drivers/staging/vt6656/rxtx.c

   1 /*
   2  * Copyright (c) 1996, 2003 VIA Networking Technologies, Inc.
   3  * All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; either version 2 of the License, or
   8  * (at your option) any later version.
   9  *
  10  * This program is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  13  * GNU General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License along
  16  * with this program; if not, write to the Free Software Foundation, Inc.,
  17  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  18  *
  19  * File: rxtx.c
  20  *
  21  * Purpose: handle WMAC/802.3/802.11 rx & tx functions
  22  *
  23  * Author: Lyndon Chen
  24  *
  25  * Date: May 20, 2003
  26  *
  27  * Functions:
  28  *      s_vGenerateTxParameter - Generate tx dma required parameter.
  29  *      s_vGenerateMACHeader - Translate 802.3 to 802.11 header
  30  *      csBeacon_xmit - beacon tx function
  31  *      csMgmt_xmit - management tx function
  32  *      s_uGetDataDuration - get tx data required duration
  33  *      s_uFillDataHead- fulfill tx data duration header
  34  *      s_uGetRTSCTSDuration- get rtx/cts required duration
  35  *      s_uGetRTSCTSRsvTime- get rts/cts reserved time
  36  *      s_uGetTxRsvTime- get frame reserved time
  37  *      s_vFillCTSHead- fulfill CTS ctl header
  38  *      s_vFillFragParameter- Set fragment ctl parameter.
  39  *      s_vFillRTSHead- fulfill RTS ctl header
  40  *      s_vFillTxKey- fulfill tx encrypt key
  41  *      s_vSWencryption- Software encrypt header
  42  *      vDMA0_tx_80211- tx 802.11 frame via dma0
  43  *      vGenerateFIFOHeader- Generate tx FIFO ctl header
  44  *
  45  * Revision History:
  46  *
  47  */
  48
  49 #include "device.h"
  50 #include "rxtx.h"
  51 #include "tether.h"
  52 #include "card.h"
  53 #include "bssdb.h"
  54 #include "mac.h"
  55 #include "michael.h"
  56 #include "tkip.h"
  57 #include "tcrc.h"
  58 #include "wctl.h"
  59 #include "rf.h"
  60 #include "datarate.h"
  61 #include "usbpipe.h"
  62 #include "iocmd.h"
  63
  64 static int          msglevel                = MSG_LEVEL_INFO;
  65
  66 static const u16 wTimeStampOff[2][MAX_RATE] = {
  67         {384, 288, 226, 209, 54, 43, 37, 31, 28, 25, 24, 23}, // Long Preamble
  68         {384, 192, 130, 113, 54, 43, 37, 31, 28, 25, 24, 23}, // Short Preamble
  69     };
  70
  71 static const u16 wFB_Opt0[2][5] = {
  72         {RATE_12M, RATE_18M, RATE_24M, RATE_36M, RATE_48M}, // fallback_rate0
  73         {RATE_12M, RATE_12M, RATE_18M, RATE_24M, RATE_36M}, // fallback_rate1
  74     };
  75 static const u16 wFB_Opt1[2][5] = {
  76         {RATE_12M, RATE_18M, RATE_24M, RATE_24M, RATE_36M}, // fallback_rate0
  77         {RATE_6M , RATE_6M,  RATE_12M, RATE_12M, RATE_18M}, // fallback_rate1
  78     };
  79
  80 #define RTSDUR_BB       0
  81 #define RTSDUR_BA       1
  82 #define RTSDUR_AA       2
  83 #define CTSDUR_BA       3
  84 #define RTSDUR_BA_F0    4
  85 #define RTSDUR_AA_F0    5
  86 #define RTSDUR_BA_F1    6
  87 #define RTSDUR_AA_F1    7
  88 #define CTSDUR_BA_F0    8
  89 #define CTSDUR_BA_F1    9
  90 #define DATADUR_B       10
  91 #define DATADUR_A       11
  92 #define DATADUR_A_F0    12
  93 #define DATADUR_A_F1    13
  94
  95 static void s_vSaveTxPktInfo(struct vnt_private *pDevice, u8 byPktNum,
  96         u8 *pbyDestAddr, u16 wPktLength, u16 wFIFOCtl);
  97
  98 static struct vnt_usb_send_context *s_vGetFreeContext(struct vnt_private *);
  99
 100 static u16 s_vGenerateTxParameter(struct vnt_private *pDevice,
 101         u8 byPktType, u16 wCurrentRate, struct vnt_tx_buffer *tx_buffer,
 102         struct vnt_mic_hdr **mic_hdr, u32 need_mic, u32 cbFrameSize,
 103         int bNeedACK, struct ethhdr *psEthHeader, bool need_rts);
 104
 105 static void s_vGenerateMACHeader(struct vnt_private *pDevice,
 106         u8 *pbyBufferAddr, u16 wDuration, struct ethhdr *psEthHeader,
 107         int bNeedEncrypt, u16 wFragType, u32 uFragIdx);
 108
 109 static void s_vFillTxKey(struct vnt_private *pDevice,
 110         struct vnt_tx_fifo_head *fifo_head, u8 *pbyIVHead,
 111         PSKeyItem pTransmitKey, u8 *pbyHdrBuf, u16 wPayloadLen,
 112         struct vnt_mic_hdr *mic_hdr);
 113
 114 static void s_vSWencryption(struct vnt_private *pDevice,
 115         PSKeyItem pTransmitKey, u8 *pbyPayloadHead, u16 wPayloadSize);
 116
 117 static unsigned int s_uGetTxRsvTime(struct vnt_private *pDevice, u8 byPktType,
 118         u32 cbFrameLength, u16 wRate, int bNeedAck);
 119
 120 static __le16 s_uGetRTSCTSRsvTime(struct vnt_private *priv,
 121         u8 rsv_type, u8 pkt_type, u32 frame_lenght, u16 current_rate);
 122
 123 static u16 s_vFillCTSHead(struct vnt_private *pDevice,
 124         u8 byPktType, union vnt_tx_data_head *head, u32 cbFrameLength,
 125         int bNeedAck, u16 wCurrentRate, u8 byFBOption);
 126
 127 static u16 s_vFillRTSHead(struct vnt_private *pDevice, u8 byPktType,
 128         union vnt_tx_data_head *head, u32 cbFrameLength, int bNeedAck,
 129         struct ethhdr *psEthHeader, u16 wCurrentRate, u8 byFBOption);
 130
 131 static __le16 s_uGetDataDuration(struct vnt_private *pDevice,
 132         u8 byPktType, int bNeedAck);
 133
 134 static __le16 s_uGetRTSCTSDuration(struct vnt_private *pDevice,
 135         u8 byDurType, u32 cbFrameLength, u8 byPktType, u16 wRate,
 136         int bNeedAck, u8 byFBOption);
 137
 138 static struct vnt_usb_send_context
 139         *s_vGetFreeContext(struct vnt_private *priv)
 140 {
 141         struct vnt_usb_send_context *context = NULL;
 142         int ii;
 143
 144         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"GetFreeContext()\n");
 145
 146         for (ii = 0; ii < priv->cbTD; ii++) {
 147                 if (!priv->apTD[ii])
 148                         return NULL;
 149
 150                 context = priv->apTD[ii];
 151                 if (context->in_use == false) {
 152                         context->in_use = true;
 153                         memset(context->data, 0,
 154                                         MAX_TOTAL_SIZE_WITH_ALL_HEADERS);
 155                         return context;
 156                 }
 157         }
 158
 159         if (ii == priv->cbTD)
 160                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"No Free Tx Context\n");
 161
 162         return NULL;
 163 }
 164
 165 static void s_vSaveTxPktInfo(struct vnt_private *pDevice, u8 byPktNum,
 166         u8 *pbyDestAddr, u16 wPktLength, u16 wFIFOCtl)
 167 {
 168         struct net_device_stats *stats = &pDevice->stats;
 169         struct vnt_tx_pkt_info *pkt_info = pDevice->pkt_info;
 170
 171         pkt_info[byPktNum].fifo_ctl = wFIFOCtl;
 172         memcpy(pkt_info[byPktNum].dest_addr, pbyDestAddr, ETH_ALEN);
 173
 174         stats->tx_bytes += wPktLength;
 175 }
 176
 177 static void s_vFillTxKey(struct vnt_private *pDevice,
 178         struct vnt_tx_fifo_head *fifo_head, u8 *pbyIVHead,
 179         PSKeyItem pTransmitKey, u8 *pbyHdrBuf, u16 wPayloadLen,
 180         struct vnt_mic_hdr *mic_hdr)
 181 {
 182         u8 *pbyBuf = (u8 *)&fifo_head->adwTxKey[0];
 183         __le32 *pdwIV = (__le32 *)pbyIVHead;
 184         __le32 *pdwExtIV = (__le32 *)((u8 *)pbyIVHead + 4);
 185         struct ieee80211_hdr *pMACHeader = (struct ieee80211_hdr *)pbyHdrBuf;
 186         __le32 rev_iv_counter;
 187
 188         /* Fill TXKEY */
 189         if (pTransmitKey == NULL)
 190                 return;
 191
 192         rev_iv_counter = cpu_to_le32(pDevice->dwIVCounter);
 193         *pdwIV = cpu_to_le32(pDevice->dwIVCounter);
 194         pDevice->byKeyIndex = pTransmitKey->dwKeyIndex & 0xf;
 195
 196         switch (pTransmitKey->byCipherSuite) {
 197         case KEY_CTL_WEP:
 198                 if (pTransmitKey->uKeyLength == WLAN_WEP232_KEYLEN) {
 199                         memcpy(pDevice->abyPRNG, (u8 *)&rev_iv_counter, 3);
 200                         memcpy(pDevice->abyPRNG + 3, pTransmitKey->abyKey,
 201                                                 pTransmitKey->uKeyLength);
 202                 } else {
 203                         memcpy(pbyBuf, (u8 *)&rev_iv_counter, 3);
 204                         memcpy(pbyBuf + 3, pTransmitKey->abyKey,
 205                                                 pTransmitKey->uKeyLength);
 206                         if (pTransmitKey->uKeyLength == WLAN_WEP40_KEYLEN) {
 207                                 memcpy(pbyBuf+8, (u8 *)&rev_iv_counter, 3);
 208                         memcpy(pbyBuf+11, pTransmitKey->abyKey,
 209                                                 pTransmitKey->uKeyLength);
 210                         }
 211
 212                         memcpy(pDevice->abyPRNG, pbyBuf, 16);
 213                 }
 214                 /* Append IV after Mac Header */
 215                 *pdwIV &= cpu_to_le32(WEP_IV_MASK);
 216                 *pdwIV |= cpu_to_le32((u32)pDevice->byKeyIndex << 30);
 217
 218                 pDevice->dwIVCounter++;
 219                 if (pDevice->dwIVCounter > WEP_IV_MASK)
 220                         pDevice->dwIVCounter = 0;
 221
 222                 break;
 223         case KEY_CTL_TKIP:
 224                 pTransmitKey->wTSC15_0++;
 225                 if (pTransmitKey->wTSC15_0 == 0)
 226                         pTransmitKey->dwTSC47_16++;
 227
 228                 TKIPvMixKey(pTransmitKey->abyKey, pDevice->abyCurrentNetAddr,
 229                         pTransmitKey->wTSC15_0, pTransmitKey->dwTSC47_16,
 230                                                         pDevice->abyPRNG);
 231                 memcpy(pbyBuf, pDevice->abyPRNG, 16);
 232
 233                 /* Make IV */
 234                 memcpy(pdwIV, pDevice->abyPRNG, 3);
 235
 236                 *(pbyIVHead+3) = (u8)(((pDevice->byKeyIndex << 6) &
 237                                                         0xc0) | 0x20);
 238                 /*  Append IV&ExtIV after Mac Header */
 239                 *pdwExtIV = cpu_to_le32(pTransmitKey->dwTSC47_16);
 240
 241                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO
