bcmdhd: fix build error after source merge

[GitHub/exynos8895/android_kernel_samsung_universal8895.git] / drivers / net / wireless / bcmdhd4361 / wl_cfg80211.c

/*
 * Linux cfg80211 driver
 *
 * Copyright (C) 1999-2019, Broadcom.
 *
 *      Unless you and Broadcom execute a separate written software license
 * agreement governing use of this software, this software is licensed to you
 * under the terms of the GNU General Public License version 2 (the "GPL"),
 * available at http://www.broadcom.com/licenses/GPLv2.php, with the
 * following added to such license:
 *
 *      As a special exception, the copyright holders of this software give you
 * permission to link this software with independent modules, and to copy and
 * distribute the resulting executable under terms of your choice, provided that
 * you also meet, for each linked independent module, the terms and conditions of
 * the license of that module.  An independent module is a module which is not
 * derived from this software.  The special exception does not apply to any
 * modifications of the software.
 *
 *      Notwithstanding the above, under no circumstances may you combine this
 * software in any way with any other Broadcom software provided under a license
 * other than the GPL, without Broadcom's express prior written consent.
 *
 *
 * <<Broadcom-WL-IPTag/Open:>>
 *
 * $Id: wl_cfg80211.c 820080 2019-05-16 03:05:46Z $
 */
/* */
#include <typedefs.h>
#include <linuxver.h>
#include <linux/kernel.h>

#include <wlc_types.h>
#include <bcmutils.h>
#include <bcmwifi_channels.h>
#include <bcmendian.h>
#include <ethernet.h>
#ifdef WL_WPS_SYNC
#include <eapol.h>
#endif /* WL_WPS_SYNC */
#include <802.11.h>
#ifdef FILS_SUPPORT
#include <fils.h>
#include <frag.h>
#endif // endif
#include <linux/if_arp.h>
#include <asm/uaccess.h>

#include <ethernet.h>
#include <linux/kernel.h>
#include <linux/kthread.h>
#include <linux/netdevice.h>
#include <linux/sched.h>
#include <linux/etherdevice.h>
#include <linux/wireless.h>
#include <linux/ieee80211.h>
#include <linux/wait.h>
#include <net/cfg80211.h>
#include <net/rtnetlink.h>

#include <wlioctl.h>
#include <wldev_common.h>
#include <wl_cfg80211.h>
#include <wl_cfgp2p.h>
#include <bcmdevs.h>
#include <wl_android.h>
#include <dngl_stats.h>
#include <dhd.h>
#include <dhd_linux.h>
#include <dhd_debug.h>
#include <dhdioctl.h>
#include <wlioctl.h>
#include <dhd_cfg80211.h>
#include <dhd_bus.h>
#ifdef PNO_SUPPORT
#include <dhd_pno.h>
#endif /* PNO_SUPPORT */
#include <wl_cfgvendor.h>

#ifdef WL_NAN
#include <wl_cfgnan.h>
#endif /* WL_NAN */

#ifdef PROP_TXSTATUS
#include <dhd_wlfc.h>
#endif // endif

#ifdef BCMPCIE
#include <dhd_flowring.h>
#endif // endif
#ifdef RTT_SUPPORT
#include <dhd_rtt.h>
#endif /* RTT_SUPPORT */

#ifdef BIGDATA_SOFTAP
#include <wl_bigdata.h>
#endif /* BIGDATA_SOFTAP */

#ifdef DHD_EVENT_LOG_FILTER
#include <dhd_event_log_filter.h>
#endif /* DHD_EVENT_LOG_FILTER */

#ifdef BCMWAPI_WPI
/* these items should evetually go into wireless.h of the linux system headfile dir */
#ifndef IW_ENCODE_ALG_SM4
#define IW_ENCODE_ALG_SM4 0x20
#endif // endif

#ifndef IW_AUTH_WAPI_ENABLED
#define IW_AUTH_WAPI_ENABLED 0x20
#endif // endif

#ifndef IW_AUTH_WAPI_VERSION_1
#define IW_AUTH_WAPI_VERSION_1  0x00000008
#endif // endif

#ifndef IW_AUTH_CIPHER_SMS4
#define IW_AUTH_CIPHER_SMS4     0x00000020
#endif // endif

#ifndef IW_AUTH_KEY_MGMT_WAPI_PSK
#define IW_AUTH_KEY_MGMT_WAPI_PSK 4
#endif // endif

#ifndef IW_AUTH_KEY_MGMT_WAPI_CERT
#define IW_AUTH_KEY_MGMT_WAPI_CERT 8
#endif // endif
#endif /* BCMWAPI_WPI */

#ifdef BCMWAPI_WPI
#define IW_WSEC_ENABLED(wsec)   ((wsec) & (WEP_ENABLED | TKIP_ENABLED | AES_ENABLED | SMS4_ENABLED))
#else /* BCMWAPI_WPI */
#define IW_WSEC_ENABLED(wsec)   ((wsec) & (WEP_ENABLED | TKIP_ENABLED | AES_ENABLED))
#endif /* BCMWAPI_WPI */

static struct device *cfg80211_parent_dev = NULL;
static struct bcm_cfg80211 *g_bcmcfg = NULL;
u32 wl_dbg_level = WL_DBG_ERR | WL_DBG_P2P_ACTION | WL_DBG_INFO;

#define MAX_VIF_OFFSET  15
#define MAX_WAIT_TIME 1500
#ifdef WLAIBSS_MCHAN
#define IBSS_IF_NAME "ibss%d"
#endif /* WLAIBSS_MCHAN */

#ifdef VSDB
/* sleep time to keep STA's connecting or connection for continuous af tx or finding a peer */
#define DEFAULT_SLEEP_TIME_VSDB         120
#define OFF_CHAN_TIME_THRESHOLD_MS      200
#define AF_RETRY_DELAY_TIME                     40

/* if sta is connected or connecting, sleep for a while before retry af tx or finding a peer */
#define WL_AF_TX_KEEP_PRI_CONNECTION_VSDB(cfg)  \
        do {    \
                if (wl_get_drv_status(cfg, CONNECTED, bcmcfg_to_prmry_ndev(cfg)) ||     \
                        wl_get_drv_status(cfg, CONNECTING, bcmcfg_to_prmry_ndev(cfg))) {        \
                        OSL_SLEEP(DEFAULT_SLEEP_TIME_VSDB);                     \
                }       \
        } while (0)
#else /* VSDB */
/* if not VSDB, do nothing */
#define WL_AF_TX_KEEP_PRI_CONNECTION_VSDB(cfg)
#endif /* VSDB */

#define DNGL_FUNC(func, parameters) func parameters
#define COEX_DHCP

#define WLAN_EID_SSID   0
#define CH_MIN_5G_CHANNEL 34
#define CH_MIN_2G_CHANNEL 1
#define ACTIVE_SCAN 1
#define PASSIVE_SCAN 0
#ifdef WLAIBSS
enum abiss_event_type {
        AIBSS_EVENT_TXFAIL
};
#endif // endif

#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
#define BCM_SET_LIST_FIRST_ENTRY(entry, ptr, type, member) \
_Pragma("GCC diagnostic push") \
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"") \
(entry) = list_first_entry((ptr), type, member); \
_Pragma("GCC diagnostic pop") \

#define BCM_SET_CONTAINER_OF(entry, ptr, type, member) \
_Pragma("GCC diagnostic push") \
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"") \
entry = container_of((ptr), type, member); \
_Pragma("GCC diagnostic pop") \

#else
#define BCM_SET_LIST_FIRST_ENTRY(entry, ptr, type, member) \
(entry) = list_first_entry((ptr), type, member); \

#define BCM_SET_CONTAINER_OF(entry, ptr, type, member) \
entry = container_of((ptr), type, member); \

#endif /* STRICT_GCC_WARNINGS */

#ifdef WL_RELMCAST
enum rmc_event_type {
        RMC_EVENT_NONE,
        RMC_EVENT_LEADER_CHECK_FAIL
};
#endif /* WL_RELMCAST */

#ifdef WL_LASTEVT
typedef struct wl_last_event {
        uint32 current_time;            /* current tyime */
        uint32 timestamp;               /* event timestamp */
        wl_event_msg_t event;   /* Encapsulated event */
} wl_last_event_t;
#endif /* WL_LASTEVT */

/* This is to override regulatory domains defined in cfg80211 module (reg.c)
 * By default world regulatory domain defined in reg.c puts the flags NL80211_RRF_PASSIVE_SCAN
 * and NL80211_RRF_NO_IBSS for 5GHz channels (for 36..48 and 149..165).
 * With respect to these flags, wpa_supplicant doesn't start p2p operations on 5GHz channels.
 * All the chnages in world regulatory domain are to be done here.
 *
 * this definition reuires disabling missing-field-initializer warning
 * as the ieee80211_regdomain definition differs in plain linux and in Android
 */
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wmissing-field-initializers\"")
#endif // endif
static const struct ieee80211_regdomain brcm_regdom = {
        .n_reg_rules = 4,
        .alpha2 =  "99",
        .reg_rules = {
                /* IEEE 802.11b/g, channels 1..11 */
                REG_RULE(2412-10, 2472+10, 40, 6, 20, 0),
                /* If any */
                /* IEEE 802.11 channel 14 - Only JP enables
                 * this and for 802.11b only
                 */
                REG_RULE(2484-10, 2484+10, 20, 6, 20, 0),
                /* IEEE 802.11a, channel 36..64 */
                REG_RULE(5150-10, 5350+10, 40, 6, 20, 0),
                /* IEEE 802.11a, channel 100..165 */
                REG_RULE(5470-10, 5850+10, 40, 6, 20, 0), }
};
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 0, 0)) && \
        (defined(WL_IFACE_COMB_NUM_CHANNELS) || defined(WL_CFG80211_P2P_DEV_IF))
static const struct ieee80211_iface_limit common_if_limits[] = {
        {
        /*
         * Driver can support up to 2 AP's
         */
        .max = 2,
        .types = BIT(NL80211_IFTYPE_AP),
        },
        {
        /*
         * During P2P-GO removal, P2P-GO is first changed to STA and later only
         * removed. So setting maximum possible number of STA interfaces according
         * to kernel version.
         *
         * less than linux-3.8 - max:3 (wlan0 + p2p0 + group removal of p2p-p2p0-x)
         * linux-3.8 and above - max:4
         * sta + NAN NMI + NAN DPI open + NAN DPI sec (since there is no iface type
         * for NAN defined, registering it as STA type)
         */
#ifdef WL_ENABLE_P2P_IF
        .max = 3,
#else
        .max = 4,
#endif /* WL_ENABLE_P2P_IF */
        .types = BIT(NL80211_IFTYPE_STATION),
        },
        {
        .max = 2,
        .types = BIT(NL80211_IFTYPE_P2P_GO) | BIT(NL80211_IFTYPE_P2P_CLIENT),
        },
#if defined(WL_CFG80211_P2P_DEV_IF)
        {
        .max = 1,
        .types = BIT(NL80211_IFTYPE_P2P_DEVICE),
        },
#endif /* WL_CFG80211_P2P_DEV_IF */
        {
        .max = 1,
        .types = BIT(NL80211_IFTYPE_ADHOC),
        },
};

#define NUM_DIFF_CHANNELS 2

static const struct ieee80211_iface_combination
common_iface_combinations[] = {
        {
        .num_different_channels = NUM_DIFF_CHANNELS,
        /*
         * max_interfaces = 4
         * The max no of interfaces will be used in dual p2p case.
         * {STA, P2P Device, P2P Group 1, P2P Group 2}. Though we
         * will not be using the STA functionality in this case, it
         * will remain registered as it is the primary interface.
         */
        .max_interfaces = 4,
        .limits = common_if_limits,
        .n_limits = ARRAY_SIZE(common_if_limits),
        },
};
#endif /* LINUX_VER >= 3.0 && (WL_IFACE_COMB_NUM_CHANNELS || WL_CFG80211_P2P_DEV_IF) */

static const char *wl_if_state_strs[WL_IF_STATE_MAX + 1] = {
        "WL_IF_CREATE_REQ",
        "WL_IF_CREATE_DONE",
        "WL_IF_DELETE_REQ",
        "WL_IF_DELETE_DONE",
        "WL_IF_CHANGE_REQ",
        "WL_IF_CHANGE_DONE",
        "WL_IF_STATE_MAX"
};

#ifdef BCMWAPI_WPI
#if defined(ANDROID_PLATFORM_VERSION) && (ANDROID_PLATFORM_VERSION >= 8)
/* WAPI define in ieee80211.h is used */
#else
#undef WLAN_AKM_SUITE_WAPI_PSK
#define WLAN_AKM_SUITE_WAPI_PSK         0x000FAC04

#undef WLAN_AKM_SUITE_WAPI_CERT
#define WLAN_AKM_SUITE_WAPI_CERT        0x000FAC12

#undef NL80211_WAPI_VERSION_1
#define NL80211_WAPI_VERSION_1                  1 << 2
#endif /* ANDROID_PLATFORM_VERSION && ANDROID_PLATFORM_VERSION >= 8 */
#endif /* BCMWAPI_WPI */

/* Data Element Definitions */
#define WPS_ID_CONFIG_METHODS     0x1008
#define WPS_ID_REQ_TYPE           0x103A
#define WPS_ID_DEVICE_NAME        0x1011
#define WPS_ID_VERSION            0x104A
#define WPS_ID_DEVICE_PWD_ID      0x1012
#define WPS_ID_REQ_DEV_TYPE       0x106A
#define WPS_ID_SELECTED_REGISTRAR_CONFIG_METHODS 0x1053
#define WPS_ID_PRIM_DEV_TYPE      0x1054

/* Device Password ID */
#define DEV_PW_DEFAULT 0x0000
#define DEV_PW_USER_SPECIFIED 0x0001,
#define DEV_PW_MACHINE_SPECIFIED 0x0002
#define DEV_PW_REKEY 0x0003
#define DEV_PW_PUSHBUTTON 0x0004
#define DEV_PW_REGISTRAR_SPECIFIED 0x0005

/* Config Methods */
#define WPS_CONFIG_USBA 0x0001
#define WPS_CONFIG_ETHERNET 0x0002
#define WPS_CONFIG_LABEL 0x0004
#define WPS_CONFIG_DISPLAY 0x0008
#define WPS_CONFIG_EXT_NFC_TOKEN 0x0010
#define WPS_CONFIG_INT_NFC_TOKEN 0x0020
#define WPS_CONFIG_NFC_INTERFACE 0x0040
#define WPS_CONFIG_PUSHBUTTON 0x0080
#define WPS_CONFIG_KEYPAD 0x0100
#define WPS_CONFIG_VIRT_PUSHBUTTON 0x0280
#define WPS_CONFIG_PHY_PUSHBUTTON 0x0480
#define WPS_CONFIG_VIRT_DISPLAY 0x2008
#define WPS_CONFIG_PHY_DISPLAY 0x4008

#define PM_BLOCK 1
#define PM_ENABLE 0

#ifdef BCMCCX
#ifndef WLAN_AKM_SUITE_CCKM
#define WLAN_AKM_SUITE_CCKM 0x00409600
#endif // endif
#define DOT11_LEAP_AUTH 0x80 /* LEAP auth frame paylod constants */
#endif /* BCMCCX */

#define WL_AKM_SUITE_SHA256_1X  0x000FAC05
#define WL_AKM_SUITE_SHA256_PSK 0x000FAC06

#ifndef IBSS_COALESCE_ALLOWED
#define IBSS_COALESCE_ALLOWED IBSS_COALESCE_DEFAULT
#endif // endif

#ifndef IBSS_INITIAL_SCAN_ALLOWED
#define IBSS_INITIAL_SCAN_ALLOWED IBSS_INITIAL_SCAN_ALLOWED_DEFAULT
#endif // endif

#define CUSTOM_RETRY_MASK 0xff000000 /* Mask for retry counter of custom dwell time */
#define LONG_LISTEN_TIME 2000

#ifdef WBTEXT
#define CMD_WBTEXT_PROFILE_CONFIG       "WBTEXT_PROFILE_CONFIG"
#define CMD_WBTEXT_WEIGHT_CONFIG        "WBTEXT_WEIGHT_CONFIG"
#define CMD_WBTEXT_TABLE_CONFIG         "WBTEXT_TABLE_CONFIG"
#define CMD_WBTEXT_DELTA_CONFIG         "WBTEXT_DELTA_CONFIG"
#define DEFAULT_WBTEXT_PROFILE_A                "a -70 -75 70 10 -75 -128 0 10"
#define DEFAULT_WBTEXT_PROFILE_B                "b -60 -75 70 10 -75 -128 0 10"
#define DEFAULT_WBTEXT_WEIGHT_RSSI_A    "RSSI a 65"
#define DEFAULT_WBTEXT_WEIGHT_RSSI_B    "RSSI b 65"
#define DEFAULT_WBTEXT_WEIGHT_CU_A      "CU a 35"
#define DEFAULT_WBTEXT_WEIGHT_CU_B      "CU b 35"
#define DEFAULT_WBTEXT_TABLE_RSSI_A     "RSSI a 0 55 100 55 60 90 \
60 65 70 65 70 50 70 128 20"
#define DEFAULT_WBTEXT_TABLE_RSSI_B     "RSSI b 0 55 100 55 60 90 \
60 65 70 65 70 50 70 128 20"
#define DEFAULT_WBTEXT_TABLE_CU_A       "CU a 0 30 100 30 50 90 \
50 60 70 60 80 50 80 100 20"
#define DEFAULT_WBTEXT_TABLE_CU_B       "CU b 0 10 100 10 25 90 \
25 40 70 40 70 50 70 100 20"

typedef struct wl_wbtext_bssid {
        struct ether_addr ea;
        struct list_head list;
} wl_wbtext_bssid_t;

static void wl_cfg80211_wbtext_update_rcc(struct bcm_cfg80211 *cfg, struct net_device *dev);
static bool wl_cfg80211_wbtext_check_bssid_list(struct bcm_cfg80211 *cfg, struct ether_addr *ea);
static bool wl_cfg80211_wbtext_add_bssid_list(struct bcm_cfg80211 *cfg, struct ether_addr *ea);
static void wl_cfg80211_wbtext_clear_bssid_list(struct bcm_cfg80211 *cfg);
static bool wl_cfg80211_wbtext_send_nbr_req(struct bcm_cfg80211 *cfg, struct net_device *dev,
        struct wl_profile *profile);
static bool wl_cfg80211_wbtext_send_btm_query(struct bcm_cfg80211 *cfg, struct net_device *dev,
        struct wl_profile *profile);
static void wl_cfg80211_wbtext_set_wnm_maxidle(struct bcm_cfg80211 *cfg, struct net_device *dev);
static int wl_cfg80211_recv_nbr_resp(struct net_device *dev, uint8 *body, uint body_len);
#endif /* WBTEXT */

#ifdef SUPPORT_AP_RADIO_PWRSAVE
#define RADIO_PWRSAVE_PPS                                       10
#define RADIO_PWRSAVE_QUIET_TIME                        10
#define RADIO_PWRSAVE_LEVEL                             3
#define RADIO_PWRSAVE_STAS_ASSOC_CHECK  0

#define RADIO_PWRSAVE_LEVEL_MIN                         1
#define RADIO_PWRSAVE_LEVEL_MAX                         5
#define RADIO_PWRSAVE_PPS_MIN                                   1
#define RADIO_PWRSAVE_QUIETTIME_MIN                     1
#define RADIO_PWRSAVE_ASSOCCHECK_MIN            0
#define RADIO_PWRSAVE_ASSOCCHECK_MAX            1

#define RADIO_PWRSAVE_MAJOR_VER 1
#define RADIO_PWRSAVE_MINOR_VER 1
#define RADIO_PWRSAVE_MAJOR_VER_SHIFT 8
#define RADIO_PWRSAVE_VERSION \
        ((RADIO_PWRSAVE_MAJOR_VER << RADIO_PWRSAVE_MAJOR_VER_SHIFT)| RADIO_PWRSAVE_MINOR_VER)
#endif /* SUPPORT_AP_RADIO_PWRSAVE */

#define MIN_P2P_IE_LEN  8       /* p2p_ie->OUI(3) + p2p_ie->oui_type(1) +
                                 * Attribute ID(1) + Length(2) + 1(Mininum length:1)
                                 */
#define MAX_P2P_IE_LEN  251     /* Up To 251 */

#define MAX_VNDR_OUI_STR_LEN    256
#define VNDR_OUI_STR_LEN        10
static const uchar *exclude_vndr_oui_list[] = {
        "\x00\x50\xf2",                 /* Microsoft */
        "\x00\x00\xf0",                 /* Samsung Elec */
        WFA_OUI,                        /* WFA */
        NULL
};

typedef struct wl_vndr_oui_entry {
        uchar oui[DOT11_OUI_LEN];
        struct list_head list;
} wl_vndr_oui_entry_t;

static int wl_vndr_ies_get_vendor_oui(struct bcm_cfg80211 *cfg,
                struct net_device *ndev, char *vndr_oui, u32 vndr_oui_len);
static void wl_vndr_ies_clear_vendor_oui_list(struct bcm_cfg80211 *cfg);

/*
 * cfg80211_ops api/callback list
 */
static s32 wl_frame_get_mgmt(struct bcm_cfg80211 *cfg, u16 fc,
        const struct ether_addr *da, const struct ether_addr *sa,
        const struct ether_addr *bssid, u8 **pheader, u32 *body_len, u8 *pbody);
static s32 __wl_cfg80211_scan(struct wiphy *wiphy, struct net_device *ndev,
        struct cfg80211_scan_request *request,
        struct cfg80211_ssid *this_ssid);
#if defined(WL_CFG80211_P2P_DEV_IF)
static s32
wl_cfg80211_scan(struct wiphy *wiphy, struct cfg80211_scan_request *request);
#else
static s32
wl_cfg80211_scan(struct wiphy *wiphy, struct net_device *ndev,
        struct cfg80211_scan_request *request);
#endif /* WL_CFG80211_P2P_DEV_IF */
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 5, 0))
static void wl_cfg80211_abort_scan(struct wiphy *wiphy, struct wireless_dev *wdev);
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 5, 0)) */
static s32 wl_cfg80211_set_wiphy_params(struct wiphy *wiphy, u32 changed);
#ifdef WLAIBSS_MCHAN
static bcm_struct_cfgdev* bcm_cfg80211_add_ibss_if(struct wiphy *wiphy, char *name);
static s32 bcm_cfg80211_del_ibss_if(struct wiphy *wiphy, bcm_struct_cfgdev *cfgdev);
#endif /* WLAIBSS_MCHAN */
static s32 wl_cfg80211_join_ibss(struct wiphy *wiphy, struct net_device *dev,
        struct cfg80211_ibss_params *params);
static s32 wl_cfg80211_leave_ibss(struct wiphy *wiphy,
        struct net_device *dev);
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0))
static s32 wl_cfg80211_get_station(struct wiphy *wiphy,
        struct net_device *dev, const u8 *mac,
        struct station_info *sinfo);
#else
static s32 wl_cfg80211_get_station(struct wiphy *wiphy,
        struct net_device *dev, u8 *mac,
        struct station_info *sinfo);
#endif // endif
static s32 wl_cfg80211_set_power_mgmt(struct wiphy *wiphy,
        struct net_device *dev, bool enabled,
        s32 timeout);
static int wl_cfg80211_connect(struct wiphy *wiphy, struct net_device *dev,
        struct cfg80211_connect_params *sme);
static s32 wl_cfg80211_disconnect(struct wiphy *wiphy, struct net_device *dev,
        u16 reason_code);
#if defined(WL_CFG80211_P2P_DEV_IF)
static s32
wl_cfg80211_set_tx_power(struct wiphy *wiphy, struct wireless_dev *wdev,
        enum nl80211_tx_power_setting type, s32 mbm);
#else
static s32
wl_cfg80211_set_tx_power(struct wiphy *wiphy,
        enum nl80211_tx_power_setting type, s32 dbm);
#endif /* WL_CFG80211_P2P_DEV_IF */
#if defined(WL_CFG80211_P2P_DEV_IF)
static s32 wl_cfg80211_get_tx_power(struct wiphy *wiphy,
        struct wireless_dev *wdev, s32 *dbm);
#else
static s32 wl_cfg80211_get_tx_power(struct wiphy *wiphy, s32 *dbm);
#endif /* WL_CFG80211_P2P_DEV_IF */
static s32 wl_cfg80211_config_default_key(struct wiphy *wiphy,
        struct net_device *dev,
        u8 key_idx, bool unicast, bool multicast);
static s32 wl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *dev,
        u8 key_idx, bool pairwise, const u8 *mac_addr,
        struct key_params *params);
static s32 wl_cfg80211_del_key(struct wiphy *wiphy, struct net_device *dev,
        u8 key_idx, bool pairwise, const u8 *mac_addr);
static s32 wl_cfg80211_get_key(struct wiphy *wiphy, struct net_device *dev,
        u8 key_idx, bool pairwise, const u8 *mac_addr,
        void *cookie, void (*callback) (void *cookie,
        struct key_params *params));
static s32 wl_cfg80211_config_default_mgmt_key(struct wiphy *wiphy,
        struct net_device *dev, u8 key_idx);
static s32 wl_cfg80211_resume(struct wiphy *wiphy);
#if defined(WL_SUPPORT_BACKPORTED_KPATCHES) || (LINUX_VERSION_CODE >= KERNEL_VERSION(3, \
        2, 0))
static s32 wl_cfg80211_mgmt_tx_cancel_wait(struct wiphy *wiphy,
        bcm_struct_cfgdev *cfgdev, u64 cookie);
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0))
static s32 wl_cfg80211_del_station(
                struct wiphy *wiphy, struct net_device *ndev,
                struct station_del_parameters *params);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0))
static s32 wl_cfg80211_del_station(struct wiphy *wiphy,
        struct net_device *ndev, const u8* mac_addr);
#else
static s32 wl_cfg80211_del_station(struct wiphy *wiphy,
        struct net_device *ndev, u8* mac_addr);
#endif // endif
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0))
static s32 wl_cfg80211_change_station(struct wiphy *wiphy,
        struct net_device *dev, const u8 *mac, struct station_parameters *params);
#else
static s32 wl_cfg80211_change_station(struct wiphy *wiphy,
        struct net_device *dev, u8 *mac, struct station_parameters *params);
#endif // endif
#endif /* WL_SUPPORT_BACKPORTED_KPATCHES || KERNEL_VER >= KERNEL_VERSION(3, 2, 0)) */
#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39)) || defined(WL_COMPAT_WIRELESS)
static s32 wl_cfg80211_suspend(struct wiphy *wiphy, struct cfg80211_wowlan *wow);
#else
static s32 wl_cfg80211_suspend(struct wiphy *wiphy);
#endif // endif
static s32 wl_cfg80211_set_pmksa(struct wiphy *wiphy, struct net_device *dev,
        struct cfg80211_pmksa *pmksa);
static s32 wl_cfg80211_del_pmksa(struct wiphy *wiphy, struct net_device *dev,
        struct cfg80211_pmksa *pmksa);
static s32 wl_cfg80211_flush_pmksa(struct wiphy *wiphy,
        struct net_device *dev);
void wl_cfg80211_scan_abort(struct bcm_cfg80211 *cfg);
static void wl_cfg80211_cancel_scan(struct bcm_cfg80211 *cfg);
static s32 wl_notify_escan_complete(struct bcm_cfg80211 *cfg,
        struct net_device *ndev, bool aborted, bool fw_abort);
#if (LINUX_VERSION_CODE > KERNEL_VERSION(3, 2, 0)) || defined(WL_COMPAT_WIRELESS)
#if (defined(CONFIG_ARCH_MSM) && defined(TDLS_MGMT_VERSION2)) || (LINUX_VERSION_CODE < \
        KERNEL_VERSION(3, 16, 0) && LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0))
static s32 wl_cfg80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
        u8 *peer, u8 action_code, u8 dialog_token, u16 status_code,
        u32 peer_capability, const u8 *buf, size_t len);
#elif ((LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0)) && \
                (LINUX_VERSION_CODE < KERNEL_VERSION(3, 18, 0)))
static s32 wl_cfg80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
        const u8 *peer, u8 action_code, u8 dialog_token, u16 status_code,
        u32 peer_capability, const u8 *buf, size_t len);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 18, 0))
static s32 wl_cfg80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
       const u8 *peer, u8 action_code, u8 dialog_token, u16 status_code,
       u32 peer_capability, bool initiator, const u8 *buf, size_t len);
#else /* CONFIG_ARCH_MSM && TDLS_MGMT_VERSION2 */
static s32 wl_cfg80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
        u8 *peer, u8 action_code, u8 dialog_token, u16 status_code,
        const u8 *buf, size_t len);
#endif /* CONFIG_ARCH_MSM && TDLS_MGMT_VERSION2 */
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0))
static s32 wl_cfg80211_tdls_oper(struct wiphy *wiphy, struct net_device *dev,
        const u8 *peer, enum nl80211_tdls_operation oper);
#else
static s32 wl_cfg80211_tdls_oper(struct wiphy *wiphy, struct net_device *dev,
        u8 *peer, enum nl80211_tdls_operation oper);
#endif // endif
#endif /* LINUX_VERSION > KERNEL_VERSION(3,2,0) || WL_COMPAT_WIRELESS */
#ifdef WL_SCHED_SCAN
static int wl_cfg80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev);
#endif /* WL_SCHED_SCAN */
static s32 wl_cfg80211_set_ap_role(struct bcm_cfg80211 *cfg, struct net_device *dev);

struct wireless_dev *
wl_cfg80211_create_iface(struct wiphy *wiphy, wl_iftype_t
        iface_type, u8 *mac_addr, const char *name);
s32
wl_cfg80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev);

s32 wl_cfg80211_interface_ops(struct bcm_cfg80211 *cfg,
        struct net_device *ndev, s32 bsscfg_idx,
        wl_iftype_t iftype, s32 del, u8 *addr);
s32 wl_cfg80211_add_del_bss(struct bcm_cfg80211 *cfg,
        struct net_device *ndev, s32 bsscfg_idx,
        wl_iftype_t brcm_iftype, s32 del, u8 *addr);
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0)) || defined(WL_COMPAT_WIRELESS)
static s32 wl_cfg80211_stop_ap(struct wiphy *wiphy, struct net_device *dev);
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0) */
#ifdef GTK_OFFLOAD_SUPPORT
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 1, 0))
static s32 wl_cfg80211_set_rekey_data(struct wiphy *wiphy, struct net_device *dev,
        struct cfg80211_gtk_rekey_data *data);
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 1, 0) */
#endif /* GTK_OFFLOAD_SUPPORT */
chanspec_t wl_chspec_driver_to_host(chanspec_t chanspec);
chanspec_t wl_chspec_host_to_driver(chanspec_t chanspec);
static void wl_cfg80211_wait_for_disconnection(struct bcm_cfg80211 *cfg, struct net_device *dev);

/*
 * event & event Q handlers for cfg80211 interfaces
 */
static s32 wl_create_event_handler(struct bcm_cfg80211 *cfg);
static void wl_destroy_event_handler(struct bcm_cfg80211 *cfg);
static void wl_event_handler(struct work_struct *work_data);
static void wl_init_eq(struct bcm_cfg80211 *cfg);
static void wl_flush_eq(struct bcm_cfg80211 *cfg);
static unsigned long wl_lock_eq(struct bcm_cfg80211 *cfg);
static void wl_unlock_eq(struct bcm_cfg80211 *cfg, unsigned long flags);
static void wl_init_eq_lock(struct bcm_cfg80211 *cfg);
static void wl_init_event_handler(struct bcm_cfg80211 *cfg);
static struct wl_event_q *wl_deq_event(struct bcm_cfg80211 *cfg);
static s32 wl_enq_event(struct bcm_cfg80211 *cfg, struct net_device *ndev, u32 type,
        const wl_event_msg_t *msg, void *data);
static void wl_put_event(struct bcm_cfg80211 *cfg, struct wl_event_q *e);
static s32 wl_notify_connect_status_ap(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, void *data);
static s32 wl_notify_connect_status(struct bcm_cfg80211 *cfg,
        bcm_struct_cfgdev *cfgdev, const wl_event_msg_t *e, void *data);
static s32 wl_notify_roaming_status(struct bcm_cfg80211 *cfg,
        bcm_struct_cfgdev *cfgdev, const wl_event_msg_t *e, void *data);
static s32 wl_notify_scan_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
static s32 wl_bss_connect_done(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, void *data, bool completed);
static s32 wl_bss_roaming_done(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, void *data);
static s32 wl_notify_mic_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
#ifdef BT_WIFI_HANDOVER
static s32 wl_notify_bt_wifi_handover_req(struct bcm_cfg80211 *cfg,
        bcm_struct_cfgdev *cfgdev, const wl_event_msg_t *e, void *data);
#endif /* BT_WIFI_HANDOVER */
#ifdef WL_SCHED_SCAN
static s32
wl_notify_sched_scan_results(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, void *data);
#endif /* WL_SCHED_SCAN */
#ifdef PNO_SUPPORT
static s32 wl_notify_pfn_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
#endif /* PNO_SUPPORT */
#ifdef GSCAN_SUPPORT
static s32 wl_notify_gscan_event(struct bcm_cfg80211 *wl, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
static s32 wl_handle_roam_exp_event(struct bcm_cfg80211 *wl, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
#endif /* GSCAN_SUPPORT */
#ifdef RSSI_MONITOR_SUPPORT
static s32 wl_handle_rssi_monitor_event(struct bcm_cfg80211 *wl, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
#endif /* RSSI_MONITOR_SUPPORT */
static s32 wl_notifier_change_state(struct bcm_cfg80211 *cfg, struct net_info *_net_info,
        enum wl_status state, bool set);
#ifdef CUSTOM_EVENT_PM_WAKE
static s32 wl_check_pmstatus(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
#endif  /* CUSTOM_EVENT_PM_WAKE */
#if defined(DHD_LOSSLESS_ROAMING) || defined(DBG_PKT_MON)
static s32 wl_notify_roam_prep_status(struct bcm_cfg80211 *cfg,
        bcm_struct_cfgdev *cfgdev, const wl_event_msg_t *e, void *data);
#endif /* DHD_LOSSLESS_ROAMING || DBG_PKT_MON */
#ifdef DHD_LOSSLESS_ROAMING
static void wl_del_roam_timeout(struct bcm_cfg80211 *cfg);
#endif /* DHD_LOSSLESS_ROAMING */

#ifdef WLTDLS
static s32 wl_cfg80211_tdls_config(struct bcm_cfg80211 *cfg,
        enum wl_tdls_config state, bool tdls_mode);
static s32 wl_tdls_event_handler(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
#endif /* WLTDLS */
/*
 * register/deregister parent device
 */
static void wl_cfg80211_clear_parent_dev(void);
/*
 * ioctl utilites
 */

/*
 * cfg80211 set_wiphy_params utilities
 */
static s32 wl_set_frag(struct net_device *dev, u32 frag_threshold);
static s32 wl_set_rts(struct net_device *dev, u32 frag_threshold);
static s32 wl_set_retry(struct net_device *dev, u32 retry, bool l);

/*
 * cfg profile utilities
 */
static s32 wl_update_prof(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, const void *data, s32 item);
static void *wl_read_prof(struct bcm_cfg80211 *cfg, struct net_device *ndev, s32 item);
static void wl_init_prof(struct bcm_cfg80211 *cfg, struct net_device *ndev);

/*
 * cfg80211 connect utilites
 */
static s32 wl_set_wpa_version(struct net_device *dev,
        struct cfg80211_connect_params *sme);
static s32 wl_set_auth_type(struct net_device *dev,
        struct cfg80211_connect_params *sme);
static s32 wl_set_set_cipher(struct net_device *dev,
        struct cfg80211_connect_params *sme);
static s32 wl_set_key_mgmt(struct net_device *dev,
        struct cfg80211_connect_params *sme);
static s32 wl_set_set_sharedkey(struct net_device *dev,
        struct cfg80211_connect_params *sme);
#ifdef BCMWAPI_WPI
static s32 wl_set_set_wapi_ie(struct net_device *dev,
        struct cfg80211_connect_params *sme);
#endif // endif
static s32 wl_get_assoc_ies(struct bcm_cfg80211 *cfg, struct net_device *ndev);
static s32 wl_ch_to_chanspec(struct net_device *dev, int ch,
        struct wl_join_params *join_params, size_t *join_params_size);
void wl_cfg80211_clear_security(struct bcm_cfg80211 *cfg);

/*
 * information element utilities
 */
static void wl_rst_ie(struct bcm_cfg80211 *cfg);
static __used s32 wl_add_ie(struct bcm_cfg80211 *cfg, u8 t, u8 l, u8 *v);
static void wl_update_hidden_ap_ie(wl_bss_info_t *bi, const u8 *ie_stream, u32 *ie_size,
        bool roam);
static s32 wl_mrg_ie(struct bcm_cfg80211 *cfg, u8 *ie_stream, u16 ie_size);
static s32 wl_cp_ie(struct bcm_cfg80211 *cfg, u8 *dst, u16 dst_size);
static u32 wl_get_ielen(struct bcm_cfg80211 *cfg);
#ifdef MFP
static int wl_cfg80211_get_rsn_capa(const bcm_tlv_t *wpa2ie, const u8** rsn_cap);
#endif // endif

#ifdef WL11U
static bcm_tlv_t *
wl_cfg80211_find_interworking_ie(const u8 *parse, u32 len);
static s32
wl_cfg80211_clear_iw_ie(struct bcm_cfg80211 *cfg, struct net_device *ndev, s32 bssidx);
static s32
wl_cfg80211_add_iw_ie(struct bcm_cfg80211 *cfg, struct net_device *ndev, s32 bssidx, s32 pktflag,
                      uint8 ie_id, uint8 *data, uint8 data_len);
#endif /* WL11U */

static s32 wl_setup_wiphy(struct wireless_dev *wdev, struct device *dev, void *data);
static void wl_free_wdev(struct bcm_cfg80211 *cfg);

static s32 wl_inform_bss(struct bcm_cfg80211 *cfg);
static s32 wl_inform_single_bss(struct bcm_cfg80211 *cfg, wl_bss_info_t *bi, bool roam);
static s32 wl_update_bss_info(struct bcm_cfg80211 *cfg, struct net_device *ndev, bool roam);
static chanspec_t wl_cfg80211_get_shared_freq(struct wiphy *wiphy);
s32 wl_cfg80211_channel_to_freq(u32 channel);

static void wl_cfg80211_work_handler(struct work_struct *work);
static s32 wl_add_keyext(struct wiphy *wiphy, struct net_device *dev,
        u8 key_idx, const u8 *mac_addr,
        struct key_params *params);
/*
 * key indianess swap utilities
 */
static void swap_key_from_BE(struct wl_wsec_key *key);
static void swap_key_to_BE(struct wl_wsec_key *key);

/*
 * bcm_cfg80211 memory init/deinit utilities
 */
static s32 wl_init_priv_mem(struct bcm_cfg80211 *cfg);
static void wl_deinit_priv_mem(struct bcm_cfg80211 *cfg);

static void wl_delay(u32 ms);

/*
 * ibss mode utilities
 */
static bool wl_is_ibssmode(struct bcm_cfg80211 *cfg, struct net_device *ndev);
static __used bool wl_is_ibssstarter(struct bcm_cfg80211 *cfg);

/*
 * link up/down , default configuration utilities
 */
static s32 __wl_cfg80211_up(struct bcm_cfg80211 *cfg);
static s32 __wl_cfg80211_down(struct bcm_cfg80211 *cfg);

#ifdef WL_LASTEVT
static bool wl_is_linkdown(struct bcm_cfg80211 *cfg, const wl_event_msg_t *e, void *data);
#define WL_IS_LINKDOWN(cfg, e, data) wl_is_linkdown(cfg, e, data)
#else
static bool wl_is_linkdown(struct bcm_cfg80211 *cfg, const wl_event_msg_t *e);
#define WL_IS_LINKDOWN(cfg, e, data) wl_is_linkdown(cfg, e)
#endif /* WL_LASTEVT */

static bool wl_is_linkup(struct bcm_cfg80211 *cfg, const wl_event_msg_t *e,
        struct net_device *ndev);
static bool wl_is_nonetwork(struct bcm_cfg80211 *cfg, const wl_event_msg_t *e);
static void wl_link_up(struct bcm_cfg80211 *cfg);
static void wl_link_down(struct bcm_cfg80211 *cfg);
static s32 wl_config_infra(struct bcm_cfg80211 *cfg, struct net_device *ndev, u16 iftype);
static void wl_init_conf(struct wl_conf *conf);
int wl_cfg80211_get_ioctl_version(void);

/*
 * find most significant bit set
 */
static __used u32 wl_find_msb(u16 bit16);

/*
 * rfkill support
 */
static int wl_setup_rfkill(struct bcm_cfg80211 *cfg, bool setup);
static int wl_rfkill_set(void *data, bool blocked);
#ifdef DEBUGFS_CFG80211
static s32 wl_setup_debugfs(struct bcm_cfg80211 *cfg);
static s32 wl_free_debugfs(struct bcm_cfg80211 *cfg);
#endif // endif
static wl_scan_params_t *wl_cfg80211_scan_alloc_params(struct bcm_cfg80211 *cfg,
        int channel, int nprobes, int *out_params_size);
static bool check_dev_role_integrity(struct bcm_cfg80211 *cfg, u32 dev_role);

#ifdef WL_CFG80211_ACL
/* ACL */
static int wl_cfg80211_set_mac_acl(struct wiphy *wiphy, struct net_device *cfgdev,
        const struct cfg80211_acl_data *acl);
#endif /* WL_CFG80211_ACL */

/*
 * Some external functions, TODO: move them to dhd_linux.h
 */
int dhd_add_monitor(const char *name, struct net_device **new_ndev);
int dhd_del_monitor(struct net_device *ndev);
int dhd_monitor_init(void *dhd_pub);
int dhd_monitor_uninit(void);
int dhd_start_xmit(struct sk_buff *skb, struct net_device *net);

#ifdef ESCAN_CHANNEL_CACHE
void reset_roam_cache(struct bcm_cfg80211 *cfg);
void add_roam_cache(struct bcm_cfg80211 *cfg, wl_bss_info_t *bi);
int  get_roam_channel_list(int target_chan, chanspec_t *channels,
        int n_channels, const wlc_ssid_t *ssid, int ioctl_ver);
void set_roam_band(int band);
#endif /* ESCAN_CHANNEL_CACHE */

#ifdef ROAM_CHANNEL_CACHE
int init_roam_cache(struct bcm_cfg80211 *cfg, int ioctl_ver);
void print_roam_cache(struct bcm_cfg80211 *cfg);
void update_roam_cache(struct bcm_cfg80211 *cfg, int ioctl_ver);
#endif /* ROAM_CHANNEL_CACHE */

#ifdef P2P_LISTEN_OFFLOADING
s32 wl_cfg80211_p2plo_deinit(struct bcm_cfg80211 *cfg);
#endif /* P2P_LISTEN_OFFLOADING */

#ifdef PKT_FILTER_SUPPORT
extern uint dhd_pkt_filter_enable;
extern uint dhd_master_mode;
extern void dhd_pktfilter_offload_enable(dhd_pub_t * dhd, char *arg, int enable, int master_mode);
#endif /* PKT_FILTER_SUPPORT */

static int wl_cfg80211_delayed_roam(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const struct ether_addr *bssid);
static s32 __wl_update_wiphybands(struct bcm_cfg80211 *cfg, bool notify);

static s32 wl_check_vif_support(struct bcm_cfg80211 *cfg, wl_iftype_t wl_iftype);
bool wl_is_wps_enrollee_active(struct net_device *ndev, const u8 *ie_ptr, u16 len);

#ifdef WL_WPS_SYNC
static void wl_init_wps_reauth_sm(struct bcm_cfg80211 *cfg);
static void wl_deinit_wps_reauth_sm(struct bcm_cfg80211 *cfg);
static void wl_wps_reauth_timeout(unsigned long data);
static s32 wl_get_free_wps_inst(struct bcm_cfg80211 *cfg);
static s32 wl_get_wps_inst_match(struct bcm_cfg80211 *cfg, struct net_device *ndev);
static s32 wl_wps_session_add(struct net_device *ndev, u16 mode, u8 *peer_mac);
static void wl_wps_session_del(struct net_device *ndev);
static s32 wl_wps_session_update(struct net_device *ndev, u16 state, const u8 *peer_mac);
static void wl_wps_handle_ifdel(struct net_device *ndev);
#endif /* WL_WPS_SYNC */
const u8 *wl_find_attribute(const u8 *buf, u16 len, u16 element_id);

#ifdef WL_BCNRECV
static s32 wl_bcnrecv_aborted_event_handler(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
                const wl_event_msg_t *e, void *data);
#endif /* WL_BCNRECV */

static int bw2cap[] = { 0, 0, WLC_BW_CAP_20MHZ, WLC_BW_CAP_40MHZ, WLC_BW_CAP_80MHZ,
        WLC_BW_CAP_160MHZ, WLC_BW_CAP_160MHZ };

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 2, 0)) || (defined(CONFIG_ARCH_MSM) && \
        defined(CFG80211_DISCONNECTED_V2))
#define CFG80211_DISCONNECTED(dev, reason, ie, len, loc_gen, gfp) \
        cfg80211_disconnected(dev, reason, ie, len, loc_gen, gfp);
#elif (LINUX_VERSION_CODE < KERNEL_VERSION(4, 2, 0))
#define CFG80211_DISCONNECTED(dev, reason, ie, len, loc_gen, gfp) \
        BCM_REFERENCE(loc_gen); \
        cfg80211_disconnected(dev, reason, ie, len, gfp);
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 2, 0)) */

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 1, 0)) || (defined(CONFIG_ARCH_MSM) && \
        defined(CFG80211_DISCONNECTED_V2))
#define CFG80211_GET_BSS(wiphy, channel, bssid, ssid, ssid_len) \
        cfg80211_get_bss(wiphy, channel, bssid, ssid, ssid_len, \
                        IEEE80211_BSS_TYPE_ESS, IEEE80211_PRIVACY_ANY);
#else
#define CFG80211_GET_BSS(wiphy, channel, bssid, ssid, ssid_len) \
        cfg80211_get_bss(wiphy, channel, bssid, ssid, ssid_len, \
                        WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 1, 0)) */

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 7, 0))
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 11, 0)) || \
        defined(CFG80211_CONNECT_TIMEOUT_REASON_CODE)
#define CFG80211_CONNECT_RESULT(dev, bssid, bss, req_ie, req_ie_len, resp_ie, \
                resp_ie_len, status, gfp) \
        cfg80211_connect_bss(dev, bssid, bss, req_ie, req_ie_len, resp_ie, \
                resp_ie_len, status, gfp, NL80211_TIMEOUT_UNSPECIFIED);
#else
#define CFG80211_CONNECT_RESULT(dev, bssid, bss, req_ie, req_ie_len, resp_ie, \
                resp_ie_len, status, gfp) \
        cfg80211_connect_bss(dev, bssid, bss, req_ie, req_ie_len, resp_ie, \
                resp_ie_len, status, gfp);
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(4, 11, 0) || \
          (CFG80211_CONNECT_TIMEOUT_REASON_CODE)
        */
#elif defined(CFG80211_CONNECT_TIMEOUT_REASON_CODE)
/* There are customer kernels with backported changes for
 *  connect timeout. CFG80211_CONNECT_TIMEOUT_REASON_CODE define
 * is available for kernels < 4.7 in such cases.
 */
#define CFG80211_CONNECT_RESULT(dev, bssid, bss, req_ie, req_ie_len, resp_ie, \
                resp_ie_len, status, gfp) \
        cfg80211_connect_bss(dev, bssid, NULL, req_ie, req_ie_len, resp_ie, \
                resp_ie_len, status, gfp, NL80211_TIMEOUT_UNSPECIFIED);
#else
/* Kernels < 4.7 doesn't support cfg80211_connect_bss */
#define CFG80211_CONNECT_RESULT(dev, bssid, bss, req_ie, req_ie_len, resp_ie, \
                resp_ie_len, status, gfp) \
        cfg80211_connect_result(dev, bssid, req_ie, req_ie_len, resp_ie, \
                resp_ie_len, status, gfp);
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(4, 7, 0) */

#ifdef RSSI_OFFSET
static s32 wl_rssi_offset(s32 rssi)
{
        rssi += RSSI_OFFSET;
        if (rssi > 0)
                rssi = 0;
        return rssi;
}
#else
#define wl_rssi_offset(x)       x
#endif // endif

#define IS_WPA_AKM(akm) ((akm) == RSN_AKM_NONE ||                       \
                                 (akm) == RSN_AKM_UNSPECIFIED ||        \
                                 (akm) == RSN_AKM_PSK)

extern int dhd_wait_pend8021x(struct net_device *dev);
#ifdef PROP_TXSTATUS_VSDB
extern int disable_proptx;
#endif /* PROP_TXSTATUS_VSDB */

#if defined(FORCE_DISABLE_SINGLECORE_SCAN)
extern void dhd_force_disable_singlcore_scan(dhd_pub_t *dhd);
#endif /* FORCE_DISABLE_SINGLECORE_SCAN */

extern int passive_channel_skip;

static s32
wl_ap_start_ind(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
static s32
wl_csa_complete_ind(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data);
#if ((LINUX_VERSION_CODE >= KERNEL_VERSION (3, 5, 0)) && (LINUX_VERSION_CODE <= (3, 7, \
        0)))
struct chan_info {
        int freq;
        int chan_type;
};
#endif // endif

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0))
#define CFG80211_PUT_BSS(wiphy, bss) cfg80211_put_bss(wiphy, bss);
#else
#define CFG80211_PUT_BSS(wiphy, bss) cfg80211_put_bss(bss);
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0) */

#define CHAN2G(_channel, _freq, _flags) {                       \
        .band                   = NL80211_BAND_2GHZ,            \
        .center_freq            = (_freq),                      \
        .hw_value               = (_channel),                   \
        .flags                  = (_flags),                     \
        .max_antenna_gain       = 0,                            \
        .max_power              = 30,                           \
}

#define CHAN5G(_channel, _flags) {                              \
        .band                   = NL80211_BAND_5GHZ,            \
        .center_freq            = 5000 + (5 * (_channel)),      \
        .hw_value               = (_channel),                   \
        .flags                  = (_flags),                     \
        .max_antenna_gain       = 0,                            \
        .max_power              = 30,                           \
}

#define RATE_TO_BASE100KBPS(rate)   (((rate) * 10) / 2)
#define RATETAB_ENT(_rateid, _flags) \
        {                                                               \
                .bitrate        = RATE_TO_BASE100KBPS(_rateid),     \
                .hw_value       = (_rateid),                        \
                .flags    = (_flags),                        \
        }

static struct ieee80211_rate __wl_rates[] = {
        RATETAB_ENT(DOT11_RATE_1M, 0),
        RATETAB_ENT(DOT11_RATE_2M, IEEE80211_RATE_SHORT_PREAMBLE),
        RATETAB_ENT(DOT11_RATE_5M5, IEEE80211_RATE_SHORT_PREAMBLE),
        RATETAB_ENT(DOT11_RATE_11M, IEEE80211_RATE_SHORT_PREAMBLE),
        RATETAB_ENT(DOT11_RATE_6M, 0),
        RATETAB_ENT(DOT11_RATE_9M, 0),
        RATETAB_ENT(DOT11_RATE_12M, 0),
        RATETAB_ENT(DOT11_RATE_18M, 0),
        RATETAB_ENT(DOT11_RATE_24M, 0),
        RATETAB_ENT(DOT11_RATE_36M, 0),
        RATETAB_ENT(DOT11_RATE_48M, 0),
        RATETAB_ENT(DOT11_RATE_54M, 0)
};

#define wl_a_rates              (__wl_rates + 4)
#define wl_a_rates_size 8
#define wl_g_rates              (__wl_rates + 0)
#define wl_g_rates_size 12

static struct ieee80211_channel __wl_2ghz_channels[] = {
        CHAN2G(1, 2412, 0),
        CHAN2G(2, 2417, 0),
        CHAN2G(3, 2422, 0),
        CHAN2G(4, 2427, 0),
        CHAN2G(5, 2432, 0),
        CHAN2G(6, 2437, 0),
        CHAN2G(7, 2442, 0),
        CHAN2G(8, 2447, 0),
        CHAN2G(9, 2452, 0),
        CHAN2G(10, 2457, 0),
        CHAN2G(11, 2462, 0),
        CHAN2G(12, 2467, 0),
        CHAN2G(13, 2472, 0),
        CHAN2G(14, 2484, 0)
};

static struct ieee80211_channel __wl_5ghz_a_channels[] = {
        CHAN5G(34, 0), CHAN5G(36, 0),
        CHAN5G(38, 0), CHAN5G(40, 0),
        CHAN5G(42, 0), CHAN5G(44, 0),
        CHAN5G(46, 0), CHAN5G(48, 0),
        CHAN5G(52, 0), CHAN5G(56, 0),
        CHAN5G(60, 0), CHAN5G(64, 0),
        CHAN5G(100, 0), CHAN5G(104, 0),
        CHAN5G(108, 0), CHAN5G(112, 0),
        CHAN5G(116, 0), CHAN5G(120, 0),
        CHAN5G(124, 0), CHAN5G(128, 0),
        CHAN5G(132, 0), CHAN5G(136, 0),
        CHAN5G(140, 0), CHAN5G(144, 0),
        CHAN5G(149, 0), CHAN5G(153, 0),
        CHAN5G(157, 0), CHAN5G(161, 0),
        CHAN5G(165, 0)
};

static struct ieee80211_supported_band __wl_band_2ghz = {
        .band = NL80211_BAND_2GHZ,
        .channels = __wl_2ghz_channels,
        .n_channels = ARRAY_SIZE(__wl_2ghz_channels),
        .bitrates = wl_g_rates,
        .n_bitrates = wl_g_rates_size
};

static struct ieee80211_supported_band __wl_band_5ghz_a = {
        .band = NL80211_BAND_5GHZ,
        .channels = __wl_5ghz_a_channels,
        .n_channels = ARRAY_SIZE(__wl_5ghz_a_channels),
        .bitrates = wl_a_rates,
        .n_bitrates = wl_a_rates_size
};

static const u32 __wl_cipher_suites[] = {
        WLAN_CIPHER_SUITE_WEP40,
        WLAN_CIPHER_SUITE_WEP104,
        WLAN_CIPHER_SUITE_TKIP,
        WLAN_CIPHER_SUITE_CCMP,
#ifdef MFP
        /*
         * Advertising AES_CMAC cipher suite to userspace would imply that we
         * are supporting MFP. So advertise only when MFP support is enabled.
         */
        WLAN_CIPHER_SUITE_AES_CMAC,
#endif /* MFP */
#ifdef BCMWAPI_WPI
        WLAN_CIPHER_SUITE_SMS4,
#endif // endif
#if defined(WLAN_CIPHER_SUITE_PMK)
        WLAN_CIPHER_SUITE_PMK,
#endif /* WLAN_CIPHER_SUITE_PMK */
};

#ifdef WL_SUPPORT_ACS
/*
 * The firmware code required for this feature to work is currently under
 * BCMINTERNAL flag. In future if this is to enabled we need to bring the
 * required firmware code out of the BCMINTERNAL flag.
 */
struct wl_dump_survey {
        u32 obss;
        u32 ibss;
        u32 no_ctg;
        u32 no_pckt;
        u32 tx;
        u32 idle;
};
#endif /* WL_SUPPORT_ACS */

#ifdef WL_CFG80211_GON_COLLISION
#define BLOCK_GON_REQ_MAX_NUM 5
#endif /* WL_CFG80211_GON_COLLISION */

#if defined(USE_DYNAMIC_MAXPKT_RXGLOM)
static int maxrxpktglom = 0;
#endif // endif

/* IOCtl version read from targeted driver */
int ioctl_version;
#ifdef DEBUGFS_CFG80211
#define SUBLOGLEVEL 20
#define SUBLOGLEVELZ ((SUBLOGLEVEL) + (1))
static const struct {
        u32 log_level;
        char *sublogname;
} sublogname_map[] = {
        {WL_DBG_ERR, "ERR"},
        {WL_DBG_INFO, "INFO"},
        {WL_DBG_DBG, "DBG"},
        {WL_DBG_SCAN, "SCAN"},
        {WL_DBG_TRACE, "TRACE"},
        {WL_DBG_P2P_ACTION, "P2PACTION"}
};
#endif // endif

#define BUFSZ 5
#define BUFSZN  BUFSZ + 1

#define _S(x) #x
#define S(x) _S(x)

#define SOFT_AP_IF_NAME         "swlan0"

#ifdef P2P_LISTEN_OFFLOADING
void wl_cfg80211_cancel_p2plo(struct bcm_cfg80211 *cfg);
#endif /* P2P_LISTEN_OFFLOADING */

#ifdef CUSTOMER_HW4_DEBUG
uint prev_dhd_console_ms = 0;
u32 prev_wl_dbg_level = 0;
bool wl_scan_timeout_dbg_enabled = 0;
static void wl_scan_timeout_dbg_set(void);
static void wl_scan_timeout_dbg_clear(void);

static void wl_scan_timeout_dbg_set(void)
{
        WL_ERR(("Enter \n"));
        prev_dhd_console_ms = dhd_console_ms;
        prev_wl_dbg_level = wl_dbg_level;

        dhd_console_ms = 1;
        wl_dbg_level |= (WL_DBG_ERR | WL_DBG_P2P_ACTION | WL_DBG_SCAN);

        wl_scan_timeout_dbg_enabled = 1;
}
static void wl_scan_timeout_dbg_clear(void)
{
        WL_ERR(("Enter \n"));
        dhd_console_ms = prev_dhd_console_ms;
        wl_dbg_level = prev_wl_dbg_level;

        wl_scan_timeout_dbg_enabled = 0;
}
#endif /* CUSTOMER_HW4_DEBUG */

/* watchdog timer for disconnecting when fw is not associated for FW_ASSOC_WATCHDOG_TIME ms */
uint32 fw_assoc_watchdog_ms = 0;
bool fw_assoc_watchdog_started = 0;
#define FW_ASSOC_WATCHDOG_TIME 10 * 1000 /* msec */

static void wl_add_remove_pm_enable_work(struct bcm_cfg80211 *cfg,
        enum wl_pm_workq_act_type type)
{
        u16 wq_duration = 0;
        dhd_pub_t *dhd =  NULL;

        if (cfg == NULL)
                return;

        dhd = (dhd_pub_t *)(cfg->pub);

        mutex_lock(&cfg->pm_sync);
        /*
         * Make cancel and schedule work part mutually exclusive
         * so that while cancelling, we are sure that there is no
         * work getting scheduled.
         */
        if (delayed_work_pending(&cfg->pm_enable_work)) {
                cancel_delayed_work(&cfg->pm_enable_work);
                DHD_PM_WAKE_UNLOCK(cfg->pub);
        }

        if (type == WL_PM_WORKQ_SHORT) {
                wq_duration = WL_PM_ENABLE_TIMEOUT;
        } else if (type == WL_PM_WORKQ_LONG) {
                wq_duration = (WL_PM_ENABLE_TIMEOUT*2);
        }

        /* It should schedule work item only if driver is up */
        if (wq_duration && dhd->up) {
                if (schedule_delayed_work(&cfg->pm_enable_work,
                                msecs_to_jiffies((const unsigned int)wq_duration))) {
                        DHD_PM_WAKE_LOCK_TIMEOUT(cfg->pub, wq_duration);
                } else {
                        WL_ERR(("Can't schedule pm work handler\n"));
                }
        }
        mutex_unlock(&cfg->pm_sync);
}

/* Return a new chanspec given a legacy chanspec
 * Returns INVCHANSPEC on error
 */
chanspec_t
wl_chspec_from_legacy(chanspec_t legacy_chspec)
{
        chanspec_t chspec;

        /* get the channel number */
        chspec = LCHSPEC_CHANNEL(legacy_chspec);

        /* convert the band */
        if (LCHSPEC_IS2G(legacy_chspec)) {
                chspec |= WL_CHANSPEC_BAND_2G;
        } else {
                chspec |= WL_CHANSPEC_BAND_5G;
        }

        /* convert the bw and sideband */
        if (LCHSPEC_IS20(legacy_chspec)) {
                chspec |= WL_CHANSPEC_BW_20;
        } else {
                chspec |= WL_CHANSPEC_BW_40;
                if (LCHSPEC_CTL_SB(legacy_chspec) == WL_LCHANSPEC_CTL_SB_LOWER) {
                        chspec |= WL_CHANSPEC_CTL_SB_L;
                } else {
                        chspec |= WL_CHANSPEC_CTL_SB_U;
                }
        }

        if (wf_chspec_malformed(chspec)) {
                WL_ERR(("wl_chspec_from_legacy: output chanspec (0x%04X) malformed\n",
                        chspec));
                return INVCHANSPEC;
        }

        return chspec;
}

/* Return a legacy chanspec given a new chanspec
 * Returns INVCHANSPEC on error
 */
static chanspec_t
wl_chspec_to_legacy(chanspec_t chspec)
{
        chanspec_t lchspec;

        if (wf_chspec_malformed(chspec)) {
                WL_ERR(("wl_chspec_to_legacy: input chanspec (0x%04X) malformed\n",
                        chspec));
                return INVCHANSPEC;
        }

        /* get the channel number */
        lchspec = CHSPEC_CHANNEL(chspec);

        /* convert the band */
        if (CHSPEC_IS2G(chspec)) {
                lchspec |= WL_LCHANSPEC_BAND_2G;
        } else {
                lchspec |= WL_LCHANSPEC_BAND_5G;
        }

        /* convert the bw and sideband */
        if (CHSPEC_IS20(chspec)) {
                lchspec |= WL_LCHANSPEC_BW_20;
                lchspec |= WL_LCHANSPEC_CTL_SB_NONE;
        } else if (CHSPEC_IS40(chspec)) {
                lchspec |= WL_LCHANSPEC_BW_40;
                if (CHSPEC_CTL_SB(chspec) == WL_CHANSPEC_CTL_SB_L) {
                        lchspec |= WL_LCHANSPEC_CTL_SB_LOWER;
                } else {
                        lchspec |= WL_LCHANSPEC_CTL_SB_UPPER;
                }
        } else {
                /* cannot express the bandwidth */
                char chanbuf[CHANSPEC_STR_LEN];
                WL_ERR((
                        "wl_chspec_to_legacy: unable to convert chanspec %s (0x%04X) "
                        "to pre-11ac format\n",
                        wf_chspec_ntoa(chspec, chanbuf), chspec));
                return INVCHANSPEC;
        }

        return lchspec;
}

/* given a chanspec value, do the endian and chanspec version conversion to
 * a chanspec_t value
 * Returns INVCHANSPEC on error
 */
chanspec_t
wl_chspec_host_to_driver(chanspec_t chanspec)
{
        if (ioctl_version == 1) {
                chanspec = wl_chspec_to_legacy(chanspec);
                if (chanspec == INVCHANSPEC) {
                        return chanspec;
                }
        }
        chanspec = htodchanspec(chanspec);

        return chanspec;
}

/* given a channel value, do the endian and chanspec version conversion to
 * a chanspec_t value
 * Returns INVCHANSPEC on error
 */
chanspec_t
wl_ch_host_to_driver(u16 channel)
{
        chanspec_t chanspec;

        chanspec = channel & WL_CHANSPEC_CHAN_MASK;

        if (channel <= CH_MAX_2G_CHANNEL)
                chanspec |= WL_CHANSPEC_BAND_2G;
        else
                chanspec |= WL_CHANSPEC_BAND_5G;

        chanspec |=  WL_CHANSPEC_BW_20;

        chanspec |= WL_CHANSPEC_CTL_SB_NONE;

        return wl_chspec_host_to_driver(chanspec);
}

/* given a chanspec value from the driver, do the endian and chanspec version conversion to
 * a chanspec_t value
 * Returns INVCHANSPEC on error
 */
chanspec_t
wl_chspec_driver_to_host(chanspec_t chanspec)
{
        chanspec = dtohchanspec(chanspec);
        if (ioctl_version == 1) {
                chanspec = wl_chspec_from_legacy(chanspec);
        }

        return chanspec;
}

/*
 * convert ASCII string to MAC address (colon-delimited format)
 * eg: 00:11:22:33:44:55
 */
int
wl_cfg80211_ether_atoe(const char *a, struct ether_addr *n)
{
        char *c = NULL;
        int count = 0;

        memset(n, 0, ETHER_ADDR_LEN);
        for (;;) {
                n->octet[count++] = (uint8)simple_strtoul(a, &c, 16);
                if (!*c++ || count == ETHER_ADDR_LEN)
                        break;
                a = c;
        }
        return (count == ETHER_ADDR_LEN);
}

/* There isn't a lot of sense in it, but you can transmit anything you like */
static const struct ieee80211_txrx_stypes
wl_cfg80211_default_mgmt_stypes[NUM_NL80211_IFTYPES] = {
        [NL80211_IFTYPE_ADHOC] = {
                .tx = 0xffff,
                .rx = BIT(IEEE80211_STYPE_ACTION >> 4)
        },
        [NL80211_IFTYPE_STATION] = {
                .tx = 0xffff,
                .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
                BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
        },
        [NL80211_IFTYPE_AP] = {
                .tx = 0xffff,
                .rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
                BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
                BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
                BIT(IEEE80211_STYPE_DISASSOC >> 4) |
                BIT(IEEE80211_STYPE_AUTH >> 4) |
                BIT(IEEE80211_STYPE_DEAUTH >> 4) |
                BIT(IEEE80211_STYPE_ACTION >> 4)
        },
        [NL80211_IFTYPE_AP_VLAN] = {
                /* copy AP */
                .tx = 0xffff,
                .rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
                BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
                BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
                BIT(IEEE80211_STYPE_DISASSOC >> 4) |
                BIT(IEEE80211_STYPE_AUTH >> 4) |
                BIT(IEEE80211_STYPE_DEAUTH >> 4) |
                BIT(IEEE80211_STYPE_ACTION >> 4)
        },
        [NL80211_IFTYPE_P2P_CLIENT] = {
                .tx = 0xffff,
                .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
                BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
        },
        [NL80211_IFTYPE_P2P_GO] = {
                .tx = 0xffff,
                .rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
                BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
                BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
                BIT(IEEE80211_STYPE_DISASSOC >> 4) |
                BIT(IEEE80211_STYPE_AUTH >> 4) |
                BIT(IEEE80211_STYPE_DEAUTH >> 4) |
                BIT(IEEE80211_STYPE_ACTION >> 4)
        },
#if defined(WL_CFG80211_P2P_DEV_IF)
        [NL80211_IFTYPE_P2P_DEVICE] = {
                .tx = 0xffff,
                .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
                BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
        },
#endif /* WL_CFG80211_P2P_DEV_IF */
};

static void swap_key_from_BE(struct wl_wsec_key *key)
{
        key->index = htod32(key->index);
        key->len = htod32(key->len);
        key->algo = htod32(key->algo);
        key->flags = htod32(key->flags);
        key->rxiv.hi = htod32(key->rxiv.hi);
        key->rxiv.lo = htod16(key->rxiv.lo);
        key->iv_initialized = htod32(key->iv_initialized);
}

static void swap_key_to_BE(struct wl_wsec_key *key)
{
        key->index = dtoh32(key->index);
        key->len = dtoh32(key->len);
        key->algo = dtoh32(key->algo);
        key->flags = dtoh32(key->flags);
        key->rxiv.hi = dtoh32(key->rxiv.hi);
        key->rxiv.lo = dtoh16(key->rxiv.lo);
        key->iv_initialized = dtoh32(key->iv_initialized);
}

/* Dump the contents of the encoded wps ie buffer and get pbc value */
static void
wl_validate_wps_ie(const char *wps_ie, s32 wps_ie_len, bool *pbc)
{
        #define WPS_IE_FIXED_LEN 6
        s16 len;
        const u8 *subel = NULL;
        u16 subelt_id;
        u16 subelt_len;
        u16 val;
        u8 *valptr = (uint8*) &val;
        if (wps_ie == NULL || wps_ie_len < WPS_IE_FIXED_LEN) {
                WL_ERR(("invalid argument : NULL\n"));
                return;
        }
        len = (s16)wps_ie[TLV_LEN_OFF];

        if (len > wps_ie_len) {
                WL_ERR(("invalid length len %d, wps ie len %d\n", len, wps_ie_len));
                return;
        }
        WL_DBG(("wps_ie len=%d\n", len));
        len -= 4;       /* for the WPS IE's OUI, oui_type fields */
        subel = wps_ie + WPS_IE_FIXED_LEN;
        while (len >= 4) {              /* must have attr id, attr len fields */
                valptr[0] = *subel++;
                valptr[1] = *subel++;
                subelt_id = HTON16(val);

                valptr[0] = *subel++;
                valptr[1] = *subel++;
                subelt_len = HTON16(val);

                len -= 4;                       /* for the attr id, attr len fields */
                len -= (s16)subelt_len; /* for the remaining fields in this attribute */
                if (len < 0) {
                        break;
                }
                WL_DBG((" subel=%p, subelt_id=0x%x subelt_len=%u\n",
                        subel, subelt_id, subelt_len));

                if (subelt_id == WPS_ID_VERSION) {
                        WL_DBG(("  attr WPS_ID_VERSION: %u\n", *subel));
                } else if (subelt_id == WPS_ID_REQ_TYPE) {
                        WL_DBG(("  attr WPS_ID_REQ_TYPE: %u\n", *subel));
                } else if (subelt_id == WPS_ID_CONFIG_METHODS) {
                        valptr[0] = *subel;
                        valptr[1] = *(subel + 1);
                        WL_DBG(("  attr WPS_ID_CONFIG_METHODS: %x\n", HTON16(val)));
                } else if (subelt_id == WPS_ID_DEVICE_NAME) {
                        char devname[33];
                        int namelen = MIN(subelt_len, (sizeof(devname) - 1));

                        if (namelen) {
                                memcpy(devname, subel, namelen);
                                devname[namelen] = '\0';
                                /* Printing len as rx'ed in the IE */
                                WL_DBG(("  attr WPS_ID_DEVICE_NAME: %s (len %u)\n",
                                        devname, subelt_len));
                        }
                } else if (subelt_id == WPS_ID_DEVICE_PWD_ID) {
                        valptr[0] = *subel;
                        valptr[1] = *(subel + 1);
                        WL_DBG(("  attr WPS_ID_DEVICE_PWD_ID: %u\n", HTON16(val)));
                        *pbc = (HTON16(val) == DEV_PW_PUSHBUTTON) ? true : false;
                } else if (subelt_id == WPS_ID_PRIM_DEV_TYPE) {
                        valptr[0] = *subel;
                        valptr[1] = *(subel + 1);
                        WL_DBG(("  attr WPS_ID_PRIM_DEV_TYPE: cat=%u \n", HTON16(val)));
                        valptr[0] = *(subel + 6);
                        valptr[1] = *(subel + 7);
                        WL_DBG(("  attr WPS_ID_PRIM_DEV_TYPE: subcat=%u\n", HTON16(val)));
                } else if (subelt_id == WPS_ID_REQ_DEV_TYPE) {
                        valptr[0] = *subel;
                        valptr[1] = *(subel + 1);
                        WL_DBG(("  attr WPS_ID_REQ_DEV_TYPE: cat=%u\n", HTON16(val)));
                        valptr[0] = *(subel + 6);
                        valptr[1] = *(subel + 7);
                        WL_DBG(("  attr WPS_ID_REQ_DEV_TYPE: subcat=%u\n", HTON16(val)));
                } else if (subelt_id == WPS_ID_SELECTED_REGISTRAR_CONFIG_METHODS) {
                        valptr[0] = *subel;
                        valptr[1] = *(subel + 1);
                        WL_DBG(("  attr WPS_ID_SELECTED_REGISTRAR_CONFIG_METHODS"
                                ": cat=%u\n", HTON16(val)));
                } else {
                        WL_DBG(("  unknown attr 0x%x\n", subelt_id));
                }

                subel += subelt_len;
        }
}

s32 wl_set_tx_power(struct net_device *dev,
        enum nl80211_tx_power_setting type, s32 dbm)
{
        s32 err = 0;
        s32 disable = 0;
        s32 txpwrqdbm;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        /* Make sure radio is off or on as far as software is concerned */
        disable = WL_RADIO_SW_DISABLE << 16;
        disable = htod32(disable);
        err = wldev_ioctl_set(dev, WLC_SET_RADIO, &disable, sizeof(disable));
        if (unlikely(err)) {
                WL_ERR(("WLC_SET_RADIO error (%d)\n", err));
                return err;
        }

        if (dbm > 0xffff)
                dbm = 0xffff;
        txpwrqdbm = dbm * 4;
#ifdef SUPPORT_WL_TXPOWER
        if (type == NL80211_TX_POWER_AUTOMATIC)
                txpwrqdbm = 127;
        else
                txpwrqdbm |= WL_TXPWR_OVERRIDE;
#endif /* SUPPORT_WL_TXPOWER */
        err = wldev_iovar_setbuf_bsscfg(dev, "qtxpower", (void *)&txpwrqdbm,
                sizeof(txpwrqdbm), cfg->ioctl_buf, WLC_IOCTL_SMLEN, 0,
                &cfg->ioctl_buf_sync);
        if (unlikely(err))
                WL_ERR(("qtxpower error (%d)\n", err));
        else
                WL_ERR(("dBm=%d, txpwrqdbm=0x%x\n", dbm, txpwrqdbm));

        return err;
}

s32 wl_get_tx_power(struct net_device *dev, s32 *dbm)
{
        s32 err = 0;
        s32 txpwrdbm;
        char ioctl_buf[WLC_IOCTL_SMLEN];

        err = wldev_iovar_getbuf_bsscfg(dev, "qtxpower",
                NULL, 0, ioctl_buf, WLC_IOCTL_SMLEN, 0, NULL);
        if (unlikely(err)) {
                WL_ERR(("error (%d)\n", err));
                return err;
        }

        memcpy(&txpwrdbm, ioctl_buf, sizeof(txpwrdbm));
        txpwrdbm = dtoh32(txpwrdbm);
        *dbm = (txpwrdbm & ~WL_TXPWR_OVERRIDE) / 4;

        WL_DBG(("dBm=%d, txpwrdbm=0x%x\n", *dbm, txpwrdbm));

        return err;
}

static chanspec_t wl_cfg80211_get_shared_freq(struct wiphy *wiphy)
{
        chanspec_t chspec;
        int cur_band, err = 0;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_device *dev = bcmcfg_to_prmry_ndev(cfg);
        struct ether_addr bssid;
        wl_bss_info_t *bss = NULL;
        u16 channel = WL_P2P_TEMP_CHAN;
        char *buf;

        memset(&bssid, 0, sizeof(bssid));
        if ((err = wldev_ioctl_get(dev, WLC_GET_BSSID, &bssid, sizeof(bssid)))) {
                /* STA interface is not associated. So start the new interface on a temp
                 * channel . Later proper channel will be applied by the above framework
                 * via set_channel (cfg80211 API).
                 */
                WL_DBG(("Not associated. Return a temp channel. \n"));
                cur_band = 0;
                err = wldev_ioctl_get(dev, WLC_GET_BAND, &cur_band, sizeof(int));
                if (unlikely(err)) {
                        WL_ERR(("Get band failed\n"));
                } else if (cur_band == WLC_BAND_5G) {
                        channel = WL_P2P_TEMP_CHAN_5G;
                }
                return wl_ch_host_to_driver(channel);
        }

        buf = (char *)MALLOCZ(cfg->osh, WL_EXTRA_BUF_MAX);
        if (!buf) {
                WL_ERR(("buf alloc failed. use temp channel\n"));
                return wl_ch_host_to_driver(channel);
        }

        *(u32 *)buf = htod32(WL_EXTRA_BUF_MAX);
        if ((err = wldev_ioctl_get(dev, WLC_GET_BSS_INFO, buf,
                WL_EXTRA_BUF_MAX))) {
                        WL_ERR(("Failed to get associated bss info, use temp channel \n"));
                        chspec = wl_ch_host_to_driver(channel);
        }
        else {
                        bss = (wl_bss_info_t *) (buf + 4);
                        chspec =  bss->chanspec;

                        WL_DBG(("Valid BSS Found. chanspec:%d \n", chspec));
        }

        MFREE(cfg->osh, buf, WL_EXTRA_BUF_MAX);
        return chspec;
}

static void
wl_wlfc_enable(struct bcm_cfg80211 *cfg, bool enable)
{
#ifdef PROP_TXSTATUS_VSDB
#if defined(BCMSDIO)
        bool wlfc_enabled = FALSE;
        s32 err;
        dhd_pub_t *dhd;
        struct net_device *primary_ndev = bcmcfg_to_prmry_ndev(cfg);

        dhd = (dhd_pub_t *)(cfg->pub);
        if (!dhd) {
                return;
        }

        if (enable) {
                if (!cfg->wlfc_on && !disable_proptx) {
                        dhd_wlfc_get_enable(dhd, &wlfc_enabled);
                        if (!wlfc_enabled && dhd->op_mode != DHD_FLAG_HOSTAP_MODE &&
                                dhd->op_mode != DHD_FLAG_IBSS_MODE) {
                                dhd_wlfc_init(dhd);
                                err = wldev_ioctl_set(primary_ndev, WLC_UP, &up, sizeof(s32));
                                if (err < 0)
                                        WL_ERR(("WLC_UP return err:%d\n", err));
                        }
                        cfg->wlfc_on = true;
                        WL_DBG(("wlfc_on:%d \n", cfg->wlfc_on));
                }
        } else {
                        dhd_wlfc_deinit(dhd);
                        cfg->wlfc_on = false;
        }
#endif /* defined(BCMSDIO) */
#endif /* PROP_TXSTATUS_VSDB */
}

struct wireless_dev *
wl_cfg80211_p2p_if_add(struct bcm_cfg80211 *cfg,
        wl_iftype_t wl_iftype,
        char const *name, u8 *mac_addr, s32 *ret_err)
{
        u16 chspec;
        s16 cfg_type;
        long timeout;
        s32 err;
        u16 p2p_iftype;
        int dhd_mode;
        struct net_device *new_ndev = NULL;
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
        struct ether_addr *p2p_addr;

        *ret_err = BCME_OK;
        if (!cfg->p2p) {
                WL_ERR(("p2p not initialized\n"));
                return NULL;
        }
#if defined(WL_CFG80211_P2P_DEV_IF)
        if (wl_iftype == WL_IF_TYPE_P2P_DISC) {
                /* Handle Dedicated P2P discovery Interface */
                return wl_cfgp2p_add_p2p_disc_if(cfg);
        }
#endif /* WL_CFG80211_P2P_DEV_IF */

        if (wl_iftype == WL_IF_TYPE_P2P_GO) {
                p2p_iftype = WL_P2P_IF_GO;
        } else {
                p2p_iftype = WL_P2P_IF_CLIENT;
        }

        /* Dual p2p doesn't support multiple P2PGO interfaces,
         * p2p_go_count is the counter for GO creation
         * requests.
         */
        if ((cfg->p2p->p2p_go_count > 0) && (wl_iftype == WL_IF_TYPE_P2P_GO)) {
                WL_ERR(("FW does not support multiple GO\n"));
                *ret_err = -ENOTSUPP;
                return NULL;
        }
        if (!cfg->p2p->on) {
                p2p_on(cfg) = true;
                wl_cfgp2p_set_firm_p2p(cfg);
                wl_cfgp2p_init_discovery(cfg);
        }

        strncpy(cfg->p2p->vir_ifname, name, IFNAMSIZ - 1);
        cfg->p2p->vir_ifname[IFNAMSIZ - 1] = '\0';
        /* In concurrency case, STA may be already associated in a particular channel.
         * so retrieve the current channel of primary interface and then start the virtual
         * interface on that.
         */
         chspec = wl_cfg80211_get_shared_freq(wiphy);

        /* For P2P mode, use P2P-specific driver features to create the
         * bss: "cfg p2p_ifadd"
         */
        if (wl_check_dongle_idle(wiphy) != TRUE) {
                WL_ERR(("FW is busy to add interface"));
                return ERR_PTR(-ENOMEM);
        }
        wl_set_p2p_status(cfg, IF_ADDING);
        memset(&cfg->if_event_info, 0, sizeof(cfg->if_event_info));
        cfg_type = wl_cfgp2p_get_conn_idx(cfg);
        if (cfg_type == BCME_ERROR) {
                wl_clr_p2p_status(cfg, IF_ADDING);
                WL_ERR(("Failed to get connection idx for p2p interface"));
                return NULL;
        }

        p2p_addr = wl_to_p2p_bss_macaddr(cfg, cfg_type);
        memcpy(p2p_addr->octet, mac_addr, ETH_ALEN);

        err = wl_cfgp2p_ifadd(cfg, p2p_addr,
                htod32(p2p_iftype), chspec);
        if (unlikely(err)) {
                wl_clr_p2p_status(cfg, IF_ADDING);
                WL_ERR((" virtual iface add failed (%d) \n", err));
                return NULL;
        }

        /* Wait for WLC_E_IF event with IF_ADD opcode */
        timeout = wait_event_interruptible_timeout(cfg->netif_change_event,
                ((wl_get_p2p_status(cfg, IF_ADDING) == false) &&
                (cfg->if_event_info.valid)),
                msecs_to_jiffies(MAX_WAIT_TIME));
        if (timeout > 0 && !wl_get_p2p_status(cfg, IF_ADDING) && cfg->if_event_info.valid) {
                wl_if_event_info *event = &cfg->if_event_info;
                new_ndev = wl_cfg80211_post_ifcreate(bcmcfg_to_prmry_ndev(cfg), event,
                        event->mac, cfg->p2p->vir_ifname, false);
                if (unlikely(!new_ndev)) {
                        goto fail;
                }

                if (wl_iftype == WL_IF_TYPE_P2P_GO) {
                        cfg->p2p->p2p_go_count++;
                }
                /* Fill p2p specific data */
                wl_to_p2p_bss_ndev(cfg, cfg_type) = new_ndev;
                wl_to_p2p_bss_bssidx(cfg, cfg_type) = event->bssidx;

                WL_ERR((" virtual interface(%s) is "
                        "created net attach done\n", cfg->p2p->vir_ifname));
                dhd_mode = (wl_iftype == WL_IF_TYPE_P2P_GC) ?
                        DHD_FLAG_P2P_GC_MODE : DHD_FLAG_P2P_GO_MODE;
                DNGL_FUNC(dhd_cfg80211_set_p2p_info, (cfg, dhd_mode));
                        /* reinitialize completion to clear previous count */
#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 13, 0))
                        INIT_COMPLETION(cfg->iface_disable);
#else
                        init_completion(&cfg->iface_disable);
#endif /* LINUX_VERSION_CODE < KERNEL_VERSION(3, 13, 0) */

                        return new_ndev->ieee80211_ptr;
        }

fail:
        return NULL;
}

static s32
wl_check_vif_support(struct bcm_cfg80211 *cfg, wl_iftype_t wl_iftype)
{
        s32 ret = BCME_OK;
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);

#ifdef WL_NAN
        if ((cfg->nan_enable) && (wl_iftype != WL_IF_TYPE_NAN)) {
                ret = wl_cfgnan_disable(cfg, NAN_CONCURRENCY_CONFLICT);
                if (ret != BCME_OK) {
                        WL_ERR(("failed to disable nan, error[%d]\n", ret));
                        goto exit;
                }
        }
#endif /* WL_NAN */
        /* If P2PGroup/Softap is enabled, another VIF
         * iface create request can't be supported
         */
        if ((wl_cfgp2p_vif_created(cfg)) ||
                (dhd->op_mode & DHD_FLAG_HOSTAP_MODE)) {
                WL_ERR(("Additional vif can't be supported [%d]\n",
                        dhd->op_mode));
                        ret = -ENOTSUPP;
                        goto exit;
        }
exit:
        return ret;
}

void
wl_cfg80211_iface_state_ops(struct wireless_dev *wdev,
        wl_interface_state_t state,
        wl_iftype_t wl_iftype, u16 wl_mode)
{
        struct net_device *ndev;
        struct bcm_cfg80211 *cfg;
#if defined(CUSTOM_SET_CPUCORE)
        dhd_pub_t *dhd;
#endif // endif
        s32 bssidx;

        WL_DBG(("state:%s wl_iftype:%d mode:%d\n",
                wl_if_state_strs[state], wl_iftype, wl_mode));
        if (!wdev) {
                WL_ERR(("wdev null\n"));
                return;
        }

        if ((wl_iftype == WL_IF_TYPE_P2P_DISC) || (wl_iftype == WL_IF_TYPE_NAN_NMI)) {
                /* P2P discovery is a netless device and uses a
                 * hidden bsscfg interface in fw. Don't apply the
                 * iface ops state changes for p2p discovery I/F.
                 * NAN NMI is netless device and uses a hidden bsscfg interface in fw.
                 * Don't apply iface ops state changes for NMI I/F.
                 */
                return;
        }

        cfg = wiphy_priv(wdev->wiphy);
        ndev = wdev->netdev;
#ifdef CUSTOM_SET_CPUCORE
        dhd = (dhd_pub_t *)(cfg->pub);
#endif /* CUSTOM_SET_CPUCORE */

        bssidx = wl_get_bssidx_by_wdev(cfg, wdev);
        if (!ndev || (bssidx < 0)) {
                WL_ERR(("ndev null. skip iface state ops\n"));
                return;
        }

        switch (state) {
                case WL_IF_CREATE_REQ:
#ifdef WL_BCNRECV
                        /* check fakeapscan in progress then abort */
                        wl_android_bcnrecv_stop(ndev, WL_BCNRECV_CONCURRENCY);
#endif /* WL_BCNRECV */
                        wl_cfg80211_scan_abort(cfg);
                        wl_wlfc_enable(cfg, true);

#ifdef WLTDLS
                        if (wl_iftype == WL_IF_TYPE_NAN) {
                                /* disable TDLS on NAN IF create  */
                                wl_cfg80211_tdls_config(cfg, TDLS_STATE_NDI_CREATE, false);
                        }
                        else {
                                /* disable TDLS if number of connected interfaces is >= 1 */
                                wl_cfg80211_tdls_config(cfg, TDLS_STATE_IF_CREATE, false);
                        }
#endif /* WLTDLS */
                        break;
                case WL_IF_DELETE_REQ:
#ifdef WL_WPS_SYNC
                        wl_wps_handle_ifdel(ndev);
#endif /* WPS_SYNC */
                        if (wl_get_drv_status(cfg, SCANNING, ndev)) {
                                /* Send completion for any pending scans */
                                wl_cfg80211_cancel_scan(cfg);
                        }

