staging: r8188eu: Add files for new driver - part 7
authorLarry Finger <Larry.Finger@lwfinger.net>
Thu, 22 Aug 2013 03:33:49 +0000 (22:33 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 22 Aug 2013 17:20:00 +0000 (10:20 -0700)
This commit adds core/rtw_wlan_util.c and core/rtw_xmit.c

Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/rtl8188eu/core/rtw_wlan_util.c [new file with mode: 0644]
drivers/staging/rtl8188eu/core/rtw_xmit.c [new file with mode: 0644]

diff --git a/drivers/staging/rtl8188eu/core/rtw_wlan_util.c b/drivers/staging/rtl8188eu/core/rtw_wlan_util.c
new file mode 100644 (file)
index 0000000..a43fc88
--- /dev/null
@@ -0,0 +1,1689 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_WLAN_UTIL_C_
+
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wifi.h>
+
+static unsigned char ARTHEROS_OUI1[] = {0x00, 0x03, 0x7f};
+static unsigned char ARTHEROS_OUI2[] = {0x00, 0x13, 0x74};
+
+static unsigned char BROADCOM_OUI1[] = {0x00, 0x10, 0x18};
+static unsigned char BROADCOM_OUI2[] = {0x00, 0x0a, 0xf7};
+
+static unsigned char CISCO_OUI[] = {0x00, 0x40, 0x96};
+static unsigned char MARVELL_OUI[] = {0x00, 0x50, 0x43};
+static unsigned char RALINK_OUI[] = {0x00, 0x0c, 0x43};
+static unsigned char REALTEK_OUI[] = {0x00, 0xe0, 0x4c};
+static unsigned char AIRGOCAP_OUI[] = {0x00, 0x0a, 0xf5};
+static unsigned char EPIGRAM_OUI[] = {0x00, 0x90, 0x4c};
+
+unsigned char REALTEK_96B_IE[] = {0x00, 0xe0, 0x4c, 0x02, 0x01, 0x20};
+
+#define R2T_PHY_DELAY  (0)
+
+/* define WAIT_FOR_BCN_TO_M    (3000) */
+#define WAIT_FOR_BCN_TO_MIN    (6000)
+#define WAIT_FOR_BCN_TO_MAX    (20000)
+
+static u8 rtw_basic_rate_cck[4] = {
+       IEEE80211_CCK_RATE_1MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_2MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_CCK_RATE_5MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_11MB|IEEE80211_BASIC_RATE_MASK
+};
+
+static u8 rtw_basic_rate_ofdm[3] = {
+       IEEE80211_OFDM_RATE_6MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_12MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_OFDM_RATE_24MB|IEEE80211_BASIC_RATE_MASK
+};
+
+static u8 rtw_basic_rate_mix[7] = {
+       IEEE80211_CCK_RATE_1MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_2MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_CCK_RATE_5MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_CCK_RATE_11MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_OFDM_RATE_6MB|IEEE80211_BASIC_RATE_MASK, IEEE80211_OFDM_RATE_12MB|IEEE80211_BASIC_RATE_MASK,
+       IEEE80211_OFDM_RATE_24MB|IEEE80211_BASIC_RATE_MASK
+};
+
+int cckrates_included(unsigned char *rate, int ratelen)
+{
+       int     i;
+
+       for (i = 0; i < ratelen; i++) {
+               if  ((((rate[i]) & 0x7f) == 2)  || (((rate[i]) & 0x7f) == 4) ||
+                    (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22))
+                       return true;
+       }
+       return false;
+}
+
+int cckratesonly_included(unsigned char *rate, int ratelen)
+{
+       int     i;
+
+       for (i = 0; i < ratelen; i++) {
+               if  ((((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
+                          (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22))
+               return false;
+       }
+
+       return true;
+}
+
+unsigned char networktype_to_raid(unsigned char network_type)
+{
+       unsigned char raid;
+
+       switch (network_type) {
+       case WIRELESS_11B:
+               raid = RATR_INX_WIRELESS_B;
+               break;
+       case WIRELESS_11A:
+       case WIRELESS_11G:
+               raid = RATR_INX_WIRELESS_G;
+               break;
+       case WIRELESS_11BG:
+               raid = RATR_INX_WIRELESS_GB;
+               break;
+       case WIRELESS_11_24N:
+       case WIRELESS_11_5N:
+               raid = RATR_INX_WIRELESS_N;
+               break;
+       case WIRELESS_11A_5N:
+       case WIRELESS_11G_24N:
+               raid = RATR_INX_WIRELESS_NG;
+               break;
+       case WIRELESS_11BG_24N:
+               raid = RATR_INX_WIRELESS_NGB;
+               break;
+       default:
+               raid = RATR_INX_WIRELESS_GB;
+               break;
+       }
+       return raid;
+}
+
+u8 judge_network_type(struct adapter *padapter, unsigned char *rate, int ratelen)
+{
+       u8 network_type = 0;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (pmlmeext->cur_channel > 14) {
+               if (pmlmeinfo->HT_enable)
+                       network_type = WIRELESS_11_5N;
+
+               network_type |= WIRELESS_11A;
+       } else {
+               if (pmlmeinfo->HT_enable)
+                       network_type = WIRELESS_11_24N;
+
+               if ((cckratesonly_included(rate, ratelen)) == true)
+                       network_type |= WIRELESS_11B;
+               else if ((cckrates_included(rate, ratelen)) == true)
+                       network_type |= WIRELESS_11BG;
+               else
+                       network_type |= WIRELESS_11G;
+       }
+       return  network_type;
+}
+
+static unsigned char ratetbl_val_2wifirate(unsigned char rate)
+{
+       unsigned char val = 0;
+
+       switch (rate & 0x7f) {
+       case 0:
+               val = IEEE80211_CCK_RATE_1MB;
+               break;
+       case 1:
+               val = IEEE80211_CCK_RATE_2MB;
+               break;
+       case 2:
+               val = IEEE80211_CCK_RATE_5MB;
+               break;
+       case 3:
+               val = IEEE80211_CCK_RATE_11MB;
+               break;
+       case 4:
+               val = IEEE80211_OFDM_RATE_6MB;
+               break;
+       case 5:
+               val = IEEE80211_OFDM_RATE_9MB;
+               break;
+       case 6:
+               val = IEEE80211_OFDM_RATE_12MB;
+               break;
+       case 7:
+               val = IEEE80211_OFDM_RATE_18MB;
+               break;
+       case 8:
+               val = IEEE80211_OFDM_RATE_24MB;
+               break;
+       case 9:
+               val = IEEE80211_OFDM_RATE_36MB;
+               break;
+       case 10:
+               val = IEEE80211_OFDM_RATE_48MB;
+               break;
+       case 11:
+               val = IEEE80211_OFDM_RATE_54MB;
+               break;
+       }
+       return val;
+}
+
+static int is_basicrate(struct adapter *padapter, unsigned char rate)
+{
+       int i;
+       unsigned char val;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+       for (i = 0; i < NumRates; i++) {
+               val = pmlmeext->basicrate[i];
+
+               if ((val != 0xff) && (val != 0xfe)) {
+                       if (rate == ratetbl_val_2wifirate(val))
+                               return true;
+               }
+       }
+       return false;
+}
+
+static unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset)
+{
+       int i;
+       unsigned char rate;
+       unsigned int    len = 0;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+
+       for (i = 0; i < NumRates; i++) {
+               rate = pmlmeext->datarate[i];
+
+               switch (rate) {
+               case 0xff:
+                       return len;
+               case 0xfe:
+                       continue;
+               default:
+                       rate = ratetbl_val_2wifirate(rate);
+
+                       if (is_basicrate(padapter, rate) == true)
+                               rate |= IEEE80211_BASIC_RATE_MASK;
+
+                       rateset[len] = rate;
+                       len++;
+                       break;
+               }
+       }
+       return len;
+}
+
+void get_rate_set(struct adapter *padapter, unsigned char *pbssrate, int *bssrate_len)
+{
+       unsigned char supportedrates[NumRates];
+
+       _rtw_memset(supportedrates, 0, NumRates);
+       *bssrate_len = ratetbl2rateset(padapter, supportedrates);
+       memcpy(pbssrate, supportedrates, *bssrate_len);
+}
+
+void UpdateBrateTbl(struct adapter *Adapter, u8 *mbrate)
+{
+       u8      i;
+       u8      rate;
+
+       /*  1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory. */
+       for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
+               rate = mbrate[i] & 0x7f;
+               switch (rate) {
+               case IEEE80211_CCK_RATE_1MB:
+               case IEEE80211_CCK_RATE_2MB:
+               case IEEE80211_CCK_RATE_5MB:
+               case IEEE80211_CCK_RATE_11MB:
+               case IEEE80211_OFDM_RATE_6MB:
+               case IEEE80211_OFDM_RATE_12MB:
+               case IEEE80211_OFDM_RATE_24MB:
+                       mbrate[i] |= IEEE80211_BASIC_RATE_MASK;
+                       break;
+               }
+       }
+}
+
+void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen)
+{
+       u8      i;
+       u8      rate;
+
+       for (i = 0; i < bssratelen; i++) {
+               rate = bssrateset[i] & 0x7f;
+               switch (rate) {
+               case IEEE80211_CCK_RATE_1MB:
+               case IEEE80211_CCK_RATE_2MB:
+               case IEEE80211_CCK_RATE_5MB:
+               case IEEE80211_CCK_RATE_11MB:
+                       bssrateset[i] |= IEEE80211_BASIC_RATE_MASK;
+                       break;
+               }
+       }
+}
+
+void Save_DM_Func_Flag(struct adapter *padapter)
+{
+       u8      saveflag = true;
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&saveflag));
+}
+
+void Restore_DM_Func_Flag(struct adapter *padapter)
+{
+       u8      saveflag = false;
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&saveflag));
+}
+
+void Switch_DM_Func(struct adapter *padapter, u32 mode, u8 enable)
+{
+       if (enable)
+               rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
+       else
+               rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
+}
+
+static void Set_NETYPE0_MSR(struct adapter *padapter, u8 type)
+{
+       rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
+}
+
+void Set_MSR(struct adapter *padapter, u8 type)
+{
+       Set_NETYPE0_MSR(padapter, type);
+}
+
+inline u8 rtw_get_oper_ch(struct adapter *adapter)
+{
+       return adapter->mlmeextpriv.oper_channel;
+}
+
+inline void rtw_set_oper_ch(struct adapter *adapter, u8 ch)
+{
+       adapter->mlmeextpriv.oper_channel = ch;
+}
+
+inline u8 rtw_get_oper_bw(struct adapter *adapter)
+{
+       return adapter->mlmeextpriv.oper_bwmode;
+}
+
+inline void rtw_set_oper_bw(struct adapter *adapter, u8 bw)
+{
+       adapter->mlmeextpriv.oper_bwmode = bw;
+}
+
+inline u8 rtw_get_oper_choffset(struct adapter *adapter)
+{
+       return adapter->mlmeextpriv.oper_ch_offset;
+}
+
+inline void rtw_set_oper_choffset(struct adapter *adapter, u8 offset)
+{
+       adapter->mlmeextpriv.oper_ch_offset = offset;
+}
+
+void SelectChannel(struct adapter *padapter, unsigned char channel)
+{
+       /* saved channel info */
+       rtw_set_oper_ch(padapter, channel);
+       rtw_hal_set_chan(padapter, channel);
+}
+
+void SetBWMode(struct adapter *padapter, unsigned short bwmode,
+              unsigned char channel_offset)
+{
+       /* saved bw info */
+       rtw_set_oper_bw(padapter, bwmode);
+       rtw_set_oper_choffset(padapter, channel_offset);
+
+       rtw_hal_set_bwmode(padapter, (enum ht_channel_width)bwmode, channel_offset);
+}
+
+void set_channel_bwmode(struct adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
+{
+       u8 center_ch;
+
+       if (padapter->bNotifyChannelChange)
+               DBG_88E("[%s] ch = %d, offset = %d, bwmode = %d\n", __func__, channel, channel_offset, bwmode);
+
+       if ((bwmode == HT_CHANNEL_WIDTH_20) ||
+           (channel_offset == HAL_PRIME_CHNL_OFFSET_DONT_CARE)) {
+               /* SelectChannel(padapter, channel); */
+               center_ch = channel;
+       } else {
+               /* switch to the proper channel */
+               if (channel_offset == HAL_PRIME_CHNL_OFFSET_LOWER) {
+                       /* SelectChannel(padapter, channel + 2); */
+                       center_ch = channel + 2;
+               } else {
+                       /* SelectChannel(padapter, channel - 2); */
+                       center_ch = channel - 2;
+               }
+       }
+
+       /* set Channel */
+       /* saved channel/bw info */
+       rtw_set_oper_ch(padapter, channel);
+       rtw_set_oper_bw(padapter, bwmode);
+       rtw_set_oper_choffset(padapter, channel_offset);
+
+       rtw_hal_set_chan(padapter, center_ch); /*  set center channel */
+       SetBWMode(padapter, bwmode, channel_offset);
+}
+
+int get_bsstype(unsigned short capability)
+{
+       if (capability & BIT(0))
+               return WIFI_FW_AP_STATE;
+       else if (capability & BIT(1))
+               return WIFI_FW_ADHOC_STATE;
+       else
+               return 0;
+}
+
+__inline u8 *get_my_bssid(struct wlan_bssid_ex *pnetwork)
+{
+       return pnetwork->MacAddress;
+}
+
+u16 get_beacon_interval(struct wlan_bssid_ex *bss)
+{
+       __le16 val;
+       memcpy((unsigned char *)&val, rtw_get_beacon_interval_from_ie(bss->IEs), 2);
+
+       return le16_to_cpu(val);
+}
+
+int is_client_associated_to_ap(struct adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext;
+       struct mlme_ext_info    *pmlmeinfo;
+
+       if (!padapter)
+               return _FAIL;
+
+       pmlmeext = &padapter->mlmeextpriv;
+       pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
+               return true;
+       else
+               return _FAIL;
+}
+
+int is_client_associated_to_ibss(struct adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
+               return true;
+       else
+               return _FAIL;
+}
+
+int is_IBSS_empty(struct adapter *padapter)
+{
+       unsigned int i;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       for (i = IBSS_START_MAC_ID; i < NUM_STA; i++) {
+               if (pmlmeinfo->FW_sta_info[i].status == 1)
+                       return _FAIL;
+       }
+       return true;
+}
+
+unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval)
+{
+       if ((bcn_interval << 2) < WAIT_FOR_BCN_TO_MIN)
+               return WAIT_FOR_BCN_TO_MIN;
+       else if ((bcn_interval << 2) > WAIT_FOR_BCN_TO_MAX)
+               return WAIT_FOR_BCN_TO_MAX;
+       else
+               return bcn_interval << 2;
+}
+
+void CAM_empty_entry(struct adapter *Adapter, u8 ucIndex)
+{
+       rtw_hal_set_hwreg(Adapter, HW_VAR_CAM_EMPTY_ENTRY, (u8 *)(&ucIndex));
+}
+
+void invalidate_cam_all(struct adapter *padapter)
+{
+       rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, NULL);
+}
+
+void write_cam(struct adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
+{
+       unsigned int    i, val, addr;
+       int j;
+       u32     cam_val[2];
+
+       addr = entry << 3;
+
+       for (j = 5; j >= 0; j--) {
+               switch (j) {
+               case 0:
+                       val = (ctrl | (mac[0] << 16) | (mac[1] << 24));
+                       break;
+               case 1:
+                       val = (mac[2] | (mac[3] << 8) | (mac[4] << 16) | (mac[5] << 24));
+                       break;
+               default:
+                       i = (j - 2) << 2;
+                       val = (key[i] | (key[i+1] << 8) | (key[i+2] << 16) | (key[i+3] << 24));
+                       break;
+               }
+
+               cam_val[0] = val;
+               cam_val[1] = addr + (unsigned int)j;
+
+               rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
+       }
+}
+
+void clear_cam_entry(struct adapter *padapter, u8 entry)
+{
+       unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
+       unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+                                   0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
+
+       write_cam(padapter, entry, 0, null_sta, null_key);
+}
+
+int allocate_fw_sta_entry(struct adapter *padapter)
+{
+       unsigned int mac_id;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       for (mac_id = IBSS_START_MAC_ID; mac_id < NUM_STA; mac_id++) {
+               if (pmlmeinfo->FW_sta_info[mac_id].status == 0) {
+                       pmlmeinfo->FW_sta_info[mac_id].status = 1;
+                       pmlmeinfo->FW_sta_info[mac_id].retry = 0;
+                       break;
+               }
+       }
+
+       return mac_id;
+}
+
+void flush_all_cam_entry(struct adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, NULL);
+
+       _rtw_memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
+}
+
+int WMM_param_handler(struct adapter *padapter, struct ndis_802_11_var_ie *pIE)
+{
+       /* struct registry_priv *pregpriv = &padapter->registrypriv; */
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (pmlmepriv->qospriv.qos_option == 0) {
+               pmlmeinfo->WMM_enable = 0;
+               return _FAIL;
+       }
+
+       pmlmeinfo->WMM_enable = 1;
+       memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
+       return true;
+}
+
+void WMMOnAssocRsp(struct adapter *padapter)
+{
+       u8      ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
+       u8      acm_mask;
+       u16     TXOP;
+       u32     acParm, i;
+       u32     edca[4], inx[4];
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct xmit_priv                *pxmitpriv = &padapter->xmitpriv;
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+
+       if (pmlmeinfo->WMM_enable == 0) {
+               padapter->mlmepriv.acm_mask = 0;
+               return;
+       }
+
+       acm_mask = 0;
+
+       if (pmlmeext->cur_wireless_mode == WIRELESS_11B)
+               aSifsTime = 10;
+       else
+               aSifsTime = 16;
+
+       for (i = 0; i < 4; i++) {
+               ACI = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 5) & 0x03;
+               ACM = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 4) & 0x01;
+
+               /* AIFS = AIFSN * slot time + SIFS - r2t phy delay */
+               AIFS = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN & 0x0f) * pmlmeinfo->slotTime + aSifsTime;
+
+               ECWMin = (pmlmeinfo->WMM_param.ac_param[i].CW & 0x0f);
+               ECWMax = (pmlmeinfo->WMM_param.ac_param[i].CW & 0xf0) >> 4;
+               TXOP = le16_to_cpu(pmlmeinfo->WMM_param.ac_param[i].TXOP_limit);
+
+               acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
+
+               switch (ACI) {
+               case 0x0:
+                       rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
+                       acm_mask |= (ACM ? BIT(1) : 0);
+                       edca[XMIT_BE_QUEUE] = acParm;
+                       break;
+               case 0x1:
+                       rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
+                       edca[XMIT_BK_QUEUE] = acParm;
+                       break;
+               case 0x2:
+                       rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
+                       acm_mask |= (ACM ? BIT(2) : 0);
+                       edca[XMIT_VI_QUEUE] = acParm;
+                       break;
+               case 0x3:
+                       rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
+                       acm_mask |= (ACM ? BIT(3) : 0);
+                       edca[XMIT_VO_QUEUE] = acParm;
+                       break;
+               }
+
+               DBG_88E("WMM(%x): %x, %x\n", ACI, ACM, acParm);
+       }
+
+       if (padapter->registrypriv.acm_method == 1)
+               rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
+       else
+               padapter->mlmepriv.acm_mask = acm_mask;
+
+       inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
+
+       if (pregpriv->wifi_spec == 1) {
+               u32     j, tmp, change_inx;
+
+               /* entry indx: 0->vo, 1->vi, 2->be, 3->bk. */
+               for (i = 0; i < 4; i++) {
+                       for (j = i+1; j < 4; j++) {
+                               /* compare CW and AIFS */
+                               if ((edca[j] & 0xFFFF) < (edca[i] & 0xFFFF)) {
+                                       change_inx = true;
+                               } else if ((edca[j] & 0xFFFF) == (edca[i] & 0xFFFF)) {
+                                       /* compare TXOP */
+                                       if ((edca[j] >> 16) > (edca[i] >> 16))
+                                               change_inx = true;
+                               }
+
+                               if (change_inx) {
+                                       tmp = edca[i];
+                                       edca[i] = edca[j];
+                                       edca[j] = tmp;
+
+                                       tmp = inx[i];
+                                       inx[i] = inx[j];
+                                       inx[j] = tmp;
+
+                                       change_inx = false;
