Merge remote-tracking branch 'staging/staging-next'
[deliverable/linux.git] / drivers / staging / rtl8723au / core / rtw_mlme_ext.c
diff --git a/drivers/staging/rtl8723au/core/rtw_mlme_ext.c b/drivers/staging/rtl8723au/core/rtw_mlme_ext.c
deleted file mode 100644 (file)
index 7dd1540..0000000
+++ /dev/null
@@ -1,6187 +0,0 @@
-/******************************************************************************
- *
- * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
- *
- * This program is free software; you can redistribute it and/or modify it
- * under the terms of version 2 of the GNU General Public License as
- * published by the Free Software Foundation.
- *
- * This program is distributed in the hope that it will be useful, but WITHOUT
- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
- * more details.
- *
- ******************************************************************************/
-#define _RTW_MLME_EXT_C_
-
-#include <osdep_service.h>
-#include <drv_types.h>
-#include <wifi.h>
-#include <rtw_mlme_ext.h>
-#include <wlan_bssdef.h>
-#include <mlme_osdep.h>
-#include <recv_osdep.h>
-#include <linux/ieee80211.h>
-#include <rtl8723a_hal.h>
-
-static int OnAssocReq23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAssocRsp23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnProbeReq23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnProbeRsp23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int DoReserved23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnBeacon23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAtim23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnDisassoc23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAuth23aClient23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnDeAuth23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAction23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-
-static int on_action_spct23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAction23a_qos(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAction23a_dls(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAction23a_back23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int on_action_public23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAction23a_ht(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAction23a_wmm(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static int OnAction23a_p2p(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-
-static void issue_assocreq(struct rtw_adapter *padapter);
-static void issue_probereq(struct rtw_adapter *padapter,
-                          struct cfg80211_ssid *pssid, u8 *da);
-static int issue_probereq_ex(struct rtw_adapter *padapter,
-                            struct cfg80211_ssid *pssid,
-                            u8 *da, int try_cnt, int wait_ms);
-static void issue_probersp(struct rtw_adapter *padapter, unsigned char *da);
-static void issue_auth(struct rtw_adapter *padapter, struct sta_info *psta,
-                      unsigned short status);
-static int issue_deauth_ex(struct rtw_adapter *padapter, u8 *da,
-                          unsigned short reason, int try_cnt, int wait_ms);
-static void start_clnt_assoc(struct rtw_adapter *padapter);
-static void start_clnt_auth(struct rtw_adapter *padapter);
-static void start_clnt_join(struct rtw_adapter *padapter);
-static void start_create_ibss(struct rtw_adapter *padapter);
-static struct wlan_bssid_ex *collect_bss_info(struct rtw_adapter *padapter,
-                                             struct recv_frame *precv_frame);
-
-#ifdef CONFIG_8723AU_AP_MODE
-static int OnAuth23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame);
-static void issue_assocrsp(struct rtw_adapter *padapter, unsigned short status,
-                          struct sta_info *pstat, u16 pkt_type);
-#endif
-
-static struct mlme_handler mlme_sta_tbl[]={
-       {"OnAssocReq23a",               &OnAssocReq23a},
-       {"OnAssocRsp23a",               &OnAssocRsp23a},
-       {"OnReAssocReq",        &OnAssocReq23a},
-       {"OnReAssocRsp",        &OnAssocRsp23a},
-       {"OnProbeReq23a",               &OnProbeReq23a},
-       {"OnProbeRsp23a",               &OnProbeRsp23a},
-
-       /*----------------------------------------------------------
-                                       below 2 are reserved
-       -----------------------------------------------------------*/
-       {"DoReserved23a",               &DoReserved23a},
-       {"DoReserved23a",               &DoReserved23a},
-       {"OnBeacon23a",         &OnBeacon23a},
-       {"OnATIM",              &OnAtim23a},
-       {"OnDisassoc23a",               &OnDisassoc23a},
-       {"OnAuth23a",           &OnAuth23aClient23a},
-       {"OnDeAuth23a",         &OnDeAuth23a},
-       {"OnAction23a",         &OnAction23a},
-};
-
-static struct action_handler OnAction23a_tbl[]={
-       {WLAN_CATEGORY_SPECTRUM_MGMT, "ACTION_SPECTRUM_MGMT", on_action_spct23a},
-       {WLAN_CATEGORY_QOS, "ACTION_QOS", &OnAction23a_qos},
-       {WLAN_CATEGORY_DLS, "ACTION_DLS", &OnAction23a_dls},
-       {WLAN_CATEGORY_BACK, "ACTION_BACK", &OnAction23a_back23a},
-       {WLAN_CATEGORY_PUBLIC, "ACTION_PUBLIC", on_action_public23a},
-       {WLAN_CATEGORY_HT, "ACTION_HT", &OnAction23a_ht},
-       {WLAN_CATEGORY_SA_QUERY, "ACTION_SA_QUERY", &DoReserved23a},
-       {WLAN_CATEGORY_WMM, "ACTION_WMM", &OnAction23a_wmm},
-       {WLAN_CATEGORY_VENDOR_SPECIFIC, "ACTION_P2P", &OnAction23a_p2p},
-};
-
-static u8      null_addr[ETH_ALEN]= {0, 0, 0, 0, 0, 0};
-
-/**************************************************
-OUI definitions for the vendor specific IE
-***************************************************/
-unsigned char WMM_OUI23A[] = {0x00, 0x50, 0xf2, 0x02};
-unsigned char WPS_OUI23A[] = {0x00, 0x50, 0xf2, 0x04};
-unsigned char P2P_OUI23A[] = {0x50, 0x6F, 0x9A, 0x09};
-unsigned char WFD_OUI23A[] = {0x50, 0x6F, 0x9A, 0x0A};
-
-unsigned char WMM_INFO_OUI23A[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01};
-unsigned char WMM_PARA_OUI23A[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
-
-static unsigned char REALTEK_96B_IE[] = {0x00, 0xe0, 0x4c, 0x02, 0x01, 0x20};
-
-/********************************************************
-MCS rate definitions
-*********************************************************/
-unsigned char MCS_rate_2R23A[16] = {
-       0xff, 0xff, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0,
-       0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
-unsigned char MCS_rate_1R23A[16] = {
-       0xff, 0x00, 0x0, 0x0, 0x01, 0x0, 0x0, 0x0,
-       0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
-
-/********************************************************
-ChannelPlan definitions
-*********************************************************/
-
-static struct rt_channel_plan_2g RTW_ChannelPlan2G[RT_CHANNEL_DOMAIN_2G_MAX] = {
-       /*  0x00, RT_CHANNEL_DOMAIN_2G_WORLD , Passive scan CH 12, 13 */
-       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
-       /*  0x01, RT_CHANNEL_DOMAIN_2G_ETSI1 */
-       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
-       /*  0x02, RT_CHANNEL_DOMAIN_2G_FCC1 */
-       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}, 11},
-       /*  0x03, RT_CHANNEL_DOMAIN_2G_MIKK1 */
-       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14}, 14},
-       /*  0x04, RT_CHANNEL_DOMAIN_2G_ETSI2 */
-       {{10, 11, 12, 13}, 4},
-       /*  0x05, RT_CHANNEL_DOMAIN_2G_NULL */
-       {{}, 0},
-};
-
-static struct rt_channel_plan_5g RTW_ChannelPlan5G[RT_CHANNEL_DOMAIN_5G_MAX] = {
-       /*  0x00, RT_CHANNEL_DOMAIN_5G_NULL */
-       {{}, 0},
-       /*  0x01, RT_CHANNEL_DOMAIN_5G_ETSI1 */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
-         116, 120, 124, 128, 132, 136, 140}, 19},
-       /*  0x02, RT_CHANNEL_DOMAIN_5G_ETSI2 */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
-         116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165}, 24},
-       /*  0x03, RT_CHANNEL_DOMAIN_5G_ETSI3 */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
-         116, 120, 124, 128, 132, 149, 153, 157, 161, 165}, 22},
-       /*  0x04, RT_CHANNEL_DOMAIN_5G_FCC1 */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
-         116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165}, 24},
-       /*  0x05, RT_CHANNEL_DOMAIN_5G_FCC2 */
-       {{36, 40, 44, 48, 149, 153, 157, 161, 165}, 9},
-       /*  0x06, RT_CHANNEL_DOMAIN_5G_FCC3 */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165}, 13},
-       /*  0x07, RT_CHANNEL_DOMAIN_5G_FCC4 */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161}, 12},
-       /*  0x08, RT_CHANNEL_DOMAIN_5G_FCC5 */
-       {{149, 153, 157, 161, 165}, 5},
-       /*  0x09, RT_CHANNEL_DOMAIN_5G_FCC6 */
-       {{36, 40, 44, 48, 52, 56, 60, 64}, 8},
-       /*  0x0A, RT_CHANNEL_DOMAIN_5G_FCC7_IC1 */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
-         116, 136, 140, 149, 153, 157, 161, 165}, 20},
-       /*  0x0B, RT_CHANNEL_DOMAIN_5G_KCC1 */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
-         116, 120, 124, 149, 153, 157, 161, 165}, 20},
-       /*  0x0C, RT_CHANNEL_DOMAIN_5G_MKK1 */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
-         116, 120, 124, 128, 132, 136, 140}, 19},
-       /*  0x0D, RT_CHANNEL_DOMAIN_5G_MKK2 */
-       {{36, 40, 44, 48, 52, 56, 60, 64}, 8},
-       /*  0x0E, RT_CHANNEL_DOMAIN_5G_MKK3 */
-       {{100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140}, 11},
-       /*  0x0F, RT_CHANNEL_DOMAIN_5G_NCC1 */
-       {{56, 60, 64, 100, 104, 108, 112, 116, 136, 140, 149,
-         153, 157, 161, 165}, 15},
-       /*  0x10, RT_CHANNEL_DOMAIN_5G_NCC2 */
-       {{56, 60, 64, 149, 153, 157, 161, 165}, 8},
-
-       /*  Driver self defined for old channel plan Compatible,
-           Remember to modify if have new channel plan definition ===== */
-       /*  0x11, RT_CHANNEL_DOMAIN_5G_FCC */
-       {{36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112,
-         116, 132, 136, 140, 149, 153, 157, 161, 165}, 21},
-       /*  0x12, RT_CHANNEL_DOMAIN_5G_JAPAN_NO_DFS */
-       {{36, 40, 44, 48}, 4},
-       /*  0x13, RT_CHANNEL_DOMAIN_5G_FCC4_NO_DFS */
-       {{36, 40, 44, 48, 149, 153, 157, 161}, 8},
-};
-
-static struct rt_channel_plan_map RTW_ChannelPlanMap[RT_CHANNEL_DOMAIN_MAX] = {
-       /*  0x00 ~ 0x1F , Old Define ===== */
-       {0x02, 0x11},   /* 0x00, RT_CHANNEL_DOMAIN_FCC */
-       {0x02, 0x0A},   /* 0x01, RT_CHANNEL_DOMAIN_IC */
-       {0x01, 0x01},   /* 0x02, RT_CHANNEL_DOMAIN_ETSI */
-       {0x01, 0x00},   /* 0x03, RT_CHANNEL_DOMAIN_SPAIN */
-       {0x01, 0x00},   /* 0x04, RT_CHANNEL_DOMAIN_FRANCE */
-       {0x03, 0x00},   /* 0x05, RT_CHANNEL_DOMAIN_MKK */
-       {0x03, 0x00},   /* 0x06, RT_CHANNEL_DOMAIN_MKK1 */
-       {0x01, 0x09},   /* 0x07, RT_CHANNEL_DOMAIN_ISRAEL */
-       {0x03, 0x09},   /* 0x08, RT_CHANNEL_DOMAIN_TELEC */
-       {0x03, 0x00},   /* 0x09, RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN */
-       {0x00, 0x00},   /* 0x0A, RT_CHANNEL_DOMAIN_WORLD_WIDE_13 */
-       {0x02, 0x0F},   /* 0x0B, RT_CHANNEL_DOMAIN_TAIWAN */
-       {0x01, 0x08},   /* 0x0C, RT_CHANNEL_DOMAIN_CHINA */
-       {0x02, 0x06},   /* 0x0D, RT_CHANNEL_DOMAIN_SINGAPORE_INDIA_MEXICO */
-       {0x02, 0x0B},   /* 0x0E, RT_CHANNEL_DOMAIN_KOREA */
-       {0x02, 0x09},   /* 0x0F, RT_CHANNEL_DOMAIN_TURKEY */
-       {0x01, 0x01},   /* 0x10, RT_CHANNEL_DOMAIN_JAPAN */
-       {0x02, 0x05},   /* 0x11, RT_CHANNEL_DOMAIN_FCC_NO_DFS */
-       {0x01, 0x12},   /* 0x12, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS */
-       {0x00, 0x04},   /* 0x13, RT_CHANNEL_DOMAIN_WORLD_WIDE_5G */
-       {0x02, 0x10},   /* 0x14, RT_CHANNEL_DOMAIN_TAIWAN_NO_DFS */
-       {0x00, 0x12},   /* 0x15, RT_CHANNEL_DOMAIN_ETSI_NO_DFS */
-       {0x00, 0x13},   /* 0x16, RT_CHANNEL_DOMAIN_KOREA_NO_DFS */
-       {0x03, 0x12},   /* 0x17, RT_CHANNEL_DOMAIN_JAPAN_NO_DFS */
-       {0x05, 0x08},   /* 0x18, RT_CHANNEL_DOMAIN_PAKISTAN_NO_DFS */
-       {0x02, 0x08},   /* 0x19, RT_CHANNEL_DOMAIN_TAIWAN2_NO_DFS */
-       {0x00, 0x00},   /* 0x1A, */
-       {0x00, 0x00},   /* 0x1B, */
-       {0x00, 0x00},   /* 0x1C, */
-       {0x00, 0x00},   /* 0x1D, */
-       {0x00, 0x00},   /* 0x1E, */
-       {0x05, 0x04},   /* 0x1F, RT_CHANNEL_DOMAIN_WORLD_WIDE_ONLY_5G */
-       /*  0x20 ~ 0x7F , New Define ===== */
-       {0x00, 0x00},   /* 0x20, RT_CHANNEL_DOMAIN_WORLD_NULL */
-       {0x01, 0x00},   /* 0x21, RT_CHANNEL_DOMAIN_ETSI1_NULL */
-       {0x02, 0x00},   /* 0x22, RT_CHANNEL_DOMAIN_FCC1_NULL */
-       {0x03, 0x00},   /* 0x23, RT_CHANNEL_DOMAIN_MKK1_NULL */
-       {0x04, 0x00},   /* 0x24, RT_CHANNEL_DOMAIN_ETSI2_NULL */
-       {0x02, 0x04},   /* 0x25, RT_CHANNEL_DOMAIN_FCC1_FCC1 */
-       {0x00, 0x01},   /* 0x26, RT_CHANNEL_DOMAIN_WORLD_ETSI1 */
-       {0x03, 0x0C},   /* 0x27, RT_CHANNEL_DOMAIN_MKK1_MKK1 */
-       {0x00, 0x0B},   /* 0x28, RT_CHANNEL_DOMAIN_WORLD_KCC1 */
-       {0x00, 0x05},   /* 0x29, RT_CHANNEL_DOMAIN_WORLD_FCC2 */
-       {0x00, 0x00},   /* 0x2A, */
-       {0x00, 0x00},   /* 0x2B, */
-       {0x00, 0x00},   /* 0x2C, */
-       {0x00, 0x00},   /* 0x2D, */
-       {0x00, 0x00},   /* 0x2E, */
-       {0x00, 0x00},   /* 0x2F, */
-       {0x00, 0x06},   /* 0x30, RT_CHANNEL_DOMAIN_WORLD_FCC3 */
-       {0x00, 0x07},   /* 0x31, RT_CHANNEL_DOMAIN_WORLD_FCC4 */
-       {0x00, 0x08},   /* 0x32, RT_CHANNEL_DOMAIN_WORLD_FCC5 */
-       {0x00, 0x09},   /* 0x33, RT_CHANNEL_DOMAIN_WORLD_FCC6 */
-       {0x02, 0x0A},   /* 0x34, RT_CHANNEL_DOMAIN_FCC1_FCC7 */
-       {0x00, 0x02},   /* 0x35, RT_CHANNEL_DOMAIN_WORLD_ETSI2 */
-       {0x00, 0x03},   /* 0x36, RT_CHANNEL_DOMAIN_WORLD_ETSI3 */
-       {0x03, 0x0D},   /* 0x37, RT_CHANNEL_DOMAIN_MKK1_MKK2 */
-       {0x03, 0x0E},   /* 0x38, RT_CHANNEL_DOMAIN_MKK1_MKK3 */
-       {0x02, 0x0F},   /* 0x39, RT_CHANNEL_DOMAIN_FCC1_NCC1 */
-       {0x00, 0x00},   /* 0x3A, */
-       {0x00, 0x00},   /* 0x3B, */
-       {0x00, 0x00},   /* 0x3C, */
-       {0x00, 0x00},   /* 0x3D, */
-       {0x00, 0x00},   /* 0x3E, */
-       {0x00, 0x00},   /* 0x3F, */
-       {0x02, 0x10},   /* 0x40, RT_CHANNEL_DOMAIN_FCC1_NCC2 */
-       {0x03, 0x00},   /* 0x41, RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN_2G */
-};
-
-static struct rt_channel_plan_map RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE =
-{0x03, 0x02}; /* use the conbination for max channel numbers */
-
-static void dummy_event_callback(struct rtw_adapter *adapter, const u8 *pbuf)
-{
-}
-
-static struct fwevent wlanevents[] =
-{
-       {0, &dummy_event_callback},     /*0*/
-       {0, NULL},
-       {0, NULL},
-       {0, NULL},
-       {0, NULL},
-       {0, NULL},
-       {0, NULL},
-       {0, NULL},
-       {0, &rtw_survey_event_cb23a},           /*8*/
-       {sizeof (struct surveydone_event), &rtw_surveydone_event_callback23a},
-       {0, &rtw23a_joinbss_event_cb},          /*10*/
-       {sizeof(struct stassoc_event), &rtw_stassoc_event_callback23a},
-       {sizeof(struct stadel_event), &rtw_stadel_event_callback23a},
-       {0, &dummy_event_callback},
-       {0, &dummy_event_callback},
-       {0, NULL},      /*15*/
-       {0, NULL},
-       {0, NULL},
-       {0, NULL},
-       {0, &dummy_event_callback},
-       {0, NULL},       /*20*/
-       {0, NULL},
-       {0, NULL},
-       {0, &dummy_event_callback},
-       {0, NULL},
-};
-
-
-static void rtw_correct_TSF(struct rtw_adapter *padapter)
-{
-       hw_var_set_correct_tsf(padapter);
-}
-
-static void
-rtw_update_TSF(struct mlme_ext_priv *pmlmeext, struct ieee80211_mgmt *mgmt)
-{
-       pmlmeext->TSFValue = get_unaligned_le64(&mgmt->u.beacon.timestamp);
-}
-
-/*
- * Search the @param channel_num in given @param channel_set
- * @ch_set: the given channel set
- * @ch: the given channel number
- *
- * return the index of channel_num in channel_set, -1 if not found
- */
-int rtw_ch_set_search_ch23a(struct rt_channel_info *ch_set, const u32 ch)
-{
-       int i;
-
-       for (i = 0; ch_set[i]. ChannelNum != 0; i++) {
-               if (ch == ch_set[i].ChannelNum)
-                       break;
-       }
-
-       if (i >= ch_set[i].ChannelNum)
-               return -1;
-       return i;
-}
-
-/****************************************************************************
-
-Following are the initialization functions for WiFi MLME
-
-*****************************************************************************/
-
-int init_hw_mlme_ext23a(struct rtw_adapter *padapter)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       set_channel_bwmode23a(padapter, pmlmeext->cur_channel,
-                             pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
-       return _SUCCESS;
-}
-
-static void init_mlme_ext_priv23a_value(struct rtw_adapter *padapter)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       unsigned char   mixed_datarate[NumRates] = {
-               _1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, _6M_RATE_,
-               _9M_RATE_, _12M_RATE_, _18M_RATE_, _24M_RATE_, _36M_RATE_,
-               _48M_RATE_, _54M_RATE_, 0xff};
-       unsigned char   mixed_basicrate[NumRates] = {
-               _1M_RATE_, _2M_RATE_, _5M_RATE_, _11M_RATE_, _6M_RATE_,
-               _12M_RATE_, _24M_RATE_, 0xff,};
-
-       atomic_set(&pmlmeext->event_seq, 0);
-       /* reset to zero when disconnect at client mode */
-       pmlmeext->mgnt_seq = 0;
-
-       pmlmeext->cur_channel = padapter->registrypriv.channel;
-       pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
-       pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
-
-       pmlmeext->retry = 0;
-
-       pmlmeext->cur_wireless_mode = padapter->registrypriv.wireless_mode;
-
-       memcpy(pmlmeext->datarate, mixed_datarate, NumRates);
-       memcpy(pmlmeext->basicrate, mixed_basicrate, NumRates);
-
-       if (pmlmeext->cur_channel > 14)
-               pmlmeext->tx_rate = IEEE80211_OFDM_RATE_6MB;
-       else
-               pmlmeext->tx_rate = IEEE80211_CCK_RATE_1MB;
-
-       pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
-       pmlmeext->sitesurvey_res.channel_idx = 0;
-       pmlmeext->sitesurvey_res.bss_cnt = 0;
-       pmlmeext->scan_abort = false;
-
-       pmlmeinfo->state = MSR_NOLINK;
-       pmlmeinfo->reauth_count = 0;
-       pmlmeinfo->reassoc_count = 0;
-       pmlmeinfo->link_count = 0;
-       pmlmeinfo->auth_seq = 0;
-       pmlmeinfo->auth_algo = dot11AuthAlgrthm_Open;
-       pmlmeinfo->key_index = 0;
-       pmlmeinfo->iv = 0;
-
-       pmlmeinfo->enc_algo = 0;
-       pmlmeinfo->authModeToggle = 0;
-
-       memset(pmlmeinfo->chg_txt, 0, 128);
-
-       pmlmeinfo->slotTime = SHORT_SLOT_TIME;
-       pmlmeinfo->preamble_mode = PREAMBLE_AUTO;
-
-       pmlmeinfo->dialogToken = 0;
-
-       pmlmeext->action_public_rxseq = 0xffff;
-       pmlmeext->action_public_dialog_token = 0xff;
-}
-
-static int has_channel(struct rt_channel_info *channel_set,
-                      u8 chanset_size, u8 chan) {
-       int i;
-
-       for (i = 0; i < chanset_size; i++) {
-               if (channel_set[i].ChannelNum == chan)
-                       return 1;
-       }
-
-       return 0;
-}
-
-static void init_channel_list(struct rtw_adapter *padapter,
-                             struct rt_channel_info *channel_set,
-                             u8 chanset_size,
-                             struct p2p_channels *channel_list)
-{
-       struct p2p_oper_class_map op_class[] = {
-               { IEEE80211G,  81,   1,  13,  1, BW20 },
-               { IEEE80211G,  82,  14,  14,  1, BW20 },
-               { IEEE80211A, 115,  36,  48,  4, BW20 },
-               { IEEE80211A, 116,  36,  44,  8, BW40PLUS },
-               { IEEE80211A, 117,  40,  48,  8, BW40MINUS },
-               { IEEE80211A, 124, 149, 161,  4, BW20 },
-               { IEEE80211A, 125, 149, 169,  4, BW20 },
-               { IEEE80211A, 126, 149, 157,  8, BW40PLUS },
-               { IEEE80211A, 127, 153, 161,  8, BW40MINUS },
-               { -1, 0, 0, 0, 0, BW20 }
-       };
-
-       int cla, op;
-
-       cla = 0;
-
-       for (op = 0; op_class[op].op_class; op++) {
-               u8 ch;
-               struct p2p_oper_class_map *o = &op_class[op];
-               struct p2p_reg_class *reg = NULL;
-
-               for (ch = o->min_chan; ch <= o->max_chan; ch += o->inc) {
-                       if (!has_channel(channel_set, chanset_size, ch))
-                               continue;
-
-                       if ((0 == padapter->registrypriv.ht_enable) &&
-                           (o->inc == 8))
-                               continue;
-
-                       if ((0 == (padapter->registrypriv.cbw40_enable & BIT(1))) &&
-                               ((BW40MINUS == o->bw) || (BW40PLUS == o->bw)))
-                               continue;
-
-                       if (reg == NULL) {
-                               reg = &channel_list->reg_class[cla];
-                               cla++;
-                               reg->reg_class = o->op_class;
-                               reg->channels = 0;
-                       }
-                       reg->channel[reg->channels] = ch;
-                       reg->channels++;
-               }
-       }
-       channel_list->reg_classes = cla;
-}
-
-static u8 init_channel_set(struct rtw_adapter *padapter, u8 cplan,
-                          struct rt_channel_info *c_set)
-{
-       u8 i, ch_size = 0;
-       u8 b5GBand = false, b2_4GBand = false;
-       u8 Index2G = 0, Index5G = 0;
-
-       memset(c_set, 0, sizeof(struct rt_channel_info) * MAX_CHANNEL_NUM);
-
-       if (cplan >= RT_CHANNEL_DOMAIN_MAX &&
-           cplan != RT_CHANNEL_DOMAIN_REALTEK_DEFINE) {
-               DBG_8723A("ChannelPlan ID %x error !!!!!\n", cplan);
-               return ch_size;
-       }
-
-       if (padapter->registrypriv.wireless_mode & WIRELESS_11G) {
-               b2_4GBand = true;
-               if (RT_CHANNEL_DOMAIN_REALTEK_DEFINE == cplan)
-                       Index2G = RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE.Index2G;
-               else
-                       Index2G = RTW_ChannelPlanMap[cplan].Index2G;
-       }
-
-       if (padapter->registrypriv.wireless_mode & WIRELESS_11A) {
-               b5GBand = true;
-               if (RT_CHANNEL_DOMAIN_REALTEK_DEFINE == cplan)
-                       Index5G = RTW_CHANNEL_PLAN_MAP_REALTEK_DEFINE.Index5G;
-               else
-                       Index5G = RTW_ChannelPlanMap[cplan].Index5G;
-       }
-
-       if (b2_4GBand) {
-               for (i = 0; i < RTW_ChannelPlan2G[Index2G].Len; i++) {
-                       c_set[ch_size].ChannelNum =
-                               RTW_ChannelPlan2G[Index2G].Channel[i];
-
-                       if ((RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN == cplan) ||
-                           /* Channel 1~11 is active, and 12~14 is passive */
-                           RT_CHANNEL_DOMAIN_GLOBAL_DOAMIN_2G == cplan) {
-                               if (c_set[ch_size].ChannelNum >= 1 &&
-                                   c_set[ch_size].ChannelNum <= 11)
-                                       c_set[ch_size].ScanType = SCAN_ACTIVE;
-                               else if (c_set[ch_size].ChannelNum >= 12 &&
-                                        c_set[ch_size].ChannelNum  <= 14)
-                                       c_set[ch_size].ScanType = SCAN_PASSIVE;
-                       } else if (RT_CHANNEL_DOMAIN_WORLD_WIDE_13 == cplan ||
-                                  RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == cplan ||
-                                  RT_CHANNEL_DOMAIN_2G_WORLD == Index2G) {
-                               /*  channel 12~13, passive scan */
-                               if (c_set[ch_size].ChannelNum <= 11)
-                                       c_set[ch_size].ScanType = SCAN_ACTIVE;
-                               else
-                                       c_set[ch_size].ScanType = SCAN_PASSIVE;
-                       } else
-                               c_set[ch_size].ScanType = SCAN_ACTIVE;
-
-                       ch_size++;
-               }
-       }
-
-       if (b5GBand) {
-               for (i = 0; i < RTW_ChannelPlan5G[Index5G].Len; i++) {
-                       if (RTW_ChannelPlan5G[Index5G].Channel[i] <= 48 ||
-                           RTW_ChannelPlan5G[Index5G].Channel[i] >= 149) {
-                               c_set[ch_size].ChannelNum =
-                                       RTW_ChannelPlan5G[Index5G].Channel[i];
-                               if (RT_CHANNEL_DOMAIN_WORLD_WIDE_5G == cplan) {
-                                       /* passive scan for all 5G channels */
-                                       c_set[ch_size].ScanType =
-                                               SCAN_PASSIVE;
-                               } else
-                                       c_set[ch_size].ScanType =
-                                               SCAN_ACTIVE;
-                               DBG_8723A("%s(): channel_set[%d].ChannelNum = "
-                                         "%d\n", __func__, ch_size,
-                                         c_set[ch_size].ChannelNum);
-                               ch_size++;
-                       }
-               }
-       }
-
-       return ch_size;
-}
-
-int init_mlme_ext_priv23a(struct rtw_adapter *padapter)
-{
-       struct registry_priv *pregistrypriv = &padapter->registrypriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       pmlmeext->padapter = padapter;
-
-       init_mlme_ext_priv23a_value(padapter);
-       pmlmeinfo->bAcceptAddbaReq = pregistrypriv->bAcceptAddbaReq;
-
-       init_mlme_ext_timer23a(padapter);
-
-#ifdef CONFIG_8723AU_AP_MODE
-       init_mlme_ap_info23a(padapter);
-#endif
-
-       pmlmeext->max_chan_nums = init_channel_set(padapter,
-                                                  pmlmepriv->ChannelPlan,
-                                                  pmlmeext->channel_set);
-       init_channel_list(padapter, pmlmeext->channel_set,
-                         pmlmeext->max_chan_nums, &pmlmeext->channel_list);
-
-       pmlmeext->chan_scan_time = SURVEY_TO;
-       pmlmeext->mlmeext_init = true;
-
-       pmlmeext->active_keep_alive_check = true;
-       return _SUCCESS;
-}
-
-void free_mlme_ext_priv23a (struct mlme_ext_priv *pmlmeext)
-{
-       struct rtw_adapter *padapter = pmlmeext->padapter;
-
-       if (!padapter)
-               return;
-
-       if (padapter->bDriverStopped == true) {
-               del_timer_sync(&pmlmeext->survey_timer);
-               del_timer_sync(&pmlmeext->link_timer);
-               /* del_timer_sync(&pmlmeext->ADDBA_timer); */
-       }
-}
-
-static void
-_mgt_dispatcher23a(struct rtw_adapter *padapter, struct mlme_handler *ptable,
-                  struct recv_frame *precv_frame)
-{
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
-
-       if (ptable->func) {
-               /* receive the frames that ra(a1) is my address
-                  or ra(a1) is bc address. */
-               if (!ether_addr_equal(hdr->addr1, myid(&padapter->eeprompriv))&&
-                   !is_broadcast_ether_addr(hdr->addr1))
-                       return;
-
-               ptable->func(padapter, precv_frame);
-       }
-}
-
-void mgt_dispatcher23a(struct rtw_adapter *padapter,
-                   struct recv_frame *precv_frame)
-{
-       struct mlme_handler *ptable;
-#ifdef CONFIG_8723AU_AP_MODE
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-#endif /* CONFIG_8723AU_AP_MODE */
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-       struct sta_info *psta;
-       u16 stype;
-       int index;
-
-       if (!ieee80211_is_mgmt(mgmt->frame_control))
-               return;
-
-       /* receive the frames that ra(a1) is my address or ra(a1) is
-          bc address. */
-       if (!ether_addr_equal(mgmt->da, myid(&padapter->eeprompriv)) &&
-           !is_broadcast_ether_addr(mgmt->da))
-               return;
-
-       ptable = mlme_sta_tbl;
-
-       stype = le16_to_cpu(mgmt->frame_control) & IEEE80211_FCTL_STYPE;
-       index = stype >> 4;
-
-       if (index > 13) {
-               RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
-                        "Currently we do not support reserved sub-fr-type =%d\n",
-                        index);
-               return;
-       }
-       ptable += index;
-
-       psta = rtw_get_stainfo23a(&padapter->stapriv, mgmt->sa);
-
-       if (psta) {
-               if (ieee80211_has_retry(mgmt->frame_control)) {
-                       if (precv_frame->attrib.seq_num ==
-                           psta->RxMgmtFrameSeqNum) {
-                               /* drop the duplicate management frame */
-                               DBG_8723A("Drop duplicate management frame "
-                                         "with seq_num = %d.\n",
-                                         precv_frame->attrib.seq_num);
-                               return;
-                       }
-               }
-               psta->RxMgmtFrameSeqNum = precv_frame->attrib.seq_num;
-       }
-
-#ifdef CONFIG_8723AU_AP_MODE
-       switch (stype) {
-       case IEEE80211_STYPE_AUTH:
-               if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
-                       ptable->func = &OnAuth23a;
-               else
-                       ptable->func = &OnAuth23aClient23a;
-               /* pass through */
-       case IEEE80211_STYPE_ASSOC_REQ:
-       case IEEE80211_STYPE_REASSOC_REQ:
-               _mgt_dispatcher23a(padapter, ptable, precv_frame);
-               break;
-       case IEEE80211_STYPE_PROBE_REQ:
-               if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
-                       _mgt_dispatcher23a(padapter, ptable, precv_frame);
-               else
-                       _mgt_dispatcher23a(padapter, ptable, precv_frame);
-               break;
-       case IEEE80211_STYPE_BEACON:
-               _mgt_dispatcher23a(padapter, ptable, precv_frame);
-               break;
-       case IEEE80211_STYPE_ACTION:
-               /* if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) */
-               _mgt_dispatcher23a(padapter, ptable, precv_frame);
-               break;
-       default:
-               _mgt_dispatcher23a(padapter, ptable, precv_frame);
-               break;
-       }
-#else
-       _mgt_dispatcher23a(padapter, ptable, precv_frame);
-#endif
-}
-
-/****************************************************************************
-
-Following are the callback functions for each subtype of the management frames
-
-*****************************************************************************/
-
-static int
-OnProbeReq23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       const u8 *ie;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *cur = &pmlmeinfo->network;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-       int len = skb->len;
-
-       if (check_fwstate(pmlmepriv, WIFI_STATION_STATE))
-               return _SUCCESS;
-
-       if (!check_fwstate(pmlmepriv, _FW_LINKED) &&
-           !check_fwstate(pmlmepriv,
-                          WIFI_ADHOC_MASTER_STATE | WIFI_AP_STATE))
-               return _SUCCESS;
-
-       if (unlikely(!ieee80211_is_probe_req(mgmt->frame_control))) {
-               printk(KERN_WARNING "%s: Received non probe request frame\n",
-                      __func__);
-               return _FAIL;
-       }
-
-       len -= offsetof(struct ieee80211_mgmt, u.probe_req.variable);
-
-       ie = cfg80211_find_ie(WLAN_EID_SSID, mgmt->u.probe_req.variable, len);
-
-       /* check (wildcard) SSID */
-       if (!ie)
-               goto out;
-
-       if ((ie[1] && memcmp(ie + 2, cur->Ssid.ssid, cur->Ssid.ssid_len)) ||
-           (ie[1] == 0 && pmlmeinfo->hidden_ssid_mode)) {
-               return _SUCCESS;
-       }
-
-       if (check_fwstate(pmlmepriv, _FW_LINKED) &&
-           pmlmepriv->cur_network.join_res)
-               issue_probersp(padapter, mgmt->sa);
-
-out:
-       return _SUCCESS;
-}
-
-static int
-OnProbeRsp23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS) {
-               report_survey_event23a(padapter, precv_frame);
-               return _SUCCESS;
-       }
-
-       return _SUCCESS;
-}
-
-static int
-OnBeacon23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       int cam_idx;
-       struct sta_info *psta;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct sta_priv *pstapriv = &padapter->stapriv;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-       int pkt_len = skb->len;
-       struct wlan_bssid_ex *pbss;
-       int ret = _SUCCESS;
-       u8 *p, *pie;
-       int pie_len;
-       u32 ielen = 0;
-
-       pie = mgmt->u.beacon.variable;
-       pie_len = pkt_len - offsetof(struct ieee80211_mgmt, u.beacon.variable);
-       p = rtw_get_ie23a(pie, WLAN_EID_EXT_SUPP_RATES, &ielen, pie_len);
-       if (p && ielen > 0) {
-               if (p[1 + ielen] == 0x2D && p[2 + ielen] != 0x2D) {
-                       /* Invalid value 0x2D is detected in Extended Supported
-                        * Rates (ESR) IE. Try to fix the IE length to avoid
-                        * failed Beacon parsing.