 242                         "vFillTxKey()---- pdwExtIV: %x\n", *pdwExtIV);
 243
 244                 break;
 245         case KEY_CTL_CCMP:
 246                 pTransmitKey->wTSC15_0++;
 247                 if (pTransmitKey->wTSC15_0 == 0)
 248                         pTransmitKey->dwTSC47_16++;
 249
 250                 memcpy(pbyBuf, pTransmitKey->abyKey, 16);
 251
 252                 /* Make IV */
 253                 *pdwIV = 0;
 254                 *(pbyIVHead+3) = (u8)(((pDevice->byKeyIndex << 6) &
 255                                                         0xc0) | 0x20);
 256
 257                 *pdwIV |= cpu_to_le32((u32)(pTransmitKey->wTSC15_0));
 258
 259                 /* Append IV&ExtIV after Mac Header */
 260                 *pdwExtIV = cpu_to_le32(pTransmitKey->dwTSC47_16);
 261
 262                 if (!mic_hdr)
 263                         return;
 264
 265                 /* MICHDR0 */
 266                 mic_hdr->id = 0x59;
 267                 mic_hdr->payload_len = cpu_to_be16(wPayloadLen);
 268                 memcpy(mic_hdr->mic_addr2, pMACHeader->addr2, ETH_ALEN);
 269
 270                 mic_hdr->tsc_47_16 = cpu_to_be32(pTransmitKey->dwTSC47_16);
 271                 mic_hdr->tsc_15_0 = cpu_to_be16(pTransmitKey->wTSC15_0);
 272
 273                 /* MICHDR1 */
 274                 if (ieee80211_has_a4(pMACHeader->frame_control))
 275                         mic_hdr->hlen = cpu_to_be16(28);
 276                 else
 277                         mic_hdr->hlen = cpu_to_be16(22);
 278
 279                 memcpy(mic_hdr->addr1, pMACHeader->addr1, ETH_ALEN);
 280                 memcpy(mic_hdr->addr2, pMACHeader->addr2, ETH_ALEN);
 281
 282                 /* MICHDR2 */
 283                 memcpy(mic_hdr->addr3, pMACHeader->addr3, ETH_ALEN);
 284                 mic_hdr->frame_control = cpu_to_le16(
 285                         le16_to_cpu(pMACHeader->frame_control) & 0xc78f);
 286                 mic_hdr->seq_ctrl = cpu_to_le16(
 287                                 le16_to_cpu(pMACHeader->seq_ctrl) & 0xf);
 288
 289                 if (ieee80211_has_a4(pMACHeader->frame_control))
 290                         memcpy(mic_hdr->addr4, pMACHeader->addr4, ETH_ALEN);
 291         }
 292 }
 293
 294 static void s_vSWencryption(struct vnt_private *pDevice,
 295         PSKeyItem pTransmitKey, u8 *pbyPayloadHead, u16 wPayloadSize)
 296 {
 297         u32 cbICVlen = 4;
 298         u32 dwICV = 0xffffffff;
 299         u32 *pdwICV;
 300
 301     if (pTransmitKey == NULL)
 302         return;
 303
 304     if (pTransmitKey->byCipherSuite == KEY_CTL_WEP) {
 305         //=======================================================================
 306         // Append ICV after payload
 307         dwICV = CRCdwGetCrc32Ex(pbyPayloadHead, wPayloadSize, dwICV);//ICV(Payload)
 308         pdwICV = (u32 *)(pbyPayloadHead + wPayloadSize);
 309         // finally, we must invert dwCRC to get the correct answer
 310         *pdwICV = cpu_to_le32(~dwICV);
 311         // RC4 encryption
 312         rc4_init(&pDevice->SBox, pDevice->abyPRNG, pTransmitKey->uKeyLength + 3);
 313         rc4_encrypt(&pDevice->SBox, pbyPayloadHead, pbyPayloadHead, wPayloadSize+cbICVlen);
 314         //=======================================================================
 315     } else if (pTransmitKey->byCipherSuite == KEY_CTL_TKIP) {
 316         //=======================================================================
 317         //Append ICV after payload
 318         dwICV = CRCdwGetCrc32Ex(pbyPayloadHead, wPayloadSize, dwICV);//ICV(Payload)
 319         pdwICV = (u32 *)(pbyPayloadHead + wPayloadSize);
 320         // finally, we must invert dwCRC to get the correct answer
 321         *pdwICV = cpu_to_le32(~dwICV);
 322         // RC4 encryption
 323         rc4_init(&pDevice->SBox, pDevice->abyPRNG, TKIP_KEY_LEN);
 324         rc4_encrypt(&pDevice->SBox, pbyPayloadHead, pbyPayloadHead, wPayloadSize+cbICVlen);
 325         //=======================================================================
 326     }
 327 }
 328
 329 static __le16 vnt_time_stamp_off(struct vnt_private *priv, u16 rate)
 330 {
 331         return cpu_to_le16(wTimeStampOff[priv->byPreambleType % 2]
 332                                                         [rate % MAX_RATE]);
 333 }
 334
 335 /*byPktType : PK_TYPE_11A     0
 336              PK_TYPE_11B     1
 337              PK_TYPE_11GB    2
 338              PK_TYPE_11GA    3
 339 */
 340 static u32 s_uGetTxRsvTime(struct vnt_private *priv, u8 pkt_type,
 341         u32 frame_length, u16 rate, int need_ack)
 342 {
 343         u32 data_time, ack_time;
 344
 345         data_time = BBuGetFrameTime(priv->byPreambleType, pkt_type,
 346                                                         frame_length, rate);
 347
 348         if (pkt_type == PK_TYPE_11B)
 349                 ack_time = BBuGetFrameTime(priv->byPreambleType, pkt_type, 14,
 350                                                 (u16)priv->byTopCCKBasicRate);
 351         else
 352                 ack_time = BBuGetFrameTime(priv->byPreambleType, pkt_type, 14,
 353                                                 (u16)priv->byTopOFDMBasicRate);
 354
 355         if (need_ack)
 356                 return data_time + priv->uSIFS + ack_time;
 357
 358         return data_time;
 359 }
 360
 361 static __le16 vnt_rxtx_rsvtime_le16(struct vnt_private *priv, u8 pkt_type,
 362         u32 frame_length, u16 rate, int need_ack)
 363 {
 364         return cpu_to_le16((u16)s_uGetTxRsvTime(priv, pkt_type,
 365                 frame_length, rate, need_ack));
 366 }
 367
 368 //byFreqType: 0=>5GHZ 1=>2.4GHZ
 369 static __le16 s_uGetRTSCTSRsvTime(struct vnt_private *priv,
 370         u8 rsv_type, u8 pkt_type, u32 frame_lenght, u16 current_rate)
 371 {
 372         u32 rrv_time, rts_time, cts_time, ack_time, data_time;
 373
 374         rrv_time = rts_time = cts_time = ack_time = data_time = 0;
 375
 376         data_time = BBuGetFrameTime(priv->byPreambleType, pkt_type,
 377                                                 frame_lenght, current_rate);
 378
 379         if (rsv_type == 0) {
 380                 rts_time = BBuGetFrameTime(priv->byPreambleType,
 381                         pkt_type, 20, priv->byTopCCKBasicRate);
 382                 cts_time = ack_time = BBuGetFrameTime(priv->byPreambleType,
 383                         pkt_type, 14, priv->byTopCCKBasicRate);
 384         } else if (rsv_type == 1) {
 385                 rts_time = BBuGetFrameTime(priv->byPreambleType,
 386                         pkt_type, 20, priv->byTopCCKBasicRate);
 387                 cts_time = BBuGetFrameTime(priv->byPreambleType, pkt_type,
 388                         14, priv->byTopCCKBasicRate);
 389                 ack_time = BBuGetFrameTime(priv->byPreambleType, pkt_type,
 390                         14, priv->byTopOFDMBasicRate);
 391         } else if (rsv_type == 2) {
 392                 rts_time = BBuGetFrameTime(priv->byPreambleType, pkt_type,
 393                         20, priv->byTopOFDMBasicRate);
 394                 cts_time = ack_time = BBuGetFrameTime(priv->byPreambleType,
 395                         pkt_type, 14, priv->byTopOFDMBasicRate);
 396         } else if (rsv_type == 3) {
 397                 cts_time = BBuGetFrameTime(priv->byPreambleType, pkt_type,
 398                         14, priv->byTopCCKBasicRate);
 399                 ack_time = BBuGetFrameTime(priv->byPreambleType, pkt_type,
 400                         14, priv->byTopOFDMBasicRate);
 401
 402                 rrv_time = cts_time + ack_time + data_time + 2 * priv->uSIFS;
 403
 404                 return cpu_to_le16((u16)rrv_time);
 405         }
 406
 407         rrv_time = rts_time + cts_time + ack_time + data_time + 3 * priv->uSIFS;
 408
 409         return cpu_to_le16((u16)rrv_time);
 410 }
 411
 412 //byFreqType 0: 5GHz, 1:2.4Ghz
 413 static __le16 s_uGetDataDuration(struct vnt_private *pDevice,
 414                                         u8 byPktType, int bNeedAck)
 415 {
 416         u32 uAckTime = 0;
 417
 418         if (bNeedAck) {
 419                 if (byPktType == PK_TYPE_11B)
 420                         uAckTime = BBuGetFrameTime(pDevice->byPreambleType,
 421                                 byPktType, 14, pDevice->byTopCCKBasicRate);
 422                 else
 423                         uAckTime = BBuGetFrameTime(pDevice->byPreambleType,
 424                                 byPktType, 14, pDevice->byTopOFDMBasicRate);
 425                 return cpu_to_le16((u16)(pDevice->uSIFS + uAckTime));
 426         }
 427
 428         return 0;
 429 }
 430
 431 //byFreqType: 0=>5GHZ 1=>2.4GHZ
 432 static __le16 s_uGetRTSCTSDuration(struct vnt_private *pDevice, u8 byDurType,
 433         u32 cbFrameLength, u8 byPktType, u16 wRate, int bNeedAck,
 434         u8 byFBOption)
 435 {
 436         u32 uCTSTime = 0, uDurTime = 0;
 437
 438         switch (byDurType) {
 439         case RTSDUR_BB:
 440         case RTSDUR_BA:
 441         case RTSDUR_BA_F0:
 442         case RTSDUR_BA_F1:
 443                 uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType,
 444                         14, pDevice->byTopCCKBasicRate);
 445                 uDurTime = uCTSTime + 2 * pDevice->uSIFS +
 446                         s_uGetTxRsvTime(pDevice, byPktType,
 447                                                 cbFrameLength, wRate, bNeedAck);
 448                 break;
 449
 450         case RTSDUR_AA:
 451         case RTSDUR_AA_F0:
 452         case RTSDUR_AA_F1:
 453                 uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType,
 454                         14, pDevice->byTopOFDMBasicRate);
 455                 uDurTime = uCTSTime + 2 * pDevice->uSIFS +
 456                         s_uGetTxRsvTime(pDevice, byPktType,
 457                                                 cbFrameLength, wRate, bNeedAck);
 458                 break;
 459
 460         case CTSDUR_BA:
 461         case CTSDUR_BA_F0:
 462         case CTSDUR_BA_F1:
 463                 uDurTime = pDevice->uSIFS + s_uGetTxRsvTime(pDevice,