#ifdef CUSTOM_SET_CPUCORE
                        dhd->chan_isvht80 &= ~DHD_FLAG_P2P_MODE;
                        if (!(dhd->chan_isvht80)) {
                                dhd_set_cpucore(dhd, FALSE);
                        }
#endif /* CUSTOM_SET_CPUCORE */
                         wl_add_remove_pm_enable_work(cfg, WL_PM_WORKQ_DEL);
                        break;
                case WL_IF_CREATE_DONE:
                        if (wl_mode == WL_MODE_BSS) {
                                /* Common code for sta type interfaces - STA, GC */
                                wldev_iovar_setint(ndev, "buf_key_b4_m4", 1);
                        }
                        if (wl_iftype == WL_IF_TYPE_P2P_GC) {
                                /* Disable firmware roaming for P2P interface  */
                                wldev_iovar_setint(ndev, "roam_off", 1);
                        }
                        if (wl_mode == WL_MODE_AP) {
                                /* Common code for AP/GO */
                        }
                        break;
                case WL_IF_DELETE_DONE:
#ifdef WLTDLS
                        /* Enable back TDLS if connected interface is <= 1 */
                        wl_cfg80211_tdls_config(cfg, TDLS_STATE_IF_DELETE, false);
#endif /* WLTDLS */
                        wl_wlfc_enable(cfg, false);
                        break;
                case WL_IF_CHANGE_REQ:
                        /* Flush existing IEs from firmware on role change */
                        wl_cfg80211_clear_per_bss_ies(cfg, wdev);
                        break;
                case WL_IF_CHANGE_DONE:
                        if (wl_mode == WL_MODE_BSS) {
                                /* Enable buffering of PTK key till EAPOL 4/4 is sent out */
                                wldev_iovar_setint(ndev, "buf_key_b4_m4", 1);
                        }
                        break;

                default:
                        WL_ERR(("Unsupported state: %d\n", state));
                        return;
        }
}

static s32
wl_cfg80211_p2p_if_del(struct wiphy *wiphy, struct wireless_dev *wdev)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s16 bssidx;
        s16 err;
        s32 cfg_type;
        struct net_device *ndev;
        long timeout;

        if (unlikely(!wl_get_drv_status(cfg, READY, bcmcfg_to_prmry_ndev(cfg)))) {
                WL_INFORM_MEM(("device is not ready\n"));
                return BCME_NOTFOUND;
        }

#ifdef WL_CFG80211_P2P_DEV_IF
        if (wdev->iftype == NL80211_IFTYPE_P2P_DEVICE) {
                /* Handle dedicated P2P discovery interface. */
                return wl_cfgp2p_del_p2p_disc_if(wdev, cfg);
        }
#endif /* WL_CFG80211_P2P_DEV_IF */

        /* Handle P2P Group Interface */
        bssidx = wl_get_bssidx_by_wdev(cfg, wdev);
        if (bssidx <= 0) {
                WL_ERR(("bssidx not found\n"));
                return BCME_NOTFOUND;
        }
        if (wl_cfgp2p_find_type(cfg, bssidx, &cfg_type) != BCME_OK) {
                /* Couldn't find matching iftype */
                WL_MEM(("non P2P interface\n"));
                return BCME_NOTFOUND;
        }

        if (wl_check_dongle_idle(wiphy) != TRUE) {
                WL_ERR(("FW is busy to add interface"));
                return BCME_ERROR;
        }

        ndev = wdev->netdev;
        wl_clr_p2p_status(cfg, GO_NEG_PHASE);
        wl_clr_p2p_status(cfg, IF_ADDING);

        /* for GO */
        if (wl_get_mode_by_netdev(cfg, ndev) == WL_MODE_AP) {
                wl_add_remove_eventmsg(ndev, WLC_E_PROBREQ_MSG, false);
                cfg->p2p->p2p_go_count--;
                /* disable interface before bsscfg free */
                err = wl_cfgp2p_ifdisable(cfg, wl_to_p2p_bss_macaddr(cfg, cfg_type));
                /* if fw doesn't support "ifdis",
                   do not wait for link down of ap mode
                 */
                if (err == 0) {
                        WL_ERR(("Wait for Link Down event for GO !!!\n"));
                        wait_for_completion_timeout(&cfg->iface_disable,
                                msecs_to_jiffies(500));
                } else if (err != BCME_UNSUPPORTED) {
                        msleep(300);
                }
        } else {
                /* GC case */
                if (wl_get_drv_status(cfg, DISCONNECTING, ndev)) {
                        WL_ERR(("Wait for Link Down event for GC !\n"));
                        wait_for_completion_timeout
                                        (&cfg->iface_disable, msecs_to_jiffies(500));
                }
        }

        memset(&cfg->if_event_info, 0, sizeof(cfg->if_event_info));
        wl_set_p2p_status(cfg, IF_DELETING);
        DNGL_FUNC(dhd_cfg80211_clean_p2p_info, (cfg));

        err = wl_cfgp2p_ifdel(cfg, wl_to_p2p_bss_macaddr(cfg, cfg_type));
        if (unlikely(err)) {
                WL_ERR(("IFDEL operation failed, error code = %d\n", err));
                goto fail;
        } else {
                /* Wait for WLC_E_IF event */
                timeout = wait_event_interruptible_timeout(cfg->netif_change_event,
                        ((wl_get_p2p_status(cfg, IF_DELETING) == false) &&
                        (cfg->if_event_info.valid)),
                        msecs_to_jiffies(MAX_WAIT_TIME));
                if (timeout > 0 && !wl_get_p2p_status(cfg, IF_DELETING) &&
                        cfg->if_event_info.valid) {
                        WL_ERR(("P2P IFDEL operation done\n"));
                        err = BCME_OK;
                } else {
                        WL_ERR(("IFDEL didn't complete properly\n"));
                        err = -EINVAL;
                }
        }

fail:
        /* Even in failure case, attempt to remove the host data structure.
         * Firmware would be cleaned up via WiFi reset done by the
         * user space from hang event context (for android only).
         */
        memset(cfg->p2p->vir_ifname, '\0', IFNAMSIZ);
        wl_to_p2p_bss_bssidx(cfg, cfg_type) = -1;
        wl_to_p2p_bss_ndev(cfg, cfg_type) = NULL;
        wl_clr_drv_status(cfg, CONNECTED, wl_to_p2p_bss_ndev(cfg, cfg_type));
        dhd_net_if_lock(ndev);
        if (cfg->if_event_info.ifidx) {
                /* Remove interface except for primary ifidx */
                wl_cfg80211_remove_if(cfg, cfg->if_event_info.ifidx, ndev, FALSE);
        }
        dhd_net_if_unlock(ndev);
        return err;
}

static struct wireless_dev *
wl_cfg80211_add_monitor_if(struct wiphy *wiphy, const char *name)
{
#if defined(WL_ENABLE_P2P_IF) || defined(WL_CFG80211_P2P_DEV_IF)
        WL_ERR(("wl_cfg80211_add_monitor_if: No more support monitor interface\n"));
        return ERR_PTR(-EOPNOTSUPP);
#else
        struct wireless *wdev;
        struct net_device* ndev = NULL;

        dhd_add_monitor(name, &ndev);

        wdev = kzalloc(sizeof(*wdev), GFP_KERNEL);
        if (!wdev) {
                WL_ERR(("wireless_dev alloc failed! \n"));
                goto fail;
        }

        wdev->wiphy = wiphy;
        wdev->iftype = iface_type;
        ndev->ieee80211_ptr = wdev;
        SET_NETDEV_DEV(ndev, wiphy_dev(wiphy));

        WL_DBG(("wl_cfg80211_add_monitor_if net device returned: 0x%p\n", ndev));
        return ndev->ieee80211_ptr;
#endif /* WL_ENABLE_P2P_IF || WL_CFG80211_P2P_DEV_IF */
}

static struct wireless_dev *
wl_cfg80211_add_ibss(struct wiphy *wiphy, u16 wl_iftype, char const *name)
{
#ifdef WLAIBSS_MCHAN
        /* AIBSS */
        return bcm_cfg80211_add_ibss_if(wiphy, (char *)name);
#else
        /* Normal IBSS */
        WL_ERR(("IBSS not supported on Virtual iface\n"));
        return NULL;
#endif // endif
}

s32
wl_release_vif_macaddr(struct bcm_cfg80211 *cfg, u8 *mac_addr, u16 wl_iftype)
{
        struct net_device *ndev =  bcmcfg_to_prmry_ndev(cfg);
        u16 org_toggle_bytes;
        u16 cur_toggle_bytes;
        u16 toggled_bit;

        if (!ndev || !mac_addr) {
                return -EINVAL;
        }

        if ((wl_iftype == WL_IF_TYPE_P2P_DISC) || (wl_iftype == WL_IF_TYPE_AP) ||
                (wl_iftype == WL_IF_TYPE_P2P_GO) || (wl_iftype == WL_IF_TYPE_P2P_GC)) {
                /* Avoid invoking release mac addr code for interfaces using
                 * fixed mac addr.
                 */
                return BCME_OK;
        }

        /* Fetch last two bytes of mac address */
        org_toggle_bytes = ntoh16(*((u16 *)&ndev->dev_addr[4]));
        cur_toggle_bytes = ntoh16(*((u16 *)&mac_addr[4]));

        toggled_bit = (org_toggle_bytes ^ cur_toggle_bytes);
        WL_DBG(("org_toggle_bytes:%04X cur_toggle_bytes:%04X\n",
                org_toggle_bytes, cur_toggle_bytes));
        if (toggled_bit & cfg->vif_macaddr_mask) {
                /* This toggled_bit is marked in the used mac addr
                 * mask. Clear it.
                 */
                 cfg->vif_macaddr_mask &= ~toggled_bit;
                WL_INFORM(("MAC address - " MACDBG " released. toggled_bit:%04X vif_mask:%04X\n",
                        MAC2STRDBG(mac_addr), toggled_bit, cfg->vif_macaddr_mask));
        } else {
                WL_ERR(("MAC address - " MACDBG " not found in the used list."
                        " toggled_bit:%04x vif_mask:%04x\n", MAC2STRDBG(mac_addr),
                        toggled_bit, cfg->vif_macaddr_mask));
                return -EINVAL;
        }

        return BCME_OK;
}

s32
wl_get_vif_macaddr(struct bcm_cfg80211 *cfg, u16 wl_iftype, u8 *mac_addr)
{
        struct net_device *ndev =  bcmcfg_to_prmry_ndev(cfg);
        u16 toggle_mask;
        u16 toggle_bit;
        u16 toggle_bytes;
        u16 used;
        u32 offset = 0;
        /* Toggle mask starts from MSB of second last byte */
        u16 mask = 0x8000;

        if (!mac_addr) {
                return -EINVAL;
        }

        memcpy(mac_addr, ndev->dev_addr, ETH_ALEN);
/*
 * VIF MAC address managment
 * P2P Device addres: Primary MAC with locally admin. bit set
 * P2P Group address/NAN NMI/Softap/NAN DPI: Primary MAC addr
 *    with local admin bit set and one additional bit toggled.
 * cfg->vif_macaddr_mask will hold the info regarding the mac address
 * released. Ensure to call wl_release_vif_macaddress to free up
 * the mac address.
 */
        if (wl_iftype == WL_IF_TYPE_P2P_DISC || wl_iftype == WL_IF_TYPE_AP) {
                mac_addr[0] |= 0x02;
        } else if ((wl_iftype == WL_IF_TYPE_P2P_GO) || (wl_iftype == WL_IF_TYPE_P2P_GC)) {
                mac_addr[0] |= 0x02;
                mac_addr[4] ^= 0x80;
        } else {
                /* For locally administered mac addresses, we keep the
                 * OUI part constant and just work on the last two bytes.
                 */
                mac_addr[0] |= 0x02;
                toggle_mask = cfg->vif_macaddr_mask;
                toggle_bytes = ntoh16(*((u16 *)&mac_addr[4]));
                do {
                        used = toggle_mask & mask;
                        if (!used) {
                                /* Use this bit position */
                                toggle_bit = mask >> offset;
                                toggle_bytes ^= toggle_bit;
                                cfg->vif_macaddr_mask |= toggle_bit;
                                WL_DBG(("toggle_bit:%04X toggle_bytes:%04X toggle_mask:%04X\n",
                                        toggle_bit, toggle_bytes, cfg->vif_macaddr_mask));
                                /* Macaddress are stored in network order */
                                mac_addr[5] = *((u8 *)&toggle_bytes);
                                mac_addr[4] = *(((u8 *)&toggle_bytes + 1));
                                break;
                        }

                        /* Shift by one */
                        toggle_mask = toggle_mask << 0x1;
                        offset++;
                        if (offset > MAX_VIF_OFFSET) {
                                /* We have used up all macaddresses. Something wrong! */
                                WL_ERR(("Entire range of macaddress used up.\n"));
                                ASSERT(0);
                                break;
                        }
                } while (true);
        }
        WL_INFORM_MEM(("Get virtual I/F mac addr: "MACDBG"\n", MAC2STRDBG(mac_addr)));
        return 0;
}

/* All Android/Linux private/Vendor Interface calls should make
 *  use of below API for interface creation.
 */
struct wireless_dev *
wl_cfg80211_add_if(struct bcm_cfg80211 *cfg,
        struct net_device *primary_ndev,
        wl_iftype_t wl_iftype, const char *name, u8 *mac)
{
        u8 mac_addr[ETH_ALEN];
        s32 err = -ENODEV;
        struct wireless_dev *wdev = NULL;
        struct wiphy *wiphy;
        s32 wl_mode;
        dhd_pub_t *dhd;
        wl_iftype_t macaddr_iftype = wl_iftype;

        WL_INFORM_MEM(("if name: %s, wl_iftype:%d \n",
                name ? name : "NULL", wl_iftype));
        if (!cfg || !primary_ndev || !name) {
                WL_ERR(("cfg/ndev/name ptr null\n"));
                return NULL;
        }
        if (wl_cfg80211_get_wdev_from_ifname(cfg, name)) {
                WL_ERR(("Interface name %s exists!\n", name));
                return NULL;
        }
        wiphy = bcmcfg_to_wiphy(cfg);
        dhd = (dhd_pub_t *)(cfg->pub);
        if (!dhd) {
                return NULL;
        }

        if ((wl_mode = wl_iftype_to_mode(wl_iftype)) < 0) {
                return NULL;
        }

        if ((err = wl_check_vif_support(cfg, wl_iftype)) < 0) {
                return NULL;
        }

        /* Protect the interace op context */
        mutex_lock(&cfg->if_sync);
        /* Do pre-create ops */
        wl_cfg80211_iface_state_ops(primary_ndev->ieee80211_ptr, WL_IF_CREATE_REQ,
                wl_iftype, wl_mode);

        if (strnicmp(name, SOFT_AP_IF_NAME, strlen(SOFT_AP_IF_NAME)) == 0) {
                macaddr_iftype = WL_IF_TYPE_AP;
        }

        if (mac) {
                /* If mac address is provided, use that */
                memcpy(mac_addr, mac, ETH_ALEN);
        } else if ((wl_get_vif_macaddr(cfg, macaddr_iftype, mac_addr) != BCME_OK)) {
                /* Fetch the mac address to be used for virtual interface */
                err = -EINVAL;
                goto fail;
        }

        switch (wl_iftype) {
                case WL_IF_TYPE_IBSS:
                        wdev = wl_cfg80211_add_ibss(wiphy, wl_iftype, name);
                        break;
                case WL_IF_TYPE_MONITOR:
                        wdev = wl_cfg80211_add_monitor_if(wiphy, name);
                        break;
                case WL_IF_TYPE_STA:
                case WL_IF_TYPE_AP:
                case WL_IF_TYPE_NAN:
                        if (cfg->iface_cnt >= (IFACE_MAX_CNT - 1)) {
                                WL_ERR(("iface_cnt exceeds max cnt. created iface_cnt: %d\n",
                                        cfg->iface_cnt));
                                err = -ENOTSUPP;
                                goto fail;
                        }
                        wdev = wl_cfg80211_create_iface(cfg->wdev->wiphy,
                                wl_iftype, mac_addr, name);
                        break;
                case WL_IF_TYPE_P2P_DISC:
                case WL_IF_TYPE_P2P_GO:
                        /* Intentional fall through */
                case WL_IF_TYPE_P2P_GC:
                        if (cfg->p2p_supported) {
                                wdev = wl_cfg80211_p2p_if_add(cfg, wl_iftype,
                                        name, mac_addr, &err);
                                break;
                        }
                        /* Intentionally fall through for unsupported interface
                         * handling when firmware doesn't support p2p
                         */
                default:
                        WL_ERR(("Unsupported interface type\n"));
                        err = -ENOTSUPP;
                        goto fail;
        }

        if (!wdev) {
                if (err != -ENOTSUPP) {
                        err = -ENODEV;
                }
                WL_ERR(("vif create failed. err:%d\n", err));
                goto fail;
        }

        /* Ensure decrementing in case of failure */
        cfg->vif_count++;

        wl_cfg80211_iface_state_ops(wdev,
                WL_IF_CREATE_DONE, wl_iftype, wl_mode);

        WL_INFORM_MEM(("Vif created."
                " dev->ifindex:%d cfg_iftype:%d, vif_count:%d\n",
                (wdev->netdev ? wdev->netdev->ifindex : 0xff),
                wdev->iftype, cfg->vif_count));
        mutex_unlock(&cfg->if_sync);
        return wdev;

fail:
        wl_cfg80211_iface_state_ops(primary_ndev->ieee80211_ptr,
                WL_IF_DELETE_REQ, wl_iftype, wl_mode);

        if (err != -ENOTSUPP) {
                /* For non-supported interfaces, just return error and
                 * skip below recovery steps.
                 */
#ifdef WL_CFGVENDOR_SEND_HANG_EVENT
                wl_copy_hang_info_if_falure(primary_ndev, HANG_REASON_IFACE_DEL_FAILURE, err);
#endif /* WL_CFGVENDOR_SEND_HANG_EVENT */
                SUPP_LOG(("IF_ADD fail. err:%d\n", err));
                wl_flush_fw_log_buffer(primary_ndev, FW_LOGSET_MASK_ALL);
#if defined(DHD_DEBUG) && defined(BCMPCIE) && defined(DHD_FW_COREDUMP)
                if (dhd->memdump_enabled) {
                        dhd->memdump_type = DUMP_TYPE_IFACE_OP_FAILURE;
                        dhd_bus_mem_dump(dhd);
                }
#endif /* DHD_DEBUG && BCMPCIE && DHD_FW_COREDUMP */
                dhd->hang_reason = HANG_REASON_IFACE_ADD_FAILURE;
                net_os_send_hang_message(bcmcfg_to_prmry_ndev(cfg));
        }
        mutex_unlock(&cfg->if_sync);
        return NULL;
}

static bcm_struct_cfgdev *
wl_cfg80211_add_virtual_iface(struct wiphy *wiphy,
#if defined(WL_CFG80211_P2P_DEV_IF)
        const char *name,
#else
        char *name,
#endif /* WL_CFG80211_P2P_DEV_IF */
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 1, 0))
        unsigned char name_assign_type,
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 1, 0)) */
        enum nl80211_iftype type, u32 *flags,
        struct vif_params *params)
{
        u16 wl_iftype;
        u16 wl_mode;
        struct net_device *primary_ndev;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct wireless_dev *wdev;

        WL_DBG(("Enter iftype: %d\n", type));
        if (!cfg) {
                return ERR_PTR(-EINVAL);
        }

        /* Use primary I/F for sending cmds down to firmware */
        primary_ndev = bcmcfg_to_prmry_ndev(cfg);
        if (unlikely(!wl_get_drv_status(cfg, READY, primary_ndev))) {
                WL_ERR(("device is not ready\n"));
                return ERR_PTR(-ENODEV);
        }
#if defined(SUPPORT_RANDOM_MAC_SCAN) && defined(DHD_RANDOM_MAC_SCAN)
        wl_cfg80211_random_mac_disable(primary_ndev);
#endif /* SUPPORT_RANDOM_MAC_SCAN && DHD_RANDOM_MAC_SCAN */
        if (!name) {
                WL_ERR(("Interface name not provided \n"));
                return ERR_PTR(-EINVAL);
        }

        if (cfg80211_to_wl_iftype(type, &wl_iftype, &wl_mode) < 0) {
                return ERR_PTR(-EINVAL);
        }

        wdev = wl_cfg80211_add_if(cfg, primary_ndev, wl_iftype, name, NULL);
        if (unlikely(!wdev)) {
                return ERR_PTR(-ENODEV);
        }

        return wdev_to_cfgdev(wdev);
}

static s32
wl_cfg80211_del_ibss(struct wiphy *wiphy, struct wireless_dev *wdev)
{
        WL_INFORM_MEM(("del ibss wdev_ptr:%p\n", wdev));
#ifdef WLAIBSS_MCHAN
        /* AIBSS */
        return bcm_cfg80211_del_ibss_if(wiphy, wdev);
#else
        /* Normal IBSS */
        return wl_cfg80211_del_iface(wiphy, wdev);
#endif // endif
}

s32
wl_cfg80211_del_if(struct bcm_cfg80211 *cfg, struct net_device *primary_ndev,
        struct wireless_dev *wdev, char *ifname)
{
        int ret = BCME_OK;
        s32 bssidx;
        struct wiphy *wiphy;
        u16 wl_mode;
        u16 wl_iftype;
        struct net_info *netinfo;
        dhd_pub_t *dhd;
        BCM_REFERENCE(dhd);

        if (!cfg) {
                return -EINVAL;
        }

        mutex_lock(&cfg->if_sync);
        dhd = (dhd_pub_t *)(cfg->pub);

        if (!wdev && ifname) {
                /* If only ifname is provided, fetch corresponding wdev ptr from our
                 * internal data structure
                 */
                wdev = wl_cfg80211_get_wdev_from_ifname(cfg, ifname);
        }

        /* Check whether we have a valid wdev ptr */
        if (unlikely(!wdev)) {
                WL_ERR(("wdev not found. '%s' does not exists\n", ifname));
                mutex_unlock(&cfg->if_sync);
                return -ENODEV;
        }

        WL_INFORM_MEM(("del vif. wdev cfg_iftype:%d\n", wdev->iftype));

        wiphy = wdev->wiphy;
#ifdef WL_CFG80211_P2P_DEV_IF
        if (wdev->iftype == NL80211_IFTYPE_P2P_DEVICE) {
                /* p2p discovery would be de-initialized in stop p2p
                 * device context/from other virtual i/f creation context
                 * so netinfo list may not have any node corresponding to
                 * discovery I/F. Handle it before bssidx check.
                 */
                ret = wl_cfg80211_p2p_if_del(wiphy, wdev);
                if (unlikely(ret)) {
                        goto exit;
                } else {
                        /* success case. return from here */
                        if (cfg->vif_count) {
                                cfg->vif_count--;
                        }
                        mutex_unlock(&cfg->if_sync);
                        return BCME_OK;
                }
        }
#endif /* WL_CFG80211_P2P_DEV_IF */

        if ((netinfo = wl_get_netinfo_by_wdev(cfg, wdev)) == NULL) {
                WL_ERR(("Find netinfo from wdev %p failed\n", wdev));
                ret = -ENODEV;
                goto exit;
        }

        if (!wdev->netdev) {
                WL_ERR(("ndev null! \n"));
        } else {
                /* Disable tx before del */
                netif_tx_disable(wdev->netdev);
        }

        wl_iftype = netinfo->iftype;
        wl_mode = wl_iftype_to_mode(wl_iftype);
        bssidx = netinfo->bssidx;
        WL_INFORM_MEM(("[IFDEL] cfg_iftype:%d wl_iftype:%d mode:%d bssidx:%d\n",
                wdev->iftype, wl_iftype, wl_mode, bssidx));

        /* Do pre-interface del ops */
        wl_cfg80211_iface_state_ops(wdev, WL_IF_DELETE_REQ, wl_iftype, wl_mode);

        switch (wl_iftype) {
                case WL_IF_TYPE_P2P_GO:
                case WL_IF_TYPE_P2P_GC:
                case WL_IF_TYPE_AP:
                case WL_IF_TYPE_STA:
                case WL_IF_TYPE_NAN:
                        ret = wl_cfg80211_del_iface(wiphy, wdev);
                        break;
                case WL_IF_TYPE_IBSS:
                        ret = wl_cfg80211_del_ibss(wiphy, wdev);
                        break;

                default:
                        WL_ERR(("Unsupported interface type\n"));
                        ret = BCME_ERROR;
        }

exit:
        if (ret == BCME_OK) {
                /* Successful case */
                if (cfg->vif_count) {
                        cfg->vif_count--;
                }
                wl_cfg80211_iface_state_ops(primary_ndev->ieee80211_ptr,
                                WL_IF_DELETE_DONE, wl_iftype, wl_mode);
#ifdef WL_NAN
                if (!((cfg->nancfg.mac_rand) && (wl_iftype == WL_IF_TYPE_NAN)))
#endif /* WL_NAN */
                {
                        wl_release_vif_macaddr(cfg, wdev->netdev->dev_addr, wl_iftype);
                }
                WL_INFORM_MEM(("vif deleted. vif_count:%d\n", cfg->vif_count));
        } else {
                if (!wdev->netdev) {
                        WL_ERR(("ndev null! \n"));
                } else {
                        /* IF del failed. revert back tx queue status */
                        netif_tx_start_all_queues(wdev->netdev);
                }

                /* Skip generating log files and sending HANG event
                 * if driver state is not READY
                 */
                if (wl_get_drv_status(cfg, READY, bcmcfg_to_prmry_ndev(cfg))) {
#ifdef WL_CFGVENDOR_SEND_HANG_EVENT
                        wl_copy_hang_info_if_falure(primary_ndev,
                                HANG_REASON_IFACE_DEL_FAILURE, ret);
#endif /* WL_CFGVENDOR_SEND_HANG_EVENT */
                        SUPP_LOG(("IF_DEL fail. err:%d\n", ret));
                        wl_flush_fw_log_buffer(primary_ndev, FW_LOGSET_MASK_ALL);
#if defined(DHD_FW_COREDUMP)
                        if (dhd->memdump_enabled && (ret != -EBADTYPE)) {
                                dhd->memdump_type = DUMP_TYPE_IFACE_OP_FAILURE;
                                dhd_bus_mem_dump(dhd);
                        }
#endif /* BCMDONGLEHOST && DHD_FW_COREDUMP */
                        WL_ERR(("Notify hang event to upper layer \n"));
                        dhd->hang_reason = HANG_REASON_IFACE_DEL_FAILURE;
                        net_os_send_hang_message(bcmcfg_to_prmry_ndev(cfg));
                }
        }

        mutex_unlock(&cfg->if_sync);
        return ret;
}

static s32
wl_cfg80211_del_virtual_iface(struct wiphy *wiphy, bcm_struct_cfgdev *cfgdev)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct wireless_dev *wdev = cfgdev_to_wdev(cfgdev);
        int ret = BCME_OK;
        u16 wl_iftype;
        u16 wl_mode;
        struct net_device *primary_ndev;

        if (!cfg) {
                return -EINVAL;
        }

        primary_ndev = bcmcfg_to_prmry_ndev(cfg);
        wdev = cfgdev_to_wdev(cfgdev);
        if (!wdev) {
                WL_ERR(("wdev null"));
                return -ENODEV;
        }

        WL_DBG(("Enter  wdev:%p iftype: %d\n", wdev, wdev->iftype));
        if (cfg80211_to_wl_iftype(wdev->iftype, &wl_iftype, &wl_mode) < 0) {
                WL_ERR(("Wrong iftype: %d\n", wdev->iftype));
                return -ENODEV;
        }

        if ((ret = wl_cfg80211_del_if(cfg, primary_ndev,
                        wdev, NULL)) < 0) {
                WL_ERR(("IF del failed\n"));
        }

        return ret;
}

static s32
wl_cfg80211_change_p2prole(struct wiphy *wiphy, struct net_device *ndev, enum nl80211_iftype type)
{
        s32 wlif_type;
        s32 mode = 0;
        s32 index;
        s32 err;
        s32 conn_idx = -1;
        chanspec_t chspec;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);

        WL_INFORM_MEM(("Enter. current_role:%d new_role:%d \n", ndev->ieee80211_ptr->iftype, type));

        if (!cfg->p2p || !wl_cfgp2p_vif_created(cfg)) {
                WL_ERR(("P2P not initialized \n"));
                return -EINVAL;
        }

        if (!is_p2p_group_iface(ndev->ieee80211_ptr)) {
                WL_ERR(("Wrong if type \n"));
                return -EINVAL;
        }

        if (wl_check_dongle_idle(wiphy) != TRUE) {
                WL_ERR(("FW is busy to add interface"));
                return -EINVAL;
        }

        /* Abort any on-going scans to avoid race condition issues */
        wl_cfg80211_cancel_scan(cfg);

        index = wl_get_bssidx_by_wdev(cfg, ndev->ieee80211_ptr);
        if (index < 0) {
                WL_ERR(("Find bsscfg index from ndev(%p) failed\n", ndev));
                return BCME_ERROR;
        }
        if (wl_cfgp2p_find_type(cfg, index, &conn_idx) != BCME_OK) {
                return BCME_ERROR;
        }

        /* In concurrency case, STA may be already associated in a particular
         * channel. so retrieve the current channel of primary interface and
         * then start the virtual interface on that.
         */
        chspec = wl_cfg80211_get_shared_freq(wiphy);
        if (type == NL80211_IFTYPE_P2P_GO) {
                /* Dual p2p doesn't support multiple P2PGO interfaces,
                 * p2p_go_count is the counter for GO creation
                 * requests.
                 */
                if ((cfg->p2p->p2p_go_count > 0) && (type == NL80211_IFTYPE_P2P_GO)) {
                        WL_ERR(("FW does not support multiple GO\n"));
                        return BCME_ERROR;
                }
                mode = WL_MODE_AP;
                wlif_type = WL_P2P_IF_GO;
                dhd->op_mode &= ~DHD_FLAG_P2P_GC_MODE;
                dhd->op_mode |= DHD_FLAG_P2P_GO_MODE;
        } else {
                wlif_type = WL_P2P_IF_CLIENT;
                /* for GO */
                if (wl_get_mode_by_netdev(cfg, ndev) == WL_MODE_AP) {
                        WL_INFORM_MEM(("Downgrading P2P GO to cfg_iftype:%d \n", type));
                        wl_add_remove_eventmsg(ndev, WLC_E_PROBREQ_MSG, false);
                        cfg->p2p->p2p_go_count--;
                        /* disable interface before bsscfg free */
                        err = wl_cfgp2p_ifdisable(cfg, wl_to_p2p_bss_macaddr(cfg, conn_idx));
                        /* if fw doesn't support "ifdis",
                         * do not wait for link down of ap mode
                         */
                        if (err == 0) {
                                WL_DBG(("Wait for Link Down event for GO !!!\n"));
                                wait_for_completion_timeout(&cfg->iface_disable,
                                        msecs_to_jiffies(500));
                        } else if (err != BCME_UNSUPPORTED) {
                                msleep(300);
                        }
                }
        }

        wl_set_p2p_status(cfg, IF_CHANGING);
        wl_clr_p2p_status(cfg, IF_CHANGED);
        wl_cfgp2p_ifchange(cfg, wl_to_p2p_bss_macaddr(cfg, conn_idx),
                htod32(wlif_type), chspec, conn_idx);
        wait_event_interruptible_timeout(cfg->netif_change_event,
                (wl_get_p2p_status(cfg, IF_CHANGED) == true),
                msecs_to_jiffies(MAX_WAIT_TIME));

        wl_clr_p2p_status(cfg, IF_CHANGING);
        wl_clr_p2p_status(cfg, IF_CHANGED);

        if (mode == WL_MODE_AP) {
                wl_set_drv_status(cfg, CONNECTED, ndev);
        }

        return BCME_OK;
}

static s32
wl_cfg80211_change_virtual_iface(struct wiphy *wiphy, struct net_device *ndev,
        enum nl80211_iftype type, u32 *flags,
        struct vif_params *params)
{
        s32 infra = 1;
        s32 err = BCME_OK;
        u16 wl_iftype;
        u16 wl_mode;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_info *netinfo = NULL;
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);
        struct net_device *primary_ndev;

        if (!dhd)
                return -EINVAL;

        WL_INFORM_MEM(("[%s] Enter. current cfg_iftype:%d new cfg_iftype:%d \n",
                ndev->name, ndev->ieee80211_ptr->iftype, type));
        primary_ndev = bcmcfg_to_prmry_ndev(cfg);

        if (cfg80211_to_wl_iftype(type, &wl_iftype, &wl_mode) < 0) {
                WL_ERR(("Unknown role \n"));
                return -EINVAL;
        }

        /* If any scan is going on, abort it */
        if (wl_abort_scan_and_check(cfg) != TRUE) {
                wl_notify_escan_complete(cfg, cfg->escan_info.ndev, true, true);
        }

        mutex_lock(&cfg->if_sync);
        netinfo = wl_get_netinfo_by_wdev(cfg, ndev->ieee80211_ptr);
        if (unlikely(!netinfo)) {
#ifdef WL_STATIC_IF
                if (IS_CFG80211_STATIC_IF(cfg, ndev)) {
                        /* Incase of static interfaces, the netinfo will be
                         * allocated only when FW interface is initialized. So
                         * store the value and use it during initialization.
                         */
                        WL_INFORM_MEM(("skip change vif for static if\n"));
                        ndev->ieee80211_ptr->iftype = type;
                        err = BCME_OK;
                } else
#endif /* WL_STATIC_IF */
                {
                        WL_ERR(("netinfo not found \n"));
                        err = -ENODEV;
                }
                goto fail;
        }

        /* perform pre-if-change tasks */
        wl_cfg80211_iface_state_ops(ndev->ieee80211_ptr,
                WL_IF_CHANGE_REQ, wl_iftype, wl_mode);

        switch (type) {
        case NL80211_IFTYPE_ADHOC:
                infra = 0;
                break;
        case NL80211_IFTYPE_STATION:
                /* Supplicant sets iftype to STATION while removing p2p GO */
                if (ndev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO) {
                        /* Downgrading P2P GO */
                        err = wl_cfg80211_change_p2prole(wiphy, ndev, type);
                        if (unlikely(err)) {
                                WL_ERR(("P2P downgrade failed \n"));
                        }
                } else if (ndev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP) {
                        /* Downgrade role from AP to STA */
                        if ((err = wl_cfg80211_add_del_bss(cfg, ndev,
                                netinfo->bssidx, wl_iftype, 0, NULL)) < 0) {
                                WL_ERR(("AP-STA Downgrade failed \n"));
                                goto fail;
                        }
                }
                break;
        case NL80211_IFTYPE_AP:
                /* intentional fall through */
        case NL80211_IFTYPE_AP_VLAN:
                {
                        if (!wl_get_drv_status(cfg, AP_CREATED, ndev)) {
                                err = wl_cfg80211_set_ap_role(cfg, ndev);
                                if (unlikely(err)) {
                                        WL_ERR(("set ap role failed!\n"));
                                        goto fail;
                                }
                        } else {
                                WL_INFORM_MEM(("AP_CREATED bit set. Skip role change\n"));
                        }
                        break;
                }
        case NL80211_IFTYPE_P2P_GO:
                /* Intentional fall through */
        case NL80211_IFTYPE_P2P_CLIENT:
                infra = 1;
                err = wl_cfg80211_change_p2prole(wiphy, ndev, type);
                break;
        case NL80211_IFTYPE_MONITOR:
        case NL80211_IFTYPE_WDS:
        case NL80211_IFTYPE_MESH_POINT:
                /* Intentional fall through */
        default:
                WL_ERR(("Unsupported type:%d \n", type));
                err = -EINVAL;
                goto fail;
        }

        err = wldev_ioctl_set(ndev, WLC_SET_INFRA, &infra, sizeof(s32));
        if (err < 0) {
                WL_ERR(("SET INFRA/IBSS  error %d\n", err));
                goto fail;
        }

        wl_cfg80211_iface_state_ops(primary_ndev->ieee80211_ptr,
                WL_IF_CHANGE_DONE, wl_iftype, wl_mode);

        /* Update new iftype in relevant structures */
        ndev->ieee80211_ptr->iftype = type;
        netinfo->iftype = wl_iftype;
        WL_INFORM_MEM(("[%s] cfg_iftype changed to %d\n", ndev->name, type));

fail:
        if (err) {
                wl_flush_fw_log_buffer(ndev, FW_LOGSET_MASK_ALL);
        }
        mutex_unlock(&cfg->if_sync);
        return err;
}

s32
wl_cfg80211_notify_ifadd(struct net_device *dev,
        int ifidx, char *name, uint8 *mac, uint8 bssidx, uint8 role)
{
        bool ifadd_expected = FALSE;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        bool bss_pending_op = TRUE;

        /* P2P may send WLC_E_IF_ADD and/or WLC_E_IF_CHANGE during IF updating ("p2p_ifupd")
         * redirect the IF_ADD event to ifchange as it is not a real "new" interface
         */
        if (wl_get_p2p_status(cfg, IF_CHANGING))
                return wl_cfg80211_notify_ifchange(dev, ifidx, name, mac, bssidx);

        /* Okay, we are expecting IF_ADD (as IF_ADDING is true) */
        if (wl_get_p2p_status(cfg, IF_ADDING)) {
                ifadd_expected = TRUE;
                wl_clr_p2p_status(cfg, IF_ADDING);
        } else if (cfg->bss_pending_op) {
                ifadd_expected = TRUE;
                bss_pending_op = FALSE;
        }

        if (ifadd_expected) {
                wl_if_event_info *if_event_info = &cfg->if_event_info;

                if_event_info->valid = TRUE;
                if_event_info->ifidx = ifidx;
                if_event_info->bssidx = bssidx;
                if_event_info->role = role;
                strncpy(if_event_info->name, name, IFNAMSIZ);
                if_event_info->name[IFNAMSIZ] = '\0';
                if (mac)
                        memcpy(if_event_info->mac, mac, ETHER_ADDR_LEN);

                /* Update bss pendig operation status */
                if (!bss_pending_op) {
                        cfg->bss_pending_op = FALSE;
                }
                WL_INFORM_MEM(("IF_ADD ifidx:%d bssidx:%d role:%d\n",
                        ifidx, bssidx, role));
                wake_up_interruptible(&cfg->netif_change_event);
                return BCME_OK;
        }

        return BCME_ERROR;
}

s32
wl_cfg80211_notify_ifdel(struct net_device *dev, int ifidx, char *name, uint8 *mac, uint8 bssidx)
{
        bool ifdel_expected = FALSE;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        wl_if_event_info *if_event_info = &cfg->if_event_info;
        bool bss_pending_op = TRUE;

        if (wl_get_p2p_status(cfg, IF_DELETING)) {
                ifdel_expected = TRUE;
                wl_clr_p2p_status(cfg, IF_DELETING);
        } else if (cfg->bss_pending_op) {
                ifdel_expected = TRUE;
                bss_pending_op = FALSE;
        }

        if (ifdel_expected) {
                if_event_info->valid = TRUE;
                if_event_info->ifidx = ifidx;
                if_event_info->bssidx = bssidx;
                /* Update bss pendig operation status */
                if (!bss_pending_op) {
                        cfg->bss_pending_op = FALSE;
                }
                WL_INFORM_MEM(("IF_DEL ifidx:%d bssidx:%d\n", ifidx, bssidx));
                wake_up_interruptible(&cfg->netif_change_event);
                return BCME_OK;
        }

        return BCME_ERROR;
}

s32
wl_cfg80211_notify_ifchange(struct net_device * dev, int ifidx, char *name, uint8 *mac,
        uint8 bssidx)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if (wl_get_p2p_status(cfg, IF_CHANGING)) {
                wl_set_p2p_status(cfg, IF_CHANGED);
                wake_up_interruptible(&cfg->netif_change_event);
                return BCME_OK;
        }

        return BCME_ERROR;
}

/* Find listen channel */
static s32 wl_find_listen_channel(struct bcm_cfg80211 *cfg,
        const u8 *ie, u32 ie_len)
{
        const wifi_p2p_ie_t *p2p_ie;
        const u8 *end, *pos;
        s32 listen_channel;

        pos = (const u8 *)ie;

        p2p_ie = wl_cfgp2p_find_p2pie(pos, ie_len);

        if (p2p_ie == NULL) {
                return 0;
        }

        if (p2p_ie->len < MIN_P2P_IE_LEN || p2p_ie->len > MAX_P2P_IE_LEN) {
                CFGP2P_ERR(("p2p_ie->len out of range - %d\n", p2p_ie->len));
                return 0;
        }

        pos = p2p_ie->subelts;
        end = p2p_ie->subelts + (p2p_ie->len - 4);

        CFGP2P_DBG((" found p2p ie ! lenth %d \n",
                p2p_ie->len));

        while (pos < end) {
                uint16 attr_len;
                if (pos + 2 >= end) {
                        CFGP2P_DBG((" -- Invalid P2P attribute"));
                        return 0;
                }
                attr_len = ((uint16) (((pos + 1)[1] << 8) | (pos + 1)[0]));

                if (pos + 3 + attr_len > end) {
                        CFGP2P_DBG(("P2P: Attribute underflow "
                                   "(len=%u left=%d)",
                                   attr_len, (int) (end - pos - 3)));
                        return 0;
                }

                /* if Listen Channel att id is 6 and the vailue is valid,
                 * return the listen channel
                 */
                if (pos[0] == 6) {
                        /* listen channel subel length format
                         * 1(id) + 2(len) + 3(country) + 1(op. class) + 1(chan num)
                         */
                        listen_channel = pos[1 + 2 + 3 + 1];

                        if (listen_channel == SOCIAL_CHAN_1 ||
                                listen_channel == SOCIAL_CHAN_2 ||
                                listen_channel == SOCIAL_CHAN_3) {
                                CFGP2P_DBG((" Found my Listen Channel %d \n", listen_channel));
                                return listen_channel;
                        }
                }
                pos += 3 + attr_len;
        }
        return 0;
}

static void wl_scan_prep(struct bcm_cfg80211 *cfg, struct wl_scan_params *params,
        struct cfg80211_scan_request *request)
{
        u32 n_ssids;
        u32 n_channels;
        u16 channel;
        chanspec_t chanspec;
        s32 i = 0, j = 0, offset;
        char *ptr;
        wlc_ssid_t ssid;

        memcpy(&params->bssid, &ether_bcast, ETHER_ADDR_LEN);
        params->bss_type = DOT11_BSSTYPE_ANY;
        params->scan_type = 0;
        params->nprobes = -1;
        params->active_time = -1;
        params->passive_time = -1;
        params->home_time = -1;
        params->channel_num = 0;
        memset(&params->ssid, 0, sizeof(wlc_ssid_t));

        WL_SCAN(("Preparing Scan request\n"));
        WL_SCAN(("nprobes=%d\n", params->nprobes));
        WL_SCAN(("active_time=%d\n", params->active_time));
        WL_SCAN(("passive_time=%d\n", params->passive_time));
        WL_SCAN(("home_time=%d\n", params->home_time));
        WL_SCAN(("scan_type=%d\n", params->scan_type));

        params->nprobes = htod32(params->nprobes);
        params->active_time = htod32(params->active_time);
        params->passive_time = htod32(params->passive_time);
        params->home_time = htod32(params->home_time);

        /* if request is null just exit so it will be all channel broadcast scan */
        if (!request)
                return;

        n_ssids = request->n_ssids;
        n_channels = request->n_channels;

        /* Copy channel array if applicable */
        WL_SCAN(("### List of channelspecs to scan ###\n"));
        if (n_channels > 0) {
                for (i = 0; i < n_channels; i++) {
                        channel = ieee80211_frequency_to_channel(request->channels[i]->center_freq);
                        /* SKIP DFS channels for Secondary interface */
                        if ((cfg->escan_info.ndev != bcmcfg_to_prmry_ndev(cfg)) &&
                                (request->channels[i]->flags &
#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 14, 0))
                                (IEEE80211_CHAN_RADAR | IEEE80211_CHAN_PASSIVE_SCAN)))
#else
                                (IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IR)))
#endif /* LINUX_VERSION_CODE < KERNEL_VERSION(3, 14, 0) */
                                continue;

                        chanspec = WL_CHANSPEC_BW_20;
                        if (chanspec == INVCHANSPEC) {
                                WL_ERR(("Invalid chanspec! Skipping channel\n"));
                                continue;
                        }

                        if (request->channels[i]->band == NL80211_BAND_2GHZ) {
#ifdef WL_HOST_BAND_MGMT
                                if (cfg->curr_band == WLC_BAND_5G) {
                                        WL_DBG(("In 5G only mode, omit 2G channel:%d\n", channel));
                                        continue;
                                }
#endif /* WL_HOST_BAND_MGMT */
                                chanspec |= WL_CHANSPEC_BAND_2G;
                        } else {
#ifdef WL_HOST_BAND_MGMT
                                if (cfg->curr_band == WLC_BAND_2G) {
                                        WL_DBG(("In 2G only mode, omit 5G channel:%d\n", channel));
                                        continue;
                                }
#endif /* WL_HOST_BAND_MGMT */
                                chanspec |= WL_CHANSPEC_BAND_5G;
                        }
                        params->channel_list[j] = channel;
                        params->channel_list[j] &= WL_CHANSPEC_CHAN_MASK;
                        params->channel_list[j] |= chanspec;
                        WL_SCAN(("Chan : %d, Channel spec: %x \n",
                                channel, params->channel_list[j]));
                        params->channel_list[j] = wl_chspec_host_to_driver(params->channel_list[j]);
                        j++;
                }
        } else {
                WL_SCAN(("Scanning all channels\n"));
        }
        n_channels = j;
        /* Copy ssid array if applicable */
        WL_SCAN(("### List of SSIDs to scan ###\n"));
        if (n_ssids > 0) {
                offset = offsetof(wl_scan_params_t, channel_list) + n_channels * sizeof(u16);
                offset = roundup(offset, sizeof(u32));
                ptr = (char*)params + offset;
                for (i = 0; i < n_ssids; i++) {
                        memset(&ssid, 0, sizeof(wlc_ssid_t));
                        ssid.SSID_len = MIN(request->ssids[i].ssid_len, DOT11_MAX_SSID_LEN);
                        memcpy(ssid.SSID, request->ssids[i].ssid, ssid.SSID_len);
                        if (!ssid.SSID_len)
                                WL_SCAN(("%d: Broadcast scan\n", i));
                        else
                                WL_SCAN(("%d: scan  for  %s size =%d\n", i,
                                ssid.SSID, ssid.SSID_len));
                        memcpy(ptr, &ssid, sizeof(wlc_ssid_t));
                        ptr += sizeof(wlc_ssid_t);
                }
        } else {
                WL_SCAN(("Broadcast scan\n"));
        }
        /* Adding mask to channel numbers */
        params->channel_num =
                htod32((n_ssids << WL_SCAN_PARAMS_NSSID_SHIFT) |
                       (n_channels & WL_SCAN_PARAMS_COUNT_MASK));

        if (n_channels == 1) {
                params->active_time = htod32(WL_SCAN_CONNECT_DWELL_TIME_MS);
                params->nprobes = htod32(params->active_time / WL_SCAN_JOIN_PROBE_INTERVAL_MS);
        }
}

static s32
wl_get_valid_channels(struct net_device *ndev, u8 *valid_chan_list, s32 size)
{
        wl_uint32_list_t *list;
        s32 err = BCME_OK;
        if (valid_chan_list == NULL || size <= 0)
                return -ENOMEM;

        memset(valid_chan_list, 0, size);
        list = (wl_uint32_list_t *)(void *) valid_chan_list;
        list->count = htod32(WL_NUMCHANNELS);
        err = wldev_ioctl_get(ndev, WLC_GET_VALID_CHANNELS, valid_chan_list, size);
        if (err != 0) {
                WL_ERR(("get channels failed with %d\n", err));
        }

        return err;
}

#if defined(USE_INITIAL_2G_SCAN) || defined(USE_INITIAL_SHORT_DWELL_TIME)
#define FIRST_SCAN_ACTIVE_DWELL_TIME_MS 40
bool g_first_broadcast_scan = TRUE;
#endif /* USE_INITIAL_2G_SCAN || USE_INITIAL_SHORT_DWELL_TIME */

static s32
wl_run_escan(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        struct cfg80211_scan_request *request, uint16 action)
{
        s32 err = BCME_OK;
        u32 n_channels;
        u32 n_ssids;
        s32 params_size = (WL_SCAN_PARAMS_FIXED_SIZE + OFFSETOF(wl_escan_params_t, params));
        wl_escan_params_t *params = NULL;
        u8 chan_buf[sizeof(u32)*(WL_NUMCHANNELS + 1)];
        u32 num_chans = 0;
        s32 channel;
        u32 n_valid_chan;
        s32 search_state = WL_P2P_DISC_ST_SCAN;
        u32 i, j, n_nodfs = 0;
        u16 *default_chan_list = NULL;
        wl_uint32_list_t *list;
        s32 bssidx = -1;
        struct net_device *dev = NULL;
#if defined(USE_INITIAL_2G_SCAN) || defined(USE_INITIAL_SHORT_DWELL_TIME)
        bool is_first_init_2g_scan = false;
#endif /* USE_INITIAL_2G_SCAN || USE_INITIAL_SHORT_DWELL_TIME */
        p2p_scan_purpose_t      p2p_scan_purpose = P2P_SCAN_PURPOSE_MIN;
        u32 chan_mem = 0;
#if defined(SUPPORT_RANDOM_MAC_SCAN)
        u8 mac_addr[ETHER_ADDR_LEN] = {0, };
        u8 mac_addr_mask[ETHER_ADDR_LEN] = {0, };
#endif /* SUPPORT_RANDOM_MAC_SCAN */

        WL_DBG(("Enter \n"));

        /* scan request can come with empty request : perform all default scan */
        if (!cfg) {
                err = -EINVAL;
                goto exit;
        }

        if (!cfg->p2p_supported || !p2p_scan(cfg)) {
#if defined(SUPPORT_RANDOM_MAC_SCAN)
#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0)
                bcopy(request->mac_addr, mac_addr, ETHER_ADDR_LEN);
                bcopy(request->mac_addr_mask, mac_addr_mask, ETHER_ADDR_LEN);
#else /* Kernel version is less than 3.19.0 */
                /* NL80211 default random mac addr and mask value */
                mac_addr[0] = 0x2;
                mac_addr_mask[0] = 0x3;
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0) */
                if ((request != NULL) && !ETHER_ISNULLADDR(mac_addr) &&
                        !ETHER_ISNULLADDR(mac_addr_mask) &&
                        !wl_is_wps_enrollee_active(ndev, request->ie, request->ie_len)) {
                        wl_cfg80211_random_mac_enable(ndev, mac_addr, mac_addr_mask);
                        if (err < 0) {
                                if (err == BCME_UNSUPPORTED) {
                                        /* Ignore if chip doesnt support the feature */
                                        err = BCME_OK;
                                } else {
                                        /* For errors other than unsupported fail the scan */
                                        WL_ERR(("%s : failed to set random mac for host scan, %d\n",
                                                __FUNCTION__, err));
                                        err = -EAGAIN;
                                        goto exit;
                                }
                        }
                } else {
                        /* No randmac config provided. Ensure scanmac is disabled */
                        wl_cfg80211_random_mac_disable(ndev);
                }
#endif /* SUPPORT_RANDOM_MAC_SCAN */

                /* LEGACY SCAN TRIGGER */
                WL_SCAN((" LEGACY E-SCAN START\n"));

#if defined(USE_INITIAL_2G_SCAN) || defined(USE_INITIAL_SHORT_DWELL_TIME)
                if (!request) {
                        err = -EINVAL;
                        goto exit;
                }
                if (ndev == bcmcfg_to_prmry_ndev(cfg) && g_first_broadcast_scan == true) {
#ifdef USE_INITIAL_2G_SCAN
                        struct ieee80211_channel tmp_channel_list[CH_MAX_2G_CHANNEL];
                        /* allow one 5G channel to add previous connected channel in 5G */
                        bool allow_one_5g_channel = TRUE;
                        j = 0;
                        for (i = 0; i < request->n_channels; i++) {
                                int tmp_chan = ieee80211_frequency_to_channel
                                        (request->channels[i]->center_freq);
                                if (tmp_chan > CH_MAX_2G_CHANNEL) {
                                        if (allow_one_5g_channel)
                                                allow_one_5g_channel = FALSE;
                                        else
                                                continue;
                                }
                                if (j > CH_MAX_2G_CHANNEL) {
                                        WL_ERR(("Index %d exceeds max 2.4GHz channels %d"
                                                " and previous 5G connected channel\n",
                                                j, CH_MAX_2G_CHANNEL));
                                        break;
                                }
                                bcopy(request->channels[i], &tmp_channel_list[j],
                                        sizeof(struct ieee80211_channel));
                                WL_SCAN(("channel of request->channels[%d]=%d\n", i, tmp_chan));
                                j++;
                        }
                        if ((j > 0) && (j <= CH_MAX_2G_CHANNEL)) {
                                for (i = 0; i < j; i++)
                                        bcopy(&tmp_channel_list[i], request->channels[i],
                                                sizeof(struct ieee80211_channel));

                                request->n_channels = j;
                                is_first_init_2g_scan = true;
                        }
                        else
                                WL_ERR(("Invalid number of 2.4GHz channels %d\n", j));

                        WL_SCAN(("request->n_channels=%d\n", request->n_channels));
#else /* USE_INITIAL_SHORT_DWELL_TIME */
                        is_first_init_2g_scan = true;
#endif /* USE_INITIAL_2G_SCAN */
                        g_first_broadcast_scan = false;
                }
#endif /* USE_INITIAL_2G_SCAN || USE_INITIAL_SHORT_DWELL_TIME */

                /* if scan request is not empty parse scan request paramters */
                if (request != NULL) {
                        n_channels = request->n_channels;
                        n_ssids = request->n_ssids;
                        if (n_channels % 2)
                                /* If n_channels is odd, add a padd of u16 */
                                params_size += sizeof(u16) * (n_channels + 1);
                        else
                                params_size += sizeof(u16) * n_channels;

                        /* Allocate space for populating ssids in wl_escan_params_t struct */
                        params_size += sizeof(struct wlc_ssid) * n_ssids;
                }
                params = (wl_escan_params_t *)MALLOCZ(cfg->osh, params_size);
                if (params == NULL) {
                        err = -ENOMEM;
                        goto exit;
                }
                wl_scan_prep(cfg, &params->params, request);

#if defined(USE_INITIAL_2G_SCAN) || defined(USE_INITIAL_SHORT_DWELL_TIME)
                /* Override active_time to reduce scan time if it's first bradcast scan. */
                if (is_first_init_2g_scan)
                        params->params.active_time = FIRST_SCAN_ACTIVE_DWELL_TIME_MS;
#endif /* USE_INITIAL_2G_SCAN || USE_INITIAL_SHORT_DWELL_TIME */

                params->version = htod32(ESCAN_REQ_VERSION);
                params->action =  htod16(action);
                wl_escan_set_sync_id(params->sync_id, cfg);
                wl_escan_set_type(cfg, WL_SCANTYPE_LEGACY);
                if (params_size + sizeof("escan") >= WLC_IOCTL_MEDLEN) {
                        WL_ERR(("ioctl buffer length not sufficient\n"));
                        MFREE(cfg->osh, params, params_size);
                        err = -ENOMEM;
                        goto exit;
                }
                if (cfg->active_scan == PASSIVE_SCAN) {
                        params->params.scan_type = DOT11_SCANTYPE_PASSIVE;
                        WL_DBG(("Passive scan_type %d \n", params->params.scan_type));
                }

                bssidx = wl_get_bssidx_by_wdev(cfg, ndev->ieee80211_ptr);

                err = wldev_iovar_setbuf(ndev, "escan", params, params_size,
                        cfg->escan_ioctl_buf, WLC_IOCTL_MEDLEN, NULL);
                WL_INFORM_MEM(("LEGACY_SCAN sync ID: %d, bssidx: %d\n", params->sync_id, bssidx));
                if (unlikely(err)) {
                        if (err == BCME_EPERM)
                                /* Scan Not permitted at this point of time */
                                WL_DBG((" Escan not permitted at this time (%d)\n", err));
                        else
                                WL_ERR((" Escan set error (%d)\n", err));
                } else {
                        DBG_EVENT_LOG((dhd_pub_t *)cfg->pub, WIFI_EVENT_DRIVER_SCAN_REQUESTED);
                }
                MFREE(cfg->osh, params, params_size);
        }
        else if (p2p_is_on(cfg) && p2p_scan(cfg)) {
                /* P2P SCAN TRIGGER */
                s32 _freq = 0;
                n_nodfs = 0;

#ifdef WL_NAN
                if (wl_cfgnan_check_state(cfg)) {
                        WL_ERR(("nan is enabled, nan + p2p concurrency not supported\n"));
                        return BCME_UNSUPPORTED;
                }
#endif /* WL_NAN */
                if (request && request->n_channels) {
                        num_chans = request->n_channels;
                        WL_SCAN((" chann number : %d\n", num_chans));
                        chan_mem = (u32)(num_chans * sizeof(*default_chan_list));
                        default_chan_list = MALLOCZ(cfg->osh, chan_mem);
                        if (default_chan_list == NULL) {
                                WL_ERR(("channel list allocation failed \n"));
                                err = -ENOMEM;
                                goto exit;
                        }
                        if (!wl_get_valid_channels(ndev, chan_buf, sizeof(chan_buf))) {
#ifdef P2P_SKIP_DFS
                                int is_printed = false;
#endif /* P2P_SKIP_DFS */
                                list = (wl_uint32_list_t *) chan_buf;
                                n_valid_chan = dtoh32(list->count);
                                if (n_valid_chan > WL_NUMCHANNELS) {
                                        WL_ERR(("wrong n_valid_chan:%d\n", n_valid_chan));
                                        MFREE(cfg->osh, default_chan_list, chan_mem);
                                        err = -EINVAL;
                                        goto exit;
                                }

                                for (i = 0; i < num_chans; i++)
                                {
#ifdef WL_HOST_BAND_MGMT
                                        int channel_band = 0;
#endif /* WL_HOST_BAND_MGMT */
                                        _freq = request->channels[i]->center_freq;
                                        channel = ieee80211_frequency_to_channel(_freq);
#ifdef WL_HOST_BAND_MGMT
                                        channel_band = (channel > CH_MAX_2G_CHANNEL) ?
                                                WLC_BAND_5G : WLC_BAND_2G;
                                        if ((cfg->curr_band != WLC_BAND_AUTO) &&
                                                (cfg->curr_band != channel_band) &&
                                                !IS_P2P_SOCIAL_CHANNEL(channel))
                                                        continue;
#endif /* WL_HOST_BAND_MGMT */

                                        /* ignore DFS channels */
                                        if (request->channels[i]->flags &
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0))
                                                (IEEE80211_CHAN_NO_IR
                                                | IEEE80211_CHAN_RADAR))
#else
                                                (IEEE80211_CHAN_RADAR
                                                | IEEE80211_CHAN_PASSIVE_SCAN))
#endif // endif
                                                continue;
#ifdef P2P_SKIP_DFS
                                        if (channel >= 52 && channel <= 144) {
                                                if (is_printed == false) {
                                                        WL_ERR(("SKIP DFS CHANs(52~144)\n"));
                                                        is_printed = true;
                                                }
                                                continue;
                                        }
#endif /* P2P_SKIP_DFS */

                                        for (j = 0; j < n_valid_chan; j++) {
                                                /* allows only supported channel on
                                                *  current reguatory
                                                */
                                                if (n_nodfs >= num_chans) {
                                                        break;
                                                }
                                                if (channel == (dtoh32(list->element[j]))) {
                                                        default_chan_list[n_nodfs++] =
                                                                channel;
                                                }
                                        }

                                }
                        }
                        if (num_chans == SOCIAL_CHAN_CNT && (
                                                (default_chan_list[0] == SOCIAL_CHAN_1) &&
                                                (default_chan_list[1] == SOCIAL_CHAN_2) &&
                                                (default_chan_list[2] == SOCIAL_CHAN_3))) {
                                /* SOCIAL CHANNELS 1, 6, 11 */
                                search_state = WL_P2P_DISC_ST_SEARCH;
                                p2p_scan_purpose = P2P_SCAN_SOCIAL_CHANNEL;
                                WL_DBG(("P2P SEARCH PHASE START \n"));
                        } else if (((dev = wl_to_p2p_bss_ndev(cfg, P2PAPI_BSSCFG_CONNECTION1)) &&
                                (wl_get_mode_by_netdev(cfg, dev) == WL_MODE_AP)) ||
                                ((dev = wl_to_p2p_bss_ndev(cfg, P2PAPI_BSSCFG_CONNECTION2)) &&
                                (wl_get_mode_by_netdev(cfg, dev) == WL_MODE_AP))) {
                                /* If you are already a GO, then do SEARCH only */
                                WL_DBG(("Already a GO. Do SEARCH Only"));
                                search_state = WL_P2P_DISC_ST_SEARCH;
                                num_chans = n_nodfs;
                                p2p_scan_purpose = P2P_SCAN_NORMAL;

                        } else if (num_chans == 1) {
                                p2p_scan_purpose = P2P_SCAN_CONNECT_TRY;
                                WL_INFORM_MEM(("Trigger p2p join scan\n"));
                        } else if (num_chans == SOCIAL_CHAN_CNT + 1) {
                        /* SOCIAL_CHAN_CNT + 1 takes care of the Progressive scan supported by
                         * the supplicant
                         */
                                p2p_scan_purpose = P2P_SCAN_SOCIAL_CHANNEL;
                        } else {
                                WL_DBG(("P2P SCAN STATE START \n"));
                                num_chans = n_nodfs;
                                p2p_scan_purpose = P2P_SCAN_NORMAL;
                        }
                } else {
                        err = -EINVAL;
                        goto exit;
                }
                err = wl_cfgp2p_escan(cfg, ndev, ACTIVE_SCAN, num_chans, default_chan_list,
                        search_state, action,
                        wl_to_p2p_bss_bssidx(cfg, P2PAPI_BSSCFG_DEVICE), NULL,
                        p2p_scan_purpose);

                if (!err)
                        cfg->p2p->search_state = search_state;

                MFREE(cfg->osh, default_chan_list, chan_mem);
        }
exit:
        if (unlikely(err)) {
                /* Don't print Error incase of Scan suppress */
                if ((err == BCME_EPERM) && cfg->scan_suppressed)
                        WL_DBG(("Escan failed: Scan Suppressed \n"));
                else
                        WL_ERR(("scan error (%d)\n", err));
        }
        return err;
}

static s32
wl_do_escan(struct bcm_cfg80211 *cfg, struct wiphy *wiphy, struct net_device *ndev,
        struct cfg80211_scan_request *request)
{
        s32 err = BCME_OK;
        s32 passive_scan;
        s32 passive_scan_time;
        s32 passive_scan_time_org;
        wl_scan_results_t *results;
        WL_SCAN(("Enter \n"));

        results = wl_escan_get_buf(cfg, FALSE);
        results->version = 0;
        results->count = 0;
        results->buflen = WL_SCAN_RESULTS_FIXED_SIZE;

        cfg->escan_info.ndev = ndev;
        cfg->escan_info.wiphy = wiphy;
        cfg->escan_info.escan_state = WL_ESCAN_STATE_SCANING;
        passive_scan = cfg->active_scan ? 0 : 1;
        err = wldev_ioctl_set(ndev, WLC_SET_PASSIVE_SCAN,
                              &passive_scan, sizeof(passive_scan));
        if (unlikely(err)) {
                WL_ERR(("error (%d)\n", err));
                goto exit;
        }

        if (passive_channel_skip) {

                err = wldev_ioctl_get(ndev, WLC_GET_SCAN_PASSIVE_TIME,
                        &passive_scan_time_org, sizeof(passive_scan_time_org));
                if (unlikely(err)) {
                        WL_ERR(("== error (%d)\n", err));
                        goto exit;
                }

                WL_SCAN(("PASSIVE SCAN time : %d \n", passive_scan_time_org));

                passive_scan_time = 0;
                err = wldev_ioctl_set(ndev, WLC_SET_SCAN_PASSIVE_TIME,
                        &passive_scan_time, sizeof(passive_scan_time));
                if (unlikely(err)) {
                        WL_ERR(("== error (%d)\n", err));
                        goto exit;
                }

                WL_SCAN(("PASSIVE SCAN SKIPED!! (passive_channel_skip:%d) \n",
                        passive_channel_skip));
        }

        err = wl_run_escan(cfg, ndev, request, WL_SCAN_ACTION_START);

        if (passive_channel_skip) {
                err = wldev_ioctl_set(ndev, WLC_SET_SCAN_PASSIVE_TIME,
                        &passive_scan_time_org, sizeof(passive_scan_time_org));
                if (unlikely(err)) {
                        WL_ERR(("== error (%d)\n", err));
                        goto exit;
                }

                WL_SCAN(("PASSIVE SCAN RECOVERED!! (passive_scan_time_org:%d) \n",
                        passive_scan_time_org));
        }

exit:
        return err;
}

static s32
__wl_cfg80211_scan(struct wiphy *wiphy, struct net_device *ndev,
        struct cfg80211_scan_request *request,
        struct cfg80211_ssid *this_ssid)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct cfg80211_ssid *ssids;
        struct ether_addr primary_mac;
        bool p2p_ssid;
#ifdef WL11U
        bcm_tlv_t *interworking_ie;
#endif // endif
        s32 err = 0;
        s32 bssidx = -1;
        s32 i;

        unsigned long flags;
        static s32 busy_count = 0;
#ifdef WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST
        struct net_device *remain_on_channel_ndev = NULL;
#endif // endif
        /*
         * Hostapd triggers scan before starting automatic channel selection
         * to collect channel characteristics. However firmware scan engine
         * doesn't support any channel characteristics collection along with
         * scan. Hence return scan success.
         */
        if (request && (scan_req_iftype(request) == NL80211_IFTYPE_AP)) {
                WL_DBG(("Scan Command on SoftAP Interface. Ignoring...\n"));
                return 0;
        }

        ndev = ndev_to_wlc_ndev(ndev, cfg);

        if (WL_DRV_STATUS_SENDING_AF_FRM_EXT(cfg)) {
                WL_ERR(("Sending Action Frames. Try it again.\n"));
                return -EAGAIN;
        }

        WL_DBG(("Enter wiphy (%p)\n", wiphy));
        if (wl_get_drv_status_all(cfg, SCANNING)) {
                if (cfg->scan_request == NULL) {
                        wl_clr_drv_status_all(cfg, SCANNING);
                        WL_DBG(("<<<<<<<<<<<Force Clear Scanning Status>>>>>>>>>>>\n"));
                } else {
                        WL_ERR(("Scanning already\n"));
                        return -EAGAIN;
                }
        }
        if (wl_get_drv_status(cfg, SCAN_ABORTING, ndev)) {
                WL_ERR(("Scanning being aborted\n"));
                return -EAGAIN;
        }
        if (request && request->n_ssids > WL_SCAN_PARAMS_SSID_MAX) {
                WL_ERR(("request null or n_ssids > WL_SCAN_PARAMS_SSID_MAX\n"));
                return -EOPNOTSUPP;
        }
#ifdef WL_BCNRECV
        /* check fakeapscan in progress then abort */
        wl_android_bcnrecv_stop(ndev, WL_BCNRECV_SCANBUSY);
#endif /* WL_BCNRECV */

#ifdef P2P_LISTEN_OFFLOADING
        if (wl_get_p2p_status(cfg, DISC_IN_PROGRESS)) {
                WL_ERR(("P2P_FIND: Discovery offload is in progress\n"));
                return -EAGAIN;
        }
#endif /* P2P_LISTEN_OFFLOADING */

#ifdef WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST
        remain_on_channel_ndev = wl_cfg80211_get_remain_on_channel_ndev(cfg);
        if (remain_on_channel_ndev) {
                WL_DBG(("Remain_on_channel bit is set, somehow it didn't get cleared\n"));
                wl_notify_escan_complete(cfg, remain_on_channel_ndev, true, true);
        }
#endif /* WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST */

        if (request) {          /* scan bss */
                ssids = request->ssids;
                p2p_ssid = false;
                for (i = 0; i < request->n_ssids; i++) {
                        if (ssids[i].ssid_len &&
                                IS_P2P_SSID(ssids[i].ssid, ssids[i].ssid_len)) {
                                p2p_ssid = true;
                                break;
                        }
                }
                if (p2p_ssid) {
                        if (cfg->p2p_supported) {
#ifdef WL_NAN
                                if (cfg->nan_enable) {
                                        err = wl_cfgnan_disable(cfg, NAN_CONCURRENCY_CONFLICT);
                                        if (err != BCME_OK) {
                                                WL_ERR(("failed to disable nan, error[%d]\n", err));
                                                goto scan_out;
                                        }
                                }
#endif /* WL_NAN */
                                /* p2p scan trigger */
                                if (p2p_on(cfg) == false) {
                                        /* p2p on at the first time */
                                        p2p_on(cfg) = true;
                                        wl_cfgp2p_set_firm_p2p(cfg);
                                        get_primary_mac(cfg, &primary_mac);
                                        wl_cfgp2p_generate_bss_mac(cfg, &primary_mac);
#if defined(P2P_IE_MISSING_FIX)
                                        cfg->p2p_prb_noti = false;
#endif // endif
                                }
                                wl_clr_p2p_status(cfg, GO_NEG_PHASE);
                                WL_DBG(("P2P: GO_NEG_PHASE status cleared \n"));
                                p2p_scan(cfg) = true;
                        }
                } else {
                        /* legacy scan trigger
                         * So, we have to disable p2p discovery if p2p discovery is on
                         */
                        if (cfg->p2p_supported) {
                                p2p_scan(cfg) = false;
                                /* If Netdevice is not equals to primary and p2p is on
                                *  , we will do p2p scan using P2PAPI_BSSCFG_DEVICE.
                                */

                                if (p2p_scan(cfg) == false) {
                                        if (wl_get_p2p_status(cfg, DISCOVERY_ON)) {
                                                err = wl_cfgp2p_discover_enable_search(cfg,
                                                false);
                                                if (unlikely(err)) {
                                                        goto scan_out;
                                                }

                                        }
                                }
                        }
                        if (!cfg->p2p_supported || !p2p_scan(cfg)) {
                                if ((bssidx = wl_get_bssidx_by_wdev(cfg,
                                        ndev->ieee80211_ptr)) < 0) {
                                        WL_ERR(("Find p2p index from ndev(%p) failed\n",
                                                ndev));
                                        err = BCME_ERROR;
                                        goto scan_out;
                                }
#ifdef WL11U
                                if (request && (interworking_ie = wl_cfg80211_find_interworking_ie(
                                                request->ie, request->ie_len)) != NULL) {
                                        if ((err = wl_cfg80211_add_iw_ie(cfg, ndev, bssidx,
                                                        VNDR_IE_CUSTOM_FLAG, interworking_ie->id,
                                                        interworking_ie->data,
                                                        interworking_ie->len)) != BCME_OK) {
                                                WL_ERR(("Failed to add interworking IE"));
                                        }
                                } else if (cfg->wl11u) {
                                        /* we have to clear IW IE and disable gratuitous APR */
                                        wl_cfg80211_clear_iw_ie(cfg, ndev, bssidx);
                                        err = wldev_iovar_setint_bsscfg(ndev, "grat_arp",
                                                                        0, bssidx);
                                        /* we don't care about error here
                                         * because the only failure case is unsupported,
                                         * which is fine
                                         */
                                        if (unlikely(err)) {
                                                WL_ERR(("Set grat_arp failed:(%d) Ignore!\n", err));
                                        }
                                        cfg->wl11u = FALSE;
                                }
#endif /* WL11U */
                                if (request) {
                                        err = wl_cfg80211_set_mgmt_vndr_ies(cfg,
                                                ndev_to_cfgdev(ndev), bssidx, VNDR_IE_PRBREQ_FLAG,
                                                request->ie, request->ie_len);
                                }

                                if (unlikely(err)) {
                                        goto scan_out;
                                }

                        }
                }
        } else {                /* scan in ibss */
                ssids = this_ssid;
        }

        if (request && cfg->p2p_supported) {
                WL_TRACE_HW4(("START SCAN\n"));
                DHD_OS_SCAN_WAKE_LOCK_TIMEOUT((dhd_pub_t *)(cfg->pub),
                        SCAN_WAKE_LOCK_TIMEOUT);
                DHD_DISABLE_RUNTIME_PM((dhd_pub_t *)(cfg->pub));
        }

        if (cfg->p2p_supported) {
                if (request && p2p_on(cfg) && p2p_scan(cfg)) {

                        /* find my listen channel */
                        cfg->afx_hdl->my_listen_chan =
                                wl_find_listen_channel(cfg, request->ie,
                                request->ie_len);
                        err = wl_cfgp2p_enable_discovery(cfg, ndev,
                        request->ie, request->ie_len);

                        if (unlikely(err)) {
                                goto scan_out;
                        }
                }
        }
        err = wl_do_escan(cfg, wiphy, ndev, request);
        if (likely(!err))
                goto scan_success;
        else
                goto scan_out;

scan_success:
        busy_count = 0;
        cfg->scan_request = request;
        wl_set_drv_status(cfg, SCANNING, ndev);

        return 0;

scan_out:
        if (err == BCME_BUSY || err == BCME_NOTREADY) {
                WL_ERR(("Scan err = (%d), busy?%d", err, -EBUSY));
                err = -EBUSY;
        } else if ((err == BCME_EPERM) && cfg->scan_suppressed) {
                WL_ERR(("Scan not permitted due to scan suppress\n"));
                err = -EPERM;
        } else {
                /* For all other fw errors, use a generic error code as return
                 * value to cfg80211 stack
                 */
                err = -EAGAIN;
        }

#define SCAN_EBUSY_RETRY_LIMIT 20
        if (err == -EBUSY) {
                /* Flush FW preserve buffer logs for checking failure */
                if (busy_count++ > (SCAN_EBUSY_RETRY_LIMIT/5)) {
                        wl_flush_fw_log_buffer(ndev, FW_LOGSET_MASK_ALL);
                }
                if (busy_count > SCAN_EBUSY_RETRY_LIMIT) {
                        struct ether_addr bssid;
                        s32 ret = 0;
#if defined(DHD_DEBUG) && defined(DHD_FW_COREDUMP)
                        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
#endif /* DHD_DEBUG && DHD_FW_COREDUMP */
                        busy_count = 0;
                        WL_ERR(("Unusual continuous EBUSY error, %d %d %d %d %d %d %d %d %d\n",
                                wl_get_drv_status(cfg, SCANNING, ndev),
                                wl_get_drv_status(cfg, SCAN_ABORTING, ndev),
                                wl_get_drv_status(cfg, CONNECTING, ndev),
                                wl_get_drv_status(cfg, CONNECTED, ndev),
                                wl_get_drv_status(cfg, DISCONNECTING, ndev),
                                wl_get_drv_status(cfg, AP_CREATING, ndev),
                                wl_get_drv_status(cfg, AP_CREATED, ndev),
                                wl_get_drv_status(cfg, SENDING_ACT_FRM, ndev),
                                wl_get_drv_status(cfg, SENDING_ACT_FRM, ndev)));

#if defined(DHD_DEBUG) && defined(DHD_FW_COREDUMP)
                        if (dhdp->memdump_enabled) {
                                dhdp->memdump_type = DUMP_TYPE_SCAN_BUSY;
                                dhd_bus_mem_dump(dhdp);
                        }
#endif /* DHD_DEBUG && DHD_FW_COREDUMP */

                        bzero(&bssid, sizeof(bssid));
                        if ((ret = wldev_ioctl_get(ndev, WLC_GET_BSSID,
                                &bssid, ETHER_ADDR_LEN)) == 0) {
                                WL_ERR(("FW is connected with " MACDBG "/n",
                                        MAC2STRDBG(bssid.octet)));
                        } else {
                                WL_ERR(("GET BSSID failed with %d\n", ret));
                        }

                        wl_cfg80211_scan_abort(cfg);

                } else {
                        /* Hold the context for 400msec, so that 10 subsequent scans
                        * can give a buffer of 4sec which is enough to
                        * cover any on-going scan in the firmware
                        */
                        WL_DBG(("Enforcing delay for EBUSY case \n"));
                        msleep(400);
                }
        } else {
                busy_count = 0;
        }

        wl_clr_drv_status(cfg, SCANNING, ndev);
        DHD_OS_SCAN_WAKE_UNLOCK((dhd_pub_t *)(cfg->pub));
        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
        cfg->scan_request = NULL;
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);

        return err;
}

static s32
wl_get_scan_timeout_val(struct bcm_cfg80211 *cfg)
{
        u32 scan_timer_interval_ms = WL_SCAN_TIMER_INTERVAL_MS;

#ifdef WES_SUPPORT
#ifdef CUSTOMER_SCAN_TIMEOUT_SETTING
        if ((cfg->custom_scan_channel_time > DHD_SCAN_ASSOC_ACTIVE_TIME) |
                (cfg->custom_scan_unassoc_time > DHD_SCAN_UNASSOC_ACTIVE_TIME) |
                (cfg->custom_scan_passive_time > DHD_SCAN_PASSIVE_TIME) |
                (cfg->custom_scan_home_time > DHD_SCAN_HOME_TIME) |
                (cfg->custom_scan_home_away_time > DHD_SCAN_HOME_AWAY_TIME)) {
                scan_timer_interval_ms = CUSTOMER_WL_SCAN_TIMER_INTERVAL_MS;
        }
#endif /* CUSTOMER_SCAN_TIMEOUT_SETTING */
#endif /* WES_SUPPORT */

        /* If NAN is enabled adding +10 sec to the existing timeout value */
#ifdef WL_NAN
        if (cfg->nan_enable) {
                scan_timer_interval_ms += WL_SCAN_TIMER_INTERVAL_MS_NAN;
        }
#endif /* WL_NAN */
        WL_INFORM(("scan_timer_interval_ms %d\n", scan_timer_interval_ms));
        return scan_timer_interval_ms;
}

#if defined(WL_CFG80211_P2P_DEV_IF)
static s32
wl_cfg80211_scan(struct wiphy *wiphy, struct cfg80211_scan_request *request)
#else
static s32
wl_cfg80211_scan(struct wiphy *wiphy, struct net_device *ndev,
        struct cfg80211_scan_request *request)
#endif /* WL_CFG80211_P2P_DEV_IF */
{
        s32 err = 0;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
#if defined(WL_CFG80211_P2P_DEV_IF)
        struct net_device *ndev = wdev_to_wlc_ndev(request->wdev, cfg);
#endif /* WL_CFG80211_P2P_DEV_IF */

        WL_DBG(("Enter\n"));
        RETURN_EIO_IF_NOT_UP(cfg);

#ifdef DHD_IFDEBUG
#ifdef WL_CFG80211_P2P_DEV_IF
        PRINT_WDEV_INFO(request->wdev);
#else
        PRINT_WDEV_INFO(ndev);
#endif /* WL_CFG80211_P2P_DEV_IF */
#endif /* DHD_IFDEBUG */

        if (ndev == bcmcfg_to_prmry_ndev(cfg)) {
                if (wl_cfg_multip2p_operational(cfg)) {
                        WL_ERR(("wlan0 scan failed, p2p devices are operational"));
                         return -ENODEV;
                }
        }

        mutex_lock(&cfg->scan_sync);
        err = __wl_cfg80211_scan(wiphy, ndev, request, NULL);
        if (unlikely(err)) {
                WL_ERR(("scan error (%d)\n", err));
        } else {
                /* Arm the timer */
                mod_timer(&cfg->scan_timeout,
                        jiffies + msecs_to_jiffies(wl_get_scan_timeout_val(cfg)));
        }
        mutex_unlock(&cfg->scan_sync);
#ifdef WL_DRV_AVOID_SCANCACHE
        /* Reset roam cache after successful scan request */
#ifdef ROAM_CHANNEL_CACHE
        if (!err) {
                reset_roam_cache(cfg);
        }
#endif /* ROAM_CHANNEL_CACHE */
#endif /* WL_DRV_AVOID_SCANCACHE */
        return err;
}

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 5, 0))
static void
wl_cfg80211_abort_scan(struct wiphy *wiphy, struct wireless_dev *wdev)
{
        struct bcm_cfg80211 *cfg;

        WL_DBG(("Enter %s\n", __FUNCTION__));
        cfg = wiphy_priv(wdev->wiphy);

        /* Check if any scan in progress only then abort */
        if (wl_get_drv_status_all(cfg, SCANNING)) {
                wl_cfg80211_scan_abort(cfg);
                /* Only scan abort is issued here. As per the expectation of abort_scan
                * the status of abort is needed to be communicated using cfg80211_scan_done call.
                * Here we just issue abort request and let the scan complete path to indicate
                * abort to cfg80211 layer.
                */
                WL_DBG(("%s: Scan abort issued to FW\n", __FUNCTION__));
        }
}
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 5, 0)) */

static s32 wl_set_rts(struct net_device *dev, u32 rts_threshold)
{
        s32 err = 0;

        err = wldev_iovar_setint(dev, "rtsthresh", rts_threshold);
        if (unlikely(err)) {
                WL_ERR(("Error (%d)\n", err));
                return err;
        }
        return err;
}

static s32 wl_set_frag(struct net_device *dev, u32 frag_threshold)
{
        s32 err = 0;

        err = wldev_iovar_setint_bsscfg(dev, "fragthresh", frag_threshold, 0);
        if (unlikely(err)) {
                WL_ERR(("Error (%d)\n", err));
                return err;
        }
        return err;
}

static s32 wl_set_retry(struct net_device *dev, u32 retry, bool l)
{
        s32 err = 0;
        u32 cmd = (l ? WLC_SET_LRL : WLC_SET_SRL);

#ifdef CUSTOM_LONG_RETRY_LIMIT
        if ((cmd == WLC_SET_LRL) &&
                (retry != CUSTOM_LONG_RETRY_LIMIT)) {
                WL_DBG(("CUSTOM_LONG_RETRY_LIMIT is used.Ignore configuration"));
                return err;
        }
#endif /* CUSTOM_LONG_RETRY_LIMIT */

        retry = htod32(retry);
        err = wldev_ioctl_set(dev, cmd, &retry, sizeof(retry));
        if (unlikely(err)) {
                WL_ERR(("cmd (%d) , error (%d)\n", cmd, err));
                return err;
        }
        return err;
}

static s32 wl_cfg80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
{
        struct bcm_cfg80211 *cfg = (struct bcm_cfg80211 *)wiphy_priv(wiphy);
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
        s32 err = 0;

        RETURN_EIO_IF_NOT_UP(cfg);
        WL_DBG(("Enter\n"));
        if (changed & WIPHY_PARAM_RTS_THRESHOLD &&
                (cfg->conf->rts_threshold != wiphy->rts_threshold)) {
                cfg->conf->rts_threshold = wiphy->rts_threshold;
                err = wl_set_rts(ndev, cfg->conf->rts_threshold);
                if (err != BCME_OK)
                        return err;
        }
        if (changed & WIPHY_PARAM_FRAG_THRESHOLD &&
                (cfg->conf->frag_threshold != wiphy->frag_threshold)) {
                cfg->conf->frag_threshold = wiphy->frag_threshold;
                err = wl_set_frag(ndev, cfg->conf->frag_threshold);
                if (err != BCME_OK)
                        return err;
        }
        if (changed & WIPHY_PARAM_RETRY_LONG &&
                (cfg->conf->retry_long != wiphy->retry_long)) {
                cfg->conf->retry_long = wiphy->retry_long;
                err = wl_set_retry(ndev, cfg->conf->retry_long, true);
                if (err != BCME_OK)
                        return err;
        }
        if (changed & WIPHY_PARAM_RETRY_SHORT &&
                (cfg->conf->retry_short != wiphy->retry_short)) {
                cfg->conf->retry_short = wiphy->retry_short;
                err = wl_set_retry(ndev, cfg->conf->retry_short, false);
                if (err != BCME_OK) {
                        return err;
                }
        }

        return err;
}
static chanspec_t
channel_to_chanspec(struct wiphy *wiphy, struct net_device *dev, u32 channel, u32 bw_cap)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        u8 *buf = NULL;
        wl_uint32_list_t *list;
        int err = BCME_OK;
        chanspec_t c = 0, ret_c = 0;
        int bw = 0, tmp_bw = 0;
        int i;
        u32 tmp_c;
#define LOCAL_BUF_SIZE  1024
        buf = (u8 *)MALLOC(cfg->osh, LOCAL_BUF_SIZE);
        if (!buf) {
                WL_ERR(("buf memory alloc failed\n"));
                goto exit;
        }

        err = wldev_iovar_getbuf_bsscfg(dev, "chanspecs", NULL,
                0, buf, LOCAL_BUF_SIZE, 0, &cfg->ioctl_buf_sync);
        if (err != BCME_OK) {
                WL_ERR(("get chanspecs failed with %d\n", err));
                goto exit;
        }

        list = (wl_uint32_list_t *)(void *)buf;
        for (i = 0; i < dtoh32(list->count); i++) {
                c = dtoh32(list->element[i]);
                if (channel <= CH_MAX_2G_CHANNEL) {
                        if (!CHSPEC_IS20(c))
                                continue;
                        if (channel == CHSPEC_CHANNEL(c)) {
                                ret_c = c;
                                bw = 20;
                                goto exit;
                        }
                }
                tmp_c = wf_chspec_ctlchan(c);
                tmp_bw = bw2cap[CHSPEC_BW(c) >> WL_CHANSPEC_BW_SHIFT];
                if (tmp_c != channel)
                        continue;

                if ((tmp_bw > bw) && (tmp_bw <= bw_cap)) {
                        bw = tmp_bw;
                        ret_c = c;
                        if (bw == bw_cap)
                                goto exit;
                }
        }
exit:
        if (buf) {
                 MFREE(cfg->osh, buf, LOCAL_BUF_SIZE);
        }
#undef LOCAL_BUF_SIZE
        WL_DBG(("return chanspec %x %d\n", ret_c, bw));
        return ret_c;
}

void
wl_cfg80211_ibss_vsie_set_buffer(struct net_device *dev, vndr_ie_setbuf_t *ibss_vsie,
        int ibss_vsie_len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if (cfg != NULL && ibss_vsie != NULL) {
                if (cfg->ibss_vsie != NULL) {
                        MFREE(cfg->osh, cfg->ibss_vsie, cfg->ibss_vsie_len);
                }
                cfg->ibss_vsie = ibss_vsie;
                cfg->ibss_vsie_len = ibss_vsie_len;
        }
}

static void
wl_cfg80211_ibss_vsie_free(struct bcm_cfg80211 *cfg)
{
        /* free & initiralize VSIE (Vendor Specific IE) */
        if (cfg->ibss_vsie != NULL) {
                MFREE(cfg->osh, cfg->ibss_vsie, cfg->ibss_vsie_len);
                cfg->ibss_vsie = NULL;
                cfg->ibss_vsie_len = 0;
        }
}

s32
wl_cfg80211_ibss_vsie_delete(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        char *ioctl_buf = NULL;
        s32 ret = BCME_OK, bssidx;

        if (cfg != NULL && cfg->ibss_vsie != NULL) {
                ioctl_buf = (char *)MALLOC(cfg->osh, WLC_IOCTL_MEDLEN);
                if (!ioctl_buf) {
                        WL_ERR(("ioctl memory alloc failed\n"));
                        return -ENOMEM;
                }
                if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                        WL_ERR(("Find index failed\n"));
                        ret = BCME_ERROR;
                        goto end;
                }
                /* change the command from "add" to "del" */
                strncpy(cfg->ibss_vsie->cmd, "del", VNDR_IE_CMD_LEN - 1);
                cfg->ibss_vsie->cmd[VNDR_IE_CMD_LEN - 1] = '\0';

                ret = wldev_iovar_setbuf_bsscfg(dev, "vndr_ie",
                                cfg->ibss_vsie, cfg->ibss_vsie_len,
                                ioctl_buf, WLC_IOCTL_MEDLEN, bssidx, NULL);
                WL_ERR(("ret=%d\n", ret));

                if (ret == BCME_OK) {
                        /* free & initialize VSIE */
                        MFREE(cfg->osh, cfg->ibss_vsie, cfg->ibss_vsie_len);
                        cfg->ibss_vsie = NULL;
                        cfg->ibss_vsie_len = 0;
                }
end:
                if (ioctl_buf) {
                        MFREE(cfg->osh, ioctl_buf, WLC_IOCTL_MEDLEN);
                }
        }

        return ret;
}

#ifdef WLAIBSS_MCHAN
static bcm_struct_cfgdev*
bcm_cfg80211_add_ibss_if(struct wiphy *wiphy, char *name)
{
        int err = 0;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct wireless_dev* wdev = NULL;
        struct net_device *new_ndev = NULL;
        struct net_device *primary_ndev = NULL;
        long timeout;
        wl_aibss_if_t aibss_if;
        wl_if_event_info *event = NULL;

        if (cfg->ibss_cfgdev != NULL) {
                WL_ERR(("IBSS interface %s already exists\n", name));
                return NULL;
        }

