        addr = *((u32 *)extra + 1);
        data32 = *((u32 *)extra + 2);
        rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);

        return 0;
}

static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
                 union iwreq_data *wrqu, char *b)
{
        return -1;
}

static int dummy(struct net_device *dev, struct iw_request_info *a,
                 union iwreq_data *wrqu, char *b)
{
        return -1;
}

static int rtw_wx_set_channel_plan(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
        u8 channel_plan_req = (u8)(*((int *)wrqu));

        if (_SUCCESS == rtw_set_chplan_cmd(padapter, channel_plan_req, 1))
                DBG_88E("%s set channel_plan = 0x%02X\n", __func__, pmlmepriv->ChannelPlan);
        else
                return -EPERM;

        return 0;
}

static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
                struct iw_request_info *a,
                union iwreq_data *wrqu, char *b)
{
        return 0;
}

static int rtw_wx_get_sensitivity(struct net_device *dev,
                                struct iw_request_info *info,
                                union iwreq_data *wrqu, char *buf)
{
        return 0;
}

static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
                                struct iw_request_info *info,
                                union iwreq_data *wrqu, char *extra)
{
        return 0;
}

/*
 *      For all data larger than 16 octets, we need to use a
 *      pointer to memory allocated in user space.
 */
static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
                                                union iwreq_data *wrqu, char *extra)
{
        return 0;
}

static void rtw_dbg_mode_hdl(struct adapter *padapter, u32 id, u8 *pdata, u32 len)
{
        struct mp_rw_reg *RegRWStruct;
        struct rf_reg_param *prfreg;
        u8 path;
        u8 offset;
        u32 value;

        DBG_88E("%s\n", __func__);

        switch (id) {
        case GEN_MP_IOCTL_SUBCODE(MP_START):
                DBG_88E("871x_driver is only for normal mode, can't enter mp mode\n");
                break;
        case GEN_MP_IOCTL_SUBCODE(READ_REG):
                RegRWStruct = (struct mp_rw_reg *)pdata;
                switch (RegRWStruct->width) {
                case 1:
                        RegRWStruct->value = rtw_read8(padapter, RegRWStruct->offset);
                        break;
                case 2:
                        RegRWStruct->value = rtw_read16(padapter, RegRWStruct->offset);
                        break;
                case 4:
                        RegRWStruct->value = rtw_read32(padapter, RegRWStruct->offset);
                        break;
                default:
                        break;
                }

                break;
        case GEN_MP_IOCTL_SUBCODE(WRITE_REG):
                RegRWStruct = (struct mp_rw_reg *)pdata;
                switch (RegRWStruct->width) {
                case 1:
                        rtw_write8(padapter, RegRWStruct->offset, (u8)RegRWStruct->value);
                        break;
                case 2:
                        rtw_write16(padapter, RegRWStruct->offset, (u16)RegRWStruct->value);
                        break;
                case 4:
                        rtw_write32(padapter, RegRWStruct->offset, (u32)RegRWStruct->value);
                        break;
                default:
                        break;
                }

                break;
        case GEN_MP_IOCTL_SUBCODE(READ_RF_REG):

                prfreg = (struct rf_reg_param *)pdata;

                path = (u8)prfreg->path;
                offset = (u8)prfreg->offset;

                value = rtw_hal_read_rfreg(padapter, path, offset, 0xffffffff);

                prfreg->value = value;

                break;
        case GEN_MP_IOCTL_SUBCODE(WRITE_RF_REG):

                prfreg = (struct rf_reg_param *)pdata;

                path = (u8)prfreg->path;
                offset = (u8)prfreg->offset;
                value = prfreg->value;

                rtw_hal_write_rfreg(padapter, path, offset, 0xffffffff, value);

                break;
        case GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO):
                DBG_88E("==> trigger gpio 0\n");
                rtw_hal_set_hwreg(padapter, HW_VAR_TRIGGER_GPIO_0, NULL);
                break;
        case GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS):
                *pdata = rtw_hal_sreset_get_wifi_status(padapter);
                break;
        default:
                break;
        }
}

static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
                                                union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        u32 BytesRead, BytesWritten, BytesNeeded;
        struct oid_par_priv     oid_par;
        struct mp_ioctl_handler *phandler;
        struct mp_ioctl_param   *poidparam;
        uint status = 0;
        u16 len;
        u8 *pparmbuf = NULL, bset;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct iw_point *p = &wrqu->data;