+                               }
+                       }
+               }
+       }
+
+       for (i = 0; i < 4; i++) {
+               pxmitpriv->wmm_para_seq[i] = inx[i];
+               DBG_88E("wmm_para_seq(%d): %d\n", i, pxmitpriv->wmm_para_seq[i]);
+       }
+
+       return;
+}
+
+static void bwmode_update_check(struct adapter *padapter, struct ndis_802_11_var_ie *pIE)
+{
+       unsigned char    new_bwmode;
+       unsigned char  new_ch_offset;
+       struct HT_info_element   *pHT_info;
+       struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct registry_priv *pregistrypriv = &padapter->registrypriv;
+       struct ht_priv                  *phtpriv = &pmlmepriv->htpriv;
+
+       if (!pIE)
+               return;
+
+       if (!phtpriv)
+               return;
+
+       if (pIE->Length > sizeof(struct HT_info_element))
+               return;
+
+       pHT_info = (struct HT_info_element *)pIE->data;
+
+       if ((pHT_info->infos[0] & BIT(2)) && pregistrypriv->cbw40_enable) {
+               new_bwmode = HT_CHANNEL_WIDTH_40;
+
+               switch (pHT_info->infos[0] & 0x3) {
+               case 1:
+                       new_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
+                       break;
+               case 3:
+                       new_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
+                       break;
+               default:
+                       new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                       break;
+               }
+       } else {
+               new_bwmode = HT_CHANNEL_WIDTH_20;
+               new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+       }
+
+       if ((new_bwmode != pmlmeext->cur_bwmode) ||
+           (new_ch_offset != pmlmeext->cur_ch_offset)) {
+               pmlmeinfo->bwmode_updated = true;
+
+               pmlmeext->cur_bwmode = new_bwmode;
+               pmlmeext->cur_ch_offset = new_ch_offset;
+
+               /* update HT info also */
+               HT_info_handler(padapter, pIE);
+       } else {
+               pmlmeinfo->bwmode_updated = false;
+       }
+
+       if (pmlmeinfo->bwmode_updated) {
+               struct sta_info *psta;
+               struct wlan_bssid_ex    *cur_network = &(pmlmeinfo->network);
+               struct sta_priv *pstapriv = &padapter->stapriv;
+
+               /* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
+
+               /* update ap's stainfo */
+               psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
+               if (psta) {
+                       struct ht_priv  *phtpriv_sta = &psta->htpriv;
+
+                       if (phtpriv_sta->ht_option) {
+                               /*  bwmode */
+                               phtpriv_sta->bwmode = pmlmeext->cur_bwmode;
+                               phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
+                       } else {
+                               phtpriv_sta->bwmode = HT_CHANNEL_WIDTH_20;
+                               phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
+                       }
+               }
+       }
+}
+
+void HT_caps_handler(struct adapter *padapter, struct ndis_802_11_var_ie *pIE)
+{
+       unsigned int    i;
+       u8      rf_type;
+       u8      max_AMPDU_len, min_MPDU_spacing;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct ht_priv                  *phtpriv = &pmlmepriv->htpriv;
+
+       if (pIE == NULL)
+               return;
+
+       if (!phtpriv->ht_option)
+               return;
+
+       pmlmeinfo->HT_caps_enable = 1;
+
+       for (i = 0; i < (pIE->Length); i++) {
+               if (i != 2) {
+                       /*      Got the endian issue here. */
+                       pmlmeinfo->HT_caps.u.HT_cap[i] &= (pIE->data[i]);
+               } else {
+                       /* modify from  fw by Thomas 2010/11/17 */
+                       if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
+                               max_AMPDU_len = (pIE->data[i] & 0x3);
+                       else
+                               max_AMPDU_len = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3);
+
+                       if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
+                               min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c);
+                       else
+                               min_MPDU_spacing = (pIE->data[i] & 0x1c);
+
+                       pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
+               }
+       }
+
+       rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
+
+       /* update the MCS rates */
+       for (i = 0; i < 16; i++) {
+               if ((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
+                       pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
+               else
+                       pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
+       }
+       return;
+}
+
+void HT_info_handler(struct adapter *padapter, struct ndis_802_11_var_ie *pIE)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct ht_priv                  *phtpriv = &pmlmepriv->htpriv;
+
+       if (pIE == NULL)
+               return;
+
+       if (!phtpriv->ht_option)
+               return;
+
+       if (pIE->Length > sizeof(struct HT_info_element))
+               return;
+
+       pmlmeinfo->HT_info_enable = 1;
+       memcpy(&(pmlmeinfo->HT_info), pIE->data, pIE->Length);
+       return;
+}
+
+void HTOnAssocRsp(struct adapter *padapter)
+{
+       unsigned char           max_AMPDU_len;
+       unsigned char           min_MPDU_spacing;
+       /* struct registry_priv  *pregpriv = &padapter->registrypriv; */
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       DBG_88E("%s\n", __func__);
+
+       if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable)) {
+               pmlmeinfo->HT_enable = 1;
+       } else {
+               pmlmeinfo->HT_enable = 0;
+               return;
+       }
+
+       /* handle A-MPDU parameter field */
+       /*
+               AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
+               AMPDU_para [4:2]:Min MPDU Start Spacing
+       */
+       max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
+
+       min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
+}
+
+void ERP_IE_handler(struct adapter *padapter, struct ndis_802_11_var_ie *pIE)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (pIE->Length > 1)
+               return;
+
+       pmlmeinfo->ERP_enable = 1;
+       memcpy(&(pmlmeinfo->ERP_IE), pIE->data, pIE->Length);
+}
+
+void VCS_update(struct adapter *padapter, struct sta_info *psta)
+{
+       struct registry_priv     *pregpriv = &padapter->registrypriv;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       switch (pregpriv->vrtl_carrier_sense) { /* 0:off 1:on 2:auto */
+       case 0: /* off */
+               psta->rtsen = 0;
+               psta->cts2self = 0;
+               break;
+       case 1: /* on */
+               if (pregpriv->vcs_type == 1) { /* 1:RTS/CTS 2:CTS to self */
+                       psta->rtsen = 1;
+                       psta->cts2self = 0;
+               } else {
+                       psta->rtsen = 0;
+                       psta->cts2self = 1;
+               }
+               break;
+       case 2: /* auto */
+       default:
+               if ((pmlmeinfo->ERP_enable) && (pmlmeinfo->ERP_IE & BIT(1))) {
+                       if (pregpriv->vcs_type == 1) {
+                               psta->rtsen = 1;
+                               psta->cts2self = 0;
+                       } else {
+                               psta->rtsen = 0;
+                               psta->cts2self = 1;
+                       }
+               } else {
+                       psta->rtsen = 0;
+                       psta->cts2self = 0;
+               }
+               break;
+       }
+}
+
+int rtw_check_bcn_info(struct adapter  *Adapter, u8 *pframe, u32 packet_len)
+{
+       unsigned int            len;
+       unsigned char           *p;
+       unsigned short  val16, subtype;
+       struct wlan_network *cur_network = &(Adapter->mlmepriv.cur_network);
+       /* u8 wpa_ie[255], rsn_ie[255]; */
+       u16 wpa_len = 0, rsn_len = 0;
+       u8 encryp_protocol = 0;
+       struct wlan_bssid_ex *bssid;
+       int group_cipher = 0, pairwise_cipher = 0, is_8021x = 0;
+       unsigned char *pbuf;
+       u32 wpa_ielen = 0;
+       u8 *pbssid = GetAddr3Ptr(pframe);
+       u32 hidden_ssid = 0;
+       struct HT_info_element *pht_info = NULL;
+       struct rtw_ieee80211_ht_cap *pht_cap = NULL;
+       u32 bcn_channel;
+       unsigned short  ht_cap_info;
+       unsigned char   ht_info_infos_0;
+
+       if (is_client_associated_to_ap(Adapter) == false)
+               return true;
+
+       len = packet_len - sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       if (len > MAX_IE_SZ) {
+               DBG_88E("%s IE too long for survey event\n", __func__);
+               return _FAIL;
+       }
+
+       if (_rtw_memcmp(cur_network->network.MacAddress, pbssid, 6) == false) {
+               DBG_88E("Oops: rtw_check_network_encrypt linked but recv other bssid bcn\n%pM %pM\n",
+                       (pbssid), (cur_network->network.MacAddress));
+               return true;
+       }
+
+       bssid = (struct wlan_bssid_ex *)rtw_zmalloc(sizeof(struct wlan_bssid_ex));
+
+       subtype = GetFrameSubType(pframe) >> 4;
+
+       if (subtype == WIFI_BEACON)
+               bssid->Reserved[0] = 1;
+
+       bssid->Length = sizeof(struct wlan_bssid_ex) - MAX_IE_SZ + len;
+
+       /* below is to copy the information element */
+       bssid->IELength = len;
+       memcpy(bssid->IEs, (pframe + sizeof(struct rtw_ieee80211_hdr_3addr)), bssid->IELength);
+
+       /* check bw and channel offset */
+       /* parsing HT_CAP_IE */
+       p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+       if (p && len > 0) {
+               pht_cap = (struct rtw_ieee80211_ht_cap *)(p + 2);
+               ht_cap_info = pht_cap->cap_info;
+       } else {
+               ht_cap_info = 0;
+       }
+       /* parsing HT_INFO_IE */
+       p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+       if (p && len > 0) {
+                       pht_info = (struct HT_info_element *)(p + 2);
+                       ht_info_infos_0 = pht_info->infos[0];
+       } else {
+                       ht_info_infos_0 = 0;
+       }
+       if (ht_cap_info != cur_network->BcnInfo.ht_cap_info ||
+           ((ht_info_infos_0&0x03) != (cur_network->BcnInfo.ht_info_infos_0&0x03))) {
+                       DBG_88E("%s bcn now: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
+                               ht_cap_info, ht_info_infos_0);
+                       DBG_88E("%s bcn link: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
+                               cur_network->BcnInfo.ht_cap_info, cur_network->BcnInfo.ht_info_infos_0);
+                       DBG_88E("%s bw mode change, disconnect\n", __func__);
+                       /* bcn_info_update */
+                       cur_network->BcnInfo.ht_cap_info = ht_cap_info;
+                       cur_network->BcnInfo.ht_info_infos_0 = ht_info_infos_0;
+                       /* to do : need to check that whether modify related register of BB or not */
+                       /* goto _mismatch; */
+       }
+
+       /* Checking for channel */
+       p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _DSSET_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+       if (p) {
+                       bcn_channel = *(p + 2);
+       } else {/* In 5G, some ap do not have DSSET IE checking HT info for channel */
+                       p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+                       if (pht_info) {
+                                       bcn_channel = pht_info->primary_channel;
+                       } else { /* we don't find channel IE, so don't check it */
+                                       DBG_88E("Oops: %s we don't find channel IE, so don't check it\n", __func__);
+                                       bcn_channel = Adapter->mlmeextpriv.cur_channel;
+                       }
+       }
+       if (bcn_channel != Adapter->mlmeextpriv.cur_channel) {
+                       DBG_88E("%s beacon channel:%d cur channel:%d disconnect\n", __func__,
+                               bcn_channel, Adapter->mlmeextpriv.cur_channel);
+                       goto _mismatch;
+       }
+
+       /* checking SSID */
+       p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SSID_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
+       if (p == NULL) {
+               DBG_88E("%s marc: cannot find SSID for survey event\n", __func__);
+               hidden_ssid = true;
+       } else {
+               hidden_ssid = false;
+       }
+
+       if ((NULL != p) && (false == hidden_ssid && (*(p + 1)))) {
+               memcpy(bssid->Ssid.Ssid, (p + 2), *(p + 1));
+               bssid->Ssid.SsidLength = *(p + 1);
+       } else {
+               bssid->Ssid.SsidLength = 0;
+               bssid->Ssid.Ssid[0] = '\0';
+       }
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("%s bssid.Ssid.Ssid:%s bssid.Ssid.SsidLength:%d "
+                               "cur_network->network.Ssid.Ssid:%s len:%d\n", __func__, bssid->Ssid.Ssid,
+                               bssid->Ssid.SsidLength, cur_network->network.Ssid.Ssid,
+                               cur_network->network.Ssid.SsidLength));
+
+       if (!_rtw_memcmp(bssid->Ssid.Ssid, cur_network->network.Ssid.Ssid, 32) ||
+           bssid->Ssid.SsidLength != cur_network->network.Ssid.SsidLength) {
+               if (bssid->Ssid.Ssid[0] != '\0' && bssid->Ssid.SsidLength != 0) { /* not hidden ssid */
+                       DBG_88E("%s(), SSID is not match return FAIL\n", __func__);
+                       goto _mismatch;
+               }
+       }
+
+       /* check encryption info */
+       val16 = rtw_get_capability((struct wlan_bssid_ex *)bssid);
+
+       if (val16 & BIT(4))
+               bssid->Privacy = 1;
+       else
+               bssid->Privacy = 0;
+
+       RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
+                ("%s(): cur_network->network.Privacy is %d, bssid.Privacy is %d\n",
+                __func__, cur_network->network.Privacy, bssid->Privacy));
+       if (cur_network->network.Privacy != bssid->Privacy) {
+               DBG_88E("%s(), privacy is not match return FAIL\n", __func__);
+               goto _mismatch;
+       }
+
+       rtw_get_sec_ie(bssid->IEs, bssid->IELength, NULL, &rsn_len, NULL, &wpa_len);
+
+       if (rsn_len > 0) {
+               encryp_protocol = ENCRYP_PROTOCOL_WPA2;
+       } else if (wpa_len > 0) {
+               encryp_protocol = ENCRYP_PROTOCOL_WPA;
+       } else {
+               if (bssid->Privacy)
+                       encryp_protocol = ENCRYP_PROTOCOL_WEP;
+       }
+
+       if (cur_network->BcnInfo.encryp_protocol != encryp_protocol) {
+               DBG_88E("%s(): enctyp is not match , return FAIL\n", __func__);
+               goto _mismatch;
+       }
+
+       if (encryp_protocol == ENCRYP_PROTOCOL_WPA || encryp_protocol == ENCRYP_PROTOCOL_WPA2) {
+               pbuf = rtw_get_wpa_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
+               if (pbuf && (wpa_ielen > 0)) {
+                       if (_SUCCESS == rtw_parse_wpa_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
+                               RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
+                                        ("%s pnetwork->pairwise_cipher: %d, group_cipher is %d, is_8021x is %d\n", __func__,
+                                        pairwise_cipher, group_cipher, is_8021x));
+                       }
+               } else {
+                       pbuf = rtw_get_wpa2_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
+
+                       if (pbuf && (wpa_ielen > 0)) {
+                               if (_SUCCESS == rtw_parse_wpa2_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
+                                       RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
+                                                ("%s pnetwork->pairwise_cipher: %d, pnetwork->group_cipher is %d, is_802x is %d\n",
+                                                 __func__, pairwise_cipher, group_cipher, is_8021x));
+                               }
+                       }
+               }
+
+               RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
+                        ("%s cur_network->group_cipher is %d: %d\n", __func__, cur_network->BcnInfo.group_cipher, group_cipher));
+               if (pairwise_cipher != cur_network->BcnInfo.pairwise_cipher || group_cipher != cur_network->BcnInfo.group_cipher) {
+                       DBG_88E("%s pairwise_cipher(%x:%x) or group_cipher(%x:%x) is not match , return FAIL\n", __func__,
+                               pairwise_cipher, cur_network->BcnInfo.pairwise_cipher,
+                               group_cipher, cur_network->BcnInfo.group_cipher);
+                       goto _mismatch;
+               }
+
+               if (is_8021x != cur_network->BcnInfo.is_8021x) {
+                       DBG_88E("%s authentication is not match , return FAIL\n", __func__);
+                       goto _mismatch;
+               }
+       }
+
+       kfree(bssid);
+       return _SUCCESS;
+
+_mismatch:
+       kfree(bssid);
+       return _FAIL;
+
+       _func_exit_;
+}
+
+void update_beacon_info(struct adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
+{
+       unsigned int i;
+       unsigned int len;
+       struct ndis_802_11_var_ie *pIE;
+
+       len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
+
+       for (i = 0; i < len;) {
+               pIE = (struct ndis_802_11_var_ie *)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
+
+               switch (pIE->ElementID) {
+               case _HT_EXTRA_INFO_IE_:        /* HT info */
+                       /* HT_info_handler(padapter, pIE); */
+                       bwmode_update_check(padapter, pIE);
+                       break;
+               case _ERPINFO_IE_:
+                       ERP_IE_handler(padapter, pIE);
+                       VCS_update(padapter, psta);
+                       break;
+               default:
+                       break;
+               }
+
+               i += (pIE->Length + 2);
+       }
+}
+
+unsigned int is_ap_in_tkip(struct adapter *padapter)
+{
+       u32 i;
+       struct ndis_802_11_var_ie *pIE;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wlan_bssid_ex            *cur_network = &(pmlmeinfo->network);
+
+       if (rtw_get_capability((struct wlan_bssid_ex *)cur_network) & WLAN_CAPABILITY_PRIVACY) {
+               for (i = sizeof(struct ndis_802_11_fixed_ie); i < pmlmeinfo->network.IELength;) {
+                       pIE = (struct ndis_802_11_var_ie *)(pmlmeinfo->network.IEs + i);
+
+                       switch (pIE->ElementID) {
+                       case _VENDOR_SPECIFIC_IE_:
+                               if ((_rtw_memcmp(pIE->data, RTW_WPA_OUI, 4)) && (_rtw_memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4)))
+                                       return true;
+                               break;
+                       case _RSN_IE_2_:
+                               if (_rtw_memcmp((pIE->data + 8), RSN_TKIP_CIPHER, 4))
+                                       return true;
+                       default:
+                               break;
+                       }
+
+                       i += (pIE->Length + 2);
+               }
+               return false;
+       } else {
+               return false;
+       }
+}
+
+unsigned int should_forbid_n_rate(struct adapter *padapter)
+{
+       u32 i;
+       struct ndis_802_11_var_ie *pIE;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct wlan_bssid_ex  *cur_network = &pmlmepriv->cur_network.network;
+
+       if (rtw_get_capability((struct wlan_bssid_ex *)cur_network) & WLAN_CAPABILITY_PRIVACY) {
+               for (i = sizeof(struct ndis_802_11_fixed_ie); i < cur_network->IELength;) {
+                       pIE = (struct ndis_802_11_var_ie *)(cur_network->IEs + i);
+
+                       switch (pIE->ElementID) {
+                       case _VENDOR_SPECIFIC_IE_:
+                               if (_rtw_memcmp(pIE->data, RTW_WPA_OUI, 4) &&
+                                   ((_rtw_memcmp((pIE->data + 12), WPA_CIPHER_SUITE_CCMP, 4)) ||
+                                   (_rtw_memcmp((pIE->data + 16), WPA_CIPHER_SUITE_CCMP, 4))))