        WL_ERR(("Try to create IBSS interface %s\n", name));
        primary_ndev = bcmcfg_to_prmry_ndev(cfg);
        /* generate a new MAC address for the IBSS interface */
        get_primary_mac(cfg, &cfg->ibss_if_addr);
        cfg->ibss_if_addr.octet[4] ^= 0x40;
        memset(&aibss_if, sizeof(aibss_if), 0);
        memcpy(&aibss_if.addr, &cfg->ibss_if_addr, sizeof(aibss_if.addr));
        aibss_if.chspec = 0;
        aibss_if.len = sizeof(aibss_if);

        cfg->bss_pending_op = TRUE;
        memset(&cfg->if_event_info, 0, sizeof(cfg->if_event_info));
        err = wldev_iovar_setbuf(primary_ndev, "aibss_ifadd", &aibss_if,
                sizeof(aibss_if), cfg->ioctl_buf, WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);
        if (err) {
                WL_ERR(("IOVAR aibss_ifadd failed with error %d\n", err));
                goto fail;
        }
        timeout = wait_event_interruptible_timeout(cfg->netif_change_event,
                !cfg->bss_pending_op, msecs_to_jiffies(MAX_WAIT_TIME));
        if (timeout <= 0 || cfg->bss_pending_op)
                goto fail;

        event = &cfg->if_event_info;
        /* By calling wl_cfg80211_allocate_if (dhd_allocate_if eventually) we give the control
         * over this net_device interface to dhd_linux, hence the interface is managed by dhd_liux
         * and will be freed by dhd_detach unless it gets unregistered before that. The
         * wireless_dev instance new_ndev->ieee80211_ptr associated with this net_device will
         * be freed by wl_dealloc_netinfo
         */
        new_ndev = wl_cfg80211_allocate_if(cfg, event->ifidx, event->name,
                event->mac, event->bssidx, event->name);
        if (new_ndev == NULL)
                goto fail;
        wdev = (struct wireless_dev *)MALLOCZ(cfg->osh, sizeof(*wdev));
        if (wdev == NULL)
                goto fail;
        wdev->wiphy = wiphy;
        wdev->iftype = NL80211_IFTYPE_ADHOC;
        wdev->netdev = new_ndev;
        new_ndev->ieee80211_ptr = wdev;
        SET_NETDEV_DEV(new_ndev, wiphy_dev(wdev->wiphy));

        /* rtnl lock must have been acquired, if this is not the case, wl_cfg80211_register_if
        * needs to be modified to take one parameter (bool need_rtnl_lock)
         */
        ASSERT_RTNL();
        if (wl_cfg80211_register_if(cfg, event->ifidx, new_ndev, FALSE) != BCME_OK)
                goto fail;

        wl_alloc_netinfo(cfg, new_ndev, wdev, WL_IF_TYPE_IBSS,
                PM_ENABLE, event->bssidx, event->ifidx);
        cfg->ibss_cfgdev = ndev_to_cfgdev(new_ndev);
        WL_ERR(("IBSS interface %s created\n", new_ndev->name));
        return cfg->ibss_cfgdev;

fail:
        WL_ERR(("failed to create IBSS interface %s \n", name));
        cfg->bss_pending_op = FALSE;
        if (new_ndev)
                wl_cfg80211_remove_if(cfg, event->ifidx, new_ndev, FALSE);
        if (wdev) {
                MFREE(cfg->osh, wdev, sizeof(*wdev));
        }
        return NULL;
}

static s32
bcm_cfg80211_del_ibss_if(struct wiphy *wiphy, bcm_struct_cfgdev *cfgdev)
{
        int err = 0;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_device *ndev = NULL;
        struct net_device *primary_ndev = NULL;
        long timeout;

        if (!cfgdev || cfg->ibss_cfgdev != cfgdev || ETHER_ISNULLADDR(&cfg->ibss_if_addr.octet))
                return -EINVAL;
        ndev = (struct net_device *)cfgdev_to_ndev(cfg->ibss_cfgdev);
        primary_ndev = bcmcfg_to_prmry_ndev(cfg);

        cfg->bss_pending_op = TRUE;
        memset(&cfg->if_event_info, 0, sizeof(cfg->if_event_info));
        err = wldev_iovar_setbuf(primary_ndev, "aibss_ifdel", &cfg->ibss_if_addr,
                sizeof(cfg->ibss_if_addr), cfg->ioctl_buf, WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);
        if (err) {
                WL_ERR(("IOVAR aibss_ifdel failed with error %d\n", err));
                goto fail;
        }
        timeout = wait_event_interruptible_timeout(cfg->netif_change_event,
                !cfg->bss_pending_op, msecs_to_jiffies(MAX_WAIT_TIME));
        if (timeout <= 0 || cfg->bss_pending_op) {
                WL_ERR(("timeout in waiting IF_DEL event\n"));
                goto fail;
        }

        wl_cfg80211_remove_if(cfg, cfg->if_event_info.ifidx, ndev, FALSE);
        cfg->ibss_cfgdev = NULL;
        return 0;

fail:
        cfg->bss_pending_op = FALSE;
        return -1;
}
#endif /* WLAIBSS_MCHAN */

s32
wl_cfg80211_to_fw_iftype(wl_iftype_t iftype)
{
        s32 ret = BCME_ERROR;

        switch (iftype) {
                case WL_IF_TYPE_AP:
                        ret = WL_INTERFACE_TYPE_AP;
                        break;
                case WL_IF_TYPE_STA:
                        ret = WL_INTERFACE_TYPE_STA;
                        break;
                case WL_IF_TYPE_NAN_NMI:
                case WL_IF_TYPE_NAN:
                        ret = WL_INTERFACE_TYPE_NAN;
                        break;
                case WL_IF_TYPE_P2P_DISC:
                        ret = WL_INTERFACE_TYPE_P2P_DISC;
                        break;
                case WL_IF_TYPE_P2P_GO:
                        ret = WL_INTERFACE_TYPE_P2P_GO;
                        break;
                case WL_IF_TYPE_P2P_GC:
                        ret = WL_INTERFACE_TYPE_P2P_GC;
                        break;
                case WL_IF_TYPE_AWDL:
                        ret = WL_INTERFACE_TYPE_AWDL;
                        break;

                default:
                        WL_ERR(("Unsupported type:%d \n", iftype));
                        ret = -EINVAL;
                        break;
        }
        return ret;
}

#ifdef CUSTOMER_HW4
static bool
wl_legacy_chip_check(struct bcm_cfg80211 *cfg)
{
        int ret = FALSE;
#if defined(BCMSDIO) || defined(BCMPCIE)
        u32 chipid, chiprevid;
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        chipid = dhd_bus_chip_id(dhdp);
        chiprevid = dhd_bus_chiprev_id(dhdp);
        WL_DBG(("chipid=0x%x, chiprevid=%x\n", chipid, chiprevid));
        if (chipid == BCM4350_CHIP_ID || chipid == BCM4345_CHIP_ID) {
                ret = TRUE;
        } else {
                ret = FALSE;
        }
#endif /* BCMSDIO || BCMPCIE */

        return ret;
}

static bool
wl_check_interface_create_v0(struct bcm_cfg80211 *cfg)
{
        int ret = FALSE;
#if defined(BCMSDIO) || defined(BCMPCIE)
        u32 chipid, chiprevid;
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        chipid = dhd_bus_chip_id(dhdp);
        chiprevid = dhd_bus_chiprev_id(dhdp);
        WL_DBG(("chipid=0x%x, chiprevid=%x\n", chipid, chiprevid));

        if (chipid == BCM4359_CHIP_ID &&
                (chiprevid == 5 || chiprevid == 9)) {
                ret = TRUE;
        }
#endif /* BCMSDIO || BCMPCIE */

        return ret;
}
#endif /* CUSTOMER_HW4 */

s32
wl_cfg80211_interface_ops(struct bcm_cfg80211 *cfg,
        struct net_device *ndev, s32 bsscfg_idx,
        wl_iftype_t cfg_iftype, s32 del, u8 *addr)
{
        s32 ret;
        wl_interface_create_v2_t iface;
        wl_interface_create_v3_t iface_v3;
        wl_interface_info_v1_t *info;
        wl_interface_info_v2_t *info_v2;
        uint32 ifflags = 0;
        bool use_iface_info_v2 = false;
        u8 ioctl_buf[WLC_IOCTL_SMLEN];
        s32 iftype;
#ifdef CUSTOMER_HW4
        wl_interface_info_v0_t *info_v0;
        bool use_iface_info_v0 = false;
#endif /* CUSTOMER_HW4 */

        if (del) {
                ret = wldev_iovar_setbuf(ndev, "interface_remove",
                        NULL, 0, ioctl_buf, sizeof(ioctl_buf), NULL);
                if (unlikely(ret))
                        WL_ERR(("Interface remove failed!! ret %d\n", ret));
                return ret;
        }

        /* Interface create */
        bzero(&iface, sizeof(iface));

        /*
         * flags field is still used along with iftype inorder to support the old version of the
         * FW work with the latest app changes.
         */

        iftype = wl_cfg80211_to_fw_iftype(cfg_iftype);
        if (iftype < 0) {
                return -ENOTSUPP;
        }

        if (addr) {
                ifflags |= WL_INTERFACE_MAC_USE;
        }

#ifdef CUSTOMER_HW4
        /* BCM4359B0/C0 chips are using the iovar version 0 */
        if (wl_check_interface_create_v0(cfg)) {
                wl_interface_create_v0_t iface_v0;

                WL_DBG(("interface_create version 0\n"));
                bzero(&iface_v0, sizeof(iface_v0));
                use_iface_info_v0 = true;
                iface_v0.ver = WL_INTERFACE_CREATE_VER_0;
                iface_v0.flags = ifflags;
                if (addr) {
                        memcpy(&iface_v0.mac_addr.octet, addr, ETH_ALEN);
                }
                ret = wldev_iovar_getbuf(ndev, "interface_create",
                        &iface_v0, sizeof(wl_interface_create_v0_t),
                        ioctl_buf, sizeof(ioctl_buf), NULL);
        } else
#endif /* CUSTOMER_HW4 */
        {
                /* Pass ver = 0 for fetching the interface_create iovar version */
                ret = wldev_iovar_getbuf(ndev, "interface_create",
                        &iface, sizeof(struct wl_interface_create_v2),
                        ioctl_buf, sizeof(ioctl_buf), NULL);
                if (ret == BCME_UNSUPPORTED) {
                        WL_ERR(("interface_create iovar not supported\n"));
                        return ret;
                } else if ((ret == 0) && *((uint32 *)ioctl_buf) == WL_INTERFACE_CREATE_VER_3) {
                        WL_DBG(("interface_create version 3. flags:0x%x \n", ifflags));
                        use_iface_info_v2 = true;
                        bzero(&iface_v3, sizeof(wl_interface_create_v3_t));
                        iface_v3.ver = WL_INTERFACE_CREATE_VER_3;
                        iface_v3.iftype = iftype;
                        iface_v3.flags = ifflags;
                        if (addr) {
                                memcpy(&iface_v3.mac_addr.octet, addr, ETH_ALEN);
                        }
                        ret = wldev_iovar_getbuf(ndev, "interface_create",
                                &iface_v3, sizeof(wl_interface_create_v3_t),
                                ioctl_buf, sizeof(ioctl_buf), NULL);
                } else {
                        /* On any other error, attempt with iovar version 2 */
                        WL_DBG(("interface_create version 2. get_ver:%d ifflags:0x%x\n",
                                ret, ifflags));
                        iface.ver = WL_INTERFACE_CREATE_VER_2;
                        iface.iftype = iftype;
                        iface.flags = ifflags;
                        if (addr) {
                                memcpy(&iface.mac_addr.octet, addr, ETH_ALEN);
                        }
                        ret = wldev_iovar_getbuf(ndev, "interface_create",
                                &iface, sizeof(struct wl_interface_create_v2),
                                ioctl_buf, sizeof(ioctl_buf), NULL);
                }
        }

        if (unlikely(ret)) {
                WL_ERR(("Interface create failed!! ret %d\n", ret));
                return ret;
        }

        /* success case */
        if (use_iface_info_v2 == true) {
                info_v2 = (wl_interface_info_v2_t *)ioctl_buf;
                ret = info_v2->bsscfgidx;
        }
#ifdef CUSTOMER_HW4
        else if (use_iface_info_v0 == true) {
                /* Use v0 struct */
                info_v0 = (wl_interface_info_v0_t *)ioctl_buf;
                ret = info_v0->bsscfgidx;
        }
#endif /* CUSTOMER_HW4 */
        else {
                /* Use v1 struct */
                info = (struct wl_interface_info_v1 *)ioctl_buf;
                ret = info->bsscfgidx;
        }

        WL_DBG(("wl interface create success!! bssidx:%d \n", ret));
        return ret;
}

#if defined(CUSTOMER_HW4)
void
wl_bss_iovar_war(struct bcm_cfg80211 *cfg,
        struct net_device *ndev, s32 *val)
{
        if (wl_legacy_chip_check(cfg) || wl_check_interface_create_v0(cfg))
        {
                /* Few firmware branches have issues in bss iovar handling and
                 * that can't be changed since they are in production.
                 */
                if (*val == WLC_AP_IOV_OP_MANUAL_AP_BSSCFG_CREATE) {
                        *val = WLC_AP_IOV_OP_MANUAL_STA_BSSCFG_CREATE;
                } else if (*val == WLC_AP_IOV_OP_MANUAL_STA_BSSCFG_CREATE) {
                        *val = WLC_AP_IOV_OP_MANUAL_AP_BSSCFG_CREATE;
                } else {
                        /* Ignore for other bss enums */
                        return;
                }
                WL_ERR(("wl bss %d\n", *val));
        }
}
#endif // endif

s32
wl_cfg80211_add_del_bss(struct bcm_cfg80211 *cfg,
        struct net_device *ndev, s32 bsscfg_idx,
        wl_iftype_t brcm_iftype, s32 del, u8 *addr)
{
        s32 ret = BCME_OK;
        s32 val = 0;

        struct {
                s32 cfg;
                s32 val;
                struct ether_addr ea;
        } bss_setbuf;

        WL_DBG(("wl_iftype:%d del:%d \n", brcm_iftype, del));

        bzero(&bss_setbuf, sizeof(bss_setbuf));

        /* AP=2, STA=3, up=1, down=0, val=-1 */
        if (del) {
                val = WLC_AP_IOV_OP_DELETE;
        } else if (brcm_iftype == WL_IF_TYPE_AP) {
                /* Add/role change to AP Interface */
                WL_DBG(("Adding AP Interface \n"));
                val = WLC_AP_IOV_OP_MANUAL_AP_BSSCFG_CREATE;
        } else if (brcm_iftype == WL_IF_TYPE_STA) {
                /* Add/role change to STA Interface */
                WL_DBG(("Adding STA Interface \n"));
                val = WLC_AP_IOV_OP_MANUAL_STA_BSSCFG_CREATE;
        } else {
                WL_ERR((" add_del_bss NOT supported for IFACE type:0x%x", brcm_iftype));
                return -EINVAL;
        }

#if defined(CUSTOMER_HW4)
        if (!del) {
                wl_bss_iovar_war(cfg, ndev, &val);
        }
#endif // endif

        bss_setbuf.cfg = htod32(bsscfg_idx);
        bss_setbuf.val = htod32(val);

        if (addr) {
                memcpy(&bss_setbuf.ea.octet, addr, ETH_ALEN);
        }

        WL_INFORM_MEM(("wl bss %d bssidx:%d iface:%s \n", val, bsscfg_idx, ndev->name));
        ret = wldev_iovar_setbuf(ndev, "bss", &bss_setbuf, sizeof(bss_setbuf),
                cfg->ioctl_buf, WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);
        if (ret != 0)
                WL_ERR(("'bss %d' failed with %d\n", val, ret));

        return ret;
}

s32
wl_cfg80211_bss_up(struct bcm_cfg80211 *cfg, struct net_device *ndev, s32 bsscfg_idx, s32 bss_up)
{
        s32 ret = BCME_OK;
        s32 val = bss_up ? 1 : 0;

        struct {
                s32 cfg;
                s32 val;
        } bss_setbuf;

        bss_setbuf.cfg = htod32(bsscfg_idx);
        bss_setbuf.val = htod32(val);

        WL_INFORM_MEM(("wl bss -C %d %s\n", bsscfg_idx, bss_up ? "up" : "down"));
        ret = wldev_iovar_setbuf(ndev, "bss", &bss_setbuf, sizeof(bss_setbuf),
                cfg->ioctl_buf, WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);

        if (ret != 0) {
                WL_ERR(("'bss %d' failed with %d\n", bss_up, ret));
        }

        return ret;
}

bool
wl_cfg80211_bss_isup(struct net_device *ndev, int bsscfg_idx)
{
        s32 result, val;
        bool isup = false;
        s8 getbuf[64];

        /* Check if the BSS is up */
        *(int*)getbuf = -1;
        result = wldev_iovar_getbuf_bsscfg(ndev, "bss", &bsscfg_idx,
                sizeof(bsscfg_idx), getbuf, sizeof(getbuf), 0, NULL);
        if (result != 0) {
                WL_ERR(("'cfg bss -C %d' failed: %d\n", bsscfg_idx, result));
                WL_ERR(("NOTE: this ioctl error is normal "
                        "when the BSS has not been created yet.\n"));
        } else {
                val = *(int*)getbuf;
                val = dtoh32(val);
                WL_DBG(("wl bss -C %d = %d\n", bsscfg_idx, val));
                isup = (val ? TRUE : FALSE);
        }
        return isup;
}

s32
wl_iftype_to_mode(wl_iftype_t iftype)
{
        s32 mode = BCME_ERROR;

        switch (iftype) {
                case WL_IF_TYPE_STA:
                case WL_IF_TYPE_P2P_GC:
                case WL_IF_TYPE_P2P_DISC:
                        mode = WL_MODE_BSS;
                        break;
                case WL_IF_TYPE_AP:
                case WL_IF_TYPE_P2P_GO:
                        mode = WL_MODE_AP;
                        break;
                case WL_IF_TYPE_NAN:
                        mode = WL_MODE_NAN;
                        break;
                case WL_IF_TYPE_AWDL:
                        mode = WL_MODE_AWDL;
                        break;
                case WL_IF_TYPE_AIBSS:
                        /* Intentional fall through */
                case WL_IF_TYPE_IBSS:
                        mode = WL_MODE_IBSS;
                        break;
                default:
                        WL_ERR(("Unsupported type:%d\n", iftype));
                        break;
        }
        return mode;
}

s32
cfg80211_to_wl_iftype(uint16 type, uint16 *role, uint16 *mode)
{
        switch (type) {
                case NL80211_IFTYPE_STATION:
                        *role = WL_IF_TYPE_STA;
                        *mode = WL_MODE_BSS;
                        break;
                case NL80211_IFTYPE_AP:
                        *role = WL_IF_TYPE_AP;
                        *mode = WL_MODE_AP;
                        break;
#ifdef WL_CFG80211_P2P_DEV_IF
                case NL80211_IFTYPE_P2P_DEVICE:
                        *role = WL_IF_TYPE_P2P_DISC;
                        *mode = WL_MODE_BSS;
                        break;
#endif /* WL_CFG80211_P2P_DEV_IF */
                case NL80211_IFTYPE_P2P_GO:
                        *role = WL_IF_TYPE_P2P_GO;
                        *mode = WL_MODE_AP;
                        break;
                case NL80211_IFTYPE_P2P_CLIENT:
                        *role = WL_IF_TYPE_P2P_GC;
                        *mode = WL_MODE_BSS;
                        break;
                case NL80211_IFTYPE_MONITOR:
                        WL_ERR(("Unsupported mode \n"));
                        return BCME_UNSUPPORTED;
                case NL80211_IFTYPE_ADHOC:
                        *role = WL_IF_TYPE_IBSS;
                        *mode = WL_MODE_IBSS;
                        break;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0))
                case NL80211_IFTYPE_NAN:
                        *role = WL_IF_TYPE_NAN;
                        *mode = WL_MODE_NAN;
                        break;
#endif // endif
                default:
                        WL_ERR(("Unknown interface type:0x%x\n", type));
                        return BCME_ERROR;
        }
        return BCME_OK;
}

static s32
wl_role_to_cfg80211_type(uint16 role, uint16 *wl_iftype, uint16 *mode)
{
        switch (role) {
                *wl_iftype = WL_IF_TYPE_AWDL;
                *mode = WL_MODE_AWDL;
                return NL80211_IFTYPE_STATION;
        case WLC_E_IF_ROLE_STA:
                *wl_iftype = WL_IF_TYPE_STA;
                *mode = WL_MODE_BSS;
                return NL80211_IFTYPE_STATION;
        case WLC_E_IF_ROLE_AP:
                *wl_iftype = WL_IF_TYPE_AP;
                *mode = WL_MODE_AP;
                return NL80211_IFTYPE_AP;
        case WLC_E_IF_ROLE_P2P_GO:
                *wl_iftype = WL_IF_TYPE_P2P_GO;
                *mode = WL_MODE_AP;
                return NL80211_IFTYPE_P2P_GO;
        case WLC_E_IF_ROLE_P2P_CLIENT:
                *wl_iftype = WL_IF_TYPE_P2P_GC;
                *mode = WL_MODE_BSS;
                return NL80211_IFTYPE_P2P_CLIENT;
        case WLC_E_IF_ROLE_IBSS:
                *wl_iftype = WL_IF_TYPE_IBSS;
                *mode = WL_MODE_IBSS;
                return NL80211_IFTYPE_ADHOC;
        case WLC_E_IF_ROLE_NAN:
                *wl_iftype = WL_IF_TYPE_NAN;
                *mode = WL_MODE_NAN;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)) && defined(WL_CFG80211_NAN)
                /* NL80211_IFTYPE_NAN should only be used with CFG80211 NAN MGMT
                 * For Vendor HAL based NAN implementation, continue advertising
                 * as a STA interface
                 */
                return NL80211_IFTYPE_NAN;
#else
                return NL80211_IFTYPE_STATION;
#endif /* ((LINUX_VER >= KERNEL_VERSION(4, 9, 0))) && WL_CFG80211_NAN */

        default:
                WL_ERR(("Unknown interface role:0x%x. Forcing type station\n", role));
                return BCME_ERROR;
        }
}

#define MAX_ACTIVE_IF_LINKS     2
struct net_device *
wl_cfg80211_post_ifcreate(struct net_device *ndev,
        wl_if_event_info *event, u8 *addr,
        const char *name, bool rtnl_lock_reqd)
{
        struct bcm_cfg80211 *cfg;
        struct net_device *primary_ndev;
        struct net_device *new_ndev = NULL;
        struct wireless_dev *wdev = NULL;
        s32 iface_type;
        s32 ret = BCME_OK;
        u16 mode;
        u8 mac_addr[ETH_ALEN];
        u16 wl_iftype;
#ifdef WL_STATIC_IF
        int need_legacy_war = 0;
        dhd_pub_t *dhd = NULL;
#endif /* WL_STATIC_IF */

        if (!ndev || !event) {
                WL_ERR(("Wrong arg\n"));
                return NULL;
        }

        cfg = wl_get_cfg(ndev);
        if (!cfg) {
                WL_ERR(("cfg null\n"));
                return NULL;
        }

#ifdef WL_STATIC_IF
        {
                dhd = (dhd_pub_t *)(cfg->pub);
                if (!DHD_OPMODE_SUPPORTED(dhd, DHD_FLAG_MFG_MODE) && name) {
                        need_legacy_war = ((wl_legacy_chip_check(cfg) ||
                                wl_check_interface_create_v0(cfg)) &&
                                !strnicmp(name, SOFT_AP_IF_NAME, strlen(SOFT_AP_IF_NAME)));
                        if (need_legacy_war) {
                                event->role = WLC_E_IF_ROLE_AP;
                        }
                }
                WL_DBG(("name: %s\n", name));
        }
#endif /* WL_STATIC_IF */

        WL_DBG(("Enter. role:%d ifidx:%d bssidx:%d\n",
                event->role, event->ifidx, event->bssidx));
        if (!event->ifidx || !event->bssidx) {
                /* Fw returned primary idx (0) for virtual interface */
                WL_ERR(("Wrong index. ifidx:%d bssidx:%d \n",
                        event->ifidx, event->bssidx));
                return NULL;
        }

        if (wl_get_drv_status_all(cfg, CONNECTED) > MAX_ACTIVE_IF_LINKS) {
                WL_ERR(("Can't support more than %d active links\n", MAX_ACTIVE_IF_LINKS));
                return NULL;
        }

        iface_type = wl_role_to_cfg80211_type(event->role, &wl_iftype, &mode);
        if (iface_type < 0) {
                /* Unknown iface type */
                WL_ERR(("Wrong iface type \n"));
                return NULL;
        }

        WL_DBG(("mac_ptr:%p name:%s role:%d nl80211_iftype:%d " MACDBG "\n",
                addr, name, event->role, iface_type, MAC2STRDBG(event->mac)));
        if (!name) {
                /* If iface name is not provided, use dongle ifname */
                name = event->name;
        }

        if (!addr) {
                /* If mac address is not set, use primary mac with locally administered
                 * bit set.
                 */
                primary_ndev = bcmcfg_to_prmry_ndev(cfg);
                memcpy(mac_addr, primary_ndev->dev_addr, ETH_ALEN);
                /* For customer6 builds, use primary mac address for virtual interface */
                mac_addr[0] |= 0x02;
                addr = mac_addr;
        }

#ifdef WL_STATIC_IF
        if (IS_CFG80211_STATIC_IF_NAME(cfg, name)) {
                new_ndev = wl_cfg80211_post_static_ifcreate(cfg, event, addr, iface_type);
                wdev = new_ndev->ieee80211_ptr;

                if (need_legacy_war) {
                        /* Check whether mac addr is in sync with fw. If not,
                         * apply it using cur_etheraddr.
                         */
                        if (memcmp(addr, event->mac, ETH_ALEN) != 0) {
                                ret = wldev_iovar_setbuf_bsscfg(new_ndev, "cur_etheraddr",
                                                addr, ETH_ALEN, cfg->ioctl_buf, WLC_IOCTL_MAXLEN,
                                                event->bssidx, &cfg->ioctl_buf_sync);
                                if (unlikely(ret)) {
                                        WL_ERR(("set cur_etheraddr Error (%d)\n", ret));
                                        goto fail;
                                }
                                memcpy(new_ndev->dev_addr, addr, ETH_ALEN);
                                WL_ERR(("Applying updated mac address to firmware\n"));
                        }

                        if (!wl_get_drv_status(cfg, AP_CREATED, new_ndev)) {
                                s32 err;
                                WL_INFORM_MEM(("[%s] Bringup SoftAP on bssidx:%d \n",
                                        new_ndev->name, event->bssidx));
                                if ((err = wl_cfg80211_add_del_bss(cfg, new_ndev,
                                        event->bssidx, WL_IF_TYPE_AP, 0, NULL)) < 0) {
                                        WL_ERR(("wl bss ap returned error:%d\n", err));
                                        return NULL;
                                }
                                /* On success, mark AP creation in progress. */
                                wl_set_drv_status(cfg, AP_CREATING, new_ndev);
                        } else {
                                WL_INFORM_MEM(("AP_CREATED bit set. Skip role change\n"));
                        }
                }
        } else
#endif /* WL_STATIC_IF */
        {
                new_ndev = wl_cfg80211_allocate_if(cfg, event->ifidx,
                        name, addr, event->bssidx, event->name);
                if (!new_ndev) {
                        WL_ERR(("I/F allocation failed! \n"));
                        return NULL;
                } else {
                        WL_DBG(("I/F allocation succeeded! ifidx:0x%x bssidx:0x%x \n",
                         event->ifidx, event->bssidx));
                }

                wdev = (struct wireless_dev *)MALLOCZ(cfg->osh, sizeof(*wdev));
                if (!wdev) {
                        WL_ERR(("wireless_dev alloc failed! \n"));
                        wl_cfg80211_remove_if(cfg, event->ifidx, new_ndev, rtnl_lock_reqd);
                        return NULL;
                }

                wdev->wiphy = bcmcfg_to_wiphy(cfg);
                wdev->iftype = iface_type;

                new_ndev->ieee80211_ptr = wdev;
                SET_NETDEV_DEV(new_ndev, wiphy_dev(wdev->wiphy));

                memcpy(new_ndev->dev_addr, addr, ETH_ALEN);
                if (wl_cfg80211_register_if(cfg, event->ifidx, new_ndev, rtnl_lock_reqd)
                        != BCME_OK) {
                        WL_ERR(("IFACE register failed \n"));
                        /* Post interface registration, wdev would be freed from the netdev
                         * destructor path. For other cases, handle it here.
                         */
                        MFREE(cfg->osh, wdev, sizeof(*wdev));
                        wl_cfg80211_remove_if(cfg, event->ifidx, new_ndev, rtnl_lock_reqd);
                        return NULL;
                }
        }

        /* Initialize with the station mode params */
        ret = wl_alloc_netinfo(cfg, new_ndev, wdev, wl_iftype,
                PM_ENABLE, event->bssidx, event->ifidx);
        if (unlikely(ret)) {
                WL_ERR(("wl_alloc_netinfo Error (%d)\n", ret));
                goto fail;
        }

        /* Apply the mode & infra setting based on iftype */
        if ((ret = wl_config_infra(cfg, new_ndev, wl_iftype)) < 0) {
                WL_ERR(("config ifmode failure (%d)\n", ret));
                goto fail;
        }

        if (mode == WL_MODE_AP) {
                wl_set_drv_status(cfg, AP_CREATING, new_ndev);
        }

        WL_INFORM_MEM(("Network Interface (%s) registered with host."
                " cfg_iftype:%d wl_role:%d " MACDBG "\n",
                new_ndev->name, iface_type, event->role, MAC2STRDBG(new_ndev->dev_addr)));

#ifdef SUPPORT_SET_CAC
        wl_cfg80211_set_cac(cfg, 0);
#endif /* SUPPORT_SET_CAC */

        return new_ndev;

fail:
#ifdef WL_STATIC_IF
        /* remove static if from iflist */
        if (IS_CFG80211_STATIC_IF_NAME(cfg, name)) {
                cfg->static_ndev_state = NDEV_STATE_FW_IF_FAILED;
                wl_cfg80211_update_iflist_info(cfg, new_ndev, WL_STATIC_IFIDX, addr,
                        event->bssidx, event->name, NDEV_STATE_FW_IF_FAILED);
        }
#endif /* WL_STATIC_IF */
        if (new_ndev) {
                /* wdev would be freed from netdev destructor call back */
                wl_cfg80211_remove_if(cfg, event->ifidx, new_ndev, rtnl_lock_reqd);
        }

        return NULL;
}

void
wl_cfg80211_cleanup_virtual_ifaces(struct bcm_cfg80211 *cfg, bool rtnl_lock_reqd)
{
        struct net_info *iter, *next;
        struct net_device *primary_ndev;

        /* Note: This function will clean up only the network interface and host
         * data structures. The firmware interface clean up will happen in the
         * during chip reset (ifconfig wlan0 down for built-in drivers/rmmod
         * context for the module case).
         */
        primary_ndev = bcmcfg_to_prmry_ndev(cfg);
        WL_DBG(("Enter\n"));
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
        for_each_ndev(cfg, iter, next) {
                if (iter->ndev && (iter->ndev != primary_ndev)) {
                        /* Ensure interfaces are down before deleting */
#ifdef WL_STATIC_IF
                        /* Avoiding cleaning static ifaces */
                        if (!IS_CFG80211_STATIC_IF(cfg, iter->ndev))
#endif /* WL_STATIC_IF */
                        {
                                dev_close(iter->ndev);
                                WL_DBG(("Cleaning up iface:%s \n", iter->ndev->name));
                                wl_cfg80211_post_ifdel(iter->ndev, rtnl_lock_reqd, 0);
                        }
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
}

s32
wl_cfg80211_post_ifdel(struct net_device *ndev, bool rtnl_lock_reqd, s32 ifidx)
{
        s32 ret = BCME_OK;
        struct bcm_cfg80211 *cfg;
        u16 wl_iftype;
        struct net_info *netinfo = NULL;

        if (!ndev || !ndev->ieee80211_ptr) {
                /* No wireless dev done for this interface */
                ret = -EINVAL;
                goto exit;
        }

        cfg = wl_get_cfg(ndev);
        if (!cfg) {
                WL_ERR(("cfg null\n"));
                ret = BCME_ERROR;
                goto exit;
        }

        if (ifidx <= 0) {
                WL_ERR(("Invalid IF idx for iface:%s\n", ndev->name));
                ifidx = dhd_net2idx(((struct dhd_pub *)(cfg->pub))->info, ndev);
                BCM_REFERENCE(ifidx);
                if (ifidx <= 0) {
                        ASSERT(0);
                        ret = BCME_ERROR;
                        goto exit;
                }
        }

        if ((netinfo = wl_get_netinfo_by_wdev(cfg, ndev_to_wdev(ndev))) == NULL) {
                WL_ERR(("Find netinfo from wdev %p failed\n", ndev_to_wdev(ndev)));
                ret = -ENODEV;
                goto exit;
        }
        wl_iftype = netinfo->iftype;

#ifdef WL_STATIC_IF
        if (IS_CFG80211_STATIC_IF(cfg, ndev)) {
                ret = wl_cfg80211_post_static_ifdel(cfg, ndev);
        } else
#endif /* WL_STATIC_IF */
        {
#ifdef WL_NAN
                if (!((cfg->nancfg.mac_rand) && (wl_iftype == WL_IF_TYPE_NAN)))
#endif /* WL_NAN */
                {
                        wl_release_vif_macaddr(cfg, ndev->dev_addr, wl_iftype);
                }
                WL_INFORM_MEM(("[%s] cfg80211_remove_if ifidx:%d, vif_count:%d\n",
                        ndev->name, ifidx, cfg->vif_count));
                wl_cfg80211_remove_if(cfg, ifidx, ndev, rtnl_lock_reqd);
                cfg->bss_pending_op = FALSE;
        }

#ifdef SUPPORT_SET_CAC
        wl_cfg80211_set_cac(cfg, 1);
#endif /* SUPPORT_SET_CAC */
exit:
        return ret;
}
int
wl_cfg80211_deinit_p2p_discovery(struct bcm_cfg80211 *cfg)
{
        s32 ret = BCME_OK;
        bcm_struct_cfgdev *cfgdev;

        if (cfg->p2p) {
                /* De-initialize the p2p discovery interface, if operational */
                WL_ERR(("Disabling P2P Discovery Interface \n"));
#ifdef WL_CFG80211_P2P_DEV_IF
                cfgdev = bcmcfg_to_p2p_wdev(cfg);
#else
                cfgdev = cfg->p2p_net;
#endif // endif
                if (cfgdev) {
                        ret = wl_cfg80211_scan_stop(cfg, cfgdev);
                        if (unlikely(ret < 0)) {
                                CFGP2P_ERR(("P2P scan stop failed, ret=%d\n", ret));
                        }
                }

                wl_cfgp2p_disable_discovery(cfg);
                wl_to_p2p_bss_bssidx(cfg, P2PAPI_BSSCFG_DEVICE) = 0;
                p2p_on(cfg) = false;
        }
        return ret;
}
/* Create a Generic Network Interface and initialize it depending up on
 * the interface type
 */
struct wireless_dev *
wl_cfg80211_create_iface(struct wiphy *wiphy,
        wl_iftype_t wl_iftype,
        u8 *mac_addr, const char *name)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_device *new_ndev = NULL;
        struct net_device *primary_ndev = NULL;
        s32 ret = BCME_OK;
        s32 bsscfg_idx = 0;
        long timeout;
        wl_if_event_info *event = NULL;
        u8 addr[ETH_ALEN];
        struct net_info *iter, *next;

        WL_DBG(("Enter\n"));
        if (!name) {
                WL_ERR(("Interface name not provided\n"));
                return NULL;
        }
        else {
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
                for_each_ndev(cfg, iter, next) {
                        if (iter->ndev) {
                                if (strcmp(iter->ndev->name, name) == 0) {
                                        WL_ERR(("Interface name, %s exists !\n", iter->ndev->name));
                                        return NULL;
                                }
                        }
                }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
        }

        /* If any scan is going on, abort it */
        if (wl_abort_scan_and_check(cfg) != TRUE) {
                return NULL;
        }

        primary_ndev = bcmcfg_to_prmry_ndev(cfg);
        if (likely(!mac_addr)) {
                /* Use primary MAC with the locally administered bit for the
                 *  Secondary STA I/F
                 */
                memcpy(addr, primary_ndev->dev_addr, ETH_ALEN);
                addr[0] |= 0x02;
        } else {
                /* Use the application provided mac address (if any) */
                memcpy(addr, mac_addr, ETH_ALEN);
        }

        cfg->bss_pending_op = TRUE;
        memset(&cfg->if_event_info, 0, sizeof(cfg->if_event_info));

        /* De-initialize the p2p discovery interface, if operational */
        wl_cfg80211_deinit_p2p_discovery(cfg);

        /*
         * Intialize the firmware I/F.
         */
#if defined(CUSTOMER_HW4)
        if (wl_legacy_chip_check(cfg))
        {
                /* Use bss iovar instead of interface_create iovar */
                ret = BCME_UNSUPPORTED;
        } else
#endif // endif
        {
                ret = wl_cfg80211_interface_ops(cfg, primary_ndev, bsscfg_idx,
                        wl_iftype, 0, addr);
        }
        if (ret == BCME_UNSUPPORTED) {
                /* Use bssidx 1 by default */
                bsscfg_idx = 1;
                if ((ret = wl_cfg80211_add_del_bss(cfg, primary_ndev,
                        bsscfg_idx, wl_iftype, 0, addr)) < 0) {
                        goto exit;
                }
        } else if (ret < 0) {
                WL_ERR(("Interface create failed!! ret:%d \n", ret));
                goto exit;
        } else {
                /* Success */
                bsscfg_idx = ret;
        }

        WL_DBG(("Interface created!! bssidx:%d \n", bsscfg_idx));
        /*
         * Wait till the firmware send a confirmation event back.
         */
        WL_DBG(("Wait for the FW I/F Event\n"));
        timeout = wait_event_interruptible_timeout(cfg->netif_change_event,
                !cfg->bss_pending_op, msecs_to_jiffies(MAX_WAIT_TIME));
        if (timeout <= 0 || cfg->bss_pending_op) {
                WL_ERR(("ADD_IF event, didn't come. Return \n"));
                goto exit;
        }

        event = &cfg->if_event_info;
        /*
         * Since FW operation is successful,we can go ahead with the
         * the host interface creation.
         */
        new_ndev = wl_cfg80211_post_ifcreate(primary_ndev,
                event, addr, name, false);

        if (new_ndev) {
                /* Iface post ops successful. Return ndev/wdev ptr */
                return new_ndev->ieee80211_ptr;
        }

exit:
        cfg->bss_pending_op = FALSE;
        return NULL;
}

s32
wl_cfg80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_device *ndev = NULL;
        s32 ret = BCME_OK;
        s32 bsscfg_idx = 1;
        long timeout;
        u16 wl_iftype;
        u16 wl_mode;

        WL_DBG(("Enter\n"));

        /* If any scan is going on, abort it */
        if (wl_get_drv_status_all(cfg, SCANNING)) {
                WL_DBG(("Scan in progress. Aborting the scan!\n"));
                wl_cfg80211_cancel_scan(cfg);
        }

        bsscfg_idx = wl_get_bssidx_by_wdev(cfg, wdev);
        if (bsscfg_idx <= 0) {
                /* validate bsscfgidx */
                WL_ERR(("Wrong bssidx! \n"));
                return -EINVAL;
        }

        /* Handle p2p iface */
        if ((ret = wl_cfg80211_p2p_if_del(wiphy, wdev)) != BCME_NOTFOUND) {
                WL_DBG(("P2P iface del handled \n"));
#ifdef SUPPORT_SET_CAC
                wl_cfg80211_set_cac(cfg, 1);
#endif /* SUPPORT_SET_CAC */
                return ret;
        }

        ndev = wdev->netdev;
        if (unlikely(!ndev)) {
                WL_ERR(("ndev null! \n"));
                return -EINVAL;
        }

        memset(&cfg->if_event_info, 0, sizeof(cfg->if_event_info));

        if (cfg80211_to_wl_iftype(ndev->ieee80211_ptr->iftype,
                &wl_iftype, &wl_mode) < 0) {
                return -EINVAL;
        }

        WL_DBG(("del interface. bssidx:%d cfg_iftype:%d wl_iftype:%d",
                bsscfg_idx, ndev->ieee80211_ptr->iftype, wl_iftype));
        /* Delete the firmware interface. "interface_remove" command
         * should go on the interface to be deleted
         */
        if (wl_cfg80211_get_bus_state(cfg)) {
                WL_ERR(("Bus state is down: %s: %d\n", __FUNCTION__, __LINE__));
                ret = BCME_DONGLE_DOWN;
                goto exit;
        }

        cfg->bss_pending_op = true;
        ret = wl_cfg80211_interface_ops(cfg, ndev, bsscfg_idx,
                wl_iftype, 1, NULL);
        if (ret == BCME_UNSUPPORTED) {
                if ((ret = wl_cfg80211_add_del_bss(cfg, ndev,
                        bsscfg_idx, wl_iftype, true, NULL)) < 0) {
                        WL_ERR(("DEL bss failed ret:%d \n", ret));
                        goto exit;
                }
        } else if ((ret == BCME_NOTAP) || (ret == BCME_NOTSTA)) {
                /* De-init sequence involving role downgrade not happened.
                 * Do nothing and return error. The del command should be
                 * retried.
                 */
                WL_ERR(("ifdel role mismatch:%d\n", ret));
                ret = -EBADTYPE;
                goto exit;
        } else if (ret < 0) {
                WL_ERR(("Interface DEL failed ret:%d \n", ret));
                goto exit;
        }

        timeout = wait_event_interruptible_timeout(cfg->netif_change_event,
                !cfg->bss_pending_op, msecs_to_jiffies(MAX_WAIT_TIME));
        if (timeout <= 0 || cfg->bss_pending_op) {
                WL_ERR(("timeout in waiting IF_DEL event\n"));
                /* The interface unregister will happen from wifi reset context */
                ret = -ETIMEDOUT;
                /* fall through */
        }

exit:
        if (ret < 0) {
                WL_ERR(("iface del failed:%d\n", ret));
#ifdef WL_STATIC_IF
                if (IS_CFG80211_STATIC_IF(cfg, ndev)) {
                        /*
                         * For static interface, clean up the host data,
                         * irrespective of fw status. For dynamic
                         * interfaces it gets cleaned from dhd_stop context
                         */
                        wl_cfg80211_post_static_ifdel(cfg, ndev);
                }
#endif /* WL_STATIC_IF */
        } else {
                ret = wl_cfg80211_post_ifdel(ndev, false, cfg->if_event_info.ifidx);
                if (unlikely(ret)) {
                        WL_ERR(("post_ifdel failed\n"));
                }
        }

        cfg->bss_pending_op = false;
        return ret;
}

static s32
wl_cfg80211_join_ibss(struct wiphy *wiphy, struct net_device *dev,
        struct cfg80211_ibss_params *params)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct cfg80211_bss *bss;
        struct ieee80211_channel *chan;
        struct wl_join_params join_params;
        int scan_suppress;
        struct cfg80211_ssid ssid;
        s32 scan_retry = 0;
        s32 err = 0;
        size_t join_params_size;
        chanspec_t chanspec = 0;
        u32 param[2] = {0, 0};
        u32 bw_cap = 0;

        WL_TRACE(("In\n"));
        RETURN_EIO_IF_NOT_UP(cfg);
        WL_INFORM_MEM(("IBSS JOIN BSSID:" MACDBG "\n", MAC2STRDBG(params->bssid)));
        if (!params->ssid || params->ssid_len <= 0 ||
                params->ssid_len > DOT11_MAX_SSID_LEN) {
                WL_ERR(("Invalid parameter\n"));
                return -EINVAL;
        }
#if defined(WL_CFG80211_P2P_DEV_IF)
        chan = params->chandef.chan;
#else
        chan = params->channel;
#endif /* WL_CFG80211_P2P_DEV_IF */
        if (chan)
                cfg->channel = ieee80211_frequency_to_channel(chan->center_freq);
        if (wl_get_drv_status(cfg, CONNECTED, dev)) {
                struct wlc_ssid *lssid = (struct wlc_ssid *)wl_read_prof(cfg, dev, WL_PROF_SSID);
                u8 *bssid = (u8 *)wl_read_prof(cfg, dev, WL_PROF_BSSID);
                u32 *channel = (u32 *)wl_read_prof(cfg, dev, WL_PROF_CHAN);
                if (!params->bssid || ((memcmp(params->bssid, bssid, ETHER_ADDR_LEN) == 0) &&
                        (memcmp(params->ssid, lssid->SSID, lssid->SSID_len) == 0) &&
                        (*channel == cfg->channel))) {
                        WL_ERR(("Connection already existed to " MACDBG "\n",
                                MAC2STRDBG((u8 *)wl_read_prof(cfg, dev, WL_PROF_BSSID))));
                        return -EISCONN;
                }
                WL_ERR(("Ignore Previous connecton to %s (" MACDBG ")\n",
                        lssid->SSID, MAC2STRDBG(bssid)));
        }

        /* remove the VSIE */
        wl_cfg80211_ibss_vsie_delete(dev);

        bss = cfg80211_get_ibss(wiphy, NULL, params->ssid, params->ssid_len);
        if (!bss) {
                if (IBSS_INITIAL_SCAN_ALLOWED == TRUE) {
                        memcpy(ssid.ssid, params->ssid, params->ssid_len);
                        ssid.ssid_len = params->ssid_len;
                        do {
                                if (unlikely
                                        (__wl_cfg80211_scan(wiphy, dev, NULL, &ssid) ==
                                         -EBUSY)) {
                                        wl_delay(150);
                                } else {
                                        break;
                                }
                        } while (++scan_retry < WL_SCAN_RETRY_MAX);

                        /* rtnl lock code is removed here. don't see why rtnl lock
                         * needs to be released.
                         */

                        /* wait 4 secons till scan done.... */
                        schedule_timeout_interruptible(msecs_to_jiffies(4000));

                        bss = cfg80211_get_ibss(wiphy, NULL,
                                params->ssid, params->ssid_len);
                }
        }
        if (bss && ((IBSS_COALESCE_ALLOWED == TRUE) ||
                ((IBSS_COALESCE_ALLOWED == FALSE) && params->bssid &&
                !memcmp(bss->bssid, params->bssid, ETHER_ADDR_LEN)))) {
                cfg->ibss_starter = false;
                WL_DBG(("Found IBSS\n"));
        } else {
                cfg->ibss_starter = true;
        }

        if (bss) {
                CFG80211_PUT_BSS(wiphy, bss);
        }

        if (chan) {
                if (chan->band == NL80211_BAND_5GHZ)
                        param[0] = WLC_BAND_5G;
                else if (chan->band == NL80211_BAND_2GHZ)
                        param[0] = WLC_BAND_2G;
                err = wldev_iovar_getint(dev, "bw_cap", param);
                if (unlikely(err)) {
                        WL_ERR(("Get bw_cap Failed (%d)\n", err));
                        return err;
                }
                bw_cap = param[0];
                chanspec = channel_to_chanspec(wiphy, dev, cfg->channel, bw_cap);
        }
        /*
         * Join with specific BSSID and cached SSID
         * If SSID is zero join based on BSSID only
         */
        memset(&join_params, 0, sizeof(join_params));
        memcpy((void *)join_params.ssid.SSID, (const void *)params->ssid,
                params->ssid_len);
        join_params.ssid.SSID_len = htod32(params->ssid_len);
        if (params->bssid) {
                memcpy(&join_params.params.bssid, params->bssid, ETHER_ADDR_LEN);
                err = wldev_ioctl_set(dev, WLC_SET_DESIRED_BSSID, &join_params.params.bssid,
                        ETHER_ADDR_LEN);
                if (unlikely(err)) {
                        WL_ERR(("Error (%d)\n", err));
                        return err;
                }
        } else
                memset(&join_params.params.bssid, 0, ETHER_ADDR_LEN);

        if (IBSS_INITIAL_SCAN_ALLOWED == FALSE) {
                scan_suppress = TRUE;
                /* Set the SCAN SUPPRESS Flag in the firmware to skip join scan */
                err = wldev_ioctl_set(dev, WLC_SET_SCANSUPPRESS,
                        &scan_suppress, sizeof(int));
                if (unlikely(err)) {
                        WL_ERR(("Scan Suppress Setting Failed (%d)\n", err));
                        return err;
                }
        }

        join_params.params.chanspec_list[0] = chanspec;
        join_params.params.chanspec_num = 1;
        wldev_iovar_setint(dev, "chanspec", chanspec);
        join_params_size = sizeof(join_params);

        /* Disable Authentication, IBSS will add key if it required */
        wldev_iovar_setint(dev, "wpa_auth", WPA_AUTH_DISABLED);
        wldev_iovar_setint(dev, "wsec", 0);

        err = wldev_ioctl_set(dev, WLC_SET_SSID, &join_params,
                join_params_size);
        if (unlikely(err)) {
                WL_ERR(("IBSS set_ssid Error (%d)\n", err));
                return err;
        }

        if (IBSS_INITIAL_SCAN_ALLOWED == FALSE) {
                scan_suppress = FALSE;
                /* Reset the SCAN SUPPRESS Flag */
                err = wldev_ioctl_set(dev, WLC_SET_SCANSUPPRESS,
                        &scan_suppress, sizeof(int));
                if (unlikely(err)) {
                        WL_ERR(("Reset Scan Suppress Flag Failed (%d)\n", err));
                        return err;
                }
        }
        wl_update_prof(cfg, dev, NULL, &join_params.ssid, WL_PROF_SSID);
        wl_update_prof(cfg, dev, NULL, &cfg->channel, WL_PROF_CHAN);
#ifdef WLAIBSS
        cfg->aibss_txfail_seq = 0;      /* initialize the sequence */
#endif /* WLAIBSS */
#ifdef WL_RELMCAST
        cfg->rmc_event_seq = 0; /* initialize rmcfail sequence */
#endif /* WL_RELMCAST */
        return err;
}

static s32 wl_cfg80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s32 err = 0;
        scb_val_t scbval;
        u8 *curbssid;

        RETURN_EIO_IF_NOT_UP(cfg);
        wl_link_down(cfg);

        WL_INFORM_MEM(("Leave IBSS\n"));
        curbssid = wl_read_prof(cfg, dev, WL_PROF_BSSID);
        wl_set_drv_status(cfg, DISCONNECTING, dev);
        scbval.val = 0;
        memcpy(&scbval.ea, curbssid, ETHER_ADDR_LEN);
        err = wldev_ioctl_set(dev, WLC_DISASSOC, &scbval,
                sizeof(scb_val_t));
        if (unlikely(err)) {
                wl_clr_drv_status(cfg, DISCONNECTING, dev);
                WL_ERR(("error(%d)\n", err));
                return err;
        }

        /* remove the VSIE */
        wl_cfg80211_ibss_vsie_delete(dev);

        return err;
}

#ifdef MFP
static
int wl_cfg80211_get_rsn_capa(const bcm_tlv_t *wpa2ie,
        const u8** rsn_cap)
{
        u16 suite_count;
        const wpa_suite_mcast_t *mcast;
        const wpa_suite_ucast_t *ucast;
        int len;
        const wpa_suite_auth_key_mgmt_t *mgmt;

        if (!wpa2ie)
                return BCME_BADARG;

        len = wpa2ie->len;

        /* check for Multicast cipher suite */
        if ((len -= (WPA_SUITE_LEN + WPA2_VERSION_LEN)) <= 0) {
                return BCME_NOTFOUND;
        }

        mcast = (const wpa_suite_mcast_t *)&wpa2ie->data[WPA2_VERSION_LEN];

        /* Check for the unicast suite(s) */
        if (len < WPA_IE_SUITE_COUNT_LEN) {
                return BCME_NOTFOUND;
        }

        ucast = (const wpa_suite_ucast_t *)&mcast[1];
        suite_count = ltoh16_ua(&ucast->count);
        if ((suite_count > NL80211_MAX_NR_CIPHER_SUITES) ||
                (len -= (WPA_IE_SUITE_COUNT_LEN +
                (WPA_SUITE_LEN * suite_count))) <= 0)
                return BCME_BADLEN;

        /* Check for AUTH key management suite(s) */
        if (len < WPA_IE_SUITE_COUNT_LEN) {
                return BCME_NOTFOUND;
        }

        mgmt = (const wpa_suite_auth_key_mgmt_t *)&ucast->list[suite_count];
        suite_count = ltoh16_ua(&mgmt->count);

        if ((suite_count <= NL80211_MAX_NR_CIPHER_SUITES) &&
                        (len -= (WPA_IE_SUITE_COUNT_LEN +
                        (WPA_SUITE_LEN * suite_count))) >= RSN_CAP_LEN) {
                rsn_cap[0] = (const u8 *)&mgmt->list[suite_count];
        } else {
                return BCME_BADLEN;
        }

        return BCME_OK;
}
#endif /* MFP */

static s32
wl_set_wpa_version(struct net_device *dev, struct cfg80211_connect_params *sme)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct wl_security *sec;
        s32 val = 0;
        s32 err = 0;
        s32 bssidx;

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        if (sme->crypto.wpa_versions & NL80211_WPA_VERSION_1)
                val = WPA_AUTH_PSK |
#ifdef BCMCCX
                        WPA_AUTH_CCKM |
#endif // endif
                        WPA_AUTH_UNSPECIFIED;
        else if (sme->crypto.wpa_versions & NL80211_WPA_VERSION_2)
                val = WPA2_AUTH_PSK|
#ifdef BCMCCX
                        WPA2_AUTH_CCKM |
#endif // endif
                        WPA2_AUTH_UNSPECIFIED;
        else
                val = WPA_AUTH_DISABLED;

        if (is_wps_conn(sme))
                val = WPA_AUTH_DISABLED;

#ifdef BCMWAPI_WPI
        if (sme->crypto.wpa_versions & NL80211_WAPI_VERSION_1) {
                WL_DBG((" * wl_set_wpa_version, set wpa_auth"
                        " to WPA_AUTH_WAPI 0x400"));
                val = WAPI_AUTH_PSK | WAPI_AUTH_UNSPECIFIED;
        }
#endif // endif
        WL_INFORM_MEM(("[%s] wl wpa_auth 0x%0x\n", dev->name, val));
        err = wldev_iovar_setint_bsscfg(dev, "wpa_auth", val, bssidx);
        if (unlikely(err)) {
                WL_ERR(("set wpa_auth failed (%d)\n", err));
                return err;
        }
        sec = wl_read_prof(cfg, dev, WL_PROF_SEC);
        sec->wpa_versions = sme->crypto.wpa_versions;
        return err;
}

#ifdef BCMWAPI_WPI
static s32
wl_set_set_wapi_ie(struct net_device *dev, struct cfg80211_connect_params *sme)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        s32 err = 0;
        s32 bssidx;

        WL_DBG((" %s \n", __FUNCTION__));
        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        err = wldev_iovar_setbuf_bsscfg(dev, "wapiie", (const void *)sme->ie, sme->ie_len,
                        cfg->ioctl_buf, WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync);
        if (unlikely(err)) {
                WL_ERR(("set_wapi_ie Error (%d)\n", err));
                return err;
        }
        WL_INFORM_MEM(("wapi_ie successfully (%s)\n", dev->name));
        return err;
}
#endif /* BCMWAPI_WPI */

static s32
wl_set_auth_type(struct net_device *dev, struct cfg80211_connect_params *sme)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct wl_security *sec;
        s32 val = 0;
        s32 err = 0;
        s32 bssidx;

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        switch (sme->auth_type) {
        case NL80211_AUTHTYPE_OPEN_SYSTEM:
                val = WL_AUTH_OPEN_SYSTEM;
                WL_DBG(("open system\n"));
                break;
        case NL80211_AUTHTYPE_SHARED_KEY:
                val = WL_AUTH_SHARED_KEY;
                WL_DBG(("shared key\n"));
                break;
        case NL80211_AUTHTYPE_AUTOMATIC:
                val = WL_AUTH_OPEN_SHARED;
                WL_DBG(("automatic\n"));
                break;
#ifdef BCMCCX
        case NL80211_AUTHTYPE_NETWORK_EAP:
                WL_DBG(("network eap\n"));
                val = DOT11_LEAP_AUTH;
                break;
#endif // endif
        default:
                val = 2;
                WL_ERR(("invalid auth type (%d)\n", sme->auth_type));
                break;
        }

        WL_INFORM_MEM(("[%s] wl auth 0x%0x \n", dev->name, val));
        err = wldev_iovar_setint_bsscfg(dev, "auth", val, bssidx);
        if (unlikely(err)) {
                WL_ERR(("set auth failed (%d)\n", err));
                return err;
        }
        sec = wl_read_prof(cfg, dev, WL_PROF_SEC);
        sec->auth_type = sme->auth_type;
        return err;
}

static s32
wl_set_set_cipher(struct net_device *dev, struct cfg80211_connect_params *sme)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct wl_security *sec;
        s32 pval = 0;
        s32 gval = 0;
        s32 err = 0;
        s32 wsec_val = 0;
#ifdef BCMWAPI_WPI
        s32 wapi_val = 0;
        s32 val = 0;
#endif // endif
        s32 bssidx;

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        if (sme->crypto.n_ciphers_pairwise) {
                switch (sme->crypto.ciphers_pairwise[0]) {
                case WLAN_CIPHER_SUITE_WEP40:
                case WLAN_CIPHER_SUITE_WEP104:
                        pval = WEP_ENABLED;
                        break;
                case WLAN_CIPHER_SUITE_TKIP:
                        pval = TKIP_ENABLED;
                        break;
                case WLAN_CIPHER_SUITE_CCMP:
                case WLAN_CIPHER_SUITE_AES_CMAC:
                        pval = AES_ENABLED;
                        break;
#ifdef BCMWAPI_WPI
                case WLAN_CIPHER_SUITE_SMS4:
                        val = SMS4_ENABLED;
                        pval = SMS4_ENABLED;
                        err = wl_set_set_wapi_ie(dev, sme);
                        if (unlikely(err)) {
                                WL_DBG(("Set wapi ie failed  \n"));
                                return err;
                        } else {
                                WL_DBG(("Set wapi ie succeded\n"));
                        }
                        wapi_val = WAPI_AUTH_PSK | WAPI_AUTH_UNSPECIFIED;
                        WL_INFORM_MEM(("[WAPI] wl wpa_auth to 0x%0x (%s)\n", val, dev->name));
                        err = wldev_iovar_setint_bsscfg(dev, "wpa_auth", wapi_val, bssidx);
                        if (unlikely(err)) {
                                WL_ERR(("set wpa_auth failed (%d)\n", err));
                                return err;
                        }
                        break;
#endif /* BCMWAPI_WPI */
                default:
                        WL_ERR(("invalid cipher pairwise (%d)\n",
                                sme->crypto.ciphers_pairwise[0]));
                        return -EINVAL;
                }
        }
#if defined(BCMSUP_4WAY_HANDSHAKE)
        /* Ensure in-dongle supplicant is turned on when FBT wants to do the 4-way
         * handshake.
         * Note that the FW feature flag only exists on kernels that support the
         * FT-EAP AKM suite.
         */
        if (cfg->wdev->wiphy->features & NL80211_FEATURE_FW_4WAY_HANDSHAKE) {
                err = wldev_iovar_setint_bsscfg(dev, "sup_wpa", 1, bssidx);
                if (err) {
                        WL_ERR(("FBT: Error setting sup_wpa (%d)\n", err));
                        return err;
                } else {
                        WL_INFORM_MEM(("idsup enabled.\n"));
                }
        }
#endif /* BCMSUP_4WAY_HANDSHAKE */
        if (sme->crypto.cipher_group) {
                switch (sme->crypto.cipher_group) {
                case WLAN_CIPHER_SUITE_WEP40:
                case WLAN_CIPHER_SUITE_WEP104:
                        gval = WEP_ENABLED;
                        break;
                case WLAN_CIPHER_SUITE_TKIP:
                        gval = TKIP_ENABLED;
                        break;
                case WLAN_CIPHER_SUITE_CCMP:
                        gval = AES_ENABLED;
                        break;
                case WLAN_CIPHER_SUITE_AES_CMAC:
                        gval = AES_ENABLED;
                        break;
#ifdef BCMWAPI_WPI
                case WLAN_CIPHER_SUITE_SMS4:
                        val = SMS4_ENABLED;
                        gval = SMS4_ENABLED;
                        break;
#endif // endif
                default:
                        WL_ERR(("invalid cipher group (%d)\n",
                                sme->crypto.cipher_group));
                        return -EINVAL;
                }
        }

        WL_DBG(("pval (%d) gval (%d)\n", pval, gval));

        if (is_wps_conn(sme)) {
                if (sme->privacy) {
                        wsec_val = 4;
                } else {
                        /* WPS-2.0 allows no security */
                        wsec_val = 0;
                }
        } else {
#ifdef BCMWAPI_WPI
                if (sme->crypto.cipher_group == WLAN_CIPHER_SUITE_SMS4) {
                        WL_DBG((" NO, is_wps_conn, WAPI set to SMS4_ENABLED"));
                        wsec_val = val;
                } else
#endif // endif
                {
                        WL_DBG((" NO, is_wps_conn, Set pval | gval to WSEC"));
                        wsec_val = pval | gval;
                }
        }

        WL_INFORM_MEM(("[%s] wl wsec 0x%x\n", dev->name, wsec_val));
        err = wldev_iovar_setint_bsscfg(dev, "wsec", wsec_val, bssidx);
        if (unlikely(err)) {
                WL_ERR(("error (%d)\n", err));
                return err;
        }

        sec = wl_read_prof(cfg, dev, WL_PROF_SEC);
        sec->cipher_pairwise = sme->crypto.ciphers_pairwise[0];
        sec->cipher_group = sme->crypto.cipher_group;
        return err;
}

#ifdef MFP
static s32
wl_cfg80211_set_mfp(struct bcm_cfg80211 *cfg,
        struct net_device *dev,
        struct cfg80211_connect_params *sme)
{
        s32 mfp = WL_MFP_NONE;
        s32 current_mfp = WL_MFP_NONE;
        const bcm_tlv_t *wpa2_ie;
        const u8* rsn_cap = NULL;
        bool fw_support = false;
        int err, count = 0;
        const u8 *eptr = NULL, *ptr = NULL;
        const u8* group_mgmt_cs = NULL;
        const wpa_pmkid_list_t* pmkid = NULL;

        if (!sme) {
                /* No connection params from userspace, Do nothing. */
                return 0;
        }

        /* Check fw support and retreive current mfp val */
        err = wldev_iovar_getint(dev, "mfp", &current_mfp);
        if (!err) {
                fw_support = true;
        }

        /* Parse the wpa2ie to decode the MFP capablity */
        if (((wpa2_ie = bcm_parse_tlvs((const u8 *)sme->ie, sme->ie_len,
                        DOT11_MNG_RSN_ID)) != NULL) &&
                        (wl_cfg80211_get_rsn_capa(wpa2_ie, &rsn_cap) == 0) && rsn_cap) {
                WL_DBG(("rsn_cap 0x%x%x\n", rsn_cap[0], rsn_cap[1]));
                /* Check for MFP cap in the RSN capability field */
                if (sme->mfp) {
                        if (rsn_cap[0] & RSN_CAP_MFPR) {
                                mfp = WL_MFP_REQUIRED;
                        } else if (rsn_cap[0] & RSN_CAP_MFPC) {
                                mfp = WL_MFP_CAPABLE;
                        }
                }
                /*
                 * eptr --> end/last byte addr of wpa2_ie
                 * ptr --> to keep track of current/required byte addr
                 */
                eptr = (const u8*)wpa2_ie + (wpa2_ie->len + TLV_HDR_LEN);
                /* pointing ptr to the next byte after rns_cap */
                ptr = (const u8*)rsn_cap + RSN_CAP_LEN;
                if (mfp && (eptr - ptr) >= WPA2_PMKID_COUNT_LEN) {
                        /* pmkid now to point to 1st byte addr of pmkid in wpa2_ie */
                        pmkid = (const wpa_pmkid_list_t*)ptr;
                        count = pmkid->count.low | (pmkid->count.high << 8);
                        /* ptr now to point to last byte addr of pmkid */
                        ptr = (const u8*)pmkid + (count * WPA2_PMKID_LEN
                                        + WPA2_PMKID_COUNT_LEN);
                        if ((eptr - ptr) >= WPA_SUITE_LEN) {
                                /* group_mgmt_cs now to point to first byte addr of bip */
                                group_mgmt_cs = ptr;
                        }
                }
        }

        WL_DBG(("mfp:%d wpa2_ie ptr:%p mfp fw_support:%d\n",
                mfp, wpa2_ie, fw_support));

        if (fw_support == false) {
                if (mfp) {
                        /* if mfp > 0, mfp capability set in wpa ie, but
                         * FW indicated error for mfp. Propagate the error up.
                         */
                        WL_ERR(("mfp capability found in wpaie. But fw doesn't"
                                "seem to support MFP\n"));
                        err = -EINVAL;
                        goto exit;
                } else {
                        /* Firmware doesn't support mfp. But since connection request
                         * is for non-mfp case, don't bother.
                         */
                        err = BCME_OK;
                        goto exit;
                }
        } else if (mfp != current_mfp) {
                err = wldev_iovar_setint(dev, "mfp", mfp);
                if (unlikely(err)) {
                        WL_ERR(("mfp (%d) set failed ret:%d \n", mfp, err));
                        goto exit;
                }
                WL_INFORM_MEM(("[%s] wl mfp 0x%x\n", dev->name, mfp));
        }

        if (group_mgmt_cs && bcmp((const uint8 *)WPA2_OUI,
                        group_mgmt_cs, (WPA_SUITE_LEN - 1)) == 0) {
                WL_DBG(("BIP is found\n"));
                err = wldev_iovar_setbuf(dev, "bip",
                                group_mgmt_cs, WPA_SUITE_LEN, cfg->ioctl_buf,
                                WLC_IOCTL_SMLEN, &cfg->ioctl_buf_sync);
                /*
                 * Dont return failure for unsupported cases
                 * of bip iovar for backward compatibility
                 */
                if (err != BCME_UNSUPPORTED && err < 0) {
                        WL_ERR(("bip set error (%d)\n", err));
#if defined(CUSTOMER_HW4)
                        if (wl_legacy_chip_check(cfg))
                        {
                                /* Ignore bip error: Some older firmwares doesn't
                                 * support bip iovar/ return BCME_NOTUP while trying
                                 * to set bip from connect context. These firmares
                                 * include bip in RSNIE by default. So its okay to
                                 * ignore the error.
                                 */
                                        err = BCME_OK;
                                        goto exit;
                                } else
#endif // endif
                                {
                                        goto exit;
                                }
                } else {
                        WL_INFORM_MEM(("[%s] wl bip %02X:%02X:%02X\n",
                                dev->name, group_mgmt_cs[0], group_mgmt_cs[1],
                                group_mgmt_cs[2]));
                }
        }

exit:
        if (err) {
                wl_flush_fw_log_buffer(bcmcfg_to_prmry_ndev(cfg),
                        FW_LOGSET_MASK_ALL);
        }
        return 0;
}
#endif /* MFP */

static s32
wl_set_key_mgmt(struct net_device *dev, struct cfg80211_connect_params *sme)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct wl_security *sec;
        s32 val = 0;
        s32 err = 0;
        s32 bssidx;

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        if (sme->crypto.n_akm_suites) {
                err = wldev_iovar_getint(dev, "wpa_auth", &val);
                if (unlikely(err)) {
                        WL_ERR(("could not get wpa_auth (%d)\n", err));
                        return err;
                }
                if (val & (WPA_AUTH_PSK |
#ifdef BCMCCX
                        WPA_AUTH_CCKM |
#endif // endif
                        WPA_AUTH_UNSPECIFIED)) {
                        switch (sme->crypto.akm_suites[0]) {
                        case WLAN_AKM_SUITE_8021X:
                                val = WPA_AUTH_UNSPECIFIED;
                                break;
                        case WLAN_AKM_SUITE_PSK:
                                val = WPA_AUTH_PSK;
                                break;
#ifdef BCMCCX
                        case WLAN_AKM_SUITE_CCKM:
                                val = WPA_AUTH_CCKM;
                                break;
#endif // endif
                        default:
                                WL_ERR(("invalid akm suite (0x%x)\n",
                                        sme->crypto.akm_suites[0]));
                                return -EINVAL;
                        }
                } else if (val & (WPA2_AUTH_PSK |
#ifdef BCMCCX
                        WPA2_AUTH_CCKM |
#endif // endif
                        WPA2_AUTH_UNSPECIFIED)) {
                        switch (sme->crypto.akm_suites[0]) {
                        case WLAN_AKM_SUITE_8021X:
                                val = WPA2_AUTH_UNSPECIFIED;
                                break;
#ifdef MFP
                        case WL_AKM_SUITE_SHA256_1X:
                                val = WPA2_AUTH_1X_SHA256;
                                break;
                        case WL_AKM_SUITE_SHA256_PSK:
                                val = WPA2_AUTH_PSK_SHA256;
                                break;
#endif /* MFP */
                        case WLAN_AKM_SUITE_PSK:
                                val = WPA2_AUTH_PSK;
                                break;
#if defined(WLFBT) && defined(WLAN_AKM_SUITE_FT_8021X)
                        case WLAN_AKM_SUITE_FT_8021X:
                                val = WPA2_AUTH_UNSPECIFIED | WPA2_AUTH_FT;
                                break;
#endif // endif
#if defined(WLFBT) && defined(WLAN_AKM_SUITE_FT_PSK)
                        case WLAN_AKM_SUITE_FT_PSK:
                                val = WPA2_AUTH_PSK | WPA2_AUTH_FT;
                                break;
#endif // endif
#ifdef BCMCCX
                        case WLAN_AKM_SUITE_CCKM:
                                val = WPA2_AUTH_CCKM;
                                break;
#endif // endif
                        case WLAN_AKM_SUITE_FILS_SHA256:
                                val = WPA2_AUTH_FILS_SHA256;
                                break;
                        case WLAN_AKM_SUITE_FILS_SHA384:
                                val = WPA2_AUTH_FILS_SHA384;
                                break;
                        default:
                                WL_ERR(("invalid akm suite (0x%x)\n",
                                        sme->crypto.akm_suites[0]));
                                return -EINVAL;
                        }
                }
#ifdef BCMWAPI_WPI
                else if (val & (WAPI_AUTH_PSK | WAPI_AUTH_UNSPECIFIED)) {
                        switch (sme->crypto.akm_suites[0]) {
                        case WLAN_AKM_SUITE_WAPI_CERT:
                                val = WAPI_AUTH_UNSPECIFIED;
                                break;
                        case WLAN_AKM_SUITE_WAPI_PSK:
                                val = WAPI_AUTH_PSK;
                                break;
                        default:
                                WL_ERR(("invalid akm suite (0x%x)\n",
                                        sme->crypto.akm_suites[0]));
                                return -EINVAL;
                        }
                }
#endif // endif

#ifdef MFP
                if ((err = wl_cfg80211_set_mfp(cfg, dev, sme)) < 0) {
                        WL_ERR(("MFP set failed err:%d\n", err));
                        return -EINVAL;
                }
#endif /* MFP */

                WL_INFORM_MEM(("[%s] wl wpa_auth to 0x%x\n", dev->name, val));
                err = wldev_iovar_setint_bsscfg(dev, "wpa_auth", val, bssidx);
                if (unlikely(err)) {
                        WL_ERR(("could not set wpa_auth (0x%x)\n", err));
                        return err;
                }
        }
        sec = wl_read_prof(cfg, dev, WL_PROF_SEC);
        sec->wpa_auth = sme->crypto.akm_suites[0];

        return err;
}

static s32
wl_set_set_sharedkey(struct net_device *dev,
        struct cfg80211_connect_params *sme)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct wl_security *sec;
        struct wl_wsec_key key;
        s32 val;
        s32 err = 0;
        s32 bssidx;

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        WL_DBG(("key len (%d)\n", sme->key_len));
        if (sme->key_len) {
                sec = wl_read_prof(cfg, dev, WL_PROF_SEC);
                WL_DBG(("wpa_versions 0x%x cipher_pairwise 0x%x\n",
                        sec->wpa_versions, sec->cipher_pairwise));
                if (!(sec->wpa_versions & (NL80211_WPA_VERSION_1 |
                        NL80211_WPA_VERSION_2)) &&
#ifdef BCMWAPI_WPI
                        !is_wapi(sec->cipher_pairwise) &&
#endif // endif
                        (sec->cipher_pairwise & (WLAN_CIPHER_SUITE_WEP40 |
                        WLAN_CIPHER_SUITE_WEP104)))
                {
                        memset(&key, 0, sizeof(key));
                        key.len = (u32) sme->key_len;
                        key.index = (u32) sme->key_idx;
                        if (unlikely(key.len > sizeof(key.data))) {
                                WL_ERR(("Too long key length (%u)\n", key.len));
                                return -EINVAL;
                        }
                        memcpy(key.data, sme->key, key.len);
                        key.flags = WL_PRIMARY_KEY;
                        switch (sec->cipher_pairwise) {
                        case WLAN_CIPHER_SUITE_WEP40:
                                key.algo = CRYPTO_ALGO_WEP1;
                                break;
                        case WLAN_CIPHER_SUITE_WEP104:
                                key.algo = CRYPTO_ALGO_WEP128;
                                break;
                        default:
                                WL_ERR(("Invalid algorithm (%d)\n",
                                        sme->crypto.ciphers_pairwise[0]));
                                return -EINVAL;
                        }
                        /* Set the new key/index */
                        WL_DBG(("key length (%d) key index (%d) algo (%d)\n",
                                key.len, key.index, key.algo));
                        WL_DBG(("key \"%s\"\n", key.data));
                        swap_key_from_BE(&key);
                        err = wldev_iovar_setbuf_bsscfg(dev, "wsec_key", &key, sizeof(key),
                                cfg->ioctl_buf, WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync);
                        if (unlikely(err)) {
                                WL_ERR(("WLC_SET_KEY error (%d)\n", err));
                                return err;
                        }
                        WL_INFORM_MEM(("key applied to fw\n"));
                        if (sec->auth_type == NL80211_AUTHTYPE_SHARED_KEY) {
                                WL_DBG(("set auth_type to shared key\n"));
                                val = WL_AUTH_SHARED_KEY;       /* shared key */
                                err = wldev_iovar_setint_bsscfg(dev, "auth", val, bssidx);
                                if (unlikely(err)) {
                                        WL_ERR(("set auth failed (%d)\n", err));
                                        return err;
                                }
                        }
                }
        }
        return err;
}

#if defined(ESCAN_RESULT_PATCH)
static u8 connect_req_bssid[6];
static u8 broad_bssid[6];
#endif /* ESCAN_RESULT_PATCH */

#if defined(CUSTOM_SET_CPUCORE) || defined(CONFIG_TCPACK_FASTTX)
static bool wl_get_chan_isvht80(struct net_device *net, dhd_pub_t *dhd)
{
        u32 chanspec = 0;
        bool isvht80 = 0;

        if (wldev_iovar_getint(net, "chanspec", (s32 *)&chanspec) == BCME_OK)
                chanspec = wl_chspec_driver_to_host(chanspec);

        isvht80 = chanspec & WL_CHANSPEC_BW_80;
        WL_DBG(("%s: chanspec(%x:%d)\n", __FUNCTION__, chanspec, isvht80));

        return isvht80;
}
#endif /* CUSTOM_SET_CPUCORE || CONFIG_TCPACK_FASTTX */

int wl_cfg80211_cleanup_mismatch_status(struct net_device *dev, struct bcm_cfg80211 *cfg,
        bool disassociate)
{
        scb_val_t scbval;
        int err = TRUE;
        int wait_cnt;

        if (disassociate) {
                WL_ERR(("Disassociate previous connection!\n"));
                wl_set_drv_status(cfg, DISCONNECTING, dev);
                scbval.val = DOT11_RC_DISASSOC_LEAVING;
                scbval.val = htod32(scbval.val);

                err = wldev_ioctl_set(dev, WLC_DISASSOC, &scbval,
                                sizeof(scb_val_t));
                if (unlikely(err)) {
                        wl_clr_drv_status(cfg, DISCONNECTING, dev);
                        WL_ERR(("error (%d)\n", err));
                        return err;
                }
                wait_cnt = 500/10;
        } else {
                wait_cnt = 200/10;
                WL_ERR(("Waiting for previous DISCONNECTING status!\n"));
                if (wl_get_drv_status(cfg, DISCONNECTING, dev)) {
                        wl_clr_drv_status(cfg, DISCONNECTING, dev);
                }
        }

        while (wl_get_drv_status(cfg, DISCONNECTING, dev) && wait_cnt) {
                WL_DBG(("Waiting for disconnection terminated, wait_cnt: %d\n",
                        wait_cnt));
                wait_cnt--;
                OSL_SLEEP(10);
        }

        if (wait_cnt == 0) {
                WL_ERR(("DISCONNECING clean up failed!\n"));
                return BCME_NOTREADY;
        }
        return BCME_OK;
}

#define MAX_SCAN_ABORT_WAIT_CNT 20
#define WAIT_SCAN_ABORT_OSL_SLEEP_TIME 10

static s32
wl_cfg80211_connect(struct wiphy *wiphy, struct net_device *dev,
        struct cfg80211_connect_params *sme)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct ieee80211_channel *chan = sme->channel;
        wl_extjoin_params_t *ext_join_params;
        struct wl_join_params join_params;
        size_t join_params_size;
        dhd_pub_t *dhdp =  (dhd_pub_t *)(cfg->pub);
#if defined(ROAM_ENABLE) && defined(ROAM_AP_ENV_DETECTION)
        s32 roam_trigger[2] = {0, 0};
#endif /* ROAM_AP_ENV_DETECTION */
        s32 err = 0;
        const wpa_ie_fixed_t *wpa_ie;
        const bcm_tlv_t *wpa2_ie;
        const u8* wpaie  = 0;
        u32 wpaie_len = 0;
        u32 chan_cnt = 0;
        struct ether_addr bssid;
        s32 bssidx = -1;
#ifdef ESCAN_CHANNEL_CACHE
        chanspec_t chanspec_list[MAX_ROAM_CHANNEL];
#endif /* ESCAN_CHANNEL_CACHE */
        int wait_cnt;

        WL_DBG(("In\n"));
        if (!dev) {
                WL_ERR(("dev is null\n"));
                return -EINVAL;
        }
        BCM_REFERENCE(dhdp);

#ifdef ESCAN_CHANNEL_CACHE
        memset(chanspec_list, 0, (sizeof(chanspec_t) * MAX_ROAM_CHANNEL));
#endif /* ESCAN_CHANNEL_CACHE */

        /* Connection attempted via linux-wireless */
        wl_set_drv_status(cfg, CFG80211_CONNECT, dev);
#ifdef DHDTCPSYNC_FLOOD_BLK
        dhd_reset_tcpsync_info_by_dev(dev);
#endif /* DHDTCPSYNC_FLOOD_BLK */

#if defined(SUPPORT_RANDOM_MAC_SCAN)
        wl_cfg80211_random_mac_disable(dev);
#endif /* SUPPORT_RANDOM_MAC_SCAN */

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0))
        if (sme->channel_hint) {
                chan = sme->channel_hint;
                WL_INFORM_MEM(("channel_hint (%d), channel_hint center_freq (%d)\n",
                        ieee80211_frequency_to_channel(sme->channel_hint->center_freq),
                        sme->channel_hint->center_freq));
        }
        if (sme->bssid_hint) {
                sme->bssid = sme->bssid_hint;
                WL_INFORM_MEM(("bssid_hint "MACDBG" \n", MAC2STRDBG(sme->bssid_hint)));
        }
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0) */

        if (unlikely(!sme->ssid)) {
                WL_ERR(("Invalid ssid\n"));
                return -EOPNOTSUPP;
        }

        if (unlikely(sme->ssid_len > DOT11_MAX_SSID_LEN)) {
                WL_ERR(("Invalid SSID info: SSID=%s, length=%zd\n",
                        sme->ssid, sme->ssid_len));
                return -EINVAL;
        }

        WL_DBG(("SME IE : len=%zu\n", sme->ie_len));
        if (sme->ie != NULL && sme->ie_len > 0 && (wl_dbg_level & WL_DBG_DBG)) {
                prhex(NULL, sme->ie, sme->ie_len);
        }

        RETURN_EIO_IF_NOT_UP(cfg);
        /*
         * Cancel ongoing scan to sync up with sme state machine of cfg80211.
         */
        if (cfg->scan_request) {
                WL_TRACE_HW4(("Aborting the scan! \n"));
                wl_cfg80211_scan_abort(cfg);
                wait_cnt = MAX_SCAN_ABORT_WAIT_CNT;
                while (wl_get_drv_status(cfg, SCANNING, dev) && wait_cnt) {
                        WL_DBG(("Waiting for SCANNING terminated, wait_cnt: %d\n", wait_cnt));
                        wait_cnt--;
                        OSL_SLEEP(WAIT_SCAN_ABORT_OSL_SLEEP_TIME);
                }
                if (wl_get_drv_status(cfg, SCANNING, dev)) {
                        wl_cfg80211_cancel_scan(cfg);
                }
        }
#ifdef WL_SCHED_SCAN
        /* Locks are taken in wl_cfg80211_sched_scan_stop()
         * A start scan occuring during connect is unlikely
         */
        if (cfg->sched_scan_req) {
                wl_cfg80211_sched_scan_stop(wiphy, bcmcfg_to_prmry_ndev(cfg));
        }
#endif /* WL_SCHED_SCAN */
#ifdef WL_CFG80211_GON_COLLISION
        /* init block gon req count  */
        cfg->block_gon_req_tx_count = 0;
        cfg->block_gon_req_rx_count = 0;
#endif /* WL_CFG80211_GON_COLLISION */
#if defined(ESCAN_RESULT_PATCH)
        if (sme->bssid)
                memcpy(connect_req_bssid, sme->bssid, ETHER_ADDR_LEN);
        else
                bzero(connect_req_bssid, ETHER_ADDR_LEN);
        bzero(broad_bssid, ETHER_ADDR_LEN);
#endif // endif
#if defined(USE_DYNAMIC_MAXPKT_RXGLOM)
        maxrxpktglom = 0;
#endif // endif
        if (wl_get_drv_status(cfg, CONNECTING, dev) || wl_get_drv_status(cfg, CONNECTED, dev)) {
                /* set nested connect bit to identify the context */
                wl_set_drv_status(cfg, NESTED_CONNECT, dev);
                /* DHD prev status is CONNECTING/CONNECTED */
                err = wl_cfg80211_cleanup_mismatch_status(dev, cfg, TRUE);
        } else if (wl_get_drv_status(cfg, DISCONNECTING, dev)) {
                /* DHD prev status is DISCONNECTING */
                err = wl_cfg80211_cleanup_mismatch_status(dev, cfg, false);
        } else if (!wl_get_drv_status(cfg, CONNECTED, dev)) {
                /* DHD previous status is not connected and FW connected */
                if (wldev_ioctl_get(dev, WLC_GET_BSSID, &bssid, ETHER_ADDR_LEN) == 0) {
                        /* set nested connect bit to identify the context */
                        wl_set_drv_status(cfg, NESTED_CONNECT, dev);
                        err = wl_cfg80211_cleanup_mismatch_status(dev, cfg, true);
                }
        }

        if (sme->bssid) {
                wl_update_prof(cfg, dev, NULL, sme->bssid, WL_PROF_LATEST_BSSID);
        } else {
                wl_update_prof(cfg, dev, NULL, &ether_bcast, WL_PROF_LATEST_BSSID);
        }

        /* 'connect' request received */
        wl_set_drv_status(cfg, CONNECTING, dev);
        /* clear nested connect bit on proceeding for connection */
        wl_clr_drv_status(cfg, NESTED_CONNECT, dev);

        /* Clean BSSID */
        bzero(&bssid, sizeof(bssid));
        if (!wl_get_drv_status(cfg, DISCONNECTING, dev))
                wl_update_prof(cfg, dev, NULL, (void *)&bssid, WL_PROF_BSSID);

        if (p2p_is_on(cfg) && (dev != bcmcfg_to_prmry_ndev(cfg))) {
                /* we only allow to connect using virtual interface in case of P2P */
                        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                                WL_ERR(("Find p2p index from wdev(%p) failed\n",
                                        dev->ieee80211_ptr));
                                err = BCME_ERROR;
                                goto exit;
                        }
                        wl_cfg80211_set_mgmt_vndr_ies(cfg, ndev_to_cfgdev(dev), bssidx,
                                VNDR_IE_ASSOCREQ_FLAG, sme->ie, sme->ie_len);
        } else if (dev == bcmcfg_to_prmry_ndev(cfg)) {
                if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                        WL_ERR(("Find wlan index from wdev(%p) failed\n", dev->ieee80211_ptr));
                        err = BCME_ERROR;
                        goto exit;
                }