        if ((!p->length) || (!p->pointer)) {
                ret = -EINVAL;
                goto _rtw_mp_ioctl_hdl_exit;
        }
        pparmbuf = NULL;
        bset = (u8)(p->flags & 0xFFFF);
        len = p->length;
        pparmbuf = kmalloc(len, GFP_KERNEL);
        if (!pparmbuf) {
                ret = -ENOMEM;
                goto _rtw_mp_ioctl_hdl_exit;
        }

        if (copy_from_user(pparmbuf, p->pointer, len)) {
                ret = -EFAULT;
                goto _rtw_mp_ioctl_hdl_exit;
        }

        poidparam = (struct mp_ioctl_param *)pparmbuf;

        if (poidparam->subcode >= MAX_MP_IOCTL_SUBCODE) {
                ret = -EINVAL;
                goto _rtw_mp_ioctl_hdl_exit;
        }

        if (padapter->registrypriv.mp_mode == 1) {
                phandler = mp_ioctl_hdl + poidparam->subcode;

                if ((phandler->paramsize != 0) && (poidparam->len < phandler->paramsize)) {
                        ret = -EINVAL;
                        goto _rtw_mp_ioctl_hdl_exit;
                }

                if (phandler->handler) {
                        oid_par.adapter_context = padapter;
                        oid_par.oid = phandler->oid;
                        oid_par.information_buf = poidparam->data;
                        oid_par.information_buf_len = poidparam->len;
                        oid_par.dbg = 0;

                        BytesWritten = 0;
                        BytesNeeded = 0;

                        if (bset) {
                                oid_par.bytes_rw = &BytesRead;
                                oid_par.bytes_needed = &BytesNeeded;
                                oid_par.type_of_oid = SET_OID;
                        } else {
                                oid_par.bytes_rw = &BytesWritten;
                                oid_par.bytes_needed = &BytesNeeded;
                                oid_par.type_of_oid = QUERY_OID;
                        }

                        status = phandler->handler(&oid_par);
                } else {
                        DBG_88E("rtw_mp_ioctl_hdl(): err!, subcode =%d, oid =%d, handler =%p\n",
                                poidparam->subcode, phandler->oid, phandler->handler);
                        ret = -EFAULT;
                        goto _rtw_mp_ioctl_hdl_exit;
                }
        } else {
                rtw_dbg_mode_hdl(padapter, poidparam->subcode, poidparam->data, poidparam->len);
        }

        if (bset == 0x00) {/* query info */
                if (copy_to_user(p->pointer, pparmbuf, len))
                        ret = -EFAULT;
        }

        if (status) {
                ret = -EFAULT;
                goto _rtw_mp_ioctl_hdl_exit;
        }

_rtw_mp_ioctl_hdl_exit:

        kfree(pparmbuf);
        return ret;
}

static int rtw_get_ap_info(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        u32 cnt = 0, wpa_ielen;
        struct list_head *plist, *phead;
        unsigned char *pbuf;
        u8 bssid[ETH_ALEN];
        char data[32];
        struct wlan_network *pnetwork = NULL;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
        struct __queue *queue = &pmlmepriv->scanned_queue;
        struct iw_point *pdata = &wrqu->data;

        DBG_88E("+rtw_get_aplist_info\n");

        if (padapter->bDriverStopped || !pdata) {
                ret = -EINVAL;
                goto exit;
        }

        while ((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY | _FW_UNDER_LINKING)))) {
                msleep(30);
                cnt++;
                if (cnt > 100)
                        break;
        }
        pdata->flags = 0;
        if (pdata->length >= 32) {
                if (copy_from_user(data, pdata->pointer, 32)) {
                        ret = -EINVAL;
                        goto exit;
                }
        } else {
                ret = -EINVAL;
                goto exit;
        }

        spin_lock_bh(&pmlmepriv->scanned_queue.lock);

        phead = get_list_head(queue);
        plist = phead->next;

        while (phead != plist) {
                pnetwork = container_of(plist, struct wlan_network, list);

                if (!mac_pton(data, bssid)) {
                        DBG_88E("Invalid BSSID '%s'.\n", (u8 *)data);
                        spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
                        return -EINVAL;
                }

                if (!memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN)) {
                        /* BSSID match, then check if supporting wpa/wpa2 */
                        DBG_88E("BSSID:%pM\n", (bssid));

                        pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength - 12);
                        if (pbuf && (wpa_ielen > 0)) {
                                pdata->flags = 1;
                                break;
                        }