 464                                 byPktType, cbFrameLength, wRate, bNeedAck);
 465                 break;
 466
 467         default:
 468                 break;
 469         }
 470
 471         return cpu_to_le16((u16)uDurTime);
 472 }
 473
 474 static u16 vnt_rxtx_datahead_g(struct vnt_private *priv, u8 pkt_type, u16 rate,
 475                 struct vnt_tx_datahead_g *buf, u32 frame_len, int need_ack)
 476 {
 477         /* Get SignalField,ServiceField,Length */
 478         BBvCalculateParameter(priv, frame_len, rate, pkt_type, &buf->a);
 479         BBvCalculateParameter(priv, frame_len, priv->byTopCCKBasicRate,
 480                                                         PK_TYPE_11B, &buf->b);
 481
 482         /* Get Duration and TimeStamp */
 483         buf->duration_a = s_uGetDataDuration(priv, pkt_type, need_ack);
 484         buf->duration_b = s_uGetDataDuration(priv, PK_TYPE_11B, need_ack);
 485
 486         buf->time_stamp_off_a = vnt_time_stamp_off(priv, rate);
 487         buf->time_stamp_off_b = vnt_time_stamp_off(priv,
 488                                         priv->byTopCCKBasicRate);
 489
 490         return le16_to_cpu(buf->duration_a);
 491 }
 492
 493 static u16 vnt_rxtx_datahead_g_fb(struct vnt_private *priv, u8 pkt_type,
 494                 u16 rate, struct vnt_tx_datahead_g_fb *buf,
 495                 u32 frame_len, int need_ack)
 496 {
 497         /* Get SignalField,ServiceField,Length */
 498         BBvCalculateParameter(priv, frame_len, rate, pkt_type, &buf->a);
 499
 500         BBvCalculateParameter(priv, frame_len, priv->byTopCCKBasicRate,
 501                                                 PK_TYPE_11B, &buf->b);
 502
 503         /* Get Duration and TimeStamp */
 504         buf->duration_a = s_uGetDataDuration(priv, pkt_type, need_ack);
 505         buf->duration_b = s_uGetDataDuration(priv, PK_TYPE_11B, need_ack);
 506
 507         buf->duration_a_f0 = s_uGetDataDuration(priv, pkt_type, need_ack);
 508         buf->duration_a_f1 = s_uGetDataDuration(priv, pkt_type, need_ack);
 509
 510         buf->time_stamp_off_a = vnt_time_stamp_off(priv, rate);
 511         buf->time_stamp_off_b = vnt_time_stamp_off(priv,
 512                                                 priv->byTopCCKBasicRate);
 513
 514         return le16_to_cpu(buf->duration_a);
 515 }
 516
 517 static u16 vnt_rxtx_datahead_a_fb(struct vnt_private *priv, u8 pkt_type,
 518                 u16 rate, struct vnt_tx_datahead_a_fb *buf,
 519                 u32 frame_len, int need_ack)
 520 {
 521         /* Get SignalField,ServiceField,Length */
 522         BBvCalculateParameter(priv, frame_len, rate, pkt_type, &buf->a);
 523         /* Get Duration and TimeStampOff */
 524         buf->duration = s_uGetDataDuration(priv, pkt_type, need_ack);
 525
 526         buf->duration_f0 = s_uGetDataDuration(priv, pkt_type, need_ack);
 527         buf->duration_f1 = s_uGetDataDuration(priv, pkt_type, need_ack);
 528
 529         buf->time_stamp_off = vnt_time_stamp_off(priv, rate);
 530
 531         return le16_to_cpu(buf->duration);
 532 }
 533
 534 static u16 vnt_rxtx_datahead_ab(struct vnt_private *priv, u8 pkt_type,
 535                 u16 rate, struct vnt_tx_datahead_ab *buf,
 536                 u32 frame_len, int need_ack)
 537 {
 538         /* Get SignalField,ServiceField,Length */
 539         BBvCalculateParameter(priv, frame_len, rate, pkt_type, &buf->ab);
 540         /* Get Duration and TimeStampOff */
 541         buf->duration = s_uGetDataDuration(priv, pkt_type, need_ack);
 542
 543         buf->time_stamp_off = vnt_time_stamp_off(priv, rate);
 544
 545         return le16_to_cpu(buf->duration);
 546 }
 547
 548 static int vnt_fill_ieee80211_rts(struct vnt_private *priv,
 549         struct ieee80211_rts *rts, struct ethhdr *eth_hdr,
 550                 __le16 duration)
 551 {
 552         rts->duration = duration;
 553         rts->frame_control =
 554                 cpu_to_le16(IEEE80211_FTYPE_CTL | IEEE80211_STYPE_RTS);
 555
 556         if (priv->op_mode == NL80211_IFTYPE_ADHOC ||
 557                                 priv->op_mode == NL80211_IFTYPE_AP)
 558                 memcpy(rts->ra, eth_hdr->h_dest, ETH_ALEN);
 559         else
 560                 memcpy(rts->ra, priv->abyBSSID, ETH_ALEN);
 561
 562         if (priv->op_mode == NL80211_IFTYPE_AP)
 563                 memcpy(rts->ta, priv->abyBSSID, ETH_ALEN);
 564         else
 565                 memcpy(rts->ta, eth_hdr->h_source, ETH_ALEN);
 566
 567         return 0;
 568 }
 569
 570 static u16 vnt_rxtx_rts_g_head(struct vnt_private *priv,
 571         struct vnt_rts_g *buf, struct ethhdr *eth_hdr,
 572         u8 pkt_type, u32 frame_len, int need_ack,
 573         u16 current_rate, u8 fb_option)
 574 {
 575         u16 rts_frame_len = 20;
 576
 577         BBvCalculateParameter(priv, rts_frame_len, priv->byTopCCKBasicRate,
 578                 PK_TYPE_11B, &buf->b);
 579         BBvCalculateParameter(priv, rts_frame_len,
 580                 priv->byTopOFDMBasicRate, pkt_type, &buf->a);
 581
 582         buf->duration_bb = s_uGetRTSCTSDuration(priv, RTSDUR_BB, frame_len,
 583                 PK_TYPE_11B, priv->byTopCCKBasicRate, need_ack, fb_option);
 584         buf->duration_aa = s_uGetRTSCTSDuration(priv, RTSDUR_AA, frame_len,
 585                 pkt_type, current_rate, need_ack, fb_option);
 586         buf->duration_ba = s_uGetRTSCTSDuration(priv, RTSDUR_BA, frame_len,
 587                 pkt_type, current_rate, need_ack, fb_option);
 588
 589         vnt_fill_ieee80211_rts(priv, &buf->data, eth_hdr, buf->duration_aa);
 590
 591         return vnt_rxtx_datahead_g(priv, pkt_type, current_rate,
 592                         &buf->data_head, frame_len, need_ack);
 593 }
 594
 595 static u16 vnt_rxtx_rts_g_fb_head(struct vnt_private *priv,
 596         struct vnt_rts_g_fb *buf, struct ethhdr *eth_hdr,
 597         u8 pkt_type, u32 frame_len, int need_ack,
 598         u16 current_rate, u8 fb_option)
 599 {
 600         u16 rts_frame_len = 20;
 601
 602         BBvCalculateParameter(priv, rts_frame_len, priv->byTopCCKBasicRate,
 603                 PK_TYPE_11B, &buf->b);
 604         BBvCalculateParameter(priv, rts_frame_len,
 605                 priv->byTopOFDMBasicRate, pkt_type, &buf->a);
 606
 607
 608         buf->duration_bb = s_uGetRTSCTSDuration(priv, RTSDUR_BB, frame_len,
 609                 PK_TYPE_11B, priv->byTopCCKBasicRate, need_ack, fb_option);
 610         buf->duration_aa = s_uGetRTSCTSDuration(priv, RTSDUR_AA, frame_len,
 611                 pkt_type, current_rate, need_ack, fb_option);
 612         buf->duration_ba = s_uGetRTSCTSDuration(priv, RTSDUR_BA, frame_len,
 613                 pkt_type, current_rate, need_ack, fb_option);
 614
 615
 616         buf->rts_duration_ba_f0 = s_uGetRTSCTSDuration(priv, RTSDUR_BA_F0,
 617                 frame_len, pkt_type, priv->tx_rate_fb0, need_ack, fb_option);
 618         buf->rts_duration_aa_f0 = s_uGetRTSCTSDuration(priv, RTSDUR_AA_F0,
 619                 frame_len, pkt_type, priv->tx_rate_fb0, need_ack, fb_option);
 620         buf->rts_duration_ba_f1 = s_uGetRTSCTSDuration(priv, RTSDUR_BA_F1,
 621                 frame_len, pkt_type, priv->tx_rate_fb1, need_ack, fb_option);
 622         buf->rts_duration_aa_f1 = s_uGetRTSCTSDuration(priv, RTSDUR_AA_F1,
 623                 frame_len, pkt_type, priv->tx_rate_fb1, need_ack, fb_option);
 624
 625         vnt_fill_ieee80211_rts(priv, &buf->data, eth_hdr, buf->duration_aa);
 626
 627         return vnt_rxtx_datahead_g_fb(priv, pkt_type, current_rate,
 628                         &buf->data_head, frame_len, need_ack);
 629 }
 630
 631 static u16 vnt_rxtx_rts_ab_head(struct vnt_private *priv,
 632         struct vnt_rts_ab *buf, struct ethhdr *eth_hdr,
 633         u8 pkt_type, u32 frame_len, int need_ack,
 634         u16 current_rate, u8 fb_option)
 635 {
 636         u16 rts_frame_len = 20;
 637
 638         BBvCalculateParameter(priv, rts_frame_len,
 639                 priv->byTopOFDMBasicRate, pkt_type, &buf->ab);
 640
 641         buf->duration = s_uGetRTSCTSDuration(priv, RTSDUR_AA, frame_len,
 642                 pkt_type, current_rate, need_ack, fb_option);
 643
 644         vnt_fill_ieee80211_rts(priv, &buf->data, eth_hdr, buf->duration);
 645
 646         return vnt_rxtx_datahead_ab(priv, pkt_type, current_rate,
 647                         &buf->data_head, frame_len, need_ack);
 648 }
 649
 650 static u16 vnt_rxtx_rts_a_fb_head(struct vnt_private *priv,
 651         struct vnt_rts_a_fb *buf, struct ethhdr *eth_hdr,
 652         u8 pkt_type, u32 frame_len, int need_ack,
 653         u16 current_rate, u8 fb_option)
 654 {
 655         u16 rts_frame_len = 20;
 656
 657         BBvCalculateParameter(priv, rts_frame_len,
 658                 priv->byTopOFDMBasicRate, pkt_type, &buf->a);
 659
 660         buf->duration = s_uGetRTSCTSDuration(priv, RTSDUR_AA, frame_len,
 661                 pkt_type, current_rate, need_ack, fb_option);
 662
 663         buf->rts_duration_f0 = s_uGetRTSCTSDuration(priv, RTSDUR_AA_F0,
 664                 frame_len, pkt_type, priv->tx_rate_fb0, need_ack, fb_option);
 665
 666         buf->rts_duration_f1 = s_uGetRTSCTSDuration(priv, RTSDUR_AA_F1,
 667                 frame_len, pkt_type, priv->tx_rate_fb1, need_ack, fb_option);
 668
 669         vnt_fill_ieee80211_rts(priv, &buf->data, eth_hdr, buf->duration);
 670
 671         return vnt_rxtx_datahead_a_fb(priv, pkt_type, current_rate,
 672                         &buf->data_head, frame_len, need_ack);
 673 }
 674
 675 static u16 s_vFillRTSHead(struct vnt_private *pDevice, u8 byPktType,
 676         union vnt_tx_data_head *head, u32 cbFrameLength, int bNeedAck,
 677         struct ethhdr *psEthHeader, u16 wCurrentRate, u8 byFBOption)
 678 {
 679
 680         if (!head)
 681                 return 0;
 682
 683         /* Note: So far RTSHead doesn't appear in ATIM
 684         *       & Beacom DMA, so we don't need to take them
 685         *       into account.
 686         *       Otherwise, we need to modified codes for them.