                /* find the RSN_IE */
                if ((wpa2_ie = bcm_parse_tlvs((const u8 *)sme->ie, sme->ie_len,
                        DOT11_MNG_RSN_ID)) != NULL) {
                        WL_DBG((" WPA2 IE is found\n"));
                }
                /* find the WPA_IE */
                if ((wpa_ie = wl_cfgp2p_find_wpaie(sme->ie,
                        sme->ie_len)) != NULL) {
                        WL_DBG((" WPA IE is found\n"));
                }
                if (wpa_ie != NULL || wpa2_ie != NULL) {
                        wpaie = (wpa_ie != NULL) ? (const u8 *)wpa_ie : (const u8 *)wpa2_ie;
                        wpaie_len = (wpa_ie != NULL) ? wpa_ie->length : wpa2_ie->len;
                        wpaie_len += WPA_RSN_IE_TAG_FIXED_LEN;
                        err = wldev_iovar_setbuf(dev, "wpaie", wpaie, wpaie_len,
                                cfg->ioctl_buf, WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);
                        if (unlikely(err)) {
                                WL_ERR(("wpaie set error (%d)\n", err));
                                goto exit;
                        }
                } else {
                        err = wldev_iovar_setbuf(dev, "wpaie", NULL, 0,
                                cfg->ioctl_buf, WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);
                        if (unlikely(err)) {
                                WL_ERR(("wpaie set error (%d)\n", err));
                                goto exit;
                        }
                }
                err = wl_cfg80211_set_mgmt_vndr_ies(cfg, ndev_to_cfgdev(dev), bssidx,
                        VNDR_IE_ASSOCREQ_FLAG, (const u8 *)sme->ie, sme->ie_len);
                if (unlikely(err)) {
                        goto exit;
                }
        }
#if defined(ROAM_ENABLE) && defined(ROAM_AP_ENV_DETECTION)
        if (dhdp->roam_env_detection) {
                bool is_roamtrig_reset = TRUE;
                bool is_roam_env_ok = (wldev_iovar_setint(dev, "roam_env_detection",
                        AP_ENV_DETECT_NOT_USED) == BCME_OK);

#ifdef SKIP_ROAM_TRIGGER_RESET
                roam_trigger[1] = WLC_BAND_2G;
                is_roamtrig_reset =
                        (wldev_ioctl_get(dev, WLC_GET_ROAM_TRIGGER, roam_trigger,
                        sizeof(roam_trigger)) == BCME_OK) &&
                        (roam_trigger[0] == WL_AUTO_ROAM_TRIGGER-10);
#endif /* SKIP_ROAM_TRIGGER_RESET */
                if (is_roamtrig_reset && is_roam_env_ok) {
                        roam_trigger[0] = WL_AUTO_ROAM_TRIGGER;
                        roam_trigger[1] = WLC_BAND_ALL;
                err = wldev_ioctl_set(dev, WLC_SET_ROAM_TRIGGER, roam_trigger,
                        sizeof(roam_trigger));
                if (unlikely(err)) {
                                WL_ERR((" failed to restore roam_trigger for auto env"
                                        " detection\n"));
                        }
                }
        }
#endif /* ROAM_ENABLE && ROAM_AP_ENV_DETECTION */
        if (chan) {
                        cfg->channel = ieee80211_frequency_to_channel(chan->center_freq);
                        chan_cnt = 1;
                        WL_DBG(("channel (%d), center_req (%d), %d channels\n", cfg->channel,
                                chan->center_freq, chan_cnt));
        } else {
                        WL_DBG(("No channel info from user space\n"));
                        cfg->channel = 0;
        }
#ifdef ESCAN_CHANNEL_CACHE
        /*
         * No channel information from user space. if ECC is enabled, the ECC
         * would prepare the channel list, else no channel would be provided
         * and firmware would need to do a full channel scan.
         *
         * Use cached channels. This might take slightly longer time compared
         * to using a single channel based join. But ECC would help choose
         * a better AP for a given ssid. For a given SSID there might multiple
         * APs on different channels and ECC would scan all those channels
         * before deciding up on the AP. This accounts for the additional delay.
         */
        if (cfg->rcc_enabled || cfg->channel == 0)
        {
                wlc_ssid_t ssid;
                int band;

                err = wldev_get_band(dev, &band);
                if (!err) {
                        set_roam_band(band);
                }

                memcpy(ssid.SSID, sme->ssid, sme->ssid_len);
                ssid.SSID_len = (uint32)sme->ssid_len;
                chan_cnt = get_roam_channel_list(cfg->channel, chanspec_list,
                                MAX_ROAM_CHANNEL, &ssid, ioctl_version);
                WL_DBG(("RCC channel count:%d \n", chan_cnt));
        }
#endif /* ESCAN_CHANNEL_CACHE */
        WL_DBG(("3. set wpa version \n"));

        err = wl_set_wpa_version(dev, sme);
        if (unlikely(err)) {
                WL_ERR(("Invalid wpa_version\n"));
                goto exit;
        }
#ifdef BCMWAPI_WPI
        if (sme->crypto.wpa_versions & NL80211_WAPI_VERSION_1)
                WL_DBG(("4. WAPI Dont Set wl_set_auth_type\n"));
        else {
                WL_DBG(("4. wl_set_auth_type\n"));
#endif // endif
                err = wl_set_auth_type(dev, sme);
                if (unlikely(err)) {
                        WL_ERR(("Invalid auth type\n"));
                        goto exit;
                }
#ifdef BCMWAPI_WPI
        }
#endif // endif

        err = wl_set_set_cipher(dev, sme);
        if (unlikely(err)) {
                WL_ERR(("Invalid ciper\n"));
                goto exit;
        }

        err = wl_set_key_mgmt(dev, sme);
        if (unlikely(err)) {
                WL_ERR(("Invalid key mgmt\n"));
                goto exit;
        }

        err = wl_set_set_sharedkey(dev, sme);
        if (unlikely(err)) {
                WL_ERR(("Invalid shared key\n"));
                goto exit;
        }

        /*
         *  Join with specific BSSID and cached SSID
         *  If SSID is zero join based on BSSID only
         */
        join_params_size = WL_EXTJOIN_PARAMS_FIXED_SIZE +
                chan_cnt * sizeof(chanspec_t);
        ext_join_params = (wl_extjoin_params_t *)MALLOCZ(cfg->osh, join_params_size);
        if (ext_join_params == NULL) {
                err = -ENOMEM;
                wl_clr_drv_status(cfg, CONNECTING, dev);
                goto exit;
        }
        ext_join_params->ssid.SSID_len =
                (uint32)min(sizeof(ext_join_params->ssid.SSID), sme->ssid_len);
        memcpy(&ext_join_params->ssid.SSID, sme->ssid, ext_join_params->ssid.SSID_len);
        wl_update_prof(cfg, dev, NULL, &ext_join_params->ssid, WL_PROF_SSID);
        ext_join_params->ssid.SSID_len = htod32(ext_join_params->ssid.SSID_len);
        /* increate dwell time to receive probe response or detect Beacon
        * from target AP at a noisy air only during connect command
        */
        ext_join_params->scan.active_time = chan_cnt ? WL_SCAN_JOIN_ACTIVE_DWELL_TIME_MS : -1;
        ext_join_params->scan.passive_time = chan_cnt ? WL_SCAN_JOIN_PASSIVE_DWELL_TIME_MS : -1;
        /* Set up join scan parameters */
        ext_join_params->scan.scan_type = -1;
        ext_join_params->scan.nprobes = chan_cnt ?
                (ext_join_params->scan.active_time/WL_SCAN_JOIN_PROBE_INTERVAL_MS) : -1;
        ext_join_params->scan.home_time = -1;

        if (sme->bssid)
                memcpy(&ext_join_params->assoc.bssid, sme->bssid, ETH_ALEN);
        else
                memcpy(&ext_join_params->assoc.bssid, &ether_bcast, ETH_ALEN);
        ext_join_params->assoc.chanspec_num = chan_cnt;

        if (chan_cnt && !cfg->rcc_enabled) {
                if (cfg->channel) {
                        /*
                         * Use the channel provided by userspace
                         */
                        u16 channel, band, bw, ctl_sb;
                        chanspec_t chspec;
                        channel = cfg->channel;
                        band = (channel <= CH_MAX_2G_CHANNEL) ? WL_CHANSPEC_BAND_2G
                                : WL_CHANSPEC_BAND_5G;

                        /* Get min_bw set for the interface */
                        bw = WL_CHANSPEC_BW_20;
                        if (bw == INVCHANSPEC) {
                                WL_ERR(("Invalid chanspec \n"));
                                MFREE(cfg->osh, ext_join_params, join_params_size);
                                err = BCME_ERROR;
                                goto exit;
                        }

                        ctl_sb = WL_CHANSPEC_CTL_SB_NONE;
                        chspec = (channel | band | bw | ctl_sb);
                        ext_join_params->assoc.chanspec_list[0]  &= WL_CHANSPEC_CHAN_MASK;
                        ext_join_params->assoc.chanspec_list[0] |= chspec;
                        ext_join_params->assoc.chanspec_list[0] =
                                wl_chspec_host_to_driver(ext_join_params->assoc.chanspec_list[0]);
                }
        }
#ifdef ESCAN_CHANNEL_CACHE
         else {
                        memcpy(ext_join_params->assoc.chanspec_list, chanspec_list,
                                sizeof(chanspec_t) * chan_cnt);
        }
#endif /* ESCAN_CHANNEL_CACHE */
        ext_join_params->assoc.chanspec_num = htod32(ext_join_params->assoc.chanspec_num);
        if (ext_join_params->ssid.SSID_len < IEEE80211_MAX_SSID_LEN) {
                WL_DBG(("ssid \"%s\", len (%d)\n", ext_join_params->ssid.SSID,
                        ext_join_params->ssid.SSID_len));
        }

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                MFREE(cfg->osh, ext_join_params, join_params_size);
                err = BCME_ERROR;
                goto exit;
        }
#ifdef DHD_EVENT_LOG_FILTER
        if (dev == bcmcfg_to_prmry_ndev(cfg)) {
                /* inform only for STA Interface */
                dhd_event_log_filter_notify_connect_request(dhdp,
                        (uint8 *)(&ext_join_params->assoc.bssid), cfg->channel);
        }
#endif /* DHD_EVENT_LOG_FILTER */
#ifdef WLTDLS
        /* disable TDLS if number of connected interfaces is >= 1 */
        wl_cfg80211_tdls_config(cfg, TDLS_STATE_CONNECT, false);
#endif /* WLTDLS */
        err = wldev_iovar_setbuf_bsscfg(dev, "join", ext_join_params, join_params_size,
                cfg->ioctl_buf, WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync);
        if (cfg->rcc_enabled) {
                WL_INFORM_MEM(("[%s] Connecting with " MACDBG " ssid \"%s\","
                        " len (%d) with rcc channels. chan_cnt:%d \n\n",
                        dev->name, MAC2STRDBG((u8*)(&ext_join_params->assoc.bssid)),
                        "*****", ext_join_params->ssid.SSID_len, chan_cnt));
        } else {
                WL_INFORM_MEM(("[%s] Connecting with " MACDBG " ssid \"%s\","
                        "len (%d) channel:%d\n\n",
                        dev->name, MAC2STRDBG((u8*)(&ext_join_params->assoc.bssid)),
                        "*****", ext_join_params->ssid.SSID_len, cfg->channel));
        }
        SUPP_LOG(("[%s] Connecting with " MACDBG " ssid \"%s\","
                "channel:%d rcc:%d\n",
                dev->name, MAC2STRDBG((u8*)(&ext_join_params->assoc.bssid)),
                ext_join_params->ssid.SSID, cfg->channel, cfg->rcc_enabled));
        MFREE(cfg->osh, ext_join_params, join_params_size);
        if (err) {
                wl_clr_drv_status(cfg, CONNECTING, dev);
                if (err == BCME_UNSUPPORTED) {
                        WL_DBG(("join iovar is not supported\n"));
                        goto set_ssid;
                } else {
                        WL_ERR(("join iovar error (%d)\n", err));
                        goto exit;
                }
        } else
                goto exit;

set_ssid:
#if defined(ROAMEXP_SUPPORT)
        /* Clear Blacklist bssid and Whitelist ssid list before join issue
         * This is temporary fix since currently firmware roaming is not
         * disabled by android framework before SSID join from framework
        */
        /* Flush blacklist bssid content */
        dhd_dev_set_blacklist_bssid(dev, NULL, 0, true);
        /* Flush whitelist ssid content */
        dhd_dev_set_whitelist_ssid(dev, NULL, 0, true);
#endif /* OEM_ANDROID && ROAMEXP_SUPPORT */
        memset(&join_params, 0, sizeof(join_params));
        join_params_size = sizeof(join_params.ssid);

        join_params.ssid.SSID_len = (uint32)min(sizeof(join_params.ssid.SSID), sme->ssid_len);
        memcpy(&join_params.ssid.SSID, sme->ssid, join_params.ssid.SSID_len);
        join_params.ssid.SSID_len = htod32(join_params.ssid.SSID_len);
        wl_update_prof(cfg, dev, NULL, &join_params.ssid, WL_PROF_SSID);
        if (sme->bssid)
                memcpy(&join_params.params.bssid, sme->bssid, ETH_ALEN);
        else
                memcpy(&join_params.params.bssid, &ether_bcast, ETH_ALEN);

        if (wl_ch_to_chanspec(dev, cfg->channel, &join_params, &join_params_size) < 0) {
                WL_ERR(("Invalid chanspec\n"));
                return -EINVAL;
        }

        WL_DBG(("join_param_size %zu\n", join_params_size));

        if (join_params.ssid.SSID_len < IEEE80211_MAX_SSID_LEN) {
                WL_INFORM_MEM(("ssid \"%s\", len (%d)\n", join_params.ssid.SSID,
                        join_params.ssid.SSID_len));
        }
        err = wldev_ioctl_set(dev, WLC_SET_SSID, &join_params, join_params_size);
exit:
        if (err) {
                WL_ERR(("error (%d)\n", err));
                wl_clr_drv_status(cfg, CONNECTING, dev);
                wl_flush_fw_log_buffer(dev, FW_LOGSET_MASK_ALL);
#ifdef WLTDLS
                /* If connect fails, check whether we can enable back TDLS */
                wl_cfg80211_tdls_config(cfg, TDLS_STATE_DISCONNECT, false);
#endif /* WLTDLS */
        }
#ifdef DBG_PKT_MON
        if ((dev == bcmcfg_to_prmry_ndev(cfg)) && !err) {
                DHD_DBG_PKT_MON_START(dhdp);
        }
#endif /* DBG_PKT_MON */
        return err;
}

#define WAIT_FOR_DISCONNECT_MAX 10
static void wl_cfg80211_wait_for_disconnection(struct bcm_cfg80211 *cfg, struct net_device *dev)
{
        uint8 wait_cnt;

        wait_cnt = WAIT_FOR_DISCONNECT_MAX;
        while (wl_get_drv_status(cfg, DISCONNECTING, dev) && wait_cnt) {
                WL_DBG(("Waiting for disconnection, wait_cnt: %d\n", wait_cnt));
                wait_cnt--;
                OSL_SLEEP(50);
        }

        return;
}

static s32
wl_cfg80211_disconnect(struct wiphy *wiphy, struct net_device *dev,
        u16 reason_code)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        scb_val_t scbval;
        bool act = false;
        s32 err = 0;
        u8 *curbssid = NULL;
        u8 null_bssid[ETHER_ADDR_LEN];
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        WL_ERR(("Reason %d\n", reason_code));
        RETURN_EIO_IF_NOT_UP(cfg);
        act = *(bool *) wl_read_prof(cfg, dev, WL_PROF_ACT);
        curbssid = wl_read_prof(cfg, dev, WL_PROF_BSSID);

        BCM_REFERENCE(dhdp);

#ifdef ESCAN_RESULT_PATCH
        if (wl_get_drv_status(cfg, CONNECTING, dev) && curbssid &&
                (memcmp(curbssid, connect_req_bssid, ETHER_ADDR_LEN) == 0)) {
                WL_ERR(("Disconnecting from connecting device: " MACDBG "\n",
                        MAC2STRDBG(curbssid)));
                act = true;
        }
#endif /* ESCAN_RESULT_PATCH */

        if (!curbssid) {
                WL_ERR(("Disconnecting while CONNECTING status %d\n", (int)sizeof(null_bssid)));
                bzero(null_bssid, sizeof(null_bssid));
                curbssid = null_bssid;
        }

        if (act) {
#ifdef DBG_PKT_MON
                /* Stop packet monitor */
                if (dev == bcmcfg_to_prmry_ndev(cfg)) {
                        DHD_DBG_PKT_MON_STOP(dhdp);
                }
#endif /* DBG_PKT_MON */
                /*
                * Cancel ongoing scan to sync up with sme state machine of cfg80211.
                */
                /* Let scan aborted by F/W */
                if (cfg->scan_request) {
                        WL_TRACE_HW4(("Aborting the scan! \n"));
                        wl_cfg80211_cancel_scan(cfg);
                }
                if (wl_get_drv_status(cfg, CONNECTING, dev) ||
                        wl_get_drv_status(cfg, CONNECTED, dev)) {
                                wl_set_drv_status(cfg, DISCONNECTING, dev);
                                scbval.val = reason_code;
                                memcpy(&scbval.ea, curbssid, ETHER_ADDR_LEN);
                                scbval.val = htod32(scbval.val);
                                WL_INFORM_MEM(("[%s] wl disassoc\n", dev->name));
                                err = wldev_ioctl_set(dev, WLC_DISASSOC, &scbval,
                                                sizeof(scb_val_t));
                                if (unlikely(err)) {
                                        wl_clr_drv_status(cfg, DISCONNECTING, dev);
                                        WL_ERR(("error (%d)\n", err));
                                        return err;
                                }
                }
#ifdef WL_WPS_SYNC
                /* If are in WPS reauth state, then we would be
                 * dropping the link down events. Ensure that
                 * Event is sent up for the disconnect Req
                 */
                if (wl_wps_session_update(dev,
                        WPS_STATE_DISCONNECT, curbssid) == BCME_OK) {
                        WL_INFORM_MEM(("[WPS] Disconnect done.\n"));
                        wl_clr_drv_status(cfg, DISCONNECTING, dev);
                }
#endif /* WPS_SYNC */
                wl_cfg80211_wait_for_disconnection(cfg, dev);
                if (wl_get_drv_status(cfg, DISCONNECTING, dev)) {
                        CFG80211_CONNECT_RESULT(dev, NULL, NULL,
                                NULL, 0, NULL, 0,
                                WLAN_STATUS_UNSPECIFIED_FAILURE,
                                GFP_KERNEL);
                        wl_clr_drv_status(cfg, DISCONNECTING, dev);
                }
        } else {
                WL_INFORM_MEM(("act is false\n"));
                CFG80211_CONNECT_RESULT(dev, NULL, NULL,
                        NULL, 0, NULL, 0,
                        WLAN_STATUS_UNSPECIFIED_FAILURE,
                        GFP_KERNEL);
        }
#ifdef CUSTOM_SET_CPUCORE
        /* set default cpucore */
        if (dev == bcmcfg_to_prmry_ndev(cfg)) {
                dhdp->chan_isvht80 &= ~DHD_FLAG_STA_MODE;
                if (!(dhdp->chan_isvht80))
                        dhd_set_cpucore(dhdp, FALSE);
        }
#endif /* CUSTOM_SET_CPUCORE */

        cfg->rssi = 0;  /* reset backup of rssi */

        return err;
}

#if defined(WL_CFG80211_P2P_DEV_IF)
static s32
wl_cfg80211_set_tx_power(struct wiphy *wiphy, struct wireless_dev *wdev,
        enum nl80211_tx_power_setting type, s32 mbm)
#else
static s32
wl_cfg80211_set_tx_power(struct wiphy *wiphy,
        enum nl80211_tx_power_setting type, s32 dbm)
#endif /* WL_CFG80211_P2P_DEV_IF */
{

        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
        s32 err = 0;
#if defined(WL_CFG80211_P2P_DEV_IF)
        s32 dbm = MBM_TO_DBM(mbm);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 3, 0)) || \
        defined(WL_COMPAT_WIRELESS) || defined(WL_SUPPORT_BACKPORTED_KPATCHES)
        dbm = MBM_TO_DBM(dbm);
#endif /* WL_CFG80211_P2P_DEV_IF */

        RETURN_EIO_IF_NOT_UP(cfg);
        switch (type) {
        case NL80211_TX_POWER_AUTOMATIC:
                break;
        case NL80211_TX_POWER_LIMITED:
                if (dbm < 0) {
                        WL_ERR(("TX_POWER_LIMITTED - dbm is negative\n"));
                        return -EINVAL;
                }
                break;
        case NL80211_TX_POWER_FIXED:
                if (dbm < 0) {
                        WL_ERR(("TX_POWER_FIXED - dbm is negative..\n"));
                        return -EINVAL;
                }
                break;
        }

        err = wl_set_tx_power(ndev, type, dbm);
        if (unlikely(err)) {
                WL_ERR(("error (%d)\n", err));
                return err;
        }

        cfg->conf->tx_power = dbm;

        return err;
}

#if defined(WL_CFG80211_P2P_DEV_IF)
static s32 wl_cfg80211_get_tx_power(struct wiphy *wiphy,
        struct wireless_dev *wdev, s32 *dbm)
#else
static s32 wl_cfg80211_get_tx_power(struct wiphy *wiphy, s32 *dbm)
#endif /* WL_CFG80211_P2P_DEV_IF */
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
        s32 err = 0;

        RETURN_EIO_IF_NOT_UP(cfg);
        err = wl_get_tx_power(ndev, dbm);
        if (unlikely(err))
                WL_ERR(("error (%d)\n", err));

        return err;
}

static s32
wl_cfg80211_config_default_key(struct wiphy *wiphy, struct net_device *dev,
        u8 key_idx, bool unicast, bool multicast)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        u32 index;
        s32 wsec;
        s32 err = 0;
        s32 bssidx;

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from dev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        WL_DBG(("key index (%d)\n", key_idx));
        RETURN_EIO_IF_NOT_UP(cfg);
        err = wldev_iovar_getint_bsscfg(dev, "wsec", &wsec, bssidx);
        if (unlikely(err)) {
                WL_ERR(("WLC_GET_WSEC error (%d)\n", err));
                return err;
        }
        if (wsec == WEP_ENABLED) {
                /* Just select a new current key */
                index = (u32) key_idx;
                index = htod32(index);
                err = wldev_ioctl_set(dev, WLC_SET_KEY_PRIMARY, &index,
                        sizeof(index));
                if (unlikely(err)) {
                        WL_ERR(("error (%d)\n", err));
                }
        }
        return err;
}

static s32
wl_add_keyext(struct wiphy *wiphy, struct net_device *dev,
        u8 key_idx, const u8 *mac_addr, struct key_params *params)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct wl_wsec_key key;
        s32 err = 0;
        s32 bssidx;
        s32 mode = wl_get_mode_by_netdev(cfg, dev);

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }
        memset(&key, 0, sizeof(key));
        key.index = (u32) key_idx;

        if (!ETHER_ISMULTI(mac_addr))
                memcpy((char *)&key.ea, (const void *)mac_addr, ETHER_ADDR_LEN);
        key.len = (u32) params->key_len;

        /* check for key index change */
        if (key.len == 0) {
                /* key delete */
                swap_key_from_BE(&key);
                err = wldev_iovar_setbuf_bsscfg(dev, "wsec_key", &key, sizeof(key),
                        cfg->ioctl_buf, WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync);
                if (unlikely(err)) {
                        WL_ERR(("key delete error (%d)\n", err));
                        return err;
                }
        } else {
                if (key.len > sizeof(key.data)) {
                        WL_ERR(("Invalid key length (%d)\n", key.len));
                        return -EINVAL;
                }
                WL_DBG(("Setting the key index %d\n", key.index));
                memcpy(key.data, params->key, key.len);

                if ((mode == WL_MODE_BSS) &&
                        (params->cipher == WLAN_CIPHER_SUITE_TKIP)) {
                        u8 keybuf[8];
                        memcpy(keybuf, &key.data[24], sizeof(keybuf));
                        memcpy(&key.data[24], &key.data[16], sizeof(keybuf));
                        memcpy(&key.data[16], keybuf, sizeof(keybuf));
                }

                /* if IW_ENCODE_EXT_RX_SEQ_VALID set */
                if (params->seq && params->seq_len == 6) {
                        /* rx iv */
                        const u8 *ivptr;
                        ivptr = (const u8 *) params->seq;
                        key.rxiv.hi = (ivptr[5] << 24) | (ivptr[4] << 16) |
                                (ivptr[3] << 8) | ivptr[2];
                        key.rxiv.lo = (ivptr[1] << 8) | ivptr[0];
                        key.iv_initialized = true;
                }

                switch (params->cipher) {
                case WLAN_CIPHER_SUITE_WEP40:
                        key.algo = CRYPTO_ALGO_WEP1;
                        WL_DBG(("WLAN_CIPHER_SUITE_WEP40\n"));
                        break;
                case WLAN_CIPHER_SUITE_WEP104:
                        key.algo = CRYPTO_ALGO_WEP128;
                        WL_DBG(("WLAN_CIPHER_SUITE_WEP104\n"));
                        break;
                case WLAN_CIPHER_SUITE_TKIP:
                        key.algo = CRYPTO_ALGO_TKIP;
                        WL_DBG(("WLAN_CIPHER_SUITE_TKIP\n"));
                        break;
                case WLAN_CIPHER_SUITE_AES_CMAC:
                        key.algo = CRYPTO_ALGO_AES_CCM;
                        WL_DBG(("WLAN_CIPHER_SUITE_AES_CMAC\n"));
                        break;
                case WLAN_CIPHER_SUITE_CCMP:
                        key.algo = CRYPTO_ALGO_AES_CCM;
                        WL_DBG(("WLAN_CIPHER_SUITE_CCMP\n"));
                        break;
#ifdef BCMWAPI_WPI
                case WLAN_CIPHER_SUITE_SMS4:
                        key.algo = CRYPTO_ALGO_SMS4;
                        WL_DBG(("WLAN_CIPHER_SUITE_SMS4\n"));
                        break;
#endif // endif
                default:
                        WL_ERR(("Invalid cipher (0x%x)\n", params->cipher));
                        return -EINVAL;
                }
                swap_key_from_BE(&key);
                /* need to guarantee EAPOL 4/4 send out before set key */
                dhd_wait_pend8021x(dev);
                err = wldev_iovar_setbuf_bsscfg(dev, "wsec_key", &key, sizeof(key),
                        cfg->ioctl_buf, WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync);
                if (unlikely(err)) {
                        WL_ERR(("WLC_SET_KEY error (%d)\n", err));
                        return err;
                }
                WL_INFORM_MEM(("[%s] wsec key set\n", dev->name));
        }
        return err;
}

int
wl_cfg80211_enable_roam_offload(struct net_device *dev, int enable)
{
        int err;
        wl_eventmsg_buf_t ev_buf;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if (dev != bcmcfg_to_prmry_ndev(cfg)) {
                /* roam offload is only for the primary device */
                return -1;
        }

        WL_INFORM_MEM(("[%s] wl roam_offload %d\n", dev->name, enable));
        err = wldev_iovar_setint(dev, "roam_offload", enable);
        if (err)
                return err;

        bzero(&ev_buf, sizeof(wl_eventmsg_buf_t));
        wl_cfg80211_add_to_eventbuffer(&ev_buf, WLC_E_PSK_SUP, !enable);
        wl_cfg80211_add_to_eventbuffer(&ev_buf, WLC_E_ASSOC_REQ_IE, !enable);
        wl_cfg80211_add_to_eventbuffer(&ev_buf, WLC_E_ASSOC_RESP_IE, !enable);
        wl_cfg80211_add_to_eventbuffer(&ev_buf, WLC_E_REASSOC, !enable);
        wl_cfg80211_add_to_eventbuffer(&ev_buf, WLC_E_JOIN, !enable);
        wl_cfg80211_add_to_eventbuffer(&ev_buf, WLC_E_ROAM, !enable);
        err = wl_cfg80211_apply_eventbuffer(dev, cfg, &ev_buf);
        if (!err) {
                cfg->roam_offload = enable;
        }
        return err;
}

struct wireless_dev *
wl_cfg80211_get_wdev_from_ifname(struct bcm_cfg80211 *cfg, const char *name)
{
        struct net_info *iter, *next;

        if (name == NULL) {
                return NULL;
        }

#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
        for_each_ndev(cfg, iter, next) {
                if (iter->ndev) {
                        if (strcmp(iter->ndev->name, name) == 0) {
                                return iter->ndev->ieee80211_ptr;
                        }
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
        WL_DBG(("Iface %s not found\n", name));
        return NULL;
}

#if defined(PKT_FILTER_SUPPORT) && defined(APSTA_BLOCK_ARP_DURING_DHCP)
void
wl_cfg80211_block_arp(struct net_device *dev, int enable)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        WL_INFORM_MEM(("[%s] Enter. enable:%d\n", dev->name, enable));
        if (!dhd_pkt_filter_enable) {
                WL_DBG(("Packet filter isn't enabled\n"));
                return;
        }

        /* Block/Unblock ARP frames only if STA is connected to
         * the upstream AP in case of STA+SoftAP Concurrenct mode
         */
        if (!wl_get_drv_status(cfg, CONNECTED, dev)) {
                WL_DBG(("STA not connected to upstream AP\n"));
                return;
        }

        if (enable) {
                WL_DBG(("Enable ARP Filter\n"));
                /* Add ARP filter */
                dhd_packet_filter_add_remove(dhdp, TRUE, DHD_BROADCAST_ARP_FILTER_NUM);

                /* Enable ARP packet filter - blacklist */
                dhd_master_mode = FALSE;
                dhd_pktfilter_offload_enable(dhdp, dhdp->pktfilter[DHD_BROADCAST_ARP_FILTER_NUM],
                        TRUE, dhd_master_mode);
        } else {
                WL_DBG(("Disable ARP Filter\n"));
                /* Disable ARP packet filter */
                dhd_master_mode = TRUE;
                dhd_pktfilter_offload_enable(dhdp, dhdp->pktfilter[DHD_BROADCAST_ARP_FILTER_NUM],
                        FALSE, dhd_master_mode);

                /* Delete ARP filter */
                dhd_packet_filter_add_remove(dhdp, FALSE, DHD_BROADCAST_ARP_FILTER_NUM);
        }
}
#endif /* PKT_FILTER_SUPPORT && APSTA_BLOCK_ARP_DURING_DHCP */

static s32
wl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *dev,
        u8 key_idx, bool pairwise, const u8 *mac_addr,
        struct key_params *params)
{
        struct wl_wsec_key key;
        s32 val = 0;
        s32 wsec = 0;
        s32 err = 0;
        u8 keybuf[8];
        s32 bssidx = 0;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s32 mode = wl_get_mode_by_netdev(cfg, dev);
        WL_DBG(("key index (%d)\n", key_idx));
        RETURN_EIO_IF_NOT_UP(cfg);

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from dev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        if (mac_addr &&
                ((params->cipher != WLAN_CIPHER_SUITE_WEP40) &&
                (params->cipher != WLAN_CIPHER_SUITE_WEP104))) {
                        wl_add_keyext(wiphy, dev, key_idx, mac_addr, params);
                        goto exit;
        }
        memset(&key, 0, sizeof(key));
        /* Clear any buffered wep key */
        memset(&cfg->wep_key, 0, sizeof(struct wl_wsec_key));

        key.len = (u32) params->key_len;
        key.index = (u32) key_idx;

        if (unlikely(key.len > sizeof(key.data))) {
                WL_ERR(("Too long key length (%u)\n", key.len));
                return -EINVAL;
        }
        memcpy(key.data, params->key, key.len);

        key.flags = WL_PRIMARY_KEY;
        switch (params->cipher) {
        case WLAN_CIPHER_SUITE_WEP40:
                key.algo = CRYPTO_ALGO_WEP1;
                val = WEP_ENABLED;
                WL_DBG(("WLAN_CIPHER_SUITE_WEP40\n"));
                break;
        case WLAN_CIPHER_SUITE_WEP104:
                key.algo = CRYPTO_ALGO_WEP128;
                val = WEP_ENABLED;
                WL_DBG(("WLAN_CIPHER_SUITE_WEP104\n"));
                break;
        case WLAN_CIPHER_SUITE_TKIP:
                key.algo = CRYPTO_ALGO_TKIP;
                val = TKIP_ENABLED;
                /* wpa_supplicant switches the third and fourth quarters of the TKIP key */
                if (mode == WL_MODE_BSS) {
                        bcopy(&key.data[24], keybuf, sizeof(keybuf));
                        bcopy(&key.data[16], &key.data[24], sizeof(keybuf));
                        bcopy(keybuf, &key.data[16], sizeof(keybuf));
                }
                WL_DBG(("WLAN_CIPHER_SUITE_TKIP\n"));
                break;
        case WLAN_CIPHER_SUITE_AES_CMAC:
                key.algo = CRYPTO_ALGO_AES_CCM;
                val = AES_ENABLED;
                WL_DBG(("WLAN_CIPHER_SUITE_AES_CMAC\n"));
                break;
        case WLAN_CIPHER_SUITE_CCMP:
                key.algo = CRYPTO_ALGO_AES_CCM;
                val = AES_ENABLED;
                WL_DBG(("WLAN_CIPHER_SUITE_CCMP\n"));
                break;
#ifdef BCMWAPI_WPI
        case WLAN_CIPHER_SUITE_SMS4:
                key.algo = CRYPTO_ALGO_SMS4;
                WL_DBG(("WLAN_CIPHER_SUITE_SMS4\n"));
                val = SMS4_ENABLED;
                break;
#endif /* BCMWAPI_WPI */
#if defined(WLAN_CIPHER_SUITE_PMK)
        case WLAN_CIPHER_SUITE_PMK: {
                int j;
                wsec_pmk_t pmk;
                char keystring[WSEC_MAX_PSK_LEN + 1];
                char* charptr = keystring;
                u16 len;
                struct wl_security *sec;

                sec = wl_read_prof(cfg, dev, WL_PROF_SEC);
                if (sec->wpa_auth == WLAN_AKM_SUITE_8021X) {
                        err = wldev_iovar_setbuf(dev, "okc_info_pmk", (const void *)params->key,
                                WSEC_MAX_PSK_LEN / 2, keystring, sizeof(keystring), NULL);
                        if (err) {
                                /* could fail in case that 'okc' is not supported */
                                WL_INFORM_MEM(("okc_info_pmk failed, err=%d (ignore)\n", err));
                        }
                }
                /* copy the raw hex key to the appropriate format */
                for (j = 0; j < (WSEC_MAX_PSK_LEN / 2); j++) {
                        charptr += snprintf(charptr, sizeof(keystring), "%02x", params->key[j]);
                }
                len = (u16)strlen(keystring);
                pmk.key_len = htod16(len);
                bcopy(keystring, pmk.key, len);
                pmk.flags = htod16(WSEC_PASSPHRASE);

                err = wldev_ioctl_set(dev, WLC_SET_WSEC_PMK, &pmk, sizeof(pmk));
                if (err)
                        return err;
                /* Clear key length to delete key */
                key.len = 0;
        } break;
#endif /* WLAN_CIPHER_SUITE_PMK */
        default:
                WL_ERR(("Invalid cipher (0x%x)\n", params->cipher));
                return -EINVAL;
        }

        /* Set the new key/index */
        if ((mode == WL_MODE_IBSS) && (val & (TKIP_ENABLED | AES_ENABLED))) {
                WL_ERR(("IBSS KEY setted\n"));
                wldev_iovar_setint(dev, "wpa_auth", WPA_AUTH_NONE);
        }
        swap_key_from_BE(&key);
        if ((params->cipher == WLAN_CIPHER_SUITE_WEP40) ||
                (params->cipher == WLAN_CIPHER_SUITE_WEP104)) {
                /*
                 * For AP role, since we are doing a wl down before bringing up AP,
                 * the plumbed keys will be lost. So for AP once we bring up AP, we
                 * need to plumb keys again. So buffer the keys for future use. This
                 * is more like a WAR. If firmware later has the capability to do
                 * interface upgrade without doing a "wl down" and "wl apsta 0", then
                 * this will not be required.
                 */
                WL_DBG(("Buffering WEP Keys \n"));
                memcpy(&cfg->wep_key, &key, sizeof(struct wl_wsec_key));
        }
        err = wldev_iovar_setbuf_bsscfg(dev, "wsec_key", &key, sizeof(key), cfg->ioctl_buf,
                WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync);
        if (unlikely(err)) {
                WL_ERR(("WLC_SET_KEY error (%d)\n", err));
                return err;
        }

exit:
        err = wldev_iovar_getint_bsscfg(dev, "wsec", &wsec, bssidx);
        if (unlikely(err)) {
                WL_ERR(("get wsec error (%d)\n", err));
                return err;
        }

        wsec |= val;
        err = wldev_iovar_setint_bsscfg(dev, "wsec", wsec, bssidx);
        if (unlikely(err)) {
                WL_ERR(("set wsec error (%d)\n", err));
                return err;
        }

        return err;
}

static s32
wl_cfg80211_del_key(struct wiphy *wiphy, struct net_device *dev,
        u8 key_idx, bool pairwise, const u8 *mac_addr)
{
        struct wl_wsec_key key;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s32 err = 0;
        s32 bssidx;

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }
        WL_DBG(("Enter\n"));

#ifndef MFP
        if ((key_idx >= DOT11_MAX_DEFAULT_KEYS) && (key_idx < DOT11_MAX_DEFAULT_KEYS+2))
                return -EINVAL;
#endif // endif

        RETURN_EIO_IF_NOT_UP(cfg);
        memset(&key, 0, sizeof(key));

        key.flags = WL_PRIMARY_KEY;
        key.algo = CRYPTO_ALGO_OFF;
        key.index = (u32) key_idx;

        WL_DBG(("key index (%d)\n", key_idx));
        /* Set the new key/index */
        swap_key_from_BE(&key);
        err = wldev_iovar_setbuf_bsscfg(dev, "wsec_key", &key, sizeof(key), cfg->ioctl_buf,
                WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync);
        if (unlikely(err)) {
                if (err == -EINVAL) {
                        if (key.index >= DOT11_MAX_DEFAULT_KEYS) {
                                /* we ignore this key index in this case */
                                WL_DBG(("invalid key index (%d)\n", key_idx));
                        }
                } else {
                        WL_ERR(("WLC_SET_KEY error (%d)\n", err));
                }
                return err;
        }
        return err;
}

/* NOTE : this function cannot work as is and is never called */
static s32
wl_cfg80211_get_key(struct wiphy *wiphy, struct net_device *dev,
        u8 key_idx, bool pairwise, const u8 *mac_addr, void *cookie,
        void (*callback) (void *cookie, struct key_params * params))
{
        struct key_params params;
        struct wl_wsec_key key;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct wl_security *sec;
        s32 wsec;
        s32 err = 0;
        s32 bssidx;

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }
        WL_DBG(("key index (%d)\n", key_idx));
        RETURN_EIO_IF_NOT_UP(cfg);
        memset(&key, 0, sizeof(key));
        key.index = key_idx;
        swap_key_to_BE(&key);
        memset(&params, 0, sizeof(params));
        params.key_len = (u8) min_t(u8, DOT11_MAX_KEY_SIZE, key.len);
        params.key = key.data;

        err = wldev_iovar_getint_bsscfg(dev, "wsec", &wsec, bssidx);
        if (unlikely(err)) {
                WL_ERR(("WLC_GET_WSEC error (%d)\n", err));
                return err;
        }
        switch (WSEC_ENABLED(wsec)) {
                case WEP_ENABLED:
                        sec = wl_read_prof(cfg, dev, WL_PROF_SEC);
                        if (sec->cipher_pairwise & WLAN_CIPHER_SUITE_WEP40) {
                                params.cipher = WLAN_CIPHER_SUITE_WEP40;
                                WL_DBG(("WLAN_CIPHER_SUITE_WEP40\n"));
                        } else if (sec->cipher_pairwise & WLAN_CIPHER_SUITE_WEP104) {
                                params.cipher = WLAN_CIPHER_SUITE_WEP104;
                                WL_DBG(("WLAN_CIPHER_SUITE_WEP104\n"));
                        }
                        break;
                case TKIP_ENABLED:
                        params.cipher = WLAN_CIPHER_SUITE_TKIP;
                        WL_DBG(("WLAN_CIPHER_SUITE_TKIP\n"));
                        break;
                case AES_ENABLED:
                        params.cipher = WLAN_CIPHER_SUITE_AES_CMAC;
                        WL_DBG(("WLAN_CIPHER_SUITE_AES_CMAC\n"));
                        break;
#ifdef BCMWAPI_WPI
                case SMS4_ENABLED:
                        params.cipher = WLAN_CIPHER_SUITE_SMS4;
                        WL_DBG(("WLAN_CIPHER_SUITE_SMS4\n"));
                        break;
#endif // endif
#if defined(SUPPORT_SOFTAP_WPAWPA2_MIXED)
                /* to connect to mixed mode AP */
                case (AES_ENABLED | TKIP_ENABLED): /* TKIP CCMP */
                        params.cipher = WLAN_CIPHER_SUITE_AES_CMAC;
                        WL_DBG(("WLAN_CIPHER_SUITE_TKIP\n"));
                        break;
#endif // endif
                default:
                        WL_ERR(("Invalid algo (0x%x)\n", wsec));
                        return -EINVAL;
        }

        callback(cookie, &params);
        return err;
}

static s32
wl_cfg80211_config_default_mgmt_key(struct wiphy *wiphy,
        struct net_device *dev, u8 key_idx)
{
#ifdef MFP
        return 0;
#else
        WL_INFORM_MEM(("Not supported\n"));
        return -EOPNOTSUPP;
#endif /* MFP */
}

static int
wl_cfg80211_ifstats_counters_cb(void *ctx, const uint8 *data, uint16 type, uint16 len)
{
        switch (type) {
        case WL_IFSTATS_XTLV_IF_INDEX:
                WL_DBG(("Stats received on interface index: %d\n", *data));
                break;
        case WL_IFSTATS_XTLV_GENERIC: {
                if (len > sizeof(wl_if_stats_t)) {
                        WL_INFORM(("type 0x%x: cntbuf length too long! %d > %d\n",
                                type, len, (int)sizeof(wl_if_stats_t)));
                }
                memcpy(ctx, data, sizeof(wl_if_stats_t));
                break;
        }
        default:
                WL_DBG(("Unsupported counter type 0x%x\n", type));
                break;
        }

        return BCME_OK;
}

/* Parameters to if_counters iovar need to be converted to XTLV format
 * before sending to FW. The length of the top level XTLV container
 * containing parameters should not exceed 228 bytes
 */
#define IF_COUNTERS_PARAM_CONTAINER_LEN_MAX     228

int
wl_cfg80211_ifstats_counters(struct net_device *dev, wl_if_stats_t *if_stats)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        uint8 *pbuf = NULL;
        bcm_xtlvbuf_t xtlvbuf, local_xtlvbuf;
        bcm_xtlv_t *xtlv;
        uint16 expected_resp_len;
        wl_stats_report_t *request = NULL, *response = NULL;
        int bsscfg_idx;
        int ret = BCME_OK;

        pbuf = (uint8 *)MALLOCZ(dhdp->osh, WLC_IOCTL_MEDLEN);
        if (!pbuf) {
                WL_ERR(("Failed to allocate local pbuf\n"));
                return BCME_NOMEM;
        }

        /* top level container length cannot exceed 228 bytes.
         * This is because the output buffer is 1535 bytes long.
         * Allow 1300 bytes for reporting stats coming in XTLV format
         */
        request = (wl_stats_report_t *)
                MALLOCZ(dhdp->osh, IF_COUNTERS_PARAM_CONTAINER_LEN_MAX);
        if (!request) {
                WL_ERR(("Failed to allocate wl_stats_report_t with length (%d)\n",
                        IF_COUNTERS_PARAM_CONTAINER_LEN_MAX));
                ret = BCME_NOMEM;
                goto fail;
        }

        request->version = WL_STATS_REPORT_REQUEST_VERSION_V2;

        /* Top level container... we will create it ourselves */
        /* Leave space for report version, length, and top level XTLV
         * WL_IFSTATS_XTLV_IF.
         */
        ret = bcm_xtlv_buf_init(&local_xtlvbuf,
                (uint8*)(request->data) + BCM_XTLV_HDR_SIZE,
                IF_COUNTERS_PARAM_CONTAINER_LEN_MAX -
                offsetof(wl_stats_report_t, data) - BCM_XTLV_HDR_SIZE,
                BCM_XTLV_OPTION_ALIGN32);

        if (ret) {
                goto fail;
        }

        /* Populate requests using this the local_xtlvbuf context. The xtlvbuf
         * is used to fill the container containing the XTLVs populated using
         * local_xtlvbuf.
         */
        ret = bcm_xtlv_buf_init(&xtlvbuf,
                (uint8*)(request->data),
                IF_COUNTERS_PARAM_CONTAINER_LEN_MAX -
                offsetof(wl_stats_report_t, data),
                BCM_XTLV_OPTION_ALIGN32);

        if (ret) {
                goto fail;
        }

        /* Request generic stats */
        ret = bcm_xtlv_put_data(&local_xtlvbuf,
                WL_IFSTATS_XTLV_GENERIC, NULL, 0);
        if (ret) {
                goto fail;
        }

        /* Complete the outer container with type and length
         * only.
         */
        ret = bcm_xtlv_put_data(&xtlvbuf,
                WL_IFSTATS_XTLV_IF,
                NULL, bcm_xtlv_buf_len(&local_xtlvbuf));

        if (ret) {
                goto fail;
        }

        request->length = bcm_xtlv_buf_len(&xtlvbuf) +
                offsetof(wl_stats_report_t, data);
        bsscfg_idx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr);

        /* send the command over to the device and get teh output */
        ret = wldev_iovar_getbuf_bsscfg(dev, "if_counters", (void *)request,
                request->length, pbuf, WLC_IOCTL_MEDLEN, bsscfg_idx,
                &cfg->ioctl_buf_sync);
        if (ret < 0) {
                WL_ERR(("if_counters not supported ret=%d\n", ret));
                goto fail;
        }

        /* Reuse request to process response */
        response = (wl_stats_report_t *)pbuf;

        /* version check */
        if (response->version != WL_STATS_REPORT_REQUEST_VERSION_V2) {
                ret = BCME_VERSION;
                goto fail;
        }

        xtlv = (bcm_xtlv_t *)(response->data);

        expected_resp_len =
                (BCM_XTLV_LEN(xtlv) + OFFSETOF(wl_stats_report_t, data));

        /* Check if the received length is as expected */
        if ((response->length > WLC_IOCTL_MEDLEN) ||
                (response->length < expected_resp_len)) {
                ret = BCME_ERROR;
                WL_ERR(("Illegal response length received. Got: %d"
                        " Expected: %d. Expected len must be <= %u\n",
                        response->length, expected_resp_len, WLC_IOCTL_MEDLEN));
                goto fail;
        }

        /* check the type. The return data will be in
         * WL_IFSTATS_XTLV_IF container. So check if that container is
         * present
         */
        if (BCM_XTLV_ID(xtlv) != WL_IFSTATS_XTLV_IF) {
                ret = BCME_ERROR;
                WL_ERR(("unexpected type received: %d Expected: %d\n",
                        BCM_XTLV_ID(xtlv), WL_IFSTATS_XTLV_IF));
                goto fail;
        }

        /* Process XTLVs within WL_IFSTATS_XTLV_IF container */
        ret = bcm_unpack_xtlv_buf(if_stats,
                (uint8*)response->data + BCM_XTLV_HDR_SIZE,
                BCM_XTLV_LEN(xtlv), /* total length of all TLVs in container */
                BCM_XTLV_OPTION_ALIGN32, wl_cfg80211_ifstats_counters_cb);
        if (ret) {
                WL_ERR(("Error unpacking XTLVs in wl_ifstats_counters: %d\n", ret));
        }

fail:
        if (pbuf) {
                MFREE(dhdp->osh, pbuf, WLC_IOCTL_MEDLEN);
        }

        if (request) {
                MFREE(dhdp->osh, request, IF_COUNTERS_PARAM_CONTAINER_LEN_MAX);
        }
        return ret;
}
#undef IF_COUNTERS_PARAM_CONTAINER_LEN_MAX

static bool
wl_check_assoc_state(struct bcm_cfg80211 *cfg, struct net_device *dev)
{
        wl_assoc_info_t asinfo;
        uint32 state = 0;
        int err;

        err = wldev_iovar_getbuf_bsscfg(dev, "assoc_info",
                NULL, 0, cfg->ioctl_buf, WLC_IOCTL_MEDLEN, 0, &cfg->ioctl_buf_sync);
        if (unlikely(err)) {
                WL_ERR(("failed to get assoc_info : err=%d\n", err));
                return FALSE;
        } else {
                memcpy(&asinfo, cfg->ioctl_buf, sizeof(wl_assoc_info_t));
                state = dtoh32(asinfo.state);
                WL_DBG(("assoc state=%d\n", state));
        }

        return (state > 0)? TRUE:FALSE;
}

static s32
wl_cfg80211_get_rssi(struct net_device *dev, struct bcm_cfg80211 *cfg, s32 *rssi)
{
        s32 err = BCME_OK;
        scb_val_t scb_val;
#ifdef SUPPORT_RSSI_SUM_REPORT
        wl_rssi_ant_mimo_t rssi_ant_mimo;
#endif /* SUPPORT_RSSI_SUM_REPORT */

        if (dev == NULL || cfg == NULL) {
                return BCME_ERROR;
        }

        /* initialize rssi */
        *rssi = 0;

#ifdef SUPPORT_RSSI_SUM_REPORT
        /* Query RSSI sum across antennas */
        memset(&rssi_ant_mimo, 0, sizeof(rssi_ant_mimo));
        err = wl_get_rssi_per_ant(dev, dev->name, NULL, &rssi_ant_mimo);
        if (err) {
                WL_ERR(("Could not get rssi sum (%d)\n", err));
                /* set rssi to zero and do not return error,
                * because iovar phy_rssi_ant could return BCME_UNSUPPORTED
                * when bssid was null during roaming
                */
                err = BCME_OK;
        } else {
                cfg->rssi_sum_report = TRUE;
                if ((*rssi = rssi_ant_mimo.rssi_sum) >= 0) {
                        *rssi = 0;
                }
        }
#endif /* SUPPORT_RSSI_SUM_REPORT */

        /* if SUPPORT_RSSI_SUM_REPORT works once, do not use legacy method anymore */
        if (cfg->rssi_sum_report == FALSE) {
                memset(&scb_val, 0, sizeof(scb_val));
                scb_val.val = 0;
                err = wldev_ioctl_get(dev, WLC_GET_RSSI, &scb_val,
                        sizeof(scb_val_t));
                if (err) {
                        WL_ERR(("Could not get rssi (%d)\n", err));
                        return err;
                }
                *rssi = wl_rssi_offset(dtoh32(scb_val.val));
        }

        if (*rssi >= 0) {
                /* check assoc status including roaming */
                DHD_OS_WAKE_LOCK((dhd_pub_t *)(cfg->pub));
                if (wl_get_drv_status(cfg, CONNECTED, dev) && wl_check_assoc_state(cfg, dev)) {
                        *rssi = cfg->rssi;         /* use previous RSSI */
                        WL_DBG(("use previous RSSI %d dBm\n", cfg->rssi));
                } else {
                        *rssi = 0;
                }
                DHD_OS_WAKE_UNLOCK((dhd_pub_t *)(cfg->pub));
        } else {
                /* backup the current rssi */
                cfg->rssi = *rssi;
        }

        return err;
}

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0))
static s32
wl_cfg80211_get_station(struct wiphy *wiphy, struct net_device *dev,
        const u8 *mac, struct station_info *sinfo)
#else
static s32
wl_cfg80211_get_station(struct wiphy *wiphy, struct net_device *dev,
        u8 *mac, struct station_info *sinfo)
#endif // endif
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s32 rssi = 0;
        s32 rate;
        s32 err = 0;
        sta_info_v4_t *sta;
        s32 mode;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 0, 0)) || defined(WL_COMPAT_WIRELESS)
        s8 eabuf[ETHER_ADDR_STR_LEN];
#endif // endif
        dhd_pub_t *dhd =  (dhd_pub_t *)(cfg->pub);
        bool fw_assoc_state = FALSE;
        u32 dhd_assoc_state = 0;
        void *buf;
        RETURN_EIO_IF_NOT_UP(cfg);

        mode = wl_get_mode_by_netdev(cfg, dev);
        if (mode < 0) {
                return -ENODEV;
        }

        buf = MALLOC(cfg->osh, MAX(sizeof(wl_if_stats_t), WLC_IOCTL_SMLEN));
        if (buf == NULL) {
                WL_ERR(("%s(%d): MALLOC failed\n", __FUNCTION__, __LINE__));
                goto error;
        }
        if (mode == WL_MODE_AP) {
                err = wldev_iovar_getbuf(dev, "sta_info", (const   void*)mac,
                        ETHER_ADDR_LEN, buf, WLC_IOCTL_SMLEN, NULL);
                if (err < 0) {
                        WL_ERR(("GET STA INFO failed, %d\n", err));
                        goto error;
                }
                sinfo->filled = STA_INFO_BIT(INFO_INACTIVE_TIME);
                sta = (sta_info_v4_t *)buf;
                if (sta->ver != WL_STA_VER_4 && sta->ver != WL_STA_VER_5) {
                        WL_ERR(("GET STA INFO version mismatch, %d\n", err));
                        return BCME_VERSION;
                }
                sta->len = dtoh16(sta->len);
                sta->cap = dtoh16(sta->cap);
                sta->flags = dtoh32(sta->flags);
                sta->idle = dtoh32(sta->idle);
                sta->in = dtoh32(sta->in);
                sinfo->inactive_time = sta->idle * 1000;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 0, 0)) || defined(WL_COMPAT_WIRELESS)
                if (sta->flags & WL_STA_ASSOC) {
                        sinfo->filled |= STA_INFO_BIT(INFO_CONNECTED_TIME);
                        sinfo->connected_time = sta->in;
                }
                WL_INFORM_MEM(("[%s] STA %s : idle time : %d sec, connected time :%d ms\n",
                        dev->name, bcm_ether_ntoa((const struct ether_addr *)mac, eabuf),
                        sinfo->inactive_time, sta->idle * 1000));
#endif // endif
        } else if ((mode == WL_MODE_BSS) || (mode == WL_MODE_IBSS)) {
                get_pktcnt_t pktcnt;
                wl_if_stats_t *if_stats = NULL;
                u8 *curmacp;

                if (cfg->roam_offload) {
                        struct ether_addr bssid;
                        memset(&bssid, 0, sizeof(bssid));
                        err = wldev_ioctl_get(dev, WLC_GET_BSSID, &bssid, ETHER_ADDR_LEN);
                        if (err) {
                                WL_ERR(("Failed to get current BSSID\n"));
                        } else {
                                if (memcmp(mac, &bssid.octet, ETHER_ADDR_LEN) != 0) {
                                        /* roaming is detected */
                                        err = wl_cfg80211_delayed_roam(cfg, dev, &bssid);
                                        if (err)
                                                WL_ERR(("Failed to handle the delayed roam, "
                                                        "err=%d", err));
                                        mac = (u8 *)bssid.octet;
                                }
                        }
                }
                dhd_assoc_state = wl_get_drv_status(cfg, CONNECTED, dev);
                DHD_OS_WAKE_LOCK(dhd);
                fw_assoc_state = dhd_is_associated(dhd, 0, &err);
                if (dhd_assoc_state && !fw_assoc_state) {
                        /* check roam (join) status */
                        if (wl_check_assoc_state(cfg, dev)) {
                                fw_assoc_state = TRUE;
                                WL_DBG(("roam status\n"));
                        }
                }
                DHD_OS_WAKE_UNLOCK(dhd);
                if (!dhd_assoc_state || !fw_assoc_state) {
                        WL_ERR(("NOT assoc\n"));
                        if (err == -ENODATA)
                                goto error;
                        if (!dhd_assoc_state) {
                                WL_TRACE_HW4(("drv state is not connected \n"));
                        }
                        if (!fw_assoc_state) {
                                WL_TRACE_HW4(("fw state is not associated \n"));
                        }
                        /* Disconnect due to fw is not associated for FW_ASSOC_WATCHDOG_TIME ms.
                        * 'err == 0' of dhd_is_associated() and '!fw_assoc_state'
                        * means that BSSID is null.
                        */
                        if (dhd_assoc_state && !fw_assoc_state && !err) {
                                if (!fw_assoc_watchdog_started) {
                                        fw_assoc_watchdog_ms = OSL_SYSUPTIME();
                                        fw_assoc_watchdog_started = TRUE;
                                        WL_TRACE_HW4(("fw_assoc_watchdog_started \n"));
                                } else {
                                        if (OSL_SYSUPTIME() - fw_assoc_watchdog_ms >
                                                FW_ASSOC_WATCHDOG_TIME) {
                                                fw_assoc_watchdog_started = FALSE;
                                                err = -ENODEV;
                                                WL_TRACE_HW4(("fw is not associated for %d ms \n",
                                                        (OSL_SYSUPTIME() - fw_assoc_watchdog_ms)));
                                                goto get_station_err;
                                        }
                                }
                        }
                        err = -ENODEV;
                        goto error;
                }
                if (dhd_is_associated(dhd, 0, NULL)) {
                        fw_assoc_watchdog_started = FALSE;
                }
                curmacp = wl_read_prof(cfg, dev, WL_PROF_BSSID);
                if (memcmp(mac, curmacp, ETHER_ADDR_LEN)) {
                        WL_ERR(("Wrong Mac address: "MACDBG" != "MACDBG"\n",
                                MAC2STRDBG(mac), MAC2STRDBG(curmacp)));
                }

                /* Report the current tx rate */
                rate = 0;
                err = wldev_ioctl_get(dev, WLC_GET_RATE, &rate, sizeof(rate));
                if (err) {
                        WL_ERR(("Could not get rate (%d)\n", err));
                } else {
#if defined(USE_DYNAMIC_MAXPKT_RXGLOM)
                        int rxpktglom;
#endif // endif
                        rate = dtoh32(rate);
                        sinfo->filled |= STA_INFO_BIT(INFO_TX_BITRATE);
                        sinfo->txrate.legacy = rate * 5;
                        WL_DBG(("Rate %d Mbps\n", (rate / 2)));
#if defined(USE_DYNAMIC_MAXPKT_RXGLOM)
                        rxpktglom = ((rate/2) > 150) ? 20 : 10;

                        if (maxrxpktglom != rxpktglom) {
                                maxrxpktglom = rxpktglom;
                                WL_DBG(("Rate %d Mbps, update bus:maxtxpktglom=%d\n", (rate/2),
                                        maxrxpktglom));
                                err = wldev_iovar_setbuf(dev, "bus:maxtxpktglom",
                                        (char*)&maxrxpktglom, 4, cfg->ioctl_buf,
                                        WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);
                                if (err < 0) {
                                        WL_ERR(("set bus:maxtxpktglom failed, %d\n", err));
                                }
                        }
#endif // endif
                }

                if ((err = wl_cfg80211_get_rssi(dev, cfg, &rssi)) != BCME_OK) {
                        goto get_station_err;
                }
                sinfo->filled |= STA_INFO_BIT(INFO_SIGNAL);
                sinfo->signal = rssi;
                WL_DBG(("RSSI %d dBm\n", rssi));

                if_stats = (wl_if_stats_t *)buf;
                memset(if_stats, 0, sizeof(*if_stats));

                if (FW_SUPPORTED(dhd, ifst)) {
                        err = wl_cfg80211_ifstats_counters(dev, if_stats);
                } else
                {
                        err = wldev_iovar_getbuf(dev, "if_counters", NULL, 0,
                                (char *)if_stats, sizeof(*if_stats), NULL);
                }

                if (err) {
                        WL_ERR(("if_counters not supported ret=%d\n", err));
                        memset(&pktcnt, 0, sizeof(pktcnt));
                        err = wldev_ioctl_get(dev, WLC_GET_PKTCNTS, &pktcnt,
                                sizeof(pktcnt));
                        if (!err) {
                                sinfo->rx_packets = pktcnt.rx_good_pkt;
                                sinfo->rx_dropped_misc = pktcnt.rx_bad_pkt;
                                sinfo->tx_packets = pktcnt.tx_good_pkt;
                                sinfo->tx_failed  = pktcnt.tx_bad_pkt;
                        }
                } else {
                        sinfo->rx_packets = (uint32)dtoh64(if_stats->rxframe);
                        sinfo->rx_dropped_misc = 0;
                        sinfo->tx_packets = (uint32)dtoh64(if_stats->txfrmsnt);
                        sinfo->tx_failed = (uint32)dtoh64(if_stats->txnobuf) +
                                (uint32)dtoh64(if_stats->txrunt) +
                                (uint32)dtoh64(if_stats->txfail);
                }

                sinfo->filled |= (STA_INFO_BIT(INFO_RX_PACKETS) |
                        STA_INFO_BIT(INFO_RX_DROP_MISC) |
                        STA_INFO_BIT(INFO_TX_PACKETS) |
                        STA_INFO_BIT(INFO_TX_FAILED));

get_station_err:
                if (err && (err != -ENODATA)) {
                        /* Disconnect due to zero BSSID or error to get RSSI */
                        scb_val_t scbval;
                        scbval.val = htod32(DOT11_RC_DISASSOC_LEAVING);
                        err = wldev_ioctl_set(dev, WLC_DISASSOC, &scbval, sizeof(scb_val_t));
                        if (unlikely(err)) {
                                WL_ERR(("disassoc error (%d)\n", err));
                        }

                        WL_ERR(("force cfg80211_disconnected: %d\n", err));
                        wl_clr_drv_status(cfg, CONNECTED, dev);
                        CFG80211_DISCONNECTED(dev, 0, NULL, 0, false, GFP_KERNEL);
                        wl_link_down(cfg);
                }
        }
        else {
                WL_ERR(("Invalid device mode %d\n", wl_get_mode_by_netdev(cfg, dev)));
        }
error:
        if (buf) {
                MFREE(cfg->osh, buf, MAX(sizeof(wl_if_stats_t), WLC_IOCTL_SMLEN));
        }
        return err;
}

static s32
wl_cfg80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev,
        bool enabled, s32 timeout)
{
        s32 pm;
        s32 err = 0;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_info *_net_info = wl_get_netinfo_by_netdev(cfg, dev);
        s32 mode;
#ifdef RTT_SUPPORT
        dhd_pub_t *dhd = cfg->pub;
        rtt_status_info_t *rtt_status;
#endif /* RTT_SUPPORT */
        RETURN_EIO_IF_NOT_UP(cfg);

        WL_DBG(("Enter\n"));
        mode = wl_get_mode_by_netdev(cfg, dev);
        if (cfg->p2p_net == dev || _net_info == NULL ||
                        !wl_get_drv_status(cfg, CONNECTED, dev) ||
                        ((mode != WL_MODE_BSS) &&
                        (mode != WL_MODE_IBSS))) {
                return err;
        }

        /* Enlarge pm_enable_work */
        wl_add_remove_pm_enable_work(cfg, WL_PM_WORKQ_LONG);

        pm = enabled ? PM_FAST : PM_OFF;
        if (_net_info->pm_block) {
                WL_ERR(("%s:Do not enable the power save for pm_block %d\n",
                        dev->name, _net_info->pm_block));
                pm = PM_OFF;
        }
        pm = htod32(pm);
        WL_DBG(("%s:power save %s\n", dev->name, (pm ? "enabled" : "disabled")));
#ifdef RTT_SUPPORT
        rtt_status = GET_RTTSTATE(dhd);
        if (rtt_status->status != RTT_ENABLED) {
#endif /* RTT_SUPPORT */
                err = wldev_ioctl_set(dev, WLC_SET_PM, &pm, sizeof(pm));
                if (unlikely(err)) {
                        if (err == -ENODEV)
                                WL_DBG(("net_device is not ready yet\n"));
                        else
                                WL_ERR(("error (%d)\n", err));
                        return err;
                }
#ifdef RTT_SUPPORT
        }
#endif /* RTT_SUPPORT */
        wl_cfg80211_update_power_mode(dev);
        return err;
}

void wl_cfg80211_update_power_mode(struct net_device *dev)
{
        int err, pm = -1;

        err = wldev_ioctl_get(dev, WLC_GET_PM, &pm, sizeof(pm));
        if (err)
                WL_ERR(("%s:error (%d)\n", __FUNCTION__, err));
        else if (pm != -1 && dev->ieee80211_ptr)
                dev->ieee80211_ptr->ps = (pm == PM_OFF) ? false : true;
}

void wl_cfg80211_set_passive_scan(struct net_device *dev, char *command)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if (strcmp(command, "SCAN-ACTIVE") == 0) {
                cfg->active_scan = 1;
        } else if (strcmp(command, "SCAN-PASSIVE") == 0) {
                cfg->active_scan = 0;
        } else
                WL_ERR(("Unknown command \n"));
        return;
}

static __used u32 wl_find_msb(u16 bit16)
{
        u32 ret = 0;

        if (bit16 & 0xff00) {
                ret += 8;
                bit16 >>= 8;
        }

        if (bit16 & 0xf0) {
                ret += 4;
                bit16 >>= 4;
        }

        if (bit16 & 0xc) {
                ret += 2;
                bit16 >>= 2;
        }

        if (bit16 & 2)
                ret += bit16 & 2;
        else if (bit16)
                ret += bit16;

        return ret;
}

static s32 wl_cfg80211_resume(struct wiphy *wiphy)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
        s32 err = BCME_OK;

        if (unlikely(!wl_get_drv_status(cfg, READY, ndev))) {
                WL_INFORM_MEM(("device is not ready\n"));
                return err;
        }

        return err;
}

#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39)) || defined(WL_COMPAT_WIRELESS)
static s32 wl_cfg80211_suspend(struct wiphy *wiphy, struct cfg80211_wowlan *wow)
#else
static s32 wl_cfg80211_suspend(struct wiphy *wiphy)
#endif // endif
{
        s32 err = BCME_OK;
#ifdef DHD_CLEAR_ON_SUSPEND
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_info *iter, *next;
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
        unsigned long flags;
        if (unlikely(!wl_get_drv_status(cfg, READY, ndev))) {
                WL_INFORM_MEM(("device is not ready : status (%d)\n",
                        (int)cfg->status));
                return err;
        }
        for_each_ndev(cfg, iter, next) {
                /* p2p discovery iface doesn't have a ndev associated with it (for kernel > 3.8) */
                if (iter->ndev)
                        wl_set_drv_status(cfg, SCAN_ABORTING, iter->ndev);
                }
        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
        if (cfg->scan_request) {
                cfg80211_scan_done(cfg->scan_request, true);
                cfg->scan_request = NULL;
        }
        for_each_ndev(cfg, iter, next) {
                if (iter->ndev) {
                        wl_clr_drv_status(cfg, SCANNING, iter->ndev);
                        wl_clr_drv_status(cfg, SCAN_ABORTING, iter->ndev);
                }
        }
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);
        for_each_ndev(cfg, iter, next) {
                if (iter->ndev) {
                        if (wl_get_drv_status(cfg, CONNECTING, iter->ndev)) {
                                wl_bss_connect_done(cfg, iter->ndev, NULL, NULL, false);
                        }
                }
        }
#endif /* DHD_CLEAR_ON_SUSPEND */

        return err;
}

static s32
wl_update_pmklist(struct net_device *dev, struct wl_pmk_list *pmk_list,
        s32 err)
{
        int i, j;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct net_device *primary_dev = bcmcfg_to_prmry_ndev(cfg);

        if (!pmk_list) {
                WL_INFORM_MEM(("pmk_list is NULL\n"));
                return -EINVAL;
        }
        /* pmk list is supported only for STA interface i.e. primary interface
         * Refer code wlc_bsscfg.c->wlc_bsscfg_sta_init
         */
        if (primary_dev != dev) {
                WL_INFORM_MEM(("Not supporting Flushing pmklist on virtual"
                        " interfaces than primary interface\n"));
                return err;
        }

        WL_DBG(("No of elements %d\n", pmk_list->pmkids.npmkid));
        for (i = 0; i < pmk_list->pmkids.npmkid; i++) {
                WL_DBG(("PMKID[%d]: %pM =\n", i,
                        &pmk_list->pmkids.pmkid[i].BSSID));
                for (j = 0; j < WPA2_PMKID_LEN; j++) {
                        WL_DBG(("%02x\n", pmk_list->pmkids.pmkid[i].PMKID[j]));
                }
        }
        if (likely(!err)) {
                err = wldev_iovar_setbuf(dev, "pmkid_info", (char *)pmk_list,
                        sizeof(*pmk_list), cfg->ioctl_buf, WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);
        }

        return err;
}

static s32
wl_cfg80211_set_pmksa(struct wiphy *wiphy, struct net_device *dev,
        struct cfg80211_pmksa *pmksa)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s32 err = 0;
        int i;

        RETURN_EIO_IF_NOT_UP(cfg);
        for (i = 0; i < cfg->pmk_list->pmkids.npmkid; i++)
                if (!memcmp(pmksa->bssid, &cfg->pmk_list->pmkids.pmkid[i].BSSID,
                        ETHER_ADDR_LEN))
                        break;
        if (i < WL_NUM_PMKIDS_MAX) {
                memcpy(&cfg->pmk_list->pmkids.pmkid[i].BSSID, pmksa->bssid,
                        ETHER_ADDR_LEN);
                memcpy(&cfg->pmk_list->pmkids.pmkid[i].PMKID, pmksa->pmkid,
                        WPA2_PMKID_LEN);
                if (i == cfg->pmk_list->pmkids.npmkid)
                        cfg->pmk_list->pmkids.npmkid++;
        } else {
                err = -EINVAL;
        }
        WL_DBG(("set_pmksa,IW_PMKSA_ADD - PMKID: %pM =\n",
                &cfg->pmk_list->pmkids.pmkid[cfg->pmk_list->pmkids.npmkid - 1].BSSID));
        for (i = 0; i < WPA2_PMKID_LEN; i++) {
                WL_DBG(("%02x\n",
                        cfg->pmk_list->pmkids.pmkid[cfg->pmk_list->pmkids.npmkid - 1].
                        PMKID[i]));
        }

        err = wl_update_pmklist(dev, cfg->pmk_list, err);

        return err;
}

static s32
wl_cfg80211_del_pmksa(struct wiphy *wiphy, struct net_device *dev,
        struct cfg80211_pmksa *pmksa)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);

        pmkid_list_t pmkid = {.npmkid = 0};
        s32 err = 0;
        int i;

        RETURN_EIO_IF_NOT_UP(cfg);
        memcpy(&pmkid.pmkid[0].BSSID, pmksa->bssid, ETHER_ADDR_LEN);
        memcpy(pmkid.pmkid[0].PMKID, pmksa->pmkid, WPA2_PMKID_LEN);

        WL_DBG(("del_pmksa,IW_PMKSA_REMOVE - PMKID: %pM =\n",
                &pmkid.pmkid[0].BSSID));
        for (i = 0; i < WPA2_PMKID_LEN; i++) {
                WL_DBG(("%02x\n", pmkid.pmkid[0].PMKID[i]));
        }

        for (i = 0; i < cfg->pmk_list->pmkids.npmkid; i++)
                if (!memcmp
                    (pmksa->bssid, &cfg->pmk_list->pmkids.pmkid[i].BSSID,
                     ETHER_ADDR_LEN))
                        break;

        if ((cfg->pmk_list->pmkids.npmkid > 0) &&
                (i < cfg->pmk_list->pmkids.npmkid)) {
                memset(&cfg->pmk_list->pmkids.pmkid[i], 0, sizeof(pmkid_t));
                for (; i < (cfg->pmk_list->pmkids.npmkid - 1); i++) {
                        memcpy(&cfg->pmk_list->pmkids.pmkid[i].BSSID,
                                &cfg->pmk_list->pmkids.pmkid[i + 1].BSSID,
                                ETHER_ADDR_LEN);
                        memcpy(&cfg->pmk_list->pmkids.pmkid[i].PMKID,
                                &cfg->pmk_list->pmkids.pmkid[i + 1].PMKID,
                                WPA2_PMKID_LEN);
                }
                cfg->pmk_list->pmkids.npmkid--;
        } else {
                err = -EINVAL;
        }

        err = wl_update_pmklist(dev, cfg->pmk_list, err);

        return err;

}

static s32
wl_cfg80211_flush_pmksa(struct wiphy *wiphy, struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s32 err = 0;
        RETURN_EIO_IF_NOT_UP(cfg);
        memset(cfg->pmk_list, 0, sizeof(*cfg->pmk_list));
        err = wl_update_pmklist(dev, cfg->pmk_list, err);
        return err;
}

static wl_scan_params_t *
wl_cfg80211_scan_alloc_params(struct bcm_cfg80211 *cfg, int channel, int nprobes,
        int *out_params_size)
{
        wl_scan_params_t *params;
        int params_size;
        int num_chans;

        *out_params_size = 0;

        /* Our scan params only need space for 1 channel and 0 ssids */
        params_size = WL_SCAN_PARAMS_FIXED_SIZE + 1 * sizeof(uint16);
        params = (wl_scan_params_t *)MALLOCZ(cfg->osh, params_size);
        if (params == NULL) {
                WL_ERR(("mem alloc failed (%d bytes)\n", params_size));
                return params;
        }
        memset(params, 0, params_size);
        params->nprobes = nprobes;

        num_chans = (channel == 0) ? 0 : 1;

        memcpy(&params->bssid, &ether_bcast, ETHER_ADDR_LEN);
        params->bss_type = DOT11_BSSTYPE_ANY;
        params->scan_type = DOT11_SCANTYPE_ACTIVE;
        params->nprobes = htod32(1);
        params->active_time = htod32(-1);
        params->passive_time = htod32(-1);
        params->home_time = htod32(10);
        if (channel == -1)
                params->channel_list[0] = htodchanspec(channel);
        else
                params->channel_list[0] = wl_ch_host_to_driver(channel);

        /* Our scan params have 1 channel and 0 ssids */
        params->channel_num = htod32((0 << WL_SCAN_PARAMS_NSSID_SHIFT) |
                (num_chans & WL_SCAN_PARAMS_COUNT_MASK));

        *out_params_size = params_size; /* rtn size to the caller */
        return params;
}

#if defined(WL_CFG80211_P2P_DEV_IF)
static s32
wl_cfg80211_remain_on_channel(struct wiphy *wiphy, bcm_struct_cfgdev *cfgdev,
        struct ieee80211_channel *channel, unsigned int duration, u64 *cookie)
#else
static s32
wl_cfg80211_remain_on_channel(struct wiphy *wiphy, bcm_struct_cfgdev *cfgdev,
        struct ieee80211_channel * channel,
        enum nl80211_channel_type channel_type,
        unsigned int duration, u64 *cookie)
#endif /* WL_CFG80211_P2P_DEV_IF */
{
        s32 target_channel;
        u32 id;
        s32 err = BCME_OK;
        struct ether_addr primary_mac;
        struct net_device *ndev = NULL;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);

        RETURN_EIO_IF_NOT_UP(cfg);
#ifdef DHD_IFDEBUG
        PRINT_WDEV_INFO(cfgdev);
#endif /* DHD_IFDEBUG */

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);

#ifdef WL_NAN
        if (wl_cfgnan_check_state(cfg)) {
                WL_ERR(("nan is enabled, nan + p2p concurrency not supported\n"));
                return BCME_UNSUPPORTED;
        }
#endif /* WL_NAN */

        mutex_lock(&cfg->usr_sync);
        WL_DBG(("Enter, channel: %d, duration ms (%d) SCANNING ?? %s \n",
                ieee80211_frequency_to_channel(channel->center_freq),
                duration, (wl_get_drv_status(cfg, SCANNING, ndev)) ? "YES":"NO"));

        if (!cfg->p2p) {
                WL_ERR(("cfg->p2p is not initialized\n"));
                err = BCME_ERROR;
                goto exit;
        }

#ifndef WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST
        if (wl_get_drv_status_all(cfg, SCANNING)) {
                wl_cfg80211_cancel_scan(cfg);
        }
#endif /* not WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST */

#ifdef P2P_LISTEN_OFFLOADING
        wl_cfg80211_cancel_p2plo(cfg);
#endif /* P2P_LISTEN_OFFLOADING */

        target_channel = ieee80211_frequency_to_channel(channel->center_freq);
        memcpy(&cfg->remain_on_chan, channel, sizeof(struct ieee80211_channel));
#if defined(WL_ENABLE_P2P_IF)
        cfg->remain_on_chan_type = channel_type;
#endif /* WL_ENABLE_P2P_IF */
        id = ++cfg->last_roc_id;
        if (id == 0)
                id = ++cfg->last_roc_id;
        *cookie = id;

#ifdef WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST
        if (wl_get_drv_status(cfg, SCANNING, ndev)) {
                struct timer_list *_timer;
                WL_DBG(("scan is running. go to fake listen state\n"));

                if (duration > LONG_LISTEN_TIME) {
                        wl_cfg80211_scan_abort(cfg);
                } else {
                        wl_set_drv_status(cfg, FAKE_REMAINING_ON_CHANNEL, ndev);

                        if (timer_pending(&cfg->p2p->listen_timer)) {
                                WL_DBG(("cancel current listen timer \n"));
                                del_timer_sync(&cfg->p2p->listen_timer);
                        }

                        _timer = &cfg->p2p->listen_timer;
                        wl_clr_p2p_status(cfg, LISTEN_EXPIRED);

                        INIT_TIMER(_timer, wl_cfgp2p_listen_expired, duration, 0);

                        err = BCME_OK;
                        goto exit;
                }
        }
#endif /* WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST */

#ifdef WL_BCNRECV
        /* check fakeapscan in progress then abort */
        wl_android_bcnrecv_stop(ndev, WL_BCNRECV_LISTENBUSY);
#endif /* WL_BCNRECV */
#ifdef WL_CFG80211_SYNC_GON
        if (wl_get_drv_status_all(cfg, WAITING_NEXT_ACT_FRM_LISTEN)) {
                /* do not enter listen mode again if we are in listen mode already for next af.
                 * remain on channel completion will be returned by waiting next af completion.
                 */
#ifdef WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST
                wl_set_drv_status(cfg, FAKE_REMAINING_ON_CHANNEL, ndev);
#else
                wl_set_drv_status(cfg, REMAINING_ON_CHANNEL, ndev);
#endif /* WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST */
                goto exit;
        }
#endif /* WL_CFG80211_SYNC_GON */
        if (cfg->p2p && !cfg->p2p->on) {
                /* In case of p2p_listen command, supplicant send remain_on_channel
                 * without turning on P2P
                 */
                get_primary_mac(cfg, &primary_mac);
                wl_cfgp2p_generate_bss_mac(cfg, &primary_mac);
                p2p_on(cfg) = true;
        }

        if (p2p_is_on(cfg)) {
                err = wl_cfgp2p_enable_discovery(cfg, ndev, NULL, 0);
                if (unlikely(err)) {
                        goto exit;
                }
#ifndef WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST
                wl_set_drv_status(cfg, REMAINING_ON_CHANNEL, ndev);
#endif /* not WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST */
                err = wl_cfgp2p_discover_listen(cfg, target_channel, duration);

#ifdef WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST
                if (err == BCME_OK) {
                        wl_set_drv_status(cfg, REMAINING_ON_CHANNEL, ndev);
                } else {
                        /* if failed, firmware may be internal scanning state.
                         * so other scan request shall not abort it
                         */
                        wl_set_drv_status(cfg, FAKE_REMAINING_ON_CHANNEL, ndev);
                }
#endif /* WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST */

                if (err) {
                        wl_flush_fw_log_buffer(ndev, FW_LOGSET_MASK_ALL);
                }

                /* WAR: set err = ok to prevent cookie mismatch in wpa_supplicant
                 * and expire timer will send a completion to the upper layer
                 */
                err = BCME_OK;
        }

exit:
        if (err == BCME_OK) {
                WL_DBG(("Success\n"));
#if defined(WL_CFG80211_P2P_DEV_IF)
                cfg80211_ready_on_channel(cfgdev, *cookie, channel,
                        duration, GFP_KERNEL);
#else
                cfg80211_ready_on_channel(cfgdev, *cookie, channel,
                        channel_type, duration, GFP_KERNEL);
#endif /* WL_CFG80211_P2P_DEV_IF */
        } else {
                WL_ERR(("Fail to Set (err=%d cookie:%llu)\n", err, *cookie));
        }
        mutex_unlock(&cfg->usr_sync);
        return err;
}

static s32
wl_cfg80211_cancel_remain_on_channel(struct wiphy *wiphy,
        bcm_struct_cfgdev *cfgdev, u64 cookie)
{
        s32 err = 0;

        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);

#ifdef P2PLISTEN_AP_SAMECHN
        struct net_device *dev;
#endif /* P2PLISTEN_AP_SAMECHN */

        RETURN_EIO_IF_NOT_UP(cfg);

#ifdef DHD_IFDEBUG
        PRINT_WDEV_INFO(cfgdev);
#endif /* DHD_IFDEBUG */

#if defined(WL_CFG80211_P2P_DEV_IF)
        if (cfgdev->iftype == NL80211_IFTYPE_P2P_DEVICE) {
                WL_DBG((" enter ) on P2P dedicated discover interface\n"));
        }
#else
        WL_DBG((" enter ) netdev_ifidx: %d \n", cfgdev->ifindex));
#endif /* WL_CFG80211_P2P_DEV_IF */

#ifdef P2PLISTEN_AP_SAMECHN
        if (cfg && cfg->p2p_resp_apchn_status) {
                dev = bcmcfg_to_prmry_ndev(cfg);
                wl_cfg80211_set_p2p_resp_ap_chn(dev, 0);
                cfg->p2p_resp_apchn_status = false;
                WL_DBG(("p2p_resp_apchn_status Turn OFF \n"));
        }
#endif /* P2PLISTEN_AP_SAMECHN */

        if (cfg->last_roc_id == cookie) {
                wl_cfgp2p_set_p2p_mode(cfg, WL_P2P_DISC_ST_SCAN, 0, 0,
                        wl_to_p2p_bss_bssidx(cfg, P2PAPI_BSSCFG_DEVICE));
        } else {
                WL_ERR(("%s : ignore, request cookie(%llu) is not matched. (cur : %llu)\n",
                        __FUNCTION__, cookie, cfg->last_roc_id));
        }

        return err;
}

static void
wl_cfg80211_afx_handler(struct work_struct *work)
{
        struct afx_hdl *afx_instance;
        struct bcm_cfg80211 *cfg;
        s32 ret = BCME_OK;

        BCM_SET_CONTAINER_OF(afx_instance, work, struct afx_hdl, work);
        if (afx_instance) {
                cfg = wl_get_cfg(afx_instance->dev);
                if (cfg != NULL && cfg->afx_hdl->is_active) {
                        if (cfg->afx_hdl->is_listen && cfg->afx_hdl->my_listen_chan) {
                                ret = wl_cfgp2p_discover_listen(cfg, cfg->afx_hdl->my_listen_chan,
                                        (100 * (1 + (RANDOM32() % 3)))); /* 100ms ~ 300ms */
                        } else {
                                ret = wl_cfgp2p_act_frm_search(cfg, cfg->afx_hdl->dev,
                                        cfg->afx_hdl->bssidx, cfg->afx_hdl->peer_listen_chan,
                                        NULL);
                        }
                        if (unlikely(ret != BCME_OK)) {
                                WL_ERR(("ERROR occurred! returned value is (%d)\n", ret));
                                if (wl_get_drv_status_all(cfg, FINDING_COMMON_CHANNEL))
                                        complete(&cfg->act_frm_scan);
                        }
                }
        }
}

static s32
wl_cfg80211_af_searching_channel(struct bcm_cfg80211 *cfg, struct net_device *dev)
{
        u32 max_retry = WL_CHANNEL_SYNC_RETRY;
        bool is_p2p_gas = false;

        if (dev == NULL)
                return -1;

        WL_DBG((" enter ) \n"));

        wl_set_drv_status(cfg, FINDING_COMMON_CHANNEL, dev);
        cfg->afx_hdl->is_active = TRUE;

        if (cfg->afx_hdl->pending_tx_act_frm) {
                wl_action_frame_t *action_frame;
                action_frame = &(cfg->afx_hdl->pending_tx_act_frm->action_frame);
                if (wl_cfgp2p_is_p2p_gas_action(action_frame->data, action_frame->len))
                        is_p2p_gas = true;
        }

        /* Loop to wait until we find a peer's channel or the
         * pending action frame tx is cancelled.
         */
        while ((cfg->afx_hdl->retry < max_retry) &&
                (cfg->afx_hdl->peer_chan == WL_INVALID)) {
                cfg->afx_hdl->is_listen = FALSE;
                wl_set_drv_status(cfg, SCANNING, dev);
                WL_DBG(("Scheduling the action frame for sending.. retry %d\n",
                        cfg->afx_hdl->retry));
                /* search peer on peer's listen channel */
                schedule_work(&cfg->afx_hdl->work);
                wait_for_completion_timeout(&cfg->act_frm_scan,
                        msecs_to_jiffies(WL_AF_SEARCH_TIME_MAX));

                if ((cfg->afx_hdl->peer_chan != WL_INVALID) ||
                        !(wl_get_drv_status(cfg, FINDING_COMMON_CHANNEL, dev)))
                        break;

                if (is_p2p_gas)
                        break;

                if (cfg->afx_hdl->my_listen_chan) {
                        WL_DBG(("Scheduling Listen peer in my listen channel = %d\n",
                                cfg->afx_hdl->my_listen_chan));
                        /* listen on my listen channel */
                        cfg->afx_hdl->is_listen = TRUE;
                        schedule_work(&cfg->afx_hdl->work);
                        wait_for_completion_timeout(&cfg->act_frm_scan,
                                msecs_to_jiffies(WL_AF_SEARCH_TIME_MAX));
                }
                if ((cfg->afx_hdl->peer_chan != WL_INVALID) ||
                        !(wl_get_drv_status(cfg, FINDING_COMMON_CHANNEL, dev)))
                        break;

                cfg->afx_hdl->retry++;

                WL_AF_TX_KEEP_PRI_CONNECTION_VSDB(cfg);
        }

        cfg->afx_hdl->is_active = FALSE;

        wl_clr_drv_status(cfg, SCANNING, dev);
        wl_clr_drv_status(cfg, FINDING_COMMON_CHANNEL, dev);

        return (cfg->afx_hdl->peer_chan);
}

struct p2p_config_af_params {
        s32 max_tx_retry;       /* max tx retry count if tx no ack */
#ifdef WL_CFG80211_GON_COLLISION
        /* drop tx go nego request if go nego collision occurs */
        bool drop_tx_req;
#endif // endif
#ifdef WL_CFG80211_SYNC_GON
        bool extra_listen;
#endif // endif
        bool search_channel;    /* 1: search peer's channel to send af */
};

static s32
wl_cfg80211_config_p2p_pub_af_tx(struct wiphy *wiphy,
        wl_action_frame_t *action_frame, wl_af_params_t *af_params,
        struct p2p_config_af_params *config_af_params)
{
        s32 err = BCME_OK;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        wifi_p2p_pub_act_frame_t *act_frm =
                (wifi_p2p_pub_act_frame_t *) (action_frame->data);