                        pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength - 12);
                        if (pbuf && (wpa_ielen > 0)) {
                                pdata->flags = 2;
                                break;
                        }
                }

                plist = plist->next;
        }

        spin_unlock_bh(&pmlmepriv->scanned_queue.lock);

        if (pdata->length >= 34) {
                if (copy_to_user(pdata->pointer + 32, (u8 *)&pdata->flags, 1)) {
                        ret = -EINVAL;
                        goto exit;
                }
        }

exit:

        return ret;
}

static int rtw_set_pid(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = rtw_netdev_priv(dev);
        int *pdata = (int *)wrqu;
        int selector;

        if (padapter->bDriverStopped || !pdata) {
                ret = -EINVAL;
                goto exit;
        }

        selector = *pdata;
        if (selector < 3 && selector >= 0) {
                padapter->pid[selector] = *(pdata + 1);
                ui_pid[selector] = *(pdata + 1);
                DBG_88E("%s set pid[%d] =%d\n", __func__, selector, padapter->pid[selector]);
        } else {
                DBG_88E("%s selector %d error\n", __func__, selector);
        }
exit:
        return ret;
}

static int rtw_wps_start(struct net_device *dev,
                         struct iw_request_info *info,
                         union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct iw_point *pdata = &wrqu->data;
        u32   u32wps_start = 0;

        if (!pdata)
                return -EINVAL;
        ret = copy_from_user((void *)&u32wps_start, pdata->pointer, 4);
        if (ret) {
                ret = -EINVAL;
                goto exit;
        }

        if (padapter->bDriverStopped) {
                ret = -EINVAL;
                goto exit;
        }

        if (u32wps_start == 0)
                u32wps_start = *extra;

        DBG_88E("[%s] wps_start = %d\n", __func__, u32wps_start);

        if (u32wps_start == 1) /*  WPS Start */
                rtw_led_control(padapter, LED_CTL_START_WPS);
        else if (u32wps_start == 2) /*  WPS Stop because of wps success */
                rtw_led_control(padapter, LED_CTL_STOP_WPS);
        else if (u32wps_start == 3) /*  WPS Stop because of wps fail */
                rtw_led_control(padapter, LED_CTL_STOP_WPS_FAIL);

exit:
        return ret;
}

#ifdef CONFIG_88EU_P2P
static int rtw_wext_p2p_enable(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;
        struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
        enum P2P_ROLE init_role = P2P_ROLE_DISABLE;

        if (*extra == '0')
                init_role = P2P_ROLE_DISABLE;
        else if (*extra == '1')
                init_role = P2P_ROLE_DEVICE;
        else if (*extra == '2')
                init_role = P2P_ROLE_CLIENT;
        else if (*extra == '3')
                init_role = P2P_ROLE_GO;

        if (_FAIL == rtw_p2p_enable(padapter, init_role)) {
                ret = -EFAULT;
                goto exit;
        }

        /* set channel/bandwidth */
        if (init_role != P2P_ROLE_DISABLE) {
                u8 channel, ch_offset;
                u16 bwmode;

                if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN)) {
                        /*      Stay at the listen state and wait for discovery. */
                        channel = pwdinfo->listen_channel;
                        pwdinfo->operating_channel = pwdinfo->listen_channel;
                        ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
                        bwmode = HT_CHANNEL_WIDTH_20;
                } else {
                        pwdinfo->operating_channel = pmlmeext->cur_channel;

                        channel = pwdinfo->operating_channel;
                        ch_offset = pmlmeext->cur_ch_offset;
                        bwmode = pmlmeext->cur_bwmode;
                }

                set_channel_bwmode(padapter, channel, ch_offset, bwmode);
        }

exit:
        return ret;
}

static int rtw_p2p_set_go_nego_ssid(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        DBG_88E("[%s] ssid = %s, len = %zu\n", __func__, extra, strlen(extra));
        memcpy(pwdinfo->nego_ssid, extra, strlen(extra));
        pwdinfo->nego_ssidlen = strlen(extra);

        return ret;
}

static int rtw_p2p_set_intent(struct net_device *dev,
                              struct iw_request_info *info,
                              union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;
        u8 intent = pwdinfo->intent;

        switch (wrqu->data.length) {
        case 1:
                intent = extra[0] - '0';
                break;
        case 2:
                intent = str_2char2num(extra[0], extra[1]);
                break;
        }
        if (intent <= 15)
                pwdinfo->intent = intent;
        else
                ret = -1;
        DBG_88E("[%s] intent = %d\n", __func__, intent);
        return ret;
}

static int rtw_p2p_set_listen_ch(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;
        u8 listen_ch = pwdinfo->listen_channel; /*      Listen channel number */

        switch (wrqu->data.length) {
        case 1:
                listen_ch = extra[0] - '0';
                break;
        case 2:
                listen_ch = str_2char2num(extra[0], extra[1]);
                break;
        }

        if ((listen_ch == 1) || (listen_ch == 6) || (listen_ch == 11)) {
                pwdinfo->listen_channel = listen_ch;
                set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
        } else {
                ret = -1;
        }