 687         */
 688         switch (byPktType) {
 689         case PK_TYPE_11GB:
 690         case PK_TYPE_11GA:
 691                 if (byFBOption == AUTO_FB_NONE)
 692                         return vnt_rxtx_rts_g_head(pDevice, &head->rts_g,
 693                                 psEthHeader, byPktType, cbFrameLength,
 694                                 bNeedAck, wCurrentRate, byFBOption);
 695                 else
 696                         return vnt_rxtx_rts_g_fb_head(pDevice, &head->rts_g_fb,
 697                                 psEthHeader, byPktType, cbFrameLength,
 698                                 bNeedAck, wCurrentRate, byFBOption);
 699                 break;
 700         case PK_TYPE_11A:
 701                 if (byFBOption) {
 702                         return vnt_rxtx_rts_a_fb_head(pDevice, &head->rts_a_fb,
 703                                 psEthHeader, byPktType, cbFrameLength,
 704                                 bNeedAck, wCurrentRate, byFBOption);
 705                         break;
 706                 }
 707         case PK_TYPE_11B:
 708                 return vnt_rxtx_rts_ab_head(pDevice, &head->rts_ab,
 709                         psEthHeader, byPktType, cbFrameLength,
 710                         bNeedAck, wCurrentRate, byFBOption);
 711         }
 712
 713         return 0;
 714 }
 715
 716 static u16 s_vFillCTSHead(struct vnt_private *pDevice,
 717         u8 byPktType, union vnt_tx_data_head *head, u32 cbFrameLength,
 718         int bNeedAck, u16 wCurrentRate, u8 byFBOption)
 719 {
 720         u32 uCTSFrameLen = 14;
 721
 722         if (!head)
 723                 return 0;
 724
 725         if (byFBOption != AUTO_FB_NONE) {
 726                 /* Auto Fall back */
 727                 struct vnt_cts_fb *pBuf = &head->cts_g_fb;
 728                 /* Get SignalField,ServiceField,Length */
 729                 BBvCalculateParameter(pDevice, uCTSFrameLen,
 730                         pDevice->byTopCCKBasicRate, PK_TYPE_11B, &pBuf->b);
 731                 pBuf->duration_ba = s_uGetRTSCTSDuration(pDevice, CTSDUR_BA,
 732                         cbFrameLength, byPktType,
 733                         wCurrentRate, bNeedAck, byFBOption);
 734                 /* Get CTSDuration_ba_f0 */
 735                 pBuf->cts_duration_ba_f0 = s_uGetRTSCTSDuration(pDevice,
 736                         CTSDUR_BA_F0, cbFrameLength, byPktType,
 737                         pDevice->tx_rate_fb0, bNeedAck, byFBOption);
 738                 /* Get CTSDuration_ba_f1 */
 739                 pBuf->cts_duration_ba_f1 = s_uGetRTSCTSDuration(pDevice,
 740                         CTSDUR_BA_F1, cbFrameLength, byPktType,
 741                         pDevice->tx_rate_fb1, bNeedAck, byFBOption);
 742                 /* Get CTS Frame body */
 743                 pBuf->data.duration = pBuf->duration_ba;
 744                 pBuf->data.frame_control =
 745                         cpu_to_le16(IEEE80211_FTYPE_CTL | IEEE80211_STYPE_CTS);
 746
 747                 memcpy(pBuf->data.ra, pDevice->abyCurrentNetAddr, ETH_ALEN);
 748
 749                 return vnt_rxtx_datahead_g_fb(pDevice, byPktType, wCurrentRate,
 750                                 &pBuf->data_head, cbFrameLength, bNeedAck);
 751         } else {
 752                 struct vnt_cts *pBuf = &head->cts_g;
 753                 /* Get SignalField,ServiceField,Length */
 754                 BBvCalculateParameter(pDevice, uCTSFrameLen,
 755                         pDevice->byTopCCKBasicRate, PK_TYPE_11B, &pBuf->b);
 756                 /* Get CTSDuration_ba */
 757                 pBuf->duration_ba = s_uGetRTSCTSDuration(pDevice,
 758                         CTSDUR_BA, cbFrameLength, byPktType,
 759                         wCurrentRate, bNeedAck, byFBOption);
 760                 /*Get CTS Frame body*/
 761                 pBuf->data.duration = pBuf->duration_ba;
 762                 pBuf->data.frame_control =
 763                         cpu_to_le16(IEEE80211_FTYPE_CTL | IEEE80211_STYPE_CTS);
 764
 765                 memcpy(pBuf->data.ra, pDevice->abyCurrentNetAddr, ETH_ALEN);
 766
 767                 return vnt_rxtx_datahead_g(pDevice, byPktType, wCurrentRate,
 768                                 &pBuf->data_head, cbFrameLength, bNeedAck);
 769         }
 770
 771         return 0;
 772 }
 773
 774 /*+
 775  *
 776  * Description:
 777  *      Generate FIFO control for MAC & Baseband controller
 778  *
 779  * Parameters:
 780  *  In:
 781  *      pDevice         - Pointer to adpater
 782  *      pTxDataHead     - Transmit Data Buffer
 783  *      pTxBufHead      - pTxBufHead
 784  *      pvRrvTime        - pvRrvTime
 785  *      pvRTS            - RTS Buffer
 786  *      pCTS            - CTS Buffer
 787  *      cbFrameSize     - Transmit Data Length (Hdr+Payload+FCS)
 788  *      bNeedACK        - If need ACK
 789  *  Out:
 790  *      none
 791  *
 792  * Return Value: none
 793  *
 794 -*/
 795
 796 static u16 s_vGenerateTxParameter(struct vnt_private *pDevice,
 797         u8 byPktType, u16 wCurrentRate, struct vnt_tx_buffer *tx_buffer,
 798         struct vnt_mic_hdr **mic_hdr, u32 need_mic, u32 cbFrameSize,
 799         int bNeedACK, struct ethhdr *psEthHeader, bool need_rts)
 800 {
 801         struct vnt_tx_fifo_head *pFifoHead = &tx_buffer->fifo_head;
 802         union vnt_tx_data_head *head = NULL;
 803         u16 wFifoCtl;
 804         u8 byFBOption = AUTO_FB_NONE;
 805
 806         pFifoHead->current_rate = cpu_to_le16(wCurrentRate);
 807         wFifoCtl = pFifoHead->wFIFOCtl;
 808
 809         if (wFifoCtl & FIFOCTL_AUTO_FB_0)
 810                 byFBOption = AUTO_FB_0;
 811         else if (wFifoCtl & FIFOCTL_AUTO_FB_1)
 812                 byFBOption = AUTO_FB_1;
 813
 814         if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {
 815                 if (need_rts) {
 816                         struct vnt_rrv_time_rts *pBuf =
 817                                         &tx_buffer->tx_head.tx_rts.rts;
 818
 819                         pBuf->rts_rrv_time_aa = s_uGetRTSCTSRsvTime(pDevice, 2,
 820                                         byPktType, cbFrameSize, wCurrentRate);
 821                         pBuf->rts_rrv_time_ba = s_uGetRTSCTSRsvTime(pDevice, 1,
 822                                         byPktType, cbFrameSize, wCurrentRate);
 823                         pBuf->rts_rrv_time_bb = s_uGetRTSCTSRsvTime(pDevice, 0,
 824                                 byPktType, cbFrameSize, wCurrentRate);
 825
 826                         pBuf->rrv_time_a = vnt_rxtx_rsvtime_le16(pDevice,
 827                                 byPktType, cbFrameSize, wCurrentRate, bNeedACK);
 828                         pBuf->rrv_time_b = vnt_rxtx_rsvtime_le16(pDevice,
 829                                         PK_TYPE_11B, cbFrameSize,
 830                                         pDevice->byTopCCKBasicRate, bNeedACK);
 831
 832                         if (need_mic) {
 833                                 *mic_hdr = &tx_buffer->
 834                                                 tx_head.tx_rts.tx.mic.hdr;
 835                                 head = &tx_buffer->tx_head.tx_rts.tx.mic.head;
 836                         } else {
 837                                 head = &tx_buffer->tx_head.tx_rts.tx.head;
 838                         }
 839
 840                         /* Fill RTS */
 841                         return s_vFillRTSHead(pDevice, byPktType, head,
 842                                         cbFrameSize, bNeedACK, psEthHeader,
 843                                                 wCurrentRate, byFBOption);
 844
 845                 } else {
 846                         struct vnt_rrv_time_cts *pBuf = &tx_buffer->
 847                                                         tx_head.tx_cts.cts;
 848
 849                         pBuf->rrv_time_a = vnt_rxtx_rsvtime_le16(pDevice,
 850                                 byPktType, cbFrameSize, wCurrentRate, bNeedACK);
 851                         pBuf->rrv_time_b = vnt_rxtx_rsvtime_le16(pDevice,
 852                                 PK_TYPE_11B, cbFrameSize,
 853                                         pDevice->byTopCCKBasicRate, bNeedACK);
 854
 855                         pBuf->cts_rrv_time_ba = s_uGetRTSCTSRsvTime(pDevice, 3,
 856                                         byPktType, cbFrameSize, wCurrentRate);
 857
 858                         if (need_mic) {
 859                                 *mic_hdr = &tx_buffer->
 860                                                 tx_head.tx_cts.tx.mic.hdr;
 861                                 head = &tx_buffer->tx_head.tx_cts.tx.mic.head;
 862                         } else {
 863                                 head = &tx_buffer->tx_head.tx_cts.tx.head;
 864                         }
 865
 866                         /* Fill CTS */
 867                         return s_vFillCTSHead(pDevice, byPktType,
 868                                 head, cbFrameSize, bNeedACK, wCurrentRate,
 869                                         byFBOption);
 870                 }
 871         } else if (byPktType == PK_TYPE_11A) {
 872                 if (need_mic) {
 873                         *mic_hdr = &tx_buffer->tx_head.tx_ab.tx.mic.hdr;