        /* initialize default value */
#ifdef WL_CFG80211_GON_COLLISION
        config_af_params->drop_tx_req = false;
#endif // endif
#ifdef WL_CFG80211_SYNC_GON
        config_af_params->extra_listen = true;
#endif // endif
        config_af_params->search_channel = false;
        config_af_params->max_tx_retry = WL_AF_TX_MAX_RETRY;
        cfg->next_af_subtype = P2P_PAF_SUBTYPE_INVALID;

        switch (act_frm->subtype) {
        case P2P_PAF_GON_REQ: {
                WL_DBG(("P2P: GO_NEG_PHASE status set \n"));
                wl_set_p2p_status(cfg, GO_NEG_PHASE);

                config_af_params->search_channel = true;
                cfg->next_af_subtype = act_frm->subtype + 1;

                /* increase dwell time to wait for RESP frame */
                af_params->dwell_time = WL_MED_DWELL_TIME;

#ifdef WL_CFG80211_GON_COLLISION
                config_af_params->drop_tx_req = true;
#endif /* WL_CFG80211_GON_COLLISION */
                break;
        }
        case P2P_PAF_GON_RSP: {
                cfg->next_af_subtype = act_frm->subtype + 1;
                /* increase dwell time to wait for CONF frame */
                af_params->dwell_time = WL_MED_DWELL_TIME + 100;
                break;
        }
        case P2P_PAF_GON_CONF: {
                /* If we reached till GO Neg confirmation reset the filter */
                WL_DBG(("P2P: GO_NEG_PHASE status cleared \n"));
                wl_clr_p2p_status(cfg, GO_NEG_PHASE);

                /* minimize dwell time */
                af_params->dwell_time = WL_MIN_DWELL_TIME;

#ifdef WL_CFG80211_GON_COLLISION
                /* if go nego formation done, clear it */
                cfg->block_gon_req_tx_count = 0;
                cfg->block_gon_req_rx_count = 0;
#endif /* WL_CFG80211_GON_COLLISION */
#ifdef WL_CFG80211_SYNC_GON
                config_af_params->extra_listen = false;
#endif /* WL_CFG80211_SYNC_GON */
                break;
        }
        case P2P_PAF_INVITE_REQ: {
                config_af_params->search_channel = true;
                cfg->next_af_subtype = act_frm->subtype + 1;

                /* increase dwell time */
                af_params->dwell_time = WL_MED_DWELL_TIME;
                break;
        }
        case P2P_PAF_INVITE_RSP:
                /* minimize dwell time */
                af_params->dwell_time = WL_MIN_DWELL_TIME;
#ifdef WL_CFG80211_SYNC_GON
                config_af_params->extra_listen = false;
#endif /* WL_CFG80211_SYNC_GON */
                break;
        case P2P_PAF_DEVDIS_REQ: {
                if (IS_ACTPUB_WITHOUT_GROUP_ID(&act_frm->elts[0],
                        action_frame->len)) {
                        config_af_params->search_channel = true;
                }

                cfg->next_af_subtype = act_frm->subtype + 1;
                /* maximize dwell time to wait for RESP frame */
                af_params->dwell_time = WL_LONG_DWELL_TIME;
                break;
        }
        case P2P_PAF_DEVDIS_RSP:
                /* minimize dwell time */
                af_params->dwell_time = WL_MIN_DWELL_TIME;
#ifdef WL_CFG80211_SYNC_GON
                config_af_params->extra_listen = false;
#endif /* WL_CFG80211_SYNC_GON */
                break;
        case P2P_PAF_PROVDIS_REQ: {
                if (IS_ACTPUB_WITHOUT_GROUP_ID(&act_frm->elts[0],
                        action_frame->len)) {
                        config_af_params->search_channel = true;
                }

                cfg->next_af_subtype = act_frm->subtype + 1;
                /* increase dwell time to wait for RESP frame */
                af_params->dwell_time = WL_MED_DWELL_TIME;
                break;
        }
        case P2P_PAF_PROVDIS_RSP: {
                cfg->next_af_subtype = P2P_PAF_GON_REQ;
                af_params->dwell_time = WL_MED_DWELL_TIME;
#ifdef WL_CFG80211_SYNC_GON
                config_af_params->extra_listen = false;
#endif /* WL_CFG80211_SYNC_GON */
                break;
        }
        default:
                WL_DBG(("Unknown p2p pub act frame subtype: %d\n",
                        act_frm->subtype));
                err = BCME_BADARG;
        }
        return err;
}

#ifdef WL11U
static bool
wl_cfg80211_check_DFS_channel(struct bcm_cfg80211 *cfg, wl_af_params_t *af_params,
        void *frame, u16 frame_len)
{
        struct wl_scan_results *bss_list;
        wl_bss_info_t *bi = NULL;
        bool result = false;
        s32 i;
        chanspec_t chanspec;

        /* If DFS channel is 52~148, check to block it or not */
        if (af_params &&
                (af_params->channel >= 52 && af_params->channel <= 148)) {
                if (!wl_cfgp2p_is_p2p_action(frame, frame_len)) {
                        bss_list = cfg->bss_list;
                        bi = next_bss(bss_list, bi);
                        for_each_bss(bss_list, bi, i) {
                                chanspec = wl_chspec_driver_to_host(bi->chanspec);
                                if (CHSPEC_IS5G(chanspec) &&
                                        ((bi->ctl_ch ? bi->ctl_ch : CHSPEC_CHANNEL(chanspec))
                                        == af_params->channel)) {
                                        result = true;  /* do not block the action frame */
                                        break;
                                }
                        }
                }
        }
        else {
                result = true;
        }

        WL_DBG(("result=%s", result?"true":"false"));
        return result;
}
#endif /* WL11U */
static bool
wl_cfg80211_check_dwell_overflow(int32 requested_dwell, ulong dwell_jiffies)
{
        if ((requested_dwell & CUSTOM_RETRY_MASK) &&
                        (jiffies_to_msecs(jiffies - dwell_jiffies) >
                         (requested_dwell & ~CUSTOM_RETRY_MASK))) {
                WL_ERR(("Action frame TX retry time over dwell time!\n"));
                return true;
        }
        return false;
}

static bool
wl_cfg80211_send_action_frame(struct wiphy *wiphy, struct net_device *dev,
        bcm_struct_cfgdev *cfgdev, wl_af_params_t *af_params,
        wl_action_frame_t *action_frame, u16 action_frame_len, s32 bssidx)
{
#ifdef WL11U
        struct net_device *ndev = NULL;
#endif /* WL11U */
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        bool ack = false;
        u8 category, action;
        s32 tx_retry;
        struct p2p_config_af_params config_af_params;
        struct net_info *netinfo;
#ifdef VSDB
        ulong off_chan_started_jiffies = 0;
#endif // endif
        ulong dwell_jiffies = 0;
        bool dwell_overflow = false;
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);

        int32 requested_dwell = af_params->dwell_time;

        /* Add the default dwell time
         * Dwell time to stay off-channel to wait for a response action frame
         * after transmitting an GO Negotiation action frame
         */
        af_params->dwell_time = WL_DWELL_TIME;

#ifdef WL11U
#if defined(WL_CFG80211_P2P_DEV_IF)
        ndev = dev;
#else
        ndev = ndev_to_cfgdev(cfgdev);
#endif /* WL_CFG80211_P2P_DEV_IF */
#endif /* WL11U */

        category = action_frame->data[DOT11_ACTION_CAT_OFF];
        action = action_frame->data[DOT11_ACTION_ACT_OFF];

        /* initialize variables */
        tx_retry = 0;
        cfg->next_af_subtype = P2P_PAF_SUBTYPE_INVALID;
        config_af_params.max_tx_retry = WL_AF_TX_MAX_RETRY;
        config_af_params.search_channel = false;
#ifdef WL_CFG80211_GON_COLLISION
        config_af_params.drop_tx_req = false;
#endif // endif
#ifdef WL_CFG80211_SYNC_GON
        config_af_params.extra_listen = false;
#endif // endif

        /* config parameters */
        /* Public Action Frame Process - DOT11_ACTION_CAT_PUBLIC */
        if (category == DOT11_ACTION_CAT_PUBLIC) {
                if ((action == P2P_PUB_AF_ACTION) &&
                        (action_frame_len >= sizeof(wifi_p2p_pub_act_frame_t))) {
                        /* p2p public action frame process */
                        if (BCME_OK != wl_cfg80211_config_p2p_pub_af_tx(wiphy,
                                action_frame, af_params, &config_af_params)) {
                                WL_DBG(("Unknown subtype.\n"));
                        }

#ifdef WL_CFG80211_GON_COLLISION
                        if (config_af_params.drop_tx_req) {
                                if (cfg->block_gon_req_tx_count) {
                                        /* drop gon req tx action frame */
                                        WL_DBG(("Drop gon req tx action frame: count %d\n",
                                                cfg->block_gon_req_tx_count));
                                        goto exit;
                                }
                        }
#endif /* WL_CFG80211_GON_COLLISION */
                } else if (action_frame_len >= sizeof(wifi_p2psd_gas_pub_act_frame_t)) {
                        /* service discovery process */
                        if (action == P2PSD_ACTION_ID_GAS_IREQ ||
                                action == P2PSD_ACTION_ID_GAS_CREQ) {
                                /* configure service discovery query frame */

                                config_af_params.search_channel = true;

                                /* save next af suptype to cancel remained dwell time */
                                cfg->next_af_subtype = action + 1;

                                af_params->dwell_time = WL_MED_DWELL_TIME;
                                if (requested_dwell & CUSTOM_RETRY_MASK) {
                                        config_af_params.max_tx_retry =
                                                (requested_dwell & CUSTOM_RETRY_MASK) >> 24;
                                        af_params->dwell_time =
                                                (requested_dwell & ~CUSTOM_RETRY_MASK);
                                        WL_DBG(("Custom retry(%d) and dwell time(%d) is set.\n",
                                                config_af_params.max_tx_retry,
                                                af_params->dwell_time));
                                }
                        } else if (action == P2PSD_ACTION_ID_GAS_IRESP ||
                                action == P2PSD_ACTION_ID_GAS_CRESP) {
                                /* configure service discovery response frame */
                                af_params->dwell_time = WL_MIN_DWELL_TIME;
                        } else {
                                WL_DBG(("Unknown action type: %d\n", action));
                        }
                } else {
                        WL_DBG(("Unknown Frame: category 0x%x, action 0x%x, length %d\n",
                                category, action, action_frame_len));
        }
        } else if (category == P2P_AF_CATEGORY) {
                /* do not configure anything. it will be sent with a default configuration */
        } else {
                WL_DBG(("Unknown Frame: category 0x%x, action 0x%x\n",
                        category, action));
                if (dhd->op_mode & DHD_FLAG_HOSTAP_MODE) {
                        wl_clr_drv_status(cfg, SENDING_ACT_FRM, dev);
                        return false;
                }
        }

        netinfo = wl_get_netinfo_by_wdev(cfg, cfgdev_to_wdev(cfgdev));
        /* validate channel and p2p ies */
        if (config_af_params.search_channel && IS_P2P_SOCIAL(af_params->channel) &&
                netinfo && netinfo->bss.ies.probe_req_ie_len) {
                config_af_params.search_channel = true;
        } else {
                config_af_params.search_channel = false;
        }
#ifdef WL11U
        if (ndev == bcmcfg_to_prmry_ndev(cfg))
                config_af_params.search_channel = false;
#endif /* WL11U */

#ifdef VSDB
        /* if connecting on primary iface, sleep for a while before sending af tx for VSDB */
        if (wl_get_drv_status(cfg, CONNECTING, bcmcfg_to_prmry_ndev(cfg))) {
                OSL_SLEEP(50);
        }
#endif // endif

        /* if scan is ongoing, abort current scan. */
        if (wl_get_drv_status_all(cfg, SCANNING)) {
                wl_cfg80211_cancel_scan(cfg);
        }

        /* Abort P2P listen */
        if (discover_cfgdev(cfgdev, cfg)) {
                if (cfg->p2p_supported && cfg->p2p) {
                        wl_cfgp2p_set_p2p_mode(cfg, WL_P2P_DISC_ST_SCAN, 0, 0,
                                wl_to_p2p_bss_bssidx(cfg, P2PAPI_BSSCFG_DEVICE));
                }
        }

#ifdef WL11U
        /* handling DFS channel exceptions */
        if (!wl_cfg80211_check_DFS_channel(cfg, af_params, action_frame->data, action_frame->len)) {
                return false;   /* the action frame was blocked */
        }
#endif /* WL11U */

        /* set status and destination address before sending af */
        if (cfg->next_af_subtype != P2P_PAF_SUBTYPE_INVALID) {
                /* set this status to cancel the remained dwell time in rx process */
                wl_set_drv_status(cfg, WAITING_NEXT_ACT_FRM, dev);
        }
        wl_set_drv_status(cfg, SENDING_ACT_FRM, dev);
        memcpy(cfg->afx_hdl->tx_dst_addr.octet,
                af_params->action_frame.da.octet,
                sizeof(cfg->afx_hdl->tx_dst_addr.octet));

        /* save af_params for rx process */
        cfg->afx_hdl->pending_tx_act_frm = af_params;

        if (wl_cfgp2p_is_p2p_gas_action(action_frame->data, action_frame->len)) {
                WL_DBG(("Set GAS action frame config.\n"));
                config_af_params.search_channel = false;
                config_af_params.max_tx_retry = 1;
        }

        /* search peer's channel */
        if (config_af_params.search_channel) {
                /* initialize afx_hdl */
                if ((cfg->afx_hdl->bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                        WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                        goto exit;
                }
                cfg->afx_hdl->dev = dev;
                cfg->afx_hdl->retry = 0;
                cfg->afx_hdl->peer_chan = WL_INVALID;

                if (wl_cfg80211_af_searching_channel(cfg, dev) == WL_INVALID) {
                        WL_ERR(("couldn't find peer's channel.\n"));
                        wl_cfgp2p_print_actframe(true, action_frame->data, action_frame->len,
                                af_params->channel);
                        /* Even if we couldn't find peer channel, try to send the frame
                         * out. P2P cert 5.1.14 testbed device (realtek) doesn't seem to
                         * respond to probe request (Ideally it has to be in listen and
                         * responsd to probe request). However if we send Go neg req, the
                         * peer is sending GO-neg resp. So instead of giving up here, just
                         * proceed and attempt sending out the action frame.
                         */
                }

                wl_clr_drv_status(cfg, SCANNING, cfg->afx_hdl->dev);
                /*
                 * Abort scan even for VSDB scenarios. Scan gets aborted in firmware
                 * but after the check of piggyback algorithm.
                 * To take care of current piggback algo, lets abort the scan here itself.
                 */
                wl_cfg80211_cancel_scan(cfg);
                /* Suspend P2P discovery's search-listen to prevent it from
                 * starting a scan or changing the channel.
                 */
                if ((wl_cfgp2p_discover_enable_search(cfg, false)) < 0) {
                        WL_ERR(("Can not disable discovery mode\n"));
                        goto exit;
                }

                /* update channel */
                if (cfg->afx_hdl->peer_chan != WL_INVALID) {
                        af_params->channel = cfg->afx_hdl->peer_chan;
                        WL_ERR(("Attempt tx on peer listen channel:%d ",
                                cfg->afx_hdl->peer_chan));
                } else {
                        WL_ERR(("Attempt tx with the channel provided by userspace."
                        "Channel: %d\n", af_params->channel));
                }
        }

#ifdef VSDB
        off_chan_started_jiffies = jiffies;
#endif /* VSDB */

        wl_cfgp2p_print_actframe(true, action_frame->data, action_frame->len, af_params->channel);

        wl_cfgp2p_need_wait_actfrmae(cfg, action_frame->data, action_frame->len, true);

        dwell_jiffies = jiffies;
        /* Now send a tx action frame */
        ack = wl_cfgp2p_tx_action_frame(cfg, dev, af_params, bssidx) ? false : true;
        dwell_overflow = wl_cfg80211_check_dwell_overflow(requested_dwell, dwell_jiffies);

        /* if failed, retry it. tx_retry_max value is configure by .... */
        while ((ack == false) && (tx_retry++ < config_af_params.max_tx_retry) &&
                        !dwell_overflow) {
#ifdef VSDB
                if (af_params->channel) {
                        if (jiffies_to_msecs(jiffies - off_chan_started_jiffies) >
                                OFF_CHAN_TIME_THRESHOLD_MS) {
                                WL_AF_TX_KEEP_PRI_CONNECTION_VSDB(cfg);
                                off_chan_started_jiffies = jiffies;
                        } else
                                OSL_SLEEP(AF_RETRY_DELAY_TIME);
                }
#endif /* VSDB */
                ack = wl_cfgp2p_tx_action_frame(cfg, dev, af_params, bssidx) ?
                        false : true;
                dwell_overflow = wl_cfg80211_check_dwell_overflow(requested_dwell, dwell_jiffies);
        }

        if (ack == false) {
                WL_ERR(("Failed to send Action Frame(retry %d)\n", tx_retry));
        }
        WL_DBG(("Complete to send action frame\n"));
exit:
        /* Clear SENDING_ACT_FRM after all sending af is done */
        wl_clr_drv_status(cfg, SENDING_ACT_FRM, dev);

#ifdef WL_CFG80211_SYNC_GON
        /* WAR: sometimes dongle does not keep the dwell time of 'actframe'.
         * if we coundn't get the next action response frame and dongle does not keep
         * the dwell time, go to listen state again to get next action response frame.
         */
        if (ack && config_af_params.extra_listen &&
#ifdef WL_CFG80211_GON_COLLISION
                !cfg->block_gon_req_tx_count &&
#endif /* WL_CFG80211_GON_COLLISION */
                wl_get_drv_status_all(cfg, WAITING_NEXT_ACT_FRM) &&
                cfg->af_sent_channel == cfg->afx_hdl->my_listen_chan) {
                s32 extar_listen_time;

                extar_listen_time = af_params->dwell_time -
                        jiffies_to_msecs(jiffies - cfg->af_tx_sent_jiffies);

                if (extar_listen_time > 50) {
                        wl_set_drv_status(cfg, WAITING_NEXT_ACT_FRM_LISTEN, dev);
                        WL_DBG(("Wait more time! actual af time:%d,"
                                "calculated extar listen:%d\n",
                                af_params->dwell_time, extar_listen_time));
                        if (wl_cfgp2p_discover_listen(cfg, cfg->af_sent_channel,
                                extar_listen_time + 100) == BCME_OK) {
                                wait_for_completion_timeout(&cfg->wait_next_af,
                                        msecs_to_jiffies(extar_listen_time + 100 + 300));
                        }
                        wl_clr_drv_status(cfg, WAITING_NEXT_ACT_FRM_LISTEN, dev);
                }
        }
#endif /* WL_CFG80211_SYNC_GON */
        wl_clr_drv_status(cfg, WAITING_NEXT_ACT_FRM, dev);

        cfg->afx_hdl->pending_tx_act_frm = NULL;

        if (ack) {
                WL_DBG(("-- Action Frame Tx succeeded, listen chan: %d\n",
                        cfg->afx_hdl->my_listen_chan));
        } else {
                WL_ERR(("-- Action Frame Tx failed, listen chan: %d\n",
                        cfg->afx_hdl->my_listen_chan));
        }

#ifdef WL_CFG80211_GON_COLLISION
        if (cfg->block_gon_req_tx_count) {
                cfg->block_gon_req_tx_count--;
                /* if ack is ture, supplicant will wait more time(100ms).
                 * so we will return it as a success to get more time .
                 */
                ack = true;
        }
#endif /* WL_CFG80211_GON_COLLISION */
        return ack;
}

#define MAX_NUM_OF_ASSOCIATED_DEV       64
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0))
static s32
wl_cfg80211_mgmt_tx(struct wiphy *wiphy, bcm_struct_cfgdev *cfgdev,
        struct cfg80211_mgmt_tx_params *params, u64 *cookie)
#else
static s32
wl_cfg80211_mgmt_tx(struct wiphy *wiphy, bcm_struct_cfgdev *cfgdev,
        struct ieee80211_channel *channel, bool offchan,
#if (LINUX_VERSION_CODE <= KERNEL_VERSION(3, 7, 0))
        enum nl80211_channel_type channel_type,
        bool channel_type_valid,
#endif /* LINUX_VERSION_CODE <= KERNEL_VERSION(3, 7, 0) */
        unsigned int wait, const u8* buf, size_t len,
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 2, 0)) || defined(WL_COMPAT_WIRELESS)
        bool no_cck,
#endif // endif
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 3, 0)) || defined(WL_COMPAT_WIRELESS)
        bool dont_wait_for_ack,
#endif // endif
        u64 *cookie)
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0) */
{
        wl_action_frame_t *action_frame;
        wl_af_params_t *af_params;
        scb_val_t scb_val;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0))
        struct ieee80211_channel *channel = params->chan;
        const u8 *buf = params->buf;
        size_t len = params->len;
#endif // endif
        const struct ieee80211_mgmt *mgmt;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_device *dev = NULL;
        s32 err = BCME_OK;
        s32 bssidx = 0;
        u32 id;
        bool ack = false;
        s8 eabuf[ETHER_ADDR_STR_LEN];

        WL_DBG(("Enter \n"));

        if (len > ACTION_FRAME_SIZE) {
                WL_ERR(("bad length:%zu\n", len));
                return BCME_BADLEN;
        }
#ifdef DHD_IFDEBUG
        PRINT_WDEV_INFO(cfgdev);
#endif /* DHD_IFDEBUG */

        dev = cfgdev_to_wlc_ndev(cfgdev, cfg);

        if (!dev) {
                WL_ERR(("dev is NULL\n"));
                return -EINVAL;
        }

        /* set bsscfg idx for iovar (wlan0: P2PAPI_BSSCFG_PRIMARY, p2p: P2PAPI_BSSCFG_DEVICE)   */
        if (discover_cfgdev(cfgdev, cfg)) {
                if (!cfg->p2p_supported || !cfg->p2p) {
                        WL_ERR(("P2P doesn't setup completed yet\n"));
                        return -EINVAL;
                }
                bssidx = wl_to_p2p_bss_bssidx(cfg, P2PAPI_BSSCFG_DEVICE);
        }
        else {
                if ((bssidx = wl_get_bssidx_by_wdev(cfg, cfgdev_to_wdev(cfgdev))) < 0) {
                        WL_ERR(("Find p2p index failed\n"));
                        return BCME_ERROR;
                }
        }

        WL_DBG(("TX target bssidx=%d\n", bssidx));

        if (p2p_is_on(cfg)) {
                /* Suspend P2P discovery search-listen to prevent it from changing the
                 * channel.
                 */
                if ((err = wl_cfgp2p_discover_enable_search(cfg, false)) < 0) {
                        WL_ERR(("Can not disable discovery mode\n"));
                        return -EFAULT;
                }
        }
        *cookie = 0;
        id = cfg->send_action_id++;
        if (id == 0)
                id = cfg->send_action_id++;
        *cookie = id;
        mgmt = (const struct ieee80211_mgmt *)buf;
        if (ieee80211_is_mgmt(mgmt->frame_control)) {
                if (ieee80211_is_probe_resp(mgmt->frame_control)) {
                        s32 ie_offset =  DOT11_MGMT_HDR_LEN + DOT11_BCN_PRB_FIXED_LEN;
                        s32 ie_len = len - ie_offset;
                        if ((dev == bcmcfg_to_prmry_ndev(cfg)) && cfg->p2p) {
                                bssidx = wl_to_p2p_bss_bssidx(cfg, P2PAPI_BSSCFG_DEVICE);
                        }
                        wl_cfg80211_set_mgmt_vndr_ies(cfg, ndev_to_cfgdev(dev), bssidx,
                                VNDR_IE_PRBRSP_FLAG, (const u8 *)(buf + ie_offset), ie_len);
                        cfg80211_mgmt_tx_status(cfgdev, *cookie, buf, len, true, GFP_KERNEL);
#if defined(P2P_IE_MISSING_FIX)
                        if (!cfg->p2p_prb_noti) {
                                cfg->p2p_prb_noti = true;
                                WL_DBG(("%s: TX 802_1X Probe Response first time.\n",
                                        __FUNCTION__));
                        }
#endif // endif
                        goto exit;
                } else if (ieee80211_is_disassoc(mgmt->frame_control) ||
                        ieee80211_is_deauth(mgmt->frame_control)) {
                        char mac_buf[MAX_NUM_OF_ASSOCIATED_DEV *
                                sizeof(struct ether_addr) + sizeof(uint)] = {0};
                        int num_associated = 0;
                        struct maclist *assoc_maclist = (struct maclist *)mac_buf;
                        if (!bcmp((const uint8 *)BSSID_BROADCAST,
                                (const struct ether_addr *)mgmt->da, ETHER_ADDR_LEN)) {
                                assoc_maclist->count = MAX_NUM_OF_ASSOCIATED_DEV;
                                err = wldev_ioctl_get(dev, WLC_GET_ASSOCLIST,
                                        assoc_maclist, sizeof(mac_buf));
                                if (err < 0)
                                        WL_ERR(("WLC_GET_ASSOCLIST error %d\n", err));
                                else
                                        num_associated = assoc_maclist->count;
                        }
                        memcpy(scb_val.ea.octet, mgmt->da, ETH_ALEN);
                        scb_val.val = mgmt->u.disassoc.reason_code;
                        err = wldev_ioctl_set(dev, WLC_SCB_DEAUTHENTICATE_FOR_REASON, &scb_val,
                                sizeof(scb_val_t));
                        if (err < 0)
                                WL_ERR(("WLC_SCB_DEAUTHENTICATE_FOR_REASON error %d\n", err));
                        WL_ERR(("Disconnect STA : " MACDBG " scb_val.val %d\n",
                                MAC2STRDBG(bcm_ether_ntoa((const struct ether_addr *)mgmt->da,
                                eabuf)), scb_val.val));

                        if (num_associated > 0 && ETHER_ISBCAST(mgmt->da))
                                wl_delay(400);

                        cfg80211_mgmt_tx_status(cfgdev, *cookie, buf, len, true, GFP_KERNEL);
                        goto exit;

                } else if (ieee80211_is_action(mgmt->frame_control)) {
                        /* Abort the dwell time of any previous off-channel
                        * action frame that may be still in effect.  Sending
                        * off-channel action frames relies on the driver's
                        * scan engine.  If a previous off-channel action frame
                        * tx is still in progress (including the dwell time),
                        * then this new action frame will not be sent out.
                        */
/* Do not abort scan for VSDB. Scan will be aborted in firmware if necessary.
 * And previous off-channel action frame must be ended before new af tx.
 */
#ifndef WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST
                        wl_cfg80211_cancel_scan(cfg);
#endif /* not WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST */
                }

        } else {
                WL_ERR(("Driver only allows MGMT packet type\n"));
                goto exit;
        }

        af_params = (wl_af_params_t *)MALLOCZ(cfg->osh, WL_WIFI_AF_PARAMS_SIZE);

        if (af_params == NULL)
        {
                WL_ERR(("unable to allocate frame\n"));
                return -ENOMEM;
        }

        action_frame = &af_params->action_frame;

        /* Add the packet Id */
        action_frame->packetId = *cookie;
        WL_DBG(("action frame %d\n", action_frame->packetId));
        /* Add BSSID */
        memcpy(&action_frame->da, &mgmt->da[0], ETHER_ADDR_LEN);
        memcpy(&af_params->BSSID, &mgmt->bssid[0], ETHER_ADDR_LEN);

        /* Add the length exepted for 802.11 header  */
        action_frame->len = len - DOT11_MGMT_HDR_LEN;
        WL_DBG(("action_frame->len: %d\n", action_frame->len));

        /* Add the channel */
        af_params->channel =
                ieee80211_frequency_to_channel(channel->center_freq);
        /* Save listen_chan for searching common channel */
        cfg->afx_hdl->peer_listen_chan = af_params->channel;
        WL_DBG(("channel from upper layer %d\n", cfg->afx_hdl->peer_listen_chan));

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0))
        af_params->dwell_time = params->wait;
#else
        af_params->dwell_time = wait;
#endif // endif

        memcpy(action_frame->data, &buf[DOT11_MGMT_HDR_LEN], action_frame->len);

        ack = wl_cfg80211_send_action_frame(wiphy, dev, cfgdev, af_params,
                action_frame, action_frame->len, bssidx);
        cfg80211_mgmt_tx_status(cfgdev, *cookie, buf, len, ack, GFP_KERNEL);

        MFREE(cfg->osh, af_params, WL_WIFI_AF_PARAMS_SIZE);
exit:
        return err;
}

static void
wl_cfg80211_mgmt_frame_register(struct wiphy *wiphy, bcm_struct_cfgdev *cfgdev,
        u16 frame, bool reg)
{

        WL_DBG(("frame_type: %x, reg: %d\n", frame, reg));

        if (frame != (IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ))
                return;

        return;
}

static s32
wl_cfg80211_change_bss(struct wiphy *wiphy,
        struct net_device *dev,
        struct bss_parameters *params)
{
        s32 err = 0;
        s32 ap_isolate = 0;
#ifdef PCIE_FULL_DONGLE
        s32 ifidx = DHD_BAD_IF;
#endif // endif
#if defined(PCIE_FULL_DONGLE)
        dhd_pub_t *dhd;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        dhd = (dhd_pub_t *)(cfg->pub);
#if defined(WL_ENABLE_P2P_IF)
        if (cfg->p2p_net == dev)
                dev = bcmcfg_to_prmry_ndev(cfg);
#endif // endif
#endif // endif

        if (params->use_cts_prot >= 0) {
        }

        if (params->use_short_preamble >= 0) {
        }

        if (params->use_short_slot_time >= 0) {
        }

        if (params->basic_rates) {
        }

        if (params->ap_isolate >= 0) {
                ap_isolate = params->ap_isolate;
#ifdef PCIE_FULL_DONGLE
                ifidx = dhd_net2idx(dhd->info, dev);

                if (ifidx != DHD_BAD_IF) {
                        err = dhd_set_ap_isolate(dhd, ifidx, ap_isolate);
                } else {
                        WL_ERR(("Failed to set ap_isolate\n"));
                }
#else
                err = wldev_iovar_setint(dev, "ap_isolate", ap_isolate);
                if (unlikely(err))
                {
                        WL_ERR(("set ap_isolate Error (%d)\n", err));
                }
#endif /* PCIE_FULL_DONGLE */
        }

        if (params->ht_opmode >= 0) {
        }

        return err;
}

static s32
wl_cfg80211_set_channel(struct wiphy *wiphy, struct net_device *dev,
        struct ieee80211_channel *chan,
        enum nl80211_channel_type channel_type)
{
        s32 _chan;
        u32 _band;
        chanspec_t chspec = 0;
        chanspec_t fw_chspec = 0;
        u32 bw = WL_CHANSPEC_BW_20;

        s32 err = BCME_OK;
        s32 bw_cap = 0;
        struct {
                u32 band;
                u32 bw_cap;
        } param = {0, 0};
        u8 ioctl_buf[WLC_IOCTL_SMLEN];
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
#if defined(CUSTOM_SET_CPUCORE) || defined(APSTA_RESTRICTED_CHANNEL)
        dhd_pub_t *dhd =  (dhd_pub_t *)(cfg->pub);
#endif /* CUSTOM_SET_CPUCORE || APSTA_RESTRICTED_CHANNEL */
#if defined(WL_VIRTUAL_APSTA) && defined(APSTA_RESTRICTED_CHANNEL)
        struct net_device *prmry_ndev = bcmcfg_to_prmry_ndev(cfg);
#endif /* WL_VIRTUAL_APSTA && APSTA_RESTRICTED_CHANNEL */

        dev = ndev_to_wlc_ndev(dev, cfg);
        _chan = ieee80211_frequency_to_channel(chan->center_freq);
        _band = chan->band;
        WL_ERR(("netdev_ifidx(%d), chan_type(%d) target channel(%d) \n",
                dev->ifindex, channel_type, _chan));

#ifdef NOT_YET
        switch (channel_type) {
                case NL80211_CHAN_HT40MINUS:
                        /* secondary channel is below the control channel */
                        chspec = CH40MHZ_CHSPEC(channel, WL_CHANSPEC_CTL_SB_UPPER);
                        break;
                case NL80211_CHAN_HT40PLUS:
                        /* secondary channel is above the control channel */
                        chspec = CH40MHZ_CHSPEC(channel, WL_CHANSPEC_CTL_SB_LOWER);
                        break;
                default:
                        chspec = CH20MHZ_CHSPEC(channel);

        }
#endif /* NOT_YET */

#if defined(APSTA_RESTRICTED_CHANNEL)
#define DEFAULT_2G_SOFTAP_CHANNEL       1
#define DEFAULT_5G_SOFTAP_CHANNEL       149
        if (wl_get_mode_by_netdev(cfg, dev) == WL_MODE_AP &&
                DHD_OPMODE_STA_SOFTAP_CONCURR(dhd) &&
                wl_get_drv_status(cfg, CONNECTED, prmry_ndev)) {
                u32 *sta_chan = (u32 *)wl_read_prof(cfg,
                        prmry_ndev, WL_PROF_CHAN);

#ifdef WL_RESTRICTED_APSTA_SCC
                _chan = *sta_chan;

                /* Check if current channel is restricted */
                if (wl_cfg80211_check_indoor_channels(prmry_ndev, _chan)) {
                        wl_cfg80211_disassoc(prmry_ndev);
                        WL_ERR(("Force to disconnect existing AP as "
                                "channel %d is indoor channel\n", _chan));

                        /* Set channel to default 2.4GHz channel */
                        _chan = DEFAULT_2G_SOFTAP_CHANNEL;
                }
#else
                u32 sta_band = (*sta_chan > CH_MAX_2G_CHANNEL) ?
                        NL80211_BAND_5GHZ : NL80211_BAND_2GHZ;
                if (chan->band == sta_band) {
                        _chan = (sta_band == NL80211_BAND_5GHZ &&
                                *sta_chan != DEFAULT_5G_SOFTAP_CHANNEL) ?
                                DEFAULT_2G_SOFTAP_CHANNEL : *sta_chan;
                }
#endif /* WL_RESTRICTED_APSTA_SCC */
                _band = (_chan <= CH_MAX_2G_CHANNEL) ? NL80211_BAND_2GHZ : NL80211_BAND_5GHZ;
                WL_ERR(("Target SoftAP channel will be set to %d\n", _chan));
        }
#undef DEFAULT_2G_SOFTAP_CHANNEL
#undef DEFAULT_5G_SOFTAP_CHANNEL
#endif /* APSTA_RESTRICTED_CHANNEL */

        if (_band == NL80211_BAND_5GHZ) {
                param.band = WLC_BAND_5G;
                err = wldev_iovar_getbuf(dev, "bw_cap", &param, sizeof(param),
                        ioctl_buf, sizeof(ioctl_buf), NULL);
                if (err) {
                        if (err != BCME_UNSUPPORTED) {
                                WL_ERR(("bw_cap failed, %d\n", err));
                                return err;
                        } else {
                                err = wldev_iovar_getint(dev, "mimo_bw_cap", &bw_cap);
                                if (err) {
                                        WL_ERR(("error get mimo_bw_cap (%d)\n", err));
                                }
                                if (bw_cap != WLC_N_BW_20ALL)
                                        bw = WL_CHANSPEC_BW_40;
                        }
                } else {
                        if (WL_BW_CAP_80MHZ(ioctl_buf[0]))
                                bw = WL_CHANSPEC_BW_80;
                        else if (WL_BW_CAP_40MHZ(ioctl_buf[0]))
                                bw = WL_CHANSPEC_BW_40;
                        else
                                bw = WL_CHANSPEC_BW_20;

                }

        } else if (_band == NL80211_BAND_2GHZ)
                bw = WL_CHANSPEC_BW_20;
set_channel:
        chspec = wf_channel2chspec(_chan, bw);
        if (wf_chspec_valid(chspec)) {
                fw_chspec = wl_chspec_host_to_driver(chspec);
                if (fw_chspec != INVCHANSPEC) {
                        if ((err = wldev_iovar_setint(dev, "chanspec",
                                fw_chspec)) == BCME_BADCHAN) {
                                if (bw == WL_CHANSPEC_BW_80)
                                        goto change_bw;
                                err = wldev_ioctl_set(dev, WLC_SET_CHANNEL,
                                        &_chan, sizeof(_chan));
                                if (err < 0) {
                                        WL_ERR(("WLC_SET_CHANNEL error %d"
                                        "chip may not be supporting this channel\n", err));
                                }
                        } else if (err) {
                                WL_ERR(("failed to set chanspec error %d\n", err));
                        }
#ifdef DISABLE_WL_FRAMEBURST_SOFTAP
                        else {
                                /* Disable Frameburst only for stand-alone 2GHz SoftAP */
                                if (wl_get_mode_by_netdev(cfg, dev) == WL_MODE_AP &&
                                        DHD_OPMODE_SUPPORTED(cfg->pub, DHD_FLAG_HOSTAP_MODE) &&
                                        (_chan <= CH_MAX_2G_CHANNEL) &&
                                        !wl_get_drv_status(cfg, CONNECTED,
                                                bcmcfg_to_prmry_ndev(cfg))) {
                                        WL_DBG(("Disabling frameburst on "
                                                "stand-alone 2GHz SoftAP\n"));
                                        wl_cfg80211_set_frameburst(cfg, FALSE);
                                }
                        }
#endif /* DISABLE_WL_FRAMEBURST_SOFTAP */
                } else {
                        WL_ERR(("failed to convert host chanspec to fw chanspec\n"));
                        err = BCME_ERROR;
                }
        } else {
change_bw:
                if (bw == WL_CHANSPEC_BW_80)
                        bw = WL_CHANSPEC_BW_40;
                else if (bw == WL_CHANSPEC_BW_40)
                        bw = WL_CHANSPEC_BW_20;
                else
                        bw = 0;
                if (bw)
                        goto set_channel;
                WL_ERR(("Invalid chanspec 0x%x\n", chspec));
                err = BCME_ERROR;
        }
#ifdef CUSTOM_SET_CPUCORE
        if (dhd->op_mode == DHD_FLAG_HOSTAP_MODE) {
                WL_DBG(("SoftAP mode do not need to set cpucore\n"));
        } else if (chspec & WL_CHANSPEC_BW_80) {
                /* SoftAp only mode do not need to set cpucore */
                if ((dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP) &&
                        dev != bcmcfg_to_prmry_ndev(cfg)) {
                        /* Soft AP on virtual Iface (AP+STA case) */
                        dhd->chan_isvht80 |= DHD_FLAG_HOSTAP_MODE;
                        dhd_set_cpucore(dhd, TRUE);
                } else if (is_p2p_group_iface(dev->ieee80211_ptr)) {
                        /* If P2P IF is vht80 */
                        dhd->chan_isvht80 |= DHD_FLAG_P2P_MODE;
                        dhd_set_cpucore(dhd, TRUE);
                }
        }
#endif /* CUSTOM_SET_CPUCORE */
        if (!err && (wl_get_mode_by_netdev(cfg, dev) == WL_MODE_AP)) {
                /* Update AP/GO operating channel */
                cfg->ap_oper_channel = ieee80211_frequency_to_channel(chan->center_freq);
        }
        if (err) {
                wl_flush_fw_log_buffer(bcmcfg_to_prmry_ndev(cfg),
                        FW_LOGSET_MASK_ALL);
        }
        return err;
}

#ifdef WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST
struct net_device *
wl_cfg80211_get_remain_on_channel_ndev(struct bcm_cfg80211 *cfg)
{
        struct net_info *_net_info, *next;
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
        list_for_each_entry_safe(_net_info, next, &cfg->net_list, list) {
                if (_net_info->ndev &&
                        test_bit(WL_STATUS_REMAINING_ON_CHANNEL, &_net_info->sme_state))
                        return _net_info->ndev;
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
        return NULL;
}
#endif /* WL_CFG80211_VSDB_PRIORITIZE_SCAN_REQUEST */

static s32
wl_validate_opensecurity(struct net_device *dev, s32 bssidx, bool privacy)
{
        s32 err = BCME_OK;
        u32 wpa_val;
        s32 wsec = 0;

        /* set auth */
        err = wldev_iovar_setint_bsscfg(dev, "auth", 0, bssidx);
        if (err < 0) {
                WL_ERR(("auth error %d\n", err));
                return BCME_ERROR;
        }

        if (privacy) {
                /* If privacy bit is set in open mode, then WEP would be enabled */
                wsec = WEP_ENABLED;
                WL_DBG(("Setting wsec to %d for WEP \n", wsec));
        }

        /* set wsec */
        err = wldev_iovar_setint_bsscfg(dev, "wsec", wsec, bssidx);
        if (err < 0) {
                WL_ERR(("wsec error %d\n", err));
                return BCME_ERROR;
        }

        /* set upper-layer auth */
        if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_ADHOC)
                wpa_val = WPA_AUTH_NONE;
        else
                wpa_val = WPA_AUTH_DISABLED;
        err = wldev_iovar_setint_bsscfg(dev, "wpa_auth", wpa_val, bssidx);
        if (err < 0) {
                WL_ERR(("wpa_auth error %d\n", err));
                return BCME_ERROR;
        }

        return 0;
}

static s32
wl_validate_fils_ind_ie(struct net_device *dev, const bcm_tlv_t *filsindie, s32 bssidx)
{
        s32 err = BCME_OK;
        struct bcm_cfg80211 *cfg = NULL;

        if (!dev || !filsindie) {
                WL_ERR(("%s: dev/filsidie is null\n", __FUNCTION__));
                return BCME_ERROR;
        }

        cfg = wl_get_cfg(dev);
        if (!cfg) {
                WL_ERR(("%s: cfg is null\n", __FUNCTION__));
                return BCME_ERROR;
        }

        err = wldev_iovar_setbuf_bsscfg(dev, "fils_ind", (const void *)filsindie->data,
                filsindie->len, cfg->ioctl_buf, WLC_IOCTL_SMLEN,
                bssidx, &cfg->ioctl_buf_sync);
        if (err < 0) {
                WL_ERR(("FILS Ind setting error %d\n", err));
        }

        return err;
}

static s32
wl_validate_wpa2ie(struct net_device *dev, const bcm_tlv_t *wpa2ie, s32 bssidx)
{
        s32 len = 0;
        s32 err = BCME_OK;
        u16 auth = 0; /* d11 open authentication */
        u32 wsec;
        u32 pval = 0;
        u32 gval = 0;
        u32 wpa_auth = 0;
        const wpa_suite_mcast_t *mcast;
        const wpa_suite_ucast_t *ucast;
        const wpa_suite_auth_key_mgmt_t *mgmt;
        const wpa_pmkid_list_t *pmkid;
        int cnt = 0;
#ifdef MFP
        int mfp = 0;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
#endif /* MFP */

        u16 suite_count;
        u8 rsn_cap[2];
        u32 wme_bss_disable;

        if (wpa2ie == NULL)
                goto exit;

        WL_DBG(("Enter \n"));
        len =  wpa2ie->len - WPA2_VERSION_LEN;
        /* check the mcast cipher */
        mcast = (const wpa_suite_mcast_t *)&wpa2ie->data[WPA2_VERSION_LEN];
        switch (mcast->type) {
                case WPA_CIPHER_NONE:
                        gval = 0;
                        break;
                case WPA_CIPHER_WEP_40:
                case WPA_CIPHER_WEP_104:
                        gval = WEP_ENABLED;
                        break;
                case WPA_CIPHER_TKIP:
                        gval = TKIP_ENABLED;
                        break;
                case WPA_CIPHER_AES_CCM:
                        gval = AES_ENABLED;
                        break;
#ifdef BCMWAPI_WPI
                case WAPI_CIPHER_SMS4:
                        gval = SMS4_ENABLED;
                        break;
#endif // endif
                default:
                        WL_ERR(("No Security Info\n"));
                        break;
        }
        if ((len -= WPA_SUITE_LEN) <= 0)
                return BCME_BADLEN;

        /* check the unicast cipher */
        ucast = (const wpa_suite_ucast_t *)&mcast[1];
        suite_count = ltoh16_ua(&ucast->count);
        switch (ucast->list[0].type) {
                case WPA_CIPHER_NONE:
                        pval = 0;
                        break;
                case WPA_CIPHER_WEP_40:
                case WPA_CIPHER_WEP_104:
                        pval = WEP_ENABLED;
                        break;
                case WPA_CIPHER_TKIP:
                        pval = TKIP_ENABLED;
                        break;
                case WPA_CIPHER_AES_CCM:
                        pval = AES_ENABLED;
                        break;
#ifdef BCMWAPI_WPI
                case WAPI_CIPHER_SMS4:
                        pval = SMS4_ENABLED;
                        break;
#endif // endif
                default:
                        WL_ERR(("No Security Info\n"));
        }
        if ((len -= (WPA_IE_SUITE_COUNT_LEN + (WPA_SUITE_LEN * suite_count))) <= 0)
                return BCME_BADLEN;

        /* FOR WPS , set SEC_OW_ENABLED */
        wsec = (pval | gval | SES_OW_ENABLED);
        /* check the AKM */
        mgmt = (const wpa_suite_auth_key_mgmt_t *)&ucast->list[suite_count];
        suite_count = cnt = ltoh16_ua(&mgmt->count);
        while (cnt--) {
                switch (mgmt->list[cnt].type) {
                case RSN_AKM_NONE:
                        wpa_auth |= WPA_AUTH_NONE;
                        break;
                case RSN_AKM_UNSPECIFIED:
                        wpa_auth |= WPA2_AUTH_UNSPECIFIED;
                        break;
                case RSN_AKM_PSK:
                        wpa_auth |= WPA2_AUTH_PSK;
                        break;
#ifdef MFP
                case RSN_AKM_MFP_PSK:
                        wpa_auth |= WPA2_AUTH_PSK_SHA256;
                        break;
                case RSN_AKM_MFP_1X:
                        wpa_auth |= WPA2_AUTH_1X_SHA256;
                        break;
                case RSN_AKM_FILS_SHA256:
                        wpa_auth |= WPA2_AUTH_FILS_SHA256;
                        break;
                case RSN_AKM_FILS_SHA384:
                        wpa_auth |= WPA2_AUTH_FILS_SHA384;
                        break;
#endif /* MFP */
                default:
                        WL_ERR(("No Key Mgmt Info\n"));
                }
        }

        if ((len -= (WPA_IE_SUITE_COUNT_LEN + (WPA_SUITE_LEN * suite_count))) >= RSN_CAP_LEN) {
                rsn_cap[0] = *(const u8 *)&mgmt->list[suite_count];
                rsn_cap[1] = *((const u8 *)&mgmt->list[suite_count] + 1);

                if (rsn_cap[0] & (RSN_CAP_16_REPLAY_CNTRS << RSN_CAP_PTK_REPLAY_CNTR_SHIFT)) {
                        wme_bss_disable = 0;
                } else {
                        wme_bss_disable = 1;
                }

#ifdef MFP
        if (rsn_cap[0] & RSN_CAP_MFPR) {
                WL_DBG(("MFP Required \n"));
                mfp = WL_MFP_REQUIRED;
                /* Our firmware has requirement that WPA2_AUTH_PSK/WPA2_AUTH_UNSPECIFIED
                 * be set, if SHA256 OUI is to be included in the rsn ie.
                 */
                if (wpa_auth & WPA2_AUTH_PSK_SHA256) {
                        wpa_auth |= WPA2_AUTH_PSK;
                } else if (wpa_auth & WPA2_AUTH_1X_SHA256) {
                        wpa_auth |= WPA2_AUTH_UNSPECIFIED;
                }
        } else if (rsn_cap[0] & RSN_CAP_MFPC) {
                WL_DBG(("MFP Capable \n"));
                mfp = WL_MFP_CAPABLE;
        }
#endif /* MFP */

                /* set wme_bss_disable to sync RSN Capabilities */
                err = wldev_iovar_setint_bsscfg(dev, "wme_bss_disable", wme_bss_disable, bssidx);
                if (err < 0) {
                        WL_ERR(("wme_bss_disable error %d\n", err));
                        return BCME_ERROR;
                }
        } else {
                WL_DBG(("There is no RSN Capabilities. remained len %d\n", len));
        }

        len -= RSN_CAP_LEN;
        if (len >= WPA2_PMKID_COUNT_LEN) {
                pmkid = (const wpa_pmkid_list_t *)
                        ((const u8 *)&mgmt->list[suite_count] + RSN_CAP_LEN);
                cnt = ltoh16_ua(&pmkid->count);
                if (cnt != 0) {
                        WL_ERR(("AP has non-zero PMKID count. Wrong!\n"));
                        return BCME_ERROR;
                }
                /* since PMKID cnt is known to be 0 for AP, */
                /* so don't bother to send down this info to firmware */
        }

#ifdef MFP
        len -= WPA2_PMKID_COUNT_LEN;
        if (len >= WPA_SUITE_LEN) {
                cfg->bip_pos =
                        (const u8 *)&mgmt->list[suite_count] + RSN_CAP_LEN + WPA2_PMKID_COUNT_LEN;
        } else {
                cfg->bip_pos = NULL;
        }
#endif // endif

        /* set auth */
        err = wldev_iovar_setint_bsscfg(dev, "auth", auth, bssidx);
        if (err < 0) {
                WL_ERR(("auth error %d\n", err));
                return BCME_ERROR;
        }

        /* set wsec */
        err = wldev_iovar_setint_bsscfg(dev, "wsec", wsec, bssidx);
        if (err < 0) {
                WL_ERR(("wsec error %d\n", err));
                return BCME_ERROR;
        }

#ifdef MFP
        cfg->mfp_mode = mfp;
#endif /* MFP */

        /* set upper-layer auth */
        err = wldev_iovar_setint_bsscfg(dev, "wpa_auth", wpa_auth, bssidx);
        if (err < 0) {
                WL_ERR(("wpa_auth error %d\n", err));
                return BCME_ERROR;
        }
exit:
        return 0;
}

static s32
wl_validate_wpaie(struct net_device *dev, const wpa_ie_fixed_t *wpaie, s32 bssidx)
{
        const wpa_suite_mcast_t *mcast;
        const wpa_suite_ucast_t *ucast;
        const wpa_suite_auth_key_mgmt_t *mgmt;
        u16 auth = 0; /* d11 open authentication */
        u16 count;
        s32 err = BCME_OK;
        s32 len = 0;
        u32 i;
        u32 wsec;
        u32 pval = 0;
        u32 gval = 0;
        u32 wpa_auth = 0;
        u32 tmp = 0;

        if (wpaie == NULL)
                goto exit;
        WL_DBG(("Enter \n"));
        len = wpaie->length;    /* value length */
        len -= WPA_IE_TAG_FIXED_LEN;
        /* check for multicast cipher suite */
        if (len < WPA_SUITE_LEN) {
                WL_INFORM_MEM(("no multicast cipher suite\n"));
                goto exit;
        }

        /* pick up multicast cipher */
        mcast = (const wpa_suite_mcast_t *)&wpaie[1];
        len -= WPA_SUITE_LEN;
        if (!bcmp(mcast->oui, WPA_OUI, WPA_OUI_LEN)) {
                if (IS_WPA_CIPHER(mcast->type)) {
                        tmp = 0;
                        switch (mcast->type) {
                                case WPA_CIPHER_NONE:
                                        tmp = 0;
                                        break;
                                case WPA_CIPHER_WEP_40:
                                case WPA_CIPHER_WEP_104:
                                        tmp = WEP_ENABLED;
                                        break;
                                case WPA_CIPHER_TKIP:
                                        tmp = TKIP_ENABLED;
                                        break;
                                case WPA_CIPHER_AES_CCM:
                                        tmp = AES_ENABLED;
                                        break;
                                default:
                                        WL_ERR(("No Security Info\n"));
                        }
                        gval |= tmp;
                }
        }
        /* Check for unicast suite(s) */
        if (len < WPA_IE_SUITE_COUNT_LEN) {
                WL_INFORM_MEM(("no unicast suite\n"));
                goto exit;
        }
        /* walk thru unicast cipher list and pick up what we recognize */
        ucast = (const wpa_suite_ucast_t *)&mcast[1];
        count = ltoh16_ua(&ucast->count);
        len -= WPA_IE_SUITE_COUNT_LEN;
        for (i = 0; i < count && len >= WPA_SUITE_LEN;
                i++, len -= WPA_SUITE_LEN) {
                if (!bcmp(ucast->list[i].oui, WPA_OUI, WPA_OUI_LEN)) {
                        if (IS_WPA_CIPHER(ucast->list[i].type)) {
                                tmp = 0;
                                switch (ucast->list[i].type) {
                                        case WPA_CIPHER_NONE:
                                                tmp = 0;
                                                break;
                                        case WPA_CIPHER_WEP_40:
                                        case WPA_CIPHER_WEP_104:
                                                tmp = WEP_ENABLED;
                                                break;
                                        case WPA_CIPHER_TKIP:
                                                tmp = TKIP_ENABLED;
                                                break;
                                        case WPA_CIPHER_AES_CCM:
                                                tmp = AES_ENABLED;
                                                break;
                                        default:
                                                WL_ERR(("No Security Info\n"));
                                }
                                pval |= tmp;
                        }
                }
        }
        len -= (count - i) * WPA_SUITE_LEN;
        /* Check for auth key management suite(s) */
        if (len < WPA_IE_SUITE_COUNT_LEN) {
                WL_INFORM_MEM((" no auth key mgmt suite\n"));
                goto exit;
        }
        /* walk thru auth management suite list and pick up what we recognize */
        mgmt = (const wpa_suite_auth_key_mgmt_t *)&ucast->list[count];
        count = ltoh16_ua(&mgmt->count);
        len -= WPA_IE_SUITE_COUNT_LEN;
        for (i = 0; i < count && len >= WPA_SUITE_LEN;
                i++, len -= WPA_SUITE_LEN) {
                if (!bcmp(mgmt->list[i].oui, WPA_OUI, WPA_OUI_LEN)) {
                        if (IS_WPA_AKM(mgmt->list[i].type)) {
                                tmp = 0;
                                switch (mgmt->list[i].type) {
                                        case RSN_AKM_NONE:
                                                tmp = WPA_AUTH_NONE;
                                                break;
                                        case RSN_AKM_UNSPECIFIED:
                                                tmp = WPA_AUTH_UNSPECIFIED;
                                                break;
                                        case RSN_AKM_PSK:
                                                tmp = WPA_AUTH_PSK;
                                                break;
                                        default:
                                                WL_ERR(("No Key Mgmt Info\n"));
                                }
                                wpa_auth |= tmp;
                        }
                }

        }
        /* FOR WPS , set SEC_OW_ENABLED */
        wsec = (pval | gval | SES_OW_ENABLED);
        /* set auth */
        err = wldev_iovar_setint_bsscfg(dev, "auth", auth, bssidx);
        if (err < 0) {
                WL_ERR(("auth error %d\n", err));
                return BCME_ERROR;
        }
        /* set wsec */
        err = wldev_iovar_setint_bsscfg(dev, "wsec", wsec, bssidx);
        if (err < 0) {
                WL_ERR(("wsec error %d\n", err));
                return BCME_ERROR;
        }
        /* set upper-layer auth */
        err = wldev_iovar_setint_bsscfg(dev, "wpa_auth", wpa_auth, bssidx);
        if (err < 0) {
                WL_ERR(("wpa_auth error %d\n", err));
                return BCME_ERROR;
        }
exit:
        return 0;
}

#if defined(SUPPORT_SOFTAP_WPAWPA2_MIXED)
static u32 wl_get_cipher_type(uint8 type)
{
        u32 ret = 0;
        switch (type) {
                case WPA_CIPHER_NONE:
                        ret = 0;
                        break;
                case WPA_CIPHER_WEP_40:
                case WPA_CIPHER_WEP_104:
                        ret = WEP_ENABLED;
                        break;
                case WPA_CIPHER_TKIP:
                        ret = TKIP_ENABLED;
                        break;
                case WPA_CIPHER_AES_CCM:
                        ret = AES_ENABLED;
                        break;
#ifdef BCMWAPI_WPI
                case WAPI_CIPHER_SMS4:
                        ret = SMS4_ENABLED;
                        break;
#endif // endif
                default:
                        WL_ERR(("No Security Info\n"));
        }
        return ret;
}

static u32 wl_get_suite_auth_key_mgmt_type(uint8 type, const wpa_suite_mcast_t *mcast)
{
        u32 ret = 0;
        u32 is_wpa2 = 0;

        if (!bcmp(mcast->oui, WPA2_OUI, WPA2_OUI_LEN)) {
                is_wpa2 = 1;
        }

        WL_INFORM_MEM(("%s, type = %d\n", is_wpa2 ? "WPA2":"WPA", type));
        switch (type) {
                case RSN_AKM_NONE:
                        /* For WPA and WPA2, AUTH_NONE is common */
                        ret = WPA_AUTH_NONE;
                        break;
                case RSN_AKM_UNSPECIFIED:
                        if (is_wpa2) {
                                ret = WPA2_AUTH_UNSPECIFIED;
                        } else {
                                ret = WPA_AUTH_UNSPECIFIED;
                        }
                        break;
                case RSN_AKM_PSK:
                        if (is_wpa2) {
                                ret = WPA2_AUTH_PSK;
                        } else {
                                ret = WPA_AUTH_PSK;
                        }
                        break;
                default:
                        WL_ERR(("No Key Mgmt Info\n"));
        }

        return ret;
}

static s32
wl_validate_wpaie_wpa2ie(struct net_device *dev, const wpa_ie_fixed_t *wpaie,
        const bcm_tlv_t *wpa2ie, s32 bssidx)
{
        const wpa_suite_mcast_t *mcast;
        const wpa_suite_ucast_t *ucast;
        const wpa_suite_auth_key_mgmt_t *mgmt;
        u16 auth = 0; /* d11 open authentication */
        u16 count;
        s32 err = BCME_OK;
        u32 wme_bss_disable;
        u16 suite_count;
        u8 rsn_cap[2];
        s32 len = 0;
        u32 i;
        u32 wsec1, wsec2, wsec;
        u32 pval = 0;
        u32 gval = 0;
        u32 wpa_auth = 0;
        u32 wpa_auth1 = 0;
        u32 wpa_auth2 = 0;

        if (wpaie == NULL || wpa2ie == NULL)
                goto exit;

        WL_DBG(("Enter \n"));
        len = wpaie->length;    /* value length */
        len -= WPA_IE_TAG_FIXED_LEN;
        /* check for multicast cipher suite */
        if (len < WPA_SUITE_LEN) {
                WL_INFORM_MEM(("no multicast cipher suite\n"));
                goto exit;
        }

        /* pick up multicast cipher */
        mcast = (const wpa_suite_mcast_t *)&wpaie[1];
        len -= WPA_SUITE_LEN;
        if (!bcmp(mcast->oui, WPA_OUI, WPA_OUI_LEN)) {
                if (IS_WPA_CIPHER(mcast->type)) {
                        gval |= wl_get_cipher_type(mcast->type);
                }
        }
        WL_DBG(("\nwpa ie validate\n"));
        WL_DBG(("wpa ie mcast cipher = 0x%X\n", gval));

        /* Check for unicast suite(s) */
        if (len < WPA_IE_SUITE_COUNT_LEN) {
                WL_INFORM_MEM(("no unicast suite\n"));
                goto exit;
        }

        /* walk thru unicast cipher list and pick up what we recognize */
        ucast = (const wpa_suite_ucast_t *)&mcast[1];
        count = ltoh16_ua(&ucast->count);
        len -= WPA_IE_SUITE_COUNT_LEN;
        for (i = 0; i < count && len >= WPA_SUITE_LEN;
                i++, len -= WPA_SUITE_LEN) {
                if (!bcmp(ucast->list[i].oui, WPA_OUI, WPA_OUI_LEN)) {
                        if (IS_WPA_CIPHER(ucast->list[i].type)) {
                                pval |= wl_get_cipher_type(ucast->list[i].type);
                        }
                }
        }
        WL_ERR(("wpa ie ucast count =%d, cipher = 0x%X\n", count, pval));

        /* FOR WPS , set SEC_OW_ENABLED */
        wsec1 = (pval | gval | SES_OW_ENABLED);
        WL_ERR(("wpa ie wsec = 0x%X\n", wsec1));

        len -= (count - i) * WPA_SUITE_LEN;
        /* Check for auth key management suite(s) */
        if (len < WPA_IE_SUITE_COUNT_LEN) {
                WL_INFORM_MEM((" no auth key mgmt suite\n"));
                goto exit;
        }
        /* walk thru auth management suite list and pick up what we recognize */
        mgmt = (const wpa_suite_auth_key_mgmt_t *)&ucast->list[count];
        count = ltoh16_ua(&mgmt->count);
        len -= WPA_IE_SUITE_COUNT_LEN;
        for (i = 0; i < count && len >= WPA_SUITE_LEN;
                i++, len -= WPA_SUITE_LEN) {
                if (!bcmp(mgmt->list[i].oui, WPA_OUI, WPA_OUI_LEN)) {
                        if (IS_WPA_AKM(mgmt->list[i].type)) {
                                wpa_auth1 |=
                                        wl_get_suite_auth_key_mgmt_type(mgmt->list[i].type, mcast);
                        }
                }

        }
        WL_ERR(("wpa ie wpa_suite_auth_key_mgmt count=%d, key_mgmt = 0x%X\n", count, wpa_auth1));
        WL_ERR(("\nwpa2 ie validate\n"));

        pval = 0;
        gval = 0;
        len =  wpa2ie->len;
        /* check the mcast cipher */
        mcast = (const wpa_suite_mcast_t *)&wpa2ie->data[WPA2_VERSION_LEN];
        gval = wl_get_cipher_type(mcast->type);

        WL_ERR(("wpa2 ie mcast cipher = 0x%X\n", gval));
        if ((len -= WPA_SUITE_LEN) <= 0)
        {
                WL_ERR(("P:wpa2 ie len[%d]", len));
                return BCME_BADLEN;
        }

        /* check the unicast cipher */
        ucast = (const wpa_suite_ucast_t *)&mcast[1];
        suite_count = ltoh16_ua(&ucast->count);
        WL_ERR((" WPA2 ucast cipher count=%d\n", suite_count));
        pval |= wl_get_cipher_type(ucast->list[0].type);

        if ((len -= (WPA_IE_SUITE_COUNT_LEN + (WPA_SUITE_LEN * suite_count))) <= 0)
                return BCME_BADLEN;

        WL_ERR(("wpa2 ie ucast cipher = 0x%X\n", pval));

        /* FOR WPS , set SEC_OW_ENABLED */
        wsec2 = (pval | gval | SES_OW_ENABLED);
        WL_ERR(("wpa2 ie wsec = 0x%X\n", wsec2));

        /* check the AKM */
        mgmt = (const wpa_suite_auth_key_mgmt_t *)&ucast->list[suite_count];
        suite_count = ltoh16_ua(&mgmt->count);
        wpa_auth2 = wl_get_suite_auth_key_mgmt_type(mgmt->list[0].type, mcast);
        WL_ERR(("wpa ie wpa_suite_auth_key_mgmt count=%d, key_mgmt = 0x%X\n", count, wpa_auth2));

        if ((len -= (WPA_IE_SUITE_COUNT_LEN + (WPA_SUITE_LEN * suite_count))) >= RSN_CAP_LEN) {
                rsn_cap[0] = *(const u8 *)&mgmt->list[suite_count];
                rsn_cap[1] = *((const u8 *)&mgmt->list[suite_count] + 1);
                if (rsn_cap[0] & (RSN_CAP_16_REPLAY_CNTRS << RSN_CAP_PTK_REPLAY_CNTR_SHIFT)) {
                        wme_bss_disable = 0;
                } else {
                        wme_bss_disable = 1;
                }
                WL_DBG(("P:rsn_cap[0]=[0x%X]:wme_bss_disabled[%d]\n", rsn_cap[0], wme_bss_disable));

                /* set wme_bss_disable to sync RSN Capabilities */
                err = wldev_iovar_setint_bsscfg(dev, "wme_bss_disable", wme_bss_disable, bssidx);
                if (err < 0) {
                        WL_ERR(("wme_bss_disable error %d\n", err));
                        return BCME_ERROR;
                }
        } else {
                WL_DBG(("There is no RSN Capabilities. remained len %d\n", len));
        }

        wsec = (wsec1 | wsec2);
        wpa_auth = (wpa_auth1 | wpa_auth2);
        WL_ERR(("wpa_wpa2 wsec=0x%X wpa_auth=0x%X\n", wsec, wpa_auth));

        /* set auth */
        err = wldev_iovar_setint_bsscfg(dev, "auth", auth, bssidx);
        if (err < 0) {
                WL_ERR(("auth error %d\n", err));
                return BCME_ERROR;
        }
        /* set wsec */
        err = wldev_iovar_setint_bsscfg(dev, "wsec", wsec, bssidx);
        if (err < 0) {
                WL_ERR(("wsec error %d\n", err));
                return BCME_ERROR;
        }
        /* set upper-layer auth */
        err = wldev_iovar_setint_bsscfg(dev, "wpa_auth", wpa_auth, bssidx);
        if (err < 0) {
                WL_ERR(("wpa_auth error %d\n", err));
                return BCME_ERROR;
        }
exit:
        return 0;
}
#endif /* SUPPORT_SOFTAP_WPAWPA2_MIXED */

static s32
wl_cfg80211_bcn_validate_sec(
        struct net_device *dev,
        struct parsed_ies *ies,
        u32 dev_role,
        s32 bssidx,
        bool privacy)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        wl_cfgbss_t *bss = wl_get_cfgbss_by_wdev(cfg, dev->ieee80211_ptr);

        if (!bss) {
                WL_ERR(("cfgbss is NULL \n"));
                return BCME_ERROR;
        }

        if (dev_role == NL80211_IFTYPE_P2P_GO && (ies->wpa2_ie)) {
                /* For P2P GO, the sec type is WPA2-PSK */
                WL_DBG(("P2P GO: validating wpa2_ie"));
                if (wl_validate_wpa2ie(dev, ies->wpa2_ie, bssidx)  < 0)
                        return BCME_ERROR;

        } else if (dev_role == NL80211_IFTYPE_AP) {

                WL_DBG(("SoftAP: validating security"));
                /* If wpa2_ie or wpa_ie is present validate it */

#if defined(SUPPORT_SOFTAP_WPAWPA2_MIXED)
                if ((ies->wpa_ie != NULL && ies->wpa2_ie != NULL)) {
                        if (wl_validate_wpaie_wpa2ie(dev, ies->wpa_ie, ies->wpa2_ie, bssidx)  < 0) {
                                bss->security_mode = false;
                                return BCME_ERROR;
                        }
                }
                else {
#endif /* SUPPORT_SOFTAP_WPAWPA2_MIXED */
                if ((ies->wpa2_ie || ies->wpa_ie) &&
                        ((wl_validate_wpa2ie(dev, ies->wpa2_ie, bssidx)  < 0 ||
                        wl_validate_wpaie(dev, ies->wpa_ie, bssidx) < 0))) {
                        bss->security_mode = false;
                        return BCME_ERROR;
                }

                if (ies->fils_ind_ie &&
                        (wl_validate_fils_ind_ie(dev, ies->fils_ind_ie, bssidx)  < 0)) {
                        bss->security_mode = false;
                        return BCME_ERROR;
                }

                bss->security_mode = true;
                if (bss->rsn_ie) {
                        MFREE(cfg->osh, bss->rsn_ie, bss->rsn_ie[1]
                                + WPA_RSN_IE_TAG_FIXED_LEN);
                        bss->rsn_ie = NULL;
                }
                if (bss->wpa_ie) {
                        MFREE(cfg->osh, bss->wpa_ie, bss->wpa_ie[1]
                                + WPA_RSN_IE_TAG_FIXED_LEN);
                        bss->wpa_ie = NULL;
                }
                if (bss->wps_ie) {
                        MFREE(cfg->osh, bss->wps_ie, bss->wps_ie[1] + 2);
                        bss->wps_ie = NULL;
                }
                if (bss->fils_ind_ie) {
                        MFREE(cfg->osh, bss->fils_ind_ie, bss->fils_ind_ie[1]
                                + FILS_INDICATION_IE_TAG_FIXED_LEN);
                        bss->fils_ind_ie = NULL;
                }
                if (ies->wpa_ie != NULL) {
                        /* WPAIE */
                        bss->rsn_ie = NULL;
                        bss->wpa_ie = MALLOCZ(cfg->osh,
                                        ies->wpa_ie->length
                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                        if (bss->wpa_ie) {
                                memcpy(bss->wpa_ie, ies->wpa_ie,
                                        ies->wpa_ie->length
                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                        }
                } else if (ies->wpa2_ie != NULL) {
                        /* RSNIE */
                        bss->wpa_ie = NULL;
                        bss->rsn_ie = MALLOCZ(cfg->osh,
                                        ies->wpa2_ie->len
                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                        if (bss->rsn_ie) {
                                memcpy(bss->rsn_ie, ies->wpa2_ie,
                                        ies->wpa2_ie->len
                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                        }
                }
#ifdef FILS_SUPPORT
                if (ies->fils_ind_ie) {
                        bss->fils_ind_ie = MALLOCZ(cfg->osh,
                                        ies->fils_ind_ie->len
                                        + FILS_INDICATION_IE_TAG_FIXED_LEN);
                        if (bss->fils_ind_ie) {
                                memcpy(bss->fils_ind_ie, ies->fils_ind_ie,
                                        ies->fils_ind_ie->len
                                        + FILS_INDICATION_IE_TAG_FIXED_LEN);
                        }
                }
#endif // endif
#if defined(SUPPORT_SOFTAP_WPAWPA2_MIXED)
                }
#endif /* SUPPORT_SOFTAP_WPAWPA2_MIXED */
                if (!ies->wpa2_ie && !ies->wpa_ie) {
                        wl_validate_opensecurity(dev, bssidx, privacy);
                        bss->security_mode = false;
                }

                if (ies->wps_ie) {
                        bss->wps_ie = MALLOCZ(cfg->osh, ies->wps_ie_len);
                        if (bss->wps_ie) {
                                memcpy(bss->wps_ie, ies->wps_ie, ies->wps_ie_len);
                        }
                }
        }

        return 0;

}

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0)) || defined(WL_COMPAT_WIRELESS)
static s32 wl_cfg80211_bcn_set_params(
        struct cfg80211_ap_settings *info,
        struct net_device *dev,
        u32 dev_role, s32 bssidx)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        s32 err = BCME_OK;

        WL_DBG(("interval (%d) \ndtim_period (%d) \n",
                info->beacon_interval, info->dtim_period));

        if (info->beacon_interval) {
                if ((err = wldev_ioctl_set(dev, WLC_SET_BCNPRD,
                        &info->beacon_interval, sizeof(s32))) < 0) {
                        WL_ERR(("Beacon Interval Set Error, %d\n", err));
                        return err;
                }
        }

        if (info->dtim_period) {
                if ((err = wldev_ioctl_set(dev, WLC_SET_DTIMPRD,
                        &info->dtim_period, sizeof(s32))) < 0) {
                        WL_ERR(("DTIM Interval Set Error, %d\n", err));
                        return err;
                }
        }

        if ((info->ssid) && (info->ssid_len > 0) &&
                (info->ssid_len <= DOT11_MAX_SSID_LEN)) {
                WL_DBG(("SSID (%s) len:%zd \n", info->ssid, info->ssid_len));
                if (dev_role == NL80211_IFTYPE_AP) {
                        /* Store the hostapd SSID */
                        memset(cfg->hostapd_ssid.SSID, 0x00, DOT11_MAX_SSID_LEN);
                        memcpy(cfg->hostapd_ssid.SSID, info->ssid, info->ssid_len);
                        cfg->hostapd_ssid.SSID_len = (uint32)info->ssid_len;
                } else {
                                /* P2P GO */
                        memset(cfg->p2p->ssid.SSID, 0x00, DOT11_MAX_SSID_LEN);
                        memcpy(cfg->p2p->ssid.SSID, info->ssid, info->ssid_len);
                        cfg->p2p->ssid.SSID_len = (uint32)info->ssid_len;
                }
        }

        return err;
}
#endif /* LINUX_VERSION >= VERSION(3,4,0) || WL_COMPAT_WIRELESS */

static s32
wl_cfg80211_parse_ies(const u8 *ptr, u32 len, struct parsed_ies *ies)
{
        s32 err = BCME_OK;

        memset(ies, 0, sizeof(struct parsed_ies));

        /* find the WPSIE */
        if ((ies->wps_ie = wl_cfgp2p_find_wpsie(ptr, len)) != NULL) {
                WL_DBG(("WPSIE in beacon \n"));
                ies->wps_ie_len = ies->wps_ie->length + WPA_RSN_IE_TAG_FIXED_LEN;
        } else {
                WL_ERR(("No WPSIE in beacon \n"));
        }

        /* find the RSN_IE */
        if ((ies->wpa2_ie = bcm_parse_tlvs(ptr, len,
                DOT11_MNG_RSN_ID)) != NULL) {
                WL_DBG((" WPA2 IE found\n"));
                ies->wpa2_ie_len = ies->wpa2_ie->len;
        }

        /* find the FILS_IND_IE */
        if ((ies->fils_ind_ie = bcm_parse_tlvs(ptr, len,
                DOT11_MNG_FILS_IND_ID)) != NULL) {
                WL_DBG((" FILS IND IE found\n"));
                ies->fils_ind_ie_len = ies->fils_ind_ie->len;
        }

        /* find the WPA_IE */
        if ((ies->wpa_ie = wl_cfgp2p_find_wpaie(ptr, len)) != NULL) {
                WL_DBG((" WPA found\n"));
                ies->wpa_ie_len = ies->wpa_ie->length;
        }

        return err;

}
static s32
wl_cfg80211_set_ap_role(
        struct bcm_cfg80211 *cfg,
        struct net_device *dev)
{
        s32 err = BCME_OK;
        s32 infra = 1;
        s32 ap = 1;
        s32 pm;
        s32 is_rsdb_supported = BCME_ERROR;
        s32 bssidx;
        s32 apsta = 0;

        is_rsdb_supported = DHD_OPMODE_SUPPORTED(cfg->pub, DHD_FLAG_RSDB_MODE);
        if (is_rsdb_supported < 0)
                return (-ENODEV);

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return -EINVAL;
        }

        WL_INFORM_MEM(("[%s] Bringup SoftAP on bssidx:%d \n", dev->name, bssidx));

        /* AP on primary Interface */
        if (bssidx == 0) {
                if (is_rsdb_supported) {
                        if ((err = wl_cfg80211_add_del_bss(cfg, dev, bssidx,
                                WL_IF_TYPE_AP, 0, NULL)) < 0) {
                                WL_ERR(("wl add_del_bss returned error:%d\n", err));
                                return err;
                        }
                } else if (is_rsdb_supported == 0) {
                        /* AP mode switch not supported. Try setting up AP explicitly */
                        err = wldev_iovar_getint(dev, "apsta", (s32 *)&apsta);
                        if (unlikely(err)) {
                                WL_ERR(("Could not get apsta %d\n", err));
                        }
                        if (apsta == 0) {
                                /* If apsta is not set, set it */
                                err = wldev_ioctl_set(dev, WLC_DOWN, &ap, sizeof(s32));
                                if (err < 0) {
                                        WL_ERR(("WLC_DOWN error %d\n", err));
                                        return err;
                                }
                                err = wldev_iovar_setint(dev, "apsta", 0);
                                if (err < 0) {
                                        WL_ERR(("wl apsta 0 error %d\n", err));
                                        return err;
                                }
                                if ((err = wldev_ioctl_set(dev,
                                        WLC_SET_AP, &ap, sizeof(s32))) < 0) {
                                        WL_ERR(("setting AP mode failed %d \n", err));
                                        return err;
                                }
                        }
                }

                pm = 0;
                if ((err = wldev_ioctl_set(dev, WLC_SET_PM, &pm, sizeof(pm))) != 0) {
                        WL_ERR(("wl PM 0 returned error:%d\n", err));
                        /* Ignore error, if any */
                        err = BCME_OK;
                }
                err = wldev_ioctl_set(dev, WLC_SET_INFRA, &infra, sizeof(s32));
                if (err < 0) {
                        WL_ERR(("SET INFRA error %d\n", err));
                        return err;
                }
        } else {
                if ((err = wl_cfg80211_add_del_bss(cfg, dev,
                        bssidx, WL_IF_TYPE_AP, 0, NULL)) < 0) {
                        WL_ERR(("wl bss ap returned error:%d\n", err));
                        return err;
                }
        }

        /* On success, mark AP creation in progress. */
        wl_set_drv_status(cfg, AP_CREATING, dev);
        return 0;
}

/* In RSDB downgrade cases, the link up event can get delayed upto 7-8 secs */
#define MAX_AP_LINK_WAIT_TIME   10000
static s32
wl_cfg80211_bcn_bringup_ap(
        struct net_device *dev,
        struct parsed_ies *ies,
        u32 dev_role, s32 bssidx)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct wl_join_params join_params;
        bool is_bssup = false;
        s32 infra = 1;
        s32 join_params_size = 0;
        s32 ap = 1;
        s32 wsec;
#ifdef DISABLE_11H_SOFTAP
        s32 spect = 0;
#endif /* DISABLE_11H_SOFTAP */
#ifdef SOFTAP_UAPSD_OFF
        uint32 wme_apsd = 0;
#endif /* SOFTAP_UAPSD_OFF */
        s32 err = BCME_OK;
        s32 is_rsdb_supported = BCME_ERROR;
        long timeout;
#if defined(DHD_DEBUG) && defined(DHD_FW_COREDUMP)
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
#endif /* DHD_DEBUG && DHD_FW_COREDUMP */

        is_rsdb_supported = DHD_OPMODE_SUPPORTED(cfg->pub, DHD_FLAG_RSDB_MODE);
        if (is_rsdb_supported < 0)
                return (-ENODEV);

        WL_DBG(("Enter dev_role:%d bssidx:%d ifname:%s\n", dev_role, bssidx, dev->name));

        if (wl_check_dongle_idle(bcmcfg_to_wiphy(cfg)) != TRUE) {
                WL_ERR(("FW is busy to add interface"));
                return -EINVAL;
        }

        /* Common code for SoftAP and P2P GO */
        wl_clr_drv_status(cfg, AP_CREATED, dev);

        /* Make sure INFRA is set for AP/GO */
        err = wldev_ioctl_set(dev, WLC_SET_INFRA, &infra, sizeof(s32));
        if (err < 0) {
                WL_ERR(("SET INFRA error %d\n", err));
                goto exit;
        }

        /* Do abort scan before creating GO */
        wl_cfg80211_scan_abort(cfg);

        if (dev_role == NL80211_IFTYPE_P2P_GO) {
                is_bssup = wl_cfg80211_bss_isup(dev, bssidx);
                if (!is_bssup && (ies->wpa2_ie != NULL)) {

                        err = wldev_iovar_setbuf_bsscfg(dev, "ssid", &cfg->p2p->ssid,
                                sizeof(cfg->p2p->ssid), cfg->ioctl_buf, WLC_IOCTL_MAXLEN,
                                bssidx, &cfg->ioctl_buf_sync);
                        if (err < 0) {
                                WL_ERR(("GO SSID setting error %d\n", err));
                                goto exit;
                        }

                        if ((err = wl_cfg80211_bss_up(cfg, dev, bssidx, 1)) < 0) {
                                WL_ERR(("GO Bring up error %d\n", err));
                                goto exit;
                        }
                } else
                        WL_DBG(("Bss is already up\n"));
        } else if (dev_role == NL80211_IFTYPE_AP) {

                if (!wl_get_drv_status(cfg, AP_CREATING, dev)) {
                        /* Make sure fw is in proper state */
                        err = wl_cfg80211_set_ap_role(cfg, dev);
                        if (unlikely(err)) {
                                WL_ERR(("set ap role failed!\n"));
                                goto exit;
                        }
                }

                /* Device role SoftAP */
                WL_DBG(("Creating AP bssidx:%d dev_role:%d\n", bssidx, dev_role));
                /* Clear the status bit after use */
                wl_clr_drv_status(cfg, AP_CREATING, dev);

#ifdef DISABLE_11H_SOFTAP
                if (is_rsdb_supported == 0) {
                        err = wldev_ioctl_set(dev, WLC_DOWN, &ap, sizeof(s32));
                        if (err < 0) {
                                WL_ERR(("WLC_DOWN error %d\n", err));
                                goto exit;
                        }
                }
                err = wldev_ioctl_set(dev, WLC_SET_SPECT_MANAGMENT,
                        &spect, sizeof(s32));
                if (err < 0) {
                        WL_ERR(("SET SPECT_MANAGMENT error %d\n", err));
                        goto exit;
                }
#endif /* DISABLE_11H_SOFTAP */

#ifdef SOFTAP_UAPSD_OFF
                err = wldev_iovar_setbuf_bsscfg(dev, "wme_apsd", &wme_apsd, sizeof(wme_apsd),
                        cfg->ioctl_buf, WLC_IOCTL_SMLEN, bssidx, &cfg->ioctl_buf_sync);
                if (err < 0) {
                        WL_ERR(("failed to disable uapsd, error=%d\n", err));
                }
#endif /* SOFTAP_UAPSD_OFF */

                err = wldev_ioctl_set(dev, WLC_UP, &ap, sizeof(s32));
                if (unlikely(err)) {
                        WL_ERR(("WLC_UP error (%d)\n", err));
                        goto exit;
                }

#ifdef MFP
                if (cfg->bip_pos) {
                        err = wldev_iovar_setbuf_bsscfg(dev, "bip",
                                (const void *)(cfg->bip_pos), WPA_SUITE_LEN, cfg->ioctl_buf,
                                WLC_IOCTL_SMLEN, bssidx, &cfg->ioctl_buf_sync);
                        if (err < 0) {
                                WL_ERR(("bip set error %d\n", err));
#if defined(CUSTOMER_HW4)
                                if (wl_legacy_chip_check(cfg))
                                {
                                        /* Ignore bip error: Some older firmwares doesn't
                                         * support bip iovar/ return BCME_NOTUP while trying
                                         * to set bip from AP bring up context. These firmares
                                         * include bip in RSNIE by default. So its okay to ignore
                                         * the error.
                                         */
                                        err = BCME_OK;
                                } else
#endif // endif
                                {
                                        goto exit;
                                }
                        }
                }
#endif /* MFP */

                err = wldev_iovar_getint(dev, "wsec", (s32 *)&wsec);
                if (unlikely(err)) {
                        WL_ERR(("Could not get wsec %d\n", err));
                        goto exit;
                }
                if ((wsec == WEP_ENABLED) && cfg->wep_key.len) {
                        WL_DBG(("Applying buffered WEP KEY \n"));
                        err = wldev_iovar_setbuf_bsscfg(dev, "wsec_key", &cfg->wep_key,
                                sizeof(struct wl_wsec_key), cfg->ioctl_buf,
                                WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync);
                        /* clear the key after use */
                        memset(&cfg->wep_key, 0, sizeof(struct wl_wsec_key));
                        if (unlikely(err)) {
                                WL_ERR(("WLC_SET_KEY error (%d)\n", err));
                                goto exit;
                        }
                }

#ifdef MFP
                if (cfg->mfp_mode) {
                        /* This needs to go after wsec otherwise the wsec command will
                         * overwrite the values set by MFP
                         */
                        err = wldev_iovar_setint_bsscfg(dev, "mfp", cfg->mfp_mode, bssidx);
                        if (err < 0) {
                                WL_ERR(("MFP Setting failed. ret = %d \n", err));
                                /* If fw doesn't support mfp, Ignore the error */
                                if (err != BCME_UNSUPPORTED) {
                                        goto exit;
                                }
                        }
                }
#endif /* MFP */

                memset(&join_params, 0, sizeof(join_params));
                /* join parameters starts with ssid */
                join_params_size = sizeof(join_params.ssid);
                join_params.ssid.SSID_len = MIN(cfg->hostapd_ssid.SSID_len,
                        (uint32)DOT11_MAX_SSID_LEN);
                memcpy(join_params.ssid.SSID, cfg->hostapd_ssid.SSID,
                        join_params.ssid.SSID_len);
                join_params.ssid.SSID_len = htod32(join_params.ssid.SSID_len);

                /* create softap */
                if ((err = wldev_ioctl_set(dev, WLC_SET_SSID, &join_params,
                        join_params_size)) != 0) {
                        WL_ERR(("SoftAP/GO set ssid failed! \n"));
                        goto exit;
                } else {
                        WL_DBG((" SoftAP SSID \"%s\" \n", join_params.ssid.SSID));
                }

                if (bssidx != 0) {
                        /* AP on Virtual Interface */
                        if ((err = wl_cfg80211_bss_up(cfg, dev, bssidx, 1)) < 0) {
                                WL_ERR(("AP Bring up error %d\n", err));
                                goto exit;
                        }
                }

        } else {
                WL_ERR(("Wrong interface type %d\n", dev_role));
                goto exit;
        }

        /* Wait for Linkup event to mark successful AP/GO bring up */
        timeout = wait_event_interruptible_timeout(cfg->netif_change_event,
                wl_get_drv_status(cfg, AP_CREATED, dev), msecs_to_jiffies(MAX_AP_LINK_WAIT_TIME));
        if (timeout <= 0 || !wl_get_drv_status(cfg, AP_CREATED, dev)) {
                WL_ERR(("Link up didn't come for AP interface. AP/GO creation failed! \n"));
                if (timeout == -ERESTARTSYS) {
                        WL_ERR(("waitqueue was interrupted by a signal, returns -ERESTARTSYS\n"));
                        err = -ERESTARTSYS;
                        goto exit;
                }
#if defined(DHD_DEBUG) && defined(DHD_FW_COREDUMP)
                if (dhdp->memdump_enabled) {
                        dhdp->memdump_type = DUMP_TYPE_AP_LINKUP_FAILURE;
                        dhd_bus_mem_dump(dhdp);
                }
#endif /* DHD_DEBUG && DHD_FW_COREDUMP */
                err = -ENODEV;
                goto exit;
        }
        SUPP_LOG(("AP/GO Link up\n"));

exit:
        if (cfg->wep_key.len) {
                memset(&cfg->wep_key, 0, sizeof(struct wl_wsec_key));
        }

#ifdef MFP
        if (cfg->mfp_mode) {
                cfg->mfp_mode = 0;
        }

        if (cfg->bip_pos) {
                cfg->bip_pos = NULL;
        }
#endif /* MFP */

        if (err) {
                SUPP_LOG(("AP/GO bring up fail. err:%d\n", err));
        }
        return err;
}

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0)) || defined(WL_COMPAT_WIRELESS)
s32
wl_cfg80211_parse_ap_ies(
        struct net_device *dev,
        struct cfg80211_beacon_data *info,
        struct parsed_ies *ies)
{
        struct parsed_ies prb_ies;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);
        const u8 *vndr = NULL;
        u32 vndr_ie_len = 0;
        s32 err = BCME_OK;

