rtw_cmd.c revision c0b99bed167c80281dc5aa757776ccddda8250f6
1/******************************************************************************
2 *
3 * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
4 *
5 * This program is free software; you can redistribute it and/or modify it
6 * under the terms of version 2 of the GNU General Public License as
7 * published by the Free Software Foundation.
8 *
9 * This program is distributed in the hope that it will be useful, but WITHOUT
10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12 * more details.
13 *
14 ******************************************************************************/
15#define _RTW_CMD_C_
16
17#include <osdep_service.h>
18#include <drv_types.h>
19#include <recv_osdep.h>
20#include <mlme_osdep.h>
21#include <rtl8723a_cmd.h>
22
23#ifdef CONFIG_8723AU_BT_COEXIST
24#include <rtl8723a_hal.h>
25#endif /*  CONFIG_8723AU_BT_COEXIST */
26
27static struct cmd_hdl wlancmds[] = {
28	GEN_DRV_CMD_HANDLER(0, NULL) /*0*/
29	GEN_DRV_CMD_HANDLER(0, NULL)
30	GEN_DRV_CMD_HANDLER(0, NULL)
31	GEN_DRV_CMD_HANDLER(0, NULL)
32	GEN_DRV_CMD_HANDLER(0, NULL)
33	GEN_DRV_CMD_HANDLER(0, NULL)
34	GEN_MLME_EXT_HANDLER(0, NULL)
35	GEN_MLME_EXT_HANDLER(0, NULL)
36	GEN_MLME_EXT_HANDLER(0, NULL)
37	GEN_MLME_EXT_HANDLER(0, NULL)
38	GEN_MLME_EXT_HANDLER(0, NULL) /*10*/
39	GEN_MLME_EXT_HANDLER(0, NULL)
40	GEN_MLME_EXT_HANDLER(0, NULL)
41	GEN_MLME_EXT_HANDLER(0, NULL)
42	GEN_MLME_EXT_HANDLER(sizeof (struct wlan_bssid_ex), join_cmd_hdl23a) /*14*/
43	GEN_MLME_EXT_HANDLER(sizeof (struct disconnect_parm), disconnect_hdl23a)
44	GEN_MLME_EXT_HANDLER(sizeof (struct wlan_bssid_ex), createbss_hdl23a)
45	GEN_MLME_EXT_HANDLER(sizeof (struct setopmode_parm), setopmode_hdl23a)
46	GEN_MLME_EXT_HANDLER(sizeof (struct sitesurvey_parm), sitesurvey_cmd_hdl23a) /*18*/
47	GEN_MLME_EXT_HANDLER(sizeof (struct setauth_parm), setauth_hdl23a)
48	GEN_MLME_EXT_HANDLER(sizeof (struct setkey_parm), setkey_hdl23a) /*20*/
49	GEN_MLME_EXT_HANDLER(sizeof (struct set_stakey_parm), set_stakey_hdl23a)
50	GEN_MLME_EXT_HANDLER(sizeof (struct set_assocsta_parm), NULL)
51	GEN_MLME_EXT_HANDLER(sizeof (struct del_assocsta_parm), NULL)
52	GEN_MLME_EXT_HANDLER(sizeof (struct setstapwrstate_parm), NULL)
53	GEN_MLME_EXT_HANDLER(sizeof (struct setbasicrate_parm), NULL)
54	GEN_MLME_EXT_HANDLER(sizeof (struct getbasicrate_parm), NULL)
55	GEN_MLME_EXT_HANDLER(sizeof (struct setdatarate_parm), NULL)
56	GEN_MLME_EXT_HANDLER(sizeof (struct getdatarate_parm), NULL)
57	GEN_MLME_EXT_HANDLER(sizeof (struct setphyinfo_parm), NULL)
58	GEN_MLME_EXT_HANDLER(sizeof (struct getphyinfo_parm), NULL)  /*30*/
59	GEN_MLME_EXT_HANDLER(sizeof (struct setphy_parm), NULL)
60	GEN_MLME_EXT_HANDLER(sizeof (struct getphy_parm), NULL)
61	GEN_MLME_EXT_HANDLER(0, NULL)
62	GEN_MLME_EXT_HANDLER(0, NULL)
63	GEN_MLME_EXT_HANDLER(0, NULL)
64	GEN_MLME_EXT_HANDLER(0, NULL)
65	GEN_MLME_EXT_HANDLER(0, NULL)
66	GEN_MLME_EXT_HANDLER(0, NULL)
67	GEN_MLME_EXT_HANDLER(0, NULL)
68	GEN_MLME_EXT_HANDLER(0, NULL)	/*40*/
69	GEN_MLME_EXT_HANDLER(0, NULL)
70	GEN_MLME_EXT_HANDLER(0, NULL)
71	GEN_MLME_EXT_HANDLER(0, NULL)
72	GEN_MLME_EXT_HANDLER(0, NULL)
73	GEN_MLME_EXT_HANDLER(sizeof(struct addBaReq_parm), add_ba_hdl23a)
74	GEN_MLME_EXT_HANDLER(sizeof(struct set_ch_parm), set_ch_hdl23a) /* 46 */
75	GEN_MLME_EXT_HANDLER(0, NULL)
76	GEN_MLME_EXT_HANDLER(0, NULL)
77	GEN_MLME_EXT_HANDLER(0, NULL)
78	GEN_MLME_EXT_HANDLER(0, NULL) /*50*/
79	GEN_MLME_EXT_HANDLER(0, NULL)
80	GEN_MLME_EXT_HANDLER(0, NULL)
81	GEN_MLME_EXT_HANDLER(0, NULL)
82	GEN_MLME_EXT_HANDLER(0, NULL)
83	GEN_MLME_EXT_HANDLER(sizeof(struct Tx_Beacon_param), tx_beacon_hdl23a) /*55*/
84
85	GEN_MLME_EXT_HANDLER(0, mlme_evt_hdl23a) /*56*/
86	GEN_MLME_EXT_HANDLER(0, rtw_drvextra_cmd_hdl23a) /*57*/
87
88	GEN_MLME_EXT_HANDLER(0, h2c_msg_hdl23a) /*58*/
89	GEN_MLME_EXT_HANDLER(sizeof(struct SetChannelPlan_param), set_chplan_hdl23a) /*59*/
90	GEN_MLME_EXT_HANDLER(sizeof(struct LedBlink_param), led_blink_hdl23a) /*60*/
91
92	GEN_MLME_EXT_HANDLER(sizeof(struct SetChannelSwitch_param), set_csa_hdl23a) /*61*/
93	GEN_MLME_EXT_HANDLER(sizeof(struct TDLSoption_param), tdls_hdl23a) /*62*/
94};
95
96struct _cmd_callback	rtw_cmd_callback[] = {
97	{GEN_CMD_CODE(_Read_MACREG), NULL}, /*0*/
98	{GEN_CMD_CODE(_Write_MACREG), NULL},
99	{GEN_CMD_CODE(_Read_BBREG), &rtw_getbbrfreg_cmdrsp_callback23a},
100	{GEN_CMD_CODE(_Write_BBREG), NULL},
101	{GEN_CMD_CODE(_Read_RFREG), &rtw_getbbrfreg_cmdrsp_callback23a},
102	{GEN_CMD_CODE(_Write_RFREG), NULL}, /*5*/
103	{GEN_CMD_CODE(_Read_EEPROM), NULL},
104	{GEN_CMD_CODE(_Write_EEPROM), NULL},
105	{GEN_CMD_CODE(_Read_EFUSE), NULL},
106	{GEN_CMD_CODE(_Write_EFUSE), NULL},
107
108	{GEN_CMD_CODE(_Read_CAM),	NULL},	/*10*/
109	{GEN_CMD_CODE(_Write_CAM),	 NULL},
110	{GEN_CMD_CODE(_setBCNITV), NULL},
111	{GEN_CMD_CODE(_setMBIDCFG), NULL},
112	{GEN_CMD_CODE(_JoinBss), &rtw_joinbss_cmd23a_callback},  /*14*/
113	{GEN_CMD_CODE(_DisConnect), &rtw_disassoc_cmd23a_callback}, /*15*/
114	{GEN_CMD_CODE(_CreateBss), &rtw_createbss_cmd23a_callback},
115	{GEN_CMD_CODE(_SetOpMode), NULL},
116	{GEN_CMD_CODE(_SiteSurvey), &rtw_survey_cmd_callback23a}, /*18*/
117	{GEN_CMD_CODE(_SetAuth), NULL},
118
119	{GEN_CMD_CODE(_SetKey), NULL},	/*20*/
120	{GEN_CMD_CODE(_SetStaKey), &rtw_setstaKey_cmdrsp_callback23a},
121	{GEN_CMD_CODE(_SetAssocSta), &rtw_setassocsta_cmdrsp_callback23a},
122	{GEN_CMD_CODE(_DelAssocSta), NULL},
123	{GEN_CMD_CODE(_SetStaPwrState), NULL},
124	{GEN_CMD_CODE(_SetBasicRate), NULL}, /*25*/
125	{GEN_CMD_CODE(_GetBasicRate), NULL},
126	{GEN_CMD_CODE(_SetDataRate), NULL},
127	{GEN_CMD_CODE(_GetDataRate), NULL},
128	{GEN_CMD_CODE(_SetPhyInfo), NULL},
129
130	{GEN_CMD_CODE(_GetPhyInfo), NULL}, /*30*/
131	{GEN_CMD_CODE(_SetPhy), NULL},
132	{GEN_CMD_CODE(_GetPhy), NULL},
133	{GEN_CMD_CODE(_readRssi), NULL},
134	{GEN_CMD_CODE(_readGain), NULL},
135	{GEN_CMD_CODE(_SetAtim), NULL}, /*35*/
136	{GEN_CMD_CODE(_SetPwrMode), NULL},
137	{GEN_CMD_CODE(_JoinbssRpt), NULL},
138	{GEN_CMD_CODE(_SetRaTable), NULL},
139	{GEN_CMD_CODE(_GetRaTable), NULL},
140
141	{GEN_CMD_CODE(_GetCCXReport), NULL}, /*40*/
142	{GEN_CMD_CODE(_GetDTMReport),	NULL},
143	{GEN_CMD_CODE(_GetTXRateStatistics), NULL},
144	{GEN_CMD_CODE(_SetUsbSuspend), NULL},
145	{GEN_CMD_CODE(_SetH2cLbk), NULL},
146	{GEN_CMD_CODE(_AddBAReq), NULL}, /*45*/
147	{GEN_CMD_CODE(_SetChannel), NULL},		/*46*/
148	{GEN_CMD_CODE(_SetTxPower), NULL},