 874                         head = &tx_buffer->tx_head.tx_ab.tx.mic.head;
 875                 } else {
 876                         head = &tx_buffer->tx_head.tx_ab.tx.head;
 877                 }
 878
 879                 if (need_rts) {
 880                         struct vnt_rrv_time_ab *pBuf = &tx_buffer->
 881                                                         tx_head.tx_ab.ab;
 882
 883                         pBuf->rts_rrv_time = s_uGetRTSCTSRsvTime(pDevice, 2,
 884                                 byPktType, cbFrameSize, wCurrentRate);
 885
 886                         pBuf->rrv_time = vnt_rxtx_rsvtime_le16(pDevice,
 887                                 byPktType, cbFrameSize, wCurrentRate, bNeedACK);
 888
 889                         /* Fill RTS */
 890                         return s_vFillRTSHead(pDevice, byPktType, head,
 891                                 cbFrameSize, bNeedACK, psEthHeader,
 892                                         wCurrentRate, byFBOption);
 893                 } else {
 894                         struct vnt_rrv_time_ab *pBuf = &tx_buffer->
 895                                                         tx_head.tx_ab.ab;
 896
 897                         pBuf->rrv_time = vnt_rxtx_rsvtime_le16(pDevice,
 898                                 PK_TYPE_11A, cbFrameSize,
 899                                         wCurrentRate, bNeedACK);
 900
 901                         return vnt_rxtx_datahead_a_fb(pDevice, byPktType,
 902                                 wCurrentRate, &head->data_head_a_fb,
 903                                                 cbFrameSize, bNeedACK);
 904                 }
 905         } else if (byPktType == PK_TYPE_11B) {
 906                 if (need_mic) {
 907                         *mic_hdr = &tx_buffer->tx_head.tx_ab.tx.mic.hdr;
 908                         head = &tx_buffer->tx_head.tx_ab.tx.mic.head;
 909                 } else {
 910                         head = &tx_buffer->tx_head.tx_ab.tx.head;
 911                 }
 912
 913                 if (need_rts) {
 914                         struct vnt_rrv_time_ab *pBuf = &tx_buffer->
 915                                                         tx_head.tx_ab.ab;
 916
 917                         pBuf->rts_rrv_time = s_uGetRTSCTSRsvTime(pDevice, 0,
 918                                 byPktType, cbFrameSize, wCurrentRate);
 919
 920                         pBuf->rrv_time = vnt_rxtx_rsvtime_le16(pDevice,
 921                                 PK_TYPE_11B, cbFrameSize, wCurrentRate,
 922                                                                 bNeedACK);
 923
 924                         /* Fill RTS */
 925                         return s_vFillRTSHead(pDevice, byPktType, head,
 926                                 cbFrameSize,
 927                         bNeedACK, psEthHeader, wCurrentRate, byFBOption);
 928                 } else {
 929                         struct vnt_rrv_time_ab *pBuf = &tx_buffer->
 930                                                         tx_head.tx_ab.ab;
 931
 932                         pBuf->rrv_time = vnt_rxtx_rsvtime_le16(pDevice,
 933                                 PK_TYPE_11B, cbFrameSize,
 934                                         wCurrentRate, bNeedACK);
 935
 936                         return vnt_rxtx_datahead_ab(pDevice, byPktType,
 937                                 wCurrentRate, &head->data_head_ab,
 938                                         cbFrameSize, bNeedACK);
 939                 }
 940         }
 941
 942         return 0;
 943 }
 944 /*
 945     u8 * pbyBuffer,//point to pTxBufHead
 946     u16  wFragType,//00:Non-Frag, 01:Start, 02:Mid, 03:Last
 947     unsigned int  cbFragmentSize,//Hdr+payoad+FCS
 948 */
 949
 950 static int s_bPacketToWirelessUsb(struct vnt_private *pDevice, u8 byPktType,
 951         struct vnt_tx_buffer *tx_buffer, int bNeedEncryption,
 952         u32 uSkbPacketLen, struct ethhdr *psEthHeader,
 953         u8 *pPacket, PSKeyItem pTransmitKey, u32 uNodeIndex, u16 wCurrentRate,
 954         u32 *pcbHeaderLen, u32 *pcbTotalLen)
 955 {
 956         struct vnt_tx_fifo_head *pTxBufHead = &tx_buffer->fifo_head;
 957         u32 cbFrameSize, cbFrameBodySize;
 958         u32 cb802_1_H_len;
 959         u32 cbIVlen = 0, cbICVlen = 0, cbMIClen = 0, cbMACHdLen = 0;
 960         u32 cbFCSlen = 4, cbMICHDR = 0;
 961         int bNeedACK;
 962         bool bRTS = false;
 963         u8 *pbyType, *pbyMacHdr, *pbyIVHead, *pbyPayloadHead, *pbyTxBufferAddr;
 964         u8 abySNAP_RFC1042[ETH_ALEN] = {0xAA, 0xAA, 0x03, 0x00, 0x00, 0x00};
 965         u8 abySNAP_Bridgetunnel[ETH_ALEN]
 966                 = {0xAA, 0xAA, 0x03, 0x00, 0x00, 0xF8};
 967         u32 uDuration;
 968         u32 cbHeaderLength = 0, uPadding = 0;
 969         struct vnt_mic_hdr *pMICHDR;
 970         u8 byFBOption = AUTO_FB_NONE, byFragType;
 971         u16 wTxBufSize;
 972         u32 dwMICKey0, dwMICKey1, dwMIC_Priority;
 973         u32 *pdwMIC_L, *pdwMIC_R;
 974         int bSoftWEP = false;
 975
 976         pMICHDR = NULL;
 977
 978         if (bNeedEncryption && pTransmitKey->pvKeyTable) {
 979                 if (((PSKeyTable)pTransmitKey->pvKeyTable)->bSoftWEP == true)
 980                         bSoftWEP = true; /* WEP 256 */
 981         }
 982
 983         /* Get pkt type */
 984         if (ntohs(psEthHeader->h_proto) > ETH_DATA_LEN)
 985                 cb802_1_H_len = 8;
 986         else
 987                 cb802_1_H_len = 0;
 988
 989     cbFrameBodySize = uSkbPacketLen - ETH_HLEN + cb802_1_H_len;
 990
 991     //Set packet type
 992     pTxBufHead->wFIFOCtl |= (u16)(byPktType<<8);
 993
 994         if (pDevice->op_mode == NL80211_IFTYPE_ADHOC ||
 995                         pDevice->op_mode == NL80211_IFTYPE_AP) {
 996                 if (is_multicast_ether_addr(psEthHeader->h_dest)) {
 997                         bNeedACK = false;
 998                         pTxBufHead->wFIFOCtl =
 999                                 pTxBufHead->wFIFOCtl & (~FIFOCTL_NEEDACK);
1000                 } else {
1001                         bNeedACK = true;
1002                         pTxBufHead->wFIFOCtl |= FIFOCTL_NEEDACK;
1003                 }
1004         } else {
1005                 /* MSDUs in Infra mode always need ACK */
1006                 bNeedACK = true;
1007                 pTxBufHead->wFIFOCtl |= FIFOCTL_NEEDACK;
1008         }
1009
1010     pTxBufHead->time_stamp = cpu_to_le16(DEFAULT_MSDU_LIFETIME_RES_64us);
1011
1012     //Set FRAGCTL_MACHDCNT
1013         cbMACHdLen = WLAN_HDR_ADDR3_LEN;
1014
1015     pTxBufHead->wFragCtl |= (u16)(cbMACHdLen << 10);
1016
1017     //Set FIFOCTL_GrpAckPolicy
1018     if (pDevice->bGrpAckPolicy == true) {//0000 0100 0000 0000
1019         pTxBufHead->wFIFOCtl |= FIFOCTL_GRPACK;
1020     }
1021
1022         /* Set Auto Fallback Ctl */
1023         if (wCurrentRate >= RATE_18M) {
1024                 if (pDevice->byAutoFBCtrl == AUTO_FB_0) {
1025                         pTxBufHead->wFIFOCtl |= FIFOCTL_AUTO_FB_0;
1026
1027                         pDevice->tx_rate_fb0 =
1028                                 wFB_Opt0[FB_RATE0][wCurrentRate - RATE_18M];
1029                         pDevice->tx_rate_fb1 =
1030                                 wFB_Opt0[FB_RATE1][wCurrentRate - RATE_18M];
1031
1032                         byFBOption = AUTO_FB_0;
1033                 } else if (pDevice->byAutoFBCtrl == AUTO_FB_1) {
1034                         pTxBufHead->wFIFOCtl |= FIFOCTL_AUTO_FB_1;
1035                         pDevice->tx_rate_fb0 =
1036                                 wFB_Opt1[FB_RATE0][wCurrentRate - RATE_18M];
1037                         pDevice->tx_rate_fb1 =
1038                                 wFB_Opt1[FB_RATE1][wCurrentRate - RATE_18M];
1039
1040                         byFBOption = AUTO_FB_1;
1041                 }
1042         }
1043
1044     if (bSoftWEP != true) {
1045         if ((bNeedEncryption) && (pTransmitKey != NULL))  { //WEP enabled
1046             if (pTransmitKey->byCipherSuite == KEY_CTL_WEP) { //WEP40 or WEP104
1047                 pTxBufHead->wFragCtl |= FRAGCTL_LEGACY;
1048             }
1049             if (pTransmitKey->byCipherSuite == KEY_CTL_TKIP) {
1050                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Tx Set wFragCtl == FRAGCTL_TKIP\n");
1051                 pTxBufHead->wFragCtl |= FRAGCTL_TKIP;
1052             }
1053             else if (pTransmitKey->byCipherSuite == KEY_CTL_CCMP) { //CCMP
1054                 pTxBufHead->wFragCtl |= FRAGCTL_AES;
1055             }
1056         }
1057     }
1058
1059     if ((bNeedEncryption) && (pTransmitKey != NULL))  {
1060         if (pTransmitKey->byCipherSuite == KEY_CTL_WEP) {
1061             cbIVlen = 4;
1062             cbICVlen = 4;
1063         }
1064         else if (pTransmitKey->byCipherSuite == KEY_CTL_TKIP) {
1065             cbIVlen = 8;//IV+ExtIV
1066             cbMIClen = 8;
1067             cbICVlen = 4;
1068         }
1069         if (pTransmitKey->byCipherSuite == KEY_CTL_CCMP) {
1070             cbIVlen = 8;//RSN Header
1071             cbICVlen = 8;//MIC
1072             cbMICHDR = sizeof(struct vnt_mic_hdr);
1073         }
1074         if (bSoftWEP == false) {
1075             //MAC Header should be padding 0 to DW alignment.