-                        */
-                       DBG_8723A("[WIFIDBG] Error in ESR IE is detected in "
-                                 "Beacon of BSSID: %pM. Fix the length of "
-                                 "ESR IE to avoid failed Beacon parsing.\n",
-                                 mgmt->bssid);
-                       p[1] = ielen - 1;
-               }
-       }
-
-       if (pmlmeext->sitesurvey_res.state == SCAN_PROCESS) {
-               report_survey_event23a(padapter, precv_frame);
-               return _SUCCESS;
-       }
-
-       if (!ether_addr_equal(mgmt->bssid,
-                             get_my_bssid23a(&pmlmeinfo->network)))
-               goto out;
-
-       if (pmlmeinfo->state & WIFI_FW_AUTH_NULL) {
-               /* we should update current network before auth,
-                  or some IE is wrong */
-               pbss = collect_bss_info(padapter, precv_frame);
-               if (pbss) {
-                       update_network23a(&pmlmepriv->cur_network.network, pbss,
-                                         padapter, true);
-                       rtw_get_bcn_info23a(&pmlmepriv->cur_network);
-                       kfree(pbss);
-               }
-
-               /* check the vendor of the assoc AP */
-               pmlmeinfo->assoc_AP_vendor =
-                       check_assoc_AP23a((u8 *)&mgmt->u.beacon, pkt_len -
-                                         offsetof(struct ieee80211_mgmt, u));
-
-               /* update TSF Value */
-               rtw_update_TSF(pmlmeext, mgmt);
-
-               /* start auth */
-               start_clnt_auth(padapter);
-
-               return _SUCCESS;
-       }
-
-       if (((pmlmeinfo->state & 0x03) == MSR_AP) &&
-           (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
-               psta = rtw_get_stainfo23a(pstapriv, mgmt->sa);
-               if (psta) {
-                       ret = rtw_check_bcn_info23a(padapter, mgmt, pkt_len);
-                       if (ret != _SUCCESS) {
-                               DBG_8723A_LEVEL(_drv_always_, "ap has changed, "
-                                               "disconnect now\n");
-                               receive_disconnect23a(padapter, pmlmeinfo->network.MacAddress, 65535);
-                               return _SUCCESS;
-                       }
-                       /* update WMM, ERP in the beacon */
-                       /* todo: the timer is used instead of
-                          the number of the beacon received */
-                       if ((sta_rx_pkts(psta) & 0xf) == 0) {
-                               /* DBG_8723A("update_bcn_info\n"); */
-                               update_beacon23a_info(padapter, mgmt,
-                                                     pkt_len, psta);
-                       }
-               }
-       } else if ((pmlmeinfo->state&0x03) == MSR_ADHOC) {
-               psta = rtw_get_stainfo23a(pstapriv, mgmt->sa);
-               if (psta) {
-                       /* update WMM, ERP in the beacon */
-                       /* todo: the timer is used instead of the
-                          number of the beacon received */
-                       if ((sta_rx_pkts(psta) & 0xf) == 0) {
-                               /* DBG_8723A("update_bcn_info\n"); */
-                               update_beacon23a_info(padapter, mgmt,
-                                                     pkt_len, psta);
-                       }
-               } else {
-                       /* allocate a new CAM entry for IBSS station */
-                       cam_idx = allocate_fw_sta_entry23a(padapter);
-                       if (cam_idx == NUM_STA)
-                               goto out;
-
-                       /* get supported rate */
-                       if (update_sta_support_rate23a(padapter, pie, pie_len,
-                                                      cam_idx) == _FAIL) {
-                               pmlmeinfo->FW_sta_info[cam_idx].status = 0;
-                               goto out;
-                       }
-
-                       /* update TSF Value */
-                       rtw_update_TSF(pmlmeext, mgmt);
-
-                       /* report sta add event */
-                       report_add_sta_event23a(padapter, mgmt->sa,
-                                               cam_idx);
-               }
-       }
-
-out:
-
-       return _SUCCESS;
-}
-
-#ifdef CONFIG_8723AU_AP_MODE
-static int
-OnAuth23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       static struct sta_info stat;
-       struct sta_info *pstat = NULL;
-       struct sta_priv *pstapriv = &padapter->stapriv;
-       struct security_priv *psecuritypriv = &padapter->securitypriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-       u8 *pframe;
-       const u8 *p;
-       unsigned char *sa;
-       u16 auth_mode, seq, algorithm;
-       int status, len = skb->len;
-
-       if ((pmlmeinfo->state & 0x03) != MSR_AP)
-               return _FAIL;
-
-       DBG_8723A("+OnAuth23a\n");
-
-       sa = mgmt->sa;
-
-       auth_mode = psecuritypriv->dot11AuthAlgrthm;
-
-       pframe = mgmt->u.auth.variable;
-       len = skb->len - offsetof(struct ieee80211_mgmt, u.auth.variable);
-
-       seq = le16_to_cpu(mgmt->u.auth.auth_transaction);
-       algorithm = le16_to_cpu(mgmt->u.auth.auth_alg);
-
-       DBG_8723A("auth alg =%x, seq =%X\n", algorithm, seq);
-
-       if (auth_mode == 2 &&
-           psecuritypriv->dot11PrivacyAlgrthm != WLAN_CIPHER_SUITE_WEP40 &&
-           psecuritypriv->dot11PrivacyAlgrthm != WLAN_CIPHER_SUITE_WEP104)
-               auth_mode = 0;
-
-       /*  rx a shared-key auth but shared not enabled, or */
-       /*  rx a open-system auth but shared-key is enabled */
-       if ((algorithm != WLAN_AUTH_OPEN && auth_mode == 0) ||
-           (algorithm == WLAN_AUTH_OPEN && auth_mode == 1)) {
-               DBG_8723A("auth rejected due to bad alg [alg =%d, auth_mib "
-                         "=%d] %02X%02X%02X%02X%02X%02X\n",
-                         algorithm, auth_mode,
-                         sa[0], sa[1], sa[2], sa[3], sa[4], sa[5]);
-
-               status = WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG;
-
-               goto auth_fail;
-       }
-
-       if (rtw_access_ctrl23a(padapter, sa) == false) {
-               status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
-               goto auth_fail;
-       }
-
-       pstat = rtw_get_stainfo23a(pstapriv, sa);
-       if (!pstat) {
-               /*  allocate a new one */
-               DBG_8723A("going to alloc stainfo for sa =%pM\n", sa);
-               pstat = rtw_alloc_stainfo23a(pstapriv, sa, GFP_ATOMIC);
-               if (!pstat) {
-                       DBG_8723A(" Exceed the upper limit of supported "
-                                 "clients...\n");
-                       status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
-                       goto auth_fail;
-               }
-
-               pstat->state = WIFI_FW_AUTH_NULL;
-               pstat->auth_seq = 0;
-
-               /* pstat->flags = 0; */
-               /* pstat->capability = 0; */
-       } else {
-               spin_lock_bh(&pstapriv->asoc_list_lock);
-               if (!list_empty(&pstat->asoc_list)) {
-                       list_del_init(&pstat->asoc_list);
-                       pstapriv->asoc_list_cnt--;
-                       if (pstat->expire_to > 0) {
-                               /* TODO: STA re_auth within expire_to */
-                       }
-               }
-               spin_unlock_bh(&pstapriv->asoc_list_lock);
-
-               if (seq == 1) {
-                       /* TODO: STA re_auth and auth timeout */
-               }
-       }
-
-       spin_lock_bh(&pstapriv->auth_list_lock);
-       if (list_empty(&pstat->auth_list)) {
-               list_add_tail(&pstat->auth_list, &pstapriv->auth_list);
-               pstapriv->auth_list_cnt++;
-       }
-       spin_unlock_bh(&pstapriv->auth_list_lock);
-
-       if (pstat->auth_seq == 0)
-               pstat->expire_to = pstapriv->auth_to;
-
-       if ((pstat->auth_seq + 1) != seq) {
-               DBG_8723A("(1)auth rejected because out of seq [rx_seq =%d, "
-                         "exp_seq =%d]!\n", seq, pstat->auth_seq+1);
-               status = WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION;
-               goto auth_fail;
-       }
-
-       if (algorithm == WLAN_AUTH_OPEN && (auth_mode == 0 || auth_mode == 2)) {
-               if (seq == 1) {
-                       pstat->state &= ~WIFI_FW_AUTH_NULL;
-                       pstat->state |= WIFI_FW_AUTH_SUCCESS;
-                       pstat->expire_to = pstapriv->assoc_to;
-                       pstat->authalg = algorithm;
-               } else {
-                       DBG_8723A("(2)auth rejected because out of seq "
-                                 "[rx_seq =%d, exp_seq =%d]!\n",
-                                 seq, pstat->auth_seq+1);
-                       status = WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION;
-                       goto auth_fail;
-               }
-       } else { /*  shared system or auto authentication */
-               if (seq == 1) {
-                       /* prepare for the challenging txt... */
-                       pstat->state &= ~WIFI_FW_AUTH_NULL;
-                       pstat->state |= WIFI_FW_AUTH_STATE;
-                       pstat->authalg = algorithm;
-                       pstat->auth_seq = 2;
-               } else if (seq == 3) {
-                       /* checking for challenging txt... */
-                       DBG_8723A("checking for challenging txt...\n");
-
-                       p = cfg80211_find_ie(WLAN_EID_CHALLENGE, pframe, len);
-                       if (!p || p[1] <= 0) {
-                               DBG_8723A("auth rejected because challenge "
-                                         "failure!(1)\n");
-                               status = WLAN_STATUS_CHALLENGE_FAIL;
-                               goto auth_fail;
-                       }
-
-                       if (!memcmp(p + 2, pstat->chg_txt, 128)) {
-                               pstat->state &= ~WIFI_FW_AUTH_STATE;
-                               pstat->state |= WIFI_FW_AUTH_SUCCESS;
-                               /*  challenging txt is correct... */
-                               pstat->expire_to =  pstapriv->assoc_to;
-                       } else {
-                               DBG_8723A("auth rejected because challenge "
-                                         "failure!\n");
-                               status = WLAN_STATUS_CHALLENGE_FAIL;
-                               goto auth_fail;
-                       }
-               } else {
-                       DBG_8723A("(3)auth rejected because out of seq "
-                                 "[rx_seq =%d, exp_seq =%d]!\n",
-                                 seq, pstat->auth_seq+1);
-                       status = WLAN_STATUS_UNKNOWN_AUTH_TRANSACTION;
-                       goto auth_fail;
-               }
-       }
-
-       /*  Now, we are going to issue_auth... */
-       pstat->auth_seq = seq + 1;
-
-       issue_auth(padapter, pstat, WLAN_STATUS_SUCCESS);
-
-       if (pstat->state & WIFI_FW_AUTH_SUCCESS)
-               pstat->auth_seq = 0;
-
-       return _SUCCESS;
-
-auth_fail:
-
-       if (pstat)
-               rtw_free_stainfo23a(padapter, pstat);
-
-       pstat = &stat;
-       memset((char *)pstat, '\0', sizeof(stat));
-       pstat->auth_seq = 2;
-       ether_addr_copy(pstat->hwaddr, sa);
-
-       issue_auth(padapter, pstat, (unsigned short)status);
-
-       return _FAIL;
-}
-#endif
-
-static int
-OnAuth23aClient23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       unsigned int seq, status, algthm;
-       unsigned int go2asoc = 0;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-       const u8 *p;
-       u8 *pie;
-       int plen = skb->len;
-
-       DBG_8723A("%s\n", __func__);
-
-       /* check A1 matches or not */
-       if (!ether_addr_equal(myid(&padapter->eeprompriv), mgmt->da))
-               return _SUCCESS;
-
-       if (!(pmlmeinfo->state & WIFI_FW_AUTH_STATE))
-               return _SUCCESS;
-
-       pie = mgmt->u.auth.variable;
-       plen -= offsetof(struct ieee80211_mgmt, u.auth.variable);
-
-       algthm = le16_to_cpu(mgmt->u.auth.auth_alg);
-       seq = le16_to_cpu(mgmt->u.auth.auth_transaction);
-       status = le16_to_cpu(mgmt->u.auth.status_code);
-
-       if (status) {
-               DBG_8723A("clnt auth fail, status: %d\n", status);
-               /*  pmlmeinfo->auth_algo == dot11AuthAlgrthm_Auto) */
-               if (status == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) {
-                       if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
-                               pmlmeinfo->auth_algo = dot11AuthAlgrthm_Open;
-                       else
-                               pmlmeinfo->auth_algo = dot11AuthAlgrthm_Shared;
-                       /* pmlmeinfo->reauth_count = 0; */
-               }
-
-               set_link_timer(pmlmeext, 1);
-               goto authclnt_fail;
-       }
-
-       if (seq == 2) {
-               if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared) {
-                       /*  legendary shared system */
-                       p = cfg80211_find_ie(WLAN_EID_CHALLENGE, pie, plen);
-
-                       if (!p) {
-                               /* DBG_8723A("marc: no challenge text?\n"); */
-                               goto authclnt_fail;
-                       }
-
-                       memcpy((void *)(pmlmeinfo->chg_txt), p + 2, p[1]);
-                       pmlmeinfo->auth_seq = 3;
-                       issue_auth(padapter, NULL, 0);
-                       set_link_timer(pmlmeext, REAUTH_TO);
-
-                       return _SUCCESS;
-               } else {
-                       /*  open system */
-                       go2asoc = 1;
-               }
-       } else if (seq == 4) {
-               if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared)
-                       go2asoc = 1;
-               else
-                       goto authclnt_fail;
-       } else {
-               /*  this is also illegal */
-               /* DBG_8723A("marc: clnt auth failed due to illegal seq =%x\n",
-                  seq); */
-               goto authclnt_fail;
-       }
-
-       if (go2asoc) {
-               DBG_8723A_LEVEL(_drv_always_, "auth success, start assoc\n");
-               start_clnt_assoc(padapter);
-               return _SUCCESS;
-       }
-
-authclnt_fail:
-
-       /* pmlmeinfo->state &= ~(WIFI_FW_AUTH_STATE); */
-
-       return _FAIL;
-}
-
-#ifdef CONFIG_8723AU_AP_MODE
-static int rtw_validate_vendor_specific_ies(const u8 *pos, int elen)
-{
-       unsigned int oui;
-
-       /* first 3 bytes in vendor specific information element are the IEEE
-        * OUI of the vendor. The following byte is used a vendor specific
-        * sub-type. */
-       if (elen < 4) {
-               DBG_8723A("short vendor specific information element "
-                         "ignored (len =%i)\n", elen);
-               return -EINVAL;
-       }
-
-       oui = RTW_GET_BE24(pos);
-       switch (oui) {
-       case WLAN_OUI_MICROSOFT:
-               /* Microsoft/Wi-Fi information elements are further typed and
-                * subtyped */
-               switch (pos[3]) {
-               case WLAN_OUI_TYPE_MICROSOFT_WPA:
-                       /* Microsoft OUI (00:50:F2) with OUI Type 1:
-                        * real WPA information element */
-                       break;
-               case WLAN_OUI_TYPE_MICROSOFT_WMM:
-                       if (elen < 5) {
-                               DBG_8723A("short WME information element "
-                                         "ignored (len =%i)\n", elen);
-                               return -EINVAL;
-                       }
-                       switch (pos[4]) {
-                       case WME_OUI_SUBTYPE_INFORMATION_ELEMENT:
-                       case WME_OUI_SUBTYPE_PARAMETER_ELEMENT:
-                               break;
-                       case WME_OUI_SUBTYPE_TSPEC_ELEMENT:
-                               break;
-                       default:
-                               DBG_8723A("unknown WME information element "
-                                         "ignored (subtype =%d len =%i)\n",
-                                          pos[4], elen);
-                               return -EINVAL;
-                       }
-                       break;
-               case WLAN_OUI_TYPE_MICROSOFT_WPS:
-                       /* Wi-Fi Protected Setup (WPS) IE */
-                       break;
-               default:
-                       DBG_8723A("Unknown Microsoft information element "
-                                 "ignored (type =%d len =%i)\n",
-                                 pos[3], elen);
-                       return -EINVAL;
-               }
-               break;
-
-       case OUI_BROADCOM:
-               switch (pos[3]) {
-               case VENDOR_HT_CAPAB_OUI_TYPE:
-                       break;
-               default:
-                       DBG_8723A("Unknown Broadcom information element "
-                                 "ignored (type =%d len =%i)\n", pos[3], elen);
-                       return -EINVAL;
-               }
-               break;
-
-       default:
-               DBG_8723A("unknown vendor specific information element "
-                         "ignored (vendor OUI %02x:%02x:%02x len =%i)\n",
-                          pos[0], pos[1], pos[2], elen);
-               return -EINVAL;
-       }
-
-       return 0;
-}
-
-static int rtw_validate_frame_ies(const u8 *start, uint len)
-{
-       const u8 *pos = start;
-       int left = len;
-       int unknown = 0;
-
-       while (left >= 2) {
-               u8 id, elen;
-
-               id = *pos++;
-               elen = *pos++;
-               left -= 2;
-
-               if (elen > left) {
-                       DBG_8723A("%s: IEEE 802.11 failed (id =%d elen =%d "
-                                 "left =%i)\n", __func__, id, elen, left);
-                       return -EINVAL;
-               }
-
-               switch (id) {
-               case WLAN_EID_SSID:
-               case WLAN_EID_SUPP_RATES:
-               case WLAN_EID_FH_PARAMS:
-               case WLAN_EID_DS_PARAMS:
-               case WLAN_EID_CF_PARAMS:
-               case WLAN_EID_TIM:
-               case WLAN_EID_IBSS_PARAMS:
-               case WLAN_EID_CHALLENGE:
-               case WLAN_EID_ERP_INFO:
-               case WLAN_EID_EXT_SUPP_RATES:
-                       break;
-               case WLAN_EID_VENDOR_SPECIFIC:
-                       if (rtw_validate_vendor_specific_ies(pos, elen))
-                               unknown++;
-                       break;
-               case WLAN_EID_RSN:
-               case WLAN_EID_PWR_CAPABILITY:
-               case WLAN_EID_SUPPORTED_CHANNELS:
-               case WLAN_EID_MOBILITY_DOMAIN:
-               case WLAN_EID_FAST_BSS_TRANSITION:
-               case WLAN_EID_TIMEOUT_INTERVAL:
-               case WLAN_EID_HT_CAPABILITY:
-               case WLAN_EID_HT_OPERATION:
-               default:
-                       unknown++;
-                       DBG_8723A("%s IEEE 802.11 ignored unknown element "
-                                 "(id =%d elen =%d)\n", __func__, id, elen);
-                       break;
-               }
-
-               left -= elen;
-               pos += elen;
-       }
-
-       if (left)
-               return -EINVAL;
-
-       return 0;
-}
-#endif
-
-static int
-OnAssocReq23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-#ifdef CONFIG_8723AU_AP_MODE
-       u16 capab_info, listen_interval;
-       struct sta_info *pstat;
-       unsigned char reassoc;
-       int i, wpa_ie_len, left;
-       unsigned char supportRate[16];
-       int supportRateNum;
-       unsigned short status = WLAN_STATUS_SUCCESS;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct security_priv *psecuritypriv = &padapter->securitypriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *cur = &pmlmeinfo->network;
-       struct sta_priv *pstapriv = &padapter->stapriv;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-       const u8 *pos, *p, *wpa_ie, *wps_ie;
-       u8 *pframe = skb->data;
-       uint pkt_len = skb->len;
-       int r;
-
-       if ((pmlmeinfo->state & 0x03) != MSR_AP)
-               return _FAIL;
-
-       left = pkt_len - sizeof(struct ieee80211_hdr_3addr);
-       if (ieee80211_is_assoc_req(mgmt->frame_control)) {
-               reassoc = 0;
-               pos = mgmt->u.assoc_req.variable;
-               left -= offsetof(struct ieee80211_mgmt, u.assoc_req.variable);
-       } else { /*  WIFI_REASSOCREQ */
-               reassoc = 1;
-               pos = mgmt->u.reassoc_req.variable;
-               left -= offsetof(struct ieee80211_mgmt, u.reassoc_req.variable);
-       }
-
-       if (left < 0) {
-               DBG_8723A("handle_assoc(reassoc =%d) - too short payload "
-                         "(len =%lu)\n", reassoc, (unsigned long)pkt_len);
-               return _FAIL;
-       }
-
-       pstat = rtw_get_stainfo23a(pstapriv, mgmt->sa);
-       if (!pstat) {
-               status = WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA;
-               goto asoc_class2_error;
-       }
-
-       /* These two are located at the same offsets whether it's an
-        * assoc_req or a reassoc_req */
-       capab_info = get_unaligned_le16(&mgmt->u.assoc_req.capab_info);
-       listen_interval =
-               get_unaligned_le16(&mgmt->u.assoc_req.listen_interval);
-
-       DBG_8723A("%s\n", __func__);
-
-       /*  check if this stat has been successfully authenticated/assocated */
-       if (!(pstat->state & WIFI_FW_AUTH_SUCCESS)) {
-               if (!(pstat->state & WIFI_FW_ASSOC_SUCCESS)) {
-                       status = WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA;
-                       goto asoc_class2_error;
-               } else {
-                       pstat->state &= (~WIFI_FW_ASSOC_SUCCESS);
-                       pstat->state |= WIFI_FW_ASSOC_STATE;
-               }
-       } else {
-               pstat->state &= (~WIFI_FW_AUTH_SUCCESS);
-               pstat->state |= WIFI_FW_ASSOC_STATE;
-       }
-
-       pstat->capability = capab_info;
-
-       /* now parse all ieee802_11 ie to point to elems */
-
-       if (rtw_validate_frame_ies(pos, left)) {
-               DBG_8723A("STA %pM sent invalid association request\n",
-                         pstat->hwaddr);
-               status = WLAN_STATUS_UNSPECIFIED_FAILURE;
-               goto OnAssocReq23aFail;
-       }
-
-       /*  now we should check all the fields... */
-       /*  checking SSID */
-       p = cfg80211_find_ie(WLAN_EID_SSID, pos, left);
-       if (!p || p[1] == 0) {
-               /*  broadcast ssid, however it is not allowed in assocreq */
-               DBG_8723A("STA %pM sent invalid association request lacking an SSID\n",
-                         pstat->hwaddr);
-               status = WLAN_STATUS_UNSPECIFIED_FAILURE;
-               goto OnAssocReq23aFail;
-       } else {
-               /*  check if ssid match */
-               if (memcmp(p + 2, cur->Ssid.ssid, cur->Ssid.ssid_len))
-                       status = WLAN_STATUS_UNSPECIFIED_FAILURE;
-
-               if (p[1] != cur->Ssid.ssid_len)
-                       status = WLAN_STATUS_UNSPECIFIED_FAILURE;
-       }
-
-       if (status != WLAN_STATUS_SUCCESS)
-               goto OnAssocReq23aFail;
-
-       /*  check if the supported rate is ok */
-       p = cfg80211_find_ie(WLAN_EID_SUPP_RATES, pos, left);
-       if (!p) {
-               DBG_8723A("Rx a sta assoc-req which supported rate is "
-                         "empty!\n");
-               /*  use our own rate set as statoin used */
-               /* memcpy(supportRate, AP_BSSRATE, AP_BSSRATE_LEN); */
-               /* supportRateNum = AP_BSSRATE_LEN; */
-
-               status = WLAN_STATUS_UNSPECIFIED_FAILURE;
-               goto OnAssocReq23aFail;
-       } else {
-               memcpy(supportRate, p + 2, p[1]);
-               supportRateNum = p[1];
-
-               p = cfg80211_find_ie(WLAN_EID_EXT_SUPP_RATES, pos, left);
-               if (p) {
-                       if (supportRateNum <= sizeof(supportRate)) {
-                               memcpy(supportRate+supportRateNum, p + 2, p[1]);
-                               supportRateNum += p[1];
-                       }
-               }
-       }
-
-       /* todo: mask supportRate between AP & STA -> move to update raid */
-       /* get_matched_rate(pmlmeext, supportRate, &supportRateNum, 0); */
-
-       /* update station supportRate */
-       pstat->bssratelen = supportRateNum;
-       memcpy(pstat->bssrateset, supportRate, supportRateNum);
-       Update23aTblForSoftAP(pstat->bssrateset, pstat->bssratelen);
-
-       /* check RSN/WPA/WPS */
-       pstat->dot8021xalg = 0;
-       pstat->wpa_psk = 0;
-       pstat->wpa_group_cipher = 0;
-       pstat->wpa2_group_cipher = 0;
-       pstat->wpa_pairwise_cipher = 0;
-       pstat->wpa2_pairwise_cipher = 0;
-       memset(pstat->wpa_ie, 0, sizeof(pstat->wpa_ie));
-
-       wpa_ie = cfg80211_find_ie(WLAN_EID_RSN, pos, left);
-       if (!wpa_ie)
-               wpa_ie = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
-                                                WLAN_OUI_TYPE_MICROSOFT_WPA,
-                                                pos, left);
-       if (wpa_ie) {
-               int group_cipher = 0, pairwise_cipher = 0;
-
-               wpa_ie_len = wpa_ie[1];
-               if (psecuritypriv->wpa_psk & BIT(1)) {
-                       r = rtw_parse_wpa2_ie23a(wpa_ie, wpa_ie_len + 2,
-                                                &group_cipher,
-                                                &pairwise_cipher, NULL);
-                       if (r == _SUCCESS) {
-                               pstat->dot8021xalg = 1;/* psk,  todo:802.1x */
-                               pstat->wpa_psk |= BIT(1);
-
-                               pstat->wpa2_group_cipher = group_cipher &
-                                       psecuritypriv->wpa2_group_cipher;
-                               pstat->wpa2_pairwise_cipher = pairwise_cipher &
-                                       psecuritypriv->wpa2_pairwise_cipher;
-                       } else
-                               status = WLAN_STATUS_INVALID_IE;
-               } else if (psecuritypriv->wpa_psk & BIT(0)) {
-                       r = rtw_parse_wpa_ie23a(wpa_ie, wpa_ie_len + 2,
-                                               &group_cipher, &pairwise_cipher,
-                                               NULL);
-                       if (r == _SUCCESS) {
-                               pstat->dot8021xalg = 1;/* psk,  todo:802.1x */
-                               pstat->wpa_psk |= BIT(0);
-
-                               pstat->wpa_group_cipher = group_cipher &
-                                       psecuritypriv->wpa_group_cipher;
-                               pstat->wpa_pairwise_cipher = pairwise_cipher &
-                                       psecuritypriv->wpa_pairwise_cipher;
-                       } else
-                               status = WLAN_STATUS_INVALID_IE;
-               } else {
-                       wpa_ie = NULL;
-                       wpa_ie_len = 0;
-               }
-               if (wpa_ie && status == WLAN_STATUS_SUCCESS) {
-                       if (!pstat->wpa_group_cipher)
-                               status = WLAN_STATUS_INVALID_GROUP_CIPHER;
-
-                       if (!pstat->wpa_pairwise_cipher)
-                               status = WLAN_STATUS_INVALID_PAIRWISE_CIPHER;
-               }
-       }
-
-       if (status != WLAN_STATUS_SUCCESS)
-               goto OnAssocReq23aFail;
-
-       pstat->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS);
-
-       wps_ie = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
-                                        WLAN_OUI_TYPE_MICROSOFT_WPS,
-                                        pos, left);
-
-       if (!wpa_ie) {
-               if (wps_ie) {
-                       DBG_8723A("STA included WPS IE in (Re)Association "
-                                 "Request - assume WPS is used\n");
-                       pstat->flags |= WLAN_STA_WPS;
-               } else {
-                       DBG_8723A("STA did not include WPA/RSN IE in (Re)"
-                                  "Association Request - possible WPS use\n");
-                       pstat->flags |= WLAN_STA_MAYBE_WPS;
-               }
-       } else {
-               int copy_len;
-
-               if (psecuritypriv->wpa_psk == 0) {
-                       DBG_8723A("STA %pM: WPA/RSN IE in association request, but AP don't support WPA/RSN\n",
-                                 pstat->hwaddr);
-
-                       status = WLAN_STATUS_INVALID_IE;
-
-                       goto OnAssocReq23aFail;
-               }
-
-               if (wps_ie) {
-                       DBG_8723A("STA included WPS IE in (Re)Association "
-                                 "Request - WPS is used\n");
-                       pstat->flags |= WLAN_STA_WPS;
-                       copy_len = 0;
-               } else {
-                       copy_len = ((wpa_ie_len + 2) > sizeof(pstat->wpa_ie)) ?