149	{GEN_CMD_CODE(_SwitchAntenna), NULL},
150	{GEN_CMD_CODE(_SetCrystalCap), NULL},
151	{GEN_CMD_CODE(_SetSingleCarrierTx), NULL},	/*50*/
152
153	{GEN_CMD_CODE(_SetSingleToneTx), NULL}, /*51*/
154	{GEN_CMD_CODE(_SetCarrierSuppressionTx), NULL},
155	{GEN_CMD_CODE(_SetContinuousTx), NULL},
156	{GEN_CMD_CODE(_SwitchBandwidth), NULL},		/*54*/
157	{GEN_CMD_CODE(_TX_Beacon), NULL},/*55*/
158
159	{GEN_CMD_CODE(_Set_MLME_EVT), NULL},/*56*/
160	{GEN_CMD_CODE(_Set_Drv_Extra), NULL},/*57*/
161	{GEN_CMD_CODE(_Set_H2C_MSG), NULL},/*58*/
162	{GEN_CMD_CODE(_SetChannelPlan), NULL},/*59*/
163	{GEN_CMD_CODE(_LedBlink), NULL},/*60*/
164
165	{GEN_CMD_CODE(_SetChannelSwitch), NULL},/*61*/
166	{GEN_CMD_CODE(_TDLS), NULL},/*62*/
167};
168
169/*
170Caller and the rtw_cmd_thread23a can protect cmd_q by spin_lock.
171No irqsave is necessary.
172*/
173
174int rtw_init_cmd_priv23a(struct cmd_priv *pcmdpriv)
175{
176	int res = _SUCCESS;
177
178	pcmdpriv->cmd_allocated_buf = kzalloc(MAX_CMDSZ + CMDBUFF_ALIGN_SZ,
179					      GFP_KERNEL);
180
181	if (pcmdpriv->cmd_allocated_buf == NULL) {
182		res = _FAIL;
183		goto exit;
184	}
185
186	pcmdpriv->cmd_buf = pcmdpriv->cmd_allocated_buf + CMDBUFF_ALIGN_SZ -
187			    ((unsigned long)(pcmdpriv->cmd_allocated_buf) &
188			    (CMDBUFF_ALIGN_SZ - 1));
189
190	pcmdpriv->rsp_allocated_buf = kzalloc(MAX_RSPSZ + 4, GFP_KERNEL);
191
192	if (!pcmdpriv->rsp_allocated_buf) {
193		res = _FAIL;
194		goto exit;
195	}
196
197	pcmdpriv->rsp_buf = pcmdpriv->rsp_allocated_buf + 4 -
198			    ((unsigned long)(pcmdpriv->rsp_allocated_buf) & 3);
199
200	pcmdpriv->cmd_issued_cnt = 0;
201	pcmdpriv->cmd_done_cnt = 0;
202	pcmdpriv->rsp_cnt = 0;
203
204
205	pcmdpriv->wq = alloc_workqueue("rtl8723au", 0, 1);
206	if (!pcmdpriv->wq)
207		res = _FAIL;
208
209exit:
210
211	return res;
212}
213
214/* forward definition */
215
216static void c2h_wk_callback(struct work_struct *work);
217
218u32 rtw_init_evt_priv23a(struct evt_priv *pevtpriv)
219{
220	/* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
221	atomic_set(&pevtpriv->event_seq, 0);
222	pevtpriv->evt_done_cnt = 0;
223
224	INIT_WORK(&pevtpriv->c2h_wk, c2h_wk_callback);
225	pevtpriv->c2h_wk_alive = false;
226	pevtpriv->c2h_queue = rtw_cbuf_alloc23a(C2H_QUEUE_MAX_LEN + 1);
227
228	return _SUCCESS;
229}
230
231void rtw_free_evt_priv23a(struct evt_priv *pevtpriv)
232{
233	cancel_work_sync(&pevtpriv->c2h_wk);
234	while (pevtpriv->c2h_wk_alive)
235		msleep(10);
236
237	while (!rtw_cbuf_empty23a(pevtpriv->c2h_queue)) {
238		void *c2h;
239		if ((c2h = rtw_cbuf_pop23a(pevtpriv->c2h_queue)) != NULL &&
240		    c2h != (void *)pevtpriv) {
241			kfree(c2h);
242		}
243	}
244}
245
246void rtw_free_cmd_priv23a(struct cmd_priv *pcmdpriv)
247{
248	RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_,
249		 ("rtw_free_cmd_priv23a\n"));
250
251	if (pcmdpriv) {
252		kfree(pcmdpriv->cmd_allocated_buf);
253		kfree(pcmdpriv->rsp_allocated_buf);
254	}
255}
256
257static int rtw_cmd_filter(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj)
258{
259	struct drvextra_cmd_parm *pdrvextra_cmd_parm;
260	/* set to true to allow enqueuing cmd when hw_init_completed is false */
261	u8 bAllow = false;
262
263	/* To decide allow or not */
264	if (pcmdpriv->padapter->pwrctrlpriv.bHWPwrPindetect &&
265	    !pcmdpriv->padapter->registrypriv.usbss_enable) {
266		if (cmd_obj->cmdcode == GEN_CMD_CODE(_Set_Drv_Extra)) {
267			pdrvextra_cmd_parm =
268				(struct drvextra_cmd_parm *)cmd_obj->parmbuf;
269			if (pdrvextra_cmd_parm->ec_id ==
270			    POWER_SAVING_CTRL_WK_CID)
271				bAllow = true;
272		}
273	}
274
275	if (cmd_obj->cmdcode == GEN_CMD_CODE(_SetChannelPlan))
276		bAllow = true;
277
278	if (pcmdpriv->padapter->hw_init_completed == false && bAllow == false)
279		return _FAIL;
280	return _SUCCESS;
281}
282
283static void rtw_cmd_work(struct work_struct *work);
284
285int rtw_enqueue_cmd23a(struct cmd_priv *pcmdpriv, struct cmd_obj *cmd_obj)
286{
287	int res = _FAIL;
288
289	if (!cmd_obj)
290		goto exit;
291
292	cmd_obj->padapter = pcmdpriv->padapter;
293
294	res = rtw_cmd_filter(pcmdpriv, cmd_obj);
295	if (res == _FAIL) {
296		rtw_free_cmd_obj23a(cmd_obj);
297		goto exit;
298	}
299
300	INIT_WORK(&cmd_obj->work, rtw_cmd_work);
301
302	res = queue_work(pcmdpriv->wq, &cmd_obj->work);
303
304	if (!res) {
305		printk(KERN_ERR "%s: Call to queue_work() failed\n", __func__);
306		res = _FAIL;
307	} else
308		res = _SUCCESS;
309exit:
310
311	return res;
312}
313
314void rtw_cmd_clr_isr23a(struct	cmd_priv *pcmdpriv)
315{
316	pcmdpriv->cmd_done_cnt++;
317}
318
319void rtw_free_cmd_obj23a(struct cmd_obj *pcmd)
320{
321
322	if (pcmd->cmdcode != _JoinBss_CMD_ &&
323	    pcmd->cmdcode != _CreateBss_CMD_) {
324		/* free parmbuf in cmd_obj */
325		kfree(pcmd->parmbuf);
326	}
327
328	if (pcmd->rsp) {
329		if (pcmd->rspsz != 0) {
330			/* free rsp in cmd_obj */
331			kfree(pcmd->rsp);
332		}
333	}
334
335	kfree(pcmd);
336}
337
338static void rtw_cmd_work(struct work_struct *work)
339{
340	u8 (*cmd_hdl)(struct rtw_adapter *padapter, const u8 *pbuf);
341	void (*pcmd_callback)(struct rtw_adapter *dev, struct cmd_obj *pcmd);
342	struct cmd_priv *pcmdpriv;
343	struct cmd_obj *pcmd = container_of(work, struct cmd_obj, work);
344	u8 *pcmdbuf;
345
346	pcmdpriv = &pcmd->padapter->cmdpriv;
347	pcmdbuf = pcmdpriv->cmd_buf;
348
349	if (rtw_cmd_filter(pcmdpriv, pcmd) == _FAIL) {
350		pcmd->res = H2C_DROPPED;
351		goto post_process;
352	}
353
354	pcmdpriv->cmd_issued_cnt++;
355
356	pcmd->cmdsz = ALIGN(pcmd->cmdsz, 4);
357
358	memcpy(pcmdbuf, pcmd->parmbuf, pcmd->cmdsz);
359
360	if (pcmd->cmdcode < (sizeof(wlancmds)/sizeof(struct cmd_hdl))) {
361		cmd_hdl = wlancmds[pcmd->cmdcode].h2cfuns;
362
363		if (cmd_hdl)
364			pcmd->res = cmd_hdl(pcmd->padapter, pcmdbuf);
365		else
366			pcmd->res = H2C_DROPPED;
367	} else
368		pcmd->res = H2C_PARAMETERS_ERROR;
369
370post_process:
371	/* call callback function for post-processed */
372	if (pcmd->cmdcode < (sizeof(rtw_cmd_callback) /
373			     sizeof(struct _cmd_callback))) {
374		pcmd_callback =	rtw_cmd_callback[pcmd->cmdcode].callback;
375		if (!pcmd_callback) {
376			RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_,
377				 ("mlme_cmd_hdl(): pcmd_callback = 0x%p, "
378				  "cmdcode = 0x%x\n",
379				  pcmd_callback, pcmd->cmdcode));
380			rtw_free_cmd_obj23a(pcmd);
381		} else {
382			/* todo: !!! fill rsp_buf to pcmd->rsp