1076             uPadding = 4 - (cbMACHdLen%4);
1077             uPadding %= 4;
1078         }
1079     }
1080
1081     cbFrameSize = cbMACHdLen + cbIVlen + (cbFrameBodySize + cbMIClen) + cbICVlen + cbFCSlen;
1082
1083     if ( (bNeedACK == false) ||(cbFrameSize < pDevice->wRTSThreshold) ) {
1084         bRTS = false;
1085     } else {
1086         bRTS = true;
1087         pTxBufHead->wFIFOCtl |= (FIFOCTL_RTS | FIFOCTL_LRETRY);
1088     }
1089
1090     pbyTxBufferAddr = (u8 *) &(pTxBufHead->adwTxKey[0]);
1091         wTxBufSize = sizeof(struct vnt_tx_fifo_head);
1092
1093     if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {//802.11g packet
1094         if (byFBOption == AUTO_FB_NONE) {
1095             if (bRTS == true) {//RTS_need
1096                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_rts) +
1097                         cbMICHDR + sizeof(struct vnt_rts_g);
1098             }
1099             else { //RTS_needless
1100                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_cts) +
1101                         cbMICHDR + sizeof(struct vnt_cts);
1102             }
1103         } else {
1104             // Auto Fall Back
1105             if (bRTS == true) {//RTS_need
1106                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_rts) +
1107                         cbMICHDR + sizeof(struct vnt_rts_g_fb);
1108             }
1109             else if (bRTS == false) { //RTS_needless
1110                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_cts) +
1111                                 cbMICHDR + sizeof(struct vnt_cts_fb);
1112             }
1113         } // Auto Fall Back
1114     }
1115     else {//802.11a/b packet
1116         if (byFBOption == AUTO_FB_NONE) {
1117             if (bRTS == true) {//RTS_need
1118                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1119                         cbMICHDR + sizeof(struct vnt_rts_ab);
1120             }
1121             else if (bRTS == false) { //RTS_needless, no MICHDR
1122                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1123                                 cbMICHDR + sizeof(struct vnt_tx_datahead_ab);
1124             }
1125         } else {
1126             // Auto Fall Back
1127             if (bRTS == true) {//RTS_need
1128                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1129                         cbMICHDR + sizeof(struct vnt_rts_a_fb);
1130             }
1131             else if (bRTS == false) { //RTS_needless
1132                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1133                         cbMICHDR + sizeof(struct vnt_tx_datahead_a_fb);
1134             }
1135         } // Auto Fall Back
1136     }
1137
1138     pbyMacHdr = (u8 *)(pbyTxBufferAddr + cbHeaderLength);
1139     pbyIVHead = (u8 *)(pbyMacHdr + cbMACHdLen + uPadding);
1140     pbyPayloadHead = (u8 *)(pbyMacHdr + cbMACHdLen + uPadding + cbIVlen);
1141
1142     //=========================
1143     //    No Fragmentation
1144     //=========================
1145     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"No Fragmentation...\n");
1146     byFragType = FRAGCTL_NONFRAG;
1147     //pTxBufHead = (PSTxBufHead) &(pTxBufHead->adwTxKey[0]);
1148
1149         /* Fill FIFO, RrvTime, RTS and CTS */
1150         uDuration = s_vGenerateTxParameter(pDevice, byPktType, wCurrentRate,
1151                         tx_buffer, &pMICHDR, cbMICHDR,
1152                         cbFrameSize, bNeedACK, psEthHeader, bRTS);
1153
1154     // Generate TX MAC Header
1155     s_vGenerateMACHeader(pDevice, pbyMacHdr, (u16)uDuration, psEthHeader, bNeedEncryption,
1156                 byFragType, 0);
1157
1158     if (bNeedEncryption == true) {
1159         //Fill TXKEY
1160         s_vFillTxKey(pDevice, pTxBufHead, pbyIVHead, pTransmitKey,
1161                 pbyMacHdr, (u16)cbFrameBodySize, pMICHDR);
1162     }
1163
1164         /* 802.1H */
1165         if (ntohs(psEthHeader->h_proto) > ETH_DATA_LEN) {
1166                 if ((psEthHeader->h_proto == cpu_to_be16(ETH_P_IPX)) ||
1167                         (psEthHeader->h_proto == cpu_to_le16(0xF380)))
1168                         memcpy((u8 *) (pbyPayloadHead),
1169                                         abySNAP_Bridgetunnel, 6);
1170                 else
1171                         memcpy((u8 *) (pbyPayloadHead), &abySNAP_RFC1042[0], 6);
1172
1173                 pbyType = (u8 *) (pbyPayloadHead + 6);
1174
1175                 memcpy(pbyType, &(psEthHeader->h_proto), sizeof(u16));
1176         }
1177
1178     if (pPacket != NULL) {
1179         // Copy the Packet into a tx Buffer
1180         memcpy((pbyPayloadHead + cb802_1_H_len),
1181                  (pPacket + ETH_HLEN),
1182                  uSkbPacketLen - ETH_HLEN
1183                  );
1184
1185     } else {
1186         // while bRelayPacketSend psEthHeader is point to header+payload
1187         memcpy((pbyPayloadHead + cb802_1_H_len), ((u8 *)psEthHeader) + ETH_HLEN, uSkbPacketLen - ETH_HLEN);
1188     }
1189
1190     if ((bNeedEncryption == true) && (pTransmitKey != NULL) && (pTransmitKey->byCipherSuite == KEY_CTL_TKIP)) {
1191
1192         ///////////////////////////////////////////////////////////////////
1193
1194         if (pDevice->vnt_mgmt.eAuthenMode == WMAC_AUTH_WPANONE) {
1195                 dwMICKey0 = *(u32 *)(&pTransmitKey->abyKey[16]);
1196                 dwMICKey1 = *(u32 *)(&pTransmitKey->abyKey[20]);
1197         }
1198         else if ((pTransmitKey->dwKeyIndex & AUTHENTICATOR_KEY) != 0) {
1199             dwMICKey0 = *(u32 *)(&pTransmitKey->abyKey[16]);
1200             dwMICKey1 = *(u32 *)(&pTransmitKey->abyKey[20]);
1201         }
1202         else {
1203             dwMICKey0 = *(u32 *)(&pTransmitKey->abyKey[24]);
1204             dwMICKey1 = *(u32 *)(&pTransmitKey->abyKey[28]);
1205         }
1206         // DO Software Michael
1207         MIC_vInit(dwMICKey0, dwMICKey1);
1208         MIC_vAppend((u8 *)&(psEthHeader->h_dest[0]), 12);
1209         dwMIC_Priority = 0;
1210         MIC_vAppend((u8 *)&dwMIC_Priority, 4);
1211         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"MIC KEY: %X, %X\n",
1212                 dwMICKey0, dwMICKey1);
1213
1214         ///////////////////////////////////////////////////////////////////
1215
1216         //DBG_PRN_GRP12(("Length:%d, %d\n", cbFrameBodySize, uFromHDtoPLDLength));
1217         //for (ii = 0; ii < cbFrameBodySize; ii++) {
1218         //    DBG_PRN_GRP12(("%02x ", *((u8 *)((pbyPayloadHead + cb802_1_H_len) + ii))));
1219         //}
1220         //DBG_PRN_GRP12(("\n\n\n"));
1221
1222         MIC_vAppend(pbyPayloadHead, cbFrameBodySize);
1223
1224         pdwMIC_L = (u32 *)(pbyPayloadHead + cbFrameBodySize);
1225         pdwMIC_R = (u32 *)(pbyPayloadHead + cbFrameBodySize + 4);
1226
1227         MIC_vGetMIC(pdwMIC_L, pdwMIC_R);
1228         MIC_vUnInit();
1229
1230         if (pDevice->bTxMICFail == true) {
1231             *pdwMIC_L = 0;
1232             *pdwMIC_R = 0;
1233             pDevice->bTxMICFail = false;
1234         }
1235         //DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"uLength: %d, %d\n", uLength, cbFrameBodySize);
1236         //DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"cbReqCount:%d, %d, %d, %d\n", cbReqCount, cbHeaderLength, uPadding, cbIVlen);
1237         //DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"MIC:%lX, %lX\n", *pdwMIC_L, *pdwMIC_R);
1238     }
1239
1240     if (bSoftWEP == true) {
1241
1242         s_vSWencryption(pDevice, pTransmitKey, (pbyPayloadHead), (u16)(cbFrameBodySize + cbMIClen));
1243
1244     } else if (  ((pDevice->eEncryptionStatus == Ndis802_11Encryption1Enabled) && (bNeedEncryption == true))  ||
1245           ((pDevice->eEncryptionStatus == Ndis802_11Encryption2Enabled) && (bNeedEncryption == true))   ||
1246           ((pDevice->eEncryptionStatus == Ndis802_11Encryption3Enabled) && (bNeedEncryption == true))      ) {
1247         cbFrameSize -= cbICVlen;
1248     }
1249
1250         cbFrameSize -= cbFCSlen;
1251
1252     *pcbHeaderLen = cbHeaderLength;
1253     *pcbTotalLen = cbHeaderLength + cbFrameSize ;
1254
1255     //Set FragCtl in TxBufferHead
1256     pTxBufHead->wFragCtl |= (u16)byFragType;
1257
1258     return true;
1259
1260 }
1261
1262 /*+
1263  *
1264  * Description:
1265  *      Translate 802.3 to 802.11 header
1266  *
1267  * Parameters:
1268  *  In:
1269  *      pDevice         - Pointer to adapter
1270  *      dwTxBufferAddr  - Transmit Buffer
1271  *      pPacket         - Packet from upper layer
1272  *      cbPacketSize    - Transmit Data Length
1273  *  Out:
1274  *      pcbHeadSize         - Header size of MAC&Baseband control and 802.11 Header
1275  *      pcbAppendPayload    - size of append payload for 802.1H translation
1276  *
1277  * Return Value: none
1278  *
1279 -*/
1280
1281 static void s_vGenerateMACHeader(struct vnt_private *pDevice,
1282         u8 *pbyBufferAddr, u16 wDuration, struct ethhdr *psEthHeader,
1283         int bNeedEncrypt, u16 wFragType, u32 uFragIdx)
1284 {
1285         struct ieee80211_hdr *pMACHeader = (struct ieee80211_hdr *)pbyBufferAddr;
1286
1287         pMACHeader->frame_control = TYPE_802_11_DATA;
1288
1289     if (pDevice->op_mode == NL80211_IFTYPE_AP) {
1290         memcpy(&(pMACHeader->addr1[0]),
1291                &(psEthHeader->h_dest[0]),
1292                ETH_ALEN);
1293         memcpy(&(pMACHeader->addr2[0]), &(pDevice->abyBSSID[0]), ETH_ALEN);
1294         memcpy(&(pMACHeader->addr3[0]),
1295                &(psEthHeader->h_source[0]),
1296                ETH_ALEN);
1297         pMACHeader->frame_control |= FC_FROMDS;
1298     } else {
1299         if (pDevice->op_mode == NL80211_IFTYPE_ADHOC) {
1300                 memcpy(&(pMACHeader->addr1[0]),
1301                        &(psEthHeader->h_dest[0]),
1302                        ETH_ALEN);
1303                 memcpy(&(pMACHeader->addr2[0]),
1304                        &(psEthHeader->h_source[0]),
1305                        ETH_ALEN);
1306                 memcpy(&(pMACHeader->addr3[0]),
1307                        &(pDevice->abyBSSID[0]),
1308                        ETH_ALEN);
1309         } else {
1310                 memcpy(&(pMACHeader->addr3[0]),
1311                        &(psEthHeader->h_dest[0]),
1312                        ETH_ALEN);
1313                 memcpy(&(pMACHeader->addr2[0]),
1314                        &(psEthHeader->h_source[0]),
1315                        ETH_ALEN);
1316                 memcpy(&(pMACHeader->addr1[0]),
1317                        &(pDevice->abyBSSID[0]),
1318                        ETH_ALEN);
1319             pMACHeader->frame_control |= FC_TODS;
1320         }
1321     }
1322
1323     if (bNeedEncrypt)
1324         pMACHeader->frame_control |= cpu_to_le16((u16)WLAN_SET_FC_ISWEP(1));
1325
1326     pMACHeader->duration_id = cpu_to_le16(wDuration);
1327
1328     pMACHeader->seq_ctrl = cpu_to_le16(pDevice->wSeqCounter << 4);
1329
1330     //Set FragNumber in Sequence Control
1331     pMACHeader->seq_ctrl |= cpu_to_le16((u16)uFragIdx);
1332
1333     if ((wFragType == FRAGCTL_ENDFRAG) || (wFragType == FRAGCTL_NONFRAG)) {
1334         pDevice->wSeqCounter++;
1335         if (pDevice->wSeqCounter > 0x0fff)
1336             pDevice->wSeqCounter = 0;
1337     }
1338
1339     if ((wFragType == FRAGCTL_STAFRAG) || (wFragType == FRAGCTL_MIDFRAG)) { //StartFrag or MidFrag
1340         pMACHeader->frame_control |= FC_MOREFRAG;
1341     }
1342 }
1343
1344 /*+
1345  *
1346  * Description:
1347  *      Request instructs a MAC to transmit a 802.11 management packet through
1348  *      the adapter onto the medium.
1349  *
1350  * Parameters:
1351  *  In:
1352  *      hDeviceContext  - Pointer to the adapter
1353  *      pPacket         - A pointer to a descriptor for the packet to transmit
1354  *  Out:
1355  *      none
1356  *
1357  * Return Value: CMD_STATUS_PENDING if MAC Tx resource available; otherwise false
1358  *
1359 -*/
1360
1361 CMD_STATUS csMgmt_xmit(struct vnt_private *pDevice,
1362         struct vnt_tx_mgmt *pPacket)
1363 {
1364         struct vnt_manager *pMgmt = &pDevice->vnt_mgmt;
1365         struct vnt_tx_buffer *pTX_Buffer;
1366         struct vnt_usb_send_context *pContext;
1367         struct vnt_tx_fifo_head *pTxBufHead;
1368         struct ieee80211_hdr *pMACHeader;
1369         struct ethhdr sEthHeader;
1370         u8 byPktType, *pbyTxBufferAddr;
1371         struct vnt_mic_hdr *pMICHDR = NULL;
1372         u32 uDuration, cbReqCount, cbHeaderSize, cbFrameBodySize, cbFrameSize;
1373         int bNeedACK, bIsPSPOLL = false;
1374         u32 cbIVlen = 0, cbICVlen = 0, cbMIClen = 0, cbFCSlen = 4;
1375         u32 uPadding = 0;
1376         u16 wTxBufSize;
1377         u32 cbMacHdLen;
1378         u16 wCurrentRate = RATE_1M;
1379         unsigned long flags;
1380
1381         if (pDevice->byBBType == BB_TYPE_11A) {
1382                 wCurrentRate = RATE_6M;
1383                 byPktType = PK_TYPE_11A;
1384         } else {
1385                 wCurrentRate = RATE_1M;
1386                 byPktType = PK_TYPE_11B;
1387         }
1388
1389         if (pMgmt->eScanState != WMAC_NO_SCANNING)
1390                 RFbSetPower(pDevice, wCurrentRate, pDevice->byCurrentCh);
1391         else
1392                 RFbSetPower(pDevice, wCurrentRate, pMgmt->uCurrChannel);
1393
1394         pDevice->wCurrentRate = wCurrentRate;
1395
1396         spin_lock_irqsave(&pDevice->lock, flags);
1397
1398         pContext = s_vGetFreeContext(pDevice);
1399         if (!pContext) {
1400                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO
1401                         "ManagementSend TX...NO CONTEXT!\n");
1402                 spin_unlock_irqrestore(&pDevice->lock, flags);
1403                 return CMD_STATUS_RESOURCES;
1404         }
1405
1406         pTX_Buffer = (struct vnt_tx_buffer *)&pContext->data[0];
1407     cbFrameBodySize = pPacket->cbPayloadLen;
1408         pTxBufHead = &pTX_Buffer->fifo_head;
1409         pbyTxBufferAddr = (u8 *)&pTxBufHead->adwTxKey[0];
1410         wTxBufSize = sizeof(struct vnt_tx_fifo_head);
1411
1412
1413     //Set packet type
1414     if (byPktType == PK_TYPE_11A) {//0000 0000 0000 0000
1415         pTxBufHead->wFIFOCtl = 0;
1416     }
1417     else if (byPktType == PK_TYPE_11B) {//0000 0001 0000 0000
1418         pTxBufHead->wFIFOCtl |= FIFOCTL_11B;
1419     }
1420     else if (byPktType == PK_TYPE_11GB) {//0000 0010 0000 0000
1421         pTxBufHead->wFIFOCtl |= FIFOCTL_11GB;
1422     }
1423     else if (byPktType == PK_TYPE_11GA) {//0000 0011 0000 0000
1424         pTxBufHead->wFIFOCtl |= FIFOCTL_11GA;
1425     }
1426
1427     pTxBufHead->wFIFOCtl |= FIFOCTL_TMOEN;
1428     pTxBufHead->time_stamp = cpu_to_le16(DEFAULT_MGN_LIFETIME_RES_64us);
1429
1430     if (is_multicast_ether_addr(pPacket->p80211Header->sA3.abyAddr1)) {
1431         bNeedACK = false;
1432     }
1433     else {
1434         bNeedACK = true;
1435         pTxBufHead->wFIFOCtl |= FIFOCTL_NEEDACK;
1436     };
1437
1438     if ((pMgmt->eCurrMode == WMAC_MODE_ESS_AP) ||
1439         (pMgmt->eCurrMode == WMAC_MODE_IBSS_STA) ) {
1440
1441         pTxBufHead->wFIFOCtl |= FIFOCTL_LRETRY;
1442         //Set Preamble type always long
1443         //pDevice->byPreambleType = PREAMBLE_LONG;
1444         // probe-response don't retry
1445         //if ((pPacket->p80211Header->sA4.wFrameCtl & TYPE_SUBTYPE_MASK) == TYPE_MGMT_PROBE_RSP) {
1446         //     bNeedACK = false;
1447         //     pTxBufHead->wFIFOCtl  &= (~FIFOCTL_NEEDACK);
1448         //}
1449     }
1450
1451     pTxBufHead->wFIFOCtl |= (FIFOCTL_GENINT | FIFOCTL_ISDMA0);
1452
1453     if ((pPacket->p80211Header->sA4.wFrameCtl & TYPE_SUBTYPE_MASK) == TYPE_CTL_PSPOLL) {
1454         bIsPSPOLL = true;
1455         cbMacHdLen = WLAN_HDR_ADDR2_LEN;
1456     } else {
1457         cbMacHdLen = WLAN_HDR_ADDR3_LEN;
1458     }
1459
1460     //Set FRAGCTL_MACHDCNT
1461     pTxBufHead->wFragCtl |= cpu_to_le16((u16)(cbMacHdLen << 10));
1462
1463     // Notes:
1464     // Although spec says MMPDU can be fragmented; In most case,
1465     // no one will send a MMPDU under fragmentation. With RTS may occur.
1466
1467     if (WLAN_GET_FC_ISWEP(pPacket->p80211Header->sA4.wFrameCtl) != 0) {
1468         if (pDevice->eEncryptionStatus == Ndis802_11Encryption1Enabled) {
1469             cbIVlen = 4;
1470             cbICVlen = 4;
1471             pTxBufHead->wFragCtl |= FRAGCTL_LEGACY;
1472         }
1473         else if (pDevice->eEncryptionStatus == Ndis802_11Encryption2Enabled) {
1474             cbIVlen = 8;//IV+ExtIV
1475             cbMIClen = 8;
1476             cbICVlen = 4;
1477             pTxBufHead->wFragCtl |= FRAGCTL_TKIP;
1478             //We need to get seed here for filling TxKey entry.
1479             //TKIPvMixKey(pTransmitKey->abyKey, pDevice->abyCurrentNetAddr,
1480             //            pTransmitKey->wTSC15_0, pTransmitKey->dwTSC47_16, pDevice->abyPRNG);
1481         }
1482         else if (pDevice->eEncryptionStatus == Ndis802_11Encryption3Enabled) {
1483             cbIVlen = 8;//RSN Header
1484             cbICVlen = 8;//MIC
1485             pTxBufHead->wFragCtl |= FRAGCTL_AES;
1486         }
1487         //MAC Header should be padding 0 to DW alignment.