-                               sizeof(pstat->wpa_ie) : (wpa_ie_len + 2);
-               }
-
-               if (copy_len > 0)
-                       memcpy(pstat->wpa_ie, wpa_ie - 2, copy_len);
-       }
-
-       /*  check if there is WMM IE & support WWM-PS */
-       pstat->flags &= ~WLAN_STA_WME;
-       pstat->qos_option = 0;
-       pstat->qos_info = 0;
-       pstat->has_legacy_ac = true;
-       pstat->uapsd_vo = 0;
-       pstat->uapsd_vi = 0;
-       pstat->uapsd_be = 0;
-       pstat->uapsd_bk = 0;
-       if (pmlmepriv->qos_option) {
-               const u8 *end = pos + left;
-
-               p = pos;
-
-               for (;;) {
-                       left = end - p;
-                       p = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
-                                                   WLAN_OUI_TYPE_MICROSOFT_WMM,
-                                                   p, left);
-                       if (p) {
-                               pstat->flags |= WLAN_STA_WME;
-
-                               pstat->qos_option = 1;
-                               pstat->qos_info = *(p + 8);
-
-                               pstat->max_sp_len =
-                                       (pstat->qos_info >> 5) & 0x3;
-
-                               if ((pstat->qos_info & 0xf) != 0xf)
-                                       pstat->has_legacy_ac = true;
-                               else
-                                       pstat->has_legacy_ac = false;
-
-                               if (pstat->qos_info & 0xf) {
-                                       if (pstat->qos_info & BIT(0))
-                                               pstat->uapsd_vo = BIT(0)|BIT(1);
-                                       else
-                                               pstat->uapsd_vo = 0;
-
-                                       if (pstat->qos_info & BIT(1))
-                                               pstat->uapsd_vi = BIT(0)|BIT(1);
-                                       else
-                                               pstat->uapsd_vi = 0;
-
-                                       if (pstat->qos_info & BIT(2))
-                                               pstat->uapsd_bk = BIT(0)|BIT(1);
-                                       else
-                                               pstat->uapsd_bk = 0;
-
-                                       if (pstat->qos_info & BIT(3))
-                                               pstat->uapsd_be = BIT(0)|BIT(1);
-                                       else
-                                               pstat->uapsd_be = 0;
-
-                                       break;
-                               }
-                       } else {
-                               break;
-                       }
-                       p = p + p[1] + 2;
-               }
-       }
-
-       /* save HT capabilities in the sta object */
-       memset(&pstat->htpriv.ht_cap, 0, sizeof(struct ieee80211_ht_cap));
-       p = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, pos, left);
-
-       if (p && p[1] >= sizeof(struct ieee80211_ht_cap)) {
-               pstat->flags |= WLAN_STA_HT;
-
-               pstat->flags |= WLAN_STA_WME;
-
-               memcpy(&pstat->htpriv.ht_cap, p + 2,
-                      sizeof(struct ieee80211_ht_cap));
-       } else
-               pstat->flags &= ~WLAN_STA_HT;
-
-       if (!pmlmepriv->htpriv.ht_option && pstat->flags & WLAN_STA_HT){
-               status = WLAN_STATUS_UNSPECIFIED_FAILURE;
-               goto OnAssocReq23aFail;
-       }
-
-       if (pstat->flags & WLAN_STA_HT &&
-           (pstat->wpa2_pairwise_cipher & WPA_CIPHER_TKIP ||
-            pstat->wpa_pairwise_cipher & WPA_CIPHER_TKIP)) {
-               DBG_8723A("HT: %pM tried to use TKIP with HT association\n",
-                         pstat->hwaddr);
-
-               /* status = WLAN_STATUS_CIPHER_REJECTED_PER_POLICY; */
-               /* goto OnAssocReq23aFail; */
-       }
-
-       pstat->flags |= WLAN_STA_NONERP;
-       for (i = 0; i < pstat->bssratelen; i++) {
-               if ((pstat->bssrateset[i] & 0x7f) > 22) {
-                       pstat->flags &= ~WLAN_STA_NONERP;
-                       break;
-               }
-       }
-
-       if (pstat->capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
-               pstat->flags |= WLAN_STA_SHORT_PREAMBLE;
-       else
-               pstat->flags &= ~WLAN_STA_SHORT_PREAMBLE;
-
-       if (status != WLAN_STATUS_SUCCESS)
-               goto OnAssocReq23aFail;
-
-       /* TODO: identify_proprietary_vendor_ie(); */
-       /*  Realtek proprietary IE */
-       /*  identify if this is Broadcom sta */
-       /*  identify if this is ralink sta */
-       /*  Customer proprietary IE */
-
-       /* get a unique AID */
-       if (pstat->aid > 0) {
-               DBG_8723A("  old AID %d\n", pstat->aid);
-       } else {
-               for (pstat->aid = 1; pstat->aid <= NUM_STA; pstat->aid++)
-                       if (pstapriv->sta_aid[pstat->aid - 1] == NULL)
-                               break;
-
-               if (pstat->aid > NUM_STA)
-                       pstat->aid = NUM_STA;
-               if (pstat->aid > pstapriv->max_num_sta) {
-
-                       pstat->aid = 0;
-
-                       DBG_8723A("  no room for more AIDs\n");
-
-                       status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
-
-                       goto OnAssocReq23aFail;
-               } else {
-                       pstapriv->sta_aid[pstat->aid - 1] = pstat;
-                       DBG_8723A("allocate new AID = (%d)\n", pstat->aid);
-               }
-       }
-
-       pstat->state &= ~WIFI_FW_ASSOC_STATE;
-       pstat->state |= WIFI_FW_ASSOC_SUCCESS;
-
-       spin_lock_bh(&pstapriv->auth_list_lock);
-       if (!list_empty(&pstat->auth_list)) {
-               list_del_init(&pstat->auth_list);
-               pstapriv->auth_list_cnt--;
-       }
-       spin_unlock_bh(&pstapriv->auth_list_lock);
-
-       spin_lock_bh(&pstapriv->asoc_list_lock);
-       if (list_empty(&pstat->asoc_list)) {
-               pstat->expire_to = pstapriv->expire_to;
-               list_add_tail(&pstat->asoc_list, &pstapriv->asoc_list);
-               pstapriv->asoc_list_cnt++;
-       }
-       spin_unlock_bh(&pstapriv->asoc_list_lock);
-
-       /*  now the station is qualified to join our BSS... */
-       if (pstat->state & WIFI_FW_ASSOC_SUCCESS &&
-           status == WLAN_STATUS_SUCCESS) {
-               /* 1 bss_cap_update & sta_info_update23a */
-               bss_cap_update_on_sta_join23a(padapter, pstat);
-               sta_info_update23a(padapter, pstat);
-
-               /* issue assoc rsp before notify station join event. */
-               if (ieee80211_is_assoc_req(mgmt->frame_control))
-                       issue_assocrsp(padapter, status, pstat,
-                                      IEEE80211_STYPE_ASSOC_RESP);
-               else
-                       issue_assocrsp(padapter, status, pstat,
-                                      IEEE80211_STYPE_REASSOC_RESP);
-
-               /* 2 - report to upper layer */
-               DBG_8723A("indicate_sta_join_event to upper layer - hostapd\n");
-               rtw_cfg80211_indicate_sta_assoc(padapter, pframe, pkt_len);
-
-               /* 3-(1) report sta add event */
-               report_add_sta_event23a(padapter, pstat->hwaddr, pstat->aid);
-       }
-
-       return _SUCCESS;
-
-asoc_class2_error:
-
-       issue_deauth23a(padapter, mgmt->sa, status);
-       return _FAIL;
-
-OnAssocReq23aFail:
-
-       pstat->aid = 0;
-       if (ieee80211_is_assoc_req(mgmt->frame_control))
-               issue_assocrsp(padapter, status, pstat,
-                              IEEE80211_STYPE_ASSOC_RESP);
-       else
-               issue_assocrsp(padapter, status, pstat,
-                              IEEE80211_STYPE_REASSOC_RESP);
-
-#endif /* CONFIG_8723AU_AP_MODE */
-
-       return _FAIL;
-}
-
-static int
-OnAssocRsp23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *pmgmt = (struct ieee80211_mgmt *) skb->data;
-       int res;
-       unsigned short status;
-       const u8 *p, *pie;
-       u8 *pframe = skb->data;
-       int pkt_len = skb->len;
-       int pielen;
-
-       DBG_8723A("%s\n", __func__);
-
-       /* check A1 matches or not */
-       if (!ether_addr_equal(myid(&padapter->eeprompriv), pmgmt->da))
-               return _SUCCESS;
-
-       if (!(pmlmeinfo->state & (WIFI_FW_AUTH_SUCCESS | WIFI_FW_ASSOC_STATE)))
-               return _SUCCESS;
-
-       if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)
-               return _SUCCESS;
-
-       del_timer_sync(&pmlmeext->link_timer);
-
-       /* status */
-       status = le16_to_cpu(pmgmt->u.assoc_resp.status_code);
-       if (status > 0) {
-               DBG_8723A("assoc reject, status code: %d\n", status);
-               pmlmeinfo->state = MSR_NOLINK;
-               res = -4;
-               goto report_assoc_result;
-       }
-
-       /* get capabilities */
-       pmlmeinfo->capability = le16_to_cpu(pmgmt->u.assoc_resp.capab_info);
-
-       /* set slot time */
-       pmlmeinfo->slotTime = (pmlmeinfo->capability & BIT(10))? 9: 20;
-
-       /* AID */
-       res = pmlmeinfo->aid = le16_to_cpu(pmgmt->u.assoc_resp.aid) & 0x3fff;
-
-       pie = pframe + offsetof(struct ieee80211_mgmt, u.assoc_resp.variable);
-       pielen = pkt_len -
-               offsetof(struct ieee80211_mgmt, u.assoc_resp.variable);
-
-       p = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY,
-                            pmgmt->u.assoc_resp.variable, pielen);
-       if (p && p[1])
-               HT_caps_handler23a(padapter, p);
-
-       p = cfg80211_find_ie(WLAN_EID_HT_OPERATION,
-                            pmgmt->u.assoc_resp.variable, pielen);
-       if (p && p[1])
-               HT_info_handler23a(padapter, p);
-
-       p = cfg80211_find_ie(WLAN_EID_ERP_INFO,
-                            pmgmt->u.assoc_resp.variable, pielen);
-       if (p && p[1])
-               ERP_IE_handler23a(padapter, p);
-
-       pie = pframe + offsetof(struct ieee80211_mgmt, u.assoc_resp.variable);
-       while (true) {
-               p = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
-                                           WLAN_OUI_TYPE_MICROSOFT_WMM,
-                                           pie, pframe + pkt_len - pie);
-               if (!p)
-                       break;
-
-               pie = p + p[1] + 2;
-               /* if this IE is too short, try the next */
-               if (p[1] <= 4)
-                       continue;
-               /* if this IE is WMM params, we found what we wanted */
-               if (p[6] == 1)
-                       break;
-       }
-
-       if (p && p[1])
-               WMM_param_handler23a(padapter, p);
-
-       pmlmeinfo->state &= ~WIFI_FW_ASSOC_STATE;
-       pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
-
-       /* Update Basic Rate Table for spec, 2010-12-28 , by thomas */
-       UpdateBrateTbl23a(padapter, pmlmeinfo->network.SupportedRates);
-
-report_assoc_result:
-       pmlmepriv->assoc_rsp_len = 0;
-       if (res > 0) {
-               kfree(pmlmepriv->assoc_rsp);
-               pmlmepriv->assoc_rsp = kmalloc(pkt_len, GFP_ATOMIC);
-               if (pmlmepriv->assoc_rsp) {
-                       memcpy(pmlmepriv->assoc_rsp, pframe, pkt_len);
-                       pmlmepriv->assoc_rsp_len = pkt_len;
-               }
-       } else
-               kfree(pmlmepriv->assoc_rsp);
-
-       report_join_res23a(padapter, res);
-
-       return _SUCCESS;
-}
-
-static int
-OnDeAuth23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       unsigned short reason;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-
-       if (!ether_addr_equal(mgmt->bssid,
-                             get_my_bssid23a(&pmlmeinfo->network)))
-               return _SUCCESS;
-
-       reason = le16_to_cpu(mgmt->u.deauth.reason_code);
-
-       DBG_8723A("%s Reason code(%d)\n", __func__, reason);
-
-#ifdef CONFIG_8723AU_AP_MODE
-       if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
-               struct sta_info *psta;
-               struct sta_priv *pstapriv = &padapter->stapriv;
-
-               DBG_8723A_LEVEL(_drv_always_, "ap recv deauth reason code(%d) "
-                               "sta:%pM\n", reason, mgmt->sa);
-
-               psta = rtw_get_stainfo23a(pstapriv, mgmt->sa);
-               if (psta) {
-                       u8 updated = 0;
-
-                       spin_lock_bh(&pstapriv->asoc_list_lock);
-                       if (!list_empty(&psta->asoc_list)) {
-                               list_del_init(&psta->asoc_list);
-                               pstapriv->asoc_list_cnt--;
-                               updated = ap_free_sta23a(padapter, psta,
-                                                     false, reason);
-                       }
-                       spin_unlock_bh(&pstapriv->asoc_list_lock);
-
-                       associated_clients_update23a(padapter, updated);
-               }
-
-               return _SUCCESS;
-       } else
-#endif
-       {
-               DBG_8723A_LEVEL(_drv_always_, "sta recv deauth reason code(%d) "
-                               "sta:%pM\n", reason, mgmt->bssid);
-
-               receive_disconnect23a(padapter, mgmt->bssid, reason);
-       }
-       pmlmepriv->LinkDetectInfo.bBusyTraffic = false;
-
-       return _SUCCESS;
-}
-
-static int
-OnDisassoc23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       unsigned short reason;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-
-       if (!ether_addr_equal(mgmt->bssid,
-                             get_my_bssid23a(&pmlmeinfo->network)))
-               return _SUCCESS;
-
-       reason = le16_to_cpu(mgmt->u.disassoc.reason_code);
-
-       DBG_8723A("%s Reason code(%d)\n", __func__, reason);
-
-#ifdef CONFIG_8723AU_AP_MODE
-       if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
-               struct sta_info *psta;
-               struct sta_priv *pstapriv = &padapter->stapriv;
-
-               DBG_8723A_LEVEL(_drv_always_, "ap recv disassoc reason code(%d)"
-                               " sta:%pM\n", reason, mgmt->sa);
-
-               psta = rtw_get_stainfo23a(pstapriv, mgmt->sa);
-               if (psta) {
-                       u8 updated = 0;
-
-                       spin_lock_bh(&pstapriv->asoc_list_lock);
-                       if (!list_empty(&psta->asoc_list)) {
-                               list_del_init(&psta->asoc_list);
-                               pstapriv->asoc_list_cnt--;
-                               updated = ap_free_sta23a(padapter, psta,
-                                                        false, reason);
-                       }
-                       spin_unlock_bh(&pstapriv->asoc_list_lock);
-
-                       associated_clients_update23a(padapter, updated);
-               }
-
-               return _SUCCESS;
-       } else
-#endif
-       {
-               DBG_8723A_LEVEL(_drv_always_, "ap recv disassoc reason "
-                               "code(%d) sta:%pM\n", reason, mgmt->bssid);
-
-               receive_disconnect23a(padapter, mgmt->bssid, reason);
-       }
-       pmlmepriv->LinkDetectInfo.bBusyTraffic = false;
-       return _SUCCESS;
-}
-
-static int
-OnAtim23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       DBG_8723A("%s\n", __func__);
-       return _SUCCESS;
-}
-
-static int
-on_action_spct23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       return _FAIL;
-}
-
-static int
-OnAction23a_qos(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       return _SUCCESS;
-}
-
-static int
-OnAction23a_dls(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       return _SUCCESS;
-}
-
-static int OnAction23a_back23a(struct rtw_adapter *padapter,
-                              struct recv_frame *precv_frame)
-{
-       u8 *addr;
-       struct sta_info *psta = NULL;
-       struct recv_reorder_ctrl *preorder_ctrl;
-       unsigned char category, action;
-       unsigned short tid, status, capab, params, reason_code = 0;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-       struct sta_priv *pstapriv = &padapter->stapriv;
-
-       /* check RA matches or not */
-       if (!ether_addr_equal(myid(&padapter->eeprompriv), mgmt->da))
-               return _SUCCESS;
-
-       DBG_8723A("%s\n", __func__);
-
-       if ((pmlmeinfo->state&0x03) != MSR_AP)
-               if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
-                       return _SUCCESS;
-
-       addr = mgmt->sa;
-       psta = rtw_get_stainfo23a(pstapriv, addr);
-
-       if (!psta)
-               return _SUCCESS;
-
-       category = mgmt->u.action.category;
-       if (category == WLAN_CATEGORY_BACK) { /*  representing Block Ack */
-               if (!pmlmeinfo->HT_enable)
-                       return _SUCCESS;
-               /* action_code is located in the same place for all
-                  action events, so pick any */
-               action = mgmt->u.action.u.wme_action.action_code;
-               DBG_8723A("%s, action =%d\n", __func__, action);
-               switch (action) {
-               case WLAN_ACTION_ADDBA_REQ: /* ADDBA request */
-                       memcpy(&pmlmeinfo->ADDBA_req,
-                              &mgmt->u.action.u.addba_req.dialog_token,
-                              sizeof(struct ADDBA_request));
-                       process_addba_req23a(padapter,
-                                            (u8 *)&pmlmeinfo->ADDBA_req, addr);
-                       if (pmlmeinfo->bAcceptAddbaReq == true)
-                               issue_action_BA23a(padapter, addr,
-                                                  WLAN_ACTION_ADDBA_RESP, 0);
-                       else {
-                               /* reject ADDBA Req */
-                               issue_action_BA23a(padapter, addr,
-                                                  WLAN_ACTION_ADDBA_RESP, 37);
-                       }
-                       break;
-               case WLAN_ACTION_ADDBA_RESP: /* ADDBA response */
-                       status = get_unaligned_le16(
-                               &mgmt->u.action.u.addba_resp.status);
-                       capab = get_unaligned_le16(
-                               &mgmt->u.action.u.addba_resp.capab);
-                       tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2;
-                       if (status == 0) {      /* successful */
-                               DBG_8723A("agg_enable for TID =%d\n", tid);
-                               psta->htpriv.agg_enable_bitmap |= BIT(tid);
-                               psta->htpriv.candidate_tid_bitmap &= ~BIT(tid);
-                       } else
-                               psta->htpriv.agg_enable_bitmap &= ~BIT(tid);
-                       break;
-
-               case WLAN_ACTION_DELBA: /* DELBA */
-                       params = get_unaligned_le16(
-                               &mgmt->u.action.u.delba.params);
-                       tid = params >> 12;
-
-                       if (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) {
-                               preorder_ctrl = &psta->recvreorder_ctrl[tid];
-                               preorder_ctrl->enable = false;
-                               preorder_ctrl->indicate_seq = 0xffff;
-                       } else {
-                               psta->htpriv.agg_enable_bitmap &= ~BIT(tid);
-                               psta->htpriv.candidate_tid_bitmap &= ~BIT(tid);
-                       }
-                       reason_code = get_unaligned_le16(
-                               &mgmt->u.action.u.delba.reason_code);
-                       /* todo: how to notify the host while receiving
-                          DELETE BA */
-                       break;
-               default:
-                       break;
-               }
-       }
-       return _SUCCESS;
-}
-
-static int on_action_public23a(struct rtw_adapter *padapter,
-                              struct recv_frame *precv_frame)
-{
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
-       u8 *pframe = skb->data;
-       int freq, channel;
-
-       /* check RA matches or not */
-       if (!ether_addr_equal(myid(&padapter->eeprompriv), hdr->addr1))
-               return _FAIL;
-
-       channel = rtw_get_oper_ch23a(padapter);
-
-       if (channel <= RTW_CH_MAX_2G_CHANNEL)
-               freq = ieee80211_channel_to_frequency(channel,
-                                                     NL80211_BAND_2GHZ);
-       else
-               freq = ieee80211_channel_to_frequency(channel,
-                                                     NL80211_BAND_5GHZ);
-
-       if (cfg80211_rx_mgmt(padapter->rtw_wdev, freq, 0, pframe,
-                            skb->len, 0))
-               return _SUCCESS;
-
-       return _FAIL;
-}
-
-static int
-OnAction23a_ht(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       return _SUCCESS;
-}
-
-static int
-OnAction23a_wmm(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       return _SUCCESS;
-}
-
-static int
-OnAction23a_p2p(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       return _SUCCESS;
-}
-
-static int
-OnAction23a(struct rtw_adapter *padapter, struct recv_frame *precv_frame)
-{
-       int i;
-       u8 category;
-       struct action_handler *ptable;
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-
-       category = mgmt->u.action.category;
-
-       for (i = 0; i < ARRAY_SIZE(OnAction23a_tbl); i++) {
-               ptable = &OnAction23a_tbl[i];
-
-               if (category == ptable->num)
-                       ptable->func(padapter, precv_frame);
-       }
-
-       return _SUCCESS;
-}
-
-static int DoReserved23a(struct rtw_adapter *padapter,
-                        struct recv_frame *precv_frame)
-{
-       return _SUCCESS;
-}
-
-struct xmit_frame *alloc_mgtxmitframe23a(struct xmit_priv *pxmitpriv)
-{
-       struct xmit_frame *pmgntframe;
-       struct xmit_buf *pxmitbuf;
-
-       pmgntframe = rtw_alloc_xmitframe23a_ext(pxmitpriv);
-
-       if (!pmgntframe) {
-               DBG_8723A("%s(%s): alloc xmitframe fail\n", __func__,
-                         pxmitpriv->adapter->pnetdev->name);
-               goto exit;
-       }
-
-       pxmitbuf = rtw_alloc_xmitbuf23a_ext(pxmitpriv);
-       if (!pxmitbuf) {
-               DBG_8723A("%s(%s): alloc xmitbuf fail\n", __func__,
-                         pxmitpriv->adapter->pnetdev->name);
-               rtw_free_xmitframe23a(pxmitpriv, pmgntframe);
-               pmgntframe = NULL;
-               goto exit;
-       }
-
-       pmgntframe->frame_tag = MGNT_FRAMETAG;
-       pmgntframe->pxmitbuf = pxmitbuf;
-       pmgntframe->buf_addr = pxmitbuf->pbuf;
-       pxmitbuf->priv_data = pmgntframe;
-
-exit:
-       return pmgntframe;
-}
-
-/****************************************************************************
-
-Following are some TX functions for WiFi MLME
-
-*****************************************************************************/
-
-void update_mgnt_tx_rate23a(struct rtw_adapter *padapter, u8 rate)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       pmlmeext->tx_rate = rate;
-       DBG_8723A("%s(): rate = %x\n", __func__, rate);
-}
-
-void update_mgntframe_attrib23a(struct rtw_adapter *padapter,
-                               struct pkt_attrib *pattrib)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       memset((u8 *)pattrib, 0, sizeof(struct pkt_attrib));
-
-       pattrib->hdrlen = 24;
-       pattrib->nr_frags = 1;
-       pattrib->priority = 7;
-       pattrib->mac_id = 0;
-       pattrib->qsel = 0x12;
-
-       pattrib->pktlen = 0;
-
-       if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
-               pattrib->raid = 6;/* b mode */
-       else
-               pattrib->raid = 5;/* a/g mode */
-
-       pattrib->encrypt = 0;
-       pattrib->bswenc = false;
-
-       pattrib->qos_en = false;
-       pattrib->ht_en = false;
-       pattrib->bwmode = HT_CHANNEL_WIDTH_20;
-       pattrib->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
-       pattrib->sgi = false;
-
-       pattrib->seqnum = pmlmeext->mgnt_seq;
-
-       pattrib->retry_ctrl = true;
-}
-
-void dump_mgntframe23a(struct rtw_adapter *padapter,
-                      struct xmit_frame *pmgntframe)
-{
-       if (padapter->bSurpriseRemoved == true ||
-           padapter->bDriverStopped == true)
-               return;
-
-       rtl8723au_mgnt_xmit(padapter, pmgntframe);
-}
-
-int dump_mgntframe23a_and_wait(struct rtw_adapter *padapter,
-                              struct xmit_frame *pmgntframe, int timeout_ms)
-{
-       int ret = _FAIL;
-       unsigned long irqL;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct xmit_buf *pxmitbuf = pmgntframe->pxmitbuf;
-       struct submit_ctx sctx;
-
-       if (padapter->bSurpriseRemoved == true ||
-           padapter->bDriverStopped == true)
-               return ret;
-
-       rtw_sctx_init23a(&sctx, timeout_ms);
-       pxmitbuf->sctx = &sctx;
-
-       ret = rtl8723au_mgnt_xmit(padapter, pmgntframe);
-
-       if (ret == _SUCCESS)
-               ret = rtw_sctx_wait23a(&sctx);
-
-       spin_lock_irqsave(&pxmitpriv->lock_sctx, irqL);
-       pxmitbuf->sctx = NULL;
-       spin_unlock_irqrestore(&pxmitpriv->lock_sctx, irqL);
-
-       return ret;
-}
-
-int dump_mgntframe23a_and_wait_ack23a(struct rtw_adapter *padapter,
-                                     struct xmit_frame *pmgntframe)
-{
-       int ret = _FAIL;
-       u32 timeout_ms = 500;/*   500ms */
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-
-       if (padapter->bSurpriseRemoved == true ||
-           padapter->bDriverStopped == true)
-               return _FAIL;
-
-       mutex_lock(&pxmitpriv->ack_tx_mutex);
-       pxmitpriv->ack_tx = true;
-
-       pmgntframe->ack_report = 1;
-       if (rtl8723au_mgnt_xmit(padapter, pmgntframe) == _SUCCESS)
-               ret = rtw_ack_tx_wait23a(pxmitpriv, timeout_ms);
-
-       pxmitpriv->ack_tx = false;
-       mutex_unlock(&pxmitpriv->ack_tx_mutex);
-
-       return ret;
-}
-
-static int update_hidden_ssid(u8 *ies, u32 ies_len, u8 hidden_ssid_mode)
-{
-       u8 *ssid_ie;
-       int ssid_len_ori;
-       int len_diff = 0;
-       u8 *next_ie;
-       u32 remain_len;
-
-       ssid_ie = rtw_get_ie23a(ies,  WLAN_EID_SSID, &ssid_len_ori, ies_len);
-
-       /* DBG_8723A("%s hidden_ssid_mode:%u, ssid_ie:%p, ssid_len_ori:%d\n",
-          __func__, hidden_ssid_mode, ssid_ie, ssid_len_ori); */
-
-       if (ssid_ie && ssid_len_ori > 0) {
-               switch (hidden_ssid_mode) {
-               case 1:
-                       next_ie = ssid_ie + 2 + ssid_len_ori;
-                       remain_len = ies_len -(next_ie-ies);
-
-                       ssid_ie[1] = 0;
-                       memcpy(ssid_ie+2, next_ie, remain_len);
-                       len_diff -= ssid_len_ori;
-
-                       break;
-               case 2:
-                       memset(&ssid_ie[2], 0, ssid_len_ori);
-                       break;
-               default:
-                       break;
-               }
-       }
-
-       return len_diff;
-}
-
-void issue_beacon23a(struct rtw_adapter *padapter, int timeout_ms)
-{
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       unsigned char *pframe;
-       struct ieee80211_mgmt *mgmt;
-       unsigned int rate_len;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *cur_network = &pmlmeinfo->network;
-       u8 bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
-       const u8 *wps_ie;
-       u8 sr = 0;
-       int len_diff;
-
-       /* DBG_8723A("%s\n", __func__); */
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe) {
-               DBG_8723A("%s, alloc mgnt frame fail\n", __func__);
-               return;
-       }
-#ifdef CONFIG_8723AU_AP_MODE
-       spin_lock_bh(&pmlmepriv->bcn_update_lock);
-#endif
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-       pattrib->qsel = 0x10;
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
-       mgmt = (struct ieee80211_mgmt *)pframe;
-
-       mgmt->frame_control =
-               cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_BEACON);
-       mgmt->seq_ctrl = 0;
-
-       ether_addr_copy(mgmt->da, bc_addr);
-       ether_addr_copy(mgmt->sa, myid(&padapter->eeprompriv));
-       ether_addr_copy(mgmt->bssid, get_my_bssid23a(cur_network));
-
-       /* timestamp will be inserted by hardware */
-
-       put_unaligned_le16(cur_network->beacon_interval,
-                          &mgmt->u.beacon.beacon_int);
-
-       put_unaligned_le16(cur_network->capability,
-                          &mgmt->u.beacon.capab_info);
-
-       pframe = mgmt->u.beacon.variable;
-       pattrib->pktlen = offsetof(struct ieee80211_mgmt, u.beacon.variable);
-
-       if ((pmlmeinfo->state & 0x03) == MSR_AP) {
-               u8 *iebuf;
-               int buflen;
-               /* DBG_8723A("ie len =%d\n", cur_network->IELength); */
-               memcpy(pframe, cur_network->IEs, cur_network->IELength);
-               len_diff = update_hidden_ssid(pframe, cur_network->IELength,
-                                             pmlmeinfo->hidden_ssid_mode);
-               pframe += (cur_network->IELength+len_diff);
-               pattrib->pktlen += (cur_network->IELength+len_diff);
-
-               iebuf = mgmt->u.beacon.variable;
-               buflen = pattrib->pktlen -
-                       offsetof(struct ieee80211_mgmt, u.beacon.variable);
-               wps_ie = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
-                                                WLAN_OUI_TYPE_MICROSOFT_WPS,
-                                                iebuf, buflen);
-
-               if (wps_ie && wps_ie[1] > 0) {
-                       rtw_get_wps_attr_content23a(wps_ie, wps_ie[1],