383			   if (pcmd->rsp!= NULL) */
384			/* need conider that free cmd_obj in
385			   rtw_cmd_callback */
386			pcmd_callback(pcmd->padapter, pcmd);
387		}
388	} else {
389		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
390			 ("%s: cmdcode = 0x%x callback not defined!\n",
391			  __func__, pcmd->cmdcode));
392		rtw_free_cmd_obj23a(pcmd);
393	}
394}
395
396
397u8 rtw_sitesurvey_cmd23a(struct rtw_adapter *padapter,
398			 struct cfg80211_ssid *ssid, int ssid_num,
399			 struct rtw_ieee80211_channel *ch, int ch_num)
400{
401	u8 res = _FAIL;
402	struct cmd_obj *ph2c;
403	struct sitesurvey_parm *psurveyPara;
404	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
405	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
406
407	if (check_fwstate(pmlmepriv, _FW_LINKED) == true)
408		rtw_lps_ctrl_wk_cmd23a(padapter, LPS_CTRL_SCAN, 1);
409
410	ph2c = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
411	if (!ph2c)
412		return _FAIL;
413
414	psurveyPara = kzalloc(sizeof(struct sitesurvey_parm), GFP_ATOMIC);
415	if (!psurveyPara) {
416		kfree(ph2c);
417		return _FAIL;
418	}
419
420	rtw_free_network_queue23a(padapter, false);
421
422	RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_,
423		 ("%s: flush network queue\n", __func__));
424
425	init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara,
426				   GEN_CMD_CODE(_SiteSurvey));
427
428	/* psurveyPara->bsslimit = 48; */
429	psurveyPara->scan_mode = pmlmepriv->scan_mode;
430
431	/* prepare ssid list */
432	if (ssid) {
433		int i;
434		for (i = 0; i < ssid_num && i < RTW_SSID_SCAN_AMOUNT; i++) {
435			if (ssid[i].ssid_len) {
436				memcpy(&psurveyPara->ssid[i], &ssid[i],
437				       sizeof(struct cfg80211_ssid));
438				psurveyPara->ssid_num++;
439				if (0)
440				DBG_8723A(FUNC_ADPT_FMT" ssid:(%s, %d)\n",
441					  FUNC_ADPT_ARG(padapter),
442					  psurveyPara->ssid[i].ssid,
443					  psurveyPara->ssid[i].ssid_len);
444			}
445		}
446	}
447
448	/* prepare channel list */
449	if (ch) {
450		int i;
451		for (i = 0; i < ch_num && i < RTW_CHANNEL_SCAN_AMOUNT; i++) {
452			if (ch[i].hw_value &&
453			    !(ch[i].flags & IEEE80211_CHAN_DISABLED)) {
454				memcpy(&psurveyPara->ch[i], &ch[i],
455				       sizeof(struct rtw_ieee80211_channel));
456				psurveyPara->ch_num++;
457				if (0)
458				DBG_8723A(FUNC_ADPT_FMT" ch:%u\n",
459					  FUNC_ADPT_ARG(padapter),
460					  psurveyPara->ch[i].hw_value);
461			}
462		}
463	}
464
465	set_fwstate(pmlmepriv, _FW_UNDER_SURVEY);
466
467	res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
468
469	if (res == _SUCCESS) {
470		mod_timer(&pmlmepriv->scan_to_timer, jiffies +
471			  msecs_to_jiffies(SCANNING_TIMEOUT));
472
473		rtw_led_control(padapter, LED_CTL_SITE_SURVEY);
474
475		pmlmepriv->scan_interval = SCAN_INTERVAL;/*  30*2 sec = 60sec */
476	} else
477		_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
478
479	return res;
480}
481
482void rtw_getbbrfreg_cmdrsp_callback23a(struct rtw_adapter *padapter,
483				       struct cmd_obj *pcmd)
484{
485	kfree(pcmd->parmbuf);
486	kfree(pcmd);
487}
488
489u8 rtw_createbss_cmd23a(struct rtw_adapter  *padapter)
490{
491	struct cmd_obj *pcmd;
492	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
493	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
494	struct wlan_bssid_ex *pdev_network;
495	u8 res = _SUCCESS;
496
497	pdev_network = &padapter->registrypriv.dev_network;
498
499	rtw_led_control(padapter, LED_CTL_START_TO_LINK);
500
501	if (pmlmepriv->assoc_ssid.ssid_len == 0) {
502		RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_,
503			 (" createbss for Any SSid:%s\n",
504			  pmlmepriv->assoc_ssid.ssid));
505	} else {
506		RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_,
507			 (" createbss for SSid:%s\n",
508			  pmlmepriv->assoc_ssid.ssid));
509	}
510
511	pcmd = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
512	if (!pcmd) {
513		res = _FAIL;
514		goto exit;
515	}
516
517	pcmd->cmdcode = _CreateBss_CMD_;
518	pcmd->parmbuf = (unsigned char *)pdev_network;
519	pcmd->cmdsz = get_wlan_bssid_ex_sz(pdev_network);
520	pcmd->rsp = NULL;
521	pcmd->rspsz = 0;
522
523	pdev_network->Length = pcmd->cmdsz;
524
525	res = rtw_enqueue_cmd23a(pcmdpriv, pcmd);
526
527exit:
528
529	return res;
530}
531
532u8 rtw_joinbss_cmd23a(struct rtw_adapter *padapter,
533		      struct wlan_network *pnetwork)
534{
535	u8 *auth, res = _SUCCESS;
536	struct wlan_bssid_ex *psecnetwork;
537	struct cmd_obj *pcmd;
538	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
539	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
540	struct qos_priv *pqospriv = &pmlmepriv->qospriv;
541	struct security_priv *psecuritypriv = &padapter->securitypriv;
542	struct registry_priv *pregistrypriv = &padapter->registrypriv;
543	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
544	enum ndis_802_11_net_infra ndis_network_mode;
545	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
546	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
547
548	ndis_network_mode = pnetwork->network.InfrastructureMode;
549
550	rtw_led_control(padapter, LED_CTL_START_TO_LINK);
551
552	if (pmlmepriv->assoc_ssid.ssid_len == 0) {
553		RT_TRACE(_module_rtl871x_cmd_c_, _drv_info_,
554			 ("+Join cmd: Any SSid\n"));
555	} else {
556		RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_,
557			 ("+Join cmd: SSid =[%s]\n",
558			  pmlmepriv->assoc_ssid.ssid));
559	}
560
561	pcmd = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
562	if (!pcmd) {
563		res = _FAIL;
564		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
565			 ("rtw_joinbss_cmd23a: memory allocate for cmd_obj "
566			  "fail!!!\n"));
567		goto exit;
568	}
569
570	/* for hidden ap to set fw_state here */
571	if (!check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE)) {
572		switch (ndis_network_mode) {
573		case Ndis802_11IBSS:
574			set_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
575			break;
576		case Ndis802_11Infrastructure:
577			set_fwstate(pmlmepriv, WIFI_STATION_STATE);
578			break;
579		case Ndis802_11APMode:
580		case Ndis802_11AutoUnknown:
581		case Ndis802_11InfrastructureMax:
582			break;
583		}
584	}
585
586	psecnetwork = &psecuritypriv->sec_bss;
587	if (!psecnetwork) {
588		if (pcmd)
589			kfree(pcmd);
590
591		res = _FAIL;
592
593		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
594			 ("rtw_joinbss_cmd23a :psecnetwork == NULL!!!\n"));