1488         uPadding = 4 - (cbMacHdLen%4);
1489         uPadding %= 4;
1490     }
1491
1492     cbFrameSize = cbMacHdLen + cbFrameBodySize + cbIVlen + cbMIClen + cbICVlen + cbFCSlen;
1493
1494     //Set FIFOCTL_GrpAckPolicy
1495     if (pDevice->bGrpAckPolicy == true) {//0000 0100 0000 0000
1496         pTxBufHead->wFIFOCtl |= FIFOCTL_GRPACK;
1497     }
1498     //the rest of pTxBufHead->wFragCtl:FragTyp will be set later in s_vFillFragParameter()
1499
1500     //Set RrvTime/RTS/CTS Buffer
1501     if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {//802.11g packet
1502         cbHeaderSize = wTxBufSize + sizeof(struct vnt_rrv_time_cts) +
1503                 sizeof(struct vnt_cts);
1504     }
1505     else { // 802.11a/b packet
1506         cbHeaderSize = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1507                 sizeof(struct vnt_tx_datahead_ab);
1508     }
1509
1510     memcpy(&(sEthHeader.h_dest[0]),
1511            &(pPacket->p80211Header->sA3.abyAddr1[0]),
1512            ETH_ALEN);
1513     memcpy(&(sEthHeader.h_source[0]),
1514            &(pPacket->p80211Header->sA3.abyAddr2[0]),
1515            ETH_ALEN);
1516     //=========================
1517     //    No Fragmentation
1518     //=========================
1519     pTxBufHead->wFragCtl |= (u16)FRAGCTL_NONFRAG;
1520
1521         /* Fill FIFO,RrvTime,RTS,and CTS */
1522         uDuration = s_vGenerateTxParameter(pDevice, byPktType, wCurrentRate,
1523                 pTX_Buffer, &pMICHDR, 0,
1524                 cbFrameSize, bNeedACK, &sEthHeader, false);
1525
1526     pMACHeader = (struct ieee80211_hdr *) (pbyTxBufferAddr + cbHeaderSize);
1527
1528     cbReqCount = cbHeaderSize + cbMacHdLen + uPadding + cbIVlen + cbFrameBodySize;
1529
1530     if (WLAN_GET_FC_ISWEP(pPacket->p80211Header->sA4.wFrameCtl) != 0) {
1531         u8 *           pbyIVHead;
1532         u8 *           pbyPayloadHead;
1533         u8 *           pbyBSSID;
1534         PSKeyItem       pTransmitKey = NULL;
1535
1536         pbyIVHead = (u8 *)(pbyTxBufferAddr + cbHeaderSize + cbMacHdLen + uPadding);
1537         pbyPayloadHead = (u8 *)(pbyTxBufferAddr + cbHeaderSize + cbMacHdLen + uPadding + cbIVlen);
1538         do {
1539             if (pDevice->op_mode == NL80211_IFTYPE_STATION &&
1540                                         pDevice->bLinkPass == true) {
1541                 pbyBSSID = pDevice->abyBSSID;
1542                 // get pairwise key
1543                 if (KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, PAIRWISE_KEY, &pTransmitKey) == false) {
1544                     // get group key
1545                     if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, GROUP_KEY, &pTransmitKey) == true) {
1546                         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Get GTK.\n");
1547                         break;
1548                     }
1549                 } else {
1550                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Get PTK.\n");
1551                     break;
1552                 }
1553             }
1554             // get group key
1555             pbyBSSID = pDevice->abyBroadcastAddr;
1556             if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, GROUP_KEY, &pTransmitKey) == false) {
1557                 pTransmitKey = NULL;
1558                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"KEY is NULL. OP Mode[%d]\n", pDevice->op_mode);
1559             } else {
1560                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Get GTK.\n");
1561             }
1562         } while(false);
1563         //Fill TXKEY
1564         s_vFillTxKey(pDevice, pTxBufHead, pbyIVHead, pTransmitKey,
1565                      (u8 *)pMACHeader, (u16)cbFrameBodySize, NULL);
1566
1567         memcpy(pMACHeader, pPacket->p80211Header, cbMacHdLen);
1568         memcpy(pbyPayloadHead, ((u8 *)(pPacket->p80211Header) + cbMacHdLen),
1569                  cbFrameBodySize);
1570     }
1571     else {
1572         // Copy the Packet into a tx Buffer
1573         memcpy(pMACHeader, pPacket->p80211Header, pPacket->cbMPDULen);
1574     }
1575
1576     pMACHeader->seq_ctrl = cpu_to_le16(pDevice->wSeqCounter << 4);
1577     pDevice->wSeqCounter++ ;
1578     if (pDevice->wSeqCounter > 0x0fff)
1579         pDevice->wSeqCounter = 0;
1580
1581     if (bIsPSPOLL) {
1582         // The MAC will automatically replace the Duration-field of MAC header by Duration-field
1583         // of FIFO control header.
1584         // This will cause AID-field of PS-POLL packet be incorrect (Because PS-POLL's AID field is
1585         // in the same place of other packet's Duration-field).
1586         // And it will cause Cisco-AP to issue Disassociation-packet
1587         if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {
1588                 struct vnt_tx_datahead_g *data_head = &pTX_Buffer->tx_head.
1589                                                 tx_cts.tx.head.cts_g.data_head;
1590                 data_head->duration_a =
1591                         cpu_to_le16(pPacket->p80211Header->sA2.wDurationID);
1592                 data_head->duration_b =
1593                         cpu_to_le16(pPacket->p80211Header->sA2.wDurationID);
1594         } else {
1595                 struct vnt_tx_datahead_ab *data_head = &pTX_Buffer->tx_head.
1596                                         tx_ab.tx.head.data_head_ab;
1597                 data_head->duration =
1598                         cpu_to_le16(pPacket->p80211Header->sA2.wDurationID);
1599         }
1600     }
1601
1602     pTX_Buffer->tx_byte_count = cpu_to_le16((u16)(cbReqCount));
1603     pTX_Buffer->byPKTNO = (u8) (((wCurrentRate<<4) &0x00F0) | ((pDevice->wSeqCounter - 1) & 0x000F));
1604     pTX_Buffer->byType = 0x00;
1605
1606         pContext->skb = NULL;
1607         pContext->type = CONTEXT_MGMT_PACKET;
1608         pContext->buf_len = (u16)cbReqCount + 4; /* USB header */
1609
1610     if (WLAN_GET_FC_TODS(pMACHeader->frame_control) == 0) {
1611         s_vSaveTxPktInfo(pDevice, (u8)(pTX_Buffer->byPKTNO & 0x0F),
1612                         &pMACHeader->addr1[0], (u16)cbFrameSize,
1613                         pTxBufHead->wFIFOCtl);
1614     }
1615     else {
1616         s_vSaveTxPktInfo(pDevice, (u8)(pTX_Buffer->byPKTNO & 0x0F),
1617                         &pMACHeader->addr3[0], (u16)cbFrameSize,
1618                         pTxBufHead->wFIFOCtl);
1619     }
1620
1621     PIPEnsSendBulkOut(pDevice,pContext);
1622
1623         spin_unlock_irqrestore(&pDevice->lock, flags);
1624
1625     return CMD_STATUS_PENDING;
1626 }
1627
1628 CMD_STATUS csBeacon_xmit(struct vnt_private *pDevice,
1629         struct vnt_tx_mgmt *pPacket)
1630 {
1631         struct vnt_beacon_buffer *pTX_Buffer;
1632         struct vnt_tx_short_buf_head *short_head;
1633         u32 cbFrameSize = pPacket->cbMPDULen + WLAN_FCS_LEN;
1634         u32 cbHeaderSize = 0;
1635         struct ieee80211_hdr *pMACHeader;
1636         u16 wCurrentRate;
1637         u32 cbFrameBodySize;
1638         u32 cbReqCount;
1639         struct vnt_usb_send_context *pContext;
1640         CMD_STATUS status;
1641
1642         pContext = s_vGetFreeContext(pDevice);
1643     if (NULL == pContext) {
1644         status = CMD_STATUS_RESOURCES;
1645         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"ManagementSend TX...NO CONTEXT!\n");
1646         return status ;
1647     }
1648
1649         pTX_Buffer = (struct vnt_beacon_buffer *)&pContext->data[0];
1650         short_head = &pTX_Buffer->short_head;
1651
1652     cbFrameBodySize = pPacket->cbPayloadLen;
1653
1654         cbHeaderSize = sizeof(struct vnt_tx_short_buf_head);
1655
1656         if (pDevice->byBBType == BB_TYPE_11A) {
1657                 wCurrentRate = RATE_6M;
1658
1659                 /* Get SignalField,ServiceField,Length */
1660                 BBvCalculateParameter(pDevice, cbFrameSize, wCurrentRate,
1661                         PK_TYPE_11A, &short_head->ab);
1662
1663                 /* Get Duration and TimeStampOff */
1664                 short_head->duration = s_uGetDataDuration(pDevice,
1665                                                         PK_TYPE_11A, false);
1666                 short_head->time_stamp_off =
1667                                 vnt_time_stamp_off(pDevice, wCurrentRate);
1668         } else {
1669                 wCurrentRate = RATE_1M;
1670                 short_head->fifo_ctl |= FIFOCTL_11B;
1671
1672                 /* Get SignalField,ServiceField,Length */
1673                 BBvCalculateParameter(pDevice, cbFrameSize, wCurrentRate,
1674                                         PK_TYPE_11B, &short_head->ab);
1675
1676                 /* Get Duration and TimeStampOff */
1677                 short_head->duration = s_uGetDataDuration(pDevice,
1678                                                 PK_TYPE_11B, false);
1679                 short_head->time_stamp_off =
1680                         vnt_time_stamp_off(pDevice, wCurrentRate);
1681         }
1682
1683
1684         /* Generate Beacon Header */
1685         pMACHeader = &pTX_Buffer->hdr;
1686
1687         memcpy(pMACHeader, pPacket->p80211Header, pPacket->cbMPDULen);
1688
1689         pMACHeader->duration_id = 0;
1690         pMACHeader->seq_ctrl = cpu_to_le16(pDevice->wSeqCounter << 4);
1691         pDevice->wSeqCounter++;
1692         if (pDevice->wSeqCounter > 0x0fff)
1693                 pDevice->wSeqCounter = 0;
1694
1695     cbReqCount = cbHeaderSize + WLAN_HDR_ADDR3_LEN + cbFrameBodySize;
1696
1697     pTX_Buffer->tx_byte_count = cpu_to_le16((u16)cbReqCount);
1698     pTX_Buffer->byPKTNO = (u8) (((wCurrentRate<<4) &0x00F0) | ((pDevice->wSeqCounter - 1) & 0x000F));
1699     pTX_Buffer->byType = 0x01;
1700
1701         pContext->skb = NULL;
1702         pContext->type = CONTEXT_MGMT_PACKET;
1703         pContext->buf_len = (u16)cbReqCount + 4; /* USB header */
1704
1705     PIPEnsSendBulkOut(pDevice,pContext);
1706     return CMD_STATUS_PENDING;
1707
1708 }
1709
1710 //TYPE_AC0DMA data tx
1711 /*
1712  * Description:
1713  *      Tx packet via AC0DMA(DMA1)
1714  *
1715  * Parameters:
1716  *  In:
1717  *      pDevice         - Pointer to the adapter
1718  *      skb             - Pointer to tx skb packet
1719  *  Out:
1720  *      void
1721  *
1722  * Return Value: NULL
1723  */
1724
1725 int nsDMA_tx_packet(struct vnt_private *pDevice, struct sk_buff *skb)
1726 {
1727         struct net_device_stats *pStats = &pDevice->stats;
1728         struct vnt_manager *pMgmt = &pDevice->vnt_mgmt;
1729         struct vnt_tx_buffer *pTX_Buffer;
1730         u32 BytesToWrite = 0, uHeaderLen = 0;
1731         u32 uNodeIndex = 0;
1732         u8 byMask[8] = {1, 2, 4, 8, 0x10, 0x20, 0x40, 0x80};
1733         u16 wAID;
1734         u8 byPktType;
1735         int bNeedEncryption = false;
1736         PSKeyItem pTransmitKey = NULL;
1737         int ii;
1738         int bTKIP_UseGTK = false;
1739         int bNeedDeAuth = false;
1740         u8 *pbyBSSID;
1741         int bNodeExist = false;
1742         struct vnt_usb_send_context *pContext;
1743         bool fConvertedPacket;
1744         u32 status;
1745         u16 wKeepRate = pDevice->wCurrentRate;
1746         int bTxeapol_key = false;
1747
1748     if (pMgmt->eCurrMode == WMAC_MODE_ESS_AP) {
1749
1750         if (pDevice->uAssocCount == 0) {
1751             dev_kfree_skb_irq(skb);
1752             return 0;
1753         }
1754
1755         if (is_multicast_ether_addr((u8 *)(skb->data))) {
1756             uNodeIndex = 0;
1757             bNodeExist = true;
1758             if (pMgmt->sNodeDBTable[0].bPSEnable) {
1759
1760                 skb_queue_tail(&(pMgmt->sNodeDBTable[0].sTxPSQueue), skb);
1761                 pMgmt->sNodeDBTable[0].wEnQueueCnt++;
1762                 // set tx map
1763                 pMgmt->abyPSTxMap[0] |= byMask[0];
1764                 return 0;
1765             }
1766             // multicast/broadcast data rate
1767
1768             if (pDevice->byBBType != BB_TYPE_11A)
1769                 pDevice->wCurrentRate = RATE_2M;
1770             else
1771                 pDevice->wCurrentRate = RATE_24M;
1772             // long preamble type
1773             pDevice->byPreambleType = PREAMBLE_SHORT;
1774
1775         }else {
1776
1777             if (BSSbIsSTAInNodeDB(pDevice, (u8 *)(skb->data), &uNodeIndex)) {
1778
1779                 if (pMgmt->sNodeDBTable[uNodeIndex].bPSEnable) {
1780
1781                     skb_queue_tail(&pMgmt->sNodeDBTable[uNodeIndex].sTxPSQueue, skb);
1782
1783                     pMgmt->sNodeDBTable[uNodeIndex].wEnQueueCnt++;
1784                     // set tx map
1785                     wAID = pMgmt->sNodeDBTable[uNodeIndex].wAID;
1786                     pMgmt->abyPSTxMap[wAID >> 3] |=  byMask[wAID & 7];
1787                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO "Set:pMgmt->abyPSTxMap[%d]= %d\n",
1788                              (wAID >> 3), pMgmt->abyPSTxMap[wAID >> 3]);
1789
1790                     return 0;
1791                 }
1792                 // AP rate decided from node
1793                 pDevice->wCurrentRate = pMgmt->sNodeDBTable[uNodeIndex].wTxDataRate;