+                                       return false;
+                               break;
+                       case _RSN_IE_2_:
+                               if  ((_rtw_memcmp((pIE->data + 8), RSN_CIPHER_SUITE_CCMP, 4))  ||
+                                      (_rtw_memcmp((pIE->data + 12), RSN_CIPHER_SUITE_CCMP, 4)))
+                               return false;
+                       default:
+                               break;
+                       }
+
+                       i += (pIE->Length + 2);
+               }
+
+               return true;
+       } else {
+               return false;
+       }
+}
+
+unsigned int is_ap_in_wep(struct adapter *padapter)
+{
+       u32 i;
+       struct ndis_802_11_var_ie *pIE;
+       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wlan_bssid_ex            *cur_network = &(pmlmeinfo->network);
+
+       if (rtw_get_capability((struct wlan_bssid_ex *)cur_network) & WLAN_CAPABILITY_PRIVACY) {
+               for (i = sizeof(struct ndis_802_11_fixed_ie); i < pmlmeinfo->network.IELength;) {
+                       pIE = (struct ndis_802_11_var_ie *)(pmlmeinfo->network.IEs + i);
+
+                       switch (pIE->ElementID) {
+                       case _VENDOR_SPECIFIC_IE_:
+                               if (_rtw_memcmp(pIE->data, RTW_WPA_OUI, 4))
+                                       return false;
+                               break;
+                       case _RSN_IE_2_:
+                               return false;
+                       default:
+                               break;
+                       }
+                       i += (pIE->Length + 2);
+               }
+               return true;
+       } else {
+               return false;
+       }
+}
+
+int wifirate2_ratetbl_inx(unsigned char rate)
+{
+       int     inx = 0;
+       rate = rate & 0x7f;
+
+       switch (rate) {
+       case 54*2:
+               inx = 11;
+               break;
+       case 48*2:
+               inx = 10;
+               break;
+       case 36*2:
+               inx = 9;
+               break;
+       case 24*2:
+               inx = 8;
+               break;
+       case 18*2:
+               inx = 7;
+               break;
+       case 12*2:
+               inx = 6;
+               break;
+       case 9*2:
+               inx = 5;
+               break;
+       case 6*2:
+               inx = 4;
+               break;
+       case 11*2:
+               inx = 3;
+               break;
+       case 11:
+               inx = 2;
+               break;
+       case 2*2:
+               inx = 1;
+               break;
+       case 1*2:
+               inx = 0;
+               break;
+       }
+       return inx;
+}
+
+unsigned int update_basic_rate(unsigned char *ptn, unsigned int ptn_sz)
+{
+       unsigned int i, num_of_rate;
+       unsigned int mask = 0;
+
+       num_of_rate = (ptn_sz > NumRates) ? NumRates : ptn_sz;
+
+       for (i = 0; i < num_of_rate; i++) {
+               if ((*(ptn + i)) & 0x80)
+                       mask |= 0x1 << wifirate2_ratetbl_inx(*(ptn + i));
+       }
+       return mask;
+}
+
+unsigned int update_supported_rate(unsigned char *ptn, unsigned int ptn_sz)
+{
+       unsigned int i, num_of_rate;
+       unsigned int mask = 0;
+
+       num_of_rate = (ptn_sz > NumRates) ? NumRates : ptn_sz;
+
+       for (i = 0; i < num_of_rate; i++)
+               mask |= 0x1 << wifirate2_ratetbl_inx(*(ptn + i));
+       return mask;
+}
+
+unsigned int update_MSC_rate(struct HT_caps_element *pHT_caps)
+{
+       unsigned int mask = 0;
+
+       mask = ((pHT_caps->u.HT_cap_element.MCS_rate[0] << 12) | (pHT_caps->u.HT_cap_element.MCS_rate[1] << 20));
+
+       return mask;
+}
+
+int support_short_GI(struct adapter *padapter, struct HT_caps_element *pHT_caps)
+{
+       unsigned char                                   bit_offset;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (!(pmlmeinfo->HT_enable))
+               return _FAIL;
+
+       if ((pmlmeinfo->assoc_AP_vendor == HT_IOT_PEER_RALINK))
+               return _FAIL;
+
+       bit_offset = (pmlmeext->cur_bwmode & HT_CHANNEL_WIDTH_40) ? 6 : 5;
+
+       if (__le16_to_cpu(pHT_caps->u.HT_cap_element.HT_caps_info) & (0x1 << bit_offset))
+               return _SUCCESS;
+       else
+               return _FAIL;
+}
+
+unsigned char get_highest_rate_idx(u32 mask)
+{
+       int i;
+       unsigned char rate_idx = 0;
+
+       for (i = 27; i >= 0; i--) {
+               if (mask & BIT(i)) {
+                       rate_idx = i;
+                       break;
+               }
+       }
+       return rate_idx;
+}
+
+void Update_RA_Entry(struct adapter *padapter, u32 mac_id)
+{
+       rtw_hal_update_ra_mask(padapter, mac_id, 0);
+}
+
+static void enable_rate_adaptive(struct adapter *padapter, u32 mac_id)
+{
+       Update_RA_Entry(padapter, mac_id);
+}
+
+void set_sta_rate(struct adapter *padapter, struct sta_info *psta)
+{
+       /* rate adaptive */
+       enable_rate_adaptive(padapter, psta->mac_id);
+}
+
+/*  Update RRSR and Rate for USERATE */
+void update_tx_basic_rate(struct adapter *padapter, u8 wirelessmode)
+{
+       unsigned char supported_rates[NDIS_802_11_LENGTH_RATES_EX];
+#ifdef CONFIG_88EU_P2P
+       struct wifidirect_info *pwdinfo = &padapter->wdinfo;
+
+       /*      Added by Albert 2011/03/22 */
+       /*      In the P2P mode, the driver should not support the b mode. */
+       /*      So, the Tx packet shouldn't use the CCK rate */
+       if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
+               return;
+#endif /* CONFIG_88EU_P2P */
+       _rtw_memset(supported_rates, 0, NDIS_802_11_LENGTH_RATES_EX);
+
+       if ((wirelessmode & WIRELESS_11B) && (wirelessmode == WIRELESS_11B)) {
+               memcpy(supported_rates, rtw_basic_rate_cck, 4);
+       } else if (wirelessmode & WIRELESS_11B) {
+               memcpy(supported_rates, rtw_basic_rate_mix, 7);
+       } else {
+               memcpy(supported_rates, rtw_basic_rate_ofdm, 3);
+       }
+
+       if (wirelessmode & WIRELESS_11B)
+               update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
+       else
+               update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
+
+       rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, supported_rates);
+}
+
+unsigned char check_assoc_AP(u8 *pframe, uint len)
+{
+       unsigned int i;
+       struct ndis_802_11_var_ie *pIE;
+       u8      epigram_vendor_flag;
+       u8      ralink_vendor_flag;
+       epigram_vendor_flag = 0;
+       ralink_vendor_flag = 0;
+
+       for (i = sizeof(struct ndis_802_11_fixed_ie); i < len;) {
+               pIE = (struct ndis_802_11_var_ie *)(pframe + i);
+
+               switch (pIE->ElementID) {
+               case _VENDOR_SPECIFIC_IE_:
+                       if ((_rtw_memcmp(pIE->data, ARTHEROS_OUI1, 3)) ||
+                           (_rtw_memcmp(pIE->data, ARTHEROS_OUI2, 3))) {
+                               DBG_88E("link to Artheros AP\n");
+                               return HT_IOT_PEER_ATHEROS;
+                       } else if ((_rtw_memcmp(pIE->data, BROADCOM_OUI1, 3)) ||
+                                  (_rtw_memcmp(pIE->data, BROADCOM_OUI2, 3)) ||
+                                  (_rtw_memcmp(pIE->data, BROADCOM_OUI2, 3))) {
+                               DBG_88E("link to Broadcom AP\n");
+                               return HT_IOT_PEER_BROADCOM;
+                       } else if (_rtw_memcmp(pIE->data, MARVELL_OUI, 3)) {
+                               DBG_88E("link to Marvell AP\n");
+                               return HT_IOT_PEER_MARVELL;
+                       } else if (_rtw_memcmp(pIE->data, RALINK_OUI, 3)) {
+                               if (!ralink_vendor_flag) {
+                                       ralink_vendor_flag = 1;
+                               } else {
+                                       DBG_88E("link to Ralink AP\n");
+                                       return HT_IOT_PEER_RALINK;
+                               }
+                       } else if (_rtw_memcmp(pIE->data, CISCO_OUI, 3)) {
+                               DBG_88E("link to Cisco AP\n");
+                               return HT_IOT_PEER_CISCO;
+                       } else if (_rtw_memcmp(pIE->data, REALTEK_OUI, 3)) {
+                               DBG_88E("link to Realtek 96B\n");
+                               return HT_IOT_PEER_REALTEK;
+                       } else if (_rtw_memcmp(pIE->data, AIRGOCAP_OUI, 3)) {
+                               DBG_88E("link to Airgo Cap\n");
+                               return HT_IOT_PEER_AIRGO;
+                       } else if (_rtw_memcmp(pIE->data, EPIGRAM_OUI, 3)) {
+                                epigram_vendor_flag = 1;
+                               if (ralink_vendor_flag) {
+                                       DBG_88E("link to Tenda W311R AP\n");
+                                        return HT_IOT_PEER_TENDA;
+                               } else {
+                                       DBG_88E("Capture EPIGRAM_OUI\n");
+                               }
+                       } else {
+                               break;
+                       }
+
+               default:
+                       break;
+               }
+               i += (pIE->Length + 2);
+       }
+
+       if (ralink_vendor_flag && !epigram_vendor_flag) {
+               DBG_88E("link to Ralink AP\n");
+               return HT_IOT_PEER_RALINK;
+       } else if (ralink_vendor_flag && epigram_vendor_flag) {
+               DBG_88E("link to Tenda W311R AP\n");
+               return HT_IOT_PEER_TENDA;
+       } else {
+               DBG_88E("link to new AP\n");
+               return HT_IOT_PEER_UNKNOWN;
+       }
+}
+
+void update_IOT_info(struct adapter *padapter)
+{
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       switch (pmlmeinfo->assoc_AP_vendor) {
+       case HT_IOT_PEER_MARVELL:
+               pmlmeinfo->turboMode_cts2self = 1;
+               pmlmeinfo->turboMode_rtsen = 0;
+               break;
+       case HT_IOT_PEER_RALINK:
+               pmlmeinfo->turboMode_cts2self = 0;
+               pmlmeinfo->turboMode_rtsen = 1;
+               /* disable high power */
+               Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
+               break;
+       case HT_IOT_PEER_REALTEK:
+               /* rtw_write16(padapter, 0x4cc, 0xffff); */
+               /* rtw_write16(padapter, 0x546, 0x01c0); */
+               /* disable high power */
+               Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
+               break;
+       default:
+               pmlmeinfo->turboMode_cts2self = 0;
+               pmlmeinfo->turboMode_rtsen = 1;
+               break;
+       }
+}
+
+void update_capinfo(struct adapter *Adapter, u16 updateCap)
+{
+       struct mlme_ext_priv    *pmlmeext = &Adapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       bool            ShortPreamble;
+
+       /*  Check preamble mode, 2005.01.06, by rcnjko. */
+       /*  Mark to update preamble value forever, 2008.03.18 by lanhsin */
+
+       if (updateCap & cShortPreamble) { /*  Short Preamble */
+               if (pmlmeinfo->preamble_mode != PREAMBLE_SHORT) { /*  PREAMBLE_LONG or PREAMBLE_AUTO */
+                       ShortPreamble = true;
+                       pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
+                       rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
+               }
+       } else { /*  Long Preamble */
+               if (pmlmeinfo->preamble_mode != PREAMBLE_LONG) {  /*  PREAMBLE_SHORT or PREAMBLE_AUTO */
+                       ShortPreamble = false;
+                       pmlmeinfo->preamble_mode = PREAMBLE_LONG;
+                       rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
+               }
+       }
+
+       if (updateCap & cIBSS) {
+               /* Filen: See 802.11-2007 p.91 */
+               pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
+       } else { /* Filen: See 802.11-2007 p.90 */
+               if (pmlmeext->cur_wireless_mode & (WIRELESS_11G | WIRELESS_11_24N)) {
+                       if (updateCap & cShortSlotTime) { /*  Short Slot Time */
+                               if (pmlmeinfo->slotTime != SHORT_SLOT_TIME)
+                                       pmlmeinfo->slotTime = SHORT_SLOT_TIME;
+                       } else { /*  Long Slot Time */
+                               if (pmlmeinfo->slotTime != NON_SHORT_SLOT_TIME)
+                                       pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
+                       }
+               } else if (pmlmeext->cur_wireless_mode & (WIRELESS_11A | WIRELESS_11_5N)) {
+                       pmlmeinfo->slotTime = SHORT_SLOT_TIME;
+               } else {
+                       /* B Mode */
+                       pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
+               }
+       }
+
+       rtw_hal_set_hwreg(Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime);
+}
+
+void update_wireless_mode(struct adapter *padapter)
+{
+       int ratelen, network_type = 0;
+       u32 SIFS_Timer;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct wlan_bssid_ex    *cur_network = &(pmlmeinfo->network);
+       unsigned char           *rate = cur_network->SupportedRates;
+
+       ratelen = rtw_get_rateset_len(cur_network->SupportedRates);
+
+       if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
+               pmlmeinfo->HT_enable = 1;
+
+       if (pmlmeext->cur_channel > 14) {
+               if (pmlmeinfo->HT_enable)
+                       network_type = WIRELESS_11_5N;
+
+               network_type |= WIRELESS_11A;
+       } else {
+               if (pmlmeinfo->HT_enable)
+                       network_type = WIRELESS_11_24N;
+
+               if ((cckratesonly_included(rate, ratelen)) == true)
+                       network_type |= WIRELESS_11B;
+               else if ((cckrates_included(rate, ratelen)) == true)
+                       network_type |= WIRELESS_11BG;
+               else
+                       network_type |= WIRELESS_11G;
+       }
+
+       pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
+
+       SIFS_Timer = 0x0a0a0808;/* 0x0808 -> for CCK, 0x0a0a -> for OFDM */
+                               /* change this value if having IOT issues. */
+
+       padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RESP_SIFS,  (u8 *)&SIFS_Timer);
+
+       if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
+               update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
+        else
+               update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
+}
+
+void update_bmc_sta_support_rate(struct adapter *padapter, u32 mac_id)
+{
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (pmlmeext->cur_wireless_mode & WIRELESS_11B) {
+               /*  Only B, B/G, and B/G/N AP could use CCK rate */
+               memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), rtw_basic_rate_cck, 4);
+       } else {
+               memcpy((pmlmeinfo->FW_sta_info[mac_id].SupportedRates), rtw_basic_rate_ofdm, 4);
+       }
+}
+
+int update_sta_support_rate(struct adapter *padapter, u8 *pvar_ie, uint var_ie_len, int cam_idx)
+{
+       unsigned int    ie_len;
+       struct ndis_802_11_var_ie *pIE;
+       int     supportRateNum = 0;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       pIE = (struct ndis_802_11_var_ie *)rtw_get_ie(pvar_ie, _SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
+       if (pIE == NULL)
+               return _FAIL;
+
+       memcpy(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates, pIE->data, ie_len);
+       supportRateNum = ie_len;
+
+       pIE = (struct ndis_802_11_var_ie *)rtw_get_ie(pvar_ie, _EXT_SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
+       if (pIE)
+               memcpy((pmlmeinfo->FW_sta_info[cam_idx].SupportedRates + supportRateNum), pIE->data, ie_len);
+
+       return _SUCCESS;
+}
+
+void process_addba_req(struct adapter *padapter, u8 *paddba_req, u8 *addr)
+{
+       struct sta_info *psta;
+       u16 tid;
+       u16 param;
+       struct recv_reorder_ctrl *preorder_ctrl;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct ADDBA_request    *preq = (struct ADDBA_request *)paddba_req;
+       struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       psta = rtw_get_stainfo(pstapriv, addr);
+
+       if (psta) {
+               param = le16_to_cpu(preq->BA_para_set);
+               tid = (param>>2)&0x0f;
+               preorder_ctrl = &psta->recvreorder_ctrl[tid];
+               preorder_ctrl->indicate_seq = 0xffff;
+               preorder_ctrl->enable = (pmlmeinfo->bAcceptAddbaReq) ? true : false;
+       }
+}
+
+void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
+{
+       u8 *pIE;
+       __le32 *pbuf;
+
+       pIE = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
+       pbuf = (__le32 *)pIE;
+
+       pmlmeext->TSFValue = le32_to_cpu(*(pbuf+1));
+
+       pmlmeext->TSFValue = pmlmeext->TSFValue << 32;
+
+       pmlmeext->TSFValue |= le32_to_cpu(*pbuf);
+}
+
+void correct_TSF(struct adapter *padapter, struct mlme_ext_priv *pmlmeext)
+{
+       rtw_hal_set_hwreg(padapter, HW_VAR_CORRECT_TSF, NULL);
+}
+
+void beacon_timing_control(struct adapter *padapter)
+{
+       rtw_hal_bcn_related_reg_setting(padapter);
+}
+
+static struct adapter *pbuddy_padapter;
+
+int rtw_handle_dualmac(struct adapter *adapter, bool init)
+{
+       int status = _SUCCESS;
+
+       if (init) {
+               if (pbuddy_padapter == NULL) {
+                       pbuddy_padapter = adapter;
+                       DBG_88E("%s(): pbuddy_padapter == NULL, Set pbuddy_padapter\n", __func__);
+               } else {
+                       adapter->pbuddy_adapter = pbuddy_padapter;
+                       pbuddy_padapter->pbuddy_adapter = adapter;
+                       /*  clear global value */
+                       pbuddy_padapter = NULL;
+                       DBG_88E("%s(): pbuddy_padapter exist, Exchange Information\n", __func__);
+               }
+       } else {
+               pbuddy_padapter = NULL;
+       }
+       return status;
+}
diff --git a/drivers/staging/rtl8188eu/core/rtw_xmit.c b/drivers/staging/rtl8188eu/core/rtw_xmit.c
new file mode 100644 (file)
index 0000000..bb5cd95
--- /dev/null
@@ -0,0 +1,2447 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTW_XMIT_C_
+
+#include <osdep_service.h>
+#include <drv_types.h>
+#include <wifi.h>
+#include <osdep_intf.h>
+#include <ip.h>
+#include <usb_ops.h>
+#include <usb_osintf.h>
+
+static u8 P802_1H_OUI[P80211_OUI_LEN] = { 0x00, 0x00, 0xf8 };
+static u8 RFC1042_OUI[P80211_OUI_LEN] = { 0x00, 0x00, 0x00 };
+
+static void _init_txservq(struct tx_servq *ptxservq)
+{
+_func_enter_;
+       _rtw_init_listhead(&ptxservq->tx_pending);
+       _rtw_init_queue(&ptxservq->sta_pending);
+       ptxservq->qcnt = 0;
+_func_exit_;
+}
+
+void   _rtw_init_sta_xmit_priv(struct sta_xmit_priv *psta_xmitpriv)
+{
+_func_enter_;
+       _rtw_memset((unsigned char *)psta_xmitpriv, 0, sizeof (struct sta_xmit_priv));
+       _rtw_spinlock_init(&psta_xmitpriv->lock);
+       _init_txservq(&psta_xmitpriv->be_q);
+       _init_txservq(&psta_xmitpriv->bk_q);
+       _init_txservq(&psta_xmitpriv->vi_q);
+       _init_txservq(&psta_xmitpriv->vo_q);
+       _rtw_init_listhead(&psta_xmitpriv->legacy_dz);
+       _rtw_init_listhead(&psta_xmitpriv->apsd);
+
+_func_exit_;
+}
+
+s32    _rtw_init_xmit_priv(struct xmit_priv *pxmitpriv, struct adapter *padapter)
+{
+       int i;
+       struct xmit_buf *pxmitbuf;
+       struct xmit_frame *pxframe;
+       int     res = _SUCCESS;
+       u32 max_xmit_extbuf_size = MAX_XMIT_EXTBUF_SZ;
+       u32 num_xmit_extbuf = NR_XMIT_EXTBUFF;
+
+_func_enter_;
+
+       /*  We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc(). */
+
+       _rtw_spinlock_init(&pxmitpriv->lock);
+       _rtw_init_sema(&pxmitpriv->xmit_sema, 0);
+       _rtw_init_sema(&pxmitpriv->terminate_xmitthread_sema, 0);
+
+       /*
+       Please insert all the queue initializaiton using _rtw_init_queue below
+       */
+
+       pxmitpriv->adapter = padapter;
+
+       _rtw_init_queue(&pxmitpriv->be_pending);
+       _rtw_init_queue(&pxmitpriv->bk_pending);
+       _rtw_init_queue(&pxmitpriv->vi_pending);
+       _rtw_init_queue(&pxmitpriv->vo_pending);
+       _rtw_init_queue(&pxmitpriv->bm_pending);
+
+       _rtw_init_queue(&pxmitpriv->free_xmit_queue);
+
+       /*
+       Please allocate memory with the sz = (struct xmit_frame) * NR_XMITFRAME,
+       and initialize free_xmit_frame below.