595
596		goto exit;
597	}
598
599	memset(psecnetwork, 0, sizeof(struct wlan_bssid_ex));
600
601	memcpy(psecnetwork, &pnetwork->network,
602	       get_wlan_bssid_ex_sz(&pnetwork->network));
603
604	auth = &psecuritypriv->authenticator_ie[0];
605	psecuritypriv->authenticator_ie[0] =
606		(unsigned char)psecnetwork->IELength;
607
608	if ((psecnetwork->IELength-12) < (256-1)) {
609		memcpy(&psecuritypriv->authenticator_ie[1],
610		       &psecnetwork->IEs[12], psecnetwork->IELength - 12);
611	} else {
612		memcpy(&psecuritypriv->authenticator_ie[1],
613		       &psecnetwork->IEs[12], 256 - 1);
614	}
615
616	psecnetwork->IELength = 0;
617	/*  Added by Albert 2009/02/18 */
618	/*  If the the driver wants to use the bssid to create the
619	 *  connection. If not,  we have to copy the connecting AP's
620	 *  MAC address to it so that the driver just has the bssid
621	 *  information for PMKIDList searching. */
622
623	if (pmlmepriv->assoc_by_bssid == false)
624		ether_addr_copy(&pmlmepriv->assoc_bssid[0],
625				&pnetwork->network.MacAddress[0]);
626
627	psecnetwork->IELength =
628		rtw_restruct_sec_ie23a(padapter, &pnetwork->network.IEs[0],
629				       &psecnetwork->IEs[0],
630				       pnetwork->network.IELength);
631
632	pqospriv->qos_option = 0;
633
634	if (pregistrypriv->wmm_enable) {
635		u32 tmp_len;
636
637		tmp_len = rtw_restruct_wmm_ie23a(padapter,
638						 &pnetwork->network.IEs[0],
639						 &psecnetwork->IEs[0],
640						 pnetwork->network.IELength,
641						 psecnetwork->IELength);
642
643		if (psecnetwork->IELength != tmp_len) {
644			psecnetwork->IELength = tmp_len;
645			/* There is WMM IE in this corresp. beacon */
646			pqospriv->qos_option = 1;
647		} else {
648			/* There is no WMM IE in this corresp. beacon */
649			pqospriv->qos_option = 0;
650		}
651	}
652
653	phtpriv->ht_option = false;
654	if (pregistrypriv->ht_enable) {
655		/*	Added by Albert 2010/06/23 */
656		/*	For the WEP mode, we will use the bg mode to do
657			the connection to avoid some IOT issue. */
658		/*	Especially for Realtek 8192u SoftAP. */
659		if ((padapter->securitypriv.dot11PrivacyAlgrthm != _WEP40_) &&
660		    (padapter->securitypriv.dot11PrivacyAlgrthm != _WEP104_) &&
661		    (padapter->securitypriv.dot11PrivacyAlgrthm != _TKIP_)) {
662			/* rtw_restructure_ht_ie23a */
663			rtw_restructure_ht_ie23a(padapter,
664						 &pnetwork->network.IEs[0],
665						 &psecnetwork->IEs[0],
666						 pnetwork->network.IELength,
667						 &psecnetwork->IELength);
668		}
669	}
670
671	pmlmeinfo->assoc_AP_vendor =
672		check_assoc_AP23a(pnetwork->network.IEs,
673				  pnetwork->network.IELength);
674
675	if (pmlmeinfo->assoc_AP_vendor == HT_IOT_PEER_TENDA)
676		padapter->pwrctrlpriv.smart_ps = 0;
677	else
678		padapter->pwrctrlpriv.smart_ps =
679			padapter->registrypriv.smart_ps;
680
681	DBG_8723A("%s: smart_ps =%d\n", __func__,
682		  padapter->pwrctrlpriv.smart_ps);
683
684	/* get cmdsz before endian conversion */
685	pcmd->cmdsz = get_wlan_bssid_ex_sz(psecnetwork);
686
687	pcmd->cmdcode = _JoinBss_CMD_;/* GEN_CMD_CODE(_JoinBss) */
688	pcmd->parmbuf = (unsigned char *)psecnetwork;
689	pcmd->rsp = NULL;
690	pcmd->rspsz = 0;
691
692	res = rtw_enqueue_cmd23a(pcmdpriv, pcmd);
693exit:
694
695	return res;
696}
697
698u8 rtw_disassoc_cmd23a(struct rtw_adapter*padapter, u32 deauth_timeout_ms,
699		       bool enqueue)
700{
701	struct cmd_obj *cmdobj = NULL;
702	struct disconnect_parm *param = NULL;
703	struct cmd_priv *cmdpriv = &padapter->cmdpriv;
704	u8 res = _SUCCESS;
705
706	RT_TRACE(_module_rtl871x_cmd_c_, _drv_notice_,
707		 ("+rtw_disassoc_cmd23a\n"));
708
709	/* prepare cmd parameter */
710	param = kzalloc(sizeof(*param), GFP_ATOMIC);
711	if (param == NULL) {
712		res = _FAIL;
713		goto exit;
714	}
715	param->deauth_timeout_ms = deauth_timeout_ms;
716
717	if (enqueue) {
718		/* need enqueue, prepare cmd_obj and enqueue */
719		cmdobj = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
720		if (!cmdobj) {
721			res = _FAIL;
722			kfree(param);
723			goto exit;
724		}
725		init_h2fwcmd_w_parm_no_rsp(cmdobj, param, _DisConnect_CMD_);
726		res = rtw_enqueue_cmd23a(cmdpriv, cmdobj);
727	} else {
728		/* no need to enqueue, do the cmd hdl directly and
729		   free cmd parameter */
730		if (H2C_SUCCESS != disconnect_hdl23a(padapter, (u8 *)param))
731			res = _FAIL;
732		kfree(param);
733	}
734
735exit:
736	return res;
737}
738
739u8 rtw_setopmode_cmd23a(struct rtw_adapter *padapter,
740			enum ndis_802_11_net_infra networktype)
741{
742	struct	cmd_obj *ph2c;
743	struct	setopmode_parm *psetop;
744	struct	cmd_priv   *pcmdpriv = &padapter->cmdpriv;
745	u8 res = _SUCCESS;
746
747	ph2c = kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
748	if (!ph2c) {
749		res = false;
750		goto exit;
751	}
752	psetop = kzalloc(sizeof(struct setopmode_parm), GFP_KERNEL);
753
754	if (!psetop) {
755		kfree(ph2c);
756		res = false;
757		goto exit;
758	}
759
760	init_h2fwcmd_w_parm_no_rsp(ph2c, psetop, _SetOpMode_CMD_);
761	psetop->mode = (u8)networktype;
762
763	res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
764exit:
765	return res;
766}
767
768u8 rtw_setstakey_cmd23a(struct rtw_adapter *padapter, u8 *psta, u8 unicast_key)
769{
770	struct cmd_obj *ph2c;
771	struct set_stakey_parm *psetstakey_para;
772	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
773	struct set_stakey_rsp *psetstakey_rsp = NULL;
774	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
775	struct security_priv *psecuritypriv = &padapter->securitypriv;
776	struct sta_info *sta = (struct sta_info*)psta;
777	u8 res = _SUCCESS;
778
779	ph2c = kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
780	if (!ph2c) {
781		res = _FAIL;
782		goto exit;
783	}
784
785	psetstakey_para = kzalloc(sizeof(struct set_stakey_parm), GFP_KERNEL);
786	if (!psetstakey_para) {
787		kfree(ph2c);
788		res = _FAIL;
789		goto exit;
790	}
791
792	psetstakey_rsp = kzalloc(sizeof(struct set_stakey_rsp), GFP_KERNEL);
793	if (!psetstakey_rsp) {
794		kfree(ph2c);
795		kfree(psetstakey_para);
796		res = _FAIL;
797		goto exit;
798	}
799
800	init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
801	ph2c->rsp = (u8 *) psetstakey_rsp;
802	ph2c->rspsz = sizeof(struct set_stakey_rsp);
803
804	ether_addr_copy(psetstakey_para->addr, sta->hwaddr);
805
806	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
807		psetstakey_para->algorithm =