        DBG_88E("[%s] listen_ch = %d\n", __func__, pwdinfo->listen_channel);

        return ret;
}

static int rtw_p2p_set_op_ch(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
/*      Commented by Albert 20110524 */
/*      This function is used to set the operating channel if the driver will become the group owner */

        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;
        u8 op_ch = pwdinfo->operating_channel;  /*      Operating channel number */

        switch (wrqu->data.length) {
        case 1:
                op_ch = extra[0] - '0';
                break;
        case 2:
                op_ch = str_2char2num(extra[0], extra[1]);
                break;
        }

        if (op_ch > 0)
                pwdinfo->operating_channel = op_ch;
        else
                ret = -1;

        DBG_88E("[%s] op_ch = %d\n", __func__, pwdinfo->operating_channel);

        return ret;
}

static int rtw_p2p_profilefound(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        /*      Comment by Albert 2010/10/13 */
        /*      Input data format: */
        /*      Ex:  0 */
        /*      Ex:  1XX:XX:XX:XX:XX:XXYYSSID */
        /*      0 => Reflush the profile record list. */
        /*      1 => Add the profile list */
        /*      XX:XX:XX:XX:XX:XX => peer's MAC Address (ex: 00:E0:4C:00:00:01) */
        /*      YY => SSID Length */
        /*      SSID => SSID for persistence group */

        DBG_88E("[%s] In value = %s, len = %d\n", __func__, extra, wrqu->data.length - 1);

        /*      The upper application should pass the SSID to driver by using this rtw_p2p_profilefound function. */
        if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
                if (extra[0] == '0') {
                        /*      Remove all the profile information of wifidirect_info structure. */
                        memset(&pwdinfo->profileinfo[0], 0x00, sizeof(struct profile_info) * P2P_MAX_PERSISTENT_GROUP_NUM);
                        pwdinfo->profileindex = 0;
                } else {
                        if (pwdinfo->profileindex >= P2P_MAX_PERSISTENT_GROUP_NUM) {
                                ret = -1;
                        } else {
                                int jj, kk;

                                /*      Add this profile information into pwdinfo->profileinfo */
                                /*      Ex:  1XX:XX:XX:XX:XX:XXYYSSID */
                                for (jj = 0, kk = 1; jj < ETH_ALEN; jj++, kk += 3)
                                        pwdinfo->profileinfo[pwdinfo->profileindex].peermac[jj] = key_2char2num(extra[kk], extra[kk + 1]);

                                pwdinfo->profileinfo[pwdinfo->profileindex].ssidlen = (extra[18] - '0') * 10 + (extra[19] - '0');
                                memcpy(pwdinfo->profileinfo[pwdinfo->profileindex].ssid, &extra[20], pwdinfo->profileinfo[pwdinfo->profileindex].ssidlen);
                                pwdinfo->profileindex++;
                        }
                }
        }

        return ret;
}

static int rtw_p2p_setDN(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        DBG_88E("[%s] %s %d\n", __func__, extra, wrqu->data.length - 1);
        memset(pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN);
        memcpy(pwdinfo->device_name, extra, wrqu->data.length - 1);
        pwdinfo->device_name_len = wrqu->data.length - 1;

        return ret;
}

static int rtw_p2p_get_status(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        if (padapter->bShowGetP2PState)
                DBG_88E("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
                        pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
                        pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);

        /*      Commented by Albert 2010/10/12 */
        /*      Because of the output size limitation, I had removed the "Role" information. */
        /*      About the "Role" information, we will use the new private IOCTL to get the "Role" information. */
        sprintf(extra, "\n\nStatus =%.2d\n", rtw_p2p_state(pwdinfo));
        wrqu->data.length = strlen(extra);

        return ret;
}

/*      Commented by Albert 20110520 */
/*      This function will return the config method description */
/*      This config method description will show us which config method the remote P2P device is intended to use */
/*      by sending the provisioning discovery request frame. */

static int rtw_p2p_get_req_cm(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        sprintf(extra, "\n\nCM =%s\n", pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req);
        wrqu->data.length = strlen(extra);
        return ret;
}

static int rtw_p2p_get_role(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        DBG_88E("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
                        pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
                        pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);

        sprintf(extra, "\n\nRole =%.2d\n", rtw_p2p_role(pwdinfo));
        wrqu->data.length = strlen(extra);
        return ret;
}

static int rtw_p2p_get_peer_ifaddr(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        DBG_88E("[%s] Role = %d, Status = %d, peer addr = %pM\n", __func__,
                rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
                pwdinfo->p2p_peer_interface_addr);
        sprintf(extra, "\nMAC %pM",
                pwdinfo->p2p_peer_interface_addr);
        wrqu->data.length = strlen(extra);
        return ret;
}

static int rtw_p2p_get_peer_devaddr(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)