-                                                   WPS_ATTR_SELECTED_REGISTRAR,
-                                                   (u8 *)&sr);
-               }
-               if (sr != 0)
-                       set_fwstate(pmlmepriv, WIFI_UNDER_WPS);
-               else
-                       _clr_fwstate_(pmlmepriv, WIFI_UNDER_WPS);
-
-               goto _issue_bcn;
-       }
-
-       /*  SSID */
-       pframe = rtw_set_ie23a(pframe, WLAN_EID_SSID,
-                              cur_network->Ssid.ssid_len,
-                              cur_network->Ssid.ssid, &pattrib->pktlen);
-
-       /*  supported rates... */
-       rate_len = rtw_get_rateset_len23a(cur_network->SupportedRates);
-       pframe = rtw_set_ie23a(pframe, WLAN_EID_SUPP_RATES,
-                              ((rate_len > 8)? 8: rate_len),
-                              cur_network->SupportedRates, &pattrib->pktlen);
-
-       /*  DS parameter set */
-       pframe = rtw_set_ie23a(pframe, WLAN_EID_DS_PARAMS, 1, (unsigned char *)
-                              &cur_network->DSConfig, &pattrib->pktlen);
-
-       /* if ((pmlmeinfo->state&0x03) == MSR_ADHOC) */
-       {
-               u8 erpinfo = 0;
-               u32 ATIMWindow;
-               /*  IBSS Parameter Set... */
-               /* ATIMWindow = cur->ATIMWindow; */
-               ATIMWindow = 0;
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_IBSS_PARAMS, 2,
-                                      (unsigned char *)&ATIMWindow,
-                                      &pattrib->pktlen);
-
-               /* ERP IE */
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_ERP_INFO, 1,
-                                      &erpinfo, &pattrib->pktlen);
-       }
-
-       /*  EXTERNDED SUPPORTED RATE */
-       if (rate_len > 8)
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_EXT_SUPP_RATES,
-                                      rate_len - 8,
-                                      cur_network->SupportedRates + 8,
-                                      &pattrib->pktlen);
-
-       /* todo:HT for adhoc */
-
-_issue_bcn:
-
-#ifdef CONFIG_8723AU_AP_MODE
-       pmlmepriv->update_bcn = false;
-
-       spin_unlock_bh(&pmlmepriv->bcn_update_lock);
-#endif
-
-       if ((pattrib->pktlen + TXDESC_SIZE) > 512) {
-               DBG_8723A("beacon frame too large\n");
-               return;
-       }
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       /* DBG_8723A("issue bcn_sz =%d\n", pattrib->last_txcmdsz); */
-       if (timeout_ms > 0)
-               dump_mgntframe23a_and_wait(padapter, pmgntframe, timeout_ms);
-       else
-               dump_mgntframe23a(padapter, pmgntframe);
-}
-
-static void issue_probersp(struct rtw_adapter *padapter, unsigned char *da)
-{
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       unsigned char *pframe;
-       struct ieee80211_mgmt *mgmt;
-       unsigned char *mac, *bssid;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-#ifdef CONFIG_8723AU_AP_MODE
-       const u8 *pwps_ie;
-       u8 *ssid_ie;
-       int ssid_ielen;
-       int ssid_ielen_diff;
-       u8 buf[MAX_IE_SZ];
-#endif
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *cur_network = &pmlmeinfo->network;
-       unsigned int rate_len;
-
-       /* DBG_8723A("%s\n", __func__); */
-
-       if (cur_network->IELength > MAX_IE_SZ)
-               return;
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe) {
-               DBG_8723A("%s, alloc mgnt frame fail\n", __func__);
-               return;
-       }
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       pframe = (u8 *)pmgntframe->buf_addr + TXDESC_OFFSET;
-       mgmt = (struct ieee80211_mgmt *)pframe;
-
-       mac = myid(&padapter->eeprompriv);
-       bssid = cur_network->MacAddress;
-
-       mgmt->frame_control =
-               cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_RESP);
-
-       ether_addr_copy(mgmt->da, da);
-       ether_addr_copy(mgmt->sa, mac);
-       ether_addr_copy(mgmt->bssid, bssid);
-
-       mgmt->seq_ctrl = cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-       pmlmeext->mgnt_seq++;
-
-       pattrib->hdrlen = sizeof(struct ieee80211_hdr_3addr);
-
-       /* timestamp will be inserted by hardware */
-       put_unaligned_le16(cur_network->beacon_interval,
-                          &mgmt->u.probe_resp.beacon_int);
-
-       put_unaligned_le16(cur_network->capability,
-                          &mgmt->u.probe_resp.capab_info);
-
-       pframe = mgmt->u.probe_resp.variable;
-       pattrib->pktlen =
-               offsetof(struct ieee80211_mgmt, u.probe_resp.variable);
-
-       /* below for ad-hoc mode */
-
-#ifdef CONFIG_8723AU_AP_MODE
-       if ((pmlmeinfo->state & 0x03) == MSR_AP) {
-               pwps_ie = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
-                                                 WLAN_OUI_TYPE_MICROSOFT_WPS,
-                                                 cur_network->IEs,
-                                                 cur_network->IELength);
-
-               memcpy(pframe, cur_network->IEs, cur_network->IELength);
-               pframe += cur_network->IELength;
-               pattrib->pktlen += cur_network->IELength;
-
-               /* retrieve SSID IE from cur_network->Ssid */
-
-               ssid_ie = rtw_get_ie23a(mgmt->u.probe_resp.variable,
-                                       WLAN_EID_SSID, &ssid_ielen,
-                                       pframe - mgmt->u.probe_resp.variable);
-
-               ssid_ielen_diff = cur_network->Ssid.ssid_len - ssid_ielen;
-
-               if (ssid_ie && cur_network->Ssid.ssid_len) {
-                       uint remainder_ielen;
-                       u8 *remainder_ie;
-
-                       remainder_ie = ssid_ie + 2;
-
-                       remainder_ielen = pframe - remainder_ie;
-
-                       DBG_8723A_LEVEL(_drv_warning_, "%s(%s): "
-                                       "remainder_ielen > MAX_IE_SZ\n",
-                                       __func__, padapter->pnetdev->name);
-                       if (remainder_ielen > MAX_IE_SZ)
-                               remainder_ielen = MAX_IE_SZ;
-
-                       memcpy(buf, remainder_ie, remainder_ielen);
-                       memcpy(remainder_ie + ssid_ielen_diff, buf,
-                              remainder_ielen);
-                       *(ssid_ie + 1) = cur_network->Ssid.ssid_len;
-                       memcpy(ssid_ie + 2, cur_network->Ssid.ssid,
-                              cur_network->Ssid.ssid_len);
-
-                       pframe += ssid_ielen_diff;
-                       pattrib->pktlen += ssid_ielen_diff;
-               }
-       } else
-#endif
-       {
-               /*  SSID */
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SSID,
-                                      cur_network->Ssid.ssid_len,
-                                      cur_network->Ssid.ssid,
-                                      &pattrib->pktlen);
-
-               /*  supported rates... */
-               rate_len = rtw_get_rateset_len23a(cur_network->SupportedRates);
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SUPP_RATES,
-                                      ((rate_len > 8)? 8: rate_len),
-                                      cur_network->SupportedRates,
-                                      &pattrib->pktlen);
-
-               /*  DS parameter set */
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_DS_PARAMS, 1,
-                                      (unsigned char *)&cur_network->DSConfig,
-                                      &pattrib->pktlen);
-
-               if ((pmlmeinfo->state & 0x03) == MSR_ADHOC) {
-                       u8 erpinfo = 0;
-                       u32 ATIMWindow;
-                       /*  IBSS Parameter Set... */
-                       /* ATIMWindow = cur->ATIMWindow; */
-                       ATIMWindow = 0;
-                       pframe = rtw_set_ie23a(pframe, WLAN_EID_IBSS_PARAMS, 2,
-                                              (unsigned char *)&ATIMWindow,
-                                              &pattrib->pktlen);
-
-                       /* ERP IE */
-                       pframe = rtw_set_ie23a(pframe, WLAN_EID_ERP_INFO, 1,
-                                              &erpinfo, &pattrib->pktlen);
-               }
-
-               /*  EXTERNDED SUPPORTED RATE */
-               if (rate_len > 8)
-                       pframe = rtw_set_ie23a(pframe, WLAN_EID_EXT_SUPP_RATES,
-                                              rate_len - 8,
-                                              cur_network->SupportedRates + 8,
-                                              &pattrib->pktlen);
-
-               /* todo:HT for adhoc */
-       }
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       dump_mgntframe23a(padapter, pmgntframe);
-}
-
-static int _issue_probereq(struct rtw_adapter *padapter,
-                          struct cfg80211_ssid *pssid, u8 *da, int wait_ack)
-{
-       int ret = _FAIL;
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       unsigned char *pframe;
-       struct ieee80211_hdr *pwlanhdr;
-       unsigned char *mac;
-       unsigned char bssrate[NumRates];
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       int bssrate_len = 0;
-       u8 bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
-
-       RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
-                "+%s\n", __func__);
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe)
-               goto exit;
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
-       pwlanhdr = (struct ieee80211_hdr *)pframe;
-
-       mac = myid(&padapter->eeprompriv);
-
-       pwlanhdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
-                                             IEEE80211_STYPE_PROBE_REQ);
-
-       if (da) {
-               /*      unicast probe request frame */
-               ether_addr_copy(pwlanhdr->addr1, da);
-               ether_addr_copy(pwlanhdr->addr3, da);
-       } else {
-               /*      broadcast probe request frame */
-               ether_addr_copy(pwlanhdr->addr1, bc_addr);
-               ether_addr_copy(pwlanhdr->addr3, bc_addr);
-       }
-
-       ether_addr_copy(pwlanhdr->addr2, mac);
-
-       pwlanhdr->seq_ctrl =
-               cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-
-       pmlmeext->mgnt_seq++;
-
-       pframe += sizeof (struct ieee80211_hdr_3addr);
-       pattrib->pktlen = sizeof (struct ieee80211_hdr_3addr);
-
-       if (pssid)
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SSID, pssid->ssid_len,
-                                      pssid->ssid, &pattrib->pktlen);
-       else
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SSID, 0, NULL,
-                                      &pattrib->pktlen);
-
-       get_rate_set23a(padapter, bssrate, &bssrate_len);
-
-       if (bssrate_len > 8) {
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SUPP_RATES, 8,
-                                      bssrate, &pattrib->pktlen);
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_EXT_SUPP_RATES,
-                                      (bssrate_len - 8), (bssrate + 8),
-                                      &pattrib->pktlen);
-       } else {
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SUPP_RATES,
-                                      bssrate_len, bssrate, &pattrib->pktlen);
-       }
-
-       /* add wps_ie for wps2.0 */
-       if (pmlmepriv->wps_probe_req_ie_len>0 && pmlmepriv->wps_probe_req_ie) {
-               memcpy(pframe, pmlmepriv->wps_probe_req_ie,
-                      pmlmepriv->wps_probe_req_ie_len);
-               pframe += pmlmepriv->wps_probe_req_ie_len;
-               pattrib->pktlen += pmlmepriv->wps_probe_req_ie_len;
-       }
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
-                "issuing probe_req, tx_len =%d\n", pattrib->last_txcmdsz);
-
-       if (wait_ack) {
-               ret = dump_mgntframe23a_and_wait_ack23a(padapter, pmgntframe);
-       } else {
-               dump_mgntframe23a(padapter, pmgntframe);
-               ret = _SUCCESS;
-       }
-
-exit:
-       return ret;
-}
-
-static inline void issue_probereq(struct rtw_adapter *padapter,
-                                 struct cfg80211_ssid *pssid, u8 *da)
-{
-       _issue_probereq(padapter, pssid, da, false);
-}
-
-static int issue_probereq_ex(struct rtw_adapter *padapter,
-                            struct cfg80211_ssid *pssid, u8 *da,
-                            int try_cnt, int wait_ms)
-{
-       int ret;
-       int i = 0;
-       unsigned long start = jiffies;
-
-       do {
-               ret = _issue_probereq(padapter, pssid, da,
-                                     wait_ms > 0 ? true : false);
-
-               i++;
-
-               if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
-                       break;
-
-               if (i < try_cnt && wait_ms > 0 && ret == _FAIL)
-                       msleep(wait_ms);
-
-       } while((i < try_cnt) && ((ret == _FAIL) || (wait_ms == 0)));
-
-       if (ret != _FAIL) {
-               ret = _SUCCESS;
-               goto exit;
-       }
-
-       if (try_cnt && wait_ms) {
-               if (da)
-                       DBG_8723A("%s(%s): to %pM, ch:%u%s, %d/%d in %u ms\n",
-                                 __func__, padapter->pnetdev->name,
-                                 da, rtw_get_oper_ch23a(padapter),
-                                 ret == _SUCCESS ? ", acked" : "", i, try_cnt,
-                                 jiffies_to_msecs(jiffies - start));
-               else
-                       DBG_8723A("%s(%s):, ch:%u%s, %d/%d in %u ms\n",
-                                 __func__, padapter->pnetdev->name,
-                                 rtw_get_oper_ch23a(padapter),
-                                 ret == _SUCCESS ? ", acked" : "", i, try_cnt,
-                                 jiffies_to_msecs(jiffies - start));
-       }
-exit:
-       return ret;
-}
-
-/*  if psta == NULL, indiate we are station(client) now... */
-static void issue_auth(struct rtw_adapter *padapter, struct sta_info *psta,
-                      unsigned short status)
-{
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       unsigned char *pframe;
-       struct ieee80211_mgmt *mgmt;
-       unsigned int val32;
-       u16 auth_algo;
-       int use_shared_key = 0;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe)
-               return;
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
-       mgmt = (struct ieee80211_mgmt *)pframe;
-
-       mgmt->frame_control =
-               cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_AUTH);
-       mgmt->seq_ctrl = cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-       pmlmeext->mgnt_seq++;
-
-       pattrib->pktlen = offsetof(struct ieee80211_mgmt, u.auth.variable);
-
-       if (psta) { /*  for AP mode */
-#ifdef CONFIG_8723AU_AP_MODE
-               unsigned short val16;
-
-               ether_addr_copy(mgmt->da, psta->hwaddr);
-               ether_addr_copy(mgmt->sa, myid(&padapter->eeprompriv));
-               ether_addr_copy(mgmt->bssid, myid(&padapter->eeprompriv));
-
-               /*  setting auth algo number */
-               val16 = (u16)psta->authalg;
-
-               if (status != WLAN_STATUS_SUCCESS)
-                       val16 = 0;
-
-               if (val16)
-                       use_shared_key = 1;
-
-               mgmt->u.auth.auth_alg = cpu_to_le16(val16);
-
-               /*  setting auth seq number */
-               mgmt->u.auth.auth_transaction =
-                       cpu_to_le16((u16)psta->auth_seq);
-
-               /*  setting status code... */
-               mgmt->u.auth.status_code = cpu_to_le16(status);
-
-               pframe = mgmt->u.auth.variable;
-               /*  added challenging text... */
-               if ((psta->auth_seq == 2) &&
-                   (psta->state & WIFI_FW_AUTH_STATE) && (use_shared_key == 1))
-                       pframe = rtw_set_ie23a(pframe, WLAN_EID_CHALLENGE, 128,
-                                              psta->chg_txt, &pattrib->pktlen);
-#endif
-       } else {
-               struct ieee80211_mgmt *iv_mgmt;
-
-               ether_addr_copy(mgmt->da, get_my_bssid23a(&pmlmeinfo->network));
-               ether_addr_copy(mgmt->sa, myid(&padapter->eeprompriv));
-               ether_addr_copy(mgmt->bssid,
-                               get_my_bssid23a(&pmlmeinfo->network));
-
-               /*  setting auth algo number */
-               /*  0:OPEN System, 1:Shared key */
-               if (pmlmeinfo->auth_algo == dot11AuthAlgrthm_Shared) {
-                       use_shared_key = 1;
-                       auth_algo = WLAN_AUTH_SHARED_KEY;
-               } else
-                       auth_algo = WLAN_AUTH_OPEN;
-
-               /* DBG_8723A("%s auth_algo = %s auth_seq =%d\n", __func__,
-                  (pmlmeinfo->auth_algo == 0)?"OPEN":"SHARED",
-                  pmlmeinfo->auth_seq); */
-
-               /* setting IV for auth seq #3 */
-               if ((pmlmeinfo->auth_seq == 3) &&
-                   (pmlmeinfo->state & WIFI_FW_AUTH_STATE) &&
-                   (use_shared_key == 1)) {
-                       u32 *piv = (u32 *)&mgmt->u.auth;
-
-                       iv_mgmt = (struct ieee80211_mgmt *)(pframe + 4);
-                       /* DBG_8723A("==> iv(%d), key_index(%d)\n",
-                          pmlmeinfo->iv, pmlmeinfo->key_index); */
-                       val32 = (pmlmeinfo->iv & 0x3fffffff) |
-                               (pmlmeinfo->key_index << 30);
-                       pmlmeinfo->iv++;
-                       put_unaligned_le32(val32, piv);
-
-                       pattrib->pktlen += 4;
-
-                       pattrib->iv_len = IEEE80211_WEP_IV_LEN;
-               } else
-                       iv_mgmt = mgmt;
-
-               iv_mgmt->u.auth.auth_alg = cpu_to_le16(auth_algo);
-
-               /*  setting auth seq number */
-               iv_mgmt->u.auth.auth_transaction =
-                       cpu_to_le16(pmlmeinfo->auth_seq);
-
-               /*  setting status code... */
-               iv_mgmt->u.auth.status_code = cpu_to_le16(status);
-
-               pframe = iv_mgmt->u.auth.variable;
-
-               /*  then checking to see if sending challenging text... */
-               if ((pmlmeinfo->auth_seq == 3) &&
-                   (pmlmeinfo->state & WIFI_FW_AUTH_STATE) &&
-                   (use_shared_key == 1)) {
-                       pframe = rtw_set_ie23a(pframe, WLAN_EID_CHALLENGE, 128,
-                                              pmlmeinfo->chg_txt,
-                                              &pattrib->pktlen);
-
-                       mgmt->frame_control |=
-                               cpu_to_le16(IEEE80211_FCTL_PROTECTED);
-
-                       pattrib->hdrlen = sizeof(struct ieee80211_hdr_3addr);
-
-                       pattrib->encrypt = WLAN_CIPHER_SUITE_WEP40;
-
-                       pattrib->icv_len = IEEE80211_WEP_ICV_LEN;
-
-                       pattrib->pktlen += pattrib->icv_len;
-               }
-       }
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       rtw_wep_encrypt23a(padapter, pmgntframe);
-       DBG_8723A("%s\n", __func__);
-       dump_mgntframe23a(padapter, pmgntframe);
-}
-
-#ifdef CONFIG_8723AU_AP_MODE
-static void issue_assocrsp(struct rtw_adapter *padapter, unsigned short status,
-                          struct sta_info *pstat, u16 pkt_type)
-{
-       struct xmit_frame *pmgntframe;
-       struct ieee80211_mgmt *mgmt;
-       struct pkt_attrib *pattrib;
-       unsigned char *pframe;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *pnetwork = &pmlmeinfo->network;
-       const u8 *p;
-       u8 *ie = pnetwork->IEs;
-
-       DBG_8723A("%s\n", __func__);
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe)
-               return;
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
-       mgmt = (struct ieee80211_mgmt *)pframe;
-
-       mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | pkt_type);
-
-       ether_addr_copy(mgmt->da, pstat->hwaddr);
-       ether_addr_copy(mgmt->sa, myid(&padapter->eeprompriv));
-       ether_addr_copy(mgmt->bssid, get_my_bssid23a(&pmlmeinfo->network));
-
-       mgmt->seq_ctrl = cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-
-       pmlmeext->mgnt_seq++;
-
-       pattrib->hdrlen = sizeof(struct ieee80211_hdr_3addr);
-       pattrib->pktlen =
-               offsetof(struct ieee80211_mgmt, u.assoc_resp.variable);
-
-       mgmt->u.assoc_resp.capab_info = cpu_to_le16(pnetwork->capability);
-       mgmt->u.assoc_resp.status_code = cpu_to_le16(status);
-       mgmt->u.assoc_resp.aid = cpu_to_le16(pstat->aid | BIT(14) | BIT(15));
-
-       pframe = mgmt->u.assoc_resp.variable;
-
-       if (pstat->bssratelen <= 8) {
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SUPP_RATES,
-                                      pstat->bssratelen, pstat->bssrateset,
-                                      &pattrib->pktlen);
-       } else {
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SUPP_RATES, 8,
-                                      pstat->bssrateset, &pattrib->pktlen);
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_EXT_SUPP_RATES,
-                                      pstat->bssratelen - 8,
-                                      pstat->bssrateset + 8, &pattrib->pktlen);
-       }
-
-       if (pstat->flags & WLAN_STA_HT && pmlmepriv->htpriv.ht_option) {
-               /* FILL HT CAP INFO IE */
-               /* p = hostapd_eid_ht_capabilities_info(hapd, p); */
-               p = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, ie,
-                                    pnetwork->IELength);
-               if (p && p[1]) {
-                       memcpy(pframe, p, p[1] + 2);
-                       pframe += (p[1] + 2);
-                       pattrib->pktlen += (p[1] + 2);
-               }
-
-               /* FILL HT ADD INFO IE */
-               /* p = hostapd_eid_ht_operation(hapd, p); */
-               p = cfg80211_find_ie(WLAN_EID_HT_OPERATION, ie,
-                                    pnetwork->IELength);
-               if (p && p[1] > 0) {
-                       memcpy(pframe, p, p[1] + 2);
-                       pframe += (p[1] + 2);
-                       pattrib->pktlen += (p[1] + 2);
-               }
-       }
-
-       /* FILL WMM IE */
-       if (pstat->flags & WLAN_STA_WME && pmlmepriv->qos_option) {
-               unsigned char WMM_PARA_IE[] = {0x00, 0x50, 0xf2, 0x02,
-                                              0x01, 0x01};
-               int ie_len = 0;
-
-               for (p = ie; ; p += (ie_len + 2)) {
-                       p = cfg80211_find_ie(WLAN_EID_VENDOR_SPECIFIC, p,
-                                            pnetwork->IELength - (ie_len + 2));
-                       if (p)
-                               ie_len = p[1];
-                       else
-                               ie_len = 0;
-                       if (p && !memcmp(p + 2, WMM_PARA_IE, 6)) {
-                               memcpy(pframe, p, ie_len + 2);
-                               pframe += (ie_len + 2);
-                               pattrib->pktlen += (ie_len + 2);
-
-                               break;
-                       }
-
-                       if (!p || ie_len == 0)
-                               break;
-               }
-       }
-
-       if (pmlmeinfo->assoc_AP_vendor == HT_IOT_PEER_REALTEK) {
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_VENDOR_SPECIFIC, 6,
-                                      REALTEK_96B_IE, &pattrib->pktlen);
-       }
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       dump_mgntframe23a(padapter, pmgntframe);
-}
-#endif
-
-static void issue_assocreq(struct rtw_adapter *padapter)
-{
-       int ret = _FAIL;
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       unsigned char *pframe;
-       const u8 *p;
-       struct ieee80211_mgmt *mgmt;
-       unsigned int i, j, index = 0;
-       unsigned char rf_type, bssrate[NumRates], sta_bssrate[NumRates];
-       struct registry_priv *pregpriv = &padapter->registrypriv;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       int bssrate_len = 0, sta_bssrate_len = 0, pie_len;
-       u8 *pie;
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe)
-               goto exit;
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       pframe = (u8 *)pmgntframe->buf_addr + TXDESC_OFFSET;
-       mgmt = (struct ieee80211_mgmt *)pframe;
-
-       mgmt->frame_control =
-               cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ASSOC_REQ);
-
-       ether_addr_copy(mgmt->da, get_my_bssid23a(&pmlmeinfo->network));
-       ether_addr_copy(mgmt->sa, myid(&padapter->eeprompriv));
-       ether_addr_copy(mgmt->bssid, get_my_bssid23a(&pmlmeinfo->network));
-
-       mgmt->seq_ctrl = cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-       pmlmeext->mgnt_seq++;
-
-       /* caps */
-       put_unaligned_le16(pmlmeinfo->network.capability,
-                          &mgmt->u.assoc_req.capab_info);
-       /* todo: listen interval for power saving */
-       put_unaligned_le16(3, &mgmt->u.assoc_req.listen_interval);
-
-       pframe = mgmt->u.assoc_req.variable;
-       pattrib->pktlen = offsetof(struct ieee80211_mgmt, u.assoc_req.variable);
-
-       /* SSID */
-       pframe = rtw_set_ie23a(pframe, WLAN_EID_SSID,
-                              pmlmeinfo->network.Ssid.ssid_len,
-                              pmlmeinfo->network.Ssid.ssid, &pattrib->pktlen);
-
-       /* supported rate & extended supported rate */
-
-       get_rate_set23a(padapter, sta_bssrate, &sta_bssrate_len);
-       /* DBG_8723A("sta_bssrate_len =%d\n", sta_bssrate_len); */
-
-       /*  for JAPAN, channel 14 can only uses B Mode(CCK) */
-       if (pmlmeext->cur_channel == 14)
-               sta_bssrate_len = 4;
-
-       /* for (i = 0; i < sta_bssrate_len; i++) { */
-       /*      DBG_8723A("sta_bssrate[%d]=%02X\n", i, sta_bssrate[i]); */
-       /*  */
-
-       for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
-               if (pmlmeinfo->network.SupportedRates[i] == 0)
-                       break;
-               DBG_8723A("network.SupportedRates[%d]=%02X\n", i,
-                         pmlmeinfo->network.SupportedRates[i]);
-       }
-
-       for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
-               if (pmlmeinfo->network.SupportedRates[i] == 0)
-                       break;
-
-               /*  Check if the AP's supported rates are also
-                   supported by STA. */
-               for (j = 0; j < sta_bssrate_len; j++) {
-                        /*  Avoid the proprietary data rate (22Mbps) of
-                            Handlink WSG-4000 AP */
-                       if ((pmlmeinfo->network.SupportedRates[i] |
-                            IEEE80211_BASIC_RATE_MASK) ==
-                           (sta_bssrate[j] | IEEE80211_BASIC_RATE_MASK)) {
-                               /* DBG_8723A("match i = %d, j =%d\n", i, j); */
-                               break;
-                       }
-               }
-
-               if (j == sta_bssrate_len) {
-                       /*  the rate is not supported by STA */
-                       DBG_8723A("%s(): the rate[%d]=%02X is not supported by "
-                                 "STA!\n", __func__, i,
-                                 pmlmeinfo->network.SupportedRates[i]);
-               } else {
-                       /*  the rate is supported by STA */
-                       bssrate[index++] = pmlmeinfo->network.SupportedRates[i];
-               }
-       }
-
-       bssrate_len = index;
-       DBG_8723A("bssrate_len = %d\n", bssrate_len);
-
-       if (bssrate_len == 0) {
-               rtw_free_xmitbuf23a(pxmitpriv, pmgntframe->pxmitbuf);
-               rtw_free_xmitframe23a(pxmitpriv, pmgntframe);
-               goto exit; /* don't connect to AP if no joint supported rate */
-       }
-
-       if (bssrate_len > 8) {
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SUPP_RATES, 8,
-                                      bssrate, &pattrib->pktlen);
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_EXT_SUPP_RATES,
-                                      (bssrate_len - 8), (bssrate + 8),
-                                      &pattrib->pktlen);
-       } else
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_SUPP_RATES,
-                                      bssrate_len, bssrate, &pattrib->pktlen);
-
-       /* RSN */
-
-       pie = pmlmeinfo->network.IEs;
-       pie_len = pmlmeinfo->network.IELength;
-
-       p = cfg80211_find_ie(WLAN_EID_RSN, pie, pie_len);
-       if (p)
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_RSN, p[1], p + 2,
-                                      &pattrib->pktlen);
-
-       /* HT caps */
-       if (padapter->mlmepriv.htpriv.ht_option) {
-               p = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, pie, pie_len);
-
-               if (p && !is_ap_in_tkip23a(padapter)) {
-                       struct ieee80211_ht_cap *cap = &pmlmeinfo->ht_cap;
-
-                       memcpy(cap, p + 2, sizeof(struct ieee80211_ht_cap));
-
-                       /* to disable 40M Hz support while gd_bw_40MHz_en = 0 */
-                       if (pregpriv->cbw40_enable == 0) {
-                               cap->cap_info &= ~cpu_to_le16(
-                                       IEEE80211_HT_CAP_SGI_40 |
-                                       IEEE80211_HT_CAP_SUP_WIDTH_20_40);
-                       } else {
-                               cap->cap_info |= cpu_to_le16(
-                                       IEEE80211_HT_CAP_SUP_WIDTH_20_40);
-                       }
-
-                       /* todo: disable SM power save mode */
-                       cap->cap_info |= cpu_to_le16(IEEE80211_HT_CAP_SM_PS);
-
-                       rf_type = rtl8723a_get_rf_type(padapter);