808			(unsigned char)psecuritypriv->dot11PrivacyAlgrthm;
809	} else {
810		GET_ENCRY_ALGO(psecuritypriv, sta, psetstakey_para->algorithm,
811			       false);
812	}
813
814	if (unicast_key == true) {
815		memcpy(&psetstakey_para->key, &sta->dot118021x_UncstKey, 16);
816        } else {
817		int idx = psecuritypriv->dot118021XGrpKeyid;
818		memcpy(&psetstakey_para->key,
819		       &psecuritypriv->dot118021XGrpKey[idx].skey, 16);
820        }
821
822	/* jeff: set this becasue at least sw key is ready */
823	padapter->securitypriv.busetkipkey = true;
824
825	res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
826
827exit:
828
829	return res;
830}
831
832u8 rtw_clearstakey_cmd23a(struct rtw_adapter *padapter, u8 *psta, u8 entry,
833			  u8 enqueue)
834{
835	struct cmd_obj *ph2c;
836	struct set_stakey_parm *psetstakey_para;
837	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
838	struct set_stakey_rsp *psetstakey_rsp = NULL;
839	struct sta_info *sta = (struct sta_info *)psta;
840	u8 res = _SUCCESS;
841
842	if (!enqueue) {
843		clear_cam_entry23a(padapter, entry);
844	} else {
845		ph2c = kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
846		if (!ph2c) {
847			res = _FAIL;
848			goto exit;
849		}
850
851		psetstakey_para = kzalloc(sizeof(struct set_stakey_parm),
852					  GFP_KERNEL);
853		if (!psetstakey_para) {
854			kfree(ph2c);
855			res = _FAIL;
856			goto exit;
857		}
858
859		psetstakey_rsp = kzalloc(sizeof(struct set_stakey_rsp),
860					 GFP_KERNEL);
861		if (!psetstakey_rsp) {
862			kfree(ph2c);
863			kfree(psetstakey_para);
864			res = _FAIL;
865			goto exit;
866		}
867
868		init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para,
869					   _SetStaKey_CMD_);
870		ph2c->rsp = (u8 *) psetstakey_rsp;
871		ph2c->rspsz = sizeof(struct set_stakey_rsp);
872
873		ether_addr_copy(psetstakey_para->addr, sta->hwaddr);
874
875		psetstakey_para->algorithm = _NO_PRIVACY_;
876
877		psetstakey_para->id = entry;
878
879		res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
880	}
881exit:
882	return res;
883}
884
885u8 rtw_addbareq_cmd23a(struct rtw_adapter*padapter, u8 tid, u8 *addr)
886{
887	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
888	struct cmd_obj *ph2c;
889	struct addBaReq_parm *paddbareq_parm;
890	u8 res = _SUCCESS;
891
892	ph2c = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
893	if (!ph2c) {
894		res = _FAIL;
895		goto exit;
896	}
897
898	paddbareq_parm = kzalloc(sizeof(struct addBaReq_parm), GFP_ATOMIC);
899	if (!paddbareq_parm) {
900		kfree(ph2c);
901		res = _FAIL;
902		goto exit;
903	}
904
905	paddbareq_parm->tid = tid;
906	ether_addr_copy(paddbareq_parm->addr, addr);
907
908	init_h2fwcmd_w_parm_no_rsp(ph2c, paddbareq_parm,
909				   GEN_CMD_CODE(_AddBAReq));
910
911	res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
912exit:
913	return res;
914}
915
916u8 rtw_dynamic_chk_wk_cmd23a(struct rtw_adapter*padapter)
917{
918	struct cmd_obj *ph2c;
919	struct drvextra_cmd_parm *pdrvextra_cmd_parm;
920	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
921	u8 res = _SUCCESS;
922
923	ph2c = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
924	if (!ph2c) {
925		res = _FAIL;
926		goto exit;
927	}
928
929	pdrvextra_cmd_parm = kzalloc(sizeof(*pdrvextra_cmd_parm), GFP_ATOMIC);
930	if (!pdrvextra_cmd_parm) {
931		kfree(ph2c);
932		res = _FAIL;
933		goto exit;
934	}
935
936	pdrvextra_cmd_parm->ec_id = DYNAMIC_CHK_WK_CID;
937	pdrvextra_cmd_parm->type_size = 0;
938	pdrvextra_cmd_parm->pbuf = (u8 *)padapter;
939
940	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm,
941				   GEN_CMD_CODE(_Set_Drv_Extra));
942
943	res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
944exit:
945
946	return res;
947}
948
949/*
950 * This is only ever called from on_action_spct23a_ch_switch () which isn't
951 * called from anywhere itself
952 */
953u8 rtw_set_ch_cmd23a(struct rtw_adapter*padapter, u8 ch, u8 bw, u8 ch_offset,
954		     u8 enqueue)
955{
956	struct cmd_obj *pcmdobj;
957	struct set_ch_parm *set_ch_parm;
958	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
959
960	u8 res = _SUCCESS;
961
962	DBG_8723A(FUNC_NDEV_FMT" ch:%u, bw:%u, ch_offset:%u\n",
963		  FUNC_NDEV_ARG(padapter->pnetdev), ch, bw, ch_offset);
964
965	/* check input parameter */
966
967	/* prepare cmd parameter */
968	set_ch_parm = kzalloc(sizeof(*set_ch_parm), GFP_KERNEL);
969	if (!set_ch_parm) {
970		res = _FAIL;
971		goto exit;
972	}
973	set_ch_parm->ch = ch;
974	set_ch_parm->bw = bw;
975	set_ch_parm->ch_offset = ch_offset;
976
977	if (enqueue) {
978		/* need enqueue, prepare cmd_obj and enqueue */
979		pcmdobj = kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
980		if (!pcmdobj) {
981			kfree(set_ch_parm);
982			res = _FAIL;
983			goto exit;
984		}
985
986		init_h2fwcmd_w_parm_no_rsp(pcmdobj, set_ch_parm,
987					   GEN_CMD_CODE(_SetChannel));
988		res = rtw_enqueue_cmd23a(pcmdpriv, pcmdobj);
989	} else {
990		/* no need to enqueue, do the cmd hdl directly and
991		   free cmd parameter */
992		if (H2C_SUCCESS != set_ch_hdl23a(padapter, (u8 *)set_ch_parm))
993			res = _FAIL;
994
995		kfree(set_ch_parm);
996	}
997
998	/* do something based on res... */
999exit:
1000
1001	DBG_8723A(FUNC_NDEV_FMT" res:%u\n", FUNC_NDEV_ARG(padapter->pnetdev),
1002		  res);
1003
1004	return res;
1005}
1006
1007static void traffic_status_watchdog(struct rtw_adapter *padapter)
1008{
1009	u8 bEnterPS;
1010	u8 bBusyTraffic = false, bTxBusyTraffic = false, bRxBusyTraffic = false;
1011	u8 bHigherBusyTraffic = false, bHigherBusyRxTraffic = false;
1012	u8 bHigherBusyTxTraffic = false;
1013	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1014#ifndef CONFIG_8723AU_BT_COEXIST
1015	int BusyThreshold = 100;
1016#endif
1017	/*  */
1018	/*  Determine if our traffic is busy now */
1019	/*  */
1020	if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1021#ifdef CONFIG_8723AU_BT_COEXIST
1022		if (pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 50 ||
1023		    pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 50)
1024#else /*  !CONFIG_8723AU_BT_COEXIST */
1025		/*  if we raise bBusyTraffic in last watchdog, using
1026		    lower threshold. */
1027		if (pmlmepriv->LinkDetectInfo.bBusyTraffic)
1028			BusyThreshold = 75;
1029		if (pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > BusyThreshold ||
1030		    pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > BusyThreshold)