1794                 // tx preamble decided from node
1795
1796                 if (pMgmt->sNodeDBTable[uNodeIndex].bShortPreamble) {
1797                     pDevice->byPreambleType = pDevice->byShortPreamble;
1798
1799                 }else {
1800                     pDevice->byPreambleType = PREAMBLE_LONG;
1801                 }
1802                 bNodeExist = true;
1803             }
1804         }
1805
1806         if (bNodeExist == false) {
1807             DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"Unknown STA not found in node DB \n");
1808             dev_kfree_skb_irq(skb);
1809             return 0;
1810         }
1811     }
1812
1813         memcpy(&pDevice->sTxEthHeader, skb->data, ETH_HLEN);
1814
1815 //mike add:station mode check eapol-key challenge--->
1816 {
1817     u8  Protocol_Version;    //802.1x Authentication
1818     u8  Packet_Type;           //802.1x Authentication
1819     u8  Descriptor_type;
1820     u16 Key_info;
1821
1822     Protocol_Version = skb->data[ETH_HLEN];
1823     Packet_Type = skb->data[ETH_HLEN+1];
1824     Descriptor_type = skb->data[ETH_HLEN+1+1+2];
1825     Key_info = (skb->data[ETH_HLEN+1+1+2+1] << 8)|(skb->data[ETH_HLEN+1+1+2+2]);
1826         if (pDevice->sTxEthHeader.h_proto == cpu_to_be16(ETH_P_PAE)) {
1827                 /* 802.1x OR eapol-key challenge frame transfer */
1828                 if (((Protocol_Version == 1) || (Protocol_Version == 2)) &&
1829                         (Packet_Type == 3)) {
1830                         bTxeapol_key = true;
1831                        if(!(Key_info & BIT3) &&  //WPA or RSN group-key challenge
1832                            (Key_info & BIT8) && (Key_info & BIT9)) {    //send 2/2 key
1833                           if(Descriptor_type==254) {
1834                                pDevice->fWPA_Authened = true;
1835                              PRINT_K("WPA ");
1836                           }
1837                           else {
1838                                pDevice->fWPA_Authened = true;
1839                              PRINT_K("WPA2(re-keying) ");
1840                           }
1841                           PRINT_K("Authentication completed!!\n");
1842                         }
1843                     else if((Key_info & BIT3) && (Descriptor_type==2) &&  //RSN pairwise-key challenge
1844                                (Key_info & BIT8) && (Key_info & BIT9)) {
1845                           pDevice->fWPA_Authened = true;
1846                             PRINT_K("WPA2 Authentication completed!!\n");
1847                      }
1848              }
1849    }
1850 }
1851 //mike add:station mode check eapol-key challenge<---
1852
1853     if (pDevice->bEncryptionEnable == true) {
1854         bNeedEncryption = true;
1855         // get Transmit key
1856         do {
1857             if ((pMgmt->eCurrMode == WMAC_MODE_ESS_STA) &&
1858                 (pMgmt->eCurrState == WMAC_STATE_ASSOC)) {
1859                 pbyBSSID = pDevice->abyBSSID;
1860                 // get pairwise key
1861                 if (KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, PAIRWISE_KEY, &pTransmitKey) == false) {
1862                     // get group key
1863                     if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, GROUP_KEY, &pTransmitKey) == true) {
1864                         bTKIP_UseGTK = true;
1865                         DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"Get GTK.\n");
1866                         break;
1867                     }
1868                 } else {
1869                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"Get PTK.\n");
1870                     break;
1871                 }
1872             }else if (pMgmt->eCurrMode == WMAC_MODE_IBSS_STA) {
1873               /* TO_DS = 0 and FROM_DS = 0 --> 802.11 MAC Address1 */
1874                 pbyBSSID = pDevice->sTxEthHeader.h_dest;
1875                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"IBSS Serach Key: \n");
1876                 for (ii = 0; ii< 6; ii++)
1877                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"%x \n", *(pbyBSSID+ii));
1878                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"\n");
1879
1880                 // get pairwise key
1881                 if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, PAIRWISE_KEY, &pTransmitKey) == true)
1882                     break;
1883             }
1884             // get group key
1885             pbyBSSID = pDevice->abyBroadcastAddr;
1886             if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, GROUP_KEY, &pTransmitKey) == false) {
1887                 pTransmitKey = NULL;
1888                 if (pMgmt->eCurrMode == WMAC_MODE_IBSS_STA) {
1889                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"IBSS and KEY is NULL. [%d]\n", pMgmt->eCurrMode);
1890                 }
1891                 else
1892                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"NOT IBSS and KEY is NULL. [%d]\n", pMgmt->eCurrMode);
1893             } else {
1894                 bTKIP_UseGTK = true;
1895                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"Get GTK.\n");
1896             }
1897         } while(false);
1898     }
1899
1900     byPktType = (u8)pDevice->byPacketType;
1901
1902     if (pDevice->bFixRate) {
1903         if (pDevice->byBBType == BB_TYPE_11B) {
1904             if (pDevice->uConnectionRate >= RATE_11M) {
1905                 pDevice->wCurrentRate = RATE_11M;
1906             } else {
1907                 pDevice->wCurrentRate = (u16)pDevice->uConnectionRate;
1908             }
1909         } else {
1910             if ((pDevice->byBBType == BB_TYPE_11A) &&
1911                 (pDevice->uConnectionRate <= RATE_6M)) {
1912                 pDevice->wCurrentRate = RATE_6M;
1913             } else {
1914                 if (pDevice->uConnectionRate >= RATE_54M)
1915                     pDevice->wCurrentRate = RATE_54M;
1916                 else
1917                     pDevice->wCurrentRate = (u16)pDevice->uConnectionRate;
1918             }
1919         }
1920     }
1921     else {
1922         if (pDevice->op_mode == NL80211_IFTYPE_ADHOC) {
1923             // Adhoc Tx rate decided from node DB
1924             if (is_multicast_ether_addr(pDevice->sTxEthHeader.h_dest)) {
1925                 // Multicast use highest data rate
1926                 pDevice->wCurrentRate = pMgmt->sNodeDBTable[0].wTxDataRate;
1927                 // preamble type
1928                 pDevice->byPreambleType = pDevice->byShortPreamble;
1929             }
1930             else {
1931                 if (BSSbIsSTAInNodeDB(pDevice, &(pDevice->sTxEthHeader.h_dest[0]), &uNodeIndex)) {
1932                     pDevice->wCurrentRate = pMgmt->sNodeDBTable[uNodeIndex].wTxDataRate;
1933                     if (pMgmt->sNodeDBTable[uNodeIndex].bShortPreamble) {
1934                         pDevice->byPreambleType = pDevice->byShortPreamble;
1935
1936                     }
1937                     else {
1938                         pDevice->byPreambleType = PREAMBLE_LONG;
1939                     }
1940                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Found Node Index is [%d]  Tx Data Rate:[%d]\n",uNodeIndex, pDevice->wCurrentRate);
1941                 }
1942                 else {
1943                     if (pDevice->byBBType != BB_TYPE_11A)
1944                        pDevice->wCurrentRate = RATE_2M;
1945                     else
1946                        pDevice->wCurrentRate = RATE_24M; // refer to vMgrCreateOwnIBSS()'s
1947                                                          // abyCurrExtSuppRates[]
1948                     pDevice->byPreambleType = PREAMBLE_SHORT;
1949                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Not Found Node use highest basic Rate.....\n");
1950                 }
1951             }
1952         }
1953         if (pDevice->op_mode == NL80211_IFTYPE_STATION) {
1954             // Infra STA rate decided from AP Node, index = 0
1955             pDevice->wCurrentRate = pMgmt->sNodeDBTable[0].wTxDataRate;
1956         }
1957     }
1958
1959         if (pDevice->sTxEthHeader.h_proto == cpu_to_be16(ETH_P_PAE)) {
1960                 if (pDevice->byBBType != BB_TYPE_11A) {
1961                         pDevice->wCurrentRate = RATE_1M;
1962                         pDevice->byTopCCKBasicRate = RATE_1M;
1963                         pDevice->byTopOFDMBasicRate = RATE_6M;
1964                 } else {
1965                         pDevice->wCurrentRate = RATE_6M;
1966                         pDevice->byTopCCKBasicRate = RATE_1M;
1967                         pDevice->byTopOFDMBasicRate = RATE_6M;
1968                 }
1969         }
1970
1971     DBG_PRT(MSG_LEVEL_DEBUG,
1972             KERN_INFO "dma_tx: pDevice->wCurrentRate = %d\n",
1973             pDevice->wCurrentRate);
1974
1975     if (wKeepRate != pDevice->wCurrentRate) {
1976         bScheduleCommand((void *) pDevice, WLAN_CMD_SETPOWER, NULL);
1977     }
1978
1979     if (pDevice->wCurrentRate <= RATE_11M) {
1980         byPktType = PK_TYPE_11B;
1981     }
1982
1983     if (bNeedEncryption == true) {
1984         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"ntohs Pkt Type=%04x\n", ntohs(pDevice->sTxEthHeader.h_proto));
1985         if ((pDevice->sTxEthHeader.h_proto) == cpu_to_be16(ETH_P_PAE)) {
1986                 bNeedEncryption = false;
1987             DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Pkt Type=%04x\n", (pDevice->sTxEthHeader.h_proto));
1988             if ((pMgmt->eCurrMode == WMAC_MODE_ESS_STA) && (pMgmt->eCurrState == WMAC_STATE_ASSOC)) {
1989                 if (pTransmitKey == NULL) {
1990                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Don't Find TX KEY\n");
1991                 }
1992                 else {
1993                     if (bTKIP_UseGTK == true) {
1994                         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"error: KEY is GTK!!~~\n");
1995                     }
1996                     else {
1997                         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Find PTK [%X]\n",
1998                                 pTransmitKey->dwKeyIndex);
1999                         bNeedEncryption = true;
2000                     }
2001                 }
2002             }
2003         }
2004         else {
2005
2006             if (pTransmitKey == NULL) {
2007                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"return no tx key\n");
2008                 dev_kfree_skb_irq(skb);
2009                 pStats->tx_dropped++;
2010                 return STATUS_FAILURE;
2011             }
2012         }
2013     }
2014
2015         pContext = s_vGetFreeContext(pDevice);
2016         if (!pContext) {
2017                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG" pContext == NULL\n");
2018                 dev_kfree_skb_irq(skb);
2019                 return STATUS_RESOURCES;
2020         }
2021
2022         pTX_Buffer = (struct vnt_tx_buffer *)&pContext->data[0];
2023
2024     fConvertedPacket = s_bPacketToWirelessUsb(pDevice, byPktType,
2025                         pTX_Buffer, bNeedEncryption,
2026                         skb->len, &pDevice->sTxEthHeader,
2027                         (u8 *)skb->data, pTransmitKey, uNodeIndex,
2028                         pDevice->wCurrentRate,
2029                         &uHeaderLen, &BytesToWrite
2030                        );
2031
2032         if (fConvertedPacket == false) {
2033                 pContext->in_use = false;
2034                 dev_kfree_skb_irq(skb);
2035                 return STATUS_FAILURE;
2036         }
2037
2038     if ( pDevice->bEnablePSMode == true ) {
2039         if ( !pDevice->bPSModeTxBurst ) {
2040                 bScheduleCommand((void *) pDevice,
2041                                  WLAN_CMD_MAC_DISPOWERSAVING,
2042                                  NULL);
2043             pDevice->bPSModeTxBurst = true;
2044         }
2045     }
2046
2047     pTX_Buffer->byPKTNO = (u8) (((pDevice->wCurrentRate<<4) &0x00F0) | ((pDevice->wSeqCounter - 1) & 0x000F));
2048     pTX_Buffer->tx_byte_count = cpu_to_le16((u16)BytesToWrite);
2049
2050         pContext->skb = skb;
2051         pContext->type = CONTEXT_DATA_PACKET;
2052         pContext->buf_len = (u16)BytesToWrite + 4 ; /* USB header */
2053
2054     s_vSaveTxPktInfo(pDevice, (u8)(pTX_Buffer->byPKTNO & 0x0F),
2055                         &pDevice->sTxEthHeader.h_dest[0],
2056                         (u16)(BytesToWrite-uHeaderLen),
2057                         pTX_Buffer->fifo_head.wFIFOCtl);
2058
2059     status = PIPEnsSendBulkOut(pDevice,pContext);
2060
2061     if (bNeedDeAuth == true) {
2062         u16 wReason = WLAN_MGMT_REASON_MIC_FAILURE;
2063
2064         bScheduleCommand((void *) pDevice, WLAN_CMD_DEAUTH, (u8 *) &wReason);
2065     }
2066
2067         if (status != STATUS_PENDING) {
2068                 pContext->in_use = false;
2069                 dev_kfree_skb_irq(skb);
2070                 return STATUS_FAILURE;
2071         }
2072
2073
2074         return 0;
2075 }