{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        DBG_88E("[%s] Role = %d, Status = %d, peer addr = %pM\n", __func__,
                rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
                pwdinfo->rx_prov_disc_info.peerDevAddr);
        sprintf(extra, "\n%pM",
                pwdinfo->rx_prov_disc_info.peerDevAddr);
        wrqu->data.length = strlen(extra);
        return ret;
}

static int rtw_p2p_get_peer_devaddr_by_invitation(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)

{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        DBG_88E("[%s] Role = %d, Status = %d, peer addr = %pM\n",
                __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
                pwdinfo->p2p_peer_device_addr);
        sprintf(extra, "\nMAC %pM",
                pwdinfo->p2p_peer_device_addr);
        wrqu->data.length = strlen(extra);
        return ret;
}

static int rtw_p2p_get_groupid(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)

{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        sprintf(extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X %s",
                pwdinfo->groupid_info.go_device_addr[0], pwdinfo->groupid_info.go_device_addr[1],
                pwdinfo->groupid_info.go_device_addr[2], pwdinfo->groupid_info.go_device_addr[3],
                pwdinfo->groupid_info.go_device_addr[4], pwdinfo->groupid_info.go_device_addr[5],
                pwdinfo->groupid_info.ssid);
        wrqu->data.length = strlen(extra);
        return ret;
}

static int rtw_p2p_get_op_ch(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)

{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        struct wifidirect_info *pwdinfo = &padapter->wdinfo;

        DBG_88E("[%s] Op_ch = %02x\n", __func__, pwdinfo->operating_channel);

        sprintf(extra, "\n\nOp_ch =%.2d\n", pwdinfo->operating_channel);
        wrqu->data.length = strlen(extra);
        return ret;
}

static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        u8 peerMAC[ETH_ALEN] = {0x00};
        int jj, kk;
        u8 peerMACStr[17] = {0x00};
        struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
        struct list_head *plist, *phead;
        struct __queue *queue   = &pmlmepriv->scanned_queue;
        struct  wlan_network    *pnetwork = NULL;
        u8 blnMatch = 0;
        u16     attr_content = 0;
        uint attr_contentlen = 0;
        /* 6 is the string "wpsCM =", 17 is the MAC addr, we have to clear it at wrqu->data.pointer */
        u8 attr_content_str[6 + 17] = {0x00};

        /*      Commented by Albert 20110727 */
        /*      The input data is the MAC address which the application wants to know its WPS config method. */
        /*      After knowing its WPS config method, the application can decide the config method for provisioning discovery. */
        /*      Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05 */

        DBG_88E("[%s] data = %s\n", __func__, (char *)extra);
        if (copy_from_user(peerMACStr, wrqu->data.pointer + 6, 17))
                return -EFAULT;

        for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
                peerMAC[jj] = key_2char2num(peerMACStr[kk], peerMACStr[kk + 1]);

        spin_lock_bh(&pmlmepriv->scanned_queue.lock);

        phead = get_list_head(queue);
        plist = phead->next;

        while (phead != plist) {
                pnetwork = container_of(plist, struct wlan_network, list);
                if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
                        u8 *wpsie;
                        uint wpsie_len = 0;
                        __be16 be_tmp;

                        /*  The mac address is matched. */
                        wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len);
                        if (wpsie) {
                                rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, (u8 *)&be_tmp, &attr_contentlen);
                                if (attr_contentlen) {
                                        attr_content = be16_to_cpu(be_tmp);
                                        sprintf(attr_content_str, "\n\nM =%.4d", attr_content);
                                        blnMatch = 1;
                                }
                        }
                        break;
                }
                plist = plist->next;
        }

        spin_unlock_bh(&pmlmepriv->scanned_queue.lock);

        if (!blnMatch)
                sprintf(attr_content_str, "\n\nM = 0000");

        if (copy_to_user(wrqu->data.pointer, attr_content_str, 6 + 17))
                return -EFAULT;
        return ret;
}

static int rtw_p2p_get_go_device_address(struct net_device *dev,
                               struct iw_request_info *info,
                               union iwreq_data *wrqu, char *extra)
{
        int ret = 0;
        struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
        u8 peerMAC[ETH_ALEN] = {0x00};
        int jj, kk;
        u8 peerMACStr[17] = {0x00};
        struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
        struct list_head *plist, *phead;
        struct __queue *queue   = &pmlmepriv->scanned_queue;