1031#endif /*  !CONFIG_8723AU_BT_COEXIST */
1032		{
1033			bBusyTraffic = true;
1034
1035			if (pmlmepriv->LinkDetectInfo.NumRxOkInPeriod >
1036			    pmlmepriv->LinkDetectInfo.NumTxOkInPeriod)
1037				bRxBusyTraffic = true;
1038			else
1039				bTxBusyTraffic = true;
1040		}
1041
1042		/*  Higher Tx/Rx data. */
1043		if (pmlmepriv->LinkDetectInfo.NumRxOkInPeriod > 4000 ||
1044		    pmlmepriv->LinkDetectInfo.NumTxOkInPeriod > 4000) {
1045			bHigherBusyTraffic = true;
1046
1047			if (pmlmepriv->LinkDetectInfo.NumRxOkInPeriod >
1048			    pmlmepriv->LinkDetectInfo.NumTxOkInPeriod)
1049				bHigherBusyRxTraffic = true;
1050			else
1051				bHigherBusyTxTraffic = true;
1052		}
1053
1054#ifdef CONFIG_8723AU_BT_COEXIST
1055		if (BT_1Ant(padapter) == false)
1056#endif
1057		{
1058		/*  check traffic for  powersaving. */
1059		if (((pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod +
1060		      pmlmepriv->LinkDetectInfo.NumTxOkInPeriod) > 8) ||
1061		    (pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod > 2))
1062			bEnterPS = false;
1063		else
1064			bEnterPS = true;
1065
1066		/*  LeisurePS only work in infra mode. */
1067		if (bEnterPS)
1068			LPS_Enter23a(padapter);
1069		else
1070			LPS_Leave23a(padapter);
1071		}
1072	} else
1073		LPS_Leave23a(padapter);
1074
1075	pmlmepriv->LinkDetectInfo.NumRxOkInPeriod = 0;
1076	pmlmepriv->LinkDetectInfo.NumTxOkInPeriod = 0;
1077	pmlmepriv->LinkDetectInfo.NumRxUnicastOkInPeriod = 0;
1078	pmlmepriv->LinkDetectInfo.bBusyTraffic = bBusyTraffic;
1079	pmlmepriv->LinkDetectInfo.bTxBusyTraffic = bTxBusyTraffic;
1080	pmlmepriv->LinkDetectInfo.bRxBusyTraffic = bRxBusyTraffic;
1081	pmlmepriv->LinkDetectInfo.bHigherBusyTraffic = bHigherBusyTraffic;
1082	pmlmepriv->LinkDetectInfo.bHigherBusyRxTraffic = bHigherBusyRxTraffic;
1083	pmlmepriv->LinkDetectInfo.bHigherBusyTxTraffic = bHigherBusyTxTraffic;
1084}
1085
1086static void dynamic_chk_wk_hdl(struct rtw_adapter *padapter, u8 *pbuf, int sz)
1087{
1088	struct mlme_priv *pmlmepriv;
1089
1090	padapter = (struct rtw_adapter *)pbuf;
1091	pmlmepriv = &padapter->mlmepriv;
1092
1093#ifdef CONFIG_8723AU_AP_MODE
1094	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == true)
1095		expire_timeout_chk23a(padapter);
1096#endif
1097
1098	rtw_hal_sreset_xmit_status_check23a(padapter);
1099
1100	linked_status_chk23a(padapter);
1101	traffic_status_watchdog(padapter);
1102
1103	rtw_hal_dm_watchdog23a(padapter);
1104
1105#ifdef CONFIG_8723AU_BT_COEXIST
1106	/*  */
1107	/*  BT-Coexist */
1108	/*  */
1109	BT_CoexistMechanism(padapter);
1110#endif
1111}
1112
1113static void lps_ctrl_wk_hdl(struct rtw_adapter *padapter, u8 lps_ctrl_type)
1114{
1115	struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
1116	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1117	u8 mstatus;
1118
1119	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) ||
1120	    (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true))
1121		return;
1122
1123	switch (lps_ctrl_type)
1124	{
1125		case LPS_CTRL_SCAN:
1126#ifdef CONFIG_8723AU_BT_COEXIST
1127			BT_WifiScanNotify(padapter, true);
1128			if (BT_1Ant(padapter) == false)
1129#endif
1130			{
1131				if (check_fwstate(pmlmepriv, _FW_LINKED))
1132					LPS_Leave23a(padapter);
1133			}
1134			break;
1135		case LPS_CTRL_JOINBSS:
1136			LPS_Leave23a(padapter);
1137			break;
1138		case LPS_CTRL_CONNECT:
1139			mstatus = 1;/* connect */
1140			/*  Reset LPS Setting */
1141			padapter->pwrctrlpriv.LpsIdleCount = 0;
1142			rtl8723a_set_FwJoinBssReport_cmd(padapter, 1);
1143#ifdef CONFIG_8723AU_BT_COEXIST
1144			BT_WifiMediaStatusNotify(padapter, mstatus);
1145#endif
1146			break;
1147		case LPS_CTRL_DISCONNECT:
1148			mstatus = 0;/* disconnect */
1149#ifdef CONFIG_8723AU_BT_COEXIST
1150			BT_WifiMediaStatusNotify(padapter, mstatus);
1151			if (BT_1Ant(padapter) == false)
1152#endif
1153			{
1154				LPS_Leave23a(padapter);
1155			}
1156			rtl8723a_set_FwJoinBssReport_cmd(padapter, 0);
1157			break;
1158		case LPS_CTRL_SPECIAL_PACKET:
1159			pwrpriv->DelayLPSLastTimeStamp = jiffies;
1160#ifdef CONFIG_8723AU_BT_COEXIST
1161			BT_SpecialPacketNotify(padapter);
1162			if (BT_1Ant(padapter) == false)
1163#endif
1164			{
1165				LPS_Leave23a(padapter);
1166			}
1167			break;
1168		case LPS_CTRL_LEAVE:
1169#ifdef CONFIG_8723AU_BT_COEXIST
1170			BT_LpsLeave(padapter);
1171			if (BT_1Ant(padapter) == false)
1172#endif
1173			{
1174				LPS_Leave23a(padapter);
1175			}
1176			break;
1177
1178		default:
1179			break;
1180	}
1181}
1182
1183u8 rtw_lps_ctrl_wk_cmd23a(struct rtw_adapter *padapter,
1184			  u8 lps_ctrl_type, u8 enqueue)
1185{
1186	struct cmd_obj *ph2c;
1187	struct drvextra_cmd_parm *pdrvextra_cmd_parm;
1188	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
1189	u8 res = _SUCCESS;
1190
1191	if (enqueue) {
1192		ph2c = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
1193		if (!ph2c) {
1194			res = _FAIL;
1195			goto exit;
1196		}
1197
1198		pdrvextra_cmd_parm = kzalloc(sizeof(struct drvextra_cmd_parm),
1199					     GFP_ATOMIC);
1200		if (!pdrvextra_cmd_parm) {
1201			kfree(ph2c);
1202			res = _FAIL;
1203			goto exit;
1204		}
1205
1206		pdrvextra_cmd_parm->ec_id = LPS_CTRL_WK_CID;
1207		pdrvextra_cmd_parm->type_size = lps_ctrl_type;
1208		pdrvextra_cmd_parm->pbuf = NULL;
1209
1210		init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm,
1211					   GEN_CMD_CODE(_Set_Drv_Extra));
1212
1213		res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
1214	} else
1215		lps_ctrl_wk_hdl(padapter, lps_ctrl_type);
1216exit:
1217
1218	return res;
1219}
1220
1221static void power_saving_wk_hdl(struct rtw_adapter *padapter, u8 *pbuf, int sz)
1222{
1223	 rtw_ps_processor23a(padapter);
1224}
1225
1226u8 rtw_ps_cmd23a(struct rtw_adapter*padapter)
1227{
1228	struct cmd_obj *ppscmd;
1229	struct drvextra_cmd_parm *pdrvextra_cmd_parm;
1230	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
1231
1232	u8 res = _SUCCESS;
1233
1234	ppscmd = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
1235	if (!ppscmd) {
1236		res = _FAIL;
1237		goto exit;
1238	}
1239
1240	pdrvextra_cmd_parm = kzalloc(sizeof(struct drvextra_cmd_parm),
1241				     GFP_ATOMIC);
1242	if (!pdrvextra_cmd_parm) {
1243		kfree(ppscmd);
1244		res = _FAIL;
1245		goto exit;
1246	}
1247
1248	pdrvextra_cmd_parm->ec_id = POWER_SAVING_CTRL_WK_CID;
1249	pdrvextra_cmd_parm->pbuf = NULL;