        /* Parse Beacon IEs */
        if (wl_cfg80211_parse_ies((const u8 *)info->tail,
                info->tail_len, ies) < 0) {
                WL_ERR(("Beacon get IEs failed \n"));
                err = -EINVAL;
                goto fail;
        }

        vndr = (const u8 *)info->proberesp_ies;
        vndr_ie_len = (uint32)info->proberesp_ies_len;

        if (dhd->op_mode & DHD_FLAG_HOSTAP_MODE) {
                /* SoftAP mode */
                const struct ieee80211_mgmt *mgmt;
                mgmt = (const struct ieee80211_mgmt *)info->probe_resp;
                if (mgmt != NULL) {
                        vndr = (const u8 *)&mgmt->u.probe_resp.variable;
                        vndr_ie_len = (uint32)(info->probe_resp_len -
                                offsetof(const struct ieee80211_mgmt, u.probe_resp.variable));
                }
        }
        /* Parse Probe Response IEs */
        if (wl_cfg80211_parse_ies((const u8 *)vndr, vndr_ie_len, &prb_ies) < 0) {
                WL_ERR(("PROBE RESP get IEs failed \n"));
                err = -EINVAL;
        }
fail:

        return err;
}

s32
wl_cfg80211_set_ies(
        struct net_device *dev,
        struct cfg80211_beacon_data *info,
        s32 bssidx)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);
        const u8 *vndr = NULL;
        u32 vndr_ie_len = 0;
        s32 err = BCME_OK;

        /* Set Beacon IEs to FW */
        if ((err = wl_cfg80211_set_mgmt_vndr_ies(cfg, ndev_to_cfgdev(dev), bssidx,
                VNDR_IE_BEACON_FLAG, (const u8 *)info->tail,
                info->tail_len)) < 0) {
                WL_ERR(("Set Beacon IE Failed \n"));
        } else {
                WL_DBG(("Applied Vndr IEs for Beacon \n"));
        }

        vndr = (const u8 *)info->proberesp_ies;
        vndr_ie_len = (uint32)info->proberesp_ies_len;

        if (dhd->op_mode & DHD_FLAG_HOSTAP_MODE) {
                /* SoftAP mode */
                const struct ieee80211_mgmt *mgmt;
                mgmt = (const struct ieee80211_mgmt *)info->probe_resp;
                if (mgmt != NULL) {
                        vndr = (const u8 *)&mgmt->u.probe_resp.variable;
                        vndr_ie_len = (uint32)(info->probe_resp_len -
                                offsetof(struct ieee80211_mgmt, u.probe_resp.variable));
                }
        }

        /* Set Probe Response IEs to FW */
        if ((err = wl_cfg80211_set_mgmt_vndr_ies(cfg, ndev_to_cfgdev(dev), bssidx,
                VNDR_IE_PRBRSP_FLAG, vndr, vndr_ie_len)) < 0) {
                WL_ERR(("Set Probe Resp IE Failed \n"));
        } else {
                WL_DBG(("Applied Vndr IEs for Probe Resp \n"));
        }

        return err;
}
#endif /* LINUX_VERSION >= VERSION(3,4,0) || WL_COMPAT_WIRELESS */

static s32 wl_cfg80211_hostapd_sec(
        struct net_device *dev,
        struct parsed_ies *ies,
        s32 bssidx)
{
        bool update_bss = 0;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        wl_cfgbss_t *bss = wl_get_cfgbss_by_wdev(cfg, dev->ieee80211_ptr);

        if (!bss) {
                WL_ERR(("cfgbss is NULL \n"));
                return -EINVAL;
        }

        if (ies->wps_ie) {
                if (bss->wps_ie &&
                        memcmp(bss->wps_ie, ies->wps_ie, ies->wps_ie_len)) {
                        WL_DBG((" WPS IE is changed\n"));
                        MFREE(cfg->osh, bss->wps_ie, bss->wps_ie[1] + 2);
                        bss->wps_ie = MALLOCZ(cfg->osh, ies->wps_ie_len);
                        if (bss->wps_ie) {
                                memcpy(bss->wps_ie, ies->wps_ie, ies->wps_ie_len);
                        }
                } else if (bss->wps_ie == NULL) {
                        WL_DBG((" WPS IE is added\n"));
                        bss->wps_ie = MALLOCZ(cfg->osh, ies->wps_ie_len);
                        if (bss->wps_ie) {
                                memcpy(bss->wps_ie, ies->wps_ie, ies->wps_ie_len);
                        }
                }

#if defined(SUPPORT_SOFTAP_WPAWPA2_MIXED)
                if (ies->wpa_ie != NULL && ies->wpa2_ie != NULL) {
                        WL_ERR(("update bss - wpa_ie and  wpa2_ie is not null\n"));
                        if (!bss->security_mode) {
                                /* change from open mode to security mode */
                                update_bss = true;
                                bss->wpa_ie = MALLOCZ(cfg->osh,
                                        ies->wpa_ie->length + WPA_RSN_IE_TAG_FIXED_LEN);
                                if (bss->wpa_ie) {
                                        memcpy(bss->wpa_ie, ies->wpa_ie,
                                                ies->wpa_ie->length + WPA_RSN_IE_TAG_FIXED_LEN);
                                }
                                bss->rsn_ie = MALLOCZ(cfg->osh,
                                                ies->wpa2_ie->len + WPA_RSN_IE_TAG_FIXED_LEN);
                                if (bss->rsn_ie) {
                                        memcpy(bss->rsn_ie, ies->wpa2_ie,
                                                ies->wpa2_ie->len + WPA_RSN_IE_TAG_FIXED_LEN);
                                }
                        } else {
                                /* change from (WPA or WPA2 or WPA/WPA2) to WPA/WPA2 mixed mode */
                                if (bss->wpa_ie) {
                                        if (memcmp(bss->wpa_ie,
                                        ies->wpa_ie, ies->wpa_ie->length +
                                        WPA_RSN_IE_TAG_FIXED_LEN)) {
                                                MFREE(cfg->osh, bss->wpa_ie,
                                                        bss->wpa_ie[1] + WPA_RSN_IE_TAG_FIXED_LEN);
                                                update_bss = true;
                                                bss->wpa_ie = MALLOCZ(cfg->osh,
                                                        ies->wpa_ie->length
                                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                                                if (bss->wpa_ie) {
                                                        memcpy(bss->wpa_ie, ies->wpa_ie,
                                                                ies->wpa_ie->length
                                                                + WPA_RSN_IE_TAG_FIXED_LEN);
                                                }
                                        }
                                }
                                else {
                                        update_bss = true;
                                        bss->wpa_ie = MALLOCZ(cfg->osh,
                                                ies->wpa_ie->length + WPA_RSN_IE_TAG_FIXED_LEN);
                                        if (bss->wpa_ie) {
                                                memcpy(bss->wpa_ie, ies->wpa_ie,
                                                        ies->wpa_ie->length
                                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                                        }
                                }
                                if (bss->rsn_ie) {
                                        if (memcmp(bss->rsn_ie,
                                        ies->wpa2_ie,
                                        ies->wpa2_ie->len + WPA_RSN_IE_TAG_FIXED_LEN)) {
                                                update_bss = true;
                                                MFREE(cfg->osh, bss->rsn_ie,
                                                        bss->rsn_ie[1] + WPA_RSN_IE_TAG_FIXED_LEN);
                                                bss->rsn_ie = MALLOCZ(cfg->osh,
                                                        ies->wpa2_ie->len
                                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                                                if (bss->rsn_ie) {
                                                        memcpy(bss->rsn_ie, ies->wpa2_ie,
                                                                ies->wpa2_ie->len
                                                                + WPA_RSN_IE_TAG_FIXED_LEN);
                                                }
                                        }
                                }
                                else {
                                        update_bss = true;
                                        bss->rsn_ie = MALLOCZ(cfg->osh,
                                                ies->wpa2_ie->len
                                                + WPA_RSN_IE_TAG_FIXED_LEN);
                                        if (bss->rsn_ie) {
                                                memcpy(bss->rsn_ie, ies->wpa2_ie,
                                                        ies->wpa2_ie->len
                                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                                        }
                                }
                        }
                        WL_ERR(("update_bss=%d\n", update_bss));
                        if (update_bss) {
                                bss->security_mode = true;
                                wl_cfg80211_bss_up(cfg, dev, bssidx, 0);
                                if (wl_validate_wpaie_wpa2ie(dev, ies->wpa_ie,
                                        ies->wpa2_ie, bssidx)  < 0) {
                                        return BCME_ERROR;
                                }
                                wl_cfg80211_bss_up(cfg, dev, bssidx, 1);
                        }

                }
                else
#endif /* SUPPORT_SOFTAP_WPAWPA2_MIXED */
                if ((ies->wpa_ie != NULL || ies->wpa2_ie != NULL)) {
                        if (!bss->security_mode) {
                                /* change from open mode to security mode */
                                update_bss = true;
                                if (ies->wpa_ie != NULL) {
                                        bss->wpa_ie = MALLOCZ(cfg->osh,
                                                ies->wpa_ie->length + WPA_RSN_IE_TAG_FIXED_LEN);
                                        if (bss->wpa_ie) {
                                                memcpy(bss->wpa_ie,
                                                        ies->wpa_ie,
                                                        ies->wpa_ie->length
                                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                                        }
                                } else {
                                        bss->rsn_ie = MALLOCZ(cfg->osh,
                                                ies->wpa2_ie->len + WPA_RSN_IE_TAG_FIXED_LEN);
                                        if (bss->rsn_ie) {
                                                memcpy(bss->rsn_ie,
                                                        ies->wpa2_ie,
                                                        ies->wpa2_ie->len
                                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                                        }
                                }
                        } else if (bss->wpa_ie) {
                                /* change from WPA2 mode to WPA mode */
                                if (ies->wpa_ie != NULL) {
                                        update_bss = true;
                                        MFREE(cfg->osh, bss->rsn_ie,
                                                bss->rsn_ie[1] + WPA_RSN_IE_TAG_FIXED_LEN);
                                        bss->rsn_ie = NULL;
                                        bss->wpa_ie = MALLOCZ(cfg->osh,
                                                ies->wpa_ie->length + WPA_RSN_IE_TAG_FIXED_LEN);
                                        if (bss->wpa_ie) {
                                                memcpy(bss->wpa_ie,
                                                        ies->wpa_ie,
                                                        ies->wpa_ie->length
                                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                                        }
                                } else if (memcmp(bss->rsn_ie,
                                        ies->wpa2_ie, ies->wpa2_ie->len
                                        + WPA_RSN_IE_TAG_FIXED_LEN)) {
                                        update_bss = true;
                                        MFREE(cfg->osh, bss->rsn_ie,
                                                bss->rsn_ie[1] + WPA_RSN_IE_TAG_FIXED_LEN);
                                        bss->rsn_ie = MALLOCZ(cfg->osh,
                                                ies->wpa2_ie->len + WPA_RSN_IE_TAG_FIXED_LEN);
                                        if (bss->rsn_ie) {
                                                memcpy(bss->rsn_ie,
                                                        ies->wpa2_ie,
                                                        ies->wpa2_ie->len
                                                        + WPA_RSN_IE_TAG_FIXED_LEN);
                                        }
                                        bss->wpa_ie = NULL;
                                }
                        }
                        if (update_bss) {
                                bss->security_mode = true;
                                wl_cfg80211_bss_up(cfg, dev, bssidx, 0);
                                if (wl_validate_wpa2ie(dev, ies->wpa2_ie, bssidx)  < 0 ||
                                        wl_validate_wpaie(dev, ies->wpa_ie, bssidx) < 0) {
                                        return BCME_ERROR;
                                }
                                wl_cfg80211_bss_up(cfg, dev, bssidx, 1);
                        }
                }
        } else {
                WL_ERR(("No WPSIE in beacon \n"));
        }
        return 0;
}

#if defined(WL_SUPPORT_BACKPORTED_KPATCHES) || (LINUX_VERSION_CODE >= KERNEL_VERSION(3, \
        2, 0))
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0))
static s32
wl_cfg80211_del_station(
                struct wiphy *wiphy, struct net_device *ndev,
                struct station_del_parameters *params)
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0))
static s32
wl_cfg80211_del_station(
        struct wiphy *wiphy,
        struct net_device *ndev,
        const u8* mac_addr)
#else
static s32
wl_cfg80211_del_station(
        struct wiphy *wiphy,
        struct net_device *ndev,
        u8* mac_addr)
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0)) */
{
        struct net_device *dev;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        scb_val_t scb_val;
        s8 eabuf[ETHER_ADDR_STR_LEN];
        int err;
        char mac_buf[MAX_NUM_OF_ASSOCIATED_DEV *
                sizeof(struct ether_addr) + sizeof(uint)] = {0};
        struct maclist *assoc_maclist = (struct maclist *)mac_buf;
        int num_associated = 0;

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0))
        const u8 *mac_addr = params->mac;
#ifdef CUSTOM_BLOCK_DEAUTH_AT_EAP_FAILURE
        u16 rc = params->reason_code;
#endif /* CUSTOM_BLOCK_DEAUTH_AT_EAP_FAILURE */
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0)) */
        WL_DBG(("Entry\n"));
        if (mac_addr == NULL) {
                WL_DBG(("mac_addr is NULL ignore it\n"));
                return 0;
        }

        dev = ndev_to_wlc_ndev(ndev, cfg);

        if (p2p_is_on(cfg)) {
                /* Suspend P2P discovery search-listen to prevent it from changing the
                 * channel.
                 */
                if ((wl_cfgp2p_discover_enable_search(cfg, false)) < 0) {
                        WL_ERR(("Can not disable discovery mode\n"));
                        return -EFAULT;
                }
        }

        assoc_maclist->count = MAX_NUM_OF_ASSOCIATED_DEV;
        err = wldev_ioctl_get(ndev, WLC_GET_ASSOCLIST,
                assoc_maclist, sizeof(mac_buf));
        if (err < 0)
                WL_ERR(("WLC_GET_ASSOCLIST error %d\n", err));
        else
                num_associated = assoc_maclist->count;

        memcpy(scb_val.ea.octet, mac_addr, ETHER_ADDR_LEN);
#ifdef CUSTOM_BLOCK_DEAUTH_AT_EAP_FAILURE
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0))
        if (rc == DOT11_RC_8021X_AUTH_FAIL) {
                WL_ERR(("deauth will be sent at F/W\n"));
                scb_val.val = DOT11_RC_8021X_AUTH_FAIL;
        } else {
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0)) */
#endif /* CUSTOM_BLOCK_DEAUTH_AT_EAP_FAILURE */

#ifdef WL_WPS_SYNC
                if (wl_wps_session_update(ndev,
                        WPS_STATE_DISCONNECT_CLIENT, mac_addr) == BCME_UNSUPPORTED) {
                        /* Ignore disconnect command from upper layer */
                        WL_INFORM_MEM(("[WPS] Ignore client disconnect.\n"));
                } else
#endif /* WL_WPS_SYNC */
                {

                        /* need to guarantee EAP-Failure send out before deauth */
                        dhd_wait_pend8021x(dev);
                        scb_val.val = DOT11_RC_DEAUTH_LEAVING;
                        err = wldev_ioctl_set(dev, WLC_SCB_DEAUTHENTICATE_FOR_REASON, &scb_val,
                                sizeof(scb_val_t));
                        if (err < 0) {
                                WL_ERR(("WLC_SCB_DEAUTHENTICATE_FOR_REASON err %d\n", err));
                        }
                        WL_INFORM_MEM(("Disconnect STA : " MACDBG " scb_val.val %d\n",
                                MAC2STRDBG(bcm_ether_ntoa((const struct ether_addr *)mac_addr,
                                eabuf)), scb_val.val));
                }
#ifdef CUSTOM_BLOCK_DEAUTH_AT_EAP_FAILURE
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0))
        }
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0)) */
#endif /* CUSTOM_BLOCK_DEAUTH_AT_EAP_FAILURE */

        if (num_associated > 0 && ETHER_ISBCAST(mac_addr))
                wl_delay(400);

        return 0;
}

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0))
static s32
wl_cfg80211_change_station(
        struct wiphy *wiphy,
        struct net_device *dev,
        const u8 *mac,
        struct station_parameters *params)
#else
static s32
wl_cfg80211_change_station(
        struct wiphy *wiphy,
        struct net_device *dev,
        u8 *mac,
        struct station_parameters *params)
#endif // endif
{
        int err;
#ifdef DHD_LOSSLESS_ROAMING
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
#endif // endif

        WL_DBG(("SCB_AUTHORIZE mac_addr:"MACDBG" sta_flags_mask:0x%x "
                                "sta_flags_set:0x%x iface:%s \n", MAC2STRDBG(mac),
                                params->sta_flags_mask, params->sta_flags_set, dev->name));

        /* Processing only authorize/de-authorize flag for now */
        if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED))) {
                WL_ERR(("WLC_SCB_AUTHORIZE sta_flags_mask not set \n"));
                return -ENOTSUPP;
        }

        if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED))) {
                err = wldev_ioctl_set(dev, WLC_SCB_DEAUTHORIZE, mac, ETH_ALEN);
                if (unlikely(err)) {
                        WL_ERR(("WLC_SCB_DEAUTHORIZE error (%d)\n", err));
                } else {
                        WL_INFORM_MEM(("[%s] WLC_SCB_DEAUTHORIZE " MACDBG "\n",
                                dev->name, MAC2STRDBG(mac)));
                }
                return err;
        }

        err = wldev_ioctl_set(dev, WLC_SCB_AUTHORIZE, mac, ETH_ALEN);
        if (unlikely(err)) {
                WL_ERR(("WLC_SCB_AUTHORIZE error (%d)\n", err));
        } else {
                WL_INFORM_MEM(("[%s] WLC_SCB_AUTHORIZE " MACDBG "\n",
                        dev->name, MAC2STRDBG(mac)));
#ifdef WL_WPS_SYNC
                wl_wps_session_update(dev, WPS_STATE_AUTHORIZE, mac);
#endif /* WL_WPS_SYNC */
        }
#ifdef DHD_LOSSLESS_ROAMING
        wl_del_roam_timeout(cfg);
#endif // endif
        return err;
}
#endif /* WL_SUPPORT_BACKPORTED_KPATCHES || KERNEL_VER >= KERNEL_VERSION(3, 2, 0)) */

static s32
wl_cfg80211_set_scb_timings(
        struct bcm_cfg80211 *cfg,
        struct net_device *dev)
{
        int err;
        u32 ps_pretend;
        wl_scb_probe_t scb_probe;
        u32 ps_pretend_retries;

        bzero(&scb_probe, sizeof(wl_scb_probe_t));
        scb_probe.scb_timeout = WL_SCB_TIMEOUT;
        scb_probe.scb_activity_time = WL_SCB_ACTIVITY_TIME;
        scb_probe.scb_max_probe = WL_SCB_MAX_PROBE;
        err = wldev_iovar_setbuf(dev, "scb_probe", (void *)&scb_probe,
                sizeof(wl_scb_probe_t), cfg->ioctl_buf, WLC_IOCTL_SMLEN,
                &cfg->ioctl_buf_sync);
        if (unlikely(err)) {
                WL_ERR(("set 'scb_probe' failed, error = %d\n", err));
                return err;
        }

        ps_pretend_retries = WL_PSPRETEND_RETRY_LIMIT;
        err = wldev_iovar_setint(dev, "pspretend_retry_limit", ps_pretend_retries);
        if (unlikely(err)) {
                if (err == BCME_UNSUPPORTED) {
                        /* Ignore error if fw doesn't support the iovar */
                        WL_DBG(("set 'pspretend_retry_limit %d' failed, error = %d\n",
                                ps_pretend_retries, err));
                } else {
                        WL_ERR(("set 'pspretend_retry_limit %d' failed, error = %d\n",
                                ps_pretend_retries, err));
                        return err;
                }
        }

        ps_pretend = MAX(WL_SCB_MAX_PROBE / 2, WL_MIN_PSPRETEND_THRESHOLD);
        err = wldev_iovar_setint(dev, "pspretend_threshold", ps_pretend);
        if (unlikely(err)) {
                if (err == BCME_UNSUPPORTED) {
                        /* Ignore error if fw doesn't support the iovar */
                        WL_DBG(("wl pspretend_threshold %d set error %d\n",
                                ps_pretend, err));
                } else {
                        WL_ERR(("wl pspretend_threshold %d set error %d\n",
                                ps_pretend, err));
                        return err;
                }
        }

        return 0;
}

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0)) || defined(WL_COMPAT_WIRELESS)
static s32
wl_cfg80211_start_ap(
        struct wiphy *wiphy,
        struct net_device *dev,
        struct cfg80211_ap_settings *info)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s32 err = BCME_OK;
        struct parsed_ies ies;
        s32 bssidx = 0;
        u32 dev_role = 0;
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);

        WL_DBG(("Enter \n"));
#if defined(SUPPORT_RANDOM_MAC_SCAN)
        wl_cfg80211_random_mac_disable(dev);
#endif /* SUPPORT_RANDOM_MAC_SCAN */

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        if (p2p_is_on(cfg) && (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO)) {
                dev_role = NL80211_IFTYPE_P2P_GO;
        } else if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP) {
                dev_role = NL80211_IFTYPE_AP;
                dhd->op_mode |= DHD_FLAG_HOSTAP_MODE;
                err = dhd_ndo_enable(dhd, FALSE);
                WL_DBG(("%s: Disabling NDO on Hostapd mode %d\n", __FUNCTION__, err));
                if (err) {
                        WL_ERR(("%s: Disabling NDO Failed %d\n", __FUNCTION__, err));
                }
#ifdef PKT_FILTER_SUPPORT
                /* Disable packet filter */
                if (dhd->early_suspended) {
                        WL_ERR(("Disable pkt_filter\n"));
                        dhd_enable_packet_filter(0, dhd);
                }
#endif /* PKT_FILTER_SUPPORT */
#ifdef ARP_OFFLOAD_SUPPORT
                /* IF SoftAP is enabled, disable arpoe */
                if (dhd->op_mode & DHD_FLAG_STA_MODE) {
                        dhd_arp_offload_set(dhd, 0);
                        dhd_arp_offload_enable(dhd, FALSE);
                }
#endif /* ARP_OFFLOAD_SUPPORT */
        } else {
                /* only AP or GO role need to be handled here. */
                err = -EINVAL;
                goto fail;
        }

        /* disable TDLS */
#ifdef WLTDLS
        if (bssidx == 0) {
                /* Disable TDLS for primary Iface. For virtual interface,
                 * tdls disable will happen from interface create context
                 */
                wl_cfg80211_tdls_config(cfg, TDLS_STATE_AP_CREATE, false);
        }
#endif /*  WLTDLS */

        if (!check_dev_role_integrity(cfg, dev_role)) {
                err = -EINVAL;
                goto fail;
        }

#if ((LINUX_VERSION_CODE >= KERNEL_VERSION(3, 6, 0)) && !defined(WL_COMPAT_WIRELESS))
        if ((err = wl_cfg80211_set_channel(wiphy, dev,
                dev->ieee80211_ptr->preset_chandef.chan,
                NL80211_CHAN_HT20) < 0)) {
                WL_ERR(("Set channel failed \n"));
                goto fail;
        }
#endif /* ((LINUX_VERSION >= VERSION(3, 6, 0) && !WL_COMPAT_WIRELESS) */

        if ((err = wl_cfg80211_bcn_set_params(info, dev,
                dev_role, bssidx)) < 0) {
                WL_ERR(("Beacon params set failed \n"));
                goto fail;
        }

        /* Parse IEs */
        if ((err = wl_cfg80211_parse_ap_ies(dev, &info->beacon, &ies)) < 0) {
                WL_ERR(("Set IEs failed \n"));
                goto fail;
        }

        if ((err = wl_cfg80211_bcn_validate_sec(dev, &ies,
                dev_role, bssidx, info->privacy)) < 0)
        {
                WL_ERR(("Beacon set security failed \n"));
                goto fail;
        }

        if ((err = wl_cfg80211_bcn_bringup_ap(dev, &ies,
                dev_role, bssidx)) < 0) {
                WL_ERR(("Beacon bring up AP/GO failed \n"));
                goto fail;
        }

        /* Set GC/STA SCB expiry timings. */
        if ((err = wl_cfg80211_set_scb_timings(cfg, dev))) {
                WL_ERR(("scb setting failed \n"));
                goto fail;
        }

        wl_set_drv_status(cfg, CONNECTED, dev);
        WL_DBG(("** AP/GO Created **\n"));

#ifdef WL_CFG80211_ACL
        /* Enfoce Admission Control. */
        if ((err = wl_cfg80211_set_mac_acl(wiphy, dev, info->acl)) < 0) {
                WL_ERR(("Set ACL failed\n"));
        }
#endif /* WL_CFG80211_ACL */

        /* Set IEs to FW */
        if ((err = wl_cfg80211_set_ies(dev, &info->beacon, bssidx)) < 0)
                WL_ERR(("Set IEs failed \n"));

        /* Enable Probe Req filter, WPS-AP certification 4.2.13 */
        if ((dev_role == NL80211_IFTYPE_AP) && (ies.wps_ie != NULL)) {
                bool pbc = 0;
                wl_validate_wps_ie((const char *) ies.wps_ie, ies.wps_ie_len, &pbc);
                if (pbc) {
                        WL_DBG(("set WLC_E_PROBREQ_MSG\n"));
                        wl_add_remove_eventmsg(dev, WLC_E_PROBREQ_MSG, true);
                }
        }

        /* Configure hidden SSID */
        if (info->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE) {
                if ((err = wldev_iovar_setint(dev, "closednet", 1)) < 0)
                        WL_ERR(("failed to set hidden : %d\n", err));
                WL_DBG(("hidden_ssid_enum_val: %d \n", info->hidden_ssid));
        }

#ifdef SUPPORT_AP_RADIO_PWRSAVE
        if (dev_role == NL80211_IFTYPE_AP) {
                if (!wl_set_ap_rps(dev, FALSE, dev->name)) {
                        wl_cfg80211_init_ap_rps(cfg);
                } else {
                        WL_ERR(("Set rpsnoa failed \n"));
                }
        }
#endif /* SUPPORT_AP_RADIO_PWRSAVE */

fail:
        if (err) {
                WL_ERR(("ADD/SET beacon failed\n"));
                wl_flush_fw_log_buffer(dev, FW_LOGSET_MASK_ALL);
                wl_cfg80211_stop_ap(wiphy, dev);
                if (dev_role == NL80211_IFTYPE_AP) {
                        dhd->op_mode &= ~DHD_FLAG_HOSTAP_MODE;
#ifdef PKT_FILTER_SUPPORT
                        /* Enable packet filter */
                        if (dhd->early_suspended) {
                                WL_ERR(("Enable pkt_filter\n"));
                                dhd_enable_packet_filter(1, dhd);
                        }
#endif /* PKT_FILTER_SUPPORT */
#ifdef ARP_OFFLOAD_SUPPORT
                        /* IF SoftAP is disabled, enable arpoe back for STA mode. */
                        if (dhd->op_mode & DHD_FLAG_STA_MODE) {
                                dhd_arp_offload_set(dhd, dhd_arp_mode);
                                dhd_arp_offload_enable(dhd, TRUE);
                        }
#endif /* ARP_OFFLOAD_SUPPORT */
#ifdef DISABLE_WL_FRAMEBURST_SOFTAP
                        wl_cfg80211_set_frameburst(cfg, TRUE);
#endif /* DISABLE_WL_FRAMEBURST_SOFTAP */
                }
#ifdef WLTDLS
                if (bssidx == 0) {
                        /* Since AP creation failed, re-enable TDLS */
                        wl_cfg80211_tdls_config(cfg, TDLS_STATE_AP_DELETE, false);
                }
#endif /*  WLTDLS */

        }

        return err;
}

static s32
wl_cfg80211_stop_ap(
        struct wiphy *wiphy,
        struct net_device *dev)
{
        int err = 0;
        u32 dev_role = 0;
        int ap = 0;
        s32 bssidx = 0;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);

        WL_DBG(("Enter \n"));

        if (wl_cfg80211_get_bus_state(cfg)) {
                /* since bus is down, iovar will fail. recovery path will bringup the bus. */
                WL_ERR(("bus is not ready\n"));
                return BCME_OK;
        }

        if (!dhd) {
                return (-ENODEV);
        }

        wl_clr_drv_status(cfg, AP_CREATING, dev);
        wl_clr_drv_status(cfg, AP_CREATED, dev);
        cfg->ap_oper_channel = 0;

        if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP) {
                dev_role = NL80211_IFTYPE_AP;
                WL_DBG(("stopping AP operation\n"));
        } else if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO) {
                dev_role = NL80211_IFTYPE_P2P_GO;
                WL_DBG(("stopping P2P GO operation\n"));
        } else {
                WL_ERR(("no AP/P2P GO interface is operational.\n"));
                return -EINVAL;
        }

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        if (!check_dev_role_integrity(cfg, dev_role)) {
                WL_ERR(("role integrity check failed \n"));
                err = -EINVAL;
                goto exit;
        }

        /* Free up resources */
        wl_cfg80211_cleanup_if(dev);

        /* Clear AP/GO connected status */
        wl_clr_drv_status(cfg, CONNECTED, dev);
        if ((err = wl_cfg80211_bss_up(cfg, dev, bssidx, 0)) < 0) {
                WL_ERR(("bss down error %d\n", err));
        }

        if (dev_role == NL80211_IFTYPE_AP) {
#ifdef DISABLE_WL_FRAMEBURST_SOFTAP
                wl_cfg80211_set_frameburst(cfg, TRUE);
#endif /* DISABLE_WL_FRAMEBURST_SOFTAP */
#ifdef PKT_FILTER_SUPPORT
                /* Enable packet filter */
                if (dhd->early_suspended) {
                        WL_ERR(("Enable pkt_filter\n"));
                        dhd_enable_packet_filter(1, dhd);
                }
#endif /* PKT_FILTER_SUPPORT */
#ifdef ARP_OFFLOAD_SUPPORT
                /* IF SoftAP is disabled, enable arpoe back for STA mode. */
                if (dhd->op_mode & DHD_FLAG_STA_MODE) {
                        dhd_arp_offload_set(dhd, dhd_arp_mode);
                        dhd_arp_offload_enable(dhd, TRUE);
                }
#endif /* ARP_OFFLOAD_SUPPORT */

                if (!DHD_OPMODE_STA_SOFTAP_CONCURR(dhd)) {
                        /* For non-STA/SoftAP Concurrent mode,
                         * we use stand alone AP. Do wl down on stop AP
                         */
                        err = wldev_ioctl_set(dev, WLC_UP, &ap, sizeof(s32));
                        if (unlikely(err)) {
                                WL_ERR(("WLC_UP error (%d)\n", err));
                                err = -EINVAL;
                                goto exit;
                        }
                }

                wl_cfg80211_clear_per_bss_ies(cfg, dev->ieee80211_ptr);
#ifdef SUPPORT_AP_RADIO_PWRSAVE
                if (!wl_set_ap_rps(dev, FALSE, dev->name)) {
                        wl_cfg80211_init_ap_rps(cfg);
                } else {
                        WL_ERR(("Set rpsnoa failed \n"));
                }
#endif /* SUPPORT_AP_RADIO_PWRSAVE */
        } else {
                WL_DBG(("Stopping P2P GO \n"));
                DHD_OS_WAKE_LOCK_CTRL_TIMEOUT_ENABLE(dhd, DHD_EVENT_TIMEOUT_MS*3);
                DHD_OS_WAKE_LOCK_TIMEOUT(dhd);
        }

        SUPP_LOG(("AP/GO Link down\n"));
exit:
        if (err) {
                /* In case of failure, flush fw logs */
                wl_flush_fw_log_buffer(dev, FW_LOGSET_MASK_ALL);
                SUPP_LOG(("AP/GO Link down fail. err:%d\n", err));
        }
#ifdef WLTDLS
        if (bssidx == 0) {
                /* re-enable TDLS if the number of connected interfaces is less than 2 */
                wl_cfg80211_tdls_config(cfg, TDLS_STATE_AP_DELETE, false);
        }
#endif /* WLTDLS */

        if (dev_role == NL80211_IFTYPE_AP) {
                /* clear the AP mode */
                dhd->op_mode &= ~DHD_FLAG_HOSTAP_MODE;
        }
        return err;
}

static s32
wl_cfg80211_change_beacon(
        struct wiphy *wiphy,
        struct net_device *dev,
        struct cfg80211_beacon_data *info)
{
        s32 err = BCME_OK;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct parsed_ies ies;
        u32 dev_role = 0;
        s32 bssidx = 0;
        bool pbc = 0;

        WL_DBG(("Enter \n"));

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO) {
                dev_role = NL80211_IFTYPE_P2P_GO;
        } else if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP) {
                dev_role = NL80211_IFTYPE_AP;
        } else {
                err = -EINVAL;
                goto fail;
        }

        if (!check_dev_role_integrity(cfg, dev_role)) {
                err = -EINVAL;
                goto fail;
        }

        if ((dev_role == NL80211_IFTYPE_P2P_GO) && (cfg->p2p_wdev == NULL)) {
                WL_ERR(("P2P already down status!\n"));
                err = BCME_ERROR;
                goto fail;
        }

        /* Parse IEs */
        if ((err = wl_cfg80211_parse_ap_ies(dev, info, &ies)) < 0) {
                WL_ERR(("Parse IEs failed \n"));
                goto fail;
        }

        /* Set IEs to FW */
        if ((err = wl_cfg80211_set_ies(dev, info, bssidx)) < 0) {
                WL_ERR(("Set IEs failed \n"));
                goto fail;
        }

        if (dev_role == NL80211_IFTYPE_AP) {
                if (wl_cfg80211_hostapd_sec(dev, &ies, bssidx) < 0) {
                        WL_ERR(("Hostapd update sec failed \n"));
                        err = -EINVAL;
                        goto fail;
                }
                /* Enable Probe Req filter, WPS-AP certification 4.2.13 */
                if ((dev_role == NL80211_IFTYPE_AP) && (ies.wps_ie != NULL)) {
                        wl_validate_wps_ie((const char *) ies.wps_ie, ies.wps_ie_len, &pbc);
                        WL_DBG((" WPS AP, wps_ie is exists pbc=%d\n", pbc));
                        if (pbc)
                                wl_add_remove_eventmsg(dev, WLC_E_PROBREQ_MSG, true);
                        else
                                wl_add_remove_eventmsg(dev, WLC_E_PROBREQ_MSG, false);
                }
        }

fail:
        if (err) {
                wl_flush_fw_log_buffer(dev, FW_LOGSET_MASK_ALL);
        }
        return err;
}
#else
static s32
wl_cfg80211_add_set_beacon(struct wiphy *wiphy, struct net_device *dev,
        struct beacon_parameters *info)
{
        s32 err = BCME_OK;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s32 ie_offset = 0;
        s32 bssidx = 0;
        u32 dev_role = NL80211_IFTYPE_AP;
        struct parsed_ies ies;
        bcm_tlv_t *ssid_ie;
        bool pbc = 0;
        bool privacy;
        bool is_bss_up = 0;
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);

        WL_DBG(("interval (%d) dtim_period (%d) head_len (%d) tail_len (%d)\n",
                info->interval, info->dtim_period, info->head_len, info->tail_len));

        if (dev == bcmcfg_to_prmry_ndev(cfg)) {
                dev_role = NL80211_IFTYPE_AP;
        }
#if defined(WL_ENABLE_P2P_IF)
        else if (dev == cfg->p2p_net) {
                /* Group Add request on p2p0 */
                dev = bcmcfg_to_prmry_ndev(cfg);
                dev_role = NL80211_IFTYPE_P2P_GO;
        }
#endif /* WL_ENABLE_P2P_IF */

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("Find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO) {
                dev_role = NL80211_IFTYPE_P2P_GO;
        } else if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP) {
                dhd->op_mode |= DHD_FLAG_HOSTAP_MODE;
        }

        if (!check_dev_role_integrity(cfg, dev_role)) {
                err = -ENODEV;
                goto fail;
        }

        if ((dev_role == NL80211_IFTYPE_P2P_GO) && (cfg->p2p_wdev == NULL)) {
                WL_ERR(("P2P already down status!\n"));
                err = BCME_ERROR;
                goto fail;
        }

        ie_offset = DOT11_MGMT_HDR_LEN + DOT11_BCN_PRB_FIXED_LEN;
        /* find the SSID */
        if ((ssid_ie = bcm_parse_tlvs((u8 *)&info->head[ie_offset],
                info->head_len - ie_offset,
                DOT11_MNG_SSID_ID)) != NULL) {
                if (dev_role == NL80211_IFTYPE_AP) {
                        /* Store the hostapd SSID */
                        memset(&cfg->hostapd_ssid.SSID[0], 0x00, DOT11_MAX_SSID_LEN);
                        cfg->hostapd_ssid.SSID_len = MIN(ssid_ie->len, DOT11_MAX_SSID_LEN);
                        memcpy(&cfg->hostapd_ssid.SSID[0], ssid_ie->data,
                                cfg->hostapd_ssid.SSID_len);
                } else {
                                /* P2P GO */
                        memset(&cfg->p2p->ssid.SSID[0], 0x00, DOT11_MAX_SSID_LEN);
                        cfg->p2p->ssid.SSID_len = MIN(ssid_ie->len, DOT11_MAX_SSID_LEN);
                        memcpy(cfg->p2p->ssid.SSID, ssid_ie->data,
                                cfg->p2p->ssid.SSID_len);
                }
        }

        if (wl_cfg80211_parse_ies((u8 *)info->tail,
                info->tail_len, &ies) < 0) {
                WL_ERR(("Beacon get IEs failed \n"));
                err = -EINVAL;
                goto fail;
        }

        if ((err = wl_cfg80211_set_mgmt_vndr_ies(cfg, ndev_to_cfgdev(dev), bssidx,
                VNDR_IE_BEACON_FLAG, (u8 *)info->tail,
                info->tail_len)) < 0) {
                WL_ERR(("Beacon set IEs failed \n"));
                goto fail;
        } else {
                WL_DBG(("Applied Vndr IEs for Beacon \n"));
        }

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 2, 0))
        if ((err = wl_cfg80211_set_mgmt_vndr_ies(cfg, ndev_to_cfgdev(dev), bssidx,
                VNDR_IE_PRBRSP_FLAG, (u8 *)info->proberesp_ies,
                info->proberesp_ies_len)) < 0) {
                WL_ERR(("ProbeRsp set IEs failed \n"));
                goto fail;
        } else {
                WL_DBG(("Applied Vndr IEs for ProbeRsp \n"));
        }
#endif // endif

        is_bss_up = wl_cfg80211_bss_isup(dev, bssidx);

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 2, 0))
        privacy = info->privacy;
#else
        privacy = 0;
#endif // endif
        if (!is_bss_up &&
                (wl_cfg80211_bcn_validate_sec(dev, &ies, dev_role, bssidx, privacy) < 0))
        {
                WL_ERR(("Beacon set security failed \n"));
                err = -EINVAL;
                goto fail;
        }

        /* Set BI and DTIM period */
        if (info->interval) {
                if ((err = wldev_ioctl_set(dev, WLC_SET_BCNPRD,
                        &info->interval, sizeof(s32))) < 0) {
                        WL_ERR(("Beacon Interval Set Error, %d\n", err));
                        return err;
                }
        }
        if (info->dtim_period) {
                if ((err = wldev_ioctl_set(dev, WLC_SET_DTIMPRD,
                        &info->dtim_period, sizeof(s32))) < 0) {
                        WL_ERR(("DTIM Interval Set Error, %d\n", err));
                        return err;
                }
        }

        /* If bss is already up, skip bring up */
        if (!is_bss_up &&
                (err = wl_cfg80211_bcn_bringup_ap(dev, &ies, dev_role, bssidx)) < 0)
        {
                WL_ERR(("Beacon bring up AP/GO failed \n"));
                goto fail;
        }

        /* Set GC/STA SCB expiry timings. */
        if ((err = wl_cfg80211_set_scb_timings(cfg, dev))) {
                WL_ERR(("scb setting failed \n"));
                goto fail;
        }

        if (wl_get_drv_status(cfg, AP_CREATED, dev)) {
                /* Soft AP already running. Update changed params */
                if (wl_cfg80211_hostapd_sec(dev, &ies, bssidx) < 0) {
                        WL_ERR(("Hostapd update sec failed \n"));
                        err = -EINVAL;
                        goto fail;
                }
        }

        /* Enable Probe Req filter */
        if (((dev_role == NL80211_IFTYPE_P2P_GO) ||
                (dev_role == NL80211_IFTYPE_AP)) && (ies.wps_ie != NULL)) {
                wl_validate_wps_ie((char *) ies.wps_ie, ies.wps_ie_len, &pbc);
                if (pbc)
                        wl_add_remove_eventmsg(dev, WLC_E_PROBREQ_MSG, true);
        }

        WL_DBG(("** ADD/SET beacon done **\n"));
        wl_set_drv_status(cfg, CONNECTED, dev);

fail:
        if (err) {
                WL_ERR(("ADD/SET beacon failed\n"));
                if (dev_role == NL80211_IFTYPE_AP) {
                        /* clear the AP mode */
                        dhd->op_mode &= ~DHD_FLAG_HOSTAP_MODE;
                }
        }
        return err;

}

static s32
wl_cfg80211_del_beacon(struct wiphy *wiphy, struct net_device *dev)
{
        int err = 0;
        s32 bssidx = 0;
        int infra = 0;
        struct wireless_dev *wdev = dev->ieee80211_ptr;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);

        WL_DBG(("Enter. \n"));

        if (!wdev) {
                WL_ERR(("wdev null \n"));
                return -EINVAL;
        }

        if ((wdev->iftype != NL80211_IFTYPE_P2P_GO) && (wdev->iftype != NL80211_IFTYPE_AP)) {
                WL_ERR(("Unspported iface type iftype:%d \n", wdev->iftype));
        }

        wl_clr_drv_status(cfg, AP_CREATING, dev);
        wl_clr_drv_status(cfg, AP_CREATED, dev);

        /* Clear AP/GO connected status */
        wl_clr_drv_status(cfg, CONNECTED, dev);

        cfg->ap_oper_channel = 0;

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) < 0) {
                WL_ERR(("find p2p index from wdev(%p) failed\n", dev->ieee80211_ptr));
                return BCME_ERROR;
        }

        /* Do bss down */
        if ((err = wl_cfg80211_bss_up(cfg, dev, bssidx, 0)) < 0) {
                WL_ERR(("bss down error %d\n", err));
        }

        /* fall through is intentional */
        err = wldev_ioctl_set(dev, WLC_SET_INFRA, &infra, sizeof(s32));
        if (err < 0) {
                WL_ERR(("SET INFRA error %d\n", err));
        }
         wl_cfg80211_clear_per_bss_ies(cfg, dev->ieee80211_ptr);

        if (wdev->iftype == NL80211_IFTYPE_AP) {
                /* clear the AP mode */
                dhd->op_mode &= ~DHD_FLAG_HOSTAP_MODE;
        }

        return 0;
}
#endif /* LINUX_VERSION < VERSION(3,4,0) || WL_COMPAT_WIRELESS */

#ifdef WL_SCHED_SCAN
#define PNO_TIME                30
#define PNO_REPEAT              4
#define PNO_FREQ_EXPO_MAX       2
static bool
is_ssid_in_list(struct cfg80211_ssid *ssid, struct cfg80211_ssid *ssid_list, int count)
{
        int i;

        if (!ssid || !ssid_list)
                return FALSE;

        for (i = 0; i < count; i++) {
                if (ssid->ssid_len == ssid_list[i].ssid_len) {
                        if (strncmp(ssid->ssid, ssid_list[i].ssid, ssid->ssid_len) == 0)
                                return TRUE;
                }
        }
        return FALSE;
}

static int
wl_cfg80211_sched_scan_start(struct wiphy *wiphy,
                             struct net_device *dev,
                             struct cfg80211_sched_scan_request *request)
{
        ushort pno_time = PNO_TIME;
        int pno_repeat = PNO_REPEAT;
        int pno_freq_expo_max = PNO_FREQ_EXPO_MAX;
        wlc_ssid_ext_t ssids_local[MAX_PFN_LIST_COUNT];
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        struct cfg80211_ssid *ssid = NULL;
        struct cfg80211_ssid *hidden_ssid_list = NULL;
        log_conn_event_t *event_data = NULL;
        tlv_log *tlv_data = NULL;
        u32 alloc_len, tlv_len;
        u32 payload_len;
        int ssid_cnt = 0;
        int i;
        int ret = 0;
        unsigned long flags;

        if (!request) {
                WL_ERR(("Sched scan request was NULL\n"));
                return -EINVAL;
        }

        WL_DBG(("Enter \n"));
        WL_PNO((">>> SCHED SCAN START\n"));
        WL_PNO(("Enter n_match_sets:%d   n_ssids:%d \n",
                request->n_match_sets, request->n_ssids));
        WL_PNO(("ssids:%d pno_time:%d pno_repeat:%d pno_freq:%d \n",
                request->n_ssids, pno_time, pno_repeat, pno_freq_expo_max));

        if (!request->n_ssids || !request->n_match_sets) {
                WL_ERR(("Invalid sched scan req!! n_ssids:%d \n", request->n_ssids));
                return -EINVAL;
        }

        memset(&ssids_local, 0, sizeof(ssids_local));

        if (request->n_ssids > 0) {
                hidden_ssid_list = request->ssids;
        }

        if (DBG_RING_ACTIVE(dhdp, DHD_EVENT_RING_ID)) {
                alloc_len = sizeof(log_conn_event_t) + DOT11_MAX_SSID_LEN;
                event_data = (log_conn_event_t *)MALLOC(cfg->osh, alloc_len);
                if (!event_data) {
                        WL_ERR(("%s: failed to allocate log_conn_event_t with "
                                                "length(%d)\n", __func__, alloc_len));
                        return -ENOMEM;
                }
                memset(event_data, 0, alloc_len);
                event_data->tlvs = NULL;
                tlv_len = sizeof(tlv_log);
                event_data->tlvs = (tlv_log *)MALLOC(cfg->osh, tlv_len);
                if (!event_data->tlvs) {
                        WL_ERR(("%s: failed to allocate log_tlv with "
                                        "length(%d)\n", __func__, tlv_len));
                        MFREE(cfg->osh, event_data, alloc_len);
                        return -ENOMEM;
                }
        }
        for (i = 0; i < request->n_match_sets && ssid_cnt < MAX_PFN_LIST_COUNT; i++) {
                ssid = &request->match_sets[i].ssid;
                /* No need to include null ssid */
                if (ssid->ssid_len) {
                        ssids_local[ssid_cnt].SSID_len = MIN(ssid->ssid_len,
                                (uint32)DOT11_MAX_SSID_LEN);
                        memcpy(ssids_local[ssid_cnt].SSID, ssid->ssid,
                                ssids_local[ssid_cnt].SSID_len);
                        if (is_ssid_in_list(ssid, hidden_ssid_list, request->n_ssids)) {
                                ssids_local[ssid_cnt].hidden = TRUE;
                                WL_PNO((">>> PNO hidden SSID (%s) \n", ssid->ssid));
                        } else {
                                ssids_local[ssid_cnt].hidden = FALSE;
                                WL_PNO((">>> PNO non-hidden SSID (%s) \n", ssid->ssid));
                        }
#if (LINUX_VERSION_CODE > KERNEL_VERSION(3, 15, 0))
                        if (request->match_sets[i].rssi_thold != NL80211_SCAN_RSSI_THOLD_OFF) {
                                ssids_local[ssid_cnt].rssi_thresh =
                                      (int8)request->match_sets[i].rssi_thold;
                        }
#endif /* (LINUX_VERSION_CODE > KERNEL_VERSION(3, 15, 0)) */
                        ssid_cnt++;
                }
        }

        if (ssid_cnt) {
                if ((ret = dhd_dev_pno_set_for_ssid(dev, ssids_local, ssid_cnt,
                        pno_time, pno_repeat, pno_freq_expo_max, NULL, 0)) < 0) {
                        WL_ERR(("PNO setup failed!! ret=%d \n", ret));
                        ret = -EINVAL;
                        goto exit;
                }

                if (DBG_RING_ACTIVE(dhdp, DHD_EVENT_RING_ID)) {
                        for (i = 0; i < ssid_cnt; i++) {
                                payload_len = sizeof(log_conn_event_t);
                                event_data->event = WIFI_EVENT_DRIVER_PNO_ADD;
                                tlv_data = event_data->tlvs;
                                /* ssid */
                                tlv_data->tag = WIFI_TAG_SSID;
                                tlv_data->len = ssids_local[i].SSID_len;
                                memcpy(tlv_data->value, ssids_local[i].SSID,
                                        ssids_local[i].SSID_len);
                                payload_len += TLV_LOG_SIZE(tlv_data);

                                dhd_os_push_push_ring_data(dhdp, DHD_EVENT_RING_ID,
                                        event_data, payload_len);
                        }
                }

                spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
                cfg->sched_scan_req = request;
                spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);
        } else {
                ret = -EINVAL;
        }
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0)) && \
        defined(SUPPORT_RANDOM_MAC_SCAN)
        if (!ETHER_ISNULLADDR(request->mac_addr) && !ETHER_ISNULLADDR(request->mac_addr_mask)) {
                ret = wl_cfg80211_scan_mac_enable(dev, request->mac_addr, request->mac_addr_mask);
                /* Ignore if chip doesnt support the feature */
                if (ret < 0) {
                        if (ret == BCME_UNSUPPORTED) {
                                /* If feature is not supported, ignore the error (legacy chips) */
                                ret = BCME_OK;
                        } else {
                                WL_ERR(("set random mac failed (%d). Ignore.\n", ret));
                                /* Cleanup the states and stop the pno */
                                if (dhd_dev_pno_stop_for_ssid(dev) < 0) {
                                        WL_ERR(("PNO Stop for SSID failed"));
                                }
                                spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
                                cfg->sched_scan_req = NULL;
                                cfg->sched_scan_running = FALSE;
                                spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);
                        }
                }
        }
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0)) && (defined(SUPPORT_RANDOM_MAC_SCAN)) */
exit:
        if (event_data) {
                MFREE(cfg->osh, event_data->tlvs, tlv_len);
                MFREE(cfg->osh, event_data, alloc_len);
        }
        return ret;
}

static int
wl_cfg80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        unsigned long flags;

        WL_DBG(("Enter \n"));
        WL_PNO((">>> SCHED SCAN STOP\n"));

        if (dhd_dev_pno_stop_for_ssid(dev) < 0) {
                WL_ERR(("PNO Stop for SSID failed"));
        } else {
                DBG_EVENT_LOG(dhdp, WIFI_EVENT_DRIVER_PNO_REMOVE);
        }

        if (cfg->scan_request && cfg->sched_scan_running) {
                WL_PNO((">>> Sched scan running. Aborting it..\n"));
                wl_cfg80211_cancel_scan(cfg);
        }
        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
        cfg->sched_scan_req = NULL;
        cfg->sched_scan_running = FALSE;
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);
        return 0;
}
#endif /* WL_SCHED_SCAN */

#ifdef WL_SUPPORT_ACS
/*
 * Currently the dump_obss IOVAR is returning string as output so we need to
 * parse the output buffer in an unoptimized way. Going forward if we get the
 * IOVAR output in binary format this method can be optimized
 */
static int wl_parse_dump_obss(char *buf, struct wl_dump_survey *survey)
{
        int i;
        char *token;
        char delim[] = " \n";

        token = strsep(&buf, delim);
        while (token != NULL) {
                if (!strcmp(token, "OBSS")) {
                        for (i = 0; i < OBSS_TOKEN_IDX; i++)
                                token = strsep(&buf, delim);
                        survey->obss = simple_strtoul(token, NULL, 10);
                }

                if (!strcmp(token, "IBSS")) {
                        for (i = 0; i < IBSS_TOKEN_IDX; i++)
                                token = strsep(&buf, delim);
                        survey->ibss = simple_strtoul(token, NULL, 10);
                }

                if (!strcmp(token, "TXDur")) {
                        for (i = 0; i < TX_TOKEN_IDX; i++)
                                token = strsep(&buf, delim);
                        survey->tx = simple_strtoul(token, NULL, 10);
                }

                if (!strcmp(token, "Category")) {
                        for (i = 0; i < CTG_TOKEN_IDX; i++)
                                token = strsep(&buf, delim);
                        survey->no_ctg = simple_strtoul(token, NULL, 10);
                }

                if (!strcmp(token, "Packet")) {
                        for (i = 0; i < PKT_TOKEN_IDX; i++)
                                token = strsep(&buf, delim);
                        survey->no_pckt = simple_strtoul(token, NULL, 10);
                }

                if (!strcmp(token, "Opp(time):")) {
                        for (i = 0; i < IDLE_TOKEN_IDX; i++)
                                token = strsep(&buf, delim);
                        survey->idle = simple_strtoul(token, NULL, 10);
                }

                token = strsep(&buf, delim);
        }

        return 0;
}

static int wl_dump_obss(struct net_device *ndev, cca_msrmnt_query req,
        struct wl_dump_survey *survey)
{
        cca_stats_n_flags *results;
        char *buf;
        int retry, err;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);

        buf = (char *)MALLOCZ(cfg->osh, sizeof(char) * WLC_IOCTL_MAXLEN);
        if (unlikely(!buf)) {
                WL_ERR(("%s: buf alloc failed\n", __func__));
                return -ENOMEM;
        }

        retry = IOCTL_RETRY_COUNT;
        while (retry--) {
                err = wldev_iovar_getbuf(ndev, "dump_obss", &req, sizeof(req),
                        buf, WLC_IOCTL_MAXLEN, NULL);
                if (err >=  0) {
                        break;
                }
                WL_DBG(("attempt = %d, err = %d, \n",
                        (IOCTL_RETRY_COUNT - retry), err));
        }

        if (retry <= 0) {
                WL_ERR(("failure, dump_obss IOVAR failed\n"));
                err = -EINVAL;
                goto exit;
        }

        results = (cca_stats_n_flags *)(buf);
        wl_parse_dump_obss(results->buf, survey);
        MFREE(cfg->osh, buf, sizeof(char) * WLC_IOCTL_MAXLEN);

        return 0;
exit:
        MFREE(cfg->osh, buf, sizeof(char) * WLC_IOCTL_MAXLEN);
        return err;
}

static int wl_cfg80211_dump_survey(struct wiphy *wiphy, struct net_device *ndev,
        int idx, struct survey_info *info)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct wl_dump_survey *survey;
        struct ieee80211_supported_band *band;
        struct ieee80211_channel*chan;
        cca_msrmnt_query req;
        int val, err, noise, retry;

        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);
        if (!(dhd->op_mode & DHD_FLAG_HOSTAP_MODE)) {
                return -ENOENT;
        }
        band = wiphy->bands[NL80211_BAND_2GHZ];
        if (band && idx >= band->n_channels) {
                idx -= band->n_channels;
                band = NULL;
        }

        if (!band || idx >= band->n_channels) {
                /* Move to 5G band */
                band = wiphy->bands[NL80211_BAND_5GHZ];
                if (idx >= band->n_channels) {
                        return -ENOENT;
                }
        }

        chan = &band->channels[idx];
        /* Setting current channel to the requested channel */
        if ((err = wl_cfg80211_set_channel(wiphy, ndev, chan,
                NL80211_CHAN_HT20) < 0)) {
                WL_ERR(("Set channel failed \n"));
        }

        if (!idx) {
                /* Set interface up, explicitly. */
                val = 1;
                err = wldev_ioctl_set(ndev, WLC_UP, (void *)&val, sizeof(val));
                if (err < 0) {
                        WL_ERR(("set interface up failed, error = %d\n", err));
                }
        }

        /* Get noise value */
        retry = IOCTL_RETRY_COUNT;
        while (retry--) {
                noise = 0;
                err = wldev_ioctl_get(ndev, WLC_GET_PHY_NOISE, &noise,
                        sizeof(noise));
                if (err >=  0) {
                        break;
                }
                WL_DBG(("attempt = %d, err = %d, \n",
                        (IOCTL_RETRY_COUNT - retry), err));
        }

        if (retry <= 0) {
                WL_ERR(("Get Phy Noise failed, error = %d\n", err));
                noise = CHAN_NOISE_DUMMY;
        }

        survey = (struct wl_dump_survey *)MALLOCZ(cfg->osh,
                sizeof(struct wl_dump_survey));
        if (unlikely(!survey)) {
                WL_ERR(("%s: alloc failed\n", __func__));
                return -ENOMEM;
        }

        /* Start Measurement for obss stats on current channel */
        req.msrmnt_query = 0;
        req.time_req = ACS_MSRMNT_DELAY;
        if ((err = wl_dump_obss(ndev, req, survey)) < 0) {
                goto exit;
        }

        /*
         * Wait for the meaurement to complete, adding a buffer value of 10 to take
         * into consideration any delay in IOVAR completion
         */
        msleep(ACS_MSRMNT_DELAY + 10);

        /* Issue IOVAR to collect measurement results */
        req.msrmnt_query = 1;
        if ((err = wl_dump_obss(ndev, req, survey)) < 0) {
                goto exit;
        }

        info->channel = chan;
        info->noise = noise;
        info->channel_time = ACS_MSRMNT_DELAY;
        info->channel_time_busy = ACS_MSRMNT_DELAY - survey->idle;
        info->channel_time_rx = survey->obss + survey->ibss + survey->no_ctg +
                survey->no_pckt;
        info->channel_time_tx = survey->tx;
        info->filled = SURVEY_INFO_NOISE_DBM |SURVEY_INFO_CHANNEL_TIME |
                SURVEY_INFO_CHANNEL_TIME_BUSY | SURVEY_INFO_CHANNEL_TIME_RX |
                SURVEY_INFO_CHANNEL_TIME_TX;
        MFREE(cfg->osh, survey, sizeof(struct wl_dump_survey));

        return 0;
exit:
        MFREE(cfg->osh, survey, sizeof(struct wl_dump_survey));
        return err;
}
#endif /* WL_SUPPORT_ACS */

static struct cfg80211_ops wl_cfg80211_ops = {
        .add_virtual_intf = wl_cfg80211_add_virtual_iface,
        .del_virtual_intf = wl_cfg80211_del_virtual_iface,
        .change_virtual_intf = wl_cfg80211_change_virtual_iface,
#if defined(WL_CFG80211_P2P_DEV_IF)
        .start_p2p_device = wl_cfgp2p_start_p2p_device,
        .stop_p2p_device = wl_cfgp2p_stop_p2p_device,
#endif /* WL_CFG80211_P2P_DEV_IF */
        .scan = wl_cfg80211_scan,
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 5, 0))
        .abort_scan = wl_cfg80211_abort_scan,
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 5, 0)) */
        .set_wiphy_params = wl_cfg80211_set_wiphy_params,
        .join_ibss = wl_cfg80211_join_ibss,
        .leave_ibss = wl_cfg80211_leave_ibss,
        .get_station = wl_cfg80211_get_station,
        .set_tx_power = wl_cfg80211_set_tx_power,
        .get_tx_power = wl_cfg80211_get_tx_power,
        .add_key = wl_cfg80211_add_key,
        .del_key = wl_cfg80211_del_key,
        .get_key = wl_cfg80211_get_key,
        .set_default_key = wl_cfg80211_config_default_key,
        .set_default_mgmt_key = wl_cfg80211_config_default_mgmt_key,
        .set_power_mgmt = wl_cfg80211_set_power_mgmt,
        .connect = wl_cfg80211_connect,
        .disconnect = wl_cfg80211_disconnect,
        .suspend = wl_cfg80211_suspend,
        .resume = wl_cfg80211_resume,
        .set_pmksa = wl_cfg80211_set_pmksa,
        .del_pmksa = wl_cfg80211_del_pmksa,
        .flush_pmksa = wl_cfg80211_flush_pmksa,
        .remain_on_channel = wl_cfg80211_remain_on_channel,
        .cancel_remain_on_channel = wl_cfg80211_cancel_remain_on_channel,
        .mgmt_tx = wl_cfg80211_mgmt_tx,
        .mgmt_frame_register = wl_cfg80211_mgmt_frame_register,
        .change_bss = wl_cfg80211_change_bss,
#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 6, 0)) || defined(WL_COMPAT_WIRELESS)
        .set_channel = wl_cfg80211_set_channel,
#endif /* ((LINUX_VERSION < VERSION(3, 6, 0)) || WL_COMPAT_WIRELESS */
#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 4, 0)) && !defined(WL_COMPAT_WIRELESS)
        .set_beacon = wl_cfg80211_add_set_beacon,
        .add_beacon = wl_cfg80211_add_set_beacon,
        .del_beacon = wl_cfg80211_del_beacon,
#else
        .change_beacon = wl_cfg80211_change_beacon,
        .start_ap = wl_cfg80211_start_ap,
        .stop_ap = wl_cfg80211_stop_ap,
#endif /* LINUX_VERSION < KERNEL_VERSION(3,4,0) && !WL_COMPAT_WIRELESS */
#ifdef WL_SCHED_SCAN
        .sched_scan_start = wl_cfg80211_sched_scan_start,
        .sched_scan_stop = wl_cfg80211_sched_scan_stop,
#endif /* WL_SCHED_SCAN */
#if defined(WL_SUPPORT_BACKPORTED_KPATCHES) || (LINUX_VERSION_CODE >= KERNEL_VERSION(3, \
        2, 0))
        .del_station = wl_cfg80211_del_station,
        .change_station = wl_cfg80211_change_station,
        .mgmt_tx_cancel_wait = wl_cfg80211_mgmt_tx_cancel_wait,
#endif /* WL_SUPPORT_BACKPORTED_KPATCHES || KERNEL_VERSION >= (3,2,0) */
#if (LINUX_VERSION_CODE > KERNEL_VERSION(3, 2, 0)) || defined(WL_COMPAT_WIRELESS)
        .tdls_mgmt = wl_cfg80211_tdls_mgmt,
        .tdls_oper = wl_cfg80211_tdls_oper,
#endif /* LINUX_VERSION > VERSION(3, 2, 0) || WL_COMPAT_WIRELESS */
#ifdef WL_SUPPORT_ACS
        .dump_survey = wl_cfg80211_dump_survey,
#endif /* WL_SUPPORT_ACS */
#ifdef WL_CFG80211_ACL
        .set_mac_acl = wl_cfg80211_set_mac_acl,
#endif /* WL_CFG80211_ACL */
#ifdef GTK_OFFLOAD_SUPPORT
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 1, 0))
        .set_rekey_data = wl_cfg80211_set_rekey_data,
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 1, 0) */
#endif /* GTK_OFFLOAD_SUPPORT */
};

s32 wl_mode_to_nl80211_iftype(s32 mode)
{
        s32 err = 0;

        switch (mode) {
        case WL_MODE_BSS:
                return NL80211_IFTYPE_STATION;
        case WL_MODE_IBSS:
                return NL80211_IFTYPE_ADHOC;
        case WL_MODE_AP:
                return NL80211_IFTYPE_AP;
        default:
                return NL80211_IFTYPE_UNSPECIFIED;
        }

        return err;
}

#ifdef CONFIG_PM
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 6, 0))
static const struct wiphy_wowlan_support brcm_wowlan_support = {
        .flags = WIPHY_WOWLAN_ANY,
        .n_patterns = WL_WOWLAN_MAX_PATTERNS,
        .pattern_min_len = WL_WOWLAN_MIN_PATTERN_LEN,
        .pattern_max_len = WL_WOWLAN_MAX_PATTERN_LEN,
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0))
        .max_pkt_offset = WL_WOWLAN_MAX_PATTERN_LEN,
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0) */
};
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 6, 0) */
#endif /* CONFIG_PM */

static s32 wl_setup_wiphy(struct wireless_dev *wdev, struct device *sdiofunc_dev, void *context)
{
        s32 err = 0;
#ifdef CONFIG_PM
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 11, 0))
        struct cfg80211_wowlan *brcm_wowlan_config = NULL;
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 11, 0) */
#endif /* CONFIG_PM */

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0) || defined(WL_COMPAT_WIRELESS))
        dhd_pub_t *dhd = (dhd_pub_t *)context;
        BCM_REFERENCE(dhd);

        if (!dhd) {
                WL_ERR(("DHD is NULL!!"));
                err = -ENODEV;
                return err;
        }
#endif // endif

        wdev->wiphy =
            wiphy_new(&wl_cfg80211_ops, sizeof(struct bcm_cfg80211));
        if (unlikely(!wdev->wiphy)) {
                WL_ERR(("Couldn not allocate wiphy device\n"));
                err = -ENOMEM;
                return err;
        }
        set_wiphy_dev(wdev->wiphy, sdiofunc_dev);
        wdev->wiphy->max_scan_ie_len = WL_SCAN_IE_LEN_MAX;
        /* Report  how many SSIDs Driver can support per Scan request */
        wdev->wiphy->max_scan_ssids = WL_SCAN_PARAMS_SSID_MAX;
        wdev->wiphy->max_num_pmkids = WL_NUM_PMKIDS_MAX;
#ifdef WL_SCHED_SCAN
        wdev->wiphy->max_sched_scan_ssids = MAX_PFN_LIST_COUNT;
        wdev->wiphy->max_match_sets = MAX_PFN_LIST_COUNT;
        wdev->wiphy->max_sched_scan_ie_len = WL_SCAN_IE_LEN_MAX;
        wdev->wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN;
#endif /* WL_SCHED_SCAN */
        wdev->wiphy->interface_modes =
                BIT(NL80211_IFTYPE_STATION)
                | BIT(NL80211_IFTYPE_ADHOC)
#if !defined(WL_ENABLE_P2P_IF) && !defined(WL_CFG80211_P2P_DEV_IF)
                | BIT(NL80211_IFTYPE_MONITOR)
#endif /* !WL_ENABLE_P2P_IF && !WL_CFG80211_P2P_DEV_IF */
#if defined(WL_IFACE_COMB_NUM_CHANNELS) || defined(WL_CFG80211_P2P_DEV_IF)
                | BIT(NL80211_IFTYPE_P2P_CLIENT)
                | BIT(NL80211_IFTYPE_P2P_GO)
#endif /* WL_IFACE_COMB_NUM_CHANNELS || WL_CFG80211_P2P_DEV_IF */
#if defined(WL_CFG80211_P2P_DEV_IF)
                | BIT(NL80211_IFTYPE_P2P_DEVICE)
#endif /* WL_CFG80211_P2P_DEV_IF */
                | BIT(NL80211_IFTYPE_AP);

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 0, 0)) && \
        (defined(WL_IFACE_COMB_NUM_CHANNELS) || defined(WL_CFG80211_P2P_DEV_IF))
        WL_DBG(("Setting interface combinations for common mode\n"));
        wdev->wiphy->iface_combinations = common_iface_combinations;
        wdev->wiphy->n_iface_combinations =
                ARRAY_SIZE(common_iface_combinations);
#endif /* LINUX_VER >= 3.0 && (WL_IFACE_COMB_NUM_CHANNELS || WL_CFG80211_P2P_DEV_IF) */

        wdev->wiphy->bands[NL80211_BAND_2GHZ] = &__wl_band_2ghz;

        wdev->wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
        wdev->wiphy->cipher_suites = __wl_cipher_suites;
        wdev->wiphy->n_cipher_suites = ARRAY_SIZE(__wl_cipher_suites);
        wdev->wiphy->max_remain_on_channel_duration = 5000;
        wdev->wiphy->mgmt_stypes = wl_cfg80211_default_mgmt_stypes;
#ifndef WL_POWERSAVE_DISABLED
        wdev->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
#else
        wdev->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
#endif                          /* !WL_POWERSAVE_DISABLED */
        wdev->wiphy->flags |= WIPHY_FLAG_NETNS_OK |
                WIPHY_FLAG_4ADDR_AP |
#if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 39)) && !defined(WL_COMPAT_WIRELESS)
                WIPHY_FLAG_SUPPORTS_SEPARATE_DEFAULT_KEYS |
#endif // endif
                WIPHY_FLAG_4ADDR_STATION;
#if ((defined(ROAM_ENABLE) || defined(BCMFW_ROAM_ENABLE)) && ((LINUX_VERSION_CODE >= \
        KERNEL_VERSION(3, 2, 0)) || defined(WL_COMPAT_WIRELESS)))
        /*
         * If FW ROAM flag is advertised, upper layer wouldn't provide
         * the bssid & freq in the connect command. This will result a
         * delay in initial connection time due to firmware doing a full
         * channel scan to figure out the channel & bssid. However kernel
         * ver >= 3.15, provides bssid_hint & freq_hint and hence kernel
         * ver >= 3.15 won't have any issue. So if this flags need to be
         * advertised for kernel < 3.15, suggest to use RCC along with it
         * to avoid the initial connection delay.
         */
        wdev->wiphy->flags |= WIPHY_FLAG_SUPPORTS_FW_ROAM;
#endif /* (ROAM_ENABLE || BCMFW_ROAM_ENABLE) && (LINUX_VERSION 3.2.0  || WL_COMPAT_WIRELESS) */
#ifdef UNSET_FW_ROAM_WIPHY_FLAG
        wdev->wiphy->flags &= ~WIPHY_FLAG_SUPPORTS_FW_ROAM;
#endif /* UNSET_FW_ROAM_WIPHY_FLAG */
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 3, 0)) || defined(WL_COMPAT_WIRELESS)
        wdev->wiphy->flags |= WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL |
                WIPHY_FLAG_OFFCHAN_TX;
#endif // endif
#if defined(WL_SUPPORT_BACKPORTED_KPATCHES) || (LINUX_VERSION_CODE >= KERNEL_VERSION(3, \
        4, 0))
        /* From 3.4 kernel ownards AP_SME flag can be advertised
         * to remove the patch from supplicant
         */
        wdev->wiphy->flags |= WIPHY_FLAG_HAVE_AP_SME;

#ifdef WL_CFG80211_ACL
        /* Configure ACL capabilities. */
        wdev->wiphy->max_acl_mac_addrs = MAX_NUM_MAC_FILT;
#endif // endif

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0) || defined(WL_COMPAT_WIRELESS))
        /* Supplicant distinguish between the SoftAP mode and other
         * modes (e.g. P2P, WPS, HS2.0) when it builds the probe
         * response frame from Supplicant MR1 and Kernel 3.4.0 or
         * later version. To add Vendor specific IE into the
         * probe response frame in case of SoftAP mode,
         * AP_PROBE_RESP_OFFLOAD flag is set to wiphy->flags variable.
         */
        if (dhd_get_fw_mode(dhd->info) == DHD_FLAG_HOSTAP_MODE) {
                wdev->wiphy->flags |= WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD;
                wdev->wiphy->probe_resp_offload = 0;
        }
#endif // endif
#endif /* WL_SUPPORT_BACKPORTED_KPATCHES) || (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0)) */

#if (LINUX_VERSION_CODE > KERNEL_VERSION(3, 2, 0)) || defined(WL_COMPAT_WIRELESS)
        wdev->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS;
#endif // endif

#if defined(CONFIG_PM) && defined(WL_CFG80211_P2P_DEV_IF)
        /*
         * From linux-3.10 kernel, wowlan packet filter is mandated to avoid the
         * disconnection of connected network before suspend. So a dummy wowlan
         * filter is configured for kernels linux-3.8 and above.
         */

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 11, 0))
        wdev->wiphy->wowlan = &brcm_wowlan_support;
        /* If this is not provided cfg stack will get disconnect
        * during suspend.
        */
        brcm_wowlan_config = MALLOC(dhd->osh, sizeof(struct cfg80211_wowlan));
        if (brcm_wowlan_config) {
                brcm_wowlan_config->disconnect = true;
                brcm_wowlan_config->gtk_rekey_failure = true;
                brcm_wowlan_config->eap_identity_req = true;
                brcm_wowlan_config->four_way_handshake = true;
                brcm_wowlan_config->patterns = NULL;
                brcm_wowlan_config->n_patterns = 0;
                brcm_wowlan_config->tcp = NULL;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0))
                brcm_wowlan_config->nd_config = NULL;
#endif // endif
        } else {
                WL_ERR(("Can not allocate memory for brcm_wowlan_config,"
                        " So wiphy->wowlan_config is set to NULL\n"));
        }
        wdev->wiphy->wowlan_config = brcm_wowlan_config;
#else
        wdev->wiphy->wowlan.flags = WIPHY_WOWLAN_ANY;
        wdev->wiphy->wowlan.n_patterns = WL_WOWLAN_MAX_PATTERNS;
        wdev->wiphy->wowlan.pattern_min_len = WL_WOWLAN_MIN_PATTERN_LEN;
        wdev->wiphy->wowlan.pattern_max_len = WL_WOWLAN_MAX_PATTERN_LEN;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0))
        wdev->wiphy->wowlan.max_pkt_offset = WL_WOWLAN_MAX_PATTERN_LEN;
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0) */
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 11, 0) */
#endif /* CONFIG_PM && WL_CFG80211_P2P_DEV_IF */

        WL_DBG(("Registering custom regulatory)\n"));
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0))
        wdev->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG;
#else
        wdev->wiphy->flags |= WIPHY_FLAG_CUSTOM_REGULATORY;
#endif // endif
        wiphy_apply_custom_regulatory(wdev->wiphy, &brcm_regdom);

#if (LINUX_VERSION_CODE > KERNEL_VERSION(3, 14, 0)) || defined(WL_VENDOR_EXT_SUPPORT)
        WL_INFORM_MEM(("Registering Vendor80211\n"));
        err = wl_cfgvendor_attach(wdev->wiphy, dhd);
        if (unlikely(err < 0)) {
                WL_ERR(("Couldn not attach vendor commands (%d)\n", err));
        }
#endif /* (LINUX_VERSION_CODE > KERNEL_VERSION(3, 14, 0)) || defined(WL_VENDOR_EXT_SUPPORT) */

        /* Now we can register wiphy with cfg80211 module */
        err = wiphy_register(wdev->wiphy);
        if (unlikely(err < 0)) {
                WL_ERR(("Couldn not register wiphy device (%d)\n", err));
                wiphy_free(wdev->wiphy);
        }

#if ((LINUX_VERSION_CODE >= KERNEL_VERSION(3, 0, 0)) && (LINUX_VERSION_CODE <= \
        KERNEL_VERSION(3, 3, 0))) && defined(WL_IFACE_COMB_NUM_CHANNELS)
        wdev->wiphy->flags &= ~WIPHY_FLAG_ENFORCE_COMBINATIONS;
#endif // endif

#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 19, 0) && defined(SUPPORT_RANDOM_MAC_SCAN)
                wdev->wiphy->features |= (NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR |
                        NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR);
                        wdev->wiphy->max_sched_scan_plans = 1; /* multiple plans not supported */
#endif /* LINUX_VERSION_CODE < KERNEL_VERSION(3, 19, 0) */

        return err;
}

static void wl_free_wdev(struct bcm_cfg80211 *cfg)
{
        struct wireless_dev *wdev = cfg->wdev;
        struct wiphy *wiphy = NULL;
        if (!wdev) {
                WL_ERR(("wdev is invalid\n"));
                return;
        }
        if (wdev->wiphy) {
                wiphy = wdev->wiphy;

#if (LINUX_VERSION_CODE > KERNEL_VERSION(3, 14, 0)) || defined(WL_VENDOR_EXT_SUPPORT)
                wl_cfgvendor_detach(wdev->wiphy);
#endif /* (LINUX_VERSION_CODE > KERNEL_VERSION(3, 14, 0)) || defined(WL_VENDOR_EXT_SUPPORT) */
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 11, 0))
                /* Reset wowlan & wowlan_config before Unregister to avoid Kernel Panic */
                WL_DBG(("wl_free_wdev Clearing wowlan Config \n"));
                if (wdev->wiphy->wowlan_config) {
                        MFREE(cfg->osh, wdev->wiphy->wowlan_config,
                                sizeof(struct cfg80211_wowlan));
                        wdev->wiphy->wowlan_config = NULL;
                }
                wdev->wiphy->wowlan = NULL;
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 11, 0) */
                wiphy_unregister(wdev->wiphy);
                wdev->wiphy->dev.parent = NULL;
                wdev->wiphy = NULL;
        }

        wl_delete_all_netinfo(cfg);
        if (wiphy) {
                MFREE(cfg->osh, wdev, sizeof(*wdev));
                wiphy_free(wiphy);
        }

        /* PLEASE do NOT call any function after wiphy_free, the driver's private structure "cfg",
         * which is the private part of wiphy, has been freed in wiphy_free !!!!!!!!!!!
         */
}

static s32 wl_inform_bss(struct bcm_cfg80211 *cfg)
{
        struct wl_scan_results *bss_list;
        wl_bss_info_t *bi = NULL;       /* must be initialized */
        s32 err = 0;
        s32 i;

        bss_list = cfg->bss_list;
        WL_MEM(("scanned AP count (%d)\n", bss_list->count));
#ifdef ESCAN_CHANNEL_CACHE
        reset_roam_cache(cfg);
#endif /* ESCAN_CHANNEL_CACHE */
        preempt_disable();
        bi = next_bss(bss_list, bi);
        for_each_bss(bss_list, bi, i) {
#ifdef ESCAN_CHANNEL_CACHE
                add_roam_cache(cfg, bi);
#endif /* ESCAN_CHANNEL_CACHE */
                err = wl_inform_single_bss(cfg, bi, false);
                if (unlikely(err)) {
                        WL_ERR(("bss inform failed\n"));
                }
        }
        preempt_enable();
        WL_MEM(("cfg80211 scan cache updated\n"));
#ifdef ROAM_CHANNEL_CACHE
        /* print_roam_cache(); */
        update_roam_cache(cfg, ioctl_version);
#endif /* ROAM_CHANNEL_CACHE */
        return err;
}

static s32 wl_inform_single_bss(struct bcm_cfg80211 *cfg, wl_bss_info_t *bi, bool roam)
{
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
        struct ieee80211_mgmt *mgmt;
        struct ieee80211_channel *channel;
        struct ieee80211_supported_band *band;
        struct wl_cfg80211_bss_info *notif_bss_info;
        struct wl_scan_req *sr = wl_to_sr(cfg);
        struct beacon_proberesp *beacon_proberesp;
        struct cfg80211_bss *cbss = NULL;
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        log_conn_event_t *event_data = NULL;
        tlv_log *tlv_data = NULL;
        u32 alloc_len, tlv_len;
        u32 payload_len;
        s32 mgmt_type;
        s32 signal;
        u32 freq;
        s32 err = 0;
        gfp_t aflags;
        u8 tmp_buf[IEEE80211_MAX_SSID_LEN + 1];

        if (unlikely(dtoh32(bi->length) > WL_BSS_INFO_MAX)) {
                WL_DBG(("Beacon is larger than buffer. Discarding\n"));
                return err;
        }

        if (bi->SSID_len > IEEE80211_MAX_SSID_LEN) {
                WL_ERR(("wrong SSID len:%d\n", bi->SSID_len));
                return -EINVAL;
        }

        aflags = (in_atomic()) ? GFP_ATOMIC : GFP_KERNEL;
        notif_bss_info = (struct wl_cfg80211_bss_info *)MALLOCZ(cfg->osh,
                sizeof(*notif_bss_info) + sizeof(*mgmt) - sizeof(u8) + WL_BSS_INFO_MAX);
        if (unlikely(!notif_bss_info)) {
                WL_ERR(("notif_bss_info alloc failed\n"));
                return -ENOMEM;
        }
        mgmt = (struct ieee80211_mgmt *)notif_bss_info->frame_buf;
        notif_bss_info->channel =
                wf_chspec_ctlchan(wl_chspec_driver_to_host(bi->chanspec));

        if (notif_bss_info->channel <= CH_MAX_2G_CHANNEL)
                band = wiphy->bands[NL80211_BAND_2GHZ];
        else
                band = wiphy->bands[NL80211_BAND_5GHZ];
        if (!band) {
                WL_ERR(("No valid band"));
                MFREE(cfg->osh, notif_bss_info, sizeof(*notif_bss_info)
                        + sizeof(*mgmt) - sizeof(u8) + WL_BSS_INFO_MAX);
                return -EINVAL;
        }
        notif_bss_info->rssi = wl_rssi_offset(dtoh16(bi->RSSI));
        memcpy(mgmt->bssid, &bi->BSSID, ETHER_ADDR_LEN);
        mgmt_type = cfg->active_scan ?
                IEEE80211_STYPE_PROBE_RESP : IEEE80211_STYPE_BEACON;
        if (!memcmp(bi->SSID, sr->ssid.SSID, bi->SSID_len)) {
            mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | mgmt_type);
        }
        beacon_proberesp = cfg->active_scan ?
                (struct beacon_proberesp *)&mgmt->u.probe_resp :
                (struct beacon_proberesp *)&mgmt->u.beacon;
        beacon_proberesp->timestamp = 0;
        beacon_proberesp->beacon_int = cpu_to_le16(bi->beacon_period);
        beacon_proberesp->capab_info = cpu_to_le16(bi->capability);
        wl_rst_ie(cfg);
        wl_update_hidden_ap_ie(bi, ((u8 *) bi) + bi->ie_offset, &bi->ie_length, roam);
        wl_mrg_ie(cfg, ((u8 *) bi) + bi->ie_offset, bi->ie_length);
        wl_cp_ie(cfg, beacon_proberesp->variable, WL_BSS_INFO_MAX -
                offsetof(struct wl_cfg80211_bss_info, frame_buf));
        notif_bss_info->frame_len = offsetof(struct ieee80211_mgmt,
                u.beacon.variable) + wl_get_ielen(cfg);
#if LINUX_VERSION_CODE == KERNEL_VERSION(2, 6, 38) && !defined(WL_COMPAT_WIRELESS)
        freq = ieee80211_channel_to_frequency(notif_bss_info->channel);
        (void)band->band;
#else
        freq = ieee80211_channel_to_frequency(notif_bss_info->channel, band->band);
#endif // endif
        if (freq == 0) {
                WL_ERR(("Invalid channel, fail to chcnage channel to freq\n"));
                MFREE(cfg->osh, notif_bss_info, sizeof(*notif_bss_info)
                        + sizeof(*mgmt) - sizeof(u8) + WL_BSS_INFO_MAX);
                return -EINVAL;
        }
        channel = ieee80211_get_channel(wiphy, freq);
        if (unlikely(!channel)) {
                WL_ERR(("ieee80211_get_channel error\n"));
                MFREE(cfg->osh, notif_bss_info, sizeof(*notif_bss_info)
                        + sizeof(*mgmt) - sizeof(u8) + WL_BSS_INFO_MAX);
                return -EINVAL;
        }
        memcpy(tmp_buf, bi->SSID, bi->SSID_len);
        tmp_buf[bi->SSID_len] = '\0';
        WL_DBG(("SSID : \"%s\", rssi %d, channel %d, capability : 0x04%x, bssid %pM"
                        "mgmt_type %d frame_len %d\n", tmp_buf,
                        notif_bss_info->rssi, notif_bss_info->channel,
                        mgmt->u.beacon.capab_info, &bi->BSSID, mgmt_type,
                        notif_bss_info->frame_len));

        signal = notif_bss_info->rssi * 100;
        if (!mgmt->u.probe_resp.timestamp) {
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 39))
                struct timespec ts;
                get_monotonic_boottime(&ts);
                mgmt->u.probe_resp.timestamp = ((u64)ts.tv_sec*1000000)
                                + ts.tv_nsec / 1000;
#else
                struct timeval tv;
                do_gettimeofday(&tv);
                mgmt->u.probe_resp.timestamp = ((u64)tv.tv_sec*1000000)
                                + tv.tv_usec;
#endif // endif
        }

        cbss = cfg80211_inform_bss_frame(wiphy, channel, mgmt,
                le16_to_cpu(notif_bss_info->frame_len), signal, aflags);
        if (unlikely(!cbss)) {
                WL_ERR(("cfg80211_inform_bss_frame error bssid " MACDBG " channel %d \n",
                        MAC2STRDBG((u8*)(&bi->BSSID)), notif_bss_info->channel));
                err = -EINVAL;
                goto out_err;
        }

        CFG80211_PUT_BSS(wiphy, cbss);

        if (DBG_RING_ACTIVE(dhdp, DHD_EVENT_RING_ID) &&
                        (cfg->sched_scan_req && !cfg->scan_request)) {
                alloc_len = sizeof(log_conn_event_t) + IEEE80211_MAX_SSID_LEN + sizeof(uint16) +
                        sizeof(int16);
                event_data = (log_conn_event_t *)MALLOCZ(cfg->osh, alloc_len);
                if (!event_data) {
                        WL_ERR(("%s: failed to allocate the log_conn_event_t with "
                                "length(%d)\n", __func__, alloc_len));
                        goto out_err;
                }
                tlv_len = 3 * sizeof(tlv_log);
                event_data->tlvs = (tlv_log *)MALLOCZ(cfg->osh, tlv_len);
                if (!event_data->tlvs) {
                        WL_ERR(("%s: failed to allocate the log_conn_event_t with "
                                "length(%d)\n", __func__, tlv_len));
                        goto free_evt_data;
                }

                payload_len = sizeof(log_conn_event_t);
                event_data->event = WIFI_EVENT_DRIVER_PNO_SCAN_RESULT_FOUND;
                tlv_data = event_data->tlvs;

                /* ssid */
                tlv_data->tag = WIFI_TAG_SSID;
                tlv_data->len = bi->SSID_len;
                memcpy(tlv_data->value, bi->SSID, bi->SSID_len);
                payload_len += TLV_LOG_SIZE(tlv_data);
                tlv_data = TLV_LOG_NEXT(tlv_data);

                /* channel */
                tlv_data->tag = WIFI_TAG_CHANNEL;
                tlv_data->len = sizeof(uint16);
                memcpy(tlv_data->value, &notif_bss_info->channel, sizeof(uint16));
                payload_len += TLV_LOG_SIZE(tlv_data);
                tlv_data = TLV_LOG_NEXT(tlv_data);

                /* rssi */
                tlv_data->tag = WIFI_TAG_RSSI;
                tlv_data->len = sizeof(int16);
                memcpy(tlv_data->value, &notif_bss_info->rssi, sizeof(int16));
                payload_len += TLV_LOG_SIZE(tlv_data);
                tlv_data = TLV_LOG_NEXT(tlv_data);

                dhd_os_push_push_ring_data(dhdp, DHD_EVENT_RING_ID,
                        event_data, payload_len);
                MFREE(dhdp->osh, event_data->tlvs, tlv_len);
free_evt_data:
                MFREE(dhdp->osh, event_data, alloc_len);
        }

out_err:
        MFREE(cfg->osh, notif_bss_info, sizeof(*notif_bss_info)
                        + sizeof(*mgmt) - sizeof(u8) + WL_BSS_INFO_MAX);
        return err;
}

static bool wl_is_linkup(struct bcm_cfg80211 *cfg, const wl_event_msg_t *e, struct net_device *ndev)
{
        u32 event = ntoh32(e->event_type);
        u32 status =  ntoh32(e->status);
        u16 flags = ntoh16(e->flags);
#if defined(CUSTOM_SET_OCLOFF) || defined(CUSTOM_SET_ANTNPM)
        dhd_pub_t *dhd;
        dhd = (dhd_pub_t *)(cfg->pub);
#endif /* CUSTOM_SET_OCLOFF || CUSTOM_SET_ANTNPM */