+       Please also apply  free_txobj to link_up all the xmit_frames...
+       */
+
+       pxmitpriv->pallocated_frame_buf = rtw_zvmalloc(NR_XMITFRAME * sizeof(struct xmit_frame) + 4);
+
+       if (pxmitpriv->pallocated_frame_buf  == NULL) {
+               pxmitpriv->pxmit_frame_buf = NULL;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("alloc xmit_frame fail!\n"));
+               res = _FAIL;
+               goto exit;
+       }
+       pxmitpriv->pxmit_frame_buf = (u8 *)N_BYTE_ALIGMENT((size_t)(pxmitpriv->pallocated_frame_buf), 4);
+       /* pxmitpriv->pxmit_frame_buf = pxmitpriv->pallocated_frame_buf + 4 - */
+       /*                                              ((size_t) (pxmitpriv->pallocated_frame_buf) &3); */
+
+       pxframe = (struct xmit_frame *)pxmitpriv->pxmit_frame_buf;
+
+       for (i = 0; i < NR_XMITFRAME; i++) {
+               _rtw_init_listhead(&(pxframe->list));
+
+               pxframe->padapter = padapter;
+               pxframe->frame_tag = NULL_FRAMETAG;
+
+               pxframe->pkt = NULL;
+
+               pxframe->buf_addr = NULL;
+               pxframe->pxmitbuf = NULL;
+
+               rtw_list_insert_tail(&(pxframe->list), &(pxmitpriv->free_xmit_queue.queue));
+
+               pxframe++;
+       }
+
+       pxmitpriv->free_xmitframe_cnt = NR_XMITFRAME;
+
+       pxmitpriv->frag_len = MAX_FRAG_THRESHOLD;
+
+       /* init xmit_buf */
+       _rtw_init_queue(&pxmitpriv->free_xmitbuf_queue);
+       _rtw_init_queue(&pxmitpriv->pending_xmitbuf_queue);
+
+       pxmitpriv->pallocated_xmitbuf = rtw_zvmalloc(NR_XMITBUFF * sizeof(struct xmit_buf) + 4);
+
+       if (pxmitpriv->pallocated_xmitbuf  == NULL) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("alloc xmit_buf fail!\n"));
+               res = _FAIL;
+               goto exit;
+       }
+
+       pxmitpriv->pxmitbuf = (u8 *)N_BYTE_ALIGMENT((size_t)(pxmitpriv->pallocated_xmitbuf), 4);
+       /* pxmitpriv->pxmitbuf = pxmitpriv->pallocated_xmitbuf + 4 - */
+       /*                                              ((size_t) (pxmitpriv->pallocated_xmitbuf) &3); */
+
+       pxmitbuf = (struct xmit_buf *)pxmitpriv->pxmitbuf;
+
+       for (i = 0; i < NR_XMITBUFF; i++) {
+               _rtw_init_listhead(&pxmitbuf->list);
+
+               pxmitbuf->priv_data = NULL;
+               pxmitbuf->padapter = padapter;
+               pxmitbuf->ext_tag = false;
+
+               /* Tx buf allocation may fail sometimes, so sleep and retry. */
+               res = rtw_os_xmit_resource_alloc(padapter, pxmitbuf, (MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ));
+               if (res == _FAIL) {
+                       rtw_msleep_os(10);
+                       res = rtw_os_xmit_resource_alloc(padapter, pxmitbuf, (MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ));
+                       if (res == _FAIL) {
+                               goto exit;
+                       }
+               }
+
+               pxmitbuf->flags = XMIT_VO_QUEUE;
+
+               rtw_list_insert_tail(&pxmitbuf->list, &(pxmitpriv->free_xmitbuf_queue.queue));
+               pxmitbuf++;
+       }
+
+       pxmitpriv->free_xmitbuf_cnt = NR_XMITBUFF;
+
+       /*  Init xmit extension buff */
+       _rtw_init_queue(&pxmitpriv->free_xmit_extbuf_queue);
+
+       pxmitpriv->pallocated_xmit_extbuf = rtw_zvmalloc(num_xmit_extbuf * sizeof(struct xmit_buf) + 4);
+
+       if (pxmitpriv->pallocated_xmit_extbuf  == NULL) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("alloc xmit_extbuf fail!\n"));
+               res = _FAIL;
+               goto exit;
+       }
+
+       pxmitpriv->pxmit_extbuf = (u8 *)N_BYTE_ALIGMENT((size_t)(pxmitpriv->pallocated_xmit_extbuf), 4);
+
+       pxmitbuf = (struct xmit_buf *)pxmitpriv->pxmit_extbuf;
+
+       for (i = 0; i < num_xmit_extbuf; i++) {
+               _rtw_init_listhead(&pxmitbuf->list);
+
+               pxmitbuf->priv_data = NULL;
+               pxmitbuf->padapter = padapter;
+               pxmitbuf->ext_tag = true;
+
+               res = rtw_os_xmit_resource_alloc(padapter, pxmitbuf, max_xmit_extbuf_size + XMITBUF_ALIGN_SZ);
+               if (res == _FAIL) {
+                       res = _FAIL;
+                       goto exit;
+               }
+
+               rtw_list_insert_tail(&pxmitbuf->list, &(pxmitpriv->free_xmit_extbuf_queue.queue));
+               pxmitbuf++;
+       }
+
+       pxmitpriv->free_xmit_extbuf_cnt = num_xmit_extbuf;
+
+       rtw_alloc_hwxmits(padapter);
+       rtw_init_hwxmits(pxmitpriv->hwxmits, pxmitpriv->hwxmit_entry);
+
+       for (i = 0; i < 4; i++)
+               pxmitpriv->wmm_para_seq[i] = i;
+
+       pxmitpriv->txirp_cnt = 1;
+
+       _rtw_init_sema(&(pxmitpriv->tx_retevt), 0);
+
+       /* per AC pending irp */
+       pxmitpriv->beq_cnt = 0;
+       pxmitpriv->bkq_cnt = 0;
+       pxmitpriv->viq_cnt = 0;
+       pxmitpriv->voq_cnt = 0;
+
+       pxmitpriv->ack_tx = false;
+       _rtw_mutex_init(&pxmitpriv->ack_tx_mutex);
+       rtw_sctx_init(&pxmitpriv->ack_tx_ops, 0);
+
+       rtw_hal_init_xmit_priv(padapter);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+static void  rtw_mfree_xmit_priv_lock (struct xmit_priv *pxmitpriv)
+{
+       _rtw_spinlock_free(&pxmitpriv->lock);
+       _rtw_free_sema(&pxmitpriv->xmit_sema);
+       _rtw_free_sema(&pxmitpriv->terminate_xmitthread_sema);
+
+       _rtw_spinlock_free(&pxmitpriv->be_pending.lock);
+       _rtw_spinlock_free(&pxmitpriv->bk_pending.lock);
+       _rtw_spinlock_free(&pxmitpriv->vi_pending.lock);
+       _rtw_spinlock_free(&pxmitpriv->vo_pending.lock);
+       _rtw_spinlock_free(&pxmitpriv->bm_pending.lock);
+
+       _rtw_spinlock_free(&pxmitpriv->free_xmit_queue.lock);
+       _rtw_spinlock_free(&pxmitpriv->free_xmitbuf_queue.lock);
+       _rtw_spinlock_free(&pxmitpriv->pending_xmitbuf_queue.lock);
+}
+
+void _rtw_free_xmit_priv (struct xmit_priv *pxmitpriv)
+{
+       int i;
+       struct adapter *padapter = pxmitpriv->adapter;
+       struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitpriv->pxmit_frame_buf;
+       struct xmit_buf *pxmitbuf = (struct xmit_buf *)pxmitpriv->pxmitbuf;
+       u32 max_xmit_extbuf_size = MAX_XMIT_EXTBUF_SZ;
+       u32 num_xmit_extbuf = NR_XMIT_EXTBUFF;
+
+ _func_enter_;
+
+       rtw_hal_free_xmit_priv(padapter);
+
+       rtw_mfree_xmit_priv_lock(pxmitpriv);
+
+       if (pxmitpriv->pxmit_frame_buf == NULL)
+               goto out;
+
+       for (i = 0; i < NR_XMITFRAME; i++) {
+               rtw_os_xmit_complete(padapter, pxmitframe);
+
+               pxmitframe++;
+       }
+
+       for (i = 0; i < NR_XMITBUFF; i++) {
+               rtw_os_xmit_resource_free(padapter, pxmitbuf, (MAX_XMITBUF_SZ + XMITBUF_ALIGN_SZ));
+               pxmitbuf++;
+       }
+
+       if (pxmitpriv->pallocated_frame_buf)
+               rtw_vmfree(pxmitpriv->pallocated_frame_buf, NR_XMITFRAME * sizeof(struct xmit_frame) + 4);
+
+       if (pxmitpriv->pallocated_xmitbuf)
+               rtw_vmfree(pxmitpriv->pallocated_xmitbuf, NR_XMITBUFF * sizeof(struct xmit_buf) + 4);
+
+       /*  free xmit extension buff */
+       _rtw_spinlock_free(&pxmitpriv->free_xmit_extbuf_queue.lock);
+
+       pxmitbuf = (struct xmit_buf *)pxmitpriv->pxmit_extbuf;
+       for (i = 0; i < num_xmit_extbuf; i++) {
+               rtw_os_xmit_resource_free(padapter, pxmitbuf, (max_xmit_extbuf_size + XMITBUF_ALIGN_SZ));
+               pxmitbuf++;
+       }
+
+       if (pxmitpriv->pallocated_xmit_extbuf) {
+               rtw_vmfree(pxmitpriv->pallocated_xmit_extbuf, num_xmit_extbuf * sizeof(struct xmit_buf) + 4);
+       }
+
+       rtw_free_hwxmits(padapter);
+
+       _rtw_mutex_free(&pxmitpriv->ack_tx_mutex);
+
+out:
+
+_func_exit_;
+}
+
+static void update_attrib_vcs_info(struct adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       u32     sz;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct sta_info *psta = pattrib->psta;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       if (pattrib->nr_frags != 1)
+               sz = padapter->xmitpriv.frag_len;
+       else /* no frag */
+               sz = pattrib->last_txcmdsz;
+
+       /*  (1) RTS_Threshold is compared to the MPDU, not MSDU. */
+       /*  (2) If there are more than one frag in  this MSDU, only the first frag uses protection frame. */
+       /*              Other fragments are protected by previous fragment. */
+       /*              So we only need to check the length of first fragment. */
+       if (pmlmeext->cur_wireless_mode < WIRELESS_11_24N  || padapter->registrypriv.wifi_spec) {
+               if (sz > padapter->registrypriv.rts_thresh) {
+                       pattrib->vcs_mode = RTS_CTS;
+               } else {
+                       if (psta->rtsen)
+                               pattrib->vcs_mode = RTS_CTS;
+                       else if (psta->cts2self)
+                               pattrib->vcs_mode = CTS_TO_SELF;
+                       else
+                               pattrib->vcs_mode = NONE_VCS;
+               }
+       } else {
+               while (true) {
+                       /* IOT action */
+                       if ((pmlmeinfo->assoc_AP_vendor == HT_IOT_PEER_ATHEROS) && pattrib->ampdu_en &&
+                           (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)) {
+                               pattrib->vcs_mode = CTS_TO_SELF;
+                               break;
+                       }
+
+                       /* check ERP protection */
+                       if (psta->rtsen || psta->cts2self) {
+                               if (psta->rtsen)
+                                       pattrib->vcs_mode = RTS_CTS;
+                               else if (psta->cts2self)
+                                       pattrib->vcs_mode = CTS_TO_SELF;
+
+                               break;
+                       }
+
+                       /* check HT op mode */
+                       if (pattrib->ht_en) {
+                               u8 htopmode = pmlmeinfo->HT_protection;
+                               if ((pmlmeext->cur_bwmode && (htopmode == 2 || htopmode == 3)) ||
+                                   (!pmlmeext->cur_bwmode && htopmode == 3)) {
+                                       pattrib->vcs_mode = RTS_CTS;
+                                       break;
+                               }
+                       }
+
+                       /* check rts */
+                       if (sz > padapter->registrypriv.rts_thresh) {
+                               pattrib->vcs_mode = RTS_CTS;
+                               break;
+                       }
+
+                       /* to do list: check MIMO power save condition. */
+
+                       /* check AMPDU aggregation for TXOP */
+                       if (pattrib->ampdu_en) {
+                               pattrib->vcs_mode = RTS_CTS;
+                               break;
+                       }
+
+                       pattrib->vcs_mode = NONE_VCS;
+                       break;
+               }
+       }
+}
+
+static void update_attrib_phy_info(struct pkt_attrib *pattrib, struct sta_info *psta)
+{
+       /*if (psta->rtsen)
+               pattrib->vcs_mode = RTS_CTS;
+       else if (psta->cts2self)
+               pattrib->vcs_mode = CTS_TO_SELF;
+       else
+               pattrib->vcs_mode = NONE_VCS;*/
+
+       pattrib->mdata = 0;
+       pattrib->eosp = 0;
+       pattrib->triggered = 0;
+
+       /* qos_en, ht_en, init rate, , bw, ch_offset, sgi */
+       pattrib->qos_en = psta->qos_option;
+
+       pattrib->raid = psta->raid;
+       pattrib->ht_en = psta->htpriv.ht_option;
+       pattrib->bwmode = psta->htpriv.bwmode;
+       pattrib->ch_offset = psta->htpriv.ch_offset;
+       pattrib->sgi = psta->htpriv.sgi;
+       pattrib->ampdu_en = false;
+       pattrib->retry_ctrl = false;
+}
+
+u8     qos_acm(u8 acm_mask, u8 priority)
+{
+       u8      change_priority = priority;
+
+       switch (priority) {
+       case 0:
+       case 3:
+               if (acm_mask & BIT(1))
+                       change_priority = 1;
+               break;
+       case 1:
+       case 2:
+               break;
+       case 4:
+       case 5:
+               if (acm_mask & BIT(2))
+                       change_priority = 0;
+               break;
+       case 6:
+       case 7:
+               if (acm_mask & BIT(3))
+                       change_priority = 5;
+               break;
+       default:
+               DBG_88E("qos_acm(): invalid pattrib->priority: %d!!!\n", priority);
+               break;
+       }
+
+       return change_priority;
+}
+
+static void set_qos(struct pkt_file *ppktfile, struct pkt_attrib *pattrib)
+{
+       struct ethhdr etherhdr;
+       struct iphdr ip_hdr;
+       s32 user_prio = 0;
+
+       _rtw_open_pktfile(ppktfile->pkt, ppktfile);
+       _rtw_pktfile_read(ppktfile, (unsigned char *)&etherhdr, ETH_HLEN);
+
+       /*  get user_prio from IP hdr */
+       if (pattrib->ether_type == 0x0800) {
+               _rtw_pktfile_read(ppktfile, (u8 *)&ip_hdr, sizeof(ip_hdr));
+/*             user_prio = (ntohs(ip_hdr.tos) >> 5) & 0x3; */
+               user_prio = ip_hdr.tos >> 5;
+       } else if (pattrib->ether_type == 0x888e) {
+               /*  "When priority processing of data frames is supported, */
+               /*  a STA's SME should send EAPOL-Key frames at the highest priority." */
+               user_prio = 7;
+       }
+
+       pattrib->priority = user_prio;
+       pattrib->hdrlen = WLAN_HDR_A3_QOS_LEN;
+       pattrib->subtype = WIFI_QOS_DATA_TYPE;
+}
+
+static s32 update_attrib(struct adapter *padapter, struct sk_buff *pkt, struct pkt_attrib *pattrib)
+{
+       struct pkt_file pktfile;
+       struct sta_info *psta = NULL;
+       struct ethhdr etherhdr;
+
+       int bmcast;
+       struct sta_priv         *pstapriv = &padapter->stapriv;
+       struct security_priv    *psecuritypriv = &padapter->securitypriv;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       struct qos_priv         *pqospriv = &pmlmepriv->qospriv;
+       int res = _SUCCESS;
+
+ _func_enter_;
+
+       _rtw_open_pktfile(pkt, &pktfile);
+       _rtw_pktfile_read(&pktfile, (u8 *)&etherhdr, ETH_HLEN);
+
+       pattrib->ether_type = ntohs(etherhdr.h_proto);
+
+       memcpy(pattrib->dst, &etherhdr.h_dest, ETH_ALEN);
+       memcpy(pattrib->src, &etherhdr.h_source, ETH_ALEN);
+
+       pattrib->pctrl = 0;
+
+       if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) ||
+           check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) {
+               memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
+               memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+       } else if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
+               memcpy(pattrib->ra, get_bssid(pmlmepriv), ETH_ALEN);
+               memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
+       } else if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
+               memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
+               memcpy(pattrib->ta, get_bssid(pmlmepriv), ETH_ALEN);
+       }
+
+       pattrib->pktlen = pktfile.pkt_len;
+
+       if (ETH_P_IP == pattrib->ether_type) {
+               /*  The following is for DHCP and ARP packet, we use cck1M to tx these packets and let LPS awake some time */
+               /*  to prevent DHCP protocol fail */
+               u8 tmp[24];
+               _rtw_pktfile_read(&pktfile, &tmp[0], 24);
+               pattrib->dhcp_pkt = 0;
+               if (pktfile.pkt_len > 282) {/* MINIMUM_DHCP_PACKET_SIZE) { */
+                       if (ETH_P_IP == pattrib->ether_type) {/*  IP header */
+                               if (((tmp[21] == 68) && (tmp[23] == 67)) ||
+                                   ((tmp[21] == 67) && (tmp[23] == 68))) {
+                                       /*  68 : UDP BOOTP client */
+                                       /*  67 : UDP BOOTP server */
+                                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("====================== update_attrib: get DHCP Packet\n"));
+                                       /*  Use low rate to send DHCP packet. */
+                                       pattrib->dhcp_pkt = 1;
+                               }
+                       }
+               }
+       } else if (0x888e == pattrib->ether_type) {
+               DBG_88E_LEVEL(_drv_info_, "send eapol packet\n");
+       }
+
+       if ((pattrib->ether_type == 0x888e) || (pattrib->dhcp_pkt == 1))
+               rtw_set_scan_deny(padapter, 3000);
+
+       /*  If EAPOL , ARP , OR DHCP packet, driver must be in active mode. */
+       if ((pattrib->ether_type == 0x0806) || (pattrib->ether_type == 0x888e) || (pattrib->dhcp_pkt == 1))
+               rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_SPECIAL_PACKET, 1);
+
+       bmcast = IS_MCAST(pattrib->ra);
+
+       /*  get sta_info */
+       if (bmcast) {
+               psta = rtw_get_bcmc_stainfo(padapter);
+       } else {
+               psta = rtw_get_stainfo(pstapriv, pattrib->ra);
+               if (psta == NULL) { /*  if we cannot get psta => drrp the pkt */
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_alert_, ("\nupdate_attrib => get sta_info fail, ra: %pM\n", (pattrib->ra)));
+                       res = _FAIL;
+                       goto exit;
+               } else if ((check_fwstate(pmlmepriv, WIFI_AP_STATE) == true) && (!(psta->state & _FW_LINKED))) {
+                       res = _FAIL;
+                       goto exit;
+               }
+       }
+
+       if (psta) {
+               pattrib->mac_id = psta->mac_id;
+               /* DBG_88E("%s ==> mac_id(%d)\n", __func__, pattrib->mac_id); */
+               pattrib->psta = psta;
+       } else {
+               /*  if we cannot get psta => drop the pkt */
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_alert_, ("\nupdate_attrib => get sta_info fail, ra:%pM\n", (pattrib->ra)));
+               res = _FAIL;
+               goto exit;
+       }
+
+       pattrib->ack_policy = 0;
+       /*  get ether_hdr_len */
+       pattrib->pkt_hdrlen = ETH_HLEN;/* pattrib->ether_type == 0x8100) ? (14 + 4): 14; vlan tag */
+
+       pattrib->hdrlen = WLAN_HDR_A3_LEN;
+       pattrib->subtype = WIFI_DATA_TYPE;
+       pattrib->priority = 0;
+
+       if (check_fwstate(pmlmepriv, WIFI_AP_STATE|WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE)) {
+               if (psta->qos_option)
+                       set_qos(&pktfile, pattrib);
+       } else {
+               if (pqospriv->qos_option) {
+                       set_qos(&pktfile, pattrib);
+
+                       if (pmlmepriv->acm_mask != 0)