1250	init_h2fwcmd_w_parm_no_rsp(ppscmd, pdrvextra_cmd_parm,
1251				   GEN_CMD_CODE(_Set_Drv_Extra));
1252
1253	res = rtw_enqueue_cmd23a(pcmdpriv, ppscmd);
1254exit:
1255
1256	return res;
1257}
1258
1259#ifdef CONFIG_8723AU_AP_MODE
1260
1261static void rtw_chk_hi_queue_hdl(struct rtw_adapter *padapter)
1262{
1263	int cnt = 0;
1264	struct sta_info *psta_bmc;
1265	struct sta_priv *pstapriv = &padapter->stapriv;
1266
1267	psta_bmc = rtw_get_bcmc_stainfo23a(padapter);
1268	if (!psta_bmc)
1269		return;
1270
1271	if (psta_bmc->sleepq_len == 0) {
1272		bool val;
1273
1274		val = rtl8723a_chk_hi_queue_empty(padapter);
1275
1276		while (val == false) {
1277			msleep(100);
1278
1279			cnt++;
1280
1281			if (cnt>10)
1282				break;
1283
1284			val = rtl8723a_chk_hi_queue_empty(padapter);
1285		}
1286
1287		if (cnt <= 10) {
1288			pstapriv->tim_bitmap &= ~BIT(0);
1289			pstapriv->sta_dz_bitmap &= ~BIT(0);
1290
1291			update_beacon23a(padapter, WLAN_EID_TIM, NULL, false);
1292		} else /* re check again */
1293			rtw_chk_hi_queue_cmd23a(padapter);
1294	}
1295}
1296
1297u8 rtw_chk_hi_queue_cmd23a(struct rtw_adapter*padapter)
1298{
1299	struct cmd_obj *ph2c;
1300	struct drvextra_cmd_parm *pdrvextra_cmd_parm;
1301	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
1302	u8 res = _SUCCESS;
1303
1304	ph2c = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
1305	if (!ph2c) {
1306		res = _FAIL;
1307		goto exit;
1308	}
1309
1310	pdrvextra_cmd_parm = kzalloc(sizeof(struct drvextra_cmd_parm),
1311				     GFP_ATOMIC);
1312	if (!pdrvextra_cmd_parm) {
1313		kfree(ph2c);
1314		res = _FAIL;
1315		goto exit;
1316	}
1317
1318	pdrvextra_cmd_parm->ec_id = CHECK_HIQ_WK_CID;
1319	pdrvextra_cmd_parm->type_size = 0;
1320	pdrvextra_cmd_parm->pbuf = NULL;
1321
1322	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm,
1323				   GEN_CMD_CODE(_Set_Drv_Extra));
1324
1325	res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
1326exit:
1327
1328	return res;
1329}
1330#endif
1331
1332u8 rtw_c2h_wk_cmd23a(struct rtw_adapter *padapter, u8 *c2h_evt)
1333{
1334	struct cmd_obj *ph2c;
1335	struct drvextra_cmd_parm *pdrvextra_cmd_parm;
1336	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
1337	u8 res = _SUCCESS;
1338
1339	ph2c = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
1340	if (!ph2c) {
1341		res = _FAIL;
1342		goto exit;
1343	}
1344
1345	pdrvextra_cmd_parm = kzalloc(sizeof(struct drvextra_cmd_parm),
1346				     GFP_ATOMIC);
1347	if (!pdrvextra_cmd_parm) {
1348		kfree(ph2c);
1349		res = _FAIL;
1350		goto exit;
1351	}
1352
1353	pdrvextra_cmd_parm->ec_id = C2H_WK_CID;
1354	pdrvextra_cmd_parm->type_size = c2h_evt?16:0;
1355	pdrvextra_cmd_parm->pbuf = c2h_evt;
1356
1357	init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvextra_cmd_parm,
1358				   GEN_CMD_CODE(_Set_Drv_Extra));
1359
1360	res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
1361
1362exit:
1363
1364	return res;
1365}
1366
1367s32 c2h_evt_hdl(struct rtw_adapter *adapter, struct c2h_evt_hdr *c2h_evt,
1368		c2h_id_filter filter)
1369{
1370	s32 ret = _FAIL;
1371	u8 buf[16];
1372
1373	if (!c2h_evt) {
1374		/* No c2h event in cmd_obj, read c2h event before handling*/
1375		if (c2h_evt_read23a(adapter, buf) == _SUCCESS) {
1376			c2h_evt = (struct c2h_evt_hdr *)buf;
1377
1378			if (filter && filter(c2h_evt->id) == false)
1379				goto exit;
1380
1381			ret = rtw_hal_c2h_handler23a(adapter, c2h_evt);
1382		}
1383	} else {
1384
1385		if (filter && filter(c2h_evt->id) == false)
1386			goto exit;
1387
1388		ret = rtw_hal_c2h_handler23a(adapter, c2h_evt);
1389	}
1390exit:
1391	return ret;
1392}
1393
1394static void c2h_wk_callback(struct work_struct *work)
1395{
1396	struct evt_priv *evtpriv;
1397	struct rtw_adapter *adapter;
1398	struct c2h_evt_hdr *c2h_evt;
1399	c2h_id_filter ccx_id_filter;
1400
1401	evtpriv = container_of(work, struct evt_priv, c2h_wk);
1402	adapter = container_of(evtpriv, struct rtw_adapter, evtpriv);
1403	ccx_id_filter = rtw_hal_c2h_id_filter_ccx23a(adapter);
1404
1405	evtpriv->c2h_wk_alive = true;
1406
1407	while (!rtw_cbuf_empty23a(evtpriv->c2h_queue)) {
1408		c2h_evt = (struct c2h_evt_hdr *)
1409			rtw_cbuf_pop23a(evtpriv->c2h_queue);
1410		if (c2h_evt) {
1411			/* This C2H event is read, clear it */
1412			c2h_evt_clear23a(adapter);
1413		} else if ((c2h_evt = (struct c2h_evt_hdr *)
1414			    kmalloc(16, GFP_KERNEL))) {
1415			if (!c2h_evt)
1416				continue;
1417			/* This C2H event is not read, read & clear now */
1418			if (c2h_evt_read23a(adapter, (u8*)c2h_evt) != _SUCCESS)
1419				continue;
1420		}
1421
1422		/* Special pointer to trigger c2h_evt_clear23a only */
1423		if ((void *)c2h_evt == (void *)evtpriv)
1424			continue;
1425
1426		if (!c2h_evt_exist(c2h_evt)) {
1427			kfree(c2h_evt);
1428			continue;
1429		}
1430
1431		if (ccx_id_filter(c2h_evt->id) == true) {
1432			/* Handle CCX report here */
1433			rtw_hal_c2h_handler23a(adapter, c2h_evt);
1434			kfree(c2h_evt);
1435		} else {
1436			/* Enqueue into cmd_thread for others */
1437			rtw_c2h_wk_cmd23a(adapter, (u8 *)c2h_evt);
1438		}
1439	}
1440
1441	evtpriv->c2h_wk_alive = false;
1442}
1443
1444u8 rtw_drvextra_cmd_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
1445{
1446	const struct drvextra_cmd_parm *pdrvextra_cmd;
1447
1448	if (!pbuf)
1449		return H2C_PARAMETERS_ERROR;
1450
1451	pdrvextra_cmd = (struct drvextra_cmd_parm *)pbuf;
1452
1453	switch (pdrvextra_cmd->ec_id)
1454	{
1455	case DYNAMIC_CHK_WK_CID:
1456		dynamic_chk_wk_hdl(padapter, pdrvextra_cmd->pbuf,
1457				   pdrvextra_cmd->type_size);
1458		break;
1459	case POWER_SAVING_CTRL_WK_CID:
1460		power_saving_wk_hdl(padapter, pdrvextra_cmd->pbuf,
1461				    pdrvextra_cmd->type_size);
1462		break;
1463	case LPS_CTRL_WK_CID:
1464		lps_ctrl_wk_hdl(padapter, (u8)pdrvextra_cmd->type_size);
1465		break;
1466#ifdef CONFIG_8723AU_AP_MODE
1467	case CHECK_HIQ_WK_CID:
1468		rtw_chk_hi_queue_hdl(padapter);
1469		break;
1470#endif /* CONFIG_8723AU_AP_MODE */
1471	case C2H_WK_CID:
1472		c2h_evt_hdl(padapter,
1473			    (struct c2h_evt_hdr *)pdrvextra_cmd->pbuf, NULL);
1474		break;
1475
1476	default:
1477		break;
1478	}
1479
1480	if (pdrvextra_cmd->pbuf && (pdrvextra_cmd->type_size > 0)) {
1481		kfree(pdrvextra_cmd->pbuf);
1482		/*
1483		 * No need to set pdrvextra_cmd->pbuf = NULL as we were
1484		 * operating on a copy of the original pcmd->parmbuf
1485		 * created in rtw_cmd_work().