        WL_DBG(("event %d, status %d flags %x\n", event, status, flags));
        if (event == WLC_E_SET_SSID) {
                if (status == WLC_E_STATUS_SUCCESS) {
#ifdef CUSTOM_SET_OCLOFF
                        if (dhd->ocl_off) {
                                int err = 0;
                                int ocl_enable = 0;
                                err = wldev_iovar_setint(ndev, "ocl_enable", ocl_enable);
                                if (err != 0) {
                                        WL_ERR(("[WIFI_SEC] %s: Set ocl_enable %d failed %d\n",
                                                __FUNCTION__, ocl_enable, err));
                                } else {
                                        WL_ERR(("[WIFI_SEC] %s: Set ocl_enable %d succeeded %d\n",
                                                __FUNCTION__, ocl_enable, err));
                                }
                        }
#endif /* CUSTOM_SET_OCLOFF */
#ifdef CUSTOM_SET_ANTNPM
                        if (dhd->mimo_ant_set) {
                                int err = 0;

                                WL_ERR(("[WIFI_SEC] mimo_ant_set = %d\n", dhd->mimo_ant_set));
                                err = wldev_iovar_setint(ndev, "txchain", dhd->mimo_ant_set);
                                if (err != 0) {
                                        WL_ERR(("[WIFI_SEC] Fail set txchain\n"));
                                }
                                err = wldev_iovar_setint(ndev, "rxchain", dhd->mimo_ant_set);
                                if (err != 0) {
                                        WL_ERR(("[WIFI_SEC] Fail set rxchain\n"));
                                }
                        }
#endif /* CUSTOM_SET_ANTNPM */
                        if (!wl_is_ibssmode(cfg, ndev))
                                return true;
                }
        } else if (event == WLC_E_LINK) {
                if (flags & WLC_EVENT_MSG_LINK)
                        return true;
        }

        WL_DBG(("wl_is_linkup false\n"));
        return false;
}

#ifdef WL_LASTEVT
static bool wl_is_linkdown(struct bcm_cfg80211 *cfg, const wl_event_msg_t *e, void *data)
{
        u32 event = ntoh32(e->event_type);
        u16 flags = ntoh16(e->flags);
        wl_last_event_t *last_event = (wl_last_event_t *)data;
        u32 len = ntoh32(e->datalen);

        if (event == WLC_E_DEAUTH_IND ||
        event == WLC_E_DISASSOC_IND ||
        event == WLC_E_DISASSOC ||
        event == WLC_E_DEAUTH) {
                WL_ERR(("Link down Reason : %s\n", bcmevent_get_name(event)));
                return true;
        } else if (event == WLC_E_LINK) {
                if (!(flags & WLC_EVENT_MSG_LINK)) {
                        if (last_event && len > 0) {
                                u32 current_time = last_event->current_time;
                                u32 timestamp = last_event->timestamp;
                                u32 event_type = last_event->event.event_type;
                                u32 status = last_event->event.status;
                                u32 reason = last_event->event.reason;

                                WL_ERR(("Last roam event before disconnection : current_time %d,"
                                        " time %d, type %d, status %d, reason %d\n",
                                        current_time, timestamp, event_type, status, reason));
                        }
                        WL_ERR(("Link down Reason : %s\n", bcmevent_get_name(event)));
                        return true;
                }
        }

        return false;
}
#else
static bool wl_is_linkdown(struct bcm_cfg80211 *cfg, const wl_event_msg_t *e)
{
        u32 event = ntoh32(e->event_type);
        u16 flags = ntoh16(e->flags);

        if (event == WLC_E_DEAUTH_IND ||
        event == WLC_E_DISASSOC_IND ||
        event == WLC_E_DISASSOC ||
        event == WLC_E_DEAUTH) {
                WL_ERR(("Link down Reason : %s\n", bcmevent_get_name(event)));
                return true;
        } else if (event == WLC_E_LINK) {
                if (!(flags & WLC_EVENT_MSG_LINK)) {
                        WL_ERR(("Link down Reason : %s\n", bcmevent_get_name(event)));
                        return true;
                }
        }

        return false;
}
#endif /* WL_LASTEVT */

static bool wl_is_nonetwork(struct bcm_cfg80211 *cfg, const wl_event_msg_t *e)
{
        u32 event = ntoh32(e->event_type);
        u32 status = ntoh32(e->status);

        if (event == WLC_E_LINK && status == WLC_E_STATUS_NO_NETWORKS)
                return true;
        if (event == WLC_E_SET_SSID && status != WLC_E_STATUS_SUCCESS)
                return true;

        return false;
}

/* The mainline kernel >= 3.2.0 has support for indicating new/del station
 * to AP/P2P GO via events. If this change is backported to kernel for which
 * this driver is being built, then define WL_CFG80211_STA_EVENT. You
 * should use this new/del sta event mechanism for BRCM supplicant >= 22.
 */
static s32
wl_notify_connect_status_ap(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, void *data)
{
        s32 err = 0;
        u32 event = ntoh32(e->event_type);
        u32 reason = ntoh32(e->reason);
        u32 len = ntoh32(e->datalen);
        u32 status = ntoh32(e->status);

#if !defined(WL_CFG80211_STA_EVENT) && !defined(WL_COMPAT_WIRELESS) && \
        (LINUX_VERSION_CODE < KERNEL_VERSION(3, 2, 0))
        bool isfree = false;
        u8 *mgmt_frame;
        u8 bsscfgidx = e->bsscfgidx;
        s32 freq;
        s32 channel;
        u8 *body = NULL;
        u16 fc = 0;
        u32 body_len = 0;

        struct ieee80211_supported_band *band;
        struct ether_addr da;
        struct ether_addr bssid;
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
        channel_info_t ci;
        u8 ioctl_buf[WLC_IOCTL_SMLEN];
#else
        struct station_info sinfo;
#endif /* (LINUX_VERSION < VERSION(3,2,0)) && !WL_CFG80211_STA_EVENT && !WL_COMPAT_WIRELESS */
#ifdef BIGDATA_SOFTAP
        dhd_pub_t *dhdp;
#endif /* BIGDATA_SOFTAP */

        WL_INFORM_MEM(("[%s] Mode AP/GO. Event:%d status:%d reason:%d\n",
                ndev->name, event, ntoh32(e->status), reason));
        /* if link down, bsscfg is disabled. */
        if (event == WLC_E_LINK && reason == WLC_E_LINK_BSSCFG_DIS &&
                wl_get_p2p_status(cfg, IF_DELETING) && (ndev != bcmcfg_to_prmry_ndev(cfg))) {
                wl_add_remove_eventmsg(ndev, WLC_E_PROBREQ_MSG, false);
                WL_INFORM_MEM(("AP mode link down !! \n"));
                complete(&cfg->iface_disable);
                return 0;
        }

        if ((event == WLC_E_LINK) && (status == WLC_E_STATUS_SUCCESS) &&
                (reason == WLC_E_REASON_INITIAL_ASSOC) &&
                (wl_get_mode_by_netdev(cfg, ndev) == WL_MODE_AP)) {
                if (!wl_get_drv_status(cfg, AP_CREATED, ndev)) {
                        /* AP/GO brought up successfull in firmware */
                        WL_INFORM_MEM(("AP/GO Link up\n"));
                        wl_set_drv_status(cfg, AP_CREATED, ndev);
                        wake_up_interruptible(&cfg->netif_change_event);
#ifdef BIGDATA_SOFTAP
                        wl_ap_stainfo_init(cfg);
#endif /* BIGDATA_SOFTAP */
#ifdef WL_BCNRECV
                        /* check fakeapscan is in progress, if progress then abort */
                        wl_android_bcnrecv_stop(ndev, WL_BCNRECV_CONCURRENCY);
#endif /* WL_BCNRECV */
                        return 0;
                }
        }

        if (event == WLC_E_DISASSOC_IND || event == WLC_E_DEAUTH_IND || event == WLC_E_DEAUTH) {
                WL_DBG(("event %s(%d) status %d reason %d\n",
                bcmevent_get_name(event), event, ntoh32(e->status), reason));
        }

#ifdef BIGDATA_SOFTAP
        if (event == WLC_E_LINK && reason == WLC_E_LINK_BSSCFG_DIS) {
                WL_ERR(("AP link down - skip get sta data\n"));
        } else {
                dhdp = (dhd_pub_t *)(cfg->pub);
                if (dhdp && dhdp->op_mode & DHD_FLAG_HOSTAP_MODE) {
                        dhd_schedule_gather_ap_stadata(cfg, ndev, e);
                }
        }
#endif /* BIGDATA_SOFTAP */

#if !defined(WL_CFG80211_STA_EVENT) && !defined(WL_COMPAT_WIRELESS) && \
        (LINUX_VERSION_CODE < KERNEL_VERSION(3, 2, 0))
        WL_DBG(("Enter \n"));
        if (!len && (event == WLC_E_DEAUTH)) {
                len = 2; /* reason code field */
                data = &reason;
        }
        if (len) {
                body = (u8 *)MALLOCZ(cfg->osh, len);
                if (body == NULL) {
                        WL_ERR(("wl_notify_connect_status: Failed to allocate body\n"));
                        return WL_INVALID;
                }
        }
        memset(&bssid, 0, ETHER_ADDR_LEN);
        WL_DBG(("Enter event %d ndev %p\n", event, ndev));
        if (wl_get_mode_by_netdev(cfg, ndev) == WL_INVALID) {
                MFREE(cfg->osh, body, len);
                return WL_INVALID;
        }
        if (len)
                memcpy(body, data, len);

        wldev_iovar_getbuf_bsscfg(ndev, "cur_etheraddr",
                NULL, 0, ioctl_buf, sizeof(ioctl_buf), bsscfgidx, NULL);
        memcpy(da.octet, ioctl_buf, ETHER_ADDR_LEN);
        memset(&bssid, 0, sizeof(bssid));
        err = wldev_ioctl_get(ndev, WLC_GET_BSSID, &bssid, ETHER_ADDR_LEN);
        switch (event) {
                case WLC_E_ASSOC_IND:
                        fc = FC_ASSOC_REQ;
                        break;
                case WLC_E_REASSOC_IND:
                        fc = FC_REASSOC_REQ;
                        break;
                case WLC_E_DISASSOC_IND:
                        fc = FC_DISASSOC;
                        break;
                case WLC_E_DEAUTH_IND:
                        fc = FC_DISASSOC;
                        break;
                case WLC_E_DEAUTH:
                        fc = FC_DISASSOC;
                        break;
                default:
                        fc = 0;
                        goto exit;
        }
        memset(&ci, 0, sizeof(ci));
        if ((err = wldev_ioctl_get(ndev, WLC_GET_CHANNEL, &ci, sizeof(ci)))) {
                MFREE(cfg->osh, body, len);
                return err;
        }

        channel = dtoh32(ci.hw_channel);
        if (channel <= CH_MAX_2G_CHANNEL)
                band = wiphy->bands[NL80211_BAND_2GHZ];
        else
                band = wiphy->bands[NL80211_BAND_5GHZ];
        if (!band) {
                WL_ERR(("No valid band"));
                if (body) {
                        MFREE(cfg->osh, body, len);
                }
                return -EINVAL;
        }
#if LINUX_VERSION_CODE == KERNEL_VERSION(2, 6, 38) && !defined(WL_COMPAT_WIRELESS)
        freq = ieee80211_channel_to_frequency(channel);
        (void)band->band;
#else
        freq = ieee80211_channel_to_frequency(channel, band->band);
#endif // endif
        body_len = len;
        err = wl_frame_get_mgmt(cfg, fc, &da, &e->addr, &bssid,
                &mgmt_frame, &len, body);
        if (err < 0)
                goto exit;
        isfree = true;

        if ((event == WLC_E_ASSOC_IND && reason == DOT11_SC_SUCCESS) ||
                        (event == WLC_E_DISASSOC_IND) ||
                        ((event == WLC_E_DEAUTH_IND) || (event == WLC_E_DEAUTH))) {
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 18, 0))
                cfg80211_rx_mgmt(ndev, freq, 0, mgmt_frame, len, 0);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 12, 0))
                cfg80211_rx_mgmt(ndev, freq, 0, mgmt_frame, len, 0, GFP_ATOMIC);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0)) || \
                defined(WL_COMPAT_WIRELESS)
                cfg80211_rx_mgmt(ndev, freq, 0, mgmt_frame, len, GFP_ATOMIC);
#else
                cfg80211_rx_mgmt(ndev, freq, mgmt_frame, len, GFP_ATOMIC);
#endif /* LINUX_VERSION >= VERSION(3, 18,0) || WL_COMPAT_WIRELESS */
        }

exit:
        if (isfree) {
                MFREE(cfg->osh, mgmt_frame, len);
        }
        if (body) {
                MFREE(cfg->osh, body, body_len);
        }
#else /* LINUX_VERSION < VERSION(3,2,0) && !WL_CFG80211_STA_EVENT && !WL_COMPAT_WIRELESS */
        sinfo.filled = 0;
        if (((event == WLC_E_ASSOC_IND) || (event == WLC_E_REASSOC_IND)) &&
                reason == DOT11_SC_SUCCESS) {
                /* Linux ver >= 4.0 assoc_req_ies_len is used instead of
                 * STATION_INFO_ASSOC_REQ_IES flag
                 */
#if (LINUX_VERSION_CODE < KERNEL_VERSION(4, 0, 0))
                sinfo.filled = STA_INFO_BIT(INFO_ASSOC_REQ_IES);
#endif /*  (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 0, 0)) */
                if (!data) {
                        WL_ERR(("No IEs present in ASSOC/REASSOC_IND"));
                        return -EINVAL;
                }
                sinfo.assoc_req_ies = data;
                sinfo.assoc_req_ies_len = len;
                WL_INFORM_MEM(("[%s] new sta event for "MACDBG "\n",
                        ndev->name, MAC2STRDBG(e->addr.octet)));
                cfg80211_new_sta(ndev, e->addr.octet, &sinfo, GFP_ATOMIC);
#ifdef WL_WPS_SYNC
                wl_wps_session_update(ndev, WPS_STATE_LINKUP, e->addr.octet);
#endif /* WL_WPS_SYNC */
        } else if ((event == WLC_E_DEAUTH_IND) ||
                ((event == WLC_E_DEAUTH) && (reason != DOT11_RC_RESERVED)) ||
                (event == WLC_E_DISASSOC_IND)) {
                WL_INFORM_MEM(("[%s] del sta event for "MACDBG "\n",
                        ndev->name, MAC2STRDBG(e->addr.octet)));
                cfg80211_del_sta(ndev, e->addr.octet, GFP_ATOMIC);
#ifdef WL_WPS_SYNC
                wl_wps_session_update(ndev, WPS_STATE_LINKDOWN, e->addr.octet);
#endif /* WL_WPS_SYNC */
        }
#endif /* LINUX_VERSION < VERSION(3,2,0) && !WL_CFG80211_STA_EVENT && !WL_COMPAT_WIRELESS */
        return err;
}

#if defined(DHD_ENABLE_BIGDATA_LOGGING)
enum {
        BIGDATA_ASSOC_REJECT_NO_ACK = 1,
        BIGDATA_ASSOC_REJECT_FAIL = 2,
        BIGDATA_ASSOC_REJECT_UNSOLICITED = 3,
        BIGDATA_ASSOC_REJECT_TIMEOUT = 4,
        BIGDATA_ASSOC_REJECT_ABORT = 5,
        BIGDATA_ASSOC_REJECT_NO_NETWWORKS = 6,
        BIGDATA_ASSOC_REJECT_MAX = 50
};

int wl_get_connect_failed_status(struct bcm_cfg80211 *cfg, const wl_event_msg_t *e)
{
        u32 status = ntoh32(e->status);

        cfg->assoc_reject_status = 0;

        if (status != WLC_E_STATUS_SUCCESS) {
                WL_ERR(("auth assoc status event=%d e->status %d e->reason %d \n",
                        ntoh32(cfg->event_auth_assoc.event_type),
                        (int)ntoh32(cfg->event_auth_assoc.status),
                        (int)ntoh32(cfg->event_auth_assoc.reason)));

                switch ((int)ntoh32(cfg->event_auth_assoc.status)) {
                        case WLC_E_STATUS_NO_ACK:
                                cfg->assoc_reject_status = BIGDATA_ASSOC_REJECT_NO_ACK;
                                break;
                        case WLC_E_STATUS_FAIL:
                                cfg->assoc_reject_status = BIGDATA_ASSOC_REJECT_FAIL;
                                break;
                        case WLC_E_STATUS_UNSOLICITED:
                                cfg->assoc_reject_status = BIGDATA_ASSOC_REJECT_UNSOLICITED;
                                break;
                        case WLC_E_STATUS_TIMEOUT:
                                cfg->assoc_reject_status = BIGDATA_ASSOC_REJECT_TIMEOUT;
                                break;
                        case WLC_E_STATUS_ABORT:
                                cfg->assoc_reject_status = BIGDATA_ASSOC_REJECT_ABORT;
                                break;
                        case WLC_E_STATUS_SUCCESS:
                                if (status == WLC_E_STATUS_NO_NETWORKS) {
                                        cfg->assoc_reject_status =
                                                BIGDATA_ASSOC_REJECT_NO_NETWWORKS;
                                        break;
                                }
                        default:
                                cfg->assoc_reject_status = BIGDATA_ASSOC_REJECT_MAX;
                                break;
                }
                if (cfg->assoc_reject_status) {
                        if (ntoh32(cfg->event_auth_assoc.event_type) == WLC_E_ASSOC) {
                                cfg->assoc_reject_status += BIGDATA_ASSOC_REJECT_MAX;
                        }
                }
        }

        WL_ERR(("assoc_reject_status %d \n", cfg->assoc_reject_status));

        return 0;
}

s32 wl_cfg80211_get_connect_failed_status(struct net_device *dev, char* cmd, int total_len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        int bytes_written = 0;

        if (cfg == NULL) {
                return -1;
        }
        bytes_written = snprintf(cmd, total_len, "assoc_reject.status %d",
                        cfg->assoc_reject_status);
        WL_ERR(("cmd: %s \n", cmd));
        return bytes_written;
}
#endif /* DHD_ENABLE_BIGDATA_LOGGING */

static s32
wl_get_auth_assoc_status(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e)
{
        u32 reason = ntoh32(e->reason);
        u32 event = ntoh32(e->event_type);
        struct wl_security *sec = wl_read_prof(cfg, ndev, WL_PROF_SEC);
        WL_DBG(("event type : %d, reason : %d\n", event, reason));

#if defined(DHD_ENABLE_BIGDATA_LOGGING)
        memcpy(&cfg->event_auth_assoc, e, sizeof(wl_event_msg_t));
        WL_ERR(("event=%d status %d reason %d \n",
                ntoh32(cfg->event_auth_assoc.event_type),
                ntoh32(cfg->event_auth_assoc.status),
                ntoh32(cfg->event_auth_assoc.reason)));
#endif /* DHD_ENABLE_BIGDATA_LOGGING */
        if (sec) {
                switch (event) {
                case WLC_E_ASSOC:
                case WLC_E_AUTH:
                                sec->auth_assoc_res_status = reason;
                default:
                        break;
                }
        } else
                WL_ERR(("sec is NULL\n"));
        return 0;
}

static s32
wl_notify_connect_status_ibss(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, void *data)
{
        s32 err = 0;
        u32 event = ntoh32(e->event_type);
        u16 flags = ntoh16(e->flags);
        u32 status =  ntoh32(e->status);
        bool active;
#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0)
        struct ieee80211_channel *channel = NULL;
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
        u32 chanspec, chan;
        u32 freq, band;
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0) */

        if (event == WLC_E_JOIN) {
                WL_INFORM_MEM(("[%s] joined in IBSS network\n", ndev->name));
        }
        if (event == WLC_E_START) {
                WL_INFORM_MEM(("[%s] started IBSS network\n", ndev->name));
        }
        if (event == WLC_E_JOIN || event == WLC_E_START ||
                (event == WLC_E_LINK && (flags == WLC_EVENT_MSG_LINK))) {
#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0)
                err = wldev_iovar_getint(ndev, "chanspec", (s32 *)&chanspec);
                if (unlikely(err)) {
                        WL_ERR(("Could not get chanspec %d\n", err));
                        return err;
                }
                chan = wf_chspec_ctlchan(wl_chspec_driver_to_host(chanspec));
                band = (chan <= CH_MAX_2G_CHANNEL) ? NL80211_BAND_2GHZ : NL80211_BAND_5GHZ;
                freq = ieee80211_channel_to_frequency(chan, band);
                channel = ieee80211_get_channel(wiphy, freq);
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0) */
                if (wl_get_drv_status(cfg, CONNECTED, ndev)) {
                        /* ROAM or Redundant */
                        u8 *cur_bssid = wl_read_prof(cfg, ndev, WL_PROF_BSSID);
                        if (memcmp(cur_bssid, &e->addr, ETHER_ADDR_LEN) == 0) {
                                WL_DBG(("IBSS connected event from same BSSID("
                                        MACDBG "), ignore it\n", MAC2STRDBG(cur_bssid)));
                                return err;
                        }
                        WL_INFORM_MEM(("[%s] IBSS BSSID is changed from " MACDBG " to " MACDBG "\n",
                                ndev->name, MAC2STRDBG(cur_bssid),
                                MAC2STRDBG((const u8 *)&e->addr)));
                        wl_get_assoc_ies(cfg, ndev);
                        wl_update_prof(cfg, ndev, NULL, (const void *)&e->addr, WL_PROF_BSSID);
                        wl_update_bss_info(cfg, ndev, false);
#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0)
                        cfg80211_ibss_joined(ndev, (const s8 *)&e->addr, channel, GFP_KERNEL);
#else
                        cfg80211_ibss_joined(ndev, (const s8 *)&e->addr, GFP_KERNEL);
#endif // endif
                }
                else {
                        /* New connection */
                        WL_INFORM_MEM(("[%s] IBSS connected to " MACDBG "\n",
                                ndev->name, MAC2STRDBG((const u8 *)&e->addr)));
                        wl_link_up(cfg);
                        wl_get_assoc_ies(cfg, ndev);
                        wl_update_prof(cfg, ndev, NULL, (const void *)&e->addr, WL_PROF_BSSID);
                        wl_update_bss_info(cfg, ndev, false);
#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0)
                        cfg80211_ibss_joined(ndev, (const s8 *)&e->addr, channel, GFP_KERNEL);
#else
                        cfg80211_ibss_joined(ndev, (const s8 *)&e->addr, GFP_KERNEL);
#endif // endif
                        wl_set_drv_status(cfg, CONNECTED, ndev);
                        active = true;
                        wl_update_prof(cfg, ndev, NULL, (const void *)&active, WL_PROF_ACT);
                }
        } else if ((event == WLC_E_LINK && !(flags & WLC_EVENT_MSG_LINK)) ||
                event == WLC_E_DEAUTH_IND || event == WLC_E_DISASSOC_IND) {
                wl_clr_drv_status(cfg, CONNECTED, ndev);
                wl_link_down(cfg);
                wl_init_prof(cfg, ndev);
        }
        else if (event == WLC_E_SET_SSID && status == WLC_E_STATUS_NO_NETWORKS) {
                WL_INFORM_MEM(("no action - join fail (IBSS mode)\n"));
        }
        else {
                WL_DBG(("no action (IBSS mode)\n"));
}
        return err;
}

#if defined(DHD_ENABLE_BIGDATA_LOGGING)
#define WiFiALL_OUI         "\x50\x6F\x9A"  /* Wi-FiAll OUI */
#define WiFiALL_OUI_LEN     3
#define WiFiALL_OUI_TYPE    16

/* 11kv feature flag for big data */
#define WL_BIGDATA_11KV_QBSSLOAD                0x00000001
#define WL_BIGDATA_11KV_PROXYARP                0x00000002
#define WL_BIGDATA_11KV_TFS                     0x00000004
#define WL_BIGDATA_11KV_SLEEP                   0x00000008
#define WL_BIGDATA_11KV_TIMBC                   0x00000010
#define WL_BIGDATA_11KV_BSSTRANS                0x00000020
#define WL_BIGDATA_11KV_DMS                     0x00000040
#define WL_BIGDATA_11KV_LINK_MEA                0x00000080
#define WL_BIGDATA_11KV_NBRREP                  0x00000100
#define WL_BIGDATA_11KV_BCNPASSIVE              0x00000200
#define WL_BIGDATA_11KV_BCNACTIVE               0x00000400
#define WL_BIGDATA_11KV_BCNTABLE                0x00000800
#define WL_BIGDATA_11KV_BSSAAD                  0x00001000
#define WL_BIGDATA_11KV_MAX                     0x00002000

#define WL_BIGDATA_SUPPORT_11K          0x00000001
#define WL_BIGDATA_SUPPORT_11V          0x00000002

typedef struct {
        uint8   bitmap;
        uint8   octet_len;
        uint32  flag;
} bigdata_11kv_t;

bigdata_11kv_t bigdata_11k_info[] = {
        {DOT11_RRM_CAP_LINK, DOT11_RRM_CAP_LEN, WL_BIGDATA_11KV_LINK_MEA},
        {DOT11_RRM_CAP_NEIGHBOR_REPORT, DOT11_RRM_CAP_LEN, WL_BIGDATA_11KV_NBRREP},
        {DOT11_RRM_CAP_BCN_PASSIVE, DOT11_RRM_CAP_LEN, WL_BIGDATA_11KV_BCNPASSIVE},
        {DOT11_RRM_CAP_BCN_ACTIVE, DOT11_RRM_CAP_LEN, WL_BIGDATA_11KV_BCNACTIVE},
        {DOT11_RRM_CAP_BCN_TABLE, DOT11_RRM_CAP_LEN, WL_BIGDATA_11KV_BCNTABLE},
        {DOT11_RRM_CAP_BSSAAD, DOT11_RRM_CAP_LEN, WL_BIGDATA_11KV_BSSAAD},
};

bigdata_11kv_t bigdata_11v_info[] = {
        {DOT11_EXT_CAP_PROXY_ARP, DOT11_EXTCAP_LEN_PROXY_ARP, WL_BIGDATA_11KV_PROXYARP},
        {DOT11_EXT_CAP_TFS, DOT11_EXTCAP_LEN_TFS, WL_BIGDATA_11KV_TFS},
        {DOT11_EXT_CAP_WNM_SLEEP, DOT11_EXTCAP_LEN_WNM_SLEEP, WL_BIGDATA_11KV_SLEEP},
        {DOT11_EXT_CAP_TIMBC, DOT11_EXTCAP_LEN_TIMBC, WL_BIGDATA_11KV_TIMBC},
        {DOT11_EXT_CAP_BSSTRANS_MGMT, DOT11_EXTCAP_LEN_BSSTRANS, WL_BIGDATA_11KV_BSSTRANS},
        {DOT11_EXT_CAP_DMS, DOT11_EXTCAP_LEN_DMS, WL_BIGDATA_11KV_DMS}
};

static void
wl_get_11kv_info(u8 *ie, u32 ie_len, uint8 *support_11kv, uint32 *flag_11kv)
{
        bcm_tlv_t *ie_11kv = NULL;
        uint32 flag_11k = 0, flag_11v = 0;
        int i;

        /* parsing QBSS load ie */
        if ((bcm_parse_tlvs(ie, (u32)ie_len,
                        DOT11_MNG_QBSS_LOAD_ID)) != NULL) {
                flag_11k |= WL_BIGDATA_11KV_QBSSLOAD;
        }

        /* parsing RM IE for 11k */
        if ((ie_11kv = bcm_parse_tlvs(ie, (u32)ie_len,
                        DOT11_MNG_RRM_CAP_ID)) != NULL) {
                for (i = 0; i < ARRAYSIZE(bigdata_11k_info); i++) {
                        if ((ie_11kv->len >= bigdata_11k_info[i].octet_len) &&
                                        isset(ie_11kv->data, bigdata_11k_info[i].bitmap)) {
                                flag_11k |= bigdata_11k_info[i].flag;
                        }
                }
        }

        /* parsing extended cap. IE for 11v */
        if ((ie_11kv = bcm_parse_tlvs(ie, (u32)ie_len,
                        DOT11_MNG_EXT_CAP_ID)) != NULL) {
                for (i = 0; i < ARRAYSIZE(bigdata_11v_info); i++) {
                        if ((ie_11kv->len >= bigdata_11v_info[i].octet_len) &&
                                        isset(ie_11kv->data, bigdata_11v_info[i].bitmap)) {
                                flag_11v |= bigdata_11v_info[i].flag;
                        }
                }
        }

        if (flag_11k > 0) {
                *support_11kv |= WL_BIGDATA_SUPPORT_11K;
        }

        if (flag_11v > 0) {
                *support_11kv |= WL_BIGDATA_SUPPORT_11V;
        }

        *flag_11kv = flag_11k | flag_11v;
}

int wl_get_bss_info(struct bcm_cfg80211 *cfg, struct net_device *dev, struct ether_addr const *mac)
{
        s32 err = 0;
        wl_bss_info_t *bi;
        uint8 eabuf[ETHER_ADDR_LEN];
        u32 rate, channel, freq, supported_rate, nss = 0, mcs_map, mode_80211 = 0;
        char rate_str[4];
        u8 *ie = NULL;
        u32 ie_len;
        struct wiphy *wiphy;
        struct cfg80211_bss *bss;
        bcm_tlv_t *interworking_ie = NULL;
        bcm_tlv_t *tlv_ie = NULL;
        bcm_tlv_t *vht_ie = NULL;
        vndr_ie_t *vndrie;
        int16 ie_11u_rel_num = -1, ie_mu_mimo_cap = -1;
        u32 i, remained_len, count = 0;
        char roam_count_str[4], akm_str[4];
        s32 val = 0;
        uint8 support_11kv = 0;
        uint32 flag_11kv = 0;   /* bit flags of 11kv big data */

        /* get BSS information */

        strncpy(cfg->bss_info, "x x x x x x x x x x x x x x x", GET_BSS_INFO_LEN);

        *(u32 *) cfg->extra_buf = htod32(WL_EXTRA_BUF_MAX);

        err = wldev_ioctl_get(dev, WLC_GET_BSS_INFO, cfg->extra_buf, WL_EXTRA_BUF_MAX);
        if (unlikely(err)) {
                WL_ERR(("Could not get bss info %d\n", err));
                cfg->roam_count = 0;
                return -1;
        }

        if (!mac) {
                WL_ERR(("mac is null \n"));
                cfg->roam_count = 0;
                return -1;
        }

        memcpy(eabuf, mac, ETHER_ADDR_LEN);

        bi = (wl_bss_info_t *)(cfg->extra_buf + 4);
        channel = wf_chspec_ctlchan(bi->chanspec);

#if LINUX_VERSION_CODE == KERNEL_VERSION(2, 6, 38) && !defined(WL_COMPAT_WIRELESS)
        freq = ieee80211_channel_to_frequency(channel);
#else
        if (channel > 14) {
                freq = ieee80211_channel_to_frequency(channel, NL80211_BAND_5GHZ);
        } else {
                freq = ieee80211_channel_to_frequency(channel, NL80211_BAND_2GHZ);
        }
#endif // endif
        rate = 0;
        err = wldev_ioctl_get(dev, WLC_GET_RATE, &rate, sizeof(rate));
        if (err) {
                WL_ERR(("Could not get rate (%d)\n", err));
                snprintf(rate_str, sizeof(rate_str), "x"); // Unknown

        } else {
                rate = dtoh32(rate);
                snprintf(rate_str, sizeof(rate_str), "%d", (rate/2));
        }

        //supported maximum rate
        supported_rate = (bi->rateset.rates[bi->rateset.count - 1] & 0x7f) / 2;

        if (supported_rate < 12) {
                mode_80211 = 0; //11b maximum rate is 11Mbps. 11b mode
        } else {
                //It's not HT Capable case.
                if (channel > 14) {
                        mode_80211 = 3; // 11a mode
                } else {
                        mode_80211 = 1; // 11g mode
                }
        }

        if (bi->n_cap) {
                /* check Rx MCS Map for HT */
                nss = 0;
                mode_80211 = 2;
                for (i = 0; i < MAX_STREAMS_SUPPORTED; i++) {
                        int8 bitmap = 0xFF;
                        if (i == MAX_STREAMS_SUPPORTED-1) {
                                bitmap = 0x7F;
                        }
                        if (bi->basic_mcs[i] & bitmap) {
                                nss++;
                        }
                }
        }

        if (bi->vht_cap) {
                nss = 0;
                mode_80211 = 4;
                for (i = 1; i <= VHT_CAP_MCS_MAP_NSS_MAX; i++) {
                        mcs_map = VHT_MCS_MAP_GET_MCS_PER_SS(i, dtoh16(bi->vht_rxmcsmap));
                        if (mcs_map != VHT_CAP_MCS_MAP_NONE) {
                                nss++;
                        }
                }
        }

        if (nss) {
                nss = nss - 1;
        }

        wiphy = bcmcfg_to_wiphy(cfg);
        bss = CFG80211_GET_BSS(wiphy, NULL, eabuf, bi->SSID, bi->SSID_len);
        if (!bss) {
                WL_ERR(("Could not find the AP\n"));
        } else {
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
#if defined(WL_CFG80211_P2P_DEV_IF)
                ie = (u8 *)bss->ies->data;
                ie_len = bss->ies->len;
#else
                ie = bss->information_elements;
                ie_len = bss->len_information_elements;
#endif /* WL_CFG80211_P2P_DEV_IF */
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
        }

        if (ie) {
                ie_mu_mimo_cap = 0;
                ie_11u_rel_num = 0;

                if (bi->vht_cap) {
                        if ((vht_ie = bcm_parse_tlvs(ie, (u32)ie_len,
                                        DOT11_MNG_VHT_CAP_ID)) != NULL) {
                                        if (vht_ie->len >= VHT_CAP_IE_LEN) {
                                                ie_mu_mimo_cap = (vht_ie->data[2] & 0x08) >> 3;
                                        }
                        }
                }

                if ((interworking_ie = bcm_parse_tlvs(ie, (u32)ie_len,
                                DOT11_MNG_INTERWORKING_ID)) != NULL) {
                        if ((tlv_ie = bcm_parse_tlvs(ie, (u32)ie_len, DOT11_MNG_VS_ID)) != NULL) {
                                remained_len = ie_len;

                                while (tlv_ie) {
                                        if (count > MAX_VNDR_IE_NUMBER)
                                                break;

                                        if (tlv_ie->id == DOT11_MNG_VS_ID) {
                                                vndrie = (vndr_ie_t *) tlv_ie;

                                                if (vndrie->len < (VNDR_IE_MIN_LEN + 1)) {
                                                        WL_ERR(("%s: invalid vndr ie."
                                                                "length is too small %d\n",
                                                                __FUNCTION__, vndrie->len));
                                                        break;
                                                }

                                                if (!bcmp(vndrie->oui,
                                                        (u8*)WiFiALL_OUI, WiFiALL_OUI_LEN) &&
                                                        (vndrie->data[0] == WiFiALL_OUI_TYPE))
                                                {
                                                        WL_ERR(("Found Wi-FiAll OUI oui.\n"));
                                                        ie_11u_rel_num = vndrie->data[1];
                                                        ie_11u_rel_num = (ie_11u_rel_num & 0xf0)>>4;
                                                        ie_11u_rel_num += 1;

                                                        break;
                                                }
                                        }
                                        count++;
                                        tlv_ie = bcm_next_tlv(tlv_ie, &remained_len);
                                }
                        }
                }

                /* get 11kv information from ie of current bss */
                wl_get_11kv_info(ie, ie_len, &support_11kv, &flag_11kv);
        }

        for (i = 0; i < bi->SSID_len; i++) {
                if (bi->SSID[i] == ' ') {
                        bi->SSID[i] = '_';
                }
        }

        //0 : None, 1 : OKC, 2 : FT, 3 : CCKM
        err = wldev_iovar_getint(dev, "wpa_auth", &val);
        if (unlikely(err)) {
                WL_ERR(("could not get wpa_auth (%d)\n", err));
                snprintf(akm_str, sizeof(akm_str), "x"); // Unknown
        } else {
                WL_ERR(("wpa_auth val %d \n", val));
#if defined(BCMCCX) || defined(BCMEXTCCX)
                if (val & (WPA_AUTH_CCKM | WPA2_AUTH_CCKM)) {
                        snprintf(akm_str, sizeof(akm_str), "3");
                } else
#endif  /* BCMCCX || BCMEXTCCX */
                        if (val & WPA2_AUTH_FT) {
                                snprintf(akm_str, sizeof(akm_str), "2");
                        } else if (val & (WPA_AUTH_UNSPECIFIED | WPA2_AUTH_UNSPECIFIED)) {
                                snprintf(akm_str, sizeof(akm_str), "1");
                        } else {
                                snprintf(akm_str, sizeof(akm_str), "0");
                        }
        }

        if (cfg->roam_offload) {
                snprintf(roam_count_str, sizeof(roam_count_str), "x"); // Unknown
        } else {
                snprintf(roam_count_str, sizeof(roam_count_str), "%d", cfg->roam_count);
        }
        cfg->roam_count = 0;

        WL_ERR(("BSSID:" MACDBG " SSID %s \n", MAC2STRDBG(eabuf), "*****"));
        WL_ERR(("freq:%d, BW:%s, RSSI:%d dBm, Rate:%d Mbps, 11mode:%d, stream:%d,"
                                "MU-MIMO:%d, Passpoint:%d, SNR:%d, Noise:%d, \n"
                                "akm:%s, roam:%s, 11kv:%d/%d \n",
                                freq, wf_chspec_to_bw_str(bi->chanspec),
                                dtoh32(bi->RSSI), (rate / 2), mode_80211, nss,
                                ie_mu_mimo_cap, ie_11u_rel_num, bi->SNR, bi->phy_noise,
                                akm_str, roam_count_str, support_11kv, flag_11kv));

        if (ie) {
                snprintf(cfg->bss_info, GET_BSS_INFO_LEN,
                                MACOUI" %d %s %d %s %d %d %d %d %d %d %s %s %d %d",
                                MACOUI2STR(eabuf), freq, wf_chspec_to_bw_str(bi->chanspec),
                                dtoh32(bi->RSSI), rate_str, mode_80211, nss, ie_mu_mimo_cap,
                                ie_11u_rel_num, bi->SNR, bi->phy_noise, akm_str, roam_count_str,
                                support_11kv, flag_11kv);
        } else {
                //ie_mu_mimo_cap and ie_11u_rel_num is unknow.
                snprintf(cfg->bss_info, GET_BSS_INFO_LEN,
                                MACOUI" %d %s %d %s %d %d x x %d %d %s %s x x",
                                MACOUI2STR(eabuf), freq, wf_chspec_to_bw_str(bi->chanspec),
                                dtoh32(bi->RSSI), rate_str, mode_80211, nss, bi->SNR,
                                bi->phy_noise, akm_str, roam_count_str);
        }

        CFG80211_PUT_BSS(wiphy, bss);

        return 0;
}

s32 wl_cfg80211_get_bss_info(struct net_device *dev, char* cmd, int total_len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if (cfg == NULL) {
                return -1;
        }

        if (total_len < GET_BSS_INFO_LEN) {
                WL_ERR(("%s: Buffer insuffient %d\n", __FUNCTION__, total_len));
                return -1;
        }

        memset(cmd, 0, total_len);
        memcpy(cmd, cfg->bss_info, GET_BSS_INFO_LEN);

        WL_ERR_KERN(("cmd: %s \n", cmd));

        return GET_BSS_INFO_LEN;
}
#endif /* DHD_ENABLE_BIGDATA_LOGGING */

void wl_cfg80211_disassoc(struct net_device *ndev)
{
        scb_val_t scbval;
        s32 err;

        memset(&scbval, 0x0, sizeof(scb_val_t));
        scbval.val = htod32(WLAN_REASON_DEAUTH_LEAVING);
        err = wldev_ioctl_set(ndev, WLC_DISASSOC, &scbval, sizeof(scb_val_t));
        if (err < 0) {
                WL_ERR(("WLC_DISASSOC error %d\n", err));
        }
}

void wl_cfg80211_del_all_sta(struct net_device *ndev, uint32 reason)
{
        struct net_device *dev;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        scb_val_t scb_val;
        int err;
        char mac_buf[MAX_NUM_OF_ASSOCIATED_DEV *
                sizeof(struct ether_addr) + sizeof(uint)] = {0};
        struct maclist *assoc_maclist = (struct maclist *)mac_buf;
        int num_associated = 0;

        dev = ndev_to_wlc_ndev(ndev, cfg);

        if (p2p_is_on(cfg)) {
                /* Suspend P2P discovery search-listen to prevent it from changing the
                 * channel.
                 */
                if ((wl_cfgp2p_discover_enable_search(cfg, false)) < 0) {
                        WL_ERR(("Can not disable discovery mode\n"));
                        return;
                }
        }

        assoc_maclist->count = MAX_NUM_OF_ASSOCIATED_DEV;
        err = wldev_ioctl_get(ndev, WLC_GET_ASSOCLIST,
                        assoc_maclist, sizeof(mac_buf));
        if (err < 0)
                WL_ERR(("WLC_GET_ASSOCLIST error %d\n", err));
        else
                num_associated = assoc_maclist->count;

        memset(scb_val.ea.octet, 0xff, ETHER_ADDR_LEN);
        scb_val.val = DOT11_RC_DEAUTH_LEAVING;
        scb_val.val = htod32(reason);
        err = wldev_ioctl_set(dev, WLC_SCB_DEAUTHENTICATE_FOR_REASON, &scb_val,
                        sizeof(scb_val_t));
        if (err < 0) {
                WL_ERR(("WLC_SCB_DEAUTHENTICATE_FOR_REASON err %d\n", err));
        }

        if (num_associated > 0)
                wl_delay(400);

        return;
}
static s32
wl_notify_connect_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        bool act;
        struct net_device *ndev = NULL;
        s32 err = 0;
        u32 event = ntoh32(e->event_type);
        struct wiphy *wiphy = NULL;
        struct cfg80211_bss *bss = NULL;
        struct wlc_ssid *ssid = NULL;
        u8 *bssid = 0;
        dhd_pub_t *dhdp;
        u32 mode;
        int vndr_oui_num = 0;
        char vndr_oui[MAX_VNDR_OUI_STR_LEN] = {0, };
        bool loc_gen = false;
#ifdef DHD_LOSSLESS_ROAMING
        struct wl_security *sec;
#endif /* DHD_LOSSLESS_ROAMING */

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
#ifdef DHD_LOSSLESS_ROAMING
        sec = wl_read_prof(cfg, ndev, WL_PROF_SEC);
#endif /* DHD_LOSSLESS_ROAMING */
        dhdp = (dhd_pub_t *)(cfg->pub);
        BCM_REFERENCE(dhdp);

        mode = wl_get_mode_by_netdev(cfg, ndev);
        /* Push link events to upper layer log */
        SUPP_LOG(("[%s] Mode:%d event:%d status:0x%x reason:%d\n",
                ndev->name, mode, ntoh32(e->event_type),
                ntoh32(e->status),  ntoh32(e->reason)));
        if (mode == WL_MODE_AP) {
                err = wl_notify_connect_status_ap(cfg, ndev, e, data);
        } else if (mode == WL_MODE_IBSS) {
                err = wl_notify_connect_status_ibss(cfg, ndev, e, data);
        } else if (mode == WL_MODE_BSS) {
                WL_INFORM_MEM(("[%s] Mode BSS. event:%d status:%d reason:%d\n",
                        ndev->name, ntoh32(e->event_type),
                        ntoh32(e->status),  ntoh32(e->reason)));

                if (!wl_get_drv_status(cfg, CFG80211_CONNECT, ndev)) {
                        /* Join attempt via non-cfg80211 interface.
                         * Don't send resultant events to cfg80211
                         * layer
                         */
                        WL_INFORM_MEM(("Event received in non-cfg80211"
                                " connect state. Ignore\n"));
                        return BCME_OK;
                }

                if (event == WLC_E_ASSOC || event == WLC_E_AUTH) {
                        wl_get_auth_assoc_status(cfg, ndev, e);
                        return 0;
                }
                DHD_DISABLE_RUNTIME_PM((dhd_pub_t *)cfg->pub);
                if (wl_is_linkup(cfg, e, ndev)) {
                        wl_link_up(cfg);
                        act = true;
                        if (!wl_get_drv_status(cfg, DISCONNECTING, ndev)) {
                                WL_INFORM_MEM(("[%s] link up for bssid " MACDBG "\n",
                                        ndev->name, MAC2STRDBG((const u8*)(&e->addr))));

                                if ((event == WLC_E_LINK) &&
                                        (ntoh16(e->flags) & WLC_EVENT_MSG_LINK) &&
                                        !wl_get_drv_status(cfg, CONNECTED, ndev) &&
                                        !wl_get_drv_status(cfg, CONNECTING, ndev)) {
                                        WL_INFORM_MEM(("link up in non-connected/"
                                                "non-connecting state\n"));
                                        wl_cfg80211_disassoc(ndev);
                                        return BCME_OK;
                                }

#ifdef WL_WPS_SYNC
                                /* Avoid invocation for Roam cases */
                                if ((event == WLC_E_LINK) &&
                                        !wl_get_drv_status(cfg, CONNECTED, ndev)) {
                                        wl_wps_session_update(ndev,
                                                WPS_STATE_LINKUP, e->addr.octet);
                                }
#endif /* WL_WPS_SYNC */

                                if (((event == WLC_E_ROAM) || (event == WLC_E_BSSID)) &&
                                        !wl_get_drv_status(cfg, CONNECTED, ndev)) {
                                        /* Roam event in disconnected state. DHD-FW state
                                         * mismatch. Issue disassoc to clear fw state
                                         */
                                        WL_INFORM_MEM(("Roam even in disconnected state."
                                                " clear fw state\n"));
                                        wl_cfg80211_disassoc(ndev);
                                        return BCME_OK;
                                }
#ifdef DHD_EVENT_LOG_FILTER
                                if (event == WLC_E_LINK && ndev == bcmcfg_to_prmry_ndev(cfg)) {
                                        int roam = FALSE;
                                        uint8 eth_addr[ETHER_ADDR_LEN];
                                        if (TRUE &&
#ifdef DHD_LOSSLESS_ROAMING
                                                !cfg->roam_offload &&
#endif /* DHD_LOSSLESS_ROAMING */
                                                wl_get_drv_status(cfg, CONNECTED, ndev)) {
                                                roam = TRUE;
                                        }
                                        memcpy(eth_addr, &(e->addr), ETHER_ADDR_LEN);
                                        dhd_event_log_filter_notify_connect_done(dhdp,
                                                eth_addr, roam);
                                }
#endif /* DHD_EVENT_LOG_FILTER */
                                if (event == WLC_E_LINK &&
#ifdef DHD_LOSSLESS_ROAMING
                                        !cfg->roam_offload &&
                                        !IS_AKM_SUITE_FT(sec) &&
#endif /* DHD_LOSSLESS_ROAMING */
                                        wl_get_drv_status(cfg, CONNECTED, ndev)) {
                                        wl_bss_roaming_done(cfg, ndev, e, data);
                                } else {
                                        /* Initial Association */
                                        wl_update_prof(cfg, ndev, e, &act, WL_PROF_ACT);
                                        wl_bss_connect_done(cfg, ndev, e, data, true);
                                        if (ndev == bcmcfg_to_prmry_ndev(cfg)) {
                                                vndr_oui_num = wl_vndr_ies_get_vendor_oui(cfg,
                                                        ndev, vndr_oui, ARRAY_SIZE(vndr_oui));
                                                if (vndr_oui_num > 0) {
                                                        WL_INFORM_MEM(("[%s] vendor oui: %s\n",
                                                                ndev->name, vndr_oui));
                                                }
                                        }
                                        WL_DBG(("joined in BSS network \"%s\"\n",
                                                ((struct wlc_ssid *)
                                                 wl_read_prof(cfg, ndev,
                                                 WL_PROF_SSID))->SSID));
                                }
#ifdef WBTEXT
                                if (ndev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION &&
                                        dhdp->wbtext_support && event == WLC_E_SET_SSID) {
                                        /* set wnm_keepalives_max_idle after association */
                                        wl_cfg80211_wbtext_set_wnm_maxidle(cfg, ndev);
                                        /* send nbr request or BTM query to update RCC */
                                        wl_cfg80211_wbtext_update_rcc(cfg, ndev);
                                }
#endif /* WBTEXT */
                        }
                        wl_update_prof(cfg, ndev, e, &act, WL_PROF_ACT);
                        wl_update_prof(cfg, ndev, NULL, (const void *)&e->addr, WL_PROF_BSSID);
                } else if (WL_IS_LINKDOWN(cfg, e, data) ||
                                ((event == WLC_E_SET_SSID) &&
                                (ntoh32(e->status) != WLC_E_STATUS_SUCCESS) &&
                                (wl_get_drv_status(cfg, CONNECTED, ndev)))) {

                        WL_INFORM_MEM(("link down. connection state bit status: [%u:%u:%u:%u]\n",
                                wl_get_drv_status(cfg, CONNECTING, ndev),
                                wl_get_drv_status(cfg, CONNECTED, ndev),
                                wl_get_drv_status(cfg, DISCONNECTING, ndev),
                                wl_get_drv_status(cfg, NESTED_CONNECT, ndev)));

#ifdef WL_WPS_SYNC
                        {
                                u8 wps_state;
                                if ((event == WLC_E_SET_SSID) &&
                                        (ntoh32(e->status) != WLC_E_STATUS_SUCCESS)) {
                                        /* connect fail */
                                        wps_state = WPS_STATE_CONNECT_FAIL;
                                } else {
                                        wps_state = WPS_STATE_LINKDOWN;
                                }
                                if (wl_wps_session_update(ndev,
                                        wps_state, e->addr.octet) == BCME_UNSUPPORTED) {
                                        /* Unexpected event. Ignore it. */
                                        return 0;
                                }
                }
#endif /* WL_WPS_SYNC */

                        if (wl_get_drv_status(cfg, DISCONNECTING, ndev) &&
                                (wl_get_drv_status(cfg, NESTED_CONNECT, ndev) ||
                                wl_get_drv_status(cfg, CONNECTING, ndev))) {
                                /* wl_cfg80211_connect was called before 'DISCONNECTING' was
                                 * cleared. Deauth/Link down event is caused by WLC_DISASSOC
                                 * command issued from the wl_cfg80211_connect context. Ignore
                                 * the event to avoid pre-empting the current connection
                                 */
                                WL_DBG(("Nested connection case. Drop event. \n"));
                                wl_clr_drv_status(cfg, NESTED_CONNECT, ndev);
                                wl_clr_drv_status(cfg, DISCONNECTING, ndev);
                                /* Not in 'CONNECTED' state, clear it */
                                wl_clr_drv_status(cfg, CONNECTED, ndev);
                                return 0;
                        }

#ifdef DYNAMIC_MUMIMO_CONTROL
                        wl_set_murx_reassoc_status(cfg, FALSE);
                        wl_set_murx_block_eapol_status(cfg, FALSE);
                        /* Reset default murx_bfe_cap value */
                        wl_set_murx_bfe_cap(ndev, 1, FALSE);
#ifdef ARGOS_CPU_SCHEDULER
                        argos_config_mumimo_reset();
#endif /* ARGOS_CPU_SCHEDULER */
                        DHD_ENABLE_RUNTIME_PM(dhdp);
#endif /* DYNAMIC_MUMIMO_CONTROL */

                        wl_flush_fw_log_buffer(bcmcfg_to_prmry_ndev(cfg),
                                FW_LOGSET_MASK_ALL);
#ifdef DHD_LOSSLESS_ROAMING
                        wl_del_roam_timeout(cfg);
#endif // endif
#ifdef P2PLISTEN_AP_SAMECHN
                        if (ndev == bcmcfg_to_prmry_ndev(cfg)) {
                                wl_cfg80211_set_p2p_resp_ap_chn(ndev, 0);
                                cfg->p2p_resp_apchn_status = false;
                                WL_DBG(("p2p_resp_apchn_status Turn OFF \n"));
                        }
#endif /* P2PLISTEN_AP_SAMECHN */
                        wl_cfg80211_cancel_scan(cfg);

#if defined(DHD_ENABLE_BIGDATA_LOGGING)
                        if (wl_get_drv_status(cfg, CONNECTED, ndev)) {
                                wl_get_bss_info(cfg, ndev, &e->addr);
                        }
#endif /* DHD_ENABLE_BIGDATA_LOGGING */
                        /* Explicitly calling unlink to remove BSS in CFG */
                        wiphy = bcmcfg_to_wiphy(cfg);
                        ssid = (struct wlc_ssid *)wl_read_prof(cfg, ndev, WL_PROF_SSID);
                        bssid = (u8 *)wl_read_prof(cfg, ndev, WL_PROF_BSSID);
                        if (ssid && bssid) {
                                bss = CFG80211_GET_BSS(wiphy, NULL, bssid,
                                        ssid->SSID, ssid->SSID_len);
                                if (bss) {
                                        cfg80211_unlink_bss(wiphy, bss);
                                        CFG80211_PUT_BSS(wiphy, bss);
                                }
                        }

                        if (wl_get_drv_status(cfg, CONNECTED, ndev)) {
                                scb_val_t scbval;
                                u8 *curbssid = wl_read_prof(cfg, ndev, WL_PROF_BSSID);
                                uint32 reason = 0;
                                bcm_tlv_t *deauth_info = NULL;
                                wips_detect_inform_t *wips_detect_info;
                                uint8 wips_bssid[ETHER_ADDR_LEN];
                                u32 len = ntoh32(e->datalen) + TLV_HDR_LEN;

                                struct ether_addr bssid_dongle = {{0, 0, 0, 0, 0, 0}};
                                struct ether_addr bssid_null = {{0, 0, 0, 0, 0, 0}};

                                if (event == WLC_E_DEAUTH_IND || event == WLC_E_DISASSOC_IND) {
                                        reason = ntoh32(e->reason);
                                        if (reason > WLC_E_DEAUTH_MAX_REASON) {
                                                WL_ERR(("Event %d original reason is %d, "
                                                        "changed 0xFF\n", event, reason));
                                                reason = WLC_E_DEAUTH_MAX_REASON;
                                        }
                                        if ((deauth_info = bcm_parse_tlvs(data, len,
                                                TAG_DEAUTH_TLV_WIPS)) != NULL) {
                                                wips_detect_info =
                                                        (wips_detect_inform_t *)deauth_info->data;
                                                memcpy(wips_bssid, &wips_detect_info->ea,
                                                        ETHER_ADDR_LEN);
                                                if (wips_detect_info->misdeauth > 1) {
                                                        WL_ERR(("WIPS attack!! cnt=%d, curRSSI=%d, "
                                                                "deauthRSSI=%d, time=%d, "
                                                                "MAC="MACDBG"\n",
                                                                wips_detect_info->misdeauth,
                                                                wips_detect_info->cur_bsscfg_rssi,
                                                                wips_detect_info->deauth_rssi,
                                                                wips_detect_info->timestamp,
                                                                MAC2STRDBG(wips_bssid)));
                                                }
                                        }
                                }
#ifdef SET_SSID_FAIL_CUSTOM_RC
                                if (event == WLC_E_SET_SSID) {
                                        reason = SET_SSID_FAIL_CUSTOM_RC;
                                }
#endif /* SET_SSID_FAIL_CUSTOM_RC */

                                /* roam offload does not sync BSSID always, get it from dongle */
                                if (cfg->roam_offload) {
                                        memset(&bssid_dongle, 0, sizeof(bssid_dongle));
                                        if (wldev_ioctl_get(ndev, WLC_GET_BSSID, &bssid_dongle,
                                                        sizeof(bssid_dongle)) == BCME_OK) {
                                                /* if not roam case, it would return null bssid */
                                                if (memcmp(&bssid_dongle, &bssid_null,
                                                                ETHER_ADDR_LEN) != 0) {
                                                        curbssid = (u8 *)&bssid_dongle;
                                                }
                                        }
                                }
                                if (memcmp(curbssid, &e->addr, ETHER_ADDR_LEN) != 0) {
                                        bool fw_assoc_state = TRUE;
                                        dhd_pub_t *dhd = (dhd_pub_t *)cfg->pub;
                                        fw_assoc_state = dhd_is_associated(dhd, e->ifidx, &err);
                                        if (!fw_assoc_state) {
                                                WL_ERR(("Event sends up even different BSSID"
                                                        " cur: " MACDBG " event: " MACDBG"\n",
                                                        MAC2STRDBG(curbssid),
                                                        MAC2STRDBG((const u8*)(&e->addr))));
                                        } else {
                                                WL_ERR(("BSSID of event is not the connected BSSID"
                                                        "(ignore it) cur: " MACDBG
                                                        " event: " MACDBG"\n",
                                                        MAC2STRDBG(curbssid),
                                                        MAC2STRDBG((const u8*)(&e->addr))));
                                                return 0;
                                        }
                                }
#ifdef DBG_PKT_MON
                                /* Stop packet monitor */
                                if (ndev == bcmcfg_to_prmry_ndev(cfg)) {
                                        DHD_DBG_PKT_MON_STOP(dhdp);
                                }
#endif /* DBG_PKT_MON */
                                /* clear RSSI monitor, framework will set new cfg */
#ifdef RSSI_MONITOR_SUPPORT
                                dhd_dev_set_rssi_monitor_cfg(bcmcfg_to_prmry_ndev(cfg),
                                    FALSE, 0, 0);
#endif /* RSSI_MONITOR_SUPPORT */
                                wl_clr_drv_status(cfg, CONNECTED, ndev);

                                if (!wl_get_drv_status(cfg, DISCONNECTING, ndev)) {
                                        /* To make sure disconnect, explictly send dissassoc
                                        *  for BSSID 00:00:00:00:00:00 issue
                                        */
                                        scbval.val = WLAN_REASON_DEAUTH_LEAVING;
                                        WL_INFORM_MEM(("clear fw state\n"));
                                        memcpy(&scbval.ea, curbssid, ETHER_ADDR_LEN);
                                        scbval.val = htod32(scbval.val);
                                        err = wldev_ioctl_set(ndev, WLC_DISASSOC, &scbval,
                                                sizeof(scb_val_t));
                                        if (err < 0) {
                                                WL_ERR(("WLC_DISASSOC error %d\n", err));
                                                err = 0;
                                        }
                                }
                                if (wl_get_drv_status(cfg, DISCONNECTING, ndev)) {
                                        loc_gen = true;
                                }
                                WL_INFORM_MEM(("[%s] Indicate disconnect event to upper layer. "
                                        "event: %d reason=%d from " MACDBG "\n",
                                        ndev->name, event, ntoh32(e->reason),
                                        MAC2STRDBG((const u8*)(&e->addr))));

                                /* Send up deauth and clear states */
                                CFG80211_DISCONNECTED(ndev, reason, NULL, 0,
                                                loc_gen, GFP_KERNEL);
                                wl_link_down(cfg);
                                wl_init_prof(cfg, ndev);
#ifdef WBTEXT
                                /* when STA was disconnected, clear join pref and set wbtext */
                                if (ndev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION &&
                                                dhdp->wbtext_policy
                                                == WL_BSSTRANS_POLICY_PRODUCT_WBTEXT) {
                                        char smbuf[WLC_IOCTL_SMLEN];
                                        char clear[] = { 0x01, 0x02, 0x00, 0x00, 0x03,
                                                0x02, 0x00, 0x00, 0x04, 0x02, 0x00, 0x00 };
                                        if ((err = wldev_iovar_setbuf(ndev, "join_pref",
                                                        clear, sizeof(clear), smbuf,
                                                        sizeof(smbuf), NULL))
                                                        == BCME_OK) {
                                                if ((err = wldev_iovar_setint(ndev,
                                                                "wnm_bsstrans_resp",
                                                                dhdp->wbtext_policy))
                                                                == BCME_OK) {
                                                        wl_cfg80211_wbtext_set_default(ndev);
                                                } else {
                                                        WL_ERR(("%s: Failed to set wbtext = %d\n",
                                                                __FUNCTION__, err));
                                                }
                                        } else {
                                                WL_ERR(("%s: Failed to clear join pref = %d\n",
                                                        __FUNCTION__, err));
                                        }
                                        wl_cfg80211_wbtext_clear_bssid_list(cfg);
                                }
#endif /* WBTEXT */
                        }
                        else if (wl_get_drv_status(cfg, CONNECTING, ndev)) {
                                WL_INFORM_MEM(("link down, during connecting\n"));
                                /* Issue WLC_DISASSOC to prevent FW roam attempts */
                                err = wldev_ioctl_set(ndev, WLC_DISASSOC, NULL, 0);
                                if (err < 0) {
                                        WL_ERR(("CONNECTING state, WLC_DISASSOC error %d\n", err));
                                        err = 0;
                                }
                                WL_DBG(("Clear drv CONNECTING status\n"));
                                wl_clr_drv_status(cfg, CONNECTING, ndev);
#ifdef ESCAN_RESULT_PATCH
                                if ((memcmp(connect_req_bssid, broad_bssid, ETHER_ADDR_LEN) == 0) ||
                                        (memcmp(&e->addr, broad_bssid, ETHER_ADDR_LEN) == 0) ||
                                        (memcmp(&e->addr, connect_req_bssid, ETHER_ADDR_LEN) == 0))
                                        /* In case this event comes while associating another AP */
#endif /* ESCAN_RESULT_PATCH */
                                        wl_bss_connect_done(cfg, ndev, e, data, false);
                        }
                        wl_clr_drv_status(cfg, DISCONNECTING, ndev);

                        /* if link down, bsscfg is diabled */
                        if (ndev != bcmcfg_to_prmry_ndev(cfg))
                                complete(&cfg->iface_disable);
#ifdef WLTDLS
                        /* re-enable TDLS if the number of connected interfaces
                         * is less than 2.
                         */
                        wl_cfg80211_tdls_config(cfg, TDLS_STATE_DISCONNECT, false);
#endif /* WLTDLS */
                } else if (wl_is_nonetwork(cfg, e)) {
                        WL_ERR(("connect failed event=%d e->status %d e->reason %d \n",
                                event, (int)ntoh32(e->status), (int)ntoh32(e->reason)));
#ifdef WL_WPS_SYNC
                        if (wl_wps_session_update(ndev,
                                WPS_STATE_CONNECT_FAIL, e->addr.octet) == BCME_UNSUPPORTED) {
                                /* Unexpected event. Ignore it. */
                                return 0;
                        }
#endif /* WL_WPS_SYNC */
#if defined(DHD_ENABLE_BIGDATA_LOGGING)
                        if (event == WLC_E_SET_SSID) {
                                wl_get_connect_failed_status(cfg, e);
                        }
#endif /* DHD_ENABLE_BIGDATA_LOGGING */
                        /* Dump FW preserve buffer content */
                        wl_flush_fw_log_buffer(ndev, FW_LOGSET_MASK_ALL);

                        /* Clean up any pending scan request */
                        wl_cfg80211_cancel_scan(cfg);

                        if (wl_get_drv_status(cfg, CONNECTING, ndev)) {
                                if (!wl_get_drv_status(cfg, DISCONNECTING, ndev)) {
                                        WL_INFORM_MEM(("wl dissassoc\n"));
                                        err = wldev_ioctl_set(ndev, WLC_DISASSOC, NULL, 0);
                                        if (err < 0) {
                                                WL_ERR(("WLC_DISASSOC error %d\n", err));
                                                err = 0;
                                        }
                                } else {
                                        WL_DBG(("connect fail. clear disconnecting bit\n"));
                                        wl_clr_drv_status(cfg, DISCONNECTING, ndev);
                                }
                                wl_bss_connect_done(cfg, ndev, e, data, false);
                                wl_clr_drv_status(cfg, CONNECTING, ndev);
                                WL_INFORM_MEM(("connect fail reported\n"));
                        }
                } else {
                        WL_DBG(("%s nothing\n", __FUNCTION__));
                }
#ifdef DYNAMIC_MUMIMO_CONTROL
                if (!wl_get_murx_reassoc_status(cfg))
#endif /* DYNAMIC_MUMIMO_CONTROL */
                {
                        DHD_ENABLE_RUNTIME_PM(dhdp);
                }
        } else {
                WL_ERR(("Invalid ndev status %d\n", wl_get_mode_by_netdev(cfg, ndev)));
        }
        return err;
}

#ifdef WL_RELMCAST
void wl_cfg80211_set_rmc_pid(struct net_device *dev, int pid)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        if (pid > 0)
                cfg->rmc_event_pid = pid;
        WL_DBG(("set pid for rmc event : pid=%d\n", pid));
}
#endif /* WL_RELMCAST */

#ifdef WLAIBSS
void wl_cfg80211_set_txfail_pid(struct net_device *dev, int pid)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        if (pid > 0)
                cfg->aibss_txfail_pid = pid;
        WL_DBG(("set pid for aibss fail event : pid=%d\n", pid));
}

static s32
wl_notify_aibss_txfail(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        u32 evt = ntoh32(e->event_type);
        int ret = -1;
#ifdef PCIE_FULL_DONGLE
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);
        u32 reason = ntoh32(e->reason);
#endif // endif
        if (cfg->aibss_txfail_pid != 0) {
#ifdef PCIE_FULL_DONGLE
                if (reason == AIBSS_PEER_FREE) {
                        uint8 ifindex;
                        wl_event_msg_t event;

                        memset(&event, 0, sizeof(wl_event_msg_t));
                        memcpy(&event, e, sizeof(wl_event_msg_t));

                        ifindex = (uint8)dhd_ifname2idx(dhd->info, event.ifname);
                        WL_INFORM_MEM(("Peer freed. Flow rings delete for peer.\n"));
                        dhd_flow_rings_delete_for_peer(dhd, ifindex,
                                (void *)&event.addr.octet[0]);
                        return 0;
                }
#endif // endif
                ret = wl_netlink_send_msg(cfg->aibss_txfail_pid, AIBSS_EVENT_TXFAIL,
                        cfg->aibss_txfail_seq++, &e->addr, ETHER_ADDR_LEN);
        }

        WL_DBG(("txfail : evt=%d, pid=%d, ret=%d, mac=" MACF "\n",
                evt, cfg->aibss_txfail_pid, ret, CONST_ETHERP_TO_MACF(&e->addr)));
        return ret;
}
#endif /* WLAIBSS */
#ifdef WL_RELMCAST
static s32
wl_notify_rmc_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        u32 evt = ntoh32(e->event_type);
        u32 reason = ntoh32(e->reason);
        int ret = -1;

        switch (reason) {
                case WLC_E_REASON_RMC_AR_LOST:
                case WLC_E_REASON_RMC_AR_NO_ACK:
                        if (cfg->rmc_event_pid != 0) {
                                ret = wl_netlink_send_msg(cfg->rmc_event_pid,
                                        RMC_EVENT_LEADER_CHECK_FAIL,
                                        cfg->rmc_event_seq++, NULL, 0);
                        }
                        break;
                default:
                        break;
        }
        WL_DBG(("rmcevent : evt=%d, pid=%d, ret=%d\n", evt, cfg->rmc_event_pid, ret));
        return ret;
}
#endif /* WL_RELMCAST */

#ifdef GSCAN_SUPPORT
static s32
wl_handle_roam_exp_event(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        struct net_device *ndev = NULL;
        u32 datalen = be32_to_cpu(e->datalen);

        if (datalen) {
                wl_roam_exp_event_t *evt_data = (wl_roam_exp_event_t *)data;
                if (evt_data->version == ROAM_EXP_EVENT_VERSION) {
                        wlc_ssid_t *ssid = &evt_data->cur_ssid;
                        struct wireless_dev *wdev;
                        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
                        if (ndev) {
                                wdev = ndev->ieee80211_ptr;
                                wdev->ssid_len = min(ssid->SSID_len, (uint32)DOT11_MAX_SSID_LEN);
                                memcpy(wdev->ssid, ssid->SSID, wdev->ssid_len);
                                WL_ERR(("SSID is %s\n", ssid->SSID));
                                wl_update_prof(cfg, ndev, NULL, ssid, WL_PROF_SSID);
                        } else {
                                WL_ERR(("NULL ndev!\n"));
                        }
                } else {
                        WL_ERR(("Version mismatch %d, expected %d", evt_data->version,
                               ROAM_EXP_EVENT_VERSION));
                }
        }
        return BCME_OK;
}
#endif /* GSCAN_SUPPORT */

#ifdef RSSI_MONITOR_SUPPORT
static s32 wl_handle_rssi_monitor_event(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{

#if defined(WL_VENDOR_EXT_SUPPORT) || defined(CONFIG_BCMDHD_VENDOR_EXT)
        u32 datalen = be32_to_cpu(e->datalen);
        struct net_device *ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);

        if (datalen) {
                wl_rssi_monitor_evt_t *evt_data = (wl_rssi_monitor_evt_t *)data;
                if (evt_data->version == RSSI_MONITOR_VERSION) {
                        dhd_rssi_monitor_evt_t monitor_data;
                        monitor_data.version = DHD_RSSI_MONITOR_EVT_VERSION;
                        monitor_data.cur_rssi = evt_data->cur_rssi;
                        memcpy(&monitor_data.BSSID, &e->addr, ETHER_ADDR_LEN);
                        wl_cfgvendor_send_async_event(wiphy, ndev,
                                GOOGLE_RSSI_MONITOR_EVENT,
                                &monitor_data, sizeof(monitor_data));
                } else {
                        WL_ERR(("Version mismatch %d, expected %d", evt_data->version,
                               RSSI_MONITOR_VERSION));
                }
        }
#endif /* WL_VENDOR_EXT_SUPPORT || CONFIG_BCMDHD_VENDOR_EXT */
        return BCME_OK;
}
#endif /* RSSI_MONITOR_SUPPORT */

static s32
wl_notify_roaming_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        bool act;
        struct net_device *ndev = NULL;
        s32 err = 0;
        u32 event = be32_to_cpu(e->event_type);
        u32 status = be32_to_cpu(e->status);
#ifdef DHD_LOSSLESS_ROAMING
        struct wl_security *sec;
#endif // endif
#if defined(WBTEXT)
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
#endif /* WBTEXT */
        WL_DBG(("Enter \n"));

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);

        if ((!cfg->disable_roam_event) && (event == WLC_E_BSSID)) {
                wl_add_remove_eventmsg(ndev, WLC_E_ROAM, false);
                cfg->disable_roam_event = TRUE;
        }

        if ((cfg->disable_roam_event) && (event == WLC_E_ROAM))
                return err;

        if ((event == WLC_E_ROAM || event == WLC_E_BSSID) && status == WLC_E_STATUS_SUCCESS) {
                if (wl_get_drv_status(cfg, CONNECTED, ndev)) {
#ifdef DHD_LOSSLESS_ROAMING
                        sec = wl_read_prof(cfg, ndev, WL_PROF_SEC);
                        /* In order to reduce roaming delay, wl_bss_roaming_done is
                         * early called with WLC_E_LINK event. It is called from
                         * here only if WLC_E_LINK event is blocked for specific
                         * security type.
                         */
                        if (IS_AKM_SUITE_FT(sec)) {
                                wl_bss_roaming_done(cfg, ndev, e, data);
                        }
                        /* Roam timer is deleted mostly from wl_cfg80211_change_station
                         * after roaming is finished successfully. We need to delete
                         * the timer from here only for some security types that aren't
                         * using wl_cfg80211_change_station to authorize SCB
                         */
                        if (IS_AKM_SUITE_FT(sec) || IS_AKM_SUITE_CCKM(sec)) {
                                wl_del_roam_timeout(cfg);
                        }
#else
                        wl_bss_roaming_done(cfg, ndev, e, data);
#endif /* DHD_LOSSLESS_ROAMING */
#ifdef WBTEXT
                        if (dhdp->wbtext_support) {
                                /* set wnm_keepalives_max_idle after association */
                                wl_cfg80211_wbtext_set_wnm_maxidle(cfg, ndev);
                                /* send nbr request or BTM query to update RCC
                                 * after roaming completed (receiving the first beacon)
                                 */
                                wl_cfg80211_wbtext_update_rcc(cfg, ndev);
                        }
#endif /* WBTEXT */
                } else {
                        wl_bss_connect_done(cfg, ndev, e, data, true);
                }
                act = true;
                wl_update_prof(cfg, ndev, e, &act, WL_PROF_ACT);
                wl_update_prof(cfg, ndev, NULL, (const void *)&e->addr, WL_PROF_BSSID);

                if (ndev == bcmcfg_to_prmry_ndev(cfg)) {
                        wl_vndr_ies_get_vendor_oui(cfg, ndev, NULL, 0);
                }
        }
#ifdef DHD_LOSSLESS_ROAMING
        else if ((event == WLC_E_ROAM || event == WLC_E_BSSID) && status != WLC_E_STATUS_SUCCESS) {
                wl_del_roam_timeout(cfg);
        }
#endif // endif
        return err;
}

#ifdef CUSTOM_EVENT_PM_WAKE
uint32 last_dpm_upd_time = 0;   /* ms */
#define DPM_UPD_LMT_TIME        (CUSTOM_EVENT_PM_WAKE + 5) * 1000 * 4   /* ms */
#define DPM_UPD_LMT_RSSI        -85     /* dbm */

static s32
wl_check_pmstatus(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        s32 err = BCME_OK;
        struct net_device *ndev = NULL;
        u8 *pbuf = NULL;
        uint32 cur_dpm_upd_time = 0;
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);
        s32 rssi;
#ifdef SUPPORT_RSSI_SUM_REPORT
        wl_rssi_ant_mimo_t rssi_ant_mimo;
#endif /* SUPPORT_RSSI_SUM_REPORT */
        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);

        pbuf = (u8 *)MALLOCZ(cfg->osh, WLC_IOCTL_MEDLEN);
        if (pbuf == NULL) {
                WL_ERR(("failed to allocate local pbuf\n"));
                return -ENOMEM;
        }

        err = wldev_iovar_getbuf_bsscfg(ndev, "dump",
                "pm", strlen("pm"), pbuf, WLC_IOCTL_MEDLEN, 0, &cfg->ioctl_buf_sync);

        if (err) {
                WL_ERR(("dump ioctl err = %d", err));
        } else {
                WL_ERR(("PM status : %s\n", pbuf));
        }

        if (pbuf) {
                MFREE(cfg->osh, pbuf, WLC_IOCTL_MEDLEN);
        }

        if (dhd->early_suspended) {
                /* LCD off */
#ifdef SUPPORT_RSSI_SUM_REPORT
                /* Query RSSI sum across antennas */
                memset(&rssi_ant_mimo, 0, sizeof(rssi_ant_mimo));
                err = wl_get_rssi_per_ant(ndev, ndev->name, NULL, &rssi_ant_mimo);
                if (err) {
                        WL_ERR(("Could not get rssi sum (%d)\n", err));
                }
                rssi = rssi_ant_mimo.rssi_sum;
                if (rssi == 0)
#endif /* SUPPORT_RSSI_SUM_REPORT */
                {
                        scb_val_t scb_val;
                        memset(&scb_val, 0, sizeof(scb_val_t));
                        scb_val.val = 0;
                        err = wldev_ioctl_get(ndev, WLC_GET_RSSI, &scb_val, sizeof(scb_val_t));
                        if (err) {
                                WL_ERR(("Could not get rssi (%d)\n", err));
                        }
                        rssi = wl_rssi_offset(dtoh32(scb_val.val));
                }
                WL_ERR(("RSSI %d dBm\n", rssi));
                if (rssi > DPM_UPD_LMT_RSSI) {
                        return err;
                }
        } else {
                /* LCD on */
                return err;
        }

        if (last_dpm_upd_time == 0) {
                last_dpm_upd_time = OSL_SYSUPTIME();
        } else {
                cur_dpm_upd_time = OSL_SYSUPTIME();
                if (cur_dpm_upd_time - last_dpm_upd_time < DPM_UPD_LMT_TIME) {
                        scb_val_t scbval;
                        bzero(&scbval, sizeof(scb_val_t));

                        err = wldev_ioctl_set(ndev, WLC_DISASSOC, &scbval, sizeof(scb_val_t));
                        if (err < 0) {
                                WL_ERR(("%s: Disassoc error %d\n", __FUNCTION__, err));
                                return err;
                        }
                        WL_ERR(("%s: Force Disassoc due to updated DPM event.\n", __FUNCTION__));

                        last_dpm_upd_time = 0;
                } else {
                        last_dpm_upd_time = cur_dpm_upd_time;
                }
        }

        return err;
}
#endif  /* CUSTOM_EVENT_PM_WAKE */

#ifdef QOS_MAP_SET
/* get user priority table */
uint8 *
wl_get_up_table(dhd_pub_t * dhdp, int idx)
{
        struct net_device *ndev;
        struct bcm_cfg80211 *cfg;

        ndev = dhd_idx2net(dhdp, idx);
        if (ndev) {
                cfg = wl_get_cfg(ndev);
                if (cfg)
                        return (uint8 *)(cfg->up_table);
        }

        return NULL;
}
#endif /* QOS_MAP_SET */

#if defined(DHD_LOSSLESS_ROAMING) || defined(DBG_PKT_MON)
static s32
wl_notify_roam_prep_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        struct wl_security *sec;
        struct net_device *ndev;
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        u32 status = ntoh32(e->status);
        u32 reason = ntoh32(e->reason);

        BCM_REFERENCE(sec);

        if (status == WLC_E_STATUS_SUCCESS && reason != WLC_E_REASON_INITIAL_ASSOC) {
                WL_ERR(("Attempting roam with reason code : %d\n", reason));
        }

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);

#ifdef DBG_PKT_MON
        if (ndev == bcmcfg_to_prmry_ndev(cfg)) {
                DHD_DBG_PKT_MON_STOP(dhdp);
                DHD_DBG_PKT_MON_START(dhdp);
        }
#endif /* DBG_PKT_MON */
#ifdef DHD_LOSSLESS_ROAMING
        sec = wl_read_prof(cfg, ndev, WL_PROF_SEC);
        /* Disable Lossless Roaming for specific AKM suite
         * Any other AKM suite can be added below if transition time
         * is delayed because of Lossless Roaming
         * and it causes any certication failure
         */
        if (IS_AKM_SUITE_FT(sec)) {
                return BCME_OK;
        }

        dhdp->dequeue_prec_map = 1 << PRIO_8021D_NC;
#ifdef DYNAMIC_MUMIMO_CONTROL
        if (!wl_get_murx_reassoc_status(cfg))
#endif /* DYNAMIC_MUMIMO_CONTROL */
        {
                /* Restore flow control  */
                dhd_txflowcontrol(dhdp, ALL_INTERFACES, OFF);
        }

        mod_timer(&cfg->roam_timeout, jiffies + msecs_to_jiffies(WL_ROAM_TIMEOUT_MS));
#endif /* DHD_LOSSLESS_ROAMING */

        return BCME_OK;
}
#endif /* DHD_LOSSLESS_ROAMING || DBG_PKT_MON */

static s32
wl_notify_roam_start_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
#if (LINUX_VERSION_CODE > KERNEL_VERSION(3, 13, 0)) || defined(WL_VENDOR_EXT_SUPPORT)
        struct net_device *ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
        int event_type;

        event_type = WIFI_EVENT_ROAM_SCAN_STARTED;
        wl_cfgvendor_send_async_event(wiphy, ndev, GOOGLE_ROAM_EVENT_START,
                &event_type, sizeof(int));
#endif /* (LINUX_VERSION_CODE > KERNEL_VERSION(3, 13, 0)) || (WL_VENDOR_EXT_SUPPORT) */

        return BCME_OK;
}

static s32 wl_get_assoc_ies(struct bcm_cfg80211 *cfg, struct net_device *ndev)
{
        wl_assoc_info_t assoc_info;
        struct wl_connect_info *conn_info = wl_to_conn(cfg);
        s32 err = 0;
#ifdef QOS_MAP_SET
        bcm_tlv_t * qos_map_ie = NULL;
#endif /* QOS_MAP_SET */

        WL_DBG(("Enter \n"));
        err = wldev_iovar_getbuf(ndev, "assoc_info", NULL, 0, cfg->extra_buf,
                WL_ASSOC_INFO_MAX, NULL);
        if (unlikely(err)) {
                WL_ERR(("could not get assoc info (%d)\n", err));
                return err;
        }
        memcpy(&assoc_info, cfg->extra_buf, sizeof(wl_assoc_info_t));
        assoc_info.req_len = htod32(assoc_info.req_len);
        assoc_info.resp_len = htod32(assoc_info.resp_len);
        assoc_info.flags = htod32(assoc_info.flags);

        if (assoc_info.req_len > (MAX_REQ_LINE + sizeof(struct dot11_assoc_req) +
                ((assoc_info.flags & WLC_ASSOC_REQ_IS_REASSOC) ? ETHER_ADDR_LEN : 0))) {
                err = BCME_BADLEN;
                goto exit;
        }
        if ((assoc_info.req_len > 0) &&
                (assoc_info.req_len < (sizeof(struct dot11_assoc_req) +
                        ((assoc_info.flags & WLC_ASSOC_REQ_IS_REASSOC) ? ETHER_ADDR_LEN : 0)))) {
                err = BCME_BADLEN;
                goto exit;
        }
        if (assoc_info.resp_len > (MAX_REQ_LINE + sizeof(struct dot11_assoc_resp))) {
                err = BCME_BADLEN;
                goto exit;
        }
        if ((assoc_info.resp_len > 0) && (assoc_info.resp_len < sizeof(struct dot11_assoc_resp))) {
                err = BCME_BADLEN;
                goto exit;
        }

        if (conn_info->req_ie_len) {
                conn_info->req_ie_len = 0;
                bzero(conn_info->req_ie, sizeof(conn_info->req_ie));
        }
        if (conn_info->resp_ie_len) {
                conn_info->resp_ie_len = 0;
                bzero(conn_info->resp_ie, sizeof(conn_info->resp_ie));
        }

        if (assoc_info.req_len) {
                err = wldev_iovar_getbuf(ndev, "assoc_req_ies", NULL, 0, cfg->extra_buf,
                        assoc_info.req_len, NULL);
                if (unlikely(err)) {
                        WL_ERR(("could not get assoc req (%d)\n", err));
                        goto exit;
                }
                if (assoc_info.req_len < sizeof(struct dot11_assoc_req)) {
                        WL_ERR(("req_len %d lessthan %d \n", assoc_info.req_len,
                                (int)sizeof(struct dot11_assoc_req)));
                        return BCME_BADLEN;
                }
                conn_info->req_ie_len = (uint32)(assoc_info.req_len
                                                - sizeof(struct dot11_assoc_req));
                if (assoc_info.flags & WLC_ASSOC_REQ_IS_REASSOC) {
                        conn_info->req_ie_len -= ETHER_ADDR_LEN;
                }
                memcpy(conn_info->req_ie, cfg->extra_buf, conn_info->req_ie_len);
        }

        if (assoc_info.resp_len) {
                err = wldev_iovar_getbuf(ndev, "assoc_resp_ies", NULL, 0, cfg->extra_buf,
                        assoc_info.resp_len, NULL);
                if (unlikely(err)) {
                        WL_ERR(("could not get assoc resp (%d)\n", err));
                        goto exit;
                }
                if (assoc_info.resp_len < sizeof(struct dot11_assoc_resp)) {
                        WL_ERR(("resp_len %d is lessthan %d \n", assoc_info.resp_len,
                                (int)sizeof(struct dot11_assoc_resp)));
                }
                conn_info->resp_ie_len = assoc_info.resp_len -
                                (uint32)sizeof(struct dot11_assoc_resp);
                memcpy(conn_info->resp_ie, cfg->extra_buf, conn_info->resp_ie_len);
#ifdef QOS_MAP_SET
                /* find qos map set ie */
                if ((qos_map_ie = bcm_parse_tlvs(conn_info->resp_ie, conn_info->resp_ie_len,
                                DOT11_MNG_QOS_MAP_ID)) != NULL) {
                        WL_DBG((" QoS map set IE found in assoc response\n"));
                        if (!cfg->up_table) {
                                cfg->up_table = (uint8 *)MALLOC(cfg->osh, UP_TABLE_MAX);
                        }
                        wl_set_up_table(cfg->up_table, qos_map_ie);
                } else {
                        MFREE(cfg->osh, cfg->up_table, UP_TABLE_MAX);
                        cfg->up_table = NULL;
                }
#endif /* QOS_MAP_SET */
        }

exit:
        if (err) {
                WL_ERR(("err:%d, assoc_info-req:%u,resp:%u conn_info-req:%u,resp:%u\n",
                        err, assoc_info.req_len, assoc_info.resp_len,
                        conn_info->req_ie_len, conn_info->resp_ie_len));
        }
        return err;
}

static s32 wl_ch_to_chanspec(struct net_device *dev, int ch, struct wl_join_params *join_params,
        size_t *join_params_size)
{
        chanspec_t chanspec = 0, chspec;
        struct bcm_cfg80211 *cfg =
                (struct bcm_cfg80211 *)wiphy_priv(dev->ieee80211_ptr->wiphy);

        if ((ch != 0) && (cfg && !cfg->rcc_enabled)) {
                join_params->params.chanspec_num = 1;
                join_params->params.chanspec_list[0] = ch;

                if (join_params->params.chanspec_list[0] <= CH_MAX_2G_CHANNEL)
                        chanspec |= WL_CHANSPEC_BAND_2G;
                else
                        chanspec |= WL_CHANSPEC_BAND_5G;

                /* Get the min_bw set for the interface */
                chspec = WL_CHANSPEC_BW_20;
                if (chspec == INVCHANSPEC) {
                        WL_ERR(("Invalid chanspec \n"));
                        return -EINVAL;
                }
                chanspec |= chspec;
                chanspec |= WL_CHANSPEC_CTL_SB_NONE;

                *join_params_size += WL_ASSOC_PARAMS_FIXED_SIZE +
                        join_params->params.chanspec_num * sizeof(chanspec_t);

                join_params->params.chanspec_list[0]  &= WL_CHANSPEC_CHAN_MASK;
                join_params->params.chanspec_list[0] |= chanspec;
                join_params->params.chanspec_list[0] =
                        wl_chspec_host_to_driver(join_params->params.chanspec_list[0]);

                join_params->params.chanspec_num =
                        htod32(join_params->params.chanspec_num);
        }
#ifdef ESCAN_CHANNEL_CACHE
        else {
                /* If channel is not present and ESCAN_CHANNEL_CACHE is enabled,
                 * use the cached channel list
                 */
                int n_channels;
                n_channels = get_roam_channel_list(ch, join_params->params.chanspec_list,
                        MAX_ROAM_CHANNEL, &join_params->ssid, ioctl_version);
                join_params->params.chanspec_num = htod32(n_channels);
                *join_params_size += WL_ASSOC_PARAMS_FIXED_SIZE +
                        join_params->params.chanspec_num * sizeof(chanspec_t);
        }
#endif /* ESCAN_CHANNEL_CACHE */