+                               pattrib->priority = qos_acm(pmlmepriv->acm_mask, pattrib->priority);
+               }
+       }
+
+       if (psta->ieee8021x_blocked) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("\n psta->ieee8021x_blocked == true\n"));
+
+               pattrib->encrypt = 0;
+
+               if ((pattrib->ether_type != 0x888e) && !check_fwstate(pmlmepriv, WIFI_MP_STATE)) {
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("\npsta->ieee8021x_blocked == true,  pattrib->ether_type(%.4x) != 0x888e\n", pattrib->ether_type));
+                       res = _FAIL;
+                       goto exit;
+               }
+       } else {
+               GET_ENCRY_ALGO(psecuritypriv, psta, pattrib->encrypt, bmcast);
+
+               switch (psecuritypriv->dot11AuthAlgrthm) {
+               case dot11AuthAlgrthm_Open:
+               case dot11AuthAlgrthm_Shared:
+               case dot11AuthAlgrthm_Auto:
+                       pattrib->key_idx = (u8)psecuritypriv->dot11PrivacyKeyIndex;
+                       break;
+               case dot11AuthAlgrthm_8021X:
+                       if (bmcast)
+                               pattrib->key_idx = (u8)psecuritypriv->dot118021XGrpKeyid;
+                       else
+                               pattrib->key_idx = 0;
+                       break;
+               default:
+                       pattrib->key_idx = 0;
+                       break;
+               }
+       }
+
+       switch (pattrib->encrypt) {
+       case _WEP40_:
+       case _WEP104_:
+               pattrib->iv_len = 4;
+               pattrib->icv_len = 4;
+               break;
+       case _TKIP_:
+               pattrib->iv_len = 8;
+               pattrib->icv_len = 4;
+
+               if (padapter->securitypriv.busetkipkey == _FAIL) {
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_,
+                                ("\npadapter->securitypriv.busetkipkey(%d) == _FAIL drop packet\n",
+                                padapter->securitypriv.busetkipkey));
+                       res = _FAIL;
+                       goto exit;
+               }
+               break;
+       case _AES_:
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("pattrib->encrypt=%d (_AES_)\n", pattrib->encrypt));
+               pattrib->iv_len = 8;
+               pattrib->icv_len = 8;
+               break;
+       default:
+               pattrib->iv_len = 0;
+               pattrib->icv_len = 0;
+               break;
+       }
+
+       RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_,
+                ("update_attrib: encrypt=%d  securitypriv.sw_encrypt=%d\n",
+                 pattrib->encrypt, padapter->securitypriv.sw_encrypt));
+
+       if (pattrib->encrypt &&
+           (padapter->securitypriv.sw_encrypt || !psecuritypriv->hw_decrypted)) {
+               pattrib->bswenc = true;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_,
+                        ("update_attrib: encrypt=%d securitypriv.hw_decrypted=%d bswenc = true\n",
+                         pattrib->encrypt, padapter->securitypriv.sw_encrypt));
+       } else {
+               pattrib->bswenc = false;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("update_attrib: bswenc = false\n"));
+       }
+
+       rtw_set_tx_chksum_offload(pkt, pattrib);
+
+       update_attrib_phy_info(pattrib, psta);
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+static s32 xmitframe_addmic(struct adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       int curfragnum, length;
+       u8      *pframe, *payload, mic[8];
+       struct  mic_data micdata;
+       struct  sta_info *stainfo;
+       struct  pkt_attrib *pattrib = &pxmitframe->attrib;
+       struct  security_priv   *psecuritypriv = &padapter->securitypriv;
+       struct  xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       u8 priority[4] = {0x0, 0x0, 0x0, 0x0};
+       u8 hw_hdr_offset = 0;
+       int bmcst = IS_MCAST(pattrib->ra);
+
+       if (pattrib->psta)
+               stainfo = pattrib->psta;
+       else
+               stainfo = rtw_get_stainfo(&padapter->stapriv , &pattrib->ra[0]);
+
+_func_enter_;
+
+       hw_hdr_offset = TXDESC_SIZE + (pxmitframe->pkt_offset * PACKET_OFFSET_SZ);;
+
+       if (pattrib->encrypt == _TKIP_) {/* if (psecuritypriv->dot11PrivacyAlgrthm == _TKIP_PRIVACY_) */
+               /* encode mic code */
+               if (stainfo != NULL) {
+                       u8 null_key[16] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
+                                          0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
+                                          0x0, 0x0};
+
+                       pframe = pxmitframe->buf_addr + hw_hdr_offset;
+
+                       if (bmcst) {
+                               if (_rtw_memcmp(psecuritypriv->dot118021XGrptxmickey[psecuritypriv->dot118021XGrpKeyid].skey, null_key, 16))
+                                       return _FAIL;
+                               /* start to calculate the mic code */
+                               rtw_secmicsetkey(&micdata, psecuritypriv->dot118021XGrptxmickey[psecuritypriv->dot118021XGrpKeyid].skey);
+                       } else {
+                               if (_rtw_memcmp(&stainfo->dot11tkiptxmickey.skey[0], null_key, 16) == true) {
+                                       /* DbgPrint("\nxmitframe_addmic:stainfo->dot11tkiptxmickey == 0\n"); */
+                                       /* rtw_msleep_os(10); */
+                                       return _FAIL;
+                               }
+                               /* start to calculate the mic code */
+                               rtw_secmicsetkey(&micdata, &stainfo->dot11tkiptxmickey.skey[0]);
+                       }
+
+                       if (pframe[1]&1) {   /* ToDS == 1 */
+                               rtw_secmicappend(&micdata, &pframe[16], 6);  /* DA */
+                               if (pframe[1]&2)  /* From Ds == 1 */
+                                       rtw_secmicappend(&micdata, &pframe[24], 6);
+                               else
+                               rtw_secmicappend(&micdata, &pframe[10], 6);
+                       } else {        /* ToDS == 0 */
+                               rtw_secmicappend(&micdata, &pframe[4], 6);   /* DA */
+                               if (pframe[1]&2)  /* From Ds == 1 */
+                                       rtw_secmicappend(&micdata, &pframe[16], 6);
+                               else
+                                       rtw_secmicappend(&micdata, &pframe[10], 6);
+                       }
+
+                       if (pattrib->qos_en)
+                               priority[0] = (u8)pxmitframe->attrib.priority;
+
+                       rtw_secmicappend(&micdata, &priority[0], 4);
+
+                       payload = pframe;
+
+                       for (curfragnum = 0; curfragnum < pattrib->nr_frags; curfragnum++) {
+                               payload = (u8 *)RND4((size_t)(payload));
+                               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_,
+                                        ("=== curfragnum=%d, pframe = 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x, 0x%.2x,!!!\n",
+                                        curfragnum, *payload, *(payload+1),
+                                        *(payload+2), *(payload+3),
+                                        *(payload+4), *(payload+5),
+                                        *(payload+6), *(payload+7)));
+
+                               payload = payload+pattrib->hdrlen+pattrib->iv_len;
+                               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_,
+                                        ("curfragnum=%d pattrib->hdrlen=%d pattrib->iv_len=%d",
+                                        curfragnum, pattrib->hdrlen, pattrib->iv_len));
+                               if ((curfragnum+1) == pattrib->nr_frags) {
+                                       length = pattrib->last_txcmdsz-pattrib->hdrlen-pattrib->iv_len-((pattrib->bswenc) ? pattrib->icv_len : 0);
+                                       rtw_secmicappend(&micdata, payload, length);
+                                       payload = payload+length;
+                               } else {
+                                       length = pxmitpriv->frag_len-pattrib->hdrlen-pattrib->iv_len-((pattrib->bswenc) ? pattrib->icv_len : 0);
+                                       rtw_secmicappend(&micdata, payload, length);
+                                       payload = payload+length+pattrib->icv_len;
+                                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("curfragnum=%d length=%d pattrib->icv_len=%d", curfragnum, length, pattrib->icv_len));
+                               }
+                       }
+                       rtw_secgetmic(&micdata, &(mic[0]));
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("xmitframe_addmic: before add mic code!!!\n"));
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("xmitframe_addmic: pattrib->last_txcmdsz=%d!!!\n", pattrib->last_txcmdsz));
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("xmitframe_addmic: mic[0]=0x%.2x , mic[1]=0x%.2x , mic[2]= 0x%.2x, mic[3]=0x%.2x\n\
+  mic[4]= 0x%.2x , mic[5]= 0x%.2x , mic[6]= 0x%.2x , mic[7]= 0x%.2x !!!!\n",
+                               mic[0], mic[1], mic[2], mic[3], mic[4], mic[5], mic[6], mic[7]));
+                       /* add mic code  and add the mic code length in last_txcmdsz */
+
+                       memcpy(payload, &(mic[0]), 8);
+                       pattrib->last_txcmdsz += 8;
+
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("\n ======== last pkt ========\n"));
+                       payload = payload-pattrib->last_txcmdsz+8;
+                       for (curfragnum = 0; curfragnum < pattrib->last_txcmdsz; curfragnum = curfragnum+8)
+                                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_,
+                                                (" %.2x,  %.2x,  %.2x,  %.2x,  %.2x,  %.2x,  %.2x,  %.2x ",
+                                                *(payload+curfragnum), *(payload+curfragnum+1),
+                                                *(payload+curfragnum+2), *(payload+curfragnum+3),
+                                                *(payload+curfragnum+4), *(payload+curfragnum+5),
+                                                *(payload+curfragnum+6), *(payload+curfragnum+7)));
+                       } else {
+                               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("xmitframe_addmic: rtw_get_stainfo==NULL!!!\n"));
+                       }
+       }
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+static s32 xmitframe_swencrypt(struct adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       struct  pkt_attrib       *pattrib = &pxmitframe->attrib;
+
+_func_enter_;
+
+       if (pattrib->bswenc) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_alert_, ("### xmitframe_swencrypt\n"));
+               switch (pattrib->encrypt) {
+               case _WEP40_:
+               case _WEP104_:
+                       rtw_wep_encrypt(padapter, (u8 *)pxmitframe);
+                       break;
+               case _TKIP_:
+                       rtw_tkip_encrypt(padapter, (u8 *)pxmitframe);
+                       break;
+               case _AES_:
+                       rtw_aes_encrypt(padapter, (u8 *)pxmitframe);
+                       break;
+               default:
+                       break;
+               }
+       } else {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_notice_, ("### xmitframe_hwencrypt\n"));
+       }
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+s32 rtw_make_wlanhdr (struct adapter *padapter , u8 *hdr, struct pkt_attrib *pattrib)
+{
+       u16 *qc;
+
+       struct rtw_ieee80211_hdr *pwlanhdr = (struct rtw_ieee80211_hdr *)hdr;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       struct qos_priv *pqospriv = &pmlmepriv->qospriv;
+       u8 qos_option = false;
+
+       int res = _SUCCESS;
+       u16 *fctrl = &pwlanhdr->frame_ctl;
+
+       struct sta_info *psta;
+
+       int bmcst = IS_MCAST(pattrib->ra);
+
+_func_enter_;
+
+       if (pattrib->psta) {
+               psta = pattrib->psta;
+       } else {
+               if (bmcst) {
+                       psta = rtw_get_bcmc_stainfo(padapter);
+               } else {
+                       psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
+               }
+       }
+
+       _rtw_memset(hdr, 0, WLANHDR_OFFSET);
+
+       SetFrameSubType(fctrl, pattrib->subtype);
+
+       if (pattrib->subtype & WIFI_DATA_TYPE) {
+               if ((check_fwstate(pmlmepriv,  WIFI_STATION_STATE) == true)) {
+                       /* to_ds = 1, fr_ds = 0; */
+                       /* Data transfer to AP */
+                       SetToDs(fctrl);
+                       memcpy(pwlanhdr->addr1, get_bssid(pmlmepriv), ETH_ALEN);
+                       memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                       memcpy(pwlanhdr->addr3, pattrib->dst, ETH_ALEN);
+
+                       if (pqospriv->qos_option)
+                               qos_option = true;
+               } else if (check_fwstate(pmlmepriv,  WIFI_AP_STATE)) {
+                       /* to_ds = 0, fr_ds = 1; */
+                       SetFrDs(fctrl);
+                       memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+                       memcpy(pwlanhdr->addr2, get_bssid(pmlmepriv), ETH_ALEN);
+                       memcpy(pwlanhdr->addr3, pattrib->src, ETH_ALEN);
+
+                       if (psta->qos_option)
+                               qos_option = true;
+               } else if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) ||
+                          check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) {
+                       memcpy(pwlanhdr->addr1, pattrib->dst, ETH_ALEN);
+                       memcpy(pwlanhdr->addr2, pattrib->src, ETH_ALEN);
+                       memcpy(pwlanhdr->addr3, get_bssid(pmlmepriv), ETH_ALEN);
+
+                       if (psta->qos_option)
+                               qos_option = true;
+               } else {
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("fw_state:%x is not allowed to xmit frame\n", get_fwstate(pmlmepriv)));
+                       res = _FAIL;
+                       goto exit;
+               }
+
+               if (pattrib->mdata)
+                       SetMData(fctrl);
+
+               if (pattrib->encrypt)
+                       SetPrivacy(fctrl);
+
+               if (qos_option) {
+                       qc = (unsigned short *)(hdr + pattrib->hdrlen - 2);
+
+                       if (pattrib->priority)
+                               SetPriority(qc, pattrib->priority);
+
+                       SetEOSP(qc, pattrib->eosp);
+
+                       SetAckpolicy(qc, pattrib->ack_policy);
+               }
+
+               /* TODO: fill HT Control Field */
+
+               /* Update Seq Num will be handled by f/w */
+               if (psta) {
+                       psta->sta_xmitpriv.txseq_tid[pattrib->priority]++;
+                       psta->sta_xmitpriv.txseq_tid[pattrib->priority] &= 0xFFF;
+
+                       pattrib->seqnum = psta->sta_xmitpriv.txseq_tid[pattrib->priority];
+
+                       SetSeqNum(hdr, pattrib->seqnum);
+
+                       /* check if enable ampdu */
+                       if (pattrib->ht_en && psta->htpriv.ampdu_enable) {
+                               if (psta->htpriv.agg_enable_bitmap & BIT(pattrib->priority))
+                               pattrib->ampdu_en = true;
+                       }
+
+                       /* re-check if enable ampdu by BA_starting_seqctrl */
+                       if (pattrib->ampdu_en) {
+                               u16 tx_seq;
+
+                               tx_seq = psta->BA_starting_seqctrl[pattrib->priority & 0x0f];
+
+                               /* check BA_starting_seqctrl */
+                               if (SN_LESS(pattrib->seqnum, tx_seq)) {
+                                       pattrib->ampdu_en = false;/* AGG BK */
+                               } else if (SN_EQUAL(pattrib->seqnum, tx_seq)) {
+                                       psta->BA_starting_seqctrl[pattrib->priority & 0x0f] = (tx_seq+1)&0xfff;
+
+                                       pattrib->ampdu_en = true;/* AGG EN */
+                               } else {
+                                       psta->BA_starting_seqctrl[pattrib->priority & 0x0f] = (pattrib->seqnum+1)&0xfff;
+                                       pattrib->ampdu_en = true;/* AGG EN */
+                               }
+                       }
+               }
+       }
+exit:
+
+_func_exit_;
+       return res;
+}
+
+s32 rtw_txframes_pending(struct adapter *padapter)
+{
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       return ((_rtw_queue_empty(&pxmitpriv->be_pending) == false) ||
+                        (_rtw_queue_empty(&pxmitpriv->bk_pending) == false) ||
+                        (_rtw_queue_empty(&pxmitpriv->vi_pending) == false) ||
+                        (_rtw_queue_empty(&pxmitpriv->vo_pending) == false));
+}
+
+s32 rtw_txframes_sta_ac_pending(struct adapter *padapter, struct pkt_attrib *pattrib)
+{
+       struct sta_info *psta;
+       struct tx_servq *ptxservq;
+       int priority = pattrib->priority;
+
+       psta = pattrib->psta;
+
+       switch (priority) {
+       case 1:
+       case 2:
+               ptxservq = &(psta->sta_xmitpriv.bk_q);
+               break;
+       case 4:
+       case 5:
+               ptxservq = &(psta->sta_xmitpriv.vi_q);
+               break;
+       case 6:
+       case 7:
+               ptxservq = &(psta->sta_xmitpriv.vo_q);
+               break;
+       case 0:
+       case 3:
+       default:
+               ptxservq = &(psta->sta_xmitpriv.be_q);
+               break;
+       }
+
+       return ptxservq->qcnt;
+}
+
+/*
+ * Calculate wlan 802.11 packet MAX size from pkt_attrib
+ * This function doesn't consider fragment case
+ */
+u32 rtw_calculate_wlan_pkt_size_by_attribue(struct pkt_attrib *pattrib)
+{
+       u32     len = 0;
+
+       len = pattrib->hdrlen + pattrib->iv_len; /*  WLAN Header and IV */
+       len += SNAP_SIZE + sizeof(u16); /*  LLC */
+       len += pattrib->pktlen;
+       if (pattrib->encrypt == _TKIP_)
+               len += 8; /*  MIC */
+       len += ((pattrib->bswenc) ? pattrib->icv_len : 0); /*  ICV */
+
+       return len;
+}
+
+/*
+
+This sub-routine will perform all the following:
+
+1. remove 802.3 header.