-                       /* switch (pregpriv->rf_config) */
-                       switch (rf_type) {
-                       case RF_1T1R:
-                               /* RX STBC One spatial stream */
-                               if (pregpriv->rx_stbc)
-                                       cap->cap_info |= cpu_to_le16(1 << IEEE80211_HT_CAP_RX_STBC_SHIFT);
-
-                               memcpy(&cap->mcs, MCS_rate_1R23A, 16);
-                               break;
-
-                       case RF_2T2R:
-                       case RF_1T2R:
-                       default:
-                               /* enable for 2.4/5 GHz */
-                               if (pregpriv->rx_stbc == 0x3 ||
-                                   (pmlmeext->cur_wireless_mode &
-                                    WIRELESS_11_24N &&
-                                    /* enable for 2.4GHz */
-                                    pregpriv->rx_stbc == 0x1) ||
-                                   (pmlmeext->cur_wireless_mode &
-                                    WIRELESS_11_5N &&
-                                    pregpriv->rx_stbc == 0x2) ||
-                                   /* enable for 5GHz */
-                                   pregpriv->wifi_spec == 1) {
-                                       DBG_8723A("declare supporting RX "
-                                                 "STBC\n");
-                                       /* RX STBC two spatial stream */
-                                       cap->cap_info |= cpu_to_le16(2 << IEEE80211_HT_CAP_RX_STBC_SHIFT);
-                               }
-                               memcpy(&cap->mcs, MCS_rate_2R23A, 16);
-                               break;
-                       }
-
-                       if (rtl8723a_BT_coexist(padapter) &&
-                           rtl8723a_BT_using_antenna_1(padapter)) {
-                               /*  set to 8K */
-                               cap->ampdu_params_info &=
-                                       ~IEEE80211_HT_AMPDU_PARM_FACTOR;
-/*                             cap->ampdu_params_info |= MAX_AMPDU_FACTOR_8K */
-                       }
-
-                       pframe = rtw_set_ie23a(pframe, WLAN_EID_HT_CAPABILITY,
-                                              p[1], (u8 *)&pmlmeinfo->ht_cap,
-                                              &pattrib->pktlen);
-               }
-       }
-
-       /* vendor specific IE, such as WPA, WMM, WPS */
-       for (i = 0;  i < pmlmeinfo->network.IELength;) {
-               p = pmlmeinfo->network.IEs + i;
-
-               switch (p[0]) {
-               case WLAN_EID_VENDOR_SPECIFIC:
-                       if (!memcmp(p + 2, RTW_WPA_OUI23A_TYPE, 4) ||
-                           !memcmp(p + 2, WMM_OUI23A, 4) ||
-                           !memcmp(p + 2, WPS_OUI23A, 4)) {
-                               u8 plen = p[1];
-
-                               if (!padapter->registrypriv.wifi_spec) {
-                                       /* Commented by Kurt 20110629 */
-                                       /* In some older APs, WPS handshake */
-                                       /* would be fail if we append vender
-                                          extensions informations to AP */
-                                       if (!memcmp(p + 2, WPS_OUI23A, 4))
-                                               plen = 14;
-                               }
-                               pframe = rtw_set_ie23a(pframe,
-                                                      WLAN_EID_VENDOR_SPECIFIC,
-                                                      plen, p + 2,
-                                                      &pattrib->pktlen);
-                       }
-                       break;
-
-               default:
-                       break;
-               }
-
-               i += p[1] + 2;
-       }
-
-       if (pmlmeinfo->assoc_AP_vendor == HT_IOT_PEER_REALTEK)
-               pframe = rtw_set_ie23a(pframe, WLAN_EID_VENDOR_SPECIFIC, 6,
-                                      REALTEK_96B_IE, &pattrib->pktlen);
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-       dump_mgntframe23a(padapter, pmgntframe);
-
-       ret = _SUCCESS;
-
-exit:
-       pmlmepriv->assoc_req_len = 0;
-       if (ret == _SUCCESS) {
-               kfree(pmlmepriv->assoc_req);
-               pmlmepriv->assoc_req = kmalloc(pattrib->pktlen, GFP_ATOMIC);
-               if (pmlmepriv->assoc_req) {
-                       memcpy(pmlmepriv->assoc_req, mgmt, pattrib->pktlen);
-                       pmlmepriv->assoc_req_len = pattrib->pktlen;
-               }
-       } else
-               kfree(pmlmepriv->assoc_req);
-}
-
-/* when wait_ack is true, this function should be called at process context */
-static int _issue_nulldata23a(struct rtw_adapter *padapter, unsigned char *da,
-                             unsigned int power_mode, int wait_ack)
-{
-       int ret = _FAIL;
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       unsigned char *pframe;
-       struct ieee80211_hdr *pwlanhdr;
-       struct xmit_priv *pxmitpriv;
-       struct mlme_ext_priv *pmlmeext;
-       struct mlme_ext_info *pmlmeinfo;
-
-       /* DBG_8723A("%s:%d\n", __func__, power_mode); */
-
-       if (!padapter)
-               goto exit;
-
-       pxmitpriv = &padapter->xmitpriv;
-       pmlmeext = &padapter->mlmeextpriv;
-       pmlmeinfo = &pmlmeext->mlmext_info;
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe)
-               goto exit;
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-       pattrib->retry_ctrl = false;
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
-       pwlanhdr = (struct ieee80211_hdr *)pframe;
-
-       pwlanhdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
-                                             IEEE80211_STYPE_NULLFUNC);
-
-       if ((pmlmeinfo->state&0x03) == MSR_AP)
-               pwlanhdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_FROMDS);
-       else if ((pmlmeinfo->state&0x03) == MSR_INFRA)
-               pwlanhdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_TODS);
-
-       if (power_mode)
-               pwlanhdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM);
-
-       ether_addr_copy(pwlanhdr->addr1, da);
-       ether_addr_copy(pwlanhdr->addr2, myid(&padapter->eeprompriv));
-       ether_addr_copy(pwlanhdr->addr3, get_my_bssid23a(&pmlmeinfo->network));
-
-       pwlanhdr->seq_ctrl =
-               cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-       pmlmeext->mgnt_seq++;
-
-       pframe += sizeof(struct ieee80211_hdr_3addr);
-       pattrib->pktlen = sizeof(struct ieee80211_hdr_3addr);
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       if (wait_ack)
-               ret = dump_mgntframe23a_and_wait_ack23a(padapter, pmgntframe);
-       else {
-               dump_mgntframe23a(padapter, pmgntframe);
-               ret = _SUCCESS;
-       }
-
-exit:
-       return ret;
-}
-
-/* when wait_ms >0 , this function should be called at process context */
-/* da == NULL for station mode */
-int issue_nulldata23a(struct rtw_adapter *padapter, unsigned char *da,
-                     unsigned int power_mode, int try_cnt, int wait_ms)
-{
-       int ret;
-       int i = 0;
-       unsigned long start = jiffies;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       /* da == NULL, assume it's null data for sta to ap*/
-       if (da == NULL)
-               da = get_my_bssid23a(&pmlmeinfo->network);
-
-       do {
-               ret = _issue_nulldata23a(padapter, da, power_mode,
-                                        wait_ms > 0 ? true : false);
-
-               i++;
-
-               if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
-                       break;
-
-               if (i < try_cnt && wait_ms > 0 && ret == _FAIL)
-                       msleep(wait_ms);
-
-       } while((i < try_cnt) && ((ret == _FAIL) || (wait_ms == 0)));
-
-       if (ret != _FAIL) {
-               ret = _SUCCESS;
-               goto exit;
-       }
-
-       if (try_cnt && wait_ms) {
-               if (da)
-                       DBG_8723A("%s(%s): to %pM, ch:%u%s, %d/%d in %u ms\n",
-                                 __func__, padapter->pnetdev->name,
-                                 da, rtw_get_oper_ch23a(padapter),
-                                 ret == _SUCCESS ? ", acked" : "", i, try_cnt,
-                                 jiffies_to_msecs(jiffies - start));
-               else
-                       DBG_8723A("%s(%s):, ch:%u%s, %d/%d in %u ms\n",
-                                 __func__, padapter->pnetdev->name,
-                                 rtw_get_oper_ch23a(padapter),
-                                 ret == _SUCCESS ? ", acked" : "", i, try_cnt,
-                                 jiffies_to_msecs(jiffies - start));
-       }
-exit:
-       return ret;
-}
-
-/* when wait_ack is true, this function should be called at process context */
-static int _issue_qos_nulldata23a(struct rtw_adapter *padapter,
-                                 unsigned char *da, u16 tid, int wait_ack)
-{
-       int ret = _FAIL;
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       unsigned char *pframe;
-       struct ieee80211_qos_hdr *pwlanhdr;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       DBG_8723A("%s\n", __func__);
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe)
-               goto exit;
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-
-       pattrib->hdrlen += 2;
-       pattrib->qos_en = true;
-       pattrib->eosp = 1;
-       pattrib->ack_policy = 0;
-       pattrib->mdata = 0;
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       pframe = (u8 *)(pmgntframe->buf_addr) + TXDESC_OFFSET;
-       pwlanhdr = (struct ieee80211_qos_hdr *)pframe;
-
-       pwlanhdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
-                                             IEEE80211_STYPE_QOS_NULLFUNC);
-
-       if ((pmlmeinfo->state&0x03) == MSR_AP)
-               pwlanhdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_FROMDS);
-       else if ((pmlmeinfo->state&0x03) == MSR_INFRA)
-               pwlanhdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_TODS);
-
-       if (pattrib->mdata)
-               pwlanhdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_MOREDATA);
-
-       pwlanhdr->qos_ctrl = cpu_to_le16(tid & IEEE80211_QOS_CTL_TID_MASK);
-       pwlanhdr->qos_ctrl |= cpu_to_le16((pattrib->ack_policy << 5) &
-                                         IEEE80211_QOS_CTL_ACK_POLICY_MASK);
-       if (pattrib->eosp)
-               pwlanhdr->qos_ctrl |= cpu_to_le16(IEEE80211_QOS_CTL_EOSP);
-
-       ether_addr_copy(pwlanhdr->addr1, da);
-       ether_addr_copy(pwlanhdr->addr2, myid(&padapter->eeprompriv));
-       ether_addr_copy(pwlanhdr->addr3, get_my_bssid23a(&pmlmeinfo->network));
-
-       pwlanhdr->seq_ctrl =
-               cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-       pmlmeext->mgnt_seq++;
-
-       pframe += sizeof(struct ieee80211_qos_hdr);
-       pattrib->pktlen = sizeof(struct ieee80211_qos_hdr);
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       if (wait_ack)
-               ret = dump_mgntframe23a_and_wait_ack23a(padapter, pmgntframe);
-       else {
-               dump_mgntframe23a(padapter, pmgntframe);
-               ret = _SUCCESS;
-       }
-
-exit:
-       return ret;
-}
-
-/* when wait_ms >0 , this function should be called at process context */
-/* da == NULL for station mode */
-int issue_qos_nulldata23a(struct rtw_adapter *padapter, unsigned char *da,
-                         u16 tid, int try_cnt, int wait_ms)
-{
-       int ret;
-       int i = 0;
-       unsigned long start = jiffies;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       /* da == NULL, assume it's null data for sta to ap*/
-       if (da == NULL)
-               da = get_my_bssid23a(&pmlmeinfo->network);
-
-       do {
-               ret = _issue_qos_nulldata23a(padapter, da, tid,
-                                            wait_ms > 0 ? true : false);
-
-               i++;
-
-               if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
-                       break;
-
-               if (i < try_cnt && wait_ms > 0 && ret == _FAIL)
-                       msleep(wait_ms);
-       } while((i < try_cnt) && ((ret == _FAIL)||(wait_ms == 0)));
-
-       if (ret != _FAIL) {
-               ret = _SUCCESS;
-               goto exit;
-       }
-
-       if (try_cnt && wait_ms) {
-               if (da)
-                       DBG_8723A("%s(%s): to %pM, ch:%u%s, %d/%d in %u ms\n",
-                                 __func__, padapter->pnetdev->name,
-                                 da, rtw_get_oper_ch23a(padapter),
-                                 ret == _SUCCESS ? ", acked" : "", i, try_cnt,
-                                 jiffies_to_msecs(jiffies - start));
-               else
-                       DBG_8723A("%s(%s):, ch:%u%s, %d/%d in %u ms\n",
-                                 __func__, padapter->pnetdev->name,
-                                 rtw_get_oper_ch23a(padapter),
-                                 ret == _SUCCESS ? ", acked" : "", i, try_cnt,
-                                 jiffies_to_msecs(jiffies - start));
-       }
-exit:
-       return ret;
-}
-
-static int _issue_deauth(struct rtw_adapter *padapter, unsigned char *da,
-                        unsigned short reason, u8 wait_ack)
-{
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       struct ieee80211_mgmt *mgmt;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       int ret = _FAIL;
-
-       /* DBG_8723A("%s to %pM\n", __func__, da); */
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe)
-               goto exit;
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-       pattrib->retry_ctrl = false;
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       mgmt = (struct ieee80211_mgmt *)(pmgntframe->buf_addr + TXDESC_OFFSET);
-
-       mgmt->frame_control =
-               cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_DEAUTH);
-
-       ether_addr_copy(mgmt->da, da);
-       ether_addr_copy(mgmt->sa, myid(&padapter->eeprompriv));
-       ether_addr_copy(mgmt->bssid, get_my_bssid23a(&pmlmeinfo->network));
-
-       mgmt->seq_ctrl = cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-       pmlmeext->mgnt_seq++;
-
-       pattrib->pktlen = sizeof(struct ieee80211_hdr_3addr) + 2;
-
-       mgmt->u.deauth.reason_code = cpu_to_le16(reason);
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       if (wait_ack)
-               ret = dump_mgntframe23a_and_wait_ack23a(padapter, pmgntframe);
-       else {
-               dump_mgntframe23a(padapter, pmgntframe);
-               ret = _SUCCESS;
-       }
-
-exit:
-       return ret;
-}
-
-int issue_deauth23a(struct rtw_adapter *padapter, unsigned char *da,
-                   unsigned short reason)
-{
-       DBG_8723A("%s to %pM\n", __func__, da);
-       return _issue_deauth(padapter, da, reason, false);
-}
-
-static int issue_deauth_ex(struct rtw_adapter *padapter, u8 *da,
-                          unsigned short reason, int try_cnt, int wait_ms)
-{
-       int ret;
-       int i = 0;
-       unsigned long start = jiffies;
-
-       do {
-               ret = _issue_deauth(padapter, da, reason,
-                                   wait_ms >0 ? true : false);
-
-               i++;
-
-               if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
-                       break;
-
-               if (i < try_cnt && wait_ms > 0 && ret == _FAIL)
-                       msleep(wait_ms);
-
-       } while((i < try_cnt) && ((ret == _FAIL)||(wait_ms == 0)));
-
-       if (ret != _FAIL) {
-               ret = _SUCCESS;
-               goto exit;
-       }
-
-       if (try_cnt && wait_ms) {
-               if (da)
-                       DBG_8723A("%s(%s): to %pM, ch:%u%s, %d/%d in %u ms\n",
-                                 __func__, padapter->pnetdev->name,
-                                 da, rtw_get_oper_ch23a(padapter),
-                                 ret == _SUCCESS ? ", acked" : "", i, try_cnt,
-                                 jiffies_to_msecs(jiffies - start));
-               else
-                       DBG_8723A("%s(%s):, ch:%u%s, %d/%d in %u ms\n",
-                                 __func__, padapter->pnetdev->name,
-                                 rtw_get_oper_ch23a(padapter),
-                                 ret == _SUCCESS ? ", acked" : "", i, try_cnt,
-                                 jiffies_to_msecs(jiffies - start));
-       }
-exit:
-       return ret;
-}
-
-void issue_action_spct_ch_switch23a(struct rtw_adapter *padapter,
-                                   u8 *ra, u8 new_ch, u8 ch_offset)
-{
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       unsigned char *pframe;
-       struct ieee80211_mgmt *mgmt;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       DBG_8723A("%s(%s): ra=%pM, ch:%u, offset:%u\n",
-                 __func__, padapter->pnetdev->name, ra, new_ch, ch_offset);
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe)
-               return;
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       mgmt = (struct ieee80211_mgmt *)(pmgntframe->buf_addr + TXDESC_OFFSET);
-
-       mgmt->frame_control =
-               cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION);
-
-       ether_addr_copy(mgmt->da, ra); /* RA */
-       ether_addr_copy(mgmt->sa, myid(&padapter->eeprompriv)); /* TA */
-       ether_addr_copy(mgmt->bssid, ra); /* DA = RA */
-
-       mgmt->seq_ctrl = cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-       pmlmeext->mgnt_seq++;
-
-       mgmt->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT;
-       mgmt->u.action.u.chan_switch.action_code = WLAN_ACTION_SPCT_CHL_SWITCH;
-
-       pframe = mgmt->u.action.u.chan_switch.variable;
-       pattrib->pktlen = offsetof(struct ieee80211_mgmt,
-                                  u.action.u.chan_switch.variable);
-
-       pframe = rtw_set_ie23a_ch_switch (pframe, &pattrib->pktlen, 0,
-                                         new_ch, 0);
-       pframe = rtw_set_ie23a_secondary_ch_offset(pframe, &pattrib->pktlen,
-               hal_ch_offset_to_secondary_ch_offset23a(ch_offset));
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       dump_mgntframe23a(padapter, pmgntframe);
-}
-
-void issue_action_BA23a(struct rtw_adapter *padapter,
-                       const unsigned char *raddr,
-                       unsigned char action, unsigned short status)
-{
-       u16 start_seq;
-       u16 BA_para_set;
-       u16 BA_starting_seqctrl;
-       u16 BA_para;
-       int max_rx_ampdu_factor;
-       struct xmit_frame *pmgntframe;
-       struct pkt_attrib *pattrib;
-       struct ieee80211_mgmt *mgmt;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct sta_info *psta;
-       struct sta_priv *pstapriv = &padapter->stapriv;
-       struct registry_priv *pregpriv = &padapter->registrypriv;
-       u8 tendaAPMac[] = {0xC8, 0x3A, 0x35};
-
-       DBG_8723A("%s, action =%d, status =%d\n", __func__, action, status);
-
-       pmgntframe = alloc_mgtxmitframe23a(pxmitpriv);
-       if (!pmgntframe)
-               return;
-
-       /* update attribute */
-       pattrib = &pmgntframe->attrib;
-       update_mgntframe_attrib23a(padapter, pattrib);
-
-       memset(pmgntframe->buf_addr, 0, WLANHDR_OFFSET + TXDESC_OFFSET);
-
-       mgmt = (struct ieee80211_mgmt *)(pmgntframe->buf_addr + TXDESC_OFFSET);
-
-       mgmt->frame_control =
-               cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION);
-
-       ether_addr_copy(mgmt->da, raddr);
-       ether_addr_copy(mgmt->sa, myid(&padapter->eeprompriv));
-       ether_addr_copy(mgmt->bssid, get_my_bssid23a(&pmlmeinfo->network));
-
-       mgmt->seq_ctrl = cpu_to_le16(IEEE80211_SN_TO_SEQ(pmlmeext->mgnt_seq));
-       pmlmeext->mgnt_seq++;
-
-       mgmt->u.action.category = WLAN_CATEGORY_BACK;
-
-       pattrib->pktlen = sizeof(struct ieee80211_hdr_3addr) + 1;
-
-       switch (action) {
-       case WLAN_ACTION_ADDBA_REQ:
-               pattrib->pktlen += sizeof(mgmt->u.action.u.addba_req);
-
-               mgmt->u.action.u.addba_req.action_code = action;
-
-               do {
-                       pmlmeinfo->dialogToken++;
-               } while (pmlmeinfo->dialogToken == 0);
-
-               mgmt->u.action.u.addba_req.dialog_token =
-                       pmlmeinfo->dialogToken;
-
-               if (rtl8723a_BT_coexist(padapter) &&
-                   rtl8723a_BT_using_antenna_1(padapter) &&
-                   (pmlmeinfo->assoc_AP_vendor != broadcomAP ||
-                    memcmp(raddr, tendaAPMac, 3))) {
-                       /*  A-MSDU NOT Supported */
-                       BA_para_set = 0;
-                       /*  immediate Block Ack */
-                       BA_para_set |= (1 << 1) &
-                               IEEE80211_ADDBA_PARAM_POLICY_MASK;
-                       /*  TID */
-                       BA_para_set |= (status << 2) &
-                               IEEE80211_ADDBA_PARAM_TID_MASK;
-                       /*  max buffer size is 8 MSDU */
-                       BA_para_set |= (8 << 6) &
-                               IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK;
-               } else {
-                       /* immediate ack & 64 buffer size */
-                       BA_para_set = 0x1002 | ((status & 0xf) << 2);
-               }
-
-               put_unaligned_le16(BA_para_set,
-                                  &mgmt->u.action.u.addba_req.capab);
-
-               /*  5ms */
-               put_unaligned_le16(5000, &mgmt->u.action.u.addba_req.timeout);
-
-               psta = rtw_get_stainfo23a(pstapriv, raddr);
-               if (psta) {
-                       int idx;
-
-                       idx = status & 0x07;
-                       start_seq =
-                               (psta->sta_xmitpriv.txseq_tid[idx] & 0xfff) + 1;
-
-                       DBG_8723A("BA_starting_seqctrl = %d for TID =%d\n",
-                                 start_seq, idx);
-
-                       psta->BA_starting_seqctrl[idx] = start_seq;
-
-                       BA_starting_seqctrl = start_seq << 4;
-               } else
-                       BA_starting_seqctrl = 0;
-
-               put_unaligned_le16(BA_starting_seqctrl,
-                                  &mgmt->u.action.u.addba_req.start_seq_num);
-
-               break;
-
-       case WLAN_ACTION_ADDBA_RESP:
-               pattrib->pktlen += sizeof(mgmt->u.action.u.addba_resp);
-
-               mgmt->u.action.u.addba_resp.action_code = action;
-               mgmt->u.action.u.addba_resp.dialog_token =
-                       pmlmeinfo->ADDBA_req.dialog_token;
-               put_unaligned_le16(status,
-                                  &mgmt->u.action.u.addba_resp.status);
-
-               GetHalDefVar8192CUsb(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR,
-                                    &max_rx_ampdu_factor);
-
-               BA_para = le16_to_cpu(pmlmeinfo->ADDBA_req.BA_para_set) & 0x3f;
-               if (max_rx_ampdu_factor == IEEE80211_HT_MAX_AMPDU_64K)
-                       BA_para_set = BA_para | 0x1000; /* 64 buffer size */
-               else if (max_rx_ampdu_factor == IEEE80211_HT_MAX_AMPDU_32K)
-                       BA_para_set = BA_para | 0x0800; /* 32 buffer size */
-               else if (max_rx_ampdu_factor == IEEE80211_HT_MAX_AMPDU_16K)
-                       BA_para_set = BA_para | 0x0400; /* 16 buffer size */
-               else if (max_rx_ampdu_factor == IEEE80211_HT_MAX_AMPDU_8K)
-                       BA_para_set = BA_para | 0x0200; /* 8 buffer size */
-               else
-                       BA_para_set = BA_para | 0x1000; /* 64 buffer size */
-
-               if (rtl8723a_BT_coexist(padapter) &&
-                   rtl8723a_BT_using_antenna_1(padapter) &&
-                   (pmlmeinfo->assoc_AP_vendor != broadcomAP ||
-                    memcmp(raddr, tendaAPMac, 3))) {
-                       /*  max buffer size is 8 MSDU */
-                       BA_para_set &= ~IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK;
-                       BA_para_set |= (8 << 6) &
-                               IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK;
-               }
-
-               if (pregpriv->ampdu_amsdu == 0)/* disabled */
-                       BA_para_set &= ~BIT(0);
-               else if (pregpriv->ampdu_amsdu == 1)/* enabled */
-                       BA_para_set |= BIT(0);
-
-               put_unaligned_le16(BA_para_set,
-                                  &mgmt->u.action.u.addba_resp.capab);
-
-               mgmt->u.action.u.addba_resp.timeout
-                       = pmlmeinfo->ADDBA_req.BA_timeout_value;
-
-               pattrib->pktlen += 8;
-               break;
-       case WLAN_ACTION_DELBA:
-               pattrib->pktlen += sizeof(mgmt->u.action.u.delba);
-
-               mgmt->u.action.u.delba.action_code = action;
-               BA_para_set = (status & 0x1F) << 3;
-               mgmt->u.action.u.delba.params = cpu_to_le16(BA_para_set);
-               mgmt->u.action.u.delba.reason_code =
-                       cpu_to_le16(WLAN_REASON_QSTA_NOT_USE);
-
-               pattrib->pktlen += 5;
-               break;
-       default:
-               break;
-       }
-
-       pattrib->last_txcmdsz = pattrib->pktlen;
-
-       dump_mgntframe23a(padapter, pmgntframe);
-}
-
-int send_delba23a(struct rtw_adapter *padapter, u8 initiator, u8 *addr)
-{
-       struct sta_priv *pstapriv = &padapter->stapriv;
-       struct sta_info *psta = NULL;
-       /* struct recv_reorder_ctrl *preorder_ctrl; */
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       u16 tid;
-
-       if ((pmlmeinfo->state&0x03) != MSR_AP)
-               if (!(pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS))
-                       return _SUCCESS;
-
-       psta = rtw_get_stainfo23a(pstapriv, addr);
-       if (psta == NULL)
-               return _SUCCESS;
-
-       if (initiator == 0) {  /*  recipient */
-               for (tid = 0; tid < MAXTID; tid++) {
-                       if (psta->recvreorder_ctrl[tid].enable == true) {
-                               DBG_8723A("rx agg disable tid(%d)\n", tid);
-                               issue_action_BA23a(padapter, addr, WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F));
-                               psta->recvreorder_ctrl[tid].enable = false;
-                               psta->recvreorder_ctrl[tid].indicate_seq = 0xffff;
-                       }
-               }
-       } else if (initiator == 1) { /*  originator */
-               for (tid = 0; tid < MAXTID; tid++) {
-                       if (psta->htpriv.agg_enable_bitmap & BIT(tid)) {
-                               DBG_8723A("tx agg disable tid(%d)\n", tid);
-                               issue_action_BA23a(padapter, addr, WLAN_ACTION_DELBA, (((tid <<1) |initiator)&0x1F));
-                               psta->htpriv.agg_enable_bitmap &= ~BIT(tid);
-                               psta->htpriv.candidate_tid_bitmap &= ~BIT(tid);
-
-                       }
-               }
-       }
-       return _SUCCESS;
-}
-
-int send_beacon23a(struct rtw_adapter *padapter)
-{
-       bool bxmitok;
-       int issue = 0;
-       int poll = 0;
-       unsigned long start = jiffies;
-       unsigned int passing_time;
-
-       rtl8723a_bcn_valid(padapter);
-       do {
-               issue_beacon23a(padapter, 100);
-               issue++;
-               do {
-                       yield();
-                       bxmitok = rtl8723a_get_bcn_valid(padapter);
-                       poll++;
-               } while ((poll % 10) != 0 && !bxmitok &&
-                        !padapter->bSurpriseRemoved &&
-                        !padapter->bDriverStopped);
-
-       } while (!bxmitok && issue<100 && !padapter->bSurpriseRemoved &&
-                !padapter->bDriverStopped);
-
-       if (padapter->bSurpriseRemoved || padapter->bDriverStopped)
-               return _FAIL;
-
-       passing_time = jiffies_to_msecs(jiffies - start);
-
-       if (!bxmitok) {
-               DBG_8723A("%s fail! %u ms\n", __func__, passing_time);
-               return _FAIL;
-       } else {
-
-               if (passing_time > 100 || issue > 3)
-                       DBG_8723A("%s success, issue:%d, poll:%d, %u ms\n",
-                                 __func__, issue, poll, passing_time);
-               return _SUCCESS;
-       }
-}
-
-/****************************************************************************
-
-Following are some utitity functions for WiFi MLME
-
-*****************************************************************************/
-
-bool IsLegal5GChannel(struct rtw_adapter *Adapter, u8 channel)
-{
-
-       int i = 0;
-       u8 Channel_5G[45] = {36, 38, 40, 42, 44, 46, 48, 50, 52, 54, 56, 58,
-                            60, 62, 64, 100, 102, 104, 106, 108, 110, 112,
-                            114, 116, 118, 120, 122, 124, 126, 128, 130, 132,
-                            134, 136, 138, 140, 149, 151, 153, 155, 157, 159,
-                            161, 163, 165};
-       for (i = 0; i < sizeof(Channel_5G); i++)
-               if (channel == Channel_5G[i])
-                       return true;
-       return false;
-}
-
-static void rtw_site_survey(struct rtw_adapter *padapter)
-{
-       unsigned char survey_channel = 0;
-       enum rt_scan_type ScanType = SCAN_PASSIVE;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct rtw_ieee80211_channel *ch;
-
-       if (pmlmeext->sitesurvey_res.channel_idx <
-           pmlmeext->sitesurvey_res.ch_num) {
-               ch = &pmlmeext->sitesurvey_res.ch[pmlmeext->sitesurvey_res.channel_idx];
-               survey_channel = ch->hw_value;
-               ScanType = (ch->flags & IEEE80211_CHAN_NO_IR) ?