1486		 */
1487	}
1488
1489	return H2C_SUCCESS;
1490}
1491
1492void rtw_survey_cmd_callback23a(struct rtw_adapter *padapter,
1493			     struct cmd_obj *pcmd)
1494{
1495	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
1496
1497	if (pcmd->res == H2C_DROPPED) {
1498		/* TODO: cancel timer and do timeout handler directly... */
1499		/* need to make timeout handlerOS independent */
1500		mod_timer(&pmlmepriv->scan_to_timer,
1501			  jiffies + msecs_to_jiffies(1));
1502	} else if (pcmd->res != H2C_SUCCESS) {
1503		mod_timer(&pmlmepriv->scan_to_timer,
1504			  jiffies + msecs_to_jiffies(1));
1505		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
1506			 ("\n ********Error: MgntActrtw_set_802_11_bssid23a_"
1507			  "LIST_SCAN Fail ************\n\n."));
1508	}
1509
1510	/*  free cmd */
1511	rtw_free_cmd_obj23a(pcmd);
1512}
1513
1514void rtw_disassoc_cmd23a_callback(struct rtw_adapter *padapter,
1515				  struct cmd_obj *pcmd)
1516{
1517	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
1518
1519	if (pcmd->res != H2C_SUCCESS) {
1520		spin_lock_bh(&pmlmepriv->lock);
1521		set_fwstate(pmlmepriv, _FW_LINKED);
1522		spin_unlock_bh(&pmlmepriv->lock);
1523		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
1524			 ("\n ***Error: disconnect_cmd_callback Fail ***\n."));
1525		return;
1526	}
1527
1528	/*  free cmd */
1529	rtw_free_cmd_obj23a(pcmd);
1530}
1531
1532void rtw_joinbss_cmd23a_callback(struct rtw_adapter *padapter,
1533				 struct cmd_obj *pcmd)
1534{
1535	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1536
1537	if (pcmd->res == H2C_DROPPED) {
1538		/* TODO: cancel timer and do timeout handler directly... */
1539		/* need to make timeout handlerOS independent */
1540		mod_timer(&pmlmepriv->assoc_timer,
1541			  jiffies + msecs_to_jiffies(1));
1542	} else if (pcmd->res != H2C_SUCCESS) {
1543		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
1544			 ("********Error:rtw_select_and_join_from_scanned_"
1545			  "queue Wait Sema  Fail ************\n"));
1546		mod_timer(&pmlmepriv->assoc_timer,
1547			  jiffies + msecs_to_jiffies(1));
1548	}
1549
1550	rtw_free_cmd_obj23a(pcmd);
1551}
1552
1553void rtw_createbss_cmd23a_callback(struct rtw_adapter *padapter,
1554				   struct cmd_obj *pcmd)
1555{
1556	struct sta_info *psta;
1557	struct wlan_network *pwlan;
1558	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1559	struct wlan_bssid_ex *pnetwork = (struct wlan_bssid_ex *)pcmd->parmbuf;
1560	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
1561
1562	if (pcmd->res != H2C_SUCCESS) {
1563		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
1564			 ("\n ********Error: rtw_createbss_cmd23a_callback  "
1565			  "Fail ************\n\n."));
1566		mod_timer(&pmlmepriv->assoc_timer,
1567			  jiffies + msecs_to_jiffies(1));
1568	}
1569
1570	del_timer_sync(&pmlmepriv->assoc_timer);
1571
1572	spin_lock_bh(&pmlmepriv->lock);
1573
1574	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1575		psta = rtw_get_stainfo23a(&padapter->stapriv,
1576					  pnetwork->MacAddress);
1577		if (!psta) {
1578			psta = rtw_alloc_stainfo23a(&padapter->stapriv,
1579						 pnetwork->MacAddress);
1580			if (!psta) {
1581				RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
1582					 ("\nCan't alloc sta_info when "
1583					  "createbss_cmd_callback\n"));
1584				goto createbss_cmd_fail ;
1585			}
1586		}
1587
1588		rtw_indicate_connect23a(padapter);
1589	} else {
1590		pwlan = rtw_alloc_network(pmlmepriv);
1591		spin_lock_bh(&pmlmepriv->scanned_queue.lock);
1592		if (!pwlan) {
1593			pwlan = rtw_get_oldest_wlan_network23a(&pmlmepriv->scanned_queue);
1594			if (!pwlan) {
1595				RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
1596					 ("\n Error:  can't get pwlan in "
1597					  "rtw23a_joinbss_event_cb\n"));
1598				spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1599				goto createbss_cmd_fail;
1600			}
1601			pwlan->last_scanned = jiffies;
1602		} else {
1603			list_add_tail(&pwlan->list,
1604				      &pmlmepriv->scanned_queue.queue);
1605		}
1606
1607		pnetwork->Length = get_wlan_bssid_ex_sz(pnetwork);
1608		memcpy(&pwlan->network, pnetwork, pnetwork->Length);
1609		/* pwlan->fixed = true; */
1610
1611		/* list_add_tail(&pwlan->list,
1612		   &pmlmepriv->scanned_queue.queue); */
1613
1614		/*  copy pdev_network information to
1615		    pmlmepriv->cur_network */
1616		memcpy(&tgt_network->network, pnetwork,
1617		       get_wlan_bssid_ex_sz(pnetwork));
1618
1619		/*  reset DSConfig */
1620
1621		_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1622
1623		spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1624		/*  we will set _FW_LINKED when there is one more sat to
1625		    join us (rtw_stassoc_event_callback23a) */
1626	}
1627
1628createbss_cmd_fail:
1629
1630	spin_unlock_bh(&pmlmepriv->lock);
1631
1632	rtw_free_cmd_obj23a(pcmd);
1633}
1634
1635void rtw_setstaKey_cmdrsp_callback23a(struct rtw_adapter *padapter,
1636				      struct cmd_obj *pcmd)
1637{
1638	struct sta_priv *pstapriv;
1639	struct set_stakey_rsp *psetstakey_rsp;
1640	struct sta_info *psta;
1641
1642	pstapriv = &padapter->stapriv;
1643	psetstakey_rsp = (struct set_stakey_rsp*) (pcmd->rsp);
1644	psta = rtw_get_stainfo23a(pstapriv, psetstakey_rsp->addr);
1645
1646	if (!psta) {
1647		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
1648			 ("\nERROR: rtw_setstaKey_cmdrsp_callback23a => "
1649			  "can't get sta_info\n\n"));
1650		goto exit;
1651	}
1652
1653exit:
1654
1655	rtw_free_cmd_obj23a(pcmd);
1656}
1657
1658void rtw_setassocsta_cmdrsp_callback23a(struct rtw_adapter *padapter,
1659					struct cmd_obj *pcmd)
1660{
1661	struct sta_priv *pstapriv = &padapter->stapriv;
1662	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1663	struct set_assocsta_parm* passocsta_parm;
1664	struct set_assocsta_rsp* passocsta_rsp;
1665	struct sta_info *psta;
1666
1667	passocsta_parm = (struct set_assocsta_parm *)(pcmd->parmbuf);
1668	passocsta_rsp = (struct set_assocsta_rsp*) (pcmd->rsp);
1669	psta = rtw_get_stainfo23a(pstapriv, passocsta_parm->addr);
1670
1671	if (psta == NULL) {
1672		RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
1673			 ("\nERROR: setassocsta_cmdrsp_callbac => can't "
1674			  "get sta_info\n\n"));
1675		goto exit;
1676	}
1677
1678	psta->aid = psta->mac_id = passocsta_rsp->cam_id;
1679
1680	spin_lock_bh(&pmlmepriv->lock);
1681
1682	if ((check_fwstate(pmlmepriv, WIFI_MP_STATE) == true) &&
1683	    (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == true))
1684		_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1685
1686	set_fwstate(pmlmepriv, _FW_LINKED);
1687	spin_unlock_bh(&pmlmepriv->lock);
1688
1689exit:
1690	rtw_free_cmd_obj23a(pcmd);
1691}
1692