+2. create wlan_header, based on the info in pxmitframe
+3. append sta's iv/ext-iv
+4. append LLC
+5. move frag chunk from pframe to pxmitframe->mem
+6. apply sw-encrypt, if necessary.
+
+*/
+s32 rtw_xmitframe_coalesce(struct adapter *padapter, struct sk_buff *pkt, struct xmit_frame *pxmitframe)
+{
+       struct pkt_file pktfile;
+       s32 frg_inx, frg_len, mpdu_len, llc_sz, mem_sz;
+       size_t addr;
+       u8 *pframe, *mem_start;
+       u8 hw_hdr_offset;
+       struct sta_info         *psta;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       u8 *pbuf_start;
+       s32 bmcst = IS_MCAST(pattrib->ra);
+       s32 res = _SUCCESS;
+
+_func_enter_;
+
+       psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
+
+       if (psta == NULL)
+               return _FAIL;
+
+       if (pxmitframe->buf_addr == NULL) {
+               DBG_88E("==> %s buf_addr == NULL\n", __func__);
+               return _FAIL;
+       }
+
+       pbuf_start = pxmitframe->buf_addr;
+
+       hw_hdr_offset =  TXDESC_SIZE + (pxmitframe->pkt_offset * PACKET_OFFSET_SZ);
+
+       mem_start = pbuf_start +        hw_hdr_offset;
+
+       if (rtw_make_wlanhdr(padapter, mem_start, pattrib) == _FAIL) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("rtw_xmitframe_coalesce: rtw_make_wlanhdr fail; drop pkt\n"));
+               DBG_88E("rtw_xmitframe_coalesce: rtw_make_wlanhdr fail; drop pkt\n");
+               res = _FAIL;
+               goto exit;
+       }
+
+       _rtw_open_pktfile(pkt, &pktfile);
+       _rtw_pktfile_read(&pktfile, NULL, pattrib->pkt_hdrlen);
+
+       frg_inx = 0;
+       frg_len = pxmitpriv->frag_len - 4;/* 2346-4 = 2342 */
+
+       while (1) {
+               llc_sz = 0;
+
+               mpdu_len = frg_len;
+
+               pframe = mem_start;
+
+               SetMFrag(mem_start);
+
+               pframe += pattrib->hdrlen;
+               mpdu_len -= pattrib->hdrlen;
+
+               /* adding icv, if necessary... */
+               if (pattrib->iv_len) {
+                       if (psta != NULL) {
+                               switch (pattrib->encrypt) {
+                               case _WEP40_:
+                               case _WEP104_:
+                                       WEP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
+                                       break;
+                               case _TKIP_:
+                                       if (bmcst)
+                                               TKIP_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
+                                       else
+                                               TKIP_IV(pattrib->iv, psta->dot11txpn, 0);
+                                       break;
+                               case _AES_:
+                                       if (bmcst)
+                                               AES_IV(pattrib->iv, psta->dot11txpn, pattrib->key_idx);
+                                       else
+                                               AES_IV(pattrib->iv, psta->dot11txpn, 0);
+                                       break;
+                               }
+                       }
+
+                       memcpy(pframe, pattrib->iv, pattrib->iv_len);
+
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_notice_,
+                                ("rtw_xmitframe_coalesce: keyid=%d pattrib->iv[3]=%.2x pframe=%.2x %.2x %.2x %.2x\n",
+                                 padapter->securitypriv.dot11PrivacyKeyIndex, pattrib->iv[3], *pframe, *(pframe+1), *(pframe+2), *(pframe+3)));
+
+                       pframe += pattrib->iv_len;
+
+                       mpdu_len -= pattrib->iv_len;
+               }
+
+               if (frg_inx == 0) {
+                       llc_sz = rtw_put_snap(pframe, pattrib->ether_type);
+                       pframe += llc_sz;
+                       mpdu_len -= llc_sz;
+               }
+
+               if ((pattrib->icv_len > 0) && (pattrib->bswenc)) {
+                       mpdu_len -= pattrib->icv_len;
+               }
+
+               if (bmcst) {
+                       /*  don't do fragment to broadcat/multicast packets */
+                       mem_sz = _rtw_pktfile_read(&pktfile, pframe, pattrib->pktlen);
+               } else {
+                       mem_sz = _rtw_pktfile_read(&pktfile, pframe, mpdu_len);
+               }
+
+               pframe += mem_sz;
+
+               if ((pattrib->icv_len > 0) && (pattrib->bswenc)) {
+                       memcpy(pframe, pattrib->icv, pattrib->icv_len);
+                       pframe += pattrib->icv_len;
+               }
+
+               frg_inx++;
+
+               if (bmcst || rtw_endofpktfile(&pktfile)) {
+                       pattrib->nr_frags = frg_inx;
+
+                       pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->iv_len + ((pattrib->nr_frags == 1) ? llc_sz : 0) +
+                                               ((pattrib->bswenc) ? pattrib->icv_len : 0) + mem_sz;
+
+                       ClearMFrag(mem_start);
+
+                       break;
+               } else {
+                       RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("%s: There're still something in packet!\n", __func__));
+               }
+
+               addr = (size_t)(pframe);
+
+               mem_start = (unsigned char *)RND4(addr) + hw_hdr_offset;
+               memcpy(mem_start, pbuf_start + hw_hdr_offset, pattrib->hdrlen);
+       }
+
+       if (xmitframe_addmic(padapter, pxmitframe) == _FAIL) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("xmitframe_addmic(padapter, pxmitframe) == _FAIL\n"));
+               DBG_88E("xmitframe_addmic(padapter, pxmitframe) == _FAIL\n");
+               res = _FAIL;
+               goto exit;
+       }
+
+       xmitframe_swencrypt(padapter, pxmitframe);
+
+       if (!bmcst)
+               update_attrib_vcs_info(padapter, pxmitframe);
+       else
+               pattrib->vcs_mode = NONE_VCS;
+
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+/* Logical Link Control(LLC) SubNetwork Attachment Point(SNAP) header
+ * IEEE LLC/SNAP header contains 8 octets
+ * First 3 octets comprise the LLC portion
+ * SNAP portion, 5 octets, is divided into two fields:
+ *     Organizationally Unique Identifier(OUI), 3 octets,
+ *     type, defined by that organization, 2 octets.
+ */
+s32 rtw_put_snap(u8 *data, u16 h_proto)
+{
+       struct ieee80211_snap_hdr *snap;
+       u8 *oui;
+
+_func_enter_;
+
+       snap = (struct ieee80211_snap_hdr *)data;
+       snap->dsap = 0xaa;
+       snap->ssap = 0xaa;
+       snap->ctrl = 0x03;
+
+       if (h_proto == 0x8137 || h_proto == 0x80f3)
+               oui = P802_1H_OUI;
+       else
+               oui = RFC1042_OUI;
+
+       snap->oui[0] = oui[0];
+       snap->oui[1] = oui[1];
+       snap->oui[2] = oui[2];
+
+       *(__be16 *)(data + SNAP_SIZE) = htons(h_proto);
+
+_func_exit_;
+
+       return SNAP_SIZE + sizeof(u16);
+}
+
+void rtw_update_protection(struct adapter *padapter, u8 *ie, uint ie_len)
+{
+       uint    protection;
+       u8      *perp;
+       int      erp_len;
+       struct  xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       struct  registry_priv *pregistrypriv = &padapter->registrypriv;
+
+_func_enter_;
+
+       switch (pxmitpriv->vcs_setting) {
+       case DISABLE_VCS:
+               pxmitpriv->vcs = NONE_VCS;
+               break;
+       case ENABLE_VCS:
+               break;
+       case AUTO_VCS:
+       default:
+               perp = rtw_get_ie(ie, _ERPINFO_IE_, &erp_len, ie_len);
+               if (perp == NULL) {
+                       pxmitpriv->vcs = NONE_VCS;
+               } else {
+                       protection = (*(perp + 2)) & BIT(1);
+                       if (protection) {
+                               if (pregistrypriv->vcs_type == RTS_CTS)
+                                       pxmitpriv->vcs = RTS_CTS;
+                               else
+                                       pxmitpriv->vcs = CTS_TO_SELF;
+                       } else {
+                               pxmitpriv->vcs = NONE_VCS;
+                       }
+               }
+               break;
+       }
+
+_func_exit_;
+}
+
+void rtw_count_tx_stats(struct adapter *padapter, struct xmit_frame *pxmitframe, int sz)
+{
+       struct sta_info *psta = NULL;
+       struct stainfo_stats *pstats = NULL;
+       struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+
+       if ((pxmitframe->frame_tag&0x0f) == DATA_FRAMETAG) {
+               pxmitpriv->tx_bytes += sz;
+               pmlmepriv->LinkDetectInfo.NumTxOkInPeriod += pxmitframe->agg_num;
+
+               psta = pxmitframe->attrib.psta;
+               if (psta) {
+                       pstats = &psta->sta_stats;
+                       pstats->tx_pkts += pxmitframe->agg_num;
+                       pstats->tx_bytes += sz;
+               }
+       }
+}
+
+struct xmit_buf *rtw_alloc_xmitbuf_ext(struct xmit_priv *pxmitpriv)
+{
+       unsigned long irql;
+       struct xmit_buf *pxmitbuf =  NULL;
+       struct list_head *plist, *phead;
+       struct __queue *pfree_queue = &pxmitpriv->free_xmit_extbuf_queue;
+
+_func_enter_;
+
+       _enter_critical(&pfree_queue->lock, &irql);
+
+       if (_rtw_queue_empty(pfree_queue) == true) {
+               pxmitbuf = NULL;
+       } else {
+               phead = get_list_head(pfree_queue);
+
+               plist = get_next(phead);
+
+               pxmitbuf = LIST_CONTAINOR(plist, struct xmit_buf, list);
+
+               rtw_list_delete(&(pxmitbuf->list));
+       }
+
+       if (pxmitbuf !=  NULL) {
+               pxmitpriv->free_xmit_extbuf_cnt--;
+
+               pxmitbuf->priv_data = NULL;
+               /* pxmitbuf->ext_tag = true; */
+
+               if (pxmitbuf->sctx) {
+                       DBG_88E("%s pxmitbuf->sctx is not NULL\n", __func__);
+                       rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_BUF_ALLOC);
+               }
+       }
+
+       _exit_critical(&pfree_queue->lock, &irql);
+
+_func_exit_;
+
+       return pxmitbuf;
+}
+
+s32 rtw_free_xmitbuf_ext(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
+{
+       unsigned long irql;
+       struct __queue *pfree_queue = &pxmitpriv->free_xmit_extbuf_queue;
+
+_func_enter_;
+
+       if (pxmitbuf == NULL)
+               return _FAIL;
+
+       _enter_critical(&pfree_queue->lock, &irql);
+
+       rtw_list_delete(&pxmitbuf->list);
+
+       rtw_list_insert_tail(&(pxmitbuf->list), get_list_head(pfree_queue));
+       pxmitpriv->free_xmit_extbuf_cnt++;
+
+       _exit_critical(&pfree_queue->lock, &irql);
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+struct xmit_buf *rtw_alloc_xmitbuf(struct xmit_priv *pxmitpriv)
+{
+       unsigned long irql;
+       struct xmit_buf *pxmitbuf =  NULL;
+       struct list_head *plist, *phead;
+       struct __queue *pfree_xmitbuf_queue = &pxmitpriv->free_xmitbuf_queue;
+
+_func_enter_;
+
+       /* DBG_88E("+rtw_alloc_xmitbuf\n"); */
+
+       _enter_critical(&pfree_xmitbuf_queue->lock, &irql);
+
+       if (_rtw_queue_empty(pfree_xmitbuf_queue) == true) {
+               pxmitbuf = NULL;
+       } else {
+               phead = get_list_head(pfree_xmitbuf_queue);
+
+               plist = get_next(phead);
+
+               pxmitbuf = LIST_CONTAINOR(plist, struct xmit_buf, list);
+
+               rtw_list_delete(&(pxmitbuf->list));
+       }
+
+       if (pxmitbuf !=  NULL) {
+               pxmitpriv->free_xmitbuf_cnt--;
+               pxmitbuf->priv_data = NULL;
+               if (pxmitbuf->sctx) {
+                       DBG_88E("%s pxmitbuf->sctx is not NULL\n", __func__);
+                       rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_BUF_ALLOC);
+               }
+       }
+       _exit_critical(&pfree_xmitbuf_queue->lock, &irql);
+
+_func_exit_;
+
+       return pxmitbuf;
+}
+
+s32 rtw_free_xmitbuf(struct xmit_priv *pxmitpriv, struct xmit_buf *pxmitbuf)
+{
+       unsigned long irql;
+       struct __queue *pfree_xmitbuf_queue = &pxmitpriv->free_xmitbuf_queue;
+
+_func_enter_;
+       if (pxmitbuf == NULL)
+               return _FAIL;
+
+       if (pxmitbuf->sctx) {
+               DBG_88E("%s pxmitbuf->sctx is not NULL\n", __func__);
+               rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_BUF_FREE);
+       }
+
+       if (pxmitbuf->ext_tag) {
+               rtw_free_xmitbuf_ext(pxmitpriv, pxmitbuf);
+       } else {
+               _enter_critical(&pfree_xmitbuf_queue->lock, &irql);
+
+               rtw_list_delete(&pxmitbuf->list);
+
+               rtw_list_insert_tail(&(pxmitbuf->list), get_list_head(pfree_xmitbuf_queue));
+
+               pxmitpriv->free_xmitbuf_cnt++;
+               _exit_critical(&pfree_xmitbuf_queue->lock, &irql);
+       }
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+/*
+Calling context:
+1. OS_TXENTRY
+2. RXENTRY (rx_thread or RX_ISR/RX_CallBack)
+
+If we turn on USE_RXTHREAD, then, no need for critical section.
+Otherwise, we must use _enter/_exit critical to protect free_xmit_queue...