-                       SCAN_PASSIVE : SCAN_ACTIVE;
-       }
-
-       if (survey_channel != 0) {
-               /* PAUSE 4-AC Queue when site_survey */
-               if (pmlmeext->sitesurvey_res.channel_idx == 0)
-                       set_channel_bwmode23a(padapter, survey_channel,
-                                             HAL_PRIME_CHNL_OFFSET_DONT_CARE,
-                                             HT_CHANNEL_WIDTH_20);
-               else
-                       SelectChannel23a(padapter, survey_channel);
-
-               if (ScanType == SCAN_ACTIVE) /* obey the channel plan setting... */
-               {
-                       int i;
-
-                       for (i = 0;i<RTW_SSID_SCAN_AMOUNT;i++) {
-                               if (pmlmeext->sitesurvey_res.ssid[i].ssid_len) {
-                                       /* todo: to issue two probe req??? */
-                                       issue_probereq(padapter, &pmlmeext->sitesurvey_res.ssid[i], NULL);
-                                       /* msleep(SURVEY_TO>>1); */
-                                       issue_probereq(padapter, &pmlmeext->sitesurvey_res.ssid[i], NULL);
-                               }
-                       }
-
-                       if (pmlmeext->sitesurvey_res.scan_mode == SCAN_ACTIVE) {
-                               /* todo: to issue two probe req??? */
-                               issue_probereq(padapter, NULL, NULL);
-                               /* msleep(SURVEY_TO>>1); */
-                               issue_probereq(padapter, NULL, NULL);
-                       }
-               }
-
-               set_survey_timer(pmlmeext, pmlmeext->chan_scan_time);
-       } else {
-               /*      channel number is 0 or this channel is not valid. */
-               pmlmeext->sitesurvey_res.state = SCAN_COMPLETE;
-
-               /* switch back to the original channel */
-
-               set_channel_bwmode23a(padapter, pmlmeext->cur_channel,
-                                     pmlmeext->cur_ch_offset,
-                                     pmlmeext->cur_bwmode);
-
-               /* flush 4-AC Queue after rtw_site_survey */
-               /* val8 = 0; */
-
-               /* config MSR */
-               rtl8723a_set_media_status(padapter, pmlmeinfo->state & 0x3);
-
-               /* restore RX GAIN */
-               rtl8723a_set_initial_gain(padapter, 0xff);
-               /* turn on dynamic functions */
-               rtl8723a_odm_support_ability_restore(padapter);
-
-               if (is_client_associated_to_ap23a(padapter) == true)
-                       issue_nulldata23a(padapter, NULL, 0, 3, 500);
-
-               rtl8723a_mlme_sitesurvey(padapter, 0);
-
-               report_surveydone_event23a(padapter);
-
-               pmlmeext->chan_scan_time = SURVEY_TO;
-               pmlmeext->sitesurvey_res.state = SCAN_DISABLE;
-       }
-}
-
-/* collect bss info from Beacon and Probe request/response frames. */
-static struct wlan_bssid_ex *collect_bss_info(struct rtw_adapter *padapter,
-                                             struct recv_frame *precv_frame)
-{
-       struct sk_buff *skb = precv_frame->pkt;
-       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *) skb->data;
-       struct registry_priv *pregistrypriv = &padapter->registrypriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *bssid;
-       const u8 *p;
-       u8 *pie;
-       unsigned int length;
-       int i;
-
-       length = skb->len;
-
-       bssid = kzalloc(sizeof(struct wlan_bssid_ex), GFP_ATOMIC);
-       if (!bssid)
-               return NULL;
-
-       if (ieee80211_is_beacon(mgmt->frame_control)) {
-               length -= offsetof(struct ieee80211_mgmt, u.beacon.variable);
-               pie = mgmt->u.beacon.variable;
-               bssid->reserved = 1;
-               bssid->capability =
-                       get_unaligned_le16(&mgmt->u.beacon.capab_info);
-               bssid->beacon_interval =
-                       get_unaligned_le16(&mgmt->u.beacon.beacon_int);
-               bssid->tsf = get_unaligned_le64(&mgmt->u.beacon.timestamp);
-       } else if (ieee80211_is_probe_req(mgmt->frame_control)) {
-               length -= offsetof(struct ieee80211_mgmt, u.probe_req.variable);
-               pie = mgmt->u.probe_req.variable;
-               bssid->reserved = 2;
-               bssid->capability = 0;
-               bssid->beacon_interval =
-                       padapter->registrypriv.dev_network.beacon_interval;
-               bssid->tsf = 0;
-       } else if (ieee80211_is_probe_resp(mgmt->frame_control)) {
-               length -=
-                       offsetof(struct ieee80211_mgmt, u.probe_resp.variable);
-               pie = mgmt->u.probe_resp.variable;
-               bssid->reserved = 3;
-               bssid->capability =
-                       get_unaligned_le16(&mgmt->u.probe_resp.capab_info);
-               bssid->beacon_interval =
-                       get_unaligned_le16(&mgmt->u.probe_resp.beacon_int);
-               bssid->tsf = get_unaligned_le64(&mgmt->u.probe_resp.timestamp);
-       } else {
-               length -= offsetof(struct ieee80211_mgmt, u.beacon.variable);
-               pie = mgmt->u.beacon.variable;
-               bssid->reserved = 0;
-               bssid->capability =
-                       get_unaligned_le16(&mgmt->u.beacon.capab_info);
-               bssid->beacon_interval =
-                       padapter->registrypriv.dev_network.beacon_interval;
-               bssid->tsf = 0;
-       }
-
-       if (length > MAX_IE_SZ) {
-               /* DBG_8723A("IE too long for survey event\n"); */
-               kfree(bssid);
-               return NULL;
-       }
-
-       bssid->Length = offsetof(struct wlan_bssid_ex, IEs) + length;
-
-       /* below is to copy the information element */
-       bssid->IELength = length;
-       memcpy(bssid->IEs, pie, bssid->IELength);
-
-       /* get the signal strength */
-       /*  in dBM.raw data */
-       bssid->Rssi = precv_frame->attrib.phy_info.RecvSignalPower;
-       bssid->SignalQuality =
-               precv_frame->attrib.phy_info.SignalQuality;/* in percentage */
-       bssid->SignalStrength =
-               precv_frame->attrib.phy_info.SignalStrength;/* in percentage */
-
-       /*  checking SSID */
-       p = cfg80211_find_ie(WLAN_EID_SSID, bssid->IEs, bssid->IELength);
-
-       if (!p) {
-               DBG_8723A("marc: cannot find SSID for survey event\n");
-               goto fail;
-       }
-
-       if (p[1] > IEEE80211_MAX_SSID_LEN) {
-               DBG_8723A("%s()-%d: IE too long (%d) for survey "
-                         "event\n", __func__, __LINE__, p[1]);
-               goto fail;
-       }
-       memcpy(bssid->Ssid.ssid, p + 2, p[1]);
-       bssid->Ssid.ssid_len = p[1];
-
-       /* checking rate info... */
-       i = 0;
-       p = cfg80211_find_ie(WLAN_EID_SUPP_RATES, bssid->IEs, bssid->IELength);
-       if (p) {
-               if (p[1] > NDIS_802_11_LENGTH_RATES_EX) {
-                       DBG_8723A("%s()-%d: IE too long (%d) for survey "
-                                 "event\n", __func__, __LINE__, p[1]);
-                       goto fail;
-               }
-               memcpy(bssid->SupportedRates, p + 2, p[1]);
-               i = p[1];
-       }
-
-       p = cfg80211_find_ie(WLAN_EID_EXT_SUPP_RATES, bssid->IEs,
-                            bssid->IELength);
-       if (p) {
-               if (p[1] > (NDIS_802_11_LENGTH_RATES_EX-i)) {
-                       DBG_8723A("%s()-%d: IE too long (%d) for survey "
-                                 "event\n", __func__, __LINE__, p[1]);
-                       goto fail;
-               }
-               memcpy(bssid->SupportedRates + i, p + 2, p[1]);
-       }
-
-       /*  Checking for DSConfig */
-       p = cfg80211_find_ie(WLAN_EID_DS_PARAMS, bssid->IEs, bssid->IELength);
-
-       bssid->DSConfig = 0;
-
-       if (p) {
-               bssid->DSConfig = p[2];
-       } else {/*  In 5G, some ap do not have DSSET IE */
-               /*  checking HT info for channel */
-               p = cfg80211_find_ie(WLAN_EID_HT_OPERATION, bssid->IEs,
-                                    bssid->IELength);
-               if (p) {
-                       struct ieee80211_ht_operation *HT_info =
-                               (struct ieee80211_ht_operation *)(p + 2);
-                       bssid->DSConfig = HT_info->primary_chan;
-               } else /*  use current channel */
-                       bssid->DSConfig = rtw_get_oper_ch23a(padapter);
-       }
-
-       if (ieee80211_is_probe_req(mgmt->frame_control)) {
-               /*  FIXME */
-               bssid->ifmode = NL80211_IFTYPE_STATION;
-               ether_addr_copy(bssid->MacAddress, mgmt->sa);
-               bssid->Privacy = 1;
-               return bssid;
-       }
-
-       if (bssid->capability & WLAN_CAPABILITY_ESS) {
-               bssid->ifmode = NL80211_IFTYPE_STATION;
-               ether_addr_copy(bssid->MacAddress, mgmt->sa);
-       } else {
-               bssid->ifmode = NL80211_IFTYPE_ADHOC;
-               ether_addr_copy(bssid->MacAddress, mgmt->bssid);
-       }
-
-       if (bssid->capability & WLAN_CAPABILITY_PRIVACY)
-               bssid->Privacy = 1;
-       else
-               bssid->Privacy = 0;
-
-       bssid->ATIMWindow = 0;
-
-       /* 20/40 BSS Coexistence check */
-       if (pregistrypriv->wifi_spec == 1 &&
-           pmlmeinfo->bwmode_updated == false) {
-               struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-
-               p = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, bssid->IEs,
-                                    bssid->IELength);
-               if (p && p[1] > 0) {
-                       struct ieee80211_ht_cap *pHT_caps;
-
-                       pHT_caps = (struct ieee80211_ht_cap *)(p + 2);
-
-                       if (pHT_caps->cap_info &
-                           cpu_to_le16(IEEE80211_HT_CAP_40MHZ_INTOLERANT))
-                               pmlmepriv->num_FortyMHzIntolerant++;
-               } else
-                       pmlmepriv->num_sta_no_ht++;
-       }
-
-
-       /*  mark bss info receiving from nearby channel as SignalQuality 101 */
-       if (bssid->DSConfig != rtw_get_oper_ch23a(padapter))
-               bssid->SignalQuality = 101;
-
-       return bssid;
-fail:
-       kfree (bssid);
-       return NULL;
-}
-
-static void start_create_ibss(struct rtw_adapter *padapter)
-{
-       unsigned short caps;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *pnetwork = &pmlmeinfo->network;
-
-       pmlmeext->cur_channel = (u8)pnetwork->DSConfig;
-       pmlmeinfo->bcn_interval = pnetwork->beacon_interval;
-
-       /* update wireless mode */
-       update_wireless_mode23a(padapter);
-
-       /* update capability */
-       caps = pnetwork->capability;
-       update_capinfo23a(padapter, caps);
-       if (caps & WLAN_CAPABILITY_IBSS) {      /* adhoc master */
-               rtl8723a_set_sec_cfg(padapter, 0xcf);
-
-               /* switch channel */
-               /* SelectChannel23a(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE); */
-               set_channel_bwmode23a(padapter, pmlmeext->cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
-
-               rtl8723a_SetBeaconRelatedRegisters(padapter);
-
-               /* set msr to MSR_ADHOC */
-               pmlmeinfo->state = MSR_ADHOC;
-               rtl8723a_set_media_status(padapter, pmlmeinfo->state & 0x3);
-
-               /* issue beacon */
-               if (send_beacon23a(padapter) == _FAIL) {
-                       RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
-                                "issuing beacon frame fail....\n");
-
-                       report_join_res23a(padapter, -1);
-                       pmlmeinfo->state = MSR_NOLINK;
-               } else {
-                       hw_var_set_bssid(padapter, padapter->registrypriv.dev_network.MacAddress);
-                       hw_var_set_mlme_join(padapter, 0);
-
-                       report_join_res23a(padapter, 1);
-                       pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
-               }
-       } else {
-               DBG_8723A("%s: invalid cap:%x\n", __func__, caps);
-               return;
-       }
-}
-
-static void start_clnt_join(struct rtw_adapter *padapter)
-{
-       unsigned short caps;
-       u8 val8;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *pnetwork = &pmlmeinfo->network;
-       int beacon_timeout;
-
-       pmlmeext->cur_channel = (u8)pnetwork->DSConfig;
-       pmlmeinfo->bcn_interval = pnetwork->beacon_interval;
-
-       /* update wireless mode */
-       update_wireless_mode23a(padapter);
-
-       /* update capability */
-       caps = pnetwork->capability;
-       update_capinfo23a(padapter, caps);
-       if (caps & WLAN_CAPABILITY_ESS) {
-               /* switch channel */
-               set_channel_bwmode23a(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
-
-               rtl8723a_set_media_status(padapter, MSR_INFRA);
-
-               val8 = (pmlmeinfo->auth_algo == dot11AuthAlgrthm_8021X) ?
-                       0xcc: 0xcf;
-
-               rtl8723a_set_sec_cfg(padapter, val8);
-
-               /* switch channel */
-               /* set_channel_bwmode23a(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
-
-               /* here wait for receiving the beacon to start auth */
-               /* and enable a timer */
-               beacon_timeout = decide_wait_for_beacon_timeout23a(pmlmeinfo->bcn_interval);
-               set_link_timer(pmlmeext, beacon_timeout);
-               mod_timer(&padapter->mlmepriv.assoc_timer, jiffies +
-                         msecs_to_jiffies((REAUTH_TO * REAUTH_LIMIT) + (REASSOC_TO*REASSOC_LIMIT) + beacon_timeout));
-               pmlmeinfo->state = WIFI_FW_AUTH_NULL | MSR_INFRA;
-       } else if (caps & WLAN_CAPABILITY_IBSS) {       /* adhoc client */
-               rtl8723a_set_media_status(padapter, MSR_ADHOC);
-
-               rtl8723a_set_sec_cfg(padapter, 0xcf);
-
-               /* switch channel */
-               set_channel_bwmode23a(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
-
-               rtl8723a_SetBeaconRelatedRegisters(padapter);
-
-               pmlmeinfo->state = MSR_ADHOC;
-
-               report_join_res23a(padapter, 1);
-       } else {
-               /* DBG_8723A("marc: invalid cap:%x\n", caps); */
-               return;
-       }
-}
-
-static void start_clnt_auth(struct rtw_adapter *padapter)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       del_timer_sync(&pmlmeext->link_timer);
-
-       pmlmeinfo->state &= (~WIFI_FW_AUTH_NULL);
-       pmlmeinfo->state |= WIFI_FW_AUTH_STATE;
-
-       pmlmeinfo->auth_seq = 1;
-       pmlmeinfo->reauth_count = 0;
-       pmlmeinfo->reassoc_count = 0;
-       pmlmeinfo->link_count = 0;
-       pmlmeext->retry = 0;
-
-       /*  Because of AP's not receiving deauth before */
-       /*  AP may: 1)not response auth or 2)deauth us after link is complete */
-       /*  issue deauth before issuing auth to deal with the situation */
-       /*      Commented by Albert 2012/07/21 */
-       /*      For the Win8 P2P connection, it will be hard to have a
-               successful connection if this Wi-Fi doesn't connect to it. */
-       issue_deauth23a(padapter, (&pmlmeinfo->network)->MacAddress,
-                       WLAN_REASON_DEAUTH_LEAVING);
-
-       DBG_8723A_LEVEL(_drv_always_, "start auth\n");
-       issue_auth(padapter, NULL, 0);
-
-       set_link_timer(pmlmeext, REAUTH_TO);
-}
-
-static void start_clnt_assoc(struct rtw_adapter *padapter)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       del_timer_sync(&pmlmeext->link_timer);
-
-       pmlmeinfo->state &= (~(WIFI_FW_AUTH_NULL | WIFI_FW_AUTH_STATE));
-       pmlmeinfo->state |= (WIFI_FW_AUTH_SUCCESS | WIFI_FW_ASSOC_STATE);
-
-       issue_assocreq(padapter);
-
-       set_link_timer(pmlmeext, REASSOC_TO);
-}
-
-int receive_disconnect23a(struct rtw_adapter *padapter,
-                         unsigned char *MacAddr, unsigned short reason)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       /* check A3 */
-       if (!ether_addr_equal(MacAddr, get_my_bssid23a(&pmlmeinfo->network)))
-               return _SUCCESS;
-
-       DBG_8723A("%s\n", __func__);
-
-       if ((pmlmeinfo->state&0x03) == MSR_INFRA) {
-               if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) {
-                       pmlmeinfo->state = MSR_NOLINK;
-                       report_del_sta_event23a(padapter, MacAddr, reason);
-
-               } else if (pmlmeinfo->state & WIFI_FW_LINKING_STATE) {
-                       pmlmeinfo->state = MSR_NOLINK;
-                       report_join_res23a(padapter, -2);
-               }
-       }
-
-       return _SUCCESS;
-}
-
-static void process_80211d(struct rtw_adapter *padapter,
-                          struct wlan_bssid_ex *bssid)
-{
-       struct registry_priv *pregistrypriv;
-       struct mlme_ext_priv *pmlmeext;
-       struct rt_channel_info *chplan_new;
-       u8 channel;
-       u8 i;
-
-       pregistrypriv = &padapter->registrypriv;
-       pmlmeext = &padapter->mlmeextpriv;
-
-       /*  Adjust channel plan by AP Country IE */
-       if (pregistrypriv->enable80211d &&
-           !pmlmeext->update_channel_plan_by_ap_done) {
-               const u8 *ie, *p;
-               struct rt_channel_plan chplan_ap;
-               struct rt_channel_info chplan_sta[MAX_CHANNEL_NUM];
-               u8 country[4];
-               u8 fcn; /*  first channel number */
-               u8 noc; /*  number of channel */
-               u8 j, k;
-
-               ie = cfg80211_find_ie(WLAN_EID_COUNTRY, bssid->IEs,
-                                     bssid->IELength);
-               if (!ie || ie[1] < IEEE80211_COUNTRY_IE_MIN_LEN)
-                       return;
-
-               p = ie + 2;
-               ie += ie[1];
-               ie += 2;
-
-               memcpy(country, p, 3);
-               country[3] = '\0';
-
-               p += 3;
-               RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
-                        "%s: 802.11d country =%s\n", __func__, country);
-
-               i = 0;
-               while ((ie - p) >= 3) {
-                       fcn = *(p++);
-                       noc = *(p++);
-                       p++;
-
-                       for (j = 0; j < noc; j++) {
-                               if (fcn <= 14)
-                                       channel = fcn + j; /*  2.4 GHz */
-                               else
-                                       channel = fcn + j * 4; /*  5 GHz */
-
-                               chplan_ap.Channel[i++] = channel;
-                       }
-               }
-               chplan_ap.Len = i;
-
-               memcpy(chplan_sta, pmlmeext->channel_set, sizeof(chplan_sta));
-               memset(pmlmeext->channel_set, 0, sizeof(pmlmeext->channel_set));
-               chplan_new = pmlmeext->channel_set;
-
-               i = j = k = 0;
-               if (pregistrypriv->wireless_mode & WIRELESS_11G) {
-                       do {
-                               if (i == MAX_CHANNEL_NUM ||
-                                   chplan_sta[i].ChannelNum == 0 ||
-                                   chplan_sta[i].ChannelNum > 14)
-                                       break;
-
-                               if (j == chplan_ap.Len ||
-                                   chplan_ap.Channel[j] > 14)
-                                       break;
-
-                               if (chplan_sta[i].ChannelNum ==
-                                   chplan_ap.Channel[j]) {
-                                       chplan_new[k].ChannelNum =
-                                               chplan_ap.Channel[j];
-                                       chplan_new[k].ScanType = SCAN_ACTIVE;
-                                       i++;
-                                       j++;
-                                       k++;
-                               } else if (chplan_sta[i].ChannelNum <
-                                          chplan_ap.Channel[j]) {
-                                       chplan_new[k].ChannelNum =
-                                               chplan_sta[i].ChannelNum;
-                                       chplan_new[k].ScanType =
-                                               SCAN_PASSIVE;
-                                       i++;
-                                       k++;
-                               } else if (chplan_sta[i].ChannelNum >
-                                          chplan_ap.Channel[j]) {
-                                       chplan_new[k].ChannelNum =
-                                               chplan_ap.Channel[j];
-                                       chplan_new[k].ScanType =
-                                               SCAN_ACTIVE;
-                                       j++;
-                                       k++;
-                               }
-                       } while (1);
-
-                       /*  change AP not support channel to Passive scan */
-                       while (i < MAX_CHANNEL_NUM &&
-                              chplan_sta[i].ChannelNum != 0 &&
-                              chplan_sta[i].ChannelNum <= 14) {
-                               chplan_new[k].ChannelNum =
-                                       chplan_sta[i].ChannelNum;
-                               chplan_new[k].ScanType = SCAN_PASSIVE;
-                               i++;
-                               k++;
-                       }
-
-                       /*  add channel AP supported */
-                       while (j < chplan_ap.Len && chplan_ap.Channel[j] <= 14){
-                               chplan_new[k].ChannelNum = chplan_ap.Channel[j];
-                               chplan_new[k].ScanType = SCAN_ACTIVE;
-                               j++;
-                               k++;
-                       }
-               } else {
-                       /*  keep original STA 2.4G channel plan */
-                       while (i < MAX_CHANNEL_NUM &&
-                              chplan_sta[i].ChannelNum != 0 &&
-                              chplan_sta[i].ChannelNum <= 14) {
-                               chplan_new[k].ChannelNum =
-                                       chplan_sta[i].ChannelNum;
-                               chplan_new[k].ScanType = chplan_sta[i].ScanType;
-                               i++;
-                               k++;
-                       }
-
-                       /*  skip AP 2.4G channel plan */
-                       while (j < chplan_ap.Len && chplan_ap.Channel[j] <= 14)
-                               j++;
-               }
-
-               if (pregistrypriv->wireless_mode & WIRELESS_11A) {
-                       do {
-                               if (i == MAX_CHANNEL_NUM ||
-                                   chplan_sta[i].ChannelNum == 0)
-                                       break;
-
-                               if (j == chplan_ap.Len ||
-                                   chplan_ap.Channel[j] == 0)
-                                       break;
-
-                               if (chplan_sta[i].ChannelNum ==
-                                   chplan_ap.Channel[j]) {
-                                       chplan_new[k].ChannelNum =
-                                               chplan_ap.Channel[j];
-                                       chplan_new[k].ScanType = SCAN_ACTIVE;
-                                       i++;
-                                       j++;
-                                       k++;
-                               } else if (chplan_sta[i].ChannelNum <
-                                          chplan_ap.Channel[j]) {
-                                       chplan_new[k].ChannelNum =
-                                               chplan_sta[i].ChannelNum;
-                                       chplan_new[k].ScanType = SCAN_PASSIVE;
-                                       i++;
-                                       k++;
-                               } else if (chplan_sta[i].ChannelNum >
-                                          chplan_ap.Channel[j]) {
-                                       chplan_new[k].ChannelNum =
-                                               chplan_ap.Channel[j];
-                                       chplan_new[k].ScanType = SCAN_ACTIVE;
-                                       j++;
-                                       k++;
-                               }
-                       } while (1);
-
-                       /*  change AP not support channel to Passive scan */
-                       while (i < MAX_CHANNEL_NUM &&
-                              chplan_sta[i].ChannelNum != 0) {
-                               chplan_new[k].ChannelNum =
-                                       chplan_sta[i].ChannelNum;
-                               chplan_new[k].ScanType = SCAN_PASSIVE;
-                               i++;
-                               k++;
-                       }
-
-                       /*  add channel AP supported */
-                       while (j < chplan_ap.Len && chplan_ap.Channel[j] != 0) {
-                               chplan_new[k].ChannelNum = chplan_ap.Channel[j];
-                               chplan_new[k].ScanType = SCAN_ACTIVE;
-                               j++;
-                               k++;
-                       }
-               } else {
-                       /*  keep original STA 5G channel plan */
-                       while (i < MAX_CHANNEL_NUM &&
-                              chplan_sta[i].ChannelNum != 0) {
-                               chplan_new[k].ChannelNum =
-                                       chplan_sta[i].ChannelNum;
-                               chplan_new[k].ScanType = chplan_sta[i].ScanType;
-                               i++;
-                               k++;
-                       }
-               }
-               pmlmeext->update_channel_plan_by_ap_done = 1;
-       }
-
-       /*  If channel is used by AP, set channel scan type to active */
-       channel = bssid->DSConfig;
-       chplan_new = pmlmeext->channel_set;
-       i = 0;
-       while (i < MAX_CHANNEL_NUM && chplan_new[i].ChannelNum != 0) {
-               if (chplan_new[i].ChannelNum == channel) {
-                       if (chplan_new[i].ScanType == SCAN_PASSIVE) {
-                               /* 5G Bnad 2, 3 (DFS) doesn't change
-                                  to active scan */
-                               if (channel >= 52 && channel <= 144)
-                                       break;
-
-                               chplan_new[i].ScanType = SCAN_ACTIVE;
-                               RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
-                                        "%s: change channel %d scan type from passive to active\n",
-                                        __func__, channel);
-                       }
-                       break;
-               }
-               i++;
-       }
-}
-
-/****************************************************************************
-
-Following are the functions to report events
-
-*****************************************************************************/
-
-void report_survey_event23a(struct rtw_adapter *padapter,
-                           struct recv_frame *precv_frame)
-{
-       struct cmd_obj *pcmd_obj;
-       u8 *pevtcmd;
-       u32 cmdsz;
-       struct survey_event *psurvey_evt;
-       struct C2HEvent_Header *pc2h_evt_hdr;
-       struct mlme_ext_priv *pmlmeext;
-       struct cmd_priv *pcmdpriv;
-
-       if (!padapter)
-               return;
-
-       pmlmeext = &padapter->mlmeextpriv;
-       pcmdpriv = &padapter->cmdpriv;
-
-       pcmd_obj = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
-       if (!pcmd_obj)
-               return;
-
-       cmdsz = sizeof(struct survey_event) + sizeof(struct C2HEvent_Header);
-       pevtcmd = kzalloc(cmdsz, GFP_ATOMIC);
-       if (!pevtcmd) {
-               kfree(pcmd_obj);
-               return;
-       }
-
-       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
-       pcmd_obj->cmdsz = cmdsz;
-       pcmd_obj->parmbuf = pevtcmd;
-
-       pcmd_obj->rsp = NULL;
-       pcmd_obj->rspsz  = 0;
-
-       pc2h_evt_hdr = (struct C2HEvent_Header *)(pevtcmd);
-       pc2h_evt_hdr->len = sizeof(struct survey_event);
-       pc2h_evt_hdr->ID = GEN_EVT_CODE(_Survey);
-       pc2h_evt_hdr->seq = atomic_inc_return(&pmlmeext->event_seq);
-
-       psurvey_evt = (struct survey_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
-
-       psurvey_evt->bss = collect_bss_info(padapter, precv_frame);
-       if (!psurvey_evt->bss) {
-               kfree(pcmd_obj);
-               kfree(pevtcmd);
-               return;
-       }
-
-       process_80211d(padapter, psurvey_evt->bss);
-
-       rtw_enqueue_cmd23a(pcmdpriv, pcmd_obj);
-
-       pmlmeext->sitesurvey_res.bss_cnt++;
-}
-
-void report_surveydone_event23a(struct rtw_adapter *padapter)
-{
-       struct cmd_obj *pcmd_obj;
-       u8 *pevtcmd;
-       u32 cmdsz;
-       struct surveydone_event *psurveydone_evt;
-       struct C2HEvent_Header *pc2h_evt_hdr;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
-
-       pcmd_obj = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
-       if (!pcmd_obj)
-               return;
-
-       cmdsz = sizeof(struct surveydone_event) + sizeof(struct C2HEvent_Header);
-       pevtcmd = kzalloc(cmdsz, GFP_ATOMIC);
-       if (!pevtcmd) {
-               kfree(pcmd_obj);
-               return;
-       }
-
-       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
-       pcmd_obj->cmdsz = cmdsz;
-       pcmd_obj->parmbuf = pevtcmd;
-
-       pcmd_obj->rsp = NULL;
-       pcmd_obj->rspsz  = 0;
-
-       pc2h_evt_hdr = (struct C2HEvent_Header *)(pevtcmd);
-       pc2h_evt_hdr->len = sizeof(struct surveydone_event);
-       pc2h_evt_hdr->ID = GEN_EVT_CODE(_SurveyDone);
-       pc2h_evt_hdr->seq = atomic_inc_return(&pmlmeext->event_seq);
-
-       psurveydone_evt = (struct surveydone_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
-       psurveydone_evt->bss_cnt = pmlmeext->sitesurvey_res.bss_cnt;
-
-       DBG_8723A("survey done event(%x)\n", psurveydone_evt->bss_cnt);
-
-       rtw_enqueue_cmd23a(pcmdpriv, pcmd_obj);
-}
-
-void report_join_res23a(struct rtw_adapter *padapter, int res)
-{
-       struct cmd_obj *pcmd_obj;
-       u8 *pevtcmd;
-       u32 cmdsz;
-       struct joinbss_event            *pjoinbss_evt;
-       struct C2HEvent_Header  *pc2h_evt_hdr;
-       struct mlme_ext_priv            *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
-
-       pcmd_obj = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
-       if (!pcmd_obj)
-               return;
-
-       cmdsz = sizeof(struct joinbss_event) + sizeof(struct C2HEvent_Header);
-       pevtcmd = kzalloc(cmdsz, GFP_ATOMIC);
-       if (!pevtcmd) {
-               kfree(pcmd_obj);
-               return;
-       }
-
-       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
-       pcmd_obj->cmdsz = cmdsz;
-       pcmd_obj->parmbuf = pevtcmd;
-
-       pcmd_obj->rsp = NULL;
-       pcmd_obj->rspsz  = 0;
-
-       pc2h_evt_hdr = (struct C2HEvent_Header *)(pevtcmd);
-       pc2h_evt_hdr->len = sizeof(struct joinbss_event);
-       pc2h_evt_hdr->ID = GEN_EVT_CODE(_JoinBss);
-       pc2h_evt_hdr->seq = atomic_inc_return(&pmlmeext->event_seq);
-
-       pjoinbss_evt = (struct joinbss_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
-       memcpy((unsigned char *)&pjoinbss_evt->network.network,
-              &pmlmeinfo->network, sizeof(struct wlan_bssid_ex));
-       pjoinbss_evt->network.join_res = res;
-
-       DBG_8723A("report_join_res23a(%d)\n", res);
-
-       rtw_joinbss_event_prehandle23a(padapter, (u8 *)&pjoinbss_evt->network);
-
-       rtw_enqueue_cmd23a(pcmdpriv, pcmd_obj);
-}
-
-void report_del_sta_event23a(struct rtw_adapter *padapter,
-                            unsigned char *MacAddr, unsigned short reason)
-{
-       struct cmd_obj *pcmd_obj;
-       u8 *pevtcmd;
-       u32 cmdsz;
-       struct sta_info *psta;
-       int mac_id;
-       struct stadel_event *pdel_sta_evt;
-       struct C2HEvent_Header *pc2h_evt_hdr;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
-
-       pcmd_obj = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
-       if (!pcmd_obj)
-               return;
-
-       cmdsz = sizeof(struct stadel_event) + sizeof(struct C2HEvent_Header);
-       pevtcmd = kzalloc(cmdsz, GFP_ATOMIC);
-       if (!pevtcmd) {
-               kfree(pcmd_obj);
-               return;
-       }
-
-       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
-       pcmd_obj->cmdsz = cmdsz;
-       pcmd_obj->parmbuf = pevtcmd;
-
-       pcmd_obj->rsp = NULL;
-       pcmd_obj->rspsz  = 0;
-
-       pc2h_evt_hdr = (struct C2HEvent_Header *)(pevtcmd);
-       pc2h_evt_hdr->len = sizeof(struct stadel_event);
-       pc2h_evt_hdr->ID = GEN_EVT_CODE(_DelSTA);
-       pc2h_evt_hdr->seq = atomic_inc_return(&pmlmeext->event_seq);
-
-       pdel_sta_evt = (struct stadel_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
-       ether_addr_copy((unsigned char *)&pdel_sta_evt->macaddr, MacAddr);
-       memcpy((unsigned char *)pdel_sta_evt->rsvd, (unsigned char *)&reason,
-              2);
-
-       psta = rtw_get_stainfo23a(&padapter->stapriv, MacAddr);
-       if (psta)
-               mac_id = (int)psta->mac_id;
-       else
-               mac_id = -1;
-
-       pdel_sta_evt->mac_id = mac_id;
-
-       DBG_8723A("report_del_sta_event23a: delete STA, mac_id =%d\n", mac_id);
-
-       rtw_enqueue_cmd23a(pcmdpriv, pcmd_obj);
-}
-
-void report_add_sta_event23a(struct rtw_adapter *padapter,
-                            unsigned char *MacAddr, int cam_idx)
-{
-       struct cmd_obj *pcmd_obj;
-       u8 *pevtcmd;
-       u32 cmdsz;
-       struct stassoc_event *padd_sta_evt;
-       struct C2HEvent_Header *pc2h_evt_hdr;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
-
-       pcmd_obj = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
-       if (!pcmd_obj)
-               return;
-
-       cmdsz = sizeof(struct stassoc_event) + sizeof(struct C2HEvent_Header);
-       pevtcmd = kzalloc(cmdsz, GFP_ATOMIC);
-       if (!pevtcmd) {
-               kfree(pcmd_obj);
-               return;
-       }
-
-       pcmd_obj->cmdcode = GEN_CMD_CODE(_Set_MLME_EVT);
-       pcmd_obj->cmdsz = cmdsz;
-       pcmd_obj->parmbuf = pevtcmd;
-
-       pcmd_obj->rsp = NULL;
-       pcmd_obj->rspsz  = 0;
-
-       pc2h_evt_hdr = (struct C2HEvent_Header *)(pevtcmd);
-       pc2h_evt_hdr->len = sizeof(struct stassoc_event);
-       pc2h_evt_hdr->ID = GEN_EVT_CODE(_AddSTA);
-       pc2h_evt_hdr->seq = atomic_inc_return(&pmlmeext->event_seq);
-
-       padd_sta_evt = (struct stassoc_event*)(pevtcmd + sizeof(struct C2HEvent_Header));
-       ether_addr_copy((unsigned char *)&padd_sta_evt->macaddr, MacAddr);
-       padd_sta_evt->cam_id = cam_idx;
-
-       DBG_8723A("report_add_sta_event23a: add STA\n");
-
-       rtw_enqueue_cmd23a(pcmdpriv, pcmd_obj);
-}
-
-/****************************************************************************
-
-Following are the event callback functions
-
-*****************************************************************************/
-
-/* for sta/adhoc mode */
-void update_sta_info23a(struct rtw_adapter *padapter, struct sta_info *psta)
-{
-       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       /* ERP */
-       VCS_update23a(padapter, psta);
-
-       /* HT */
-       if (pmlmepriv->htpriv.ht_option) {
-               psta->htpriv.ht_option = true;
-
-               psta->htpriv.ampdu_enable = pmlmepriv->htpriv.ampdu_enable;
-
-               if (support_short_GI23a(padapter, &pmlmeinfo->ht_cap))
-                       psta->htpriv.sgi = true;
-
-               psta->qos_option = true;
-
-       } else {
-               psta->htpriv.ht_option = false;
-
-               psta->htpriv.ampdu_enable = false;
-
-               psta->htpriv.sgi = false;
-               psta->qos_option = false;
-
-       }
-       psta->htpriv.bwmode = pmlmeext->cur_bwmode;
-       psta->htpriv.ch_offset = pmlmeext->cur_ch_offset;
-
-       psta->htpriv.agg_enable_bitmap = 0x0;/* reset */
-       psta->htpriv.candidate_tid_bitmap = 0x0;/* reset */
-
-       /* QoS */
-       if (pmlmepriv->qos_option)
-               psta->qos_option = true;
-
-       psta->state = _FW_LINKED;
-}
-
-void mlmeext_joinbss_event_callback23a(struct rtw_adapter *padapter,
-                                      int join_res)
-{
-       struct sta_info *psta, *psta_bmc;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *cur_network = &pmlmeinfo->network;
-       struct sta_priv *pstapriv = &padapter->stapriv;
-
-       if (join_res < 0) {
-               hw_var_set_mlme_join(padapter, 1);
-               hw_var_set_bssid(padapter, null_addr);
-
-               /* restore to initial setting. */
-               update_tx_basic_rate23a(padapter,
-                                       padapter->registrypriv.wireless_mode);
-
-               goto exit_mlmeext_joinbss_event_callback23a;
-       }
-
-       if ((pmlmeinfo->state&0x03) == MSR_ADHOC) {
-               /* for bc/mc */
-               psta_bmc = rtw_get_bcmc_stainfo23a(padapter);
-               if (psta_bmc) {
-                       pmlmeinfo->FW_sta_info[psta_bmc->mac_id].psta = psta_bmc;
-                       update_bmc_sta_support_rate23a(padapter, psta_bmc->mac_id);
-                       Update_RA_Entry23a(padapter, psta_bmc);
-               }
-       }
-
-       /* turn on dynamic functions */
-       rtl8723a_odm_support_ability_set(padapter, DYNAMIC_ALL_FUNC_ENABLE);
-
-       /*  update IOT-releated issue */
-       update_IOT_info23a(padapter);
-
-       HalSetBrateCfg23a(padapter, cur_network->SupportedRates);
-
-       /* BCN interval */
-       rtl8723a_set_beacon_interval(padapter, pmlmeinfo->bcn_interval);
-
-       /* update capability */
-       update_capinfo23a(padapter, pmlmeinfo->capability);
-
-       /* WMM, Update EDCA param */
-       WMMOnAssocRsp23a(padapter);
-
-       /* HT */
-       HTOnAssocRsp23a(padapter);
-
-       /* Set cur_channel&cur_bwmode&cur_ch_offset */
-       set_channel_bwmode23a(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
-
-       psta = rtw_get_stainfo23a(pstapriv, cur_network->MacAddress);
-       if (psta) { /* only for infra. mode */
-               pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
-
-               /* DBG_8723A("set_sta_rate23a\n"); */
-
-               psta->wireless_mode = pmlmeext->cur_wireless_mode;
-
-               /* set per sta rate after updating HT cap. */
-               set_sta_rate23a(padapter, psta);
-       }
-
-       hw_var_set_mlme_join(padapter, 2);
-
-       if ((pmlmeinfo->state&0x03) == MSR_INFRA) {
-               /*  correcting TSF */
-               rtw_correct_TSF(padapter);
-
-               /* set_link_timer(pmlmeext, DISCONNECT_TO); */
-       }
-
-       rtw_lps_ctrl_wk_cmd23a(padapter, LPS_CTRL_CONNECT, 0);
-
-exit_mlmeext_joinbss_event_callback23a:
-       DBG_8723A("=>%s\n", __func__);
-}
-
-void mlmeext_sta_add_event_callback23a(struct rtw_adapter *padapter,
-                                      struct sta_info *psta)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       DBG_8723A("%s\n", __func__);
-
-       if ((pmlmeinfo->state & 0x03) == MSR_ADHOC) {
-       /* adhoc master or sta_count>1 */
-               if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) {
-                       /* nothing to do */
-               } else { /* adhoc client */
-                       /*  correcting TSF */
-                       rtw_correct_TSF(padapter);
-
-                       /* start beacon */
-                       if (send_beacon23a(padapter) != _SUCCESS) {
-                               pmlmeinfo->FW_sta_info[psta->mac_id].status = 0;
-
-                               pmlmeinfo->state ^= MSR_ADHOC;
-
-                               return;
-                       }
-
-                       pmlmeinfo->state |= WIFI_FW_ASSOC_SUCCESS;
-               }
-               hw_var_set_mlme_join(padapter, 2);
-       }
-
-       pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
-
-       /* rate radaptive */
-       Update_RA_Entry23a(padapter, psta);
-
-       /* update adhoc sta_info */
-       update_sta_info23a(padapter, psta);
-}
-
-void mlmeext_sta_del_event_callback23a(struct rtw_adapter *padapter)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       if (is_client_associated_to_ap23a(padapter) ||
-           is_IBSS_empty23a(padapter)) {
-               /* set_opmode_cmd(padapter, infra_client_with_mlme); */
-
-               hw_var_set_mlme_disconnect(padapter);
-               hw_var_set_bssid(padapter, null_addr);
-
-               /* restore to initial setting. */
-               update_tx_basic_rate23a(padapter,
-                                       padapter->registrypriv.wireless_mode);
-
-               /* switch to the 20M Hz mode after disconnect */
-               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
-               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
-
-               set_channel_bwmode23a(padapter, pmlmeext->cur_channel,
-                                     pmlmeext->cur_ch_offset,
-                                     pmlmeext->cur_bwmode);
-
-               flush_all_cam_entry23a(padapter);
-
-               pmlmeinfo->state = MSR_NOLINK;
-
-               /* set MSR to no link state -> infra. mode */
-               rtl8723a_set_media_status(padapter, MSR_INFRA);
-
-               del_timer_sync(&pmlmeext->link_timer);
-       }
-}
-
-static u8 chk_ap_is_alive(struct rtw_adapter *padapter, struct sta_info *psta)
-{
-       u8 ret = false;
-
-       if (sta_rx_data_pkts(psta) == sta_last_rx_data_pkts(psta) &&
-           sta_rx_beacon_pkts(psta) == sta_last_rx_beacon_pkts(psta) &&
-           sta_rx_probersp_pkts(psta) == sta_last_rx_probersp_pkts(psta))
-               ret = false;
-       else
-               ret = true;
-
-       sta_update_last_rx_pkts(psta);
-       return ret;
-}
-
-void linked_status_chk23a(struct rtw_adapter *padapter)
-{
-       u32 i;
-       struct sta_info *psta;
-       struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct sta_priv *pstapriv = &padapter->stapriv;
-
-       if (is_client_associated_to_ap23a(padapter)) {
-               /* linked infrastructure client mode */
-
-               int tx_chk = _SUCCESS, rx_chk = _SUCCESS;
-               int rx_chk_limit;
-
-               rx_chk_limit = 4;
-
-               psta = rtw_get_stainfo23a(pstapriv,
-                                         pmlmeinfo->network.MacAddress);
-               if (psta) {
-                       bool is_p2p_enable = false;
-
-                       if (chk_ap_is_alive(padapter, psta) == false)
-                               rx_chk = _FAIL;
-
-                       if (pxmitpriv->last_tx_pkts == pxmitpriv->tx_pkts)
-                               tx_chk = _FAIL;
-
-                       if (pmlmeext->active_keep_alive_check &&
-                           (rx_chk == _FAIL || tx_chk == _FAIL)) {
-                               u8 backup_oper_channel = 0;
-
-                               /* switch to correct channel of current
-                                  network  before issue keep-alive frames */
-                               if (rtw_get_oper_ch23a(padapter) !=
-                                   pmlmeext->cur_channel) {
-                                       backup_oper_channel =
-                                               rtw_get_oper_ch23a(padapter);
-                                       SelectChannel23a(padapter,
-                                                        pmlmeext->cur_channel);
-                               }
-
-                               if (rx_chk != _SUCCESS)
-                                       issue_probereq_ex(padapter, &pmlmeinfo->network.Ssid, psta->hwaddr, 3, 1);
-
-                               if ((tx_chk != _SUCCESS &&
-                                    pmlmeinfo->link_count++ == 0xf) ||
-                                   rx_chk != _SUCCESS) {
-                                       tx_chk = issue_nulldata23a(padapter,
-                                                                  psta->hwaddr,
-                                                                  0, 3, 1);
-                                       /* if tx acked and p2p disabled,
-                                          set rx_chk _SUCCESS to reset retry
-                                          count */
-                                       if (tx_chk == _SUCCESS &&
-                                           !is_p2p_enable)
-                                               rx_chk = _SUCCESS;
-                               }
-
-                               /* back to the original operation channel */
-                               if (backup_oper_channel>0)
-                                       SelectChannel23a(padapter,
-                                                        backup_oper_channel);
-                       } else {
-                               if (rx_chk != _SUCCESS) {
-                                       if (pmlmeext->retry == 0) {
-                                               issue_probereq(padapter, &pmlmeinfo->network.Ssid, pmlmeinfo->network.MacAddress);
-                                               issue_probereq(padapter, &pmlmeinfo->network.Ssid, pmlmeinfo->network.MacAddress);
-                                               issue_probereq(padapter, &pmlmeinfo->network.Ssid, pmlmeinfo->network.MacAddress);
-                                       }
-                               }
-
-                               if (tx_chk != _SUCCESS &&
-                                   pmlmeinfo->link_count++ == 0xf)
-                                       tx_chk = issue_nulldata23a(padapter,
-                                                                  NULL, 0, 1,
-                                                                  0);
-                       }
-
-                       if (rx_chk == _FAIL) {
-                               pmlmeext->retry++;
-                               if (pmlmeext->retry > rx_chk_limit) {
-                                       DBG_8723A_LEVEL(_drv_always_,
-                                                       "%s(%s): disconnect or "
-                                                       "roaming\n", __func__,
-                                                       padapter->pnetdev->name);
-                                       receive_disconnect23a(padapter, pmlmeinfo->network.MacAddress,
-                                               WLAN_REASON_EXPIRATION_CHK);
-                                       return;
-                               }
-                       } else
-                               pmlmeext->retry = 0;
-
-                       if (tx_chk == _FAIL)
-                               pmlmeinfo->link_count &= 0xf;
-                       else {
-                               pxmitpriv->last_tx_pkts = pxmitpriv->tx_pkts;
-                               pmlmeinfo->link_count = 0;
-                       }
-
-               }
-       } else if (is_client_associated_to_ibss23a(padapter)) {
-               /* linked IBSS mode */
-               /* for each assoc list entry to check the rx pkt counter */
-               for (i = IBSS_START_MAC_ID; i < NUM_STA; i++) {
-                       if (pmlmeinfo->FW_sta_info[i].status == 1) {
-                               psta = pmlmeinfo->FW_sta_info[i].psta;
-
-                               if (!psta)
-                                       continue;
-
-                               if (pmlmeinfo->FW_sta_info[i].rx_pkt ==
-                                   sta_rx_pkts(psta)) {
-
-                                       if (pmlmeinfo->FW_sta_info[i].retry<3) {
-                                               pmlmeinfo->FW_sta_info[i].retry++;
-                                       } else {
-                                               pmlmeinfo->FW_sta_info[i].retry = 0;
-                                               pmlmeinfo->FW_sta_info[i].status = 0;
-                                               report_del_sta_event23a(padapter, psta->hwaddr,
-                                                       65535/*  indicate disconnect caused by no rx */
-                                               );
-                                       }
-                               } else {
-                                       pmlmeinfo->FW_sta_info[i].retry = 0;
-                                       pmlmeinfo->FW_sta_info[i].rx_pkt = (u32)sta_rx_pkts(psta);
-                               }
-                       }
-               }
-               /* set_link_timer(pmlmeext, DISCONNECT_TO); */
-       }
-}
-
-static void survey_timer_hdl(unsigned long data)
-{
-       struct rtw_adapter *padapter = (struct rtw_adapter *)data;
-       struct cmd_obj *ph2c;
-       struct sitesurvey_parm *psurveyPara;
-       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       /* issue rtw_sitesurvey_cmd23a */
-       if (pmlmeext->sitesurvey_res.state > SCAN_START) {
-               if (pmlmeext->sitesurvey_res.state ==  SCAN_PROCESS)
-                       pmlmeext->sitesurvey_res.channel_idx++;
-
-               if (pmlmeext->scan_abort == true) {
-                       pmlmeext->sitesurvey_res.channel_idx =
-                               pmlmeext->sitesurvey_res.ch_num;
-                       DBG_8723A("%s idx:%d\n", __func__,
-                                 pmlmeext->sitesurvey_res.channel_idx);
-
-                       pmlmeext->scan_abort = false;/* reset */
-               }
-
-               ph2c = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
-               if (!ph2c)
-                       goto exit_survey_timer_hdl;
-
-               psurveyPara = kzalloc(sizeof(struct sitesurvey_parm),
-                                       GFP_ATOMIC);
-               if (!psurveyPara) {
-                       kfree(ph2c);
-                       goto exit_survey_timer_hdl;
-               }
-
-               init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara,
-                                          GEN_CMD_CODE(_SiteSurvey));
-               rtw_enqueue_cmd23a(pcmdpriv, ph2c);
-       }
-
-exit_survey_timer_hdl:
-       return;
-}
-
-static void link_timer_hdl(unsigned long data)
-{
-       struct rtw_adapter *padapter = (struct rtw_adapter *)data;
-       /* static unsigned int          rx_pkt = 0; */
-       /* static u64                           tx_cnt = 0; */
-       /* struct xmit_priv *pxmitpriv = &padapter->xmitpriv; */
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       /* struct sta_priv              *pstapriv = &padapter->stapriv; */
-
-       if (pmlmeinfo->state & WIFI_FW_AUTH_NULL) {
-               DBG_8723A("link_timer_hdl:no beacon while connecting\n");
-               pmlmeinfo->state = MSR_NOLINK;
-               report_join_res23a(padapter, -3);
-       } else if (pmlmeinfo->state & WIFI_FW_AUTH_STATE) {
-               /* re-auth timer */
-               if (++pmlmeinfo->reauth_count > REAUTH_LIMIT) {
-                       /* if (pmlmeinfo->auth_algo != dot11AuthAlgrthm_Auto) */
-                       /*  */
-                               pmlmeinfo->state = 0;
-                               report_join_res23a(padapter, -1);
-                               return;
-                       /*  */
-                       /* else */
-                       /*  */
-                       /* pmlmeinfo->auth_algo = dot11AuthAlgrthm_Shared; */
-                       /* pmlmeinfo->reauth_count = 0; */
-                       /*  */
-               }
-
-               DBG_8723A("link_timer_hdl: auth timeout and try again\n");
-               pmlmeinfo->auth_seq = 1;
-               issue_auth(padapter, NULL, 0);
-               set_link_timer(pmlmeext, REAUTH_TO);
-       } else if (pmlmeinfo->state & WIFI_FW_ASSOC_STATE) {
-               /* re-assoc timer */
-               if (++pmlmeinfo->reassoc_count > REASSOC_LIMIT) {
-                       pmlmeinfo->state = MSR_NOLINK;
-                       report_join_res23a(padapter, -2);
-                       return;
-               }
-
-               DBG_8723A("link_timer_hdl: assoc timeout and try again\n");
-               issue_assocreq(padapter);
-               set_link_timer(pmlmeext, REASSOC_TO);
-       }
-}
-
-static void addba_timer_hdl(unsigned long data)
-{
-       struct sta_info *psta = (struct sta_info *)data;
-       struct ht_priv *phtpriv;
-
-       if (!psta)
-               return;
-
-       phtpriv = &psta->htpriv;
-
-       if (phtpriv->ht_option && phtpriv->ampdu_enable) {
-               if (phtpriv->candidate_tid_bitmap)
-                       phtpriv->candidate_tid_bitmap = 0x0;
-       }
-}
-
-void init_addba_retry_timer23a(struct sta_info *psta)
-{
-       setup_timer(&psta->addba_retry_timer, addba_timer_hdl,
-                   (unsigned long)psta);
-}
-
-void init_mlme_ext_timer23a(struct rtw_adapter *padapter)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       setup_timer(&pmlmeext->survey_timer, survey_timer_hdl,
-                   (unsigned long)padapter);
-
-       setup_timer(&pmlmeext->link_timer, link_timer_hdl,
-                   (unsigned long)padapter);
-}
-
-int NULL_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       return H2C_SUCCESS;
-}
-
-int setopmode_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       enum nl80211_iftype type;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       const struct setopmode_parm *psetop = (struct setopmode_parm *)pbuf;
-
-       switch (psetop->mode) {
-       case NL80211_IFTYPE_P2P_GO:
-       case NL80211_IFTYPE_AP:
-               pmlmeinfo->state = MSR_AP;
-               type = MSR_AP;
-               break;
-       case NL80211_IFTYPE_P2P_CLIENT:
-       case NL80211_IFTYPE_STATION:
-               /*  clear state */
-               pmlmeinfo->state &= ~(BIT(0)|BIT(1));
-               /* set to STATION_STATE */
-               pmlmeinfo->state |= MSR_INFRA;
-               type = MSR_INFRA;
-               break;
-       case NL80211_IFTYPE_ADHOC:
-               type = MSR_ADHOC;
-               break;
-       default:
-               type = MSR_NOLINK;
-               break;
-       }
-
-       hw_var_set_opmode(padapter, type);
-       /* Set_NETYPE0_MSR(padapter, type); */
-
-       return H2C_SUCCESS;
-}
-
-int createbss_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *pnetwork = &pmlmeinfo->network;
-       const struct wlan_bssid_ex *pparm = (struct wlan_bssid_ex *)pbuf;
-       /* u32  initialgain; */
-
-       if (pparm->ifmode == NL80211_IFTYPE_AP ||
-           pparm->ifmode == NL80211_IFTYPE_P2P_GO) {
-#ifdef CONFIG_8723AU_AP_MODE
-               if (pmlmeinfo->state == MSR_AP) {
-                       /* todo: */
-                       return H2C_SUCCESS;
-               }
-#endif
-       }
-
-       /* below is for ad-hoc master */
-       if (pparm->ifmode == NL80211_IFTYPE_ADHOC) {
-               rtw_joinbss_reset23a(padapter);
-
-               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
-               pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
-               pmlmeinfo->ERP_enable = 0;
-               pmlmeinfo->WMM_enable = 0;
-               pmlmeinfo->HT_enable = 0;
-               pmlmeinfo->HT_caps_enable = 0;
-               pmlmeinfo->HT_info_enable = 0;
-
-               /* disable dynamic functions, such as high power, DIG */
-               rtl8723a_odm_support_ability_backup(padapter);
-
-               rtl8723a_odm_support_ability_clr(padapter,
-                                                DYNAMIC_FUNC_DISABLE);
-
-               /* cancel link timer */
-               del_timer_sync(&pmlmeext->link_timer);
-
-               /* clear CAM */
-               flush_all_cam_entry23a(padapter);
-
-               if (pparm->IELength > MAX_IE_SZ)/* Check pbuf->IELength */
-                       return H2C_PARAMETERS_ERROR;
-
-               memcpy(pnetwork, pparm, sizeof(struct wlan_bssid_ex));
-
-               start_create_ibss(padapter);
-       }
-
-       return H2C_SUCCESS;
-}
-
-int join_cmd_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       struct registry_priv *pregpriv = &padapter->registrypriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *pnetwork = &pmlmeinfo->network;
-       const struct wlan_bssid_ex *pparm = (struct wlan_bssid_ex *)pbuf;
-       struct ieee80211_ht_operation *pht_info;
-       u32 i;
-       u8 *p;
-       /* u32  initialgain; */
-       /* u32  acparm; */
-
-       /* check already connecting to AP or not */
-       if (pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) {
-               if (pmlmeinfo->state & MSR_INFRA)
-                       issue_deauth_ex(padapter, pnetwork->MacAddress,
-                                       WLAN_REASON_DEAUTH_LEAVING, 5, 100);
-
-               pmlmeinfo->state = MSR_NOLINK;
-
-               /* clear CAM */
-               flush_all_cam_entry23a(padapter);
-
-               del_timer_sync(&pmlmeext->link_timer);
-
-               /* set MSR to nolink -> infra. mode */
-               rtl8723a_set_media_status(padapter, MSR_INFRA);
-
-               hw_var_set_mlme_disconnect(padapter);
-       }
-
-       rtw_joinbss_reset23a(padapter);
-
-       pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
-       pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
-       pmlmeinfo->ERP_enable = 0;
-       pmlmeinfo->WMM_enable = 0;
-       pmlmeinfo->HT_enable = 0;
-       pmlmeinfo->HT_caps_enable = 0;
-       pmlmeinfo->HT_info_enable = 0;
-       pmlmeinfo->bwmode_updated = false;
-       /* pmlmeinfo->assoc_AP_vendor = HT_IOT_PEER_MAX; */
-
-       if (pparm->IELength > MAX_IE_SZ)/* Check pbuf->IELength */
-               return H2C_PARAMETERS_ERROR;
-
-       memcpy(pnetwork, pbuf, sizeof(struct wlan_bssid_ex));
-
-       /* Check AP vendor to move rtw_joinbss_cmd23a() */
-       /* pmlmeinfo->assoc_AP_vendor = check_assoc_AP23a(pnetwork->IEs,
-          pnetwork->IELength); */
-
-       for (i = 0; i < pnetwork->IELength;) {
-               p = pnetwork->IEs + i;
-
-               switch (p[0]) {
-               case WLAN_EID_VENDOR_SPECIFIC:/* Get WMM IE. */
-                       if (!memcmp(p + 2, WMM_OUI23A, 4))
-                               pmlmeinfo->WMM_enable = 1;
-                       break;
-
-               case WLAN_EID_HT_CAPABILITY:    /* Get HT Cap IE. */
-                       pmlmeinfo->HT_caps_enable = 1;
-                       break;
-
-               case WLAN_EID_HT_OPERATION:     /* Get HT Info IE. */
-                       pmlmeinfo->HT_info_enable = 1;
-
-                       /* spec case only for cisco's ap because cisco's ap
-                        * issue assoc rsp using mcs rate @40MHz or @20MHz */
-                       pht_info = (struct ieee80211_ht_operation *)(p + 2);
-
-                       if (pregpriv->cbw40_enable &&
-                           (pht_info->ht_param &
-                            IEEE80211_HT_PARAM_CHAN_WIDTH_ANY)) {
-                               /* switch to the 40M Hz mode according to AP */
-                               pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
-                               switch (pht_info->ht_param &
-                                       IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
-                               case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
-                                       pmlmeext->cur_ch_offset =
-                                               HAL_PRIME_CHNL_OFFSET_LOWER;
-                                       break;
-
-                               case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
-                                       pmlmeext->cur_ch_offset =
-                                               HAL_PRIME_CHNL_OFFSET_UPPER;
-                                       break;
-
-                               default:
-                                       pmlmeext->cur_ch_offset =
-                                               HAL_PRIME_CHNL_OFFSET_DONT_CARE;
-                                       break;
-                               }
-
-                               DBG_8723A("set ch/bw before connected\n");
-                       }
-                       break;
-
-               default:
-                       break;
-               }
-
-               i += (p[1] + 2);
-       }
-
-       hw_var_set_bssid(padapter, pmlmeinfo->network.MacAddress);
-       hw_var_set_mlme_join(padapter, 0);
-
-       /* cancel link timer */
-       del_timer_sync(&pmlmeext->link_timer);
-
-       start_clnt_join(padapter);
-
-       return H2C_SUCCESS;
-}
-
-int disconnect_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       const struct disconnect_parm *param = (struct disconnect_parm *)pbuf;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct wlan_bssid_ex *pnetwork = &pmlmeinfo->network;
-
-       if (is_client_associated_to_ap23a(padapter)) {
-               issue_deauth_ex(padapter, pnetwork->MacAddress,
-                               WLAN_REASON_DEAUTH_LEAVING,
-                               param->deauth_timeout_ms/100, 100);
-       }
-
-       /* set_opmode_cmd(padapter, infra_client_with_mlme); */
-
-       /* pmlmeinfo->state = MSR_NOLINK; */
-
-       hw_var_set_mlme_disconnect(padapter);
-       hw_var_set_bssid(padapter, null_addr);
-
-       /* restore to initial setting. */
-       update_tx_basic_rate23a(padapter, padapter->registrypriv.wireless_mode);
-
-       if ((pmlmeinfo->state & 0x03) == MSR_ADHOC ||
-           (pmlmeinfo->state & 0x03) == MSR_AP)
-               rtl8723a_set_bcn_func(padapter, 0);     /* Stop BCN */
-
-       /* set MSR to no link state -> infra. mode */
-       rtl8723a_set_media_status(padapter, MSR_INFRA);
-
-       pmlmeinfo->state = MSR_NOLINK;
-
-       /* switch to the 20M Hz mode after disconnect */
-       pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_20;
-       pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
-
-       set_channel_bwmode23a(padapter, pmlmeext->cur_channel,
-                             pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
-
-       flush_all_cam_entry23a(padapter);
-
-       del_timer_sync(&pmlmeext->link_timer);
-
-       rtw_free_uc_swdec_pending_queue23a(padapter);
-
-       return H2C_SUCCESS;
-}
-
-static int
-rtw_scan_ch_decision(struct rtw_adapter *padapter,
-                    struct rtw_ieee80211_channel *out, u32 out_num,
-                    const struct rtw_ieee80211_channel *in, u32 in_num)
-{
-       int i, j;
-       int scan_ch_num = 0;
-       int set_idx;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       /* clear out first */
-       memset(out, 0, sizeof(struct rtw_ieee80211_channel)*out_num);
-
-       /* acquire channels from in */
-       j = 0;
-       for (i = 0;i<in_num;i++) {
-               if (in[i].hw_value &&
-                   !(in[i].flags & IEEE80211_CHAN_DISABLED) &&
-                   (set_idx = rtw_ch_set_search_ch23a(pmlmeext->channel_set,
-                                                      in[i].hw_value)) >= 0) {
-                       memcpy(&out[j], &in[i],
-                              sizeof(struct rtw_ieee80211_channel));
-
-                       if (pmlmeext->channel_set[set_idx].ScanType ==
-                           SCAN_PASSIVE)
-                               out[j].flags &= IEEE80211_CHAN_NO_IR;
-
-                       j++;
-               }
-               if (j>= out_num)
-                       break;
-       }
-
-       /* if out is empty, use channel_set as default */
-       if (j == 0) {
-               for (i = 0;i<pmlmeext->max_chan_nums;i++) {
-                       out[i].hw_value = pmlmeext->channel_set[i].ChannelNum;
-
-                       if (pmlmeext->channel_set[i].ScanType == SCAN_PASSIVE)
-                               out[i].flags &= IEEE80211_CHAN_NO_IR;
-
-                       j++;
-               }
-       }
-
-       if (padapter->setband == GHZ_24) {                      /*  2.4G */
-               for (i = 0; i < j ; i++) {
-                       if (out[i].hw_value > 35)
-                               memset(&out[i], 0,
-                                      sizeof(struct rtw_ieee80211_channel));
-                       else
-                               scan_ch_num++;
-               }
-               j = scan_ch_num;
-       } else if  (padapter->setband == GHZ_50) {              /*  5G */
-               for (i = 0; i < j ; i++) {
-                       if (out[i].hw_value > 35) {
-                               memcpy(&out[scan_ch_num++], &out[i],
-                                      sizeof(struct rtw_ieee80211_channel));
-                       }
-               }
-               j = scan_ch_num;
-       } else
-               {}
-
-       return j;
-}
-
-int sitesurvey_cmd_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       const struct sitesurvey_parm *pparm = (struct sitesurvey_parm *)pbuf;
-       u8 bdelayscan = false;
-       u32 initialgain;
-       u32 i;
-
-       if (pmlmeext->sitesurvey_res.state == SCAN_DISABLE) {
-               pmlmeext->sitesurvey_res.state = SCAN_START;
-               pmlmeext->sitesurvey_res.bss_cnt = 0;
-               pmlmeext->sitesurvey_res.channel_idx = 0;
-
-               for (i = 0; i < RTW_SSID_SCAN_AMOUNT; i++) {
-                       if (pparm->ssid[i].ssid_len) {
-                               memcpy(pmlmeext->sitesurvey_res.ssid[i].ssid,
-                                      pparm->ssid[i].ssid,
-                                      IEEE80211_MAX_SSID_LEN);
-                               pmlmeext->sitesurvey_res.ssid[i].ssid_len =
-                                       pparm->ssid[i].ssid_len;
-                       } else {
-                               pmlmeext->sitesurvey_res.ssid[i].ssid_len = 0;
-                       }
-               }
-
-               pmlmeext->sitesurvey_res.ch_num =
-                       rtw_scan_ch_decision(padapter,
-                                            pmlmeext->sitesurvey_res.ch,
-                                            RTW_CHANNEL_SCAN_AMOUNT,
-                                            pparm->ch, pparm->ch_num);
-
-               pmlmeext->sitesurvey_res.scan_mode = pparm->scan_mode;
-
-               /* issue null data if associating to the AP */
-               if (is_client_associated_to_ap23a(padapter)) {
-                       pmlmeext->sitesurvey_res.state = SCAN_TXNULL;
-
-                       /* switch to correct channel of current network
-                          before issue keep-alive frames */
-                       if (rtw_get_oper_ch23a(padapter) !=
-                           pmlmeext->cur_channel)
-                               SelectChannel23a(padapter,
-                                                pmlmeext->cur_channel);
-
-                       issue_nulldata23a(padapter, NULL, 1, 3, 500);
-
-                       bdelayscan = true;
-               }
-
-               if (bdelayscan) {
-                       /* delay 50ms to protect nulldata(1). */
-                       set_survey_timer(pmlmeext, 50);
-                       return H2C_SUCCESS;
-               }
-       }
-
-       if (pmlmeext->sitesurvey_res.state == SCAN_START ||
-           pmlmeext->sitesurvey_res.state == SCAN_TXNULL) {
-               /* disable dynamic functions, such as high power, DIG */
-               rtl8723a_odm_support_ability_backup(padapter);
-               rtl8723a_odm_support_ability_clr(padapter,
-                                                DYNAMIC_FUNC_DISABLE);
-
-               /* config the initial gain under scanning, need to
-                  write the BB registers */
-               if (wdev_to_priv(padapter->rtw_wdev)->p2p_enabled == true)
-                       initialgain = 0x30;
-               else
-                       initialgain = 0x1E;
-
-               rtl8723a_set_initial_gain(padapter, initialgain);
-
-               /* set MSR to no link state */
-               rtl8723a_set_media_status(padapter, MSR_NOLINK);
-
-               rtl8723a_mlme_sitesurvey(padapter, 1);
-
-               pmlmeext->sitesurvey_res.state = SCAN_PROCESS;
-       }
-
-       rtw_site_survey(padapter);
-
-       return H2C_SUCCESS;
-}
-
-int setauth_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       const struct setauth_parm *pparm = (struct setauth_parm *)pbuf;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-
-       if (pparm->mode < 4)
-               pmlmeinfo->auth_algo = pparm->mode;
-
-       return H2C_SUCCESS;
-}
-
-int setkey_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       unsigned short ctrl;
-       const struct setkey_parm *pparm = (struct setkey_parm *)pbuf;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
-
-       /* main tx key for wep. */
-       if (pparm->set_tx)
-               pmlmeinfo->key_index = pparm->keyid;
-
-       /* write cam */
-       ctrl = BIT(15) | (pparm->algorithm) << 2 | pparm->keyid;
-
-       DBG_8723A_LEVEL(_drv_always_, "set group key to hw: alg:%d(WEP40-1 "
-                       "WEP104-5 TKIP-2 AES-4) keyid:%d\n",
-                       pparm->algorithm, pparm->keyid);
-       rtl8723a_cam_write(padapter, pparm->keyid, ctrl, null_sta, pparm->key);
-
-       /* allow multicast packets to driver */
-       rtl8723a_on_rcr_am(padapter);
-
-       return H2C_SUCCESS;
-}
-
-int set_stakey_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       u16 ctrl = 0;
-       u8 cam_id;/* cam_entry */
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       const struct set_stakey_parm *pparm = (struct set_stakey_parm *)pbuf;
-
-       /* cam_entry: */
-       /* 0~3 for default key */
-
-       /* for concurrent mode (ap+sta): */
-       /* default key is disable, using sw encrypt/decrypt */
-       /* cam_entry = 4  for sta mode (macid = 0) */
-       /* cam_entry(macid+3) = 5 ~ N for ap mode (aid = 1~N, macid = 2 ~N) */
-
-       /* for concurrent mode (sta+sta): */
-       /* default key is disable, using sw encrypt/decrypt */
-       /* cam_entry = 4 mapping to macid = 0 */
-       /* cam_entry = 5 mapping to macid = 2 */
-
-       cam_id = 4;
-
-       DBG_8723A_LEVEL(_drv_always_, "set pairwise key to hw: alg:%d(WEP40-1 "
-                       "WEP104-5 TKIP-2 AES-4) camid:%d\n",
-                       pparm->algorithm, cam_id);
-       if ((pmlmeinfo->state & 0x03) == MSR_AP) {
-               struct sta_info *psta;
-               struct sta_priv *pstapriv = &padapter->stapriv;
-
-               if (pparm->algorithm == 0) {    /*  clear cam entry */
-                       clear_cam_entry23a(padapter, pparm->id);
-                       return H2C_SUCCESS_RSP;
-               }
-
-               psta = rtw_get_stainfo23a(pstapriv, pparm->addr);
-               if (psta) {
-                       ctrl = BIT(15) | (pparm->algorithm << 2);
-
-                       DBG_8723A("r871x_set_stakey_hdl23a(): enc_algorithm "
-                                 "=%d\n", pparm->algorithm);
-
-                       if (psta->mac_id < 1 || psta->mac_id > (NUM_STA - 4)) {
-                               DBG_8723A("r871x_set_stakey_hdl23a():set_stakey"
-                                         " failed, mac_id(aid) =%d\n",
-                                         psta->mac_id);
-                               return H2C_REJECTED;
-                       }
-
-                       /* 0~3 for default key, cmd_id = macid + 3,
-                          macid = aid+1; */
-                       cam_id = psta->mac_id + 3;
-
-                       DBG_8723A("Write CAM, mac_addr =%pM, "
-                                 "cam_entry =%d\n", pparm->addr, cam_id);
-
-                       rtl8723a_cam_write(padapter, cam_id, ctrl,
-                                          pparm->addr, pparm->key);
-
-                       return H2C_SUCCESS_RSP;
-               } else {
-                       DBG_8723A("r871x_set_stakey_hdl23a(): sta has been "
-                                 "free\n");
-                       return H2C_REJECTED;
-               }
-       }
-
-       /* below for sta mode */
-
-       if (pparm->algorithm == 0) {    /*  clear cam entry */
-               clear_cam_entry23a(padapter, pparm->id);
-               return H2C_SUCCESS;
-       }
-
-       ctrl = BIT(15) | (pparm->algorithm << 2);
-
-       rtl8723a_cam_write(padapter, cam_id, ctrl, pparm->addr, pparm->key);
-
-       pmlmeinfo->enc_algo = pparm->algorithm;
-
-       return H2C_SUCCESS;
-}
-
-int add_ba_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       const struct addBaReq_parm *pparm = (struct addBaReq_parm *)pbuf;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       struct sta_info *psta;
-
-       psta = rtw_get_stainfo23a(&padapter->stapriv, pparm->addr);
-
-       if (!psta)
-               return H2C_SUCCESS;
-
-       if (((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) &&
-            pmlmeinfo->HT_enable) ||
-           (pmlmeinfo->state & 0x03) == MSR_AP) {
-               issue_action_BA23a(padapter, pparm->addr,
-                                  WLAN_ACTION_ADDBA_REQ, (u16)pparm->tid);
-               mod_timer(&psta->addba_retry_timer,
-                         jiffies + msecs_to_jiffies(ADDBA_TO));
-       } else
-               psta->htpriv.candidate_tid_bitmap &= ~BIT(pparm->tid);
-
-       return H2C_SUCCESS;
-}
-
-int set_tx_beacon_cmd23a(struct rtw_adapter *padapter)
-{
-       struct cmd_obj *ph2c;
-       struct Tx_Beacon_param *ptxBeacon_parm;
-       struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-       struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
-       u8 res = _SUCCESS;
-       int len_diff = 0;
-
-       ph2c = kzalloc(sizeof(struct cmd_obj), GFP_ATOMIC);
-       if (!ph2c) {
-               res = _FAIL;
-               goto exit;
-       }
-
-       ptxBeacon_parm = kzalloc(sizeof(struct Tx_Beacon_param), GFP_ATOMIC);
-       if (!ptxBeacon_parm) {
-               kfree(ph2c);
-               res = _FAIL;
-               goto exit;
-       }
-
-       memcpy(&ptxBeacon_parm->network, &pmlmeinfo->network,
-              sizeof(struct wlan_bssid_ex));
-
-       len_diff = update_hidden_ssid(ptxBeacon_parm->network.IEs,
-                                     ptxBeacon_parm->network.IELength,
-                                     pmlmeinfo->hidden_ssid_mode);
-       ptxBeacon_parm->network.IELength += len_diff;
-
-       init_h2fwcmd_w_parm_no_rsp(ph2c, ptxBeacon_parm,
-                                  GEN_CMD_CODE(_TX_Beacon));
-
-       res = rtw_enqueue_cmd23a(pcmdpriv, ph2c);
-
-exit:
-       return res;
-}
-
-int mlme_evt_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       u8 evt_code, evt_seq;
-       u16 evt_sz;
-       const struct C2HEvent_Header *c2h;
-       void (*event_callback)(struct rtw_adapter *dev, const u8 *pbuf);
-
-       c2h = (struct C2HEvent_Header *)pbuf;
-       evt_sz = c2h->len;
-       evt_seq = c2h->seq;
-       evt_code = c2h->ID;
-
-       /*  checking if event code is valid */
-       if (evt_code >= MAX_C2HEVT) {
-               RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
-                        "Event Code(%d) mismatch!\n", evt_code);
-               goto _abort_event_;
-       }
-
-       /*  checking if event size match the event parm size */
-       if (wlanevents[evt_code].parmsize != 0 &&
-           wlanevents[evt_code].parmsize != evt_sz) {
-               RT_TRACE(_module_rtl871x_cmd_c_, _drv_err_,
-                        "Event(%d) Parm Size mismatch (%d vs %d)!\n",
-                        evt_code, wlanevents[evt_code].parmsize, evt_sz);
-               goto _abort_event_;
-       }
-
-       event_callback = wlanevents[evt_code].event_callback;
-       event_callback(padapter, pbuf + sizeof(struct C2HEvent_Header));
-
-_abort_event_:
-
-       return H2C_SUCCESS;
-}
-
-int h2c_msg_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       if (!pbuf)
-               return H2C_PARAMETERS_ERROR;
-
-       return H2C_SUCCESS;
-}
-
-int tx_beacon_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       if (send_beacon23a(padapter) == _FAIL) {
-               DBG_8723A("issue_beacon23a, fail!\n");
-               return H2C_PARAMETERS_ERROR;
-       }
-#ifdef CONFIG_8723AU_AP_MODE
-       else { /* tx bc/mc frames after update TIM */
-               struct sta_info *psta_bmc;
-               struct list_head *phead;
-               struct xmit_frame *pxmitframe, *ptmp;
-               struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
-               struct sta_priv *pstapriv = &padapter->stapriv;
-
-               /* for BC/MC Frames */
-               psta_bmc = rtw_get_bcmc_stainfo23a(padapter);
-               if (!psta_bmc)
-                       return H2C_SUCCESS;
-
-               if (pstapriv->tim_bitmap & BIT(0) && psta_bmc->sleepq_len > 0) {
-                       msleep(10);/*  10ms, ATIM(HIQ) Windows */
-                       /* spin_lock_bh(&psta_bmc->sleep_q.lock); */
-                       spin_lock_bh(&pxmitpriv->lock);
-
-                       phead = get_list_head(&psta_bmc->sleep_q);
-
-                       list_for_each_entry_safe(pxmitframe, ptmp,
-                                                phead, list) {
-
-                               list_del_init(&pxmitframe->list);
-
-                               psta_bmc->sleepq_len--;
-                               if (psta_bmc->sleepq_len>0)
-                                       pxmitframe->attrib.mdata = 1;
-                               else
-                                       pxmitframe->attrib.mdata = 0;
-
-                               pxmitframe->attrib.triggered = 1;
-
-                               pxmitframe->attrib.qsel = 0x11;/* HIQ */
-
-                               rtl8723au_hal_xmitframe_enqueue(padapter,
-                                                               pxmitframe);
-                       }
-                       /* spin_unlock_bh(&psta_bmc->sleep_q.lock); */
-                       spin_unlock_bh(&pxmitpriv->lock);
-               }
-       }
-#endif
-
-       return H2C_SUCCESS;
-}
-
-int set_ch_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       const struct set_ch_parm *set_ch_parm;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       if (!pbuf)
-               return H2C_PARAMETERS_ERROR;
-
-       set_ch_parm = (struct set_ch_parm *)pbuf;
-
-       DBG_8723A("%s(%s): ch:%u, bw:%u, ch_offset:%u\n", __func__,
-                 padapter->pnetdev->name, set_ch_parm->ch,
-                 set_ch_parm->bw, set_ch_parm->ch_offset);
-
-       pmlmeext->cur_channel = set_ch_parm->ch;
-       pmlmeext->cur_ch_offset = set_ch_parm->ch_offset;
-       pmlmeext->cur_bwmode = set_ch_parm->bw;
-
-       set_channel_bwmode23a(padapter, set_ch_parm->ch,
-                             set_ch_parm->ch_offset, set_ch_parm->bw);
-
-       return H2C_SUCCESS;
-}
-
-int set_chplan_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       const struct SetChannelPlan_param *setChannelPlan_param;
-       struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
-
-       if (!pbuf)
-               return H2C_PARAMETERS_ERROR;
-
-       setChannelPlan_param = (struct SetChannelPlan_param *)pbuf;
-
-       pmlmeext->max_chan_nums =
-               init_channel_set(padapter, setChannelPlan_param->channel_plan,
-                                pmlmeext->channel_set);
-       init_channel_list(padapter, pmlmeext->channel_set,
-                         pmlmeext->max_chan_nums, &pmlmeext->channel_list);
-
-       return H2C_SUCCESS;
-}
-
-int led_blink_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       struct LedBlink_param *ledBlink_param;
-
-       if (!pbuf)
-               return H2C_PARAMETERS_ERROR;
-
-       ledBlink_param = (struct LedBlink_param *)pbuf;
-
-       return H2C_SUCCESS;
-}
-
-int set_csa_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       return H2C_REJECTED;
-}
-
-/*  TDLS_WRCR          : write RCR DATA BIT */
-/*  TDLS_SD_PTI                : issue peer traffic indication */
-/*  TDLS_CS_OFF                : go back to the channel linked with AP,
-                         terminating channel switch procedure */
-/*  TDLS_INIT_CH_SEN   : init channel sensing, receive all data and
-                         mgnt frame */
-/*  TDLS_DONE_CH_SEN   : channel sensing and report candidate channel */
-/*  TDLS_OFF_CH                : first time set channel to off channel */
-/*  TDLS_BASE_CH       : go back tp the channel linked with AP when set
-                         base channel as target channel */
-/*  TDLS_P_OFF_CH      : periodically go to off channel */
-/*  TDLS_P_BASE_CH     : periodically go back to base channel */
-/*  TDLS_RS_RCR                : restore RCR */
-/*  TDLS_CKALV_PH1     : check alive timer phase1 */
-/*  TDLS_CKALV_PH2     : check alive timer phase2 */
-/*  TDLS_FREE_STA      : free tdls sta */
-int tdls_hdl23a(struct rtw_adapter *padapter, const u8 *pbuf)
-{
-       return H2C_REJECTED;
-}
This page took 0.126313 seconds and 5 git commands to generate.