        WL_DBG(("join_params->params.chanspec_list[0]= %X, %d channels\n",
                join_params->params.chanspec_list[0],
                join_params->params.chanspec_num));
        return 0;
}

static s32 wl_update_bss_info(struct bcm_cfg80211 *cfg, struct net_device *ndev, bool roam)
{
        struct cfg80211_bss *bss;
        wl_bss_info_t *bi;
        struct wlc_ssid *ssid;
        const struct bcm_tlv *tim;
        s32 beacon_interval;
        s32 dtim_period;
        size_t ie_len;
        const u8 *ie;
        u8 *curbssid;
        s32 err = 0;
        struct wiphy *wiphy;
        u32 channel;
        char *buf;
        u32 freq, band;

        wiphy = bcmcfg_to_wiphy(cfg);

        ssid = (struct wlc_ssid *)wl_read_prof(cfg, ndev, WL_PROF_SSID);
        curbssid = wl_read_prof(cfg, ndev, WL_PROF_BSSID);
        bss = CFG80211_GET_BSS(wiphy, NULL, curbssid,
                ssid->SSID, ssid->SSID_len);
        buf = (char *)MALLOCZ(cfg->osh, WL_EXTRA_BUF_MAX);
        if (!buf) {
                WL_ERR(("buffer alloc failed.\n"));
                return BCME_NOMEM;
        }
        mutex_lock(&cfg->usr_sync);
        *(u32 *)buf = htod32(WL_EXTRA_BUF_MAX);
        err = wldev_ioctl_get(ndev, WLC_GET_BSS_INFO, buf, WL_EXTRA_BUF_MAX);
        if (unlikely(err)) {
                WL_ERR(("Could not get bss info %d\n", err));
                goto update_bss_info_out;
        }
        bi = (wl_bss_info_t *)(buf + 4);
        channel = wf_chspec_ctlchan(wl_chspec_driver_to_host(bi->chanspec));
        wl_update_prof(cfg, ndev, NULL, &channel, WL_PROF_CHAN);

        if (!bss) {
                WL_DBG(("Could not find the AP\n"));
                if (memcmp(bi->BSSID.octet, curbssid, ETHER_ADDR_LEN)) {
                        WL_ERR(("Bssid doesn't match\n"));
                        err = -EIO;
                        goto update_bss_info_out;
                }
                err = wl_inform_single_bss(cfg, bi, roam);
                if (unlikely(err))
                        goto update_bss_info_out;

                ie = ((u8 *)bi) + bi->ie_offset;
                ie_len = bi->ie_length;
                beacon_interval = cpu_to_le16(bi->beacon_period);
        } else {
                WL_DBG(("Found the AP in the list - BSSID %pM\n", bss->bssid));
#if LINUX_VERSION_CODE == KERNEL_VERSION(2, 6, 38) && !defined(WL_COMPAT_WIRELESS)
                freq = ieee80211_channel_to_frequency(channel);
#else
                band = (channel <= CH_MAX_2G_CHANNEL) ? NL80211_BAND_2GHZ : NL80211_BAND_5GHZ;
                freq = ieee80211_channel_to_frequency(channel, band);
#endif // endif
                bss->channel = ieee80211_get_channel(wiphy, freq);
#if defined(WL_CFG80211_P2P_DEV_IF)
                ie = (const u8 *)bss->ies->data;
                ie_len = bss->ies->len;
#else
                ie = bss->information_elements;
                ie_len = bss->len_information_elements;
#endif /* WL_CFG80211_P2P_DEV_IF */
                beacon_interval = bss->beacon_interval;

                CFG80211_PUT_BSS(wiphy, bss);
        }

        tim = bcm_parse_tlvs(ie, ie_len, WLAN_EID_TIM);
        if (tim) {
                dtim_period = tim->data[1];
        } else {
                /*
                * active scan was done so we could not get dtim
                * information out of probe response.
                * so we speficially query dtim information.
                */
                dtim_period = 0;
                err = wldev_ioctl_get(ndev, WLC_GET_DTIMPRD,
                        &dtim_period, sizeof(dtim_period));
                if (unlikely(err)) {
                        WL_ERR(("WLC_GET_DTIMPRD error (%d)\n", err));
                        goto update_bss_info_out;
                }
        }

        wl_update_prof(cfg, ndev, NULL, &beacon_interval, WL_PROF_BEACONINT);
        wl_update_prof(cfg, ndev, NULL, &dtim_period, WL_PROF_DTIMPERIOD);

update_bss_info_out:
        if (unlikely(err)) {
                WL_ERR(("Failed with error %d\n", err));
        }

        MFREE(cfg->osh, buf, WL_EXTRA_BUF_MAX);
        mutex_unlock(&cfg->usr_sync);
        return err;
}

static s32
wl_bss_roaming_done(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, void *data)
{
        struct wl_connect_info *conn_info = wl_to_conn(cfg);
        s32 err = 0;
        u8 *curbssid;
        u32 *channel;
        scb_val_t scbval;
#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39)) || defined(WL_COMPAT_WIRELESS)
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
        struct ieee80211_supported_band *band;
        struct ieee80211_channel *notify_channel = NULL;
        u32 freq;
#endif /* LINUX_VERSION > 2.6.39 || WL_COMPAT_WIRELESS */
#if (defined(CONFIG_ARCH_MSM) && defined(CFG80211_ROAMED_API_UNIFIED)) || \
        (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 12, 0))
        struct cfg80211_roam_info roam_info;
#endif /* (CONFIG_ARCH_MSM && CFG80211_ROAMED_API_UNIFIED) || LINUX_VERSION >= 4.12.0 */
#ifdef WLFBT
        uint32 data_len = 0;
        if (data)
                data_len = ntoh32(e->datalen);
#endif /* WLFBT */

        curbssid = wl_read_prof(cfg, ndev, WL_PROF_BSSID);
        channel = (u32 *)wl_read_prof(cfg, ndev, WL_PROF_CHAN);

        if ((err = wl_get_assoc_ies(cfg, ndev)) != BCME_OK) {
                WL_ERR(("Fetching Assoc IEs failed, Skipping roamed event to"
                        " upper layer\n"));
                /* To make sure disconnect, and fw sync, explictly send dissassoc
                 * for BSSID 00:00:00:00:00:00 issue
                 */
                memset(&scbval, 0, sizeof(scb_val_t));
                scbval.val = WLAN_REASON_DEAUTH_LEAVING;
                memcpy(&scbval.ea, curbssid, ETHER_ADDR_LEN);
                scbval.val = htod32(scbval.val);
                if (wldev_ioctl_set(ndev, WLC_DISASSOC, &scbval,
                                sizeof(scb_val_t)) < 0) {
                        WL_ERR(("WLC_DISASSOC error\n"));
                }
                goto fail;
        }

        wl_update_prof(cfg, ndev, NULL, (const void *)(e->addr.octet), WL_PROF_BSSID);
        curbssid = wl_read_prof(cfg, ndev, WL_PROF_BSSID);
        if ((err = wl_update_bss_info(cfg, ndev, true)) != BCME_OK) {
                WL_ERR(("failed to update bss info, err=%d\n", err));
                goto fail;
        }
        wl_update_pmklist(ndev, cfg->pmk_list, err);

        channel = (u32 *)wl_read_prof(cfg, ndev, WL_PROF_CHAN);
#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39)) || defined(WL_COMPAT_WIRELESS)
        /* channel info for cfg80211_roamed introduced in 2.6.39-rc1 */
        if (*channel <= CH_MAX_2G_CHANNEL)
                band = wiphy->bands[NL80211_BAND_2GHZ];
        else
                band = wiphy->bands[NL80211_BAND_5GHZ];
        freq = ieee80211_channel_to_frequency(*channel, band->band);
        notify_channel = ieee80211_get_channel(wiphy, freq);
#endif /* LINUX_VERSION > 2.6.39  || WL_COMPAT_WIRELESS */
#ifdef WLFBT
        /* back up the given FBT key for the further supplicant request,
         * currently not checking the FBT is enabled for current BSS in DHD,
         * because the supplicant decides to take it or not.
         */
        if (data && (data_len == FBT_KEYLEN)) {
                memcpy(cfg->fbt_key, data, FBT_KEYLEN);
        }
#endif /* WLFBT */
#ifdef CUSTOM_LONG_RETRY_LIMIT
        if (wl_set_retry(ndev, CUSTOM_LONG_RETRY_LIMIT, 1) < 0) {
                WL_ERR(("CUSTOM_LONG_RETRY_LIMIT set fail!\n"));
        }
#endif /* CUSTOM_LONG_RETRY_LIMIT */
        WL_ERR(("Report roam event to upper layer. " MACDBG " (ch:%d)\n",
                MAC2STRDBG((const u8*)(&e->addr)), *channel));

#if (defined(CONFIG_ARCH_MSM) && defined(CFG80211_ROAMED_API_UNIFIED)) || \
        (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 12, 0))
        memset(&roam_info, 0, sizeof(struct cfg80211_roam_info));
        roam_info.channel = notify_channel;
        roam_info.bssid = curbssid;
        roam_info.req_ie = conn_info->req_ie;
        roam_info.req_ie_len = conn_info->req_ie_len;
        roam_info.resp_ie = conn_info->resp_ie;
        roam_info.resp_ie_len = conn_info->resp_ie_len;

        cfg80211_roamed(ndev, &roam_info, GFP_KERNEL);
#else
        cfg80211_roamed(ndev,
#if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 39)) || defined(WL_COMPAT_WIRELESS)
                notify_channel,
#endif // endif
                curbssid,
                conn_info->req_ie, conn_info->req_ie_len,
                conn_info->resp_ie, conn_info->resp_ie_len, GFP_KERNEL);
#endif /* (CONFIG_ARCH_MSM && CFG80211_ROAMED_API_UNIFIED) || LINUX_VERSION >= 4.12.0 */

        memcpy(&cfg->last_roamed_addr, &e->addr, ETHER_ADDR_LEN);
        wl_set_drv_status(cfg, CONNECTED, ndev);

#if defined(DHD_ENABLE_BIGDATA_LOGGING)
#ifdef DYNAMIC_MUMIMO_CONTROL
        if (!wl_get_murx_reassoc_status(cfg))
#endif /* DYNAMIC_MUMIMO_CONTROL */
        {
                cfg->roam_count++;
        }
#endif /* DHD_ENABLE_BIGDATA_LOGGING */

#ifdef DYNAMIC_MUMIMO_CONTROL
        if (wl_get_murx_reassoc_status(cfg)) {
                struct wl_security *sec = wl_read_prof(cfg, ndev, WL_PROF_SEC);
                bool sec_wpa = sec ? (sec->wpa_versions &
                        (NL80211_WPA_VERSION_1 | NL80211_WPA_VERSION_2)) : FALSE;
                dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
                if (!sec_wpa) {
                        wl_set_murx_reassoc_status(cfg, FALSE);
                        WL_DBG(("Security is not WPA nor WPA2\n"));
                } else {
                        WL_DBG(("Security is WPA or WPA2\n"));
                }
                wl_set_murx_block_eapol_status(cfg, FALSE);
                dhd_txflowcontrol(dhdp, ALL_INTERFACES, OFF);
        }
#endif /* DYNAMIC_MUMIMO_CONTROL */

#ifdef WL_BAM
        if (wl_adps_bad_ap_check(cfg, &e->addr)) {
                if (wl_adps_enabled(cfg, ndev)) {
                        wl_adps_set_suspend(cfg, ndev, ADPS_SUSPEND);
                }
        }
#endif  /* WL_BAM */

        return err;

fail:
#ifdef DHD_LOSSLESS_ROAMING
        wl_del_roam_timeout(cfg);
#endif  /* DHD_LOSSLESS_ROAMING */
        return err;
}

static bool
wl_cfg80211_verify_bss(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        struct cfg80211_bss **bss)
{
        struct wiphy *wiphy;
        struct wlc_ssid *ssid;
        uint8 *curbssid;
        int count = 0;
        int ret = false;
        u8 cur_ssid[DOT11_MAX_SSID_LEN + 1];

        wiphy = bcmcfg_to_wiphy(cfg);
        ssid = (struct wlc_ssid *)wl_read_prof(cfg, ndev, WL_PROF_SSID);
        curbssid = wl_read_prof(cfg, ndev, WL_PROF_BSSID);
        if (!ssid) {
                WL_ERR(("No SSID found in the saved profile \n"));
                return false;
        }

        do {
                *bss = CFG80211_GET_BSS(wiphy, NULL, curbssid,
                        ssid->SSID, ssid->SSID_len);
                if (*bss || (count > 5)) {
                        break;
                }

                count++;
                msleep(100);
        } while (*bss == NULL);

        WL_DBG(("cfg80211 bss_ptr:%p loop_cnt:%d\n", *bss, count));
        if (*bss) {
#if (LINUX_VERSION_CODE < KERNEL_VERSION(4, 7, 0))
                /* Update the reference count after use. In case of kernel version >= 4.7
                * the cfg802_put_bss is called in cfg80211_connect_bss context
                */
                CFG80211_PUT_BSS(wiphy, *bss);
#endif /* LINUX_VERSION_CODE < KERNEL_VERSION(4, 7, 0) */
                ret = true;
        } else {
                memset(cur_ssid, 0, DOT11_MAX_SSID_LEN);
                strncpy(cur_ssid, ssid->SSID,
                        MIN(ssid->SSID_len, DOT11_MAX_SSID_LEN));
                WL_ERR(("No bss entry for ssid:%s bssid:"MACDBG"\n",
                        cur_ssid, MAC2STRDBG(curbssid)));
        }

        return ret;
}
static void wl_notify_scan_done(struct bcm_cfg80211 *cfg, bool aborted)
{
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 8, 0))
        struct cfg80211_scan_info info;

        memset(&info, 0, sizeof(struct cfg80211_scan_info));
        info.aborted = aborted;
        cfg80211_scan_done(cfg->scan_request, &info);
#else
        cfg80211_scan_done(cfg->scan_request, aborted);
#endif // endif
}

static s32
wl_bss_connect_done(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, void *data, bool completed)
{
        struct wl_connect_info *conn_info = wl_to_conn(cfg);
        struct wl_security *sec = wl_read_prof(cfg, ndev, WL_PROF_SEC);
        s32 err = 0;
        u8 *curbssid = wl_read_prof(cfg, ndev, WL_PROF_BSSID);
        u32 event_type = ntoh32(e->event_type);
        struct cfg80211_bss *bss = NULL;
        dhd_pub_t *dhdp;
        dhdp = (dhd_pub_t *)(cfg->pub);
        BCM_REFERENCE(dhdp);

        if (!sec) {
                WL_ERR(("sec is NULL\n"));
                return -ENODEV;
        }
        WL_DBG((" enter\n"));
#ifdef ESCAN_RESULT_PATCH
        if (wl_get_drv_status(cfg, CONNECTED, ndev)) {
                if (memcmp(curbssid, connect_req_bssid, ETHER_ADDR_LEN) == 0) {
                        WL_INFORM_MEM((" Connected event of connected "
                                "device e=%d s=%d, ignore it\n",
                                ntoh32(e->event_type), ntoh32(e->status)));
                        return err;
                }
        }
        if (memcmp(curbssid, broad_bssid, ETHER_ADDR_LEN) == 0 &&
                memcmp(broad_bssid, connect_req_bssid, ETHER_ADDR_LEN) != 0) {
                WL_DBG(("copy bssid\n"));
                memcpy(curbssid, connect_req_bssid, ETHER_ADDR_LEN);
        }
#else
        if (cfg->scan_request) {
                wl_cfg80211_cancel_scan(cfg);
        }
#endif /* ESCAN_RESULT_PATCH */
        if (wl_get_drv_status(cfg, CONNECTING, ndev)) {
                wl_cfg80211_scan_abort(cfg);
                if (completed) {
                        wl_get_assoc_ies(cfg, ndev);
                        wl_update_prof(cfg, ndev, NULL, (const void *)(e->addr.octet),
                                WL_PROF_BSSID);
                        curbssid = wl_read_prof(cfg, ndev, WL_PROF_BSSID);
                        wl_update_bss_info(cfg, ndev, false);
                        wl_update_pmklist(ndev, cfg->pmk_list, err);
                        wl_set_drv_status(cfg, CONNECTED, ndev);
#if defined(ROAM_ENABLE) && defined(ROAM_AP_ENV_DETECTION)
                        if (dhdp->roam_env_detection)
                                wldev_iovar_setint(ndev, "roam_env_detection",
                                        AP_ENV_INDETERMINATE);
#endif /* ROAM_AP_ENV_DETECTION */
                        if (ndev != bcmcfg_to_prmry_ndev(cfg)) {
#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 13, 0)
                                init_completion(&cfg->iface_disable);
#else
                                /* reinitialize completion to clear previous count */
                                INIT_COMPLETION(cfg->iface_disable);
#endif // endif
                        }
#ifdef CUSTOM_SET_CPUCORE
                        if (wl_get_chan_isvht80(ndev, dhdp)) {
                                if (ndev == bcmcfg_to_prmry_ndev(cfg))
                                        dhdp->chan_isvht80 |= DHD_FLAG_STA_MODE; /* STA mode */
                                else if (is_p2p_group_iface(ndev->ieee80211_ptr))
                                        dhdp->chan_isvht80 |= DHD_FLAG_P2P_MODE; /* p2p mode */
                                dhd_set_cpucore(dhdp, TRUE);
                        }
#endif /* CUSTOM_SET_CPUCORE */
#ifdef CUSTOM_LONG_RETRY_LIMIT
                        if (wl_set_retry(ndev, CUSTOM_LONG_RETRY_LIMIT, 1) < 0) {
                                WL_ERR(("CUSTOM_LONG_RETRY_LIMIT set fail!\n"));
                        }
#endif /* CUSTOM_LONG_RETRY_LIMIT */
                        memset(&cfg->last_roamed_addr, 0, ETHER_ADDR_LEN);
                }
                wl_clr_drv_status(cfg, CONNECTING, ndev);

                if (completed && (wl_cfg80211_verify_bss(cfg, ndev, &bss) != true)) {
                        /* If bss entry is not available in the cfg80211 bss cache
                         * the wireless stack will complain and won't populate
                         * wdev->current_bss ptr
                         */
                        WL_ERR(("BSS entry not found. Indicate assoc event failure\n"));
                        completed = false;
                        sec->auth_assoc_res_status = WLAN_STATUS_UNSPECIFIED_FAILURE;
                }

                CFG80211_CONNECT_RESULT(ndev,
                        curbssid,
                        bss,
                        conn_info->req_ie,
                        conn_info->req_ie_len,
                        conn_info->resp_ie,
                        conn_info->resp_ie_len,
                        completed ? WLAN_STATUS_SUCCESS :
                        (sec->auth_assoc_res_status) ?
                        sec->auth_assoc_res_status :
                        WLAN_STATUS_UNSPECIFIED_FAILURE,
                        GFP_KERNEL);

                if (completed) {
                        WL_INFORM_MEM(("[%s] Report connect result - "
                                "connection succeeded\n", ndev->name));
#ifdef WL_BAM
                        if (wl_adps_bad_ap_check(cfg, &e->addr)) {
                                if (wl_adps_enabled(cfg, ndev)) {
                                        wl_adps_set_suspend(cfg, ndev, ADPS_SUSPEND);
                                }
                        }
#endif  /* WL_BAM */
                } else
                        WL_ERR(("[%s] Report connect result - connection failed\n", ndev->name));
        } else {
                        WL_INFORM_MEM(("[%s] Ignore event:%d. drv status"
                                " connecting:%x. connected:%d\n",
                                ndev->name, event_type, wl_get_drv_status(cfg, CONNECTING, ndev),
                                wl_get_drv_status(cfg, CONNECTED, ndev)));
        }
#ifdef CONFIG_TCPACK_FASTTX
        if (wl_get_chan_isvht80(ndev, dhdp))
                wldev_iovar_setint(ndev, "tcpack_fast_tx", 0);
        else
                wldev_iovar_setint(ndev, "tcpack_fast_tx", 1);
#endif /* CONFIG_TCPACK_FASTTX */

        return err;
}

static s32
wl_notify_mic_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        struct net_device *ndev = NULL;
        u16 flags = ntoh16(e->flags);
        enum nl80211_key_type key_type;

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);

        WL_INFORM_MEM(("[%s] mic fail event - " MACDBG " \n",
                ndev->name, MAC2STRDBG(e->addr.octet)));
        mutex_lock(&cfg->usr_sync);
        if (flags & WLC_EVENT_MSG_GROUP)
                key_type = NL80211_KEYTYPE_GROUP;
        else
                key_type = NL80211_KEYTYPE_PAIRWISE;

        wl_flush_fw_log_buffer(ndev, FW_LOGSET_MASK_ALL);
        cfg80211_michael_mic_failure(ndev, (const u8 *)&e->addr, key_type, -1,
                NULL, GFP_KERNEL);
        mutex_unlock(&cfg->usr_sync);

        return 0;
}

#ifdef BT_WIFI_HANDOVER
static s32
wl_notify_bt_wifi_handover_req(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        struct net_device *ndev = NULL;
        u32 event = ntoh32(e->event_type);
        u32 datalen = ntoh32(e->datalen);
        s32 err;

        WL_ERR(("wl_notify_bt_wifi_handover_req: event_type : %d, datalen : %d\n", event, datalen));
        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
        err = wl_genl_send_msg(ndev, event, data, (u16)datalen, 0, 0);

        return err;
}
#endif /* BT_WIFI_HANDOVER */

#ifdef PNO_SUPPORT
static s32
wl_notify_pfn_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        struct net_device *ndev = NULL;
#ifdef GSCAN_SUPPORT
        void *ptr;
        int send_evt_bytes = 0;
        u32 event = be32_to_cpu(e->event_type);
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
#endif /* GSCAN_SUPPORT */

        WL_INFORM_MEM((">>> PNO Event\n"));

        if (!data) {
                WL_ERR(("Data received is NULL!\n"));
                return 0;
        }

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
#ifdef GSCAN_SUPPORT
        ptr = dhd_dev_process_epno_result(ndev, data, event, &send_evt_bytes);
        if (ptr) {
                wl_cfgvendor_send_async_event(wiphy, ndev,
                        GOOGLE_SCAN_EPNO_EVENT, ptr, send_evt_bytes);
                MFREE(cfg->osh, ptr, send_evt_bytes);
        }
        if (!dhd_dev_is_legacy_pno_enabled(ndev))
                return 0;
#endif /* GSCAN_SUPPORT */

#ifndef WL_SCHED_SCAN
        mutex_lock(&cfg->usr_sync);
        /* TODO: Use cfg80211_sched_scan_results(wiphy); */
        CFG80211_DISCONNECTED(ndev, 0, NULL, 0, false, GFP_KERNEL);
        mutex_unlock(&cfg->usr_sync);
#else
        /* If cfg80211 scheduled scan is supported, report the pno results via sched
         * scan results
         */
        wl_notify_sched_scan_results(cfg, ndev, e, data);
#endif /* WL_SCHED_SCAN */
        return 0;
}
#endif /* PNO_SUPPORT */

#ifdef GSCAN_SUPPORT
static s32
wl_notify_gscan_event(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        s32 err = 0;
        u32 event = be32_to_cpu(e->event_type);
        void *ptr = NULL;
        int send_evt_bytes = 0;
        int event_type;
        struct net_device *ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
        u32 len = ntoh32(e->datalen);
        u32 buf_len = 0;

        switch (event) {
                case WLC_E_PFN_BEST_BATCHING:
                        err = dhd_dev_retrieve_batch_scan(ndev);
                        if (err < 0) {
                                WL_ERR(("Batch retrieval already in progress %d\n", err));
                        } else {
                                event_type = WIFI_SCAN_THRESHOLD_NUM_SCANS;
                                if (data && len) {
                                        event_type = *((int *)data);
                                }
                                wl_cfgvendor_send_async_event(wiphy, ndev,
                                    GOOGLE_GSCAN_BATCH_SCAN_EVENT,
                                     &event_type, sizeof(int));
                        }
                        break;
                case WLC_E_PFN_SCAN_COMPLETE:
                        event_type = WIFI_SCAN_COMPLETE;
                        wl_cfgvendor_send_async_event(wiphy, ndev,
                                GOOGLE_SCAN_COMPLETE_EVENT,
                                &event_type, sizeof(int));
                        break;
                case WLC_E_PFN_BSSID_NET_FOUND:
                        ptr = dhd_dev_hotlist_scan_event(ndev, data, &send_evt_bytes,
                              HOTLIST_FOUND, &buf_len);
                        if (ptr) {
                                wl_cfgvendor_send_hotlist_event(wiphy, ndev,
                                 ptr, send_evt_bytes, GOOGLE_GSCAN_GEOFENCE_FOUND_EVENT);
                                dhd_dev_gscan_hotlist_cache_cleanup(ndev, HOTLIST_FOUND);
                        } else {
                                err = -ENOMEM;
                        }
                        break;
                case WLC_E_PFN_BSSID_NET_LOST:
                        /* WLC_E_PFN_BSSID_NET_LOST is conflict shared with WLC_E_PFN_SCAN_ALLGONE
                         * We currently do not use WLC_E_PFN_SCAN_ALLGONE, so if we get it, ignore
                         */
                        if (len) {
                                ptr = dhd_dev_hotlist_scan_event(ndev, data, &send_evt_bytes,
                                                                 HOTLIST_LOST, &buf_len);
                                if (ptr) {
                                        wl_cfgvendor_send_hotlist_event(wiphy, ndev,
                                         ptr, send_evt_bytes, GOOGLE_GSCAN_GEOFENCE_LOST_EVENT);
                                        dhd_dev_gscan_hotlist_cache_cleanup(ndev, HOTLIST_LOST);
                                        MFREE(cfg->osh, ptr, buf_len);
                                } else {
                                        err = -ENOMEM;
                                }
                        } else {
                                err = -EINVAL;
                        }
                        break;
                case WLC_E_PFN_GSCAN_FULL_RESULT:
                        ptr = dhd_dev_process_full_gscan_result(ndev, data, len, &send_evt_bytes);
                        if (ptr) {
                                wl_cfgvendor_send_async_event(wiphy, ndev,
                                    GOOGLE_SCAN_FULL_RESULTS_EVENT, ptr, send_evt_bytes);
                                MFREE(cfg->osh, ptr, send_evt_bytes);
                        } else {
                                err = -ENOMEM;
                        }
                        break;
                case WLC_E_PFN_SSID_EXT:
                        ptr = dhd_dev_process_epno_result(ndev, data, event, &send_evt_bytes);
                        if (ptr) {
                                wl_cfgvendor_send_async_event(wiphy, ndev,
                                    GOOGLE_SCAN_EPNO_EVENT, ptr, send_evt_bytes);
                                MFREE(cfg->osh, ptr, send_evt_bytes);
                        } else {
                                err = -ENOMEM;
                        }
                        break;
                default:
                        WL_ERR(("Unknown event %d\n", event));
                        break;
        }
        return err;
}
#endif /* GSCAN_SUPPORT */

static s32
wl_notify_scan_status(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        struct channel_info channel_inform;
        struct wl_scan_results *bss_list;
        struct net_device *ndev = NULL;
        u32 len = WL_SCAN_BUF_MAX;
        s32 err = 0;
        unsigned long flags;

        WL_DBG(("Enter \n"));
        if (!wl_get_drv_status(cfg, SCANNING, ndev)) {
                WL_DBG(("scan is not ready \n"));
                return err;
        }
        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);

        mutex_lock(&cfg->scan_sync);
        wl_clr_drv_status(cfg, SCANNING, ndev);
        memset(&channel_inform, 0, sizeof(channel_inform));
        err = wldev_ioctl_get(ndev, WLC_GET_CHANNEL, &channel_inform,
                sizeof(channel_inform));
        if (unlikely(err)) {
                WL_ERR(("scan busy (%d)\n", err));
                goto scan_done_out;
        }
        channel_inform.scan_channel = dtoh32(channel_inform.scan_channel);
        if (unlikely(channel_inform.scan_channel)) {

                WL_DBG(("channel_inform.scan_channel (%d)\n",
                        channel_inform.scan_channel));
        }
        cfg->bss_list = cfg->scan_results;
        bss_list = cfg->bss_list;
        memset(bss_list, 0, len);
        bss_list->buflen = htod32(len);
        err = wldev_ioctl_get(ndev, WLC_SCAN_RESULTS, bss_list, len);
        if (unlikely(err) && unlikely(!cfg->scan_suppressed)) {
                WL_ERR(("%s Scan_results error (%d)\n", ndev->name, err));
                err = -EINVAL;
                goto scan_done_out;
        }
        bss_list->buflen = dtoh32(bss_list->buflen);
        bss_list->version = dtoh32(bss_list->version);
        bss_list->count = dtoh32(bss_list->count);

        err = wl_inform_bss(cfg);

scan_done_out:
        del_timer_sync(&cfg->scan_timeout);
        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
        if (cfg->scan_request) {
                wl_notify_scan_done(cfg, false);
                cfg->scan_request = NULL;
        }
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);
        WL_DBG(("cfg80211_scan_done\n"));
        mutex_unlock(&cfg->scan_sync);
        return err;
}

static s32
wl_frame_get_mgmt(struct bcm_cfg80211 *cfg, u16 fc,
        const struct ether_addr *da, const struct ether_addr *sa,
        const struct ether_addr *bssid, u8 **pheader, u32 *body_len, u8 *pbody)
{
        struct dot11_management_header *hdr;
        u32 totlen = 0;
        s32 err = 0;
        u8 *offset;
        u32 prebody_len = *body_len;
        switch (fc) {
                case FC_ASSOC_REQ:
                        /* capability , listen interval */
                        totlen = DOT11_ASSOC_REQ_FIXED_LEN;
                        *body_len += DOT11_ASSOC_REQ_FIXED_LEN;
                        break;

                case FC_REASSOC_REQ:
                        /* capability, listen inteval, ap address */
                        totlen = DOT11_REASSOC_REQ_FIXED_LEN;
                        *body_len += DOT11_REASSOC_REQ_FIXED_LEN;
                        break;
        }
        totlen += DOT11_MGMT_HDR_LEN + prebody_len;
        *pheader = (u8 *)MALLOCZ(cfg->osh, totlen);
        if (*pheader == NULL) {
                WL_ERR(("memory alloc failed \n"));
                return -ENOMEM;
        }
        hdr = (struct dot11_management_header *) (*pheader);
        hdr->fc = htol16(fc);
        hdr->durid = 0;
        hdr->seq = 0;
        offset = (u8*)(hdr + 1) + (totlen - DOT11_MGMT_HDR_LEN - prebody_len);
        bcopy((const char*)da, (u8*)&hdr->da, ETHER_ADDR_LEN);
        bcopy((const char*)sa, (u8*)&hdr->sa, ETHER_ADDR_LEN);
        bcopy((const char*)bssid, (u8*)&hdr->bssid, ETHER_ADDR_LEN);
        if ((pbody != NULL) && prebody_len)
                bcopy((const char*)pbody, offset, prebody_len);
        *body_len = totlen;
        return err;
}

#ifdef WL_CFG80211_GON_COLLISION
static void
wl_gon_req_collision(struct bcm_cfg80211 *cfg, wl_action_frame_t *tx_act_frm,
        wifi_p2p_pub_act_frame_t *rx_act_frm, struct net_device *ndev,
        struct ether_addr sa, struct ether_addr da)
{
        if (cfg->afx_hdl->pending_tx_act_frm == NULL)
                return;

        if (tx_act_frm &&
                wl_cfgp2p_is_pub_action(tx_act_frm->data, tx_act_frm->len)) {
                wifi_p2p_pub_act_frame_t *pact_frm;

                pact_frm = (wifi_p2p_pub_act_frame_t *)tx_act_frm->data;

                if (!(pact_frm->subtype == P2P_PAF_GON_REQ &&
                        rx_act_frm->subtype == P2P_PAF_GON_REQ)) {
                        return;
                }
        }

        WL_ERR((" GO NEGO Request COLLISION !!! \n"));

        /* if sa(peer) addr is less than da(my) addr,
         * my device will process peer's gon request and block to send my gon req.
         *
         * if not (sa addr > da addr),
         * my device will process gon request and drop gon req of peer.
         */
        if (memcmp(sa.octet, da.octet, ETHER_ADDR_LEN) < 0) {
                /* block to send tx gon request */
                cfg->block_gon_req_tx_count = BLOCK_GON_REQ_MAX_NUM;
                WL_ERR((" block to send gon req tx !!!\n"));

                /* if we are finding a common channel for sending af,
                 * do not scan more to block to send current gon req
                 */
                if (wl_get_drv_status_all(cfg, FINDING_COMMON_CHANNEL)) {
                        wl_clr_drv_status(cfg, FINDING_COMMON_CHANNEL, ndev);
                        complete(&cfg->act_frm_scan);
                }
        } else {
                /* drop gon request of peer to process gon request by my device. */
                WL_ERR((" drop to receive gon req rx !!! \n"));
                cfg->block_gon_req_rx_count = BLOCK_GON_REQ_MAX_NUM;
        }

        return;
}
#endif /* WL_CFG80211_GON_COLLISION */

void
wl_stop_wait_next_action_frame(struct bcm_cfg80211 *cfg, struct net_device *ndev, u8 bsscfgidx)
{
        s32 err = 0;

        if (wl_get_drv_status_all(cfg, FINDING_COMMON_CHANNEL)) {
                if (timer_pending(&cfg->p2p->listen_timer)) {
                        del_timer_sync(&cfg->p2p->listen_timer);
                }
                if (cfg->afx_hdl != NULL) {
                        if (cfg->afx_hdl->dev != NULL) {
                                wl_clr_drv_status(cfg, SCANNING, cfg->afx_hdl->dev);
                                wl_clr_drv_status(cfg, FINDING_COMMON_CHANNEL, cfg->afx_hdl->dev);
                        }
                        cfg->afx_hdl->peer_chan = WL_INVALID;
                }
                complete(&cfg->act_frm_scan);
                WL_DBG(("*** Wake UP ** Working afx searching is cleared\n"));
        } else if (wl_get_drv_status_all(cfg, SENDING_ACT_FRM)) {
                if (!(wl_get_p2p_status(cfg, ACTION_TX_COMPLETED) ||
                        wl_get_p2p_status(cfg, ACTION_TX_NOACK)))
                        wl_set_p2p_status(cfg, ACTION_TX_COMPLETED);

                WL_DBG(("*** Wake UP ** abort actframe iovar on bsscfxidx %d\n", bsscfgidx));
                /* Scan engine is not used for sending action frames in the latest driver
                 * branches. actframe_abort is used in the latest driver branches
                 * instead of scan abort.
                 *  If actframe_abort iovar succeeds, don't execute scan abort.
                 *  If actframe_abort fails with unsupported error,
                 *  execute scan abort (for backward copmatibility).
                 */
                if (cfg->af_sent_channel) {
                        err = wldev_iovar_setint_bsscfg(ndev, "actframe_abort", 1, bsscfgidx);
                        if (err < 0) {
                                if (err == BCME_UNSUPPORTED) {
                                        wl_cfg80211_scan_abort(cfg);
                                } else {
                                        WL_ERR(("actframe_abort failed. ret:%d\n", err));
                                }
                        }
                }
        }
#ifdef WL_CFG80211_SYNC_GON
        else if (wl_get_drv_status_all(cfg, WAITING_NEXT_ACT_FRM_LISTEN)) {
                WL_DBG(("*** Wake UP ** abort listen for next af frame\n"));
                /* So abort scan to cancel listen */
                wl_cfg80211_scan_abort(cfg);
        }
#endif /* WL_CFG80211_SYNC_GON */
}

#if defined(WLTDLS)
bool wl_cfg80211_is_tdls_tunneled_frame(void *frame, u32 frame_len)
{
        unsigned char *data;

        if (frame == NULL) {
                WL_ERR(("Invalid frame \n"));
                return false;
        }

        if (frame_len < 5) {
                WL_ERR(("Invalid frame length [%d] \n", frame_len));
                return false;
        }

        data = frame;

        if (!memcmp(data, TDLS_TUNNELED_PRB_REQ, 5) ||
                !memcmp(data, TDLS_TUNNELED_PRB_RESP, 5)) {
                WL_DBG(("TDLS Vendor Specific Received type\n"));
                return true;
        }

        return false;
}
#endif /* WLTDLS */

#if defined(WES_SUPPORT)
static int wes_mode = 0;
int wl_cfg80211_set_wes_mode(int mode)
{
        wes_mode = mode;
        return 0;
}

int wl_cfg80211_get_wes_mode(void)
{
        return wes_mode;
}

bool wl_cfg80211_is_wes(void *frame, u32 frame_len)
{
        unsigned char *data;

        if (frame == NULL) {
                WL_ERR(("Invalid frame \n"));
                return false;
        }

        if (frame_len < 4) {
                WL_ERR(("Invalid frame length [%d] \n", frame_len));
                return false;
        }

        data = frame;

        if (memcmp(data, "\x7f\x00\x00\xf0", 4) == 0) {
                WL_DBG(("Receive WES VS Action Frame \n"));
                return true;
        }

        return false;
}
#endif /* WES_SUPPORT */

int wl_cfg80211_get_ioctl_version(void)
{
        return ioctl_version;
}

static s32
wl_notify_rx_mgmt_frame(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        struct ieee80211_supported_band *band;
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
        struct ether_addr da;
        struct ether_addr bssid;
        bool isfree = false;
        s32 err = 0;
        s32 freq;
        struct net_device *ndev = NULL;
        wifi_p2p_pub_act_frame_t *act_frm = NULL;
        wifi_p2p_action_frame_t *p2p_act_frm = NULL;
        wifi_p2psd_gas_pub_act_frame_t *sd_act_frm = NULL;
        wl_event_rx_frame_data_t *rxframe;
        u32 event;
        u8 *mgmt_frame;
        u8 bsscfgidx;
        u32 mgmt_frame_len;
        u16 channel;
#if defined(TDLS_MSG_ONLY_WFD) && defined(WLTDLS)
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
#endif /* BCMDONGLEHOST && TDLS_MSG_ONLY_WFD && WLTDLS */
        if (ntoh32(e->datalen) < sizeof(wl_event_rx_frame_data_t)) {
                WL_ERR(("wrong datalen:%d\n", ntoh32(e->datalen)));
                return -EINVAL;
        }
        mgmt_frame_len = ntoh32(e->datalen) - (uint32)sizeof(wl_event_rx_frame_data_t);
        event = ntoh32(e->event_type);
        bsscfgidx = e->bsscfgidx;
        rxframe = (wl_event_rx_frame_data_t *)data;
        if (!rxframe) {
                WL_ERR(("rxframe: NULL\n"));
                return -EINVAL;
        }
        channel = (ntoh16(rxframe->channel) & WL_CHANSPEC_CHAN_MASK);
        memset(&bssid, 0, ETHER_ADDR_LEN);
        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
        if ((ndev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) &&
                (event == WLC_E_PROBREQ_MSG)) {
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
                struct net_info *iter, *next;
                for_each_ndev(cfg, iter, next) {
                        if (iter->ndev && iter->wdev &&
                                        iter->wdev->iftype == NL80211_IFTYPE_AP) {
                                        ndev = iter->ndev;
                                        cfgdev =  ndev_to_cfgdev(ndev);
                                        break;
                        }
                }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif
        }

        if (channel <= CH_MAX_2G_CHANNEL)
                band = wiphy->bands[NL80211_BAND_2GHZ];
        else
                band = wiphy->bands[NL80211_BAND_5GHZ];
        if (!band) {
                WL_ERR(("No valid band"));
                return -EINVAL;
        }
#if LINUX_VERSION_CODE == KERNEL_VERSION(2, 6, 38) && !defined(WL_COMPAT_WIRELESS)
        freq = ieee80211_channel_to_frequency(channel);
        (void)band->band;
#else
        freq = ieee80211_channel_to_frequency(channel, band->band);
#endif // endif
        if (event == WLC_E_ACTION_FRAME_RX) {
                u8 ioctl_buf[WLC_IOCTL_SMLEN];

                if ((err = wldev_iovar_getbuf_bsscfg(ndev, "cur_etheraddr",
                                NULL, 0, ioctl_buf, sizeof(ioctl_buf), bsscfgidx,
                                NULL)) != BCME_OK) {
                        WL_ERR(("WLC_GET_CUR_ETHERADDR failed, error %d\n", err));
                        goto exit;
                }

                err = wldev_ioctl_get(ndev, WLC_GET_BSSID, &bssid, ETHER_ADDR_LEN);
                if (err < 0)
                         WL_ERR(("WLC_GET_BSSID error %d\n", err));
                memcpy(da.octet, ioctl_buf, ETHER_ADDR_LEN);
                err = wl_frame_get_mgmt(cfg, FC_ACTION, &da, &e->addr, &bssid,
                        &mgmt_frame, &mgmt_frame_len,
                        (u8 *)((wl_event_rx_frame_data_t *)rxframe + 1));
                if (err < 0) {
                        WL_ERR(("Error in receiving action frame len %d channel %d freq %d\n",
                                mgmt_frame_len, channel, freq));
                        goto exit;
                }
                isfree = true;
                if (wl_cfgp2p_is_pub_action(&mgmt_frame[DOT11_MGMT_HDR_LEN],
                        mgmt_frame_len - DOT11_MGMT_HDR_LEN)) {
                        act_frm = (wifi_p2p_pub_act_frame_t *)
                                        (&mgmt_frame[DOT11_MGMT_HDR_LEN]);
                } else if (wl_cfgp2p_is_p2p_action(&mgmt_frame[DOT11_MGMT_HDR_LEN],
                        mgmt_frame_len - DOT11_MGMT_HDR_LEN)) {
                        p2p_act_frm = (wifi_p2p_action_frame_t *)
                                        (&mgmt_frame[DOT11_MGMT_HDR_LEN]);
                        (void) p2p_act_frm;
                } else if (wl_cfgp2p_is_gas_action(&mgmt_frame[DOT11_MGMT_HDR_LEN],
                        mgmt_frame_len - DOT11_MGMT_HDR_LEN)) {

                        sd_act_frm = (wifi_p2psd_gas_pub_act_frame_t *)
                                        (&mgmt_frame[DOT11_MGMT_HDR_LEN]);
                        if (sd_act_frm && wl_get_drv_status_all(cfg, WAITING_NEXT_ACT_FRM)) {
                                if (cfg->next_af_subtype == sd_act_frm->action) {
                                        WL_DBG(("We got a right next frame of SD!(%d)\n",
                                                sd_act_frm->action));
                                        wl_clr_drv_status(cfg, WAITING_NEXT_ACT_FRM, ndev);

                                        /* Stop waiting for next AF. */
                                        wl_stop_wait_next_action_frame(cfg, ndev, bsscfgidx);
                                }
                        }
                        (void) sd_act_frm;
#ifdef WLTDLS
                } else if ((mgmt_frame[DOT11_MGMT_HDR_LEN] == TDLS_AF_CATEGORY) ||
                                (wl_cfg80211_is_tdls_tunneled_frame(
                                    &mgmt_frame[DOT11_MGMT_HDR_LEN],
                                    mgmt_frame_len - DOT11_MGMT_HDR_LEN))) {
                        if (mgmt_frame[DOT11_MGMT_HDR_LEN] == TDLS_AF_CATEGORY) {
                                WL_ERR((" TDLS Action Frame Received type = %d \n",
                                        mgmt_frame[DOT11_MGMT_HDR_LEN + 1]));
                        }
#ifdef TDLS_MSG_ONLY_WFD
                        if (!dhdp->tdls_mode) {
                                WL_DBG((" TDLS Frame filtered \n"));
                                goto exit;
                        }
#else
                        if (mgmt_frame[DOT11_MGMT_HDR_LEN + 1] == TDLS_ACTION_SETUP_RESP) {
                                cfg->tdls_mgmt_frame = mgmt_frame;
                                cfg->tdls_mgmt_frame_len = mgmt_frame_len;
                                cfg->tdls_mgmt_freq = freq;
                                return 0;
                        }
#endif /* TDLS_MSG_ONLY_WFD */
#endif /* WLTDLS */
#ifdef QOS_MAP_SET
                } else if (mgmt_frame[DOT11_MGMT_HDR_LEN] == DOT11_ACTION_CAT_QOS) {
                        /* update QoS map set table */
                        bcm_tlv_t * qos_map_ie = NULL;
                        if ((qos_map_ie = bcm_parse_tlvs(&mgmt_frame[DOT11_MGMT_HDR_LEN],
                                        mgmt_frame_len - DOT11_MGMT_HDR_LEN,
                                        DOT11_MNG_QOS_MAP_ID)) != NULL) {
                                WL_DBG((" QoS map set IE found in QoS action frame\n"));
                                if (!cfg->up_table) {
                                        cfg->up_table = (uint8 *)MALLOC(cfg->osh, UP_TABLE_MAX);
                                }
                                wl_set_up_table(cfg->up_table, qos_map_ie);
                        } else {
                                MFREE(cfg->osh, cfg->up_table, UP_TABLE_MAX);
                                cfg->up_table = NULL;
                        }
#endif /* QOS_MAP_SET */
#ifdef WBTEXT
                } else if (mgmt_frame[DOT11_MGMT_HDR_LEN] == DOT11_ACTION_CAT_RRM) {
                        /* radio measurement category */
                        switch (mgmt_frame[DOT11_MGMT_HDR_LEN+1]) {
                                case DOT11_RM_ACTION_NR_REP:
                                        if (wl_cfg80211_recv_nbr_resp(ndev,
                                                        &mgmt_frame[DOT11_MGMT_HDR_LEN],
                                                        mgmt_frame_len - DOT11_MGMT_HDR_LEN)
                                                        == BCME_OK) {
                                                WL_DBG(("RCC updated by nbr response\n"));
                                        }
                                        break;
                                default:
                                        break;
                        }
#endif /* WBTEXT */
                } else {
                        /*
                         *  if we got normal action frame and ndev is p2p0,
                         *  we have to change ndev from p2p0 to wlan0
                         */
#if defined(WES_SUPPORT)
                        if (wl_cfg80211_is_wes(&mgmt_frame[DOT11_MGMT_HDR_LEN],
                        mgmt_frame_len - DOT11_MGMT_HDR_LEN) && wes_mode == 0) {
                        /* Ignore WES VS Action frame */
                        goto exit;
                        }
#endif /* WES_SUPPORT */

                        if (cfg->next_af_subtype != P2P_PAF_SUBTYPE_INVALID) {
                                u8 action = 0;
                                if (wl_get_public_action(&mgmt_frame[DOT11_MGMT_HDR_LEN],
                                        mgmt_frame_len - DOT11_MGMT_HDR_LEN, &action) != BCME_OK) {
                                        WL_DBG(("Recived action is not public action frame\n"));
                                } else if (cfg->next_af_subtype == action) {
                                        WL_DBG(("Recived action is the waiting action(%d)\n",
                                                action));
                                        wl_clr_drv_status(cfg, WAITING_NEXT_ACT_FRM, ndev);

                                        /* Stop waiting for next AF. */
                                        wl_stop_wait_next_action_frame(cfg, ndev, bsscfgidx);
                                }
                        }
                }

                if (act_frm) {
#ifdef WL_CFG80211_GON_COLLISION
                        if (act_frm->subtype == P2P_PAF_GON_REQ) {
                                wl_gon_req_collision(cfg,
                                        &cfg->afx_hdl->pending_tx_act_frm->action_frame,
                                        act_frm, ndev, e->addr, da);

                                if (cfg->block_gon_req_rx_count) {
                                        WL_ERR(("drop frame GON Req Rx : count (%d)\n",
                                                cfg->block_gon_req_rx_count));
                                        cfg->block_gon_req_rx_count--;
                                        goto exit;
                                }
                        } else if (act_frm->subtype == P2P_PAF_GON_CONF) {
                                /* if go formation done, clear it */
                                cfg->block_gon_req_tx_count = 0;
                                cfg->block_gon_req_rx_count = 0;
                        }
#endif /* WL_CFG80211_GON_COLLISION */

                        if (wl_get_drv_status_all(cfg, WAITING_NEXT_ACT_FRM)) {
                                if (cfg->next_af_subtype == act_frm->subtype) {
                                        WL_DBG(("Abort wait for next frame, Recieved frame (%d) "
                                                "Next action frame(%d)\n",
                                                act_frm->subtype, cfg->next_af_subtype));
                                        wl_clr_drv_status(cfg, WAITING_NEXT_ACT_FRM, ndev);

                                        if (cfg->next_af_subtype == P2P_PAF_GON_CONF) {
                                                OSL_SLEEP(20);
                                        }

                                        /* Stop waiting for next AF. */
                                        wl_stop_wait_next_action_frame(cfg, ndev, bsscfgidx);
                                } else if ((cfg->next_af_subtype == P2P_PAF_GON_RSP) &&
                                                (act_frm->subtype == P2P_PAF_GON_REQ)) {
                                        /* If current received frame is GO NEG REQ and next
                                         * expected frame is GO NEG RESP, do not send it up.
                                         */
                                        WL_ERR(("GO Neg req received while waiting for RESP."
                                                "Discard incoming frame\n"));
                                        goto exit;
                                }
                        }
                }

                wl_cfgp2p_print_actframe(false, &mgmt_frame[DOT11_MGMT_HDR_LEN],
                        mgmt_frame_len - DOT11_MGMT_HDR_LEN, channel);
                if (act_frm && (act_frm->subtype == P2P_PAF_GON_CONF)) {
                        WL_DBG(("P2P: GO_NEG_PHASE status cleared \n"));
                        wl_clr_p2p_status(cfg, GO_NEG_PHASE);
                }
        } else if (event == WLC_E_PROBREQ_MSG) {

                /* Handle probe reqs frame
                 * WPS-AP certification 4.2.13
                 */
                struct parsed_ies prbreq_ies;
                u32 prbreq_ie_len = 0;
                bool pbc = 0;

                WL_DBG((" Event WLC_E_PROBREQ_MSG received\n"));
                mgmt_frame = (u8 *)(data);
                mgmt_frame_len = ntoh32(e->datalen);
                if (mgmt_frame_len < DOT11_MGMT_HDR_LEN) {
                        WL_ERR(("wrong datalen:%d\n", mgmt_frame_len));
                        return -EINVAL;
                }
                prbreq_ie_len = mgmt_frame_len - DOT11_MGMT_HDR_LEN;

                /* Parse prob_req IEs */
                if (wl_cfg80211_parse_ies(&mgmt_frame[DOT11_MGMT_HDR_LEN],
                        prbreq_ie_len, &prbreq_ies) < 0) {
                        WL_ERR(("Prob req get IEs failed\n"));
                        return 0;
                }
                if (prbreq_ies.wps_ie != NULL) {
                        wl_validate_wps_ie(
                                (const char *)prbreq_ies.wps_ie, prbreq_ies.wps_ie_len, &pbc);
                        WL_DBG((" wps_ie exist pbc = %d\n", pbc));
                        /* if pbc method, send prob_req mgmt frame to upper layer */
                        if (!pbc)
                                return 0;
                } else
                        return 0;
        } else {
                mgmt_frame = (u8 *)((wl_event_rx_frame_data_t *)rxframe + 1);

                /* wpa supplicant use probe request event for restarting another GON Req.
                 * but it makes GON Req repetition.
                 * so if src addr of prb req is same as my target device,
                 * do not send probe request event during sending action frame.
                 */
                if (event == WLC_E_P2P_PROBREQ_MSG) {
                        WL_DBG((" Event %s\n", (event == WLC_E_P2P_PROBREQ_MSG) ?
                                "WLC_E_P2P_PROBREQ_MSG":"WLC_E_PROBREQ_MSG"));

#ifdef WL_CFG80211_USE_PRB_REQ_FOR_AF_TX
                        if (WL_DRV_STATUS_SENDING_AF_FRM_EXT(cfg) &&
                                !memcmp(cfg->afx_hdl->tx_dst_addr.octet, e->addr.octet,
                                ETHER_ADDR_LEN)) {
                                if (cfg->afx_hdl->pending_tx_act_frm &&
                                        wl_get_drv_status_all(cfg, FINDING_COMMON_CHANNEL)) {
                                        s32 channel = CHSPEC_CHANNEL(hton16(rxframe->channel));
                                        WL_DBG(("PROBE REQUEST : Peer found, channel : %d\n",
                                                channel));
                                        cfg->afx_hdl->peer_chan = channel;
                                        complete(&cfg->act_frm_scan);
                                }
                        }
#endif /* WL_CFG80211_USE_PRB_REQ_FOR_AF_TX */

                        /* Filter any P2P probe reqs arriving during the
                         * GO-NEG Phase
                         */
                        if (cfg->p2p &&
#if defined(P2P_IE_MISSING_FIX)
                                cfg->p2p_prb_noti &&
#endif // endif
                                wl_get_p2p_status(cfg, GO_NEG_PHASE)) {
                                WL_DBG(("Filtering P2P probe_req while "
                                        "being in GO-Neg state\n"));
                                return 0;
                        }
                }
        }

        if (discover_cfgdev(cfgdev, cfg))
                WL_DBG(("Rx Managment frame For P2P Discovery Interface \n"));
        else
                WL_DBG(("Rx Managment frame For Iface (%s) \n", ndev->name));
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 18, 0))
         cfg80211_rx_mgmt(cfgdev, freq, 0,  mgmt_frame, mgmt_frame_len, 0);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 12, 0))
        cfg80211_rx_mgmt(cfgdev, freq, 0,  mgmt_frame, mgmt_frame_len, 0, GFP_ATOMIC);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0)) || \
        defined(WL_COMPAT_WIRELESS)
        cfg80211_rx_mgmt(cfgdev, freq, 0, mgmt_frame, mgmt_frame_len, GFP_ATOMIC);
#else
        cfg80211_rx_mgmt(cfgdev, freq, mgmt_frame, mgmt_frame_len, GFP_ATOMIC);
#endif /* LINUX_VERSION >= VERSION(3, 18, 0) */

        WL_DBG(("mgmt_frame_len (%d) , e->datalen (%d), channel (%d), freq (%d)\n",
                mgmt_frame_len, ntoh32(e->datalen), channel, freq));
exit:
        if (isfree) {
                MFREE(cfg->osh, mgmt_frame, mgmt_frame_len);
        }
        return err;
}

#ifdef WL_SCHED_SCAN
/* If target scan is not reliable, set the below define to "1" to do a
 * full escan
 */
#define FULL_ESCAN_ON_PFN_NET_FOUND             0
static s32
wl_notify_sched_scan_results(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, void *data)
{
        wl_pfn_net_info_v1_t *netinfo, *pnetinfo;
        wl_pfn_net_info_v2_t *netinfo_v2, *pnetinfo_v2;
        struct wiphy *wiphy     = bcmcfg_to_wiphy(cfg);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        int err = 0;
        struct cfg80211_scan_request *request = NULL;
        struct cfg80211_ssid ssid[MAX_PFN_LIST_COUNT];
        struct ieee80211_channel *channel = NULL;
        int channel_req = 0;
        int band = 0;
        wl_pfn_scanresults_v1_t *pfn_result_v1 = (wl_pfn_scanresults_v1_t *)data;
        wl_pfn_scanresults_v2_t *pfn_result_v2 = (wl_pfn_scanresults_v2_t *)data;
        int n_pfn_results = 0;
        log_conn_event_t *event_data = NULL;
        tlv_log *tlv_data = NULL;
        u32 alloc_len, tlv_len;
        u32 payload_len;
        u8 tmp_buf[DOT11_MAX_SSID_LEN + 1];

        WL_DBG(("Enter\n"));

        /* These static asserts guarantee v1/v2 net_info and subnet_info are compatible
         * in size and SSID offset, allowing v1 to be used below except for the results
         * fields themselves (status, count, offset to netinfo).
         */
        STATIC_ASSERT(sizeof(wl_pfn_net_info_v1_t) == sizeof(wl_pfn_net_info_v2_t));
        STATIC_ASSERT(sizeof(wl_pfn_lnet_info_v1_t) == sizeof(wl_pfn_lnet_info_v2_t));
        STATIC_ASSERT(sizeof(wl_pfn_subnet_info_v1_t) == sizeof(wl_pfn_subnet_info_v2_t));
        STATIC_ASSERT(OFFSETOF(wl_pfn_subnet_info_v1_t, SSID) ==
                      OFFSETOF(wl_pfn_subnet_info_v2_t, u.SSID));

        /* Extract the version-specific items */
        if (pfn_result_v1->version == PFN_SCANRESULT_VERSION_V1) {
                n_pfn_results = pfn_result_v1->count;
                pnetinfo = pfn_result_v1->netinfo;
                WL_INFORM_MEM(("PFN NET FOUND event. count:%d \n", n_pfn_results));

                if (n_pfn_results > 0) {
                        int i;

                        if (n_pfn_results > MAX_PFN_LIST_COUNT)
                                n_pfn_results = MAX_PFN_LIST_COUNT;

                        memset(&ssid, 0x00, sizeof(ssid));

                        request = (struct cfg80211_scan_request *)MALLOCZ(cfg->osh,
                                sizeof(*request) + sizeof(*request->channels) * n_pfn_results);
                        channel = (struct ieee80211_channel *)MALLOCZ(cfg->osh,
                                (sizeof(struct ieee80211_channel) * n_pfn_results));
                        if (!request || !channel) {
                                WL_ERR(("No memory"));
                                err = -ENOMEM;
                                goto out_err;
                        }

                        request->wiphy = wiphy;

                        if (DBG_RING_ACTIVE(dhdp, DHD_EVENT_RING_ID)) {
                                alloc_len = sizeof(log_conn_event_t) + DOT11_MAX_SSID_LEN +
                                        sizeof(uint16) + sizeof(int16);
                                event_data = (log_conn_event_t *)MALLOC(cfg->osh, alloc_len);
                                if (!event_data) {
                                        WL_ERR(("%s: failed to allocate the log_conn_event_t with "
                                                "length(%d)\n", __func__, alloc_len));
                                        goto out_err;
                                }
                                tlv_len = 3 * sizeof(tlv_log);
                                event_data->tlvs = (tlv_log *)MALLOC(cfg->osh, tlv_len);
                                if (!event_data->tlvs) {
                                        WL_ERR(("%s: failed to allocate the tlv_log with "
                                                "length(%d)\n", __func__, tlv_len));
                                        goto out_err;
                                }
                        }

                        for (i = 0; i < n_pfn_results; i++) {
                                netinfo = &pnetinfo[i];
                                if (!netinfo) {
                                        WL_ERR(("Invalid netinfo ptr. index:%d", i));
                                        err = -EINVAL;
                                        goto out_err;
                                }
                                if (netinfo->pfnsubnet.SSID_len > DOT11_MAX_SSID_LEN) {
                                        WL_ERR(("Wrong SSID length:%d\n",
                                                netinfo->pfnsubnet.SSID_len));
                                        err = -EINVAL;
                                        goto out_err;
                                }
                                memcpy(tmp_buf, netinfo->pfnsubnet.SSID,
                                        netinfo->pfnsubnet.SSID_len);
                                tmp_buf[netinfo->pfnsubnet.SSID_len] = '\0';
                                WL_PNO((">>> SSID:%s Channel:%d \n",
                                        tmp_buf, netinfo->pfnsubnet.channel));
                                /* PFN result doesn't have all the info which are required by
                                 * the supplicant. (For e.g IEs) Do a target Escan so that
                                 * sched scan results are reported via wl_inform_single_bss in
                                 * the required format. Escan does require the scan request in
                                 * the form of cfg80211_scan_request. For timebeing, create
                                 * cfg80211_scan_request one out of the received PNO event.
                                 */

                                ssid[i].ssid_len = netinfo->pfnsubnet.SSID_len;
                                memcpy(ssid[i].ssid, netinfo->pfnsubnet.SSID,
                                        ssid[i].ssid_len);
                                request->n_ssids++;

                                channel_req = netinfo->pfnsubnet.channel;
                                band = (channel_req <= CH_MAX_2G_CHANNEL) ? NL80211_BAND_2GHZ
                                        : NL80211_BAND_5GHZ;
                                channel[i].center_freq =
                                        ieee80211_channel_to_frequency(channel_req, band);
                                channel[i].band = band;
                                channel[i].flags |= IEEE80211_CHAN_NO_HT40;
                                request->channels[i] = &channel[i];
                                request->n_channels++;

                                if (DBG_RING_ACTIVE(dhdp, DHD_EVENT_RING_ID)) {
                                        payload_len = sizeof(log_conn_event_t);
                                        event_data->event = WIFI_EVENT_DRIVER_PNO_NETWORK_FOUND;
                                        tlv_data = event_data->tlvs;

                                        /* ssid */
                                        tlv_data->tag = WIFI_TAG_SSID;
                                        tlv_data->len = ssid[i].ssid_len;
                                        memcpy(tlv_data->value, ssid[i].ssid, ssid[i].ssid_len);
                                        payload_len += TLV_LOG_SIZE(tlv_data);
                                        tlv_data = TLV_LOG_NEXT(tlv_data);

                                        /* channel */
                                        tlv_data->tag = WIFI_TAG_CHANNEL;
                                        tlv_data->len = sizeof(uint16);
                                        memcpy(tlv_data->value, &channel_req, sizeof(uint16));
                                        payload_len += TLV_LOG_SIZE(tlv_data);
                                        tlv_data = TLV_LOG_NEXT(tlv_data);

                                        /* rssi */
                                        tlv_data->tag = WIFI_TAG_RSSI;
                                        tlv_data->len = sizeof(int16);
                                        memcpy(tlv_data->value, &netinfo->RSSI, sizeof(int16));
                                        payload_len += TLV_LOG_SIZE(tlv_data);
                                        tlv_data = TLV_LOG_NEXT(tlv_data);

                                        dhd_os_push_push_ring_data(dhdp, DHD_EVENT_RING_ID,
                                                &event_data->event, payload_len);
                                }
                        }

                        /* assign parsed ssid array */
                        if (request->n_ssids)
                                request->ssids = &ssid[0];

                        if (wl_get_drv_status_all(cfg, SCANNING)) {
                                /* Abort any on-going scan */
                                wl_cfg80211_cancel_scan(cfg);
                        }

                        if (wl_get_p2p_status(cfg, DISCOVERY_ON)) {
                                WL_PNO((">>> P2P discovery was ON. Disabling it\n"));
                                err = wl_cfgp2p_discover_enable_search(cfg, false);
                                if (unlikely(err)) {
                                        wl_clr_drv_status(cfg, SCANNING, ndev);
                                        goto out_err;
                                }
                                p2p_scan(cfg) = false;
                        }
                        wl_set_drv_status(cfg, SCANNING, ndev);
#if FULL_ESCAN_ON_PFN_NET_FOUND
                        WL_PNO((">>> Doing Full ESCAN on PNO event\n"));
                        err = wl_do_escan(cfg, wiphy, ndev, NULL);
#else
                        WL_PNO((">>> Doing targeted ESCAN on PNO event\n"));
                        err = wl_do_escan(cfg, wiphy, ndev, request);
#endif // endif
                        if (err) {
                                wl_clr_drv_status(cfg, SCANNING, ndev);
                                goto out_err;
                        }
                        DBG_EVENT_LOG(dhdp, WIFI_EVENT_DRIVER_PNO_SCAN_REQUESTED);
                        cfg->sched_scan_running = TRUE;
                }
                else {
                        WL_ERR(("FALSE PNO Event. (pfn_count == 0) \n"));
                }

        } else if (pfn_result_v2->version == PFN_SCANRESULT_VERSION_V2) {
                n_pfn_results = pfn_result_v2->count;
                pnetinfo_v2 = (wl_pfn_net_info_v2_t *)pfn_result_v2->netinfo;

                if (e->event_type == WLC_E_PFN_NET_LOST) {
                        WL_PNO(("Do Nothing %d\n", e->event_type));
                        return 0;
                }

                WL_INFORM_MEM(("PFN NET FOUND event. count:%d \n", n_pfn_results));

                if (n_pfn_results > 0) {
                        int i;

                        if (n_pfn_results > MAX_PFN_LIST_COUNT)
                                n_pfn_results = MAX_PFN_LIST_COUNT;

                        memset(&ssid, 0x00, sizeof(ssid));

                        request = (struct cfg80211_scan_request *)MALLOCZ(cfg->osh,
                                sizeof(*request) + sizeof(*request->channels) * n_pfn_results);
                        channel = (struct ieee80211_channel *)MALLOCZ(cfg->osh,
                                (sizeof(struct ieee80211_channel) * n_pfn_results));
                        if (!request || !channel) {
                                WL_ERR(("No memory"));
                                err = -ENOMEM;
                                goto out_err;
                        }

                        request->wiphy = wiphy;

                        if (DBG_RING_ACTIVE(dhdp, DHD_EVENT_RING_ID)) {
                                alloc_len = sizeof(log_conn_event_t) + DOT11_MAX_SSID_LEN +
                                        sizeof(uint16) + sizeof(int16);
                                event_data = (log_conn_event_t *)MALLOC(cfg->osh, alloc_len);
                                if (!event_data) {
                                        WL_ERR(("%s: failed to allocate the log_conn_event_t with "
                                                "length(%d)\n", __func__, alloc_len));
                                        goto out_err;
                                }
                                tlv_len = 3 * sizeof(tlv_log);
                                event_data->tlvs = (tlv_log *)MALLOC(cfg->osh, tlv_len);
                                if (!event_data->tlvs) {
                                        WL_ERR(("%s: failed to allocate the tlv_log with "
                                                "length(%d)\n", __func__, tlv_len));
                                        goto out_err;
                                }
                        }

                        for (i = 0; i < n_pfn_results; i++) {
                                netinfo_v2 = &pnetinfo_v2[i];
                                if (!netinfo_v2) {
                                        WL_ERR(("Invalid netinfo ptr. index:%d", i));
                                        err = -EINVAL;
                                        goto out_err;
                                }
                                WL_PNO((">>> SSID:%s Channel:%d \n",
                                        netinfo_v2->pfnsubnet.u.SSID,
                                        netinfo_v2->pfnsubnet.channel));
                                /* PFN result doesn't have all the info which are required by the
                                 * supplicant. (For e.g IEs) Do a target Escan so that sched scan
                                 * results are reported via wl_inform_single_bss in the required
                                 * format. Escan does require the scan request in the form of
                                 * cfg80211_scan_request. For timebeing, create
                                 * cfg80211_scan_request one out of the received PNO event.
                                 */
                                ssid[i].ssid_len = MIN(DOT11_MAX_SSID_LEN,
                                        netinfo_v2->pfnsubnet.SSID_len);
                                memcpy(ssid[i].ssid, netinfo_v2->pfnsubnet.u.SSID,
                                        ssid[i].ssid_len);
                                request->n_ssids++;

                                channel_req = netinfo_v2->pfnsubnet.channel;
                                band = (channel_req <= CH_MAX_2G_CHANNEL) ? NL80211_BAND_2GHZ
                                        : NL80211_BAND_5GHZ;
                                channel[i].center_freq =
                                        ieee80211_channel_to_frequency(channel_req, band);
                                channel[i].band = band;
                                channel[i].flags |= IEEE80211_CHAN_NO_HT40;
                                request->channels[i] = &channel[i];
                                request->n_channels++;

                                if (DBG_RING_ACTIVE(dhdp, DHD_EVENT_RING_ID)) {
                                        payload_len = sizeof(log_conn_event_t);
                                        event_data->event = WIFI_EVENT_DRIVER_PNO_NETWORK_FOUND;
                                        tlv_data = event_data->tlvs;

                                        /* ssid */
                                        tlv_data->tag = WIFI_TAG_SSID;
                                        tlv_data->len = netinfo_v2->pfnsubnet.SSID_len;
                                        memcpy(tlv_data->value, ssid[i].ssid, ssid[i].ssid_len);
                                        payload_len += TLV_LOG_SIZE(tlv_data);
                                        tlv_data = TLV_LOG_NEXT(tlv_data);

                                        /* channel */
                                        tlv_data->tag = WIFI_TAG_CHANNEL;
                                        tlv_data->len = sizeof(uint16);
                                        memcpy(tlv_data->value, &channel_req, sizeof(uint16));
                                        payload_len += TLV_LOG_SIZE(tlv_data);
                                        tlv_data = TLV_LOG_NEXT(tlv_data);

                                        /* rssi */
                                        tlv_data->tag = WIFI_TAG_RSSI;
                                        tlv_data->len = sizeof(int16);
                                        memcpy(tlv_data->value, &netinfo_v2->RSSI, sizeof(int16));
                                        payload_len += TLV_LOG_SIZE(tlv_data);
                                        tlv_data = TLV_LOG_NEXT(tlv_data);

                                        dhd_os_push_push_ring_data(dhdp, DHD_EVENT_RING_ID,
                                                &event_data->event, payload_len);
                                }
                        }

                        /* assign parsed ssid array */
                        if (request->n_ssids)
                                request->ssids = &ssid[0];

                        if (wl_get_drv_status_all(cfg, SCANNING)) {
                                /* Abort any on-going scan */
                                wl_cfg80211_cancel_scan(cfg);
                        }

                        if (wl_get_p2p_status(cfg, DISCOVERY_ON)) {
                                WL_PNO((">>> P2P discovery was ON. Disabling it\n"));
                                err = wl_cfgp2p_discover_enable_search(cfg, false);
                                if (unlikely(err)) {
                                        wl_clr_drv_status(cfg, SCANNING, ndev);
                                        goto out_err;
                                }
                                p2p_scan(cfg) = false;
                        }

                        wl_set_drv_status(cfg, SCANNING, ndev);
#if FULL_ESCAN_ON_PFN_NET_FOUND
                        WL_PNO((">>> Doing Full ESCAN on PNO event\n"));
                        err = wl_do_escan(cfg, wiphy, ndev, NULL);
#else
                        WL_PNO((">>> Doing targeted ESCAN on PNO event\n"));
                        err = wl_do_escan(cfg, wiphy, ndev, request);
#endif // endif
                        if (err) {
                                wl_clr_drv_status(cfg, SCANNING, ndev);
                                goto out_err;
                        }
                        DBG_EVENT_LOG(dhdp, WIFI_EVENT_DRIVER_PNO_SCAN_REQUESTED);
                        cfg->sched_scan_running = TRUE;
                }
                else {
                        WL_ERR(("FALSE PNO Event. (pfn_count == 0) \n"));
                }
        } else {
                WL_ERR(("Unsupported version %d, expected %d or %d\n", pfn_result_v1->version,
                        PFN_SCANRESULT_VERSION_V1, PFN_SCANRESULT_VERSION_V2));
                return 0;
        }
out_err:
        if (request) {
                MFREE(cfg->osh, request,
                        sizeof(*request) + sizeof(*request->channels) * n_pfn_results);
        }
        if (channel) {
                MFREE(cfg->osh, channel,
                        (sizeof(struct ieee80211_channel) * n_pfn_results));
        }

        if (event_data) {
                if (event_data->tlvs) {
                        MFREE(cfg->osh, event_data->tlvs, tlv_len);
                }
                MFREE(cfg->osh, event_data, alloc_len);
        }
        return err;
}
#endif /* WL_SCHED_SCAN */

static void wl_init_conf(struct wl_conf *conf)
{
        WL_DBG(("Enter \n"));
        conf->frag_threshold = (u32)-1;
        conf->rts_threshold = (u32)-1;
        conf->retry_short = (u32)-1;
        conf->retry_long = (u32)-1;
        conf->tx_power = -1;
}

static void wl_init_prof(struct bcm_cfg80211 *cfg, struct net_device *ndev)
{
        unsigned long flags;
        struct wl_profile *profile = wl_get_profile_by_netdev(cfg, ndev);

        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
        memset(profile, 0, sizeof(struct wl_profile));
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);
}

static void wl_init_event_handler(struct bcm_cfg80211 *cfg)
{
        memset(cfg->evt_handler, 0, sizeof(cfg->evt_handler));

        cfg->evt_handler[WLC_E_SCAN_COMPLETE] = wl_notify_scan_status;
        cfg->evt_handler[WLC_E_AUTH] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_ASSOC] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_LINK] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_DEAUTH_IND] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_DEAUTH] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_DISASSOC_IND] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_ASSOC_IND] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_REASSOC_IND] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_ROAM] = wl_notify_roaming_status;
        cfg->evt_handler[WLC_E_MIC_ERROR] = wl_notify_mic_status;
        cfg->evt_handler[WLC_E_SET_SSID] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_ACTION_FRAME_RX] = wl_notify_rx_mgmt_frame;
        cfg->evt_handler[WLC_E_PROBREQ_MSG] = wl_notify_rx_mgmt_frame;
        cfg->evt_handler[WLC_E_P2P_PROBREQ_MSG] = wl_notify_rx_mgmt_frame;
        cfg->evt_handler[WLC_E_P2P_DISC_LISTEN_COMPLETE] = wl_cfgp2p_listen_complete;
        cfg->evt_handler[WLC_E_ACTION_FRAME_COMPLETE] = wl_cfgp2p_action_tx_complete;
        cfg->evt_handler[WLC_E_ACTION_FRAME_OFF_CHAN_COMPLETE] = wl_cfgp2p_action_tx_complete;
        cfg->evt_handler[WLC_E_JOIN] = wl_notify_connect_status;
        cfg->evt_handler[WLC_E_START] = wl_notify_connect_status;
#ifdef PNO_SUPPORT
        cfg->evt_handler[WLC_E_PFN_NET_FOUND] = wl_notify_pfn_status;
#endif /* PNO_SUPPORT */
#ifdef GSCAN_SUPPORT
        cfg->evt_handler[WLC_E_PFN_BEST_BATCHING] = wl_notify_gscan_event;
        cfg->evt_handler[WLC_E_PFN_SCAN_COMPLETE] = wl_notify_gscan_event;
        cfg->evt_handler[WLC_E_PFN_GSCAN_FULL_RESULT] = wl_notify_gscan_event;
        cfg->evt_handler[WLC_E_PFN_BSSID_NET_FOUND] = wl_notify_gscan_event;
        cfg->evt_handler[WLC_E_PFN_BSSID_NET_LOST] = wl_notify_gscan_event;
        cfg->evt_handler[WLC_E_PFN_SSID_EXT] = wl_notify_gscan_event;
        cfg->evt_handler[WLC_E_GAS_FRAGMENT_RX] = wl_notify_gscan_event;
        cfg->evt_handler[WLC_E_ROAM_EXP_EVENT] = wl_handle_roam_exp_event;
#endif /* GSCAN_SUPPORT */
#ifdef RSSI_MONITOR_SUPPORT
        cfg->evt_handler[WLC_E_RSSI_LQM] = wl_handle_rssi_monitor_event;
#endif /* RSSI_MONITOR_SUPPORT */
#ifdef WLTDLS
        cfg->evt_handler[WLC_E_TDLS_PEER_EVENT] = wl_tdls_event_handler;
#endif /* WLTDLS */
        cfg->evt_handler[WLC_E_BSSID] = wl_notify_roaming_status;
#ifdef WLAIBSS
        cfg->evt_handler[WLC_E_AIBSS_TXFAIL] = wl_notify_aibss_txfail;
#endif /* WLAIBSS */
#ifdef  WL_RELMCAST
        cfg->evt_handler[WLC_E_RMC_EVENT] = wl_notify_rmc_status;
#endif /* WL_RELMCAST */
#ifdef BT_WIFI_HANDOVER
        cfg->evt_handler[WLC_E_BT_WIFI_HANDOVER_REQ] = wl_notify_bt_wifi_handover_req;
#endif // endif
#ifdef WL_NAN
        cfg->evt_handler[WLC_E_NAN_CRITICAL] = wl_cfgnan_notify_nan_status;
        cfg->evt_handler[WLC_E_NAN_NON_CRITICAL] = wl_cfgnan_notify_nan_status;
#endif /* WL_NAN */
        cfg->evt_handler[WLC_E_CSA_COMPLETE_IND] = wl_csa_complete_ind;
        cfg->evt_handler[WLC_E_AP_STARTED] = wl_ap_start_ind;
#ifdef CUSTOM_EVENT_PM_WAKE
        cfg->evt_handler[WLC_E_EXCESS_PM_WAKE_EVENT] = wl_check_pmstatus;
#endif  /* CUSTOM_EVENT_PM_WAKE */
#if defined(DHD_LOSSLESS_ROAMING) || defined(DBG_PKT_MON)
        cfg->evt_handler[WLC_E_ROAM_PREP] = wl_notify_roam_prep_status;
#endif /* DHD_LOSSLESS_ROAMING || DBG_PKT_MON  */
        cfg->evt_handler[WLC_E_ROAM_START] = wl_notify_roam_start_status;
#ifdef WL_BAM
        cfg->evt_handler[WLC_E_ADPS] = wl_adps_event_handler;
#endif  /* WL_BAM */
#ifdef WL_BCNRECV
        cfg->evt_handler[WLC_E_BCNRECV_ABORTED] = wl_bcnrecv_aborted_event_handler;
#endif /* WL_BCNRECV */
}

#if defined(STATIC_WL_PRIV_STRUCT)
static int
wl_init_escan_result_buf(struct bcm_cfg80211 *cfg)
{
#ifdef DUAL_ESCAN_RESULT_BUFFER
        cfg->escan_info.escan_buf[0] = DHD_OS_PREALLOC(cfg->pub,
                DHD_PREALLOC_WIPHY_ESCAN0, ESCAN_BUF_SIZE);
        if (cfg->escan_info.escan_buf[0] == NULL) {
                WL_ERR(("Failed to alloc ESCAN_BUF0\n"));
                return -ENOMEM;
        }

        cfg->escan_info.escan_buf[1] = DHD_OS_PREALLOC(cfg->pub,
                DHD_PREALLOC_WIPHY_ESCAN1, ESCAN_BUF_SIZE);
        if (cfg->escan_info.escan_buf[1] == NULL) {
                WL_ERR(("Failed to alloc ESCAN_BUF1\n"));
                return -ENOMEM;
        }

        bzero(cfg->escan_info.escan_buf[0], ESCAN_BUF_SIZE);
        bzero(cfg->escan_info.escan_buf[1], ESCAN_BUF_SIZE);
        cfg->escan_info.escan_type[0] = 0;
        cfg->escan_info.escan_type[1] = 0;
#else
        cfg->escan_info.escan_buf = DHD_OS_PREALLOC(cfg->pub,
                DHD_PREALLOC_WIPHY_ESCAN0, ESCAN_BUF_SIZE);
        if (cfg->escan_info.escan_buf == NULL) {
                WL_ERR(("Failed to alloc ESCAN_BUF\n"));
                return -ENOMEM;
        }
        bzero(cfg->escan_info.escan_buf, ESCAN_BUF_SIZE);
#endif /* DUAL_ESCAN_RESULT_BUFFER */

        return 0;
}

static void
wl_deinit_escan_result_buf(struct bcm_cfg80211 *cfg)
{
#ifdef DUAL_ESCAN_RESULT_BUFFER
        if (cfg->escan_info.escan_buf[0] != NULL) {
                cfg->escan_info.escan_buf[0] = NULL;
                cfg->escan_info.escan_type[0] = 0;
        }

        if (cfg->escan_info.escan_buf[1] != NULL) {
                cfg->escan_info.escan_buf[1] = NULL;
                cfg->escan_info.escan_type[1] = 0;
        }
#else
        if (cfg->escan_info.escan_buf != NULL) {
                cfg->escan_info.escan_buf = NULL;
        }
#endif /* DUAL_ESCAN_RESULT_BUFFER */
}
#endif /* STATIC_WL_PRIV_STRUCT */

static s32 wl_init_priv_mem(struct bcm_cfg80211 *cfg)
{
        WL_DBG(("Enter \n"));

        cfg->scan_results = (struct wl_scan_results *)MALLOCZ(cfg->osh,
                WL_SCAN_BUF_MAX);
        if (unlikely(!cfg->scan_results)) {
                WL_ERR(("Scan results alloc failed\n"));
                goto init_priv_mem_out;
        }
        cfg->conf = (struct wl_conf *)MALLOCZ(cfg->osh, sizeof(*cfg->conf));
        if (unlikely(!cfg->conf)) {
                WL_ERR(("wl_conf alloc failed\n"));
                goto init_priv_mem_out;
        }
        cfg->scan_req_int = (void *)MALLOCZ(cfg->osh,
                sizeof(*cfg->scan_req_int));
        if (unlikely(!cfg->scan_req_int)) {
                WL_ERR(("Scan req alloc failed\n"));
                goto init_priv_mem_out;
        }
        cfg->ioctl_buf = (u8 *)MALLOCZ(cfg->osh, WLC_IOCTL_MAXLEN);
        if (unlikely(!cfg->ioctl_buf)) {
                WL_ERR(("Ioctl buf alloc failed\n"));
                goto init_priv_mem_out;
        }
        cfg->escan_ioctl_buf = (void *)MALLOCZ(cfg->osh, WLC_IOCTL_MAXLEN);
        if (unlikely(!cfg->escan_ioctl_buf)) {
                WL_ERR(("Ioctl buf alloc failed\n"));
                goto init_priv_mem_out;
        }
        cfg->extra_buf = (void *)MALLOCZ(cfg->osh, WL_EXTRA_BUF_MAX);
        if (unlikely(!cfg->extra_buf)) {
                WL_ERR(("Extra buf alloc failed\n"));
                goto init_priv_mem_out;
        }
        cfg->pmk_list = (void *)MALLOCZ(cfg->osh, sizeof(*cfg->pmk_list));
        if (unlikely(!cfg->pmk_list)) {
                WL_ERR(("pmk list alloc failed\n"));
                goto init_priv_mem_out;
        }
#if defined(STATIC_WL_PRIV_STRUCT)
        cfg->conn_info = (void *)MALLOCZ(cfg->osh, sizeof(*cfg->conn_info));
        if (unlikely(!cfg->conn_info)) {
                WL_ERR(("cfg->conn_info alloc failed\n"));
                goto init_priv_mem_out;
        }
        cfg->ie = (void *)MALLOC(cfg->osh, sizeof(*cfg->ie));
        if (unlikely(!cfg->ie)) {
                WL_ERR(("cfg->ie alloc failed\n"));
                goto init_priv_mem_out;
        }
        if (unlikely(wl_init_escan_result_buf(cfg))) {
                WL_ERR(("Failed to init escan resul buf\n"));
                goto init_priv_mem_out;
        }
#endif /* STATIC_WL_PRIV_STRUCT */
        cfg->afx_hdl = (void *)MALLOCZ(cfg->osh, sizeof(*cfg->afx_hdl));
        if (unlikely(!cfg->afx_hdl)) {
                WL_ERR(("afx hdl alloc failed\n"));
                goto init_priv_mem_out;
        } else {
                init_completion(&cfg->act_frm_scan);
                init_completion(&cfg->wait_next_af);

                INIT_WORK(&cfg->afx_hdl->work, wl_cfg80211_afx_handler);
        }
#ifdef WLTDLS
        if (cfg->tdls_mgmt_frame) {
                MFREE(cfg->osh, cfg->tdls_mgmt_frame, cfg->tdls_mgmt_frame_len);
                cfg->tdls_mgmt_frame = NULL;
                cfg->tdls_mgmt_frame_len = 0;
        }
#endif /* WLTDLS */
        return 0;

init_priv_mem_out:
        wl_deinit_priv_mem(cfg);

        return -ENOMEM;
}

static void wl_deinit_priv_mem(struct bcm_cfg80211 *cfg)
{
        MFREE(cfg->osh, cfg->scan_results, WL_SCAN_BUF_MAX);
        cfg->scan_results = NULL;
        MFREE(cfg->osh, cfg->conf, sizeof(*cfg->conf));
        cfg->conf = NULL;
        MFREE(cfg->osh, cfg->scan_req_int, sizeof(*cfg->scan_req_int));
        cfg->scan_req_int = NULL;
        MFREE(cfg->osh, cfg->ioctl_buf, WLC_IOCTL_MAXLEN);
        cfg->ioctl_buf = NULL;
        MFREE(cfg->osh, cfg->escan_ioctl_buf, WLC_IOCTL_MAXLEN);
        cfg->escan_ioctl_buf = NULL;
        MFREE(cfg->osh, cfg->extra_buf, WL_EXTRA_BUF_MAX);
        cfg->extra_buf = NULL;
        MFREE(cfg->osh, cfg->pmk_list, sizeof(*cfg->pmk_list));
        cfg->pmk_list = NULL;
#if defined(STATIC_WL_PRIV_STRUCT)
        MFREE(cfg->osh, cfg->conn_info, sizeof(*cfg->conn_info));
        cfg->conn_info = NULL;
        MFREE(cfg->osh, cfg->ie, sizeof(*cfg->ie));
        cfg->ie = NULL;
        wl_deinit_escan_result_buf(cfg);
#endif /* STATIC_WL_PRIV_STRUCT */
        if (cfg->afx_hdl) {
                cancel_work_sync(&cfg->afx_hdl->work);
                MFREE(cfg->osh, cfg->afx_hdl, sizeof(*cfg->afx_hdl));
                cfg->afx_hdl = NULL;
        }

}

static s32 wl_create_event_handler(struct bcm_cfg80211 *cfg)
{
        int ret = 0;
        WL_DBG(("Enter \n"));

        /* Allocate workqueue for event */
        if (!cfg->event_workq) {
                cfg->event_workq = alloc_workqueue("dhd_eventd",
                        WQ_MEM_RECLAIM | WQ_HIGHPRI | WQ_UNBOUND, 1);
        }

        if (!cfg->event_workq) {
                ret = -ENOMEM;
        } else {
                INIT_WORK(&cfg->event_work, wl_event_handler);
        }
        return ret;
}

static void wl_destroy_event_handler(struct bcm_cfg80211 *cfg)
{
        if (cfg && cfg->event_workq) {
                cancel_work_sync(&cfg->event_work);
                destroy_workqueue(cfg->event_workq);
                cfg->event_workq = NULL;
        }
}

void wl_terminate_event_handler(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if (cfg) {
                wl_destroy_event_handler(cfg);
                wl_flush_eq(cfg);
        }
}

static void wl_scan_timeout(unsigned long data)
{
        wl_event_msg_t msg;
        struct bcm_cfg80211 *cfg = (struct bcm_cfg80211 *)data;
        struct wireless_dev *wdev = NULL;
        struct net_device *ndev = NULL;
        struct wl_scan_results *bss_list;
        wl_bss_info_t *bi = NULL;
        s32 i;
        u32 channel;
        u64 cur_time = OSL_LOCALTIME_NS();
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
#ifdef DHD_FW_COREDUMP
        uint32 prev_memdump_mode = dhdp->memdump_enabled;
#endif /* DHD_FW_COREDUMP */
        unsigned long flags;

        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
        if (!(cfg->scan_request)) {
                WL_ERR(("timer expired but no scan request\n"));
                spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);
                return;
        } else {
#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 6, 0))
                if (cfg->scan_request->dev) {
                        wdev = cfg->scan_request->dev->ieee80211_ptr;
                }
#else
                wdev = cfg->scan_request->wdev;
#endif /* LINUX_VERSION < KERNEL_VERSION(3, 6, 0) */
                spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);

                if (!wdev) {
                        WL_ERR(("No wireless_dev present\n"));
                        return;
                }
        }

#if defined(DHD_KERNEL_SCHED_DEBUG) && defined(DHD_FW_COREDUMP)
        if (prev_memdump_mode && !dhd_query_bus_erros(dhdp) &&
                ((cfg->scan_deq_time < cfg->scan_enq_time) ||
                dhd_bus_query_dpc_sched_errors(dhdp))) {
                WL_ERR(("****SCAN event timeout