+
+Must be very very cautious...
+
+*/
+
+struct xmit_frame *rtw_alloc_xmitframe(struct xmit_priv *pxmitpriv)/* _queue *pfree_xmit_queue) */
+{
+       /*
+               Please remember to use all the osdep_service api,
+               and lock/unlock or _enter/_exit critical to protect
+               pfree_xmit_queue
+       */
+
+       unsigned long irql;
+       struct xmit_frame *pxframe = NULL;
+       struct list_head *plist, *phead;
+       struct __queue *pfree_xmit_queue = &pxmitpriv->free_xmit_queue;
+
+_func_enter_;
+
+       _enter_critical_bh(&pfree_xmit_queue->lock, &irql);
+
+       if (_rtw_queue_empty(pfree_xmit_queue) == true) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_alloc_xmitframe:%d\n", pxmitpriv->free_xmitframe_cnt));
+               pxframe =  NULL;
+       } else {
+               phead = get_list_head(pfree_xmit_queue);
+
+               plist = get_next(phead);
+
+               pxframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
+
+               rtw_list_delete(&(pxframe->list));
+       }
+
+       if (pxframe !=  NULL) { /* default value setting */
+               pxmitpriv->free_xmitframe_cnt--;
+
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_alloc_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
+
+               pxframe->buf_addr = NULL;
+               pxframe->pxmitbuf = NULL;
+
+               _rtw_memset(&pxframe->attrib, 0, sizeof(struct pkt_attrib));
+               /* pxframe->attrib.psta = NULL; */
+
+               pxframe->frame_tag = DATA_FRAMETAG;
+
+               pxframe->pkt = NULL;
+               pxframe->pkt_offset = 1;/* default use pkt_offset to fill tx desc */
+
+               pxframe->agg_num = 1;
+               pxframe->ack_report = 0;
+       }
+
+       _exit_critical_bh(&pfree_xmit_queue->lock, &irql);
+
+_func_exit_;
+
+       return pxframe;
+}
+
+s32 rtw_free_xmitframe(struct xmit_priv *pxmitpriv, struct xmit_frame *pxmitframe)
+{
+       unsigned long irql;
+       struct __queue *pfree_xmit_queue = &pxmitpriv->free_xmit_queue;
+       struct adapter *padapter = pxmitpriv->adapter;
+       struct sk_buff *pndis_pkt = NULL;
+
+_func_enter_;
+
+       if (pxmitframe == NULL) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("====== rtw_free_xmitframe():pxmitframe == NULL!!!!!!!!!!\n"));
+               goto exit;
+       }
+
+       _enter_critical_bh(&pfree_xmit_queue->lock, &irql);
+
+       rtw_list_delete(&pxmitframe->list);
+
+       if (pxmitframe->pkt) {
+               pndis_pkt = pxmitframe->pkt;
+               pxmitframe->pkt = NULL;
+       }
+
+       rtw_list_insert_tail(&pxmitframe->list, get_list_head(pfree_xmit_queue));
+
+       pxmitpriv->free_xmitframe_cnt++;
+       RT_TRACE(_module_rtl871x_xmit_c_, _drv_debug_, ("rtw_free_xmitframe():free_xmitframe_cnt=%d\n", pxmitpriv->free_xmitframe_cnt));
+
+       _exit_critical_bh(&pfree_xmit_queue->lock, &irql);
+
+       if (pndis_pkt)
+               rtw_os_pkt_complete(padapter, pndis_pkt);
+
+exit:
+
+_func_exit_;
+
+       return _SUCCESS;
+}
+
+void rtw_free_xmitframe_queue(struct xmit_priv *pxmitpriv, struct __queue *pframequeue)
+{
+       unsigned long irql;
+       struct list_head *plist, *phead;
+       struct  xmit_frame      *pxmitframe;
+
+_func_enter_;
+
+       _enter_critical_bh(&(pframequeue->lock), &irql);
+
+       phead = get_list_head(pframequeue);
+       plist = get_next(phead);
+
+       while (!rtw_end_of_queue_search(phead, plist)) {
+               pxmitframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
+
+               plist = get_next(plist);
+
+               rtw_free_xmitframe(pxmitpriv, pxmitframe);
+       }
+       _exit_critical_bh(&(pframequeue->lock), &irql);
+
+_func_exit_;
+}
+
+s32 rtw_xmitframe_enqueue(struct adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       if (rtw_xmit_classifier(padapter, pxmitframe) == _FAIL) {
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_,
+                        ("rtw_xmitframe_enqueue: drop xmit pkt for classifier fail\n"));
+/*             pxmitframe->pkt = NULL; */
+               return _FAIL;
+       }
+
+       return _SUCCESS;
+}
+
+static struct xmit_frame *dequeue_one_xmitframe(struct xmit_priv *pxmitpriv, struct hw_xmit *phwxmit, struct tx_servq *ptxservq, struct __queue *pframe_queue)
+{
+       struct list_head *xmitframe_plist, *xmitframe_phead;
+       struct  xmit_frame      *pxmitframe = NULL;
+
+       xmitframe_phead = get_list_head(pframe_queue);
+       xmitframe_plist = get_next(xmitframe_phead);
+
+       while (!rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) {
+               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+               xmitframe_plist = get_next(xmitframe_plist);
+
+               rtw_list_delete(&pxmitframe->list);
+
+               ptxservq->qcnt--;
+
+               break;
+
+               pxmitframe = NULL;
+       }
+
+       return pxmitframe;
+}
+
+struct xmit_frame *rtw_dequeue_xframe(struct xmit_priv *pxmitpriv, struct hw_xmit *phwxmit_i, int entry)
+{
+       unsigned long irql0;
+       struct list_head *sta_plist, *sta_phead;
+       struct hw_xmit *phwxmit;
+       struct tx_servq *ptxservq = NULL;
+       struct __queue *pframe_queue = NULL;
+       struct xmit_frame *pxmitframe = NULL;
+       struct adapter *padapter = pxmitpriv->adapter;
+       struct registry_priv    *pregpriv = &padapter->registrypriv;
+       int i, inx[4];
+
+_func_enter_;
+
+       inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
+
+       if (pregpriv->wifi_spec == 1) {
+               int j;
+
+               for (j = 0; j < 4; j++)
+                       inx[j] = pxmitpriv->wmm_para_seq[j];
+       }
+
+       _enter_critical_bh(&pxmitpriv->lock, &irql0);
+
+       for (i = 0; i < entry; i++) {
+               phwxmit = phwxmit_i + inx[i];
+
+               sta_phead = get_list_head(phwxmit->sta_queue);
+               sta_plist = get_next(sta_phead);
+
+               while (!rtw_end_of_queue_search(sta_phead, sta_plist)) {
+                       ptxservq = LIST_CONTAINOR(sta_plist, struct tx_servq, tx_pending);
+
+                       pframe_queue = &ptxservq->sta_pending;
+
+                       pxmitframe = dequeue_one_xmitframe(pxmitpriv, phwxmit, ptxservq, pframe_queue);
+
+                       if (pxmitframe) {
+                               phwxmit->accnt--;
+
+                               /* Remove sta node when there are no pending packets. */
+                               if (_rtw_queue_empty(pframe_queue)) /* must be done after get_next and before break */
+                                       rtw_list_delete(&ptxservq->tx_pending);
+                               goto exit;
+                       }
+
+                       sta_plist = get_next(sta_plist);
+               }
+       }
+exit:
+       _exit_critical_bh(&pxmitpriv->lock, &irql0);
+_func_exit_;
+       return pxmitframe;
+}
+
+struct tx_servq *rtw_get_sta_pending(struct adapter *padapter, struct sta_info *psta, int up, u8 *ac)
+{
+       struct tx_servq *ptxservq;
+
+_func_enter_;
+       switch (up) {
+       case 1:
+       case 2:
+               ptxservq = &(psta->sta_xmitpriv.bk_q);
+               *(ac) = 3;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_get_sta_pending : BK\n"));
+               break;
+       case 4:
+       case 5:
+               ptxservq = &(psta->sta_xmitpriv.vi_q);
+               *(ac) = 1;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_get_sta_pending : VI\n"));
+               break;
+       case 6:
+       case 7:
+               ptxservq = &(psta->sta_xmitpriv.vo_q);
+               *(ac) = 0;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_get_sta_pending : VO\n"));
+               break;
+       case 0:
+       case 3:
+       default:
+               ptxservq = &(psta->sta_xmitpriv.be_q);
+               *(ac) = 2;
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("rtw_get_sta_pending : BE\n"));
+       break;
+       }
+
+_func_exit_;
+
+       return ptxservq;
+}
+
+/*
+ * Will enqueue pxmitframe to the proper queue,
+ * and indicate it to xx_pending list.....
+ */
+s32 rtw_xmit_classifier(struct adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       /* unsigned long irql0; */
+       u8      ac_index;
+       struct sta_info *psta;
+       struct tx_servq *ptxservq;
+       struct pkt_attrib       *pattrib = &pxmitframe->attrib;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct hw_xmit  *phwxmits =  padapter->xmitpriv.hwxmits;
+       int res = _SUCCESS;
+
+_func_enter_;
+
+       if (pattrib->psta) {
+               psta = pattrib->psta;
+       } else {
+               psta = rtw_get_stainfo(pstapriv, pattrib->ra);
+       }
+
+       if (psta == NULL) {
+               res = _FAIL;
+               DBG_88E("rtw_xmit_classifier: psta == NULL\n");
+               RT_TRACE(_module_rtl871x_xmit_c_, _drv_err_, ("rtw_xmit_classifier: psta == NULL\n"));
+               goto exit;
+       }
+
+       ptxservq = rtw_get_sta_pending(padapter, psta, pattrib->priority, (u8 *)(&ac_index));
+
+       if (rtw_is_list_empty(&ptxservq->tx_pending))
+               rtw_list_insert_tail(&ptxservq->tx_pending, get_list_head(phwxmits[ac_index].sta_queue));
+
+       rtw_list_insert_tail(&pxmitframe->list, get_list_head(&ptxservq->sta_pending));
+       ptxservq->qcnt++;
+       phwxmits[ac_index].accnt++;
+exit:
+
+_func_exit_;
+
+       return res;
+}
+
+void rtw_alloc_hwxmits(struct adapter *padapter)
+{
+       struct hw_xmit *hwxmits;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       pxmitpriv->hwxmit_entry = HWXMIT_ENTRY;
+
+       pxmitpriv->hwxmits = (struct hw_xmit *)rtw_zmalloc(sizeof(struct hw_xmit) * pxmitpriv->hwxmit_entry);
+
+       hwxmits = pxmitpriv->hwxmits;
+
+       if (pxmitpriv->hwxmit_entry == 5) {
+               hwxmits[0] .sta_queue = &pxmitpriv->bm_pending;
+               hwxmits[1] .sta_queue = &pxmitpriv->vo_pending;
+               hwxmits[2] .sta_queue = &pxmitpriv->vi_pending;
+               hwxmits[3] .sta_queue = &pxmitpriv->bk_pending;
+               hwxmits[4] .sta_queue = &pxmitpriv->be_pending;
+       } else if (pxmitpriv->hwxmit_entry == 4) {
+               hwxmits[0] .sta_queue = &pxmitpriv->vo_pending;
+               hwxmits[1] .sta_queue = &pxmitpriv->vi_pending;
+               hwxmits[2] .sta_queue = &pxmitpriv->be_pending;
+               hwxmits[3] .sta_queue = &pxmitpriv->bk_pending;
+       } else {
+       }
+}
+
+void rtw_free_hwxmits(struct adapter *padapter)
+{
+       struct hw_xmit *hwxmits;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       hwxmits = pxmitpriv->hwxmits;
+       kfree(hwxmits);
+}
+
+void rtw_init_hwxmits(struct hw_xmit *phwxmit, int entry)
+{
+       int i;
+_func_enter_;
+       for (i = 0; i < entry; i++, phwxmit++)
+               phwxmit->accnt = 0;
+_func_exit_;
+}
+
+static int rtw_br_client_tx(struct adapter *padapter, struct sk_buff **pskb)
+{
+       struct sk_buff *skb = *pskb;
+       unsigned long irql;
+       int res, is_vlan_tag = 0, i, do_nat25 = 1;
+       unsigned short vlan_hdr = 0;
+       void *br_port = NULL;
+
+       rcu_read_lock();
+       br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
+       rcu_read_unlock();
+       _enter_critical_bh(&padapter->br_ext_lock, &irql);
+       if (!(skb->data[0] & 1) && br_port &&
+           memcmp(skb->data+MACADDRLEN, padapter->br_mac, MACADDRLEN) &&
+           *((__be16 *)(skb->data+MACADDRLEN*2)) != __constant_htons(ETH_P_8021Q) &&
+           *((__be16 *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP) &&
+           !memcmp(padapter->scdb_mac, skb->data+MACADDRLEN, MACADDRLEN) && padapter->scdb_entry) {
+               memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
+               padapter->scdb_entry->ageing_timer = jiffies;
+               _exit_critical_bh(&padapter->br_ext_lock, &irql);
+       } else {
+               if (*((__be16 *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_8021Q)) {
+                       is_vlan_tag = 1;
+                       vlan_hdr = *((unsigned short *)(skb->data+MACADDRLEN*2+2));
+                       for (i = 0; i < 6; i++)
+                               *((unsigned short *)(skb->data+MACADDRLEN*2+2-i*2)) = *((unsigned short *)(skb->data+MACADDRLEN*2-2-i*2));
+                       skb_pull(skb, 4);
+               }
+               if (!memcmp(skb->data+MACADDRLEN, padapter->br_mac, MACADDRLEN) &&
+                   (*((__be16 *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP)))
+                       memcpy(padapter->br_ip, skb->data+WLAN_ETHHDR_LEN+12, 4);
+
+               if (*((__be16 *)(skb->data+MACADDRLEN*2)) == __constant_htons(ETH_P_IP)) {
+                       if (memcmp(padapter->scdb_mac, skb->data+MACADDRLEN, MACADDRLEN)) {
+                               padapter->scdb_entry = (struct nat25_network_db_entry *)scdb_findEntry(padapter,
+                                                       skb->data+MACADDRLEN, skb->data+WLAN_ETHHDR_LEN+12);
+                               if (padapter->scdb_entry) {
+                                       memcpy(padapter->scdb_mac, skb->data+MACADDRLEN, MACADDRLEN);
+                                       memcpy(padapter->scdb_ip, skb->data+WLAN_ETHHDR_LEN+12, 4);
+                                       padapter->scdb_entry->ageing_timer = jiffies;
+                                       do_nat25 = 0;
+                               }
+                       } else {
+                               if (padapter->scdb_entry) {
+                                       padapter->scdb_entry->ageing_timer = jiffies;
+                                       do_nat25 = 0;
+                               } else {
+                                       memset(padapter->scdb_mac, 0, MACADDRLEN);
+                                       memset(padapter->scdb_ip, 0, 4);
+                               }
+                       }
+               }
+               _exit_critical_bh(&padapter->br_ext_lock, &irql);
+               if (do_nat25) {
+                       if (nat25_db_handle(padapter, skb, NAT25_CHECK) == 0) {
+                               struct sk_buff *newskb;
+
+                               if (is_vlan_tag) {
+                                       skb_push(skb, 4);
+                                       for (i = 0; i < 6; i++)
+                                               *((unsigned short *)(skb->data+i*2)) = *((unsigned short *)(skb->data+4+i*2));
+                                       *((__be16 *)(skb->data+MACADDRLEN*2)) = __constant_htons(ETH_P_8021Q);
+                                       *((unsigned short *)(skb->data+MACADDRLEN*2+2)) = vlan_hdr;
+                               }
+
+                               newskb = skb_copy(skb, GFP_ATOMIC);
+                               if (newskb == NULL) {
+                                       DEBUG_ERR("TX DROP: skb_copy fail!\n");
+                                       return -1;
+                               }
+                               dev_kfree_skb_any(skb);
+
+                               *pskb = skb = newskb;
+                               if (is_vlan_tag) {
+                                       vlan_hdr = *((unsigned short *)(skb->data+MACADDRLEN*2+2));
+                                       for (i = 0; i < 6; i++)
+                                               *((unsigned short *)(skb->data+MACADDRLEN*2+2-i*2)) = *((unsigned short *)(skb->data+MACADDRLEN*2-2-i*2));
+                                       skb_pull(skb, 4);
+                               }
+                       }
+
+                       if (skb_is_nonlinear(skb))
+                               DEBUG_ERR("%s(): skb_is_nonlinear!!\n", __func__);
+
+                       res = skb_linearize(skb);
+                       if (res < 0) {
+                                       DEBUG_ERR("TX DROP: skb_linearize fail!\n");
+                                       return -1;
+                       }
+
+                       res = nat25_db_handle(padapter, skb, NAT25_INSERT);
+                       if (res < 0) {
+                               if (res == -2) {
+                                       DEBUG_ERR("TX DROP: nat25_db_handle fail!\n");
+                                       return -1;
+                               }
+                               return 0;
+                       }
+               }
+
+               memcpy(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN);
+
+               dhcp_flag_bcast(padapter, skb);
+
+               if (is_vlan_tag) {
+                       skb_push(skb, 4);
+                       for (i = 0; i < 6; i++)
+                               *((unsigned short *)(skb->data+i*2)) = *((unsigned short *)(skb->data+4+i*2));
+                       *((__be16 *)(skb->data+MACADDRLEN*2)) = __constant_htons(ETH_P_8021Q);
+                       *((unsigned short *)(skb->data+MACADDRLEN*2+2)) = vlan_hdr;
+               }
+       }
+
+       /*  check if SA is equal to our MAC */
+       if (memcmp(skb->data+MACADDRLEN, GET_MY_HWADDR(padapter), MACADDRLEN)) {
+               DEBUG_ERR("TX DROP: untransformed frame SA:%02X%02X%02X%02X%02X%02X!\n",
+                         skb->data[6], skb->data[7], skb->data[8], skb->data[9], skb->data[10], skb->data[11]);
+                       return -1;
+       }
+       return 0;
+}
+
+u32 rtw_get_ff_hwaddr(struct xmit_frame *pxmitframe)
+{
+       u32 addr;
+       struct pkt_attrib *pattrib = &pxmitframe->attrib;
+
+       switch (pattrib->qsel) {
+       case 0:
+       case 3:
+               addr = BE_QUEUE_INX;
+               break;
+       case 1:
+       case 2:
+               addr = BK_QUEUE_INX;
+               break;
+       case 4:
+       case 5:
+               addr = VI_QUEUE_INX;
+               break;
+       case 6:
+       case 7:
+               addr = VO_QUEUE_INX;
+               break;
+       case 0x10:
+               addr = BCN_QUEUE_INX;
+               break;
+       case 0x11:/* BC/MC in PS (HIQ) */
+               addr = HIGH_QUEUE_INX;
+               break;
+       case 0x12:
+       default:
+               addr = MGT_QUEUE_INX;
+               break;
+       }
+
+       return addr;
+}
+
+static void do_queue_select(struct adapter     *padapter, struct pkt_attrib *pattrib)
+{
+       u8 qsel;
+
+       qsel = pattrib->priority;
+       RT_TRACE(_module_rtl871x_xmit_c_, _drv_info_, ("### do_queue_select priority=%d , qsel = %d\n", pattrib->priority , qsel));
+
+       pattrib->qsel = qsel;
+}
+
+/*
+ * The main transmit(tx) entry
+ *
+ * Return
+ *     1       enqueue
+ *     0       success, hardware will handle this xmit frame(packet)
+ *     <0      fail
+ */
+s32 rtw_xmit(struct adapter *padapter, struct sk_buff **ppkt)
+{
+#ifdef CONFIG_88EU_AP_MODE
+       unsigned long irql0;
+#endif
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+       struct xmit_frame *pxmitframe = NULL;
+       struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
+       void *br_port = NULL;
+       s32 res;
+
+       pxmitframe = rtw_alloc_xmitframe(pxmitpriv);
+       if (pxmitframe == NULL) {
+               RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("rtw_xmit: no more pxmitframe\n"));
+               DBG_88E("DBG_TX_DROP_FRAME %s no more pxmitframe\n", __func__);
+               return -1;
+       }
+
+       rcu_read_lock();
+       br_port = rcu_dereference(padapter->pnetdev->rx_handler_data);
+       rcu_read_unlock();
+
+       if (br_port && check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE)) {
+               res = rtw_br_client_tx(padapter, ppkt);
+               if (res == -1) {
+                       rtw_free_xmitframe(pxmitpriv, pxmitframe);
+                       return -1;
+               }
+       }
+
+       res = update_attrib(padapter, *ppkt, &pxmitframe->attrib);
+
+       if (res == _FAIL) {
+               RT_TRACE(_module_xmit_osdep_c_, _drv_err_, ("rtw_xmit: update attrib fail\n"));
+               rtw_free_xmitframe(pxmitpriv, pxmitframe);
+               return -1;
+       }
+       pxmitframe->pkt = *ppkt;
+
+       rtw_led_control(padapter, LED_CTL_TX);
+
+       do_queue_select(padapter, &pxmitframe->attrib);
+
+#ifdef CONFIG_88EU_AP_MODE
+       _enter_critical_bh(&pxmitpriv->lock, &irql0);
+       if (xmitframe_enqueue_for_sleeping_sta(padapter, pxmitframe)) {
+               _exit_critical_bh(&pxmitpriv->lock, &irql0);
+               return 1;
+       }
+       _exit_critical_bh(&pxmitpriv->lock, &irql0);
+#endif
+
+       if (rtw_hal_xmit(padapter, pxmitframe) == false)
+               return 1;
+
+       return 0;
+}
+
+#if defined(CONFIG_88EU_AP_MODE)
+
+int xmitframe_enqueue_for_sleeping_sta(struct adapter *padapter, struct xmit_frame *pxmitframe)
+{
+       unsigned long irql;
+       int ret = false;
+       struct sta_info *psta = NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct pkt_attrib *pattrib = &pxmitframe->attrib;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       int bmcst = IS_MCAST(pattrib->ra);
+
+       if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == false)
+           return ret;
+
+       if (pattrib->psta)
+               psta = pattrib->psta;
+       else
+               psta = rtw_get_stainfo(pstapriv, pattrib->ra);
+
+       if (psta == NULL)
+               return ret;
+
+       if (pattrib->triggered == 1) {
+               if (bmcst)
+                       pattrib->qsel = 0x11;/* HIQ */
+               return ret;
+       }
+
+       if (bmcst) {
+               _enter_critical_bh(&psta->sleep_q.lock, &irql);
+
+               if (pstapriv->sta_dz_bitmap) {/* if any one sta is in ps mode */
+                       rtw_list_delete(&pxmitframe->list);
+
+                       rtw_list_insert_tail(&pxmitframe->list, get_list_head(&psta->sleep_q));
+
+                       psta->sleepq_len++;
+
+                       pstapriv->tim_bitmap |= BIT(0);/*  */
+                       pstapriv->sta_dz_bitmap |= BIT(0);
+
+                       update_beacon(padapter, _TIM_IE_, NULL, false);/* tx bc/mc packets after upate bcn */
+
+                       ret = true;
+               }
+
+               _exit_critical_bh(&psta->sleep_q.lock, &irql);
+
+               return ret;
+       }
+
+       _enter_critical_bh(&psta->sleep_q.lock, &irql);
+
+       if (psta->state&WIFI_SLEEP_STATE) {
+               u8 wmmps_ac = 0;
+
+               if (pstapriv->sta_dz_bitmap&BIT(psta->aid)) {
+                       rtw_list_delete(&pxmitframe->list);
+
+                       rtw_list_insert_tail(&pxmitframe->list, get_list_head(&psta->sleep_q));
+
+                       psta->sleepq_len++;
+
+                       switch (pattrib->priority) {
+                       case 1:
+                       case 2:
+                               wmmps_ac = psta->uapsd_bk&BIT(0);
+                               break;
+                       case 4:
+                       case 5:
+                               wmmps_ac = psta->uapsd_vi&BIT(0);
+                               break;
+                       case 6:
+                       case 7:
+                               wmmps_ac = psta->uapsd_vo&BIT(0);
+                               break;
+                       case 0:
+                       case 3:
+                       default:
+                               wmmps_ac = psta->uapsd_be&BIT(0);
+                               break;
+                       }
+
+                       if (wmmps_ac)
+                               psta->sleepq_ac_len++;
+
+                       if (((psta->has_legacy_ac) && (!wmmps_ac)) ||
+                           ((!psta->has_legacy_ac) && (wmmps_ac))) {
+                               pstapriv->tim_bitmap |= BIT(psta->aid);
+
+                               if (psta->sleepq_len == 1) {
+                                       /* upate BCN for TIM IE */
+                                       update_beacon(padapter, _TIM_IE_, NULL, false);
+                               }
+                       }
+                       ret = true;
+               }
+       }
+
+       _exit_critical_bh(&psta->sleep_q.lock, &irql);
+
+       return ret;
+}
+
+static void dequeue_xmitframes_to_sleeping_queue(struct adapter *padapter, struct sta_info *psta, struct __queue *pframequeue)
+{
+       struct list_head *plist, *phead;
+       u8      ac_index;
+       struct tx_servq *ptxservq;
+       struct pkt_attrib       *pattrib;
+       struct xmit_frame       *pxmitframe;
+       struct hw_xmit *phwxmits =  padapter->xmitpriv.hwxmits;
+
+       phead = get_list_head(pframequeue);
+       plist = get_next(phead);
+
+       while (!rtw_end_of_queue_search(phead, plist)) {
+               pxmitframe = LIST_CONTAINOR(plist, struct xmit_frame, list);
+
+               plist = get_next(plist);
+
+               xmitframe_enqueue_for_sleeping_sta(padapter, pxmitframe);
+
+               pattrib = &pxmitframe->attrib;
+
+               ptxservq = rtw_get_sta_pending(padapter, psta, pattrib->priority, (u8 *)(&ac_index));
+
+               ptxservq->qcnt--;
+               phwxmits[ac_index].accnt--;
+       }
+}
+
+void stop_sta_xmit(struct adapter *padapter, struct sta_info *psta)
+{
+       unsigned long irql0;
+       struct sta_info *psta_bmc;
+       struct sta_xmit_priv *pstaxmitpriv;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
+
+       pstaxmitpriv = &psta->sta_xmitpriv;
+
+       /* for BC/MC Frames */
+       psta_bmc = rtw_get_bcmc_stainfo(padapter);
+
+       _enter_critical_bh(&pxmitpriv->lock, &irql0);
+
+       psta->state |= WIFI_SLEEP_STATE;
+
+       pstapriv->sta_dz_bitmap |= BIT(psta->aid);
+
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->vo_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->vo_q.tx_pending));
+
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->vi_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->vi_q.tx_pending));
+
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->be_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->be_q.tx_pending));
+
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta, &pstaxmitpriv->bk_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->bk_q.tx_pending));
+
+       /* for BC/MC Frames */
+       pstaxmitpriv = &psta_bmc->sta_xmitpriv;
+       dequeue_xmitframes_to_sleeping_queue(padapter, psta_bmc, &pstaxmitpriv->be_q.sta_pending);
+       rtw_list_delete(&(pstaxmitpriv->be_q.tx_pending));
+
+       _exit_critical_bh(&pxmitpriv->lock, &irql0);
+}
+
+void wakeup_sta_to_xmit(struct adapter *padapter, struct sta_info *psta)
+{
+       unsigned long irql;
+       u8 update_mask = 0, wmmps_ac = 0;
+       struct sta_info *psta_bmc;
+       struct list_head *xmitframe_plist, *xmitframe_phead;
+       struct xmit_frame *pxmitframe = NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       _enter_critical_bh(&psta->sleep_q.lock, &irql);
+
+       xmitframe_phead = get_list_head(&psta->sleep_q);
+       xmitframe_plist = get_next(xmitframe_phead);
+
+       while (!rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) {
+               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+               xmitframe_plist = get_next(xmitframe_plist);
+
+               rtw_list_delete(&pxmitframe->list);
+
+               switch (pxmitframe->attrib.priority) {
+               case 1:
+               case 2:
+                       wmmps_ac = psta->uapsd_bk&BIT(1);
+                       break;
+               case 4:
+               case 5:
+                       wmmps_ac = psta->uapsd_vi&BIT(1);
+                       break;
+               case 6:
+               case 7:
+                       wmmps_ac = psta->uapsd_vo&BIT(1);
+                       break;
+               case 0:
+               case 3:
+               default:
+                       wmmps_ac = psta->uapsd_be&BIT(1);
+                       break;
+               }
+
+               psta->sleepq_len--;
+               if (psta->sleepq_len > 0)
+                       pxmitframe->attrib.mdata = 1;
+               else
+                       pxmitframe->attrib.mdata = 0;
+
+               if (wmmps_ac) {
+                       psta->sleepq_ac_len--;
+                       if (psta->sleepq_ac_len > 0) {
+                               pxmitframe->attrib.mdata = 1;
+                               pxmitframe->attrib.eosp = 0;
+                       } else {
+                               pxmitframe->attrib.mdata = 0;
+                               pxmitframe->attrib.eosp = 1;
+                       }
+               }
+
+               pxmitframe->attrib.triggered = 1;
+
+               _exit_critical_bh(&psta->sleep_q.lock, &irql);
+               if (rtw_hal_xmit(padapter, pxmitframe))
+                       rtw_os_xmit_complete(padapter, pxmitframe);
+               _enter_critical_bh(&psta->sleep_q.lock, &irql);
+       }
+
+       if (psta->sleepq_len == 0) {
+               pstapriv->tim_bitmap &= ~BIT(psta->aid);
+
+               update_mask = BIT(0);
+
+               if (psta->state&WIFI_SLEEP_STATE)
+                       psta->state ^= WIFI_SLEEP_STATE;
+
+               if (psta->state & WIFI_STA_ALIVE_CHK_STATE) {
+                       psta->expire_to = pstapriv->expire_to;
+                       psta->state ^= WIFI_STA_ALIVE_CHK_STATE;
+               }
+
+               pstapriv->sta_dz_bitmap &= ~BIT(psta->aid);
+       }
+
+       _exit_critical_bh(&psta->sleep_q.lock, &irql);
+
+       /* for BC/MC Frames */
+       psta_bmc = rtw_get_bcmc_stainfo(padapter);
+       if (!psta_bmc)
+               return;
+
+       if ((pstapriv->sta_dz_bitmap&0xfffe) == 0x0) { /* no any sta in ps mode */
+               _enter_critical_bh(&psta_bmc->sleep_q.lock, &irql);
+
+               xmitframe_phead = get_list_head(&psta_bmc->sleep_q);
+               xmitframe_plist = get_next(xmitframe_phead);
+
+               while (!rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) {
+                       pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+                       xmitframe_plist = get_next(xmitframe_plist);
+
+                       rtw_list_delete(&pxmitframe->list);
+
+                       psta_bmc->sleepq_len--;
+                       if (psta_bmc->sleepq_len > 0)
+                               pxmitframe->attrib.mdata = 1;
+                       else
+                               pxmitframe->attrib.mdata = 0;
+
+                       pxmitframe->attrib.triggered = 1;
+
+                       _exit_critical_bh(&psta_bmc->sleep_q.lock, &irql);
+                       if (rtw_hal_xmit(padapter, pxmitframe))
+                               rtw_os_xmit_complete(padapter, pxmitframe);
+                       _enter_critical_bh(&psta_bmc->sleep_q.lock, &irql);
+               }
+
+               if (psta_bmc->sleepq_len == 0) {
+                       pstapriv->tim_bitmap &= ~BIT(0);
+                       pstapriv->sta_dz_bitmap &= ~BIT(0);
+
+                       update_mask |= BIT(1);
+               }
+
+               _exit_critical_bh(&psta_bmc->sleep_q.lock, &irql);
+       }
+
+       if (update_mask)
+               update_beacon(padapter, _TIM_IE_, NULL, false);
+}
+
+void xmit_delivery_enabled_frames(struct adapter *padapter, struct sta_info *psta)
+{
+       unsigned long irql;
+       u8 wmmps_ac = 0;
+       struct list_head *xmitframe_plist, *xmitframe_phead;
+       struct xmit_frame *pxmitframe = NULL;
+       struct sta_priv *pstapriv = &padapter->stapriv;
+
+       _enter_critical_bh(&psta->sleep_q.lock, &irql);
+
+       xmitframe_phead = get_list_head(&psta->sleep_q);
+       xmitframe_plist = get_next(xmitframe_phead);
+
+       while (!rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) {
+               pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
+
+               xmitframe_plist = get_next(xmitframe_plist);
+
+               switch (pxmitframe->attrib.priority) {
+               case 1:
+               case 2:
+                       wmmps_ac = psta->uapsd_bk&BIT(1);
+                       break;
+               case 4:
+               case 5:
+                       wmmps_ac = psta->uapsd_vi&BIT(1);
+                       break;
+               case 6:
+               case 7:
+                       wmmps_ac = psta->uapsd_vo&BIT(1);
+                       break;
+               case 0:
+               case 3:
+               default:
+                       wmmps_ac = psta->uapsd_be&BIT(1);
+                       break;
+               }
+
+               if (!wmmps_ac)
+                       continue;
+
+               rtw_list_delete(&pxmitframe->list);
+
+               psta->sleepq_len--;
+               psta->sleepq_ac_len--;
+
+               if (psta->sleepq_ac_len > 0) {
+                       pxmitframe->attrib.mdata = 1;
+                       pxmitframe->attrib.eosp = 0;
+               } else {
+                       pxmitframe->attrib.mdata = 0;
+                       pxmitframe->attrib.eosp = 1;
+               }
+
+               pxmitframe->attrib.triggered = 1;
+
+               if (rtw_hal_xmit(padapter, pxmitframe) == true)
+                       rtw_os_xmit_complete(padapter, pxmitframe);
+
+               if ((psta->sleepq_ac_len == 0) && (!psta->has_legacy_ac) && (wmmps_ac)) {
+                       pstapriv->tim_bitmap &= ~BIT(psta->aid);
+
+                       /* upate BCN for TIM IE */
+                       update_beacon(padapter, _TIM_IE_, NULL, false);
+               }
+       }
+
+       _exit_critical_bh(&psta->sleep_q.lock, &irql);
+}
+
+#endif
+
+void rtw_sctx_init(struct submit_ctx *sctx, int timeout_ms)
+{
+       sctx->timeout_ms = timeout_ms;
+       sctx->submit_time = rtw_get_current_time();
+       init_completion(&sctx->done);
+       sctx->status = RTW_SCTX_SUBMITTED;
+}
+
+int rtw_sctx_wait(struct submit_ctx *sctx)
+{
+       int ret = _FAIL;
+       unsigned long expire;
+       int status = 0;
+
+       expire = sctx->timeout_ms ? msecs_to_jiffies(sctx->timeout_ms) : MAX_SCHEDULE_TIMEOUT;
+       if (!wait_for_completion_timeout(&sctx->done, expire)) {
+               /* timeout, do something?? */
+               status = RTW_SCTX_DONE_TIMEOUT;
+               DBG_88E("%s timeout\n", __func__);
+       } else {
+               status = sctx->status;
+       }
+
+       if (status == RTW_SCTX_DONE_SUCCESS)
+               ret = _SUCCESS;
+
+       return ret;
+}
+
+static bool rtw_sctx_chk_waring_status(int status)
+{
+       switch (status) {
+       case RTW_SCTX_DONE_UNKNOWN:
+       case RTW_SCTX_DONE_BUF_ALLOC:
+       case RTW_SCTX_DONE_BUF_FREE:
+
+       case RTW_SCTX_DONE_DRV_STOP:
+       case RTW_SCTX_DONE_DEV_REMOVE:
+               return true;
+       default:
+               return false;
+       }
+}
+
+void rtw_sctx_done_err(struct submit_ctx **sctx, int status)
+{
+       if (*sctx) {
+               if (rtw_sctx_chk_waring_status(status))
+                       DBG_88E("%s status:%d\n", __func__, status);
+               (*sctx)->status = status;
+               complete(&((*sctx)->done));
+               *sctx = NULL;
+       }
+}
+
+void rtw_sctx_done(struct submit_ctx **sctx)
+{
+       rtw_sctx_done_err(sctx, RTW_SCTX_DONE_SUCCESS);
+}
+
+int rtw_ack_tx_wait(struct xmit_priv *pxmitpriv, u32 timeout_ms)
+{
+       struct submit_ctx *pack_tx_ops = &pxmitpriv->ack_tx_ops;
+
+       pack_tx_ops->submit_time = rtw_get_current_time();
+       pack_tx_ops->timeout_ms = timeout_ms;
+       pack_tx_ops->status = RTW_SCTX_SUBMITTED;
+
+       return rtw_sctx_wait(pack_tx_ops);
+}
+
+void rtw_ack_tx_done(struct xmit_priv *pxmitpriv, int status)
+{
+       struct submit_ctx *pack_tx_ops = &pxmitpriv->ack_tx_ops;
+
+       if (pxmitpriv->ack_tx)
+               rtw_sctx_done_err(&pack_tx_ops, status);
+       else
+               DBG_88E("%s ack_tx not set\n", __func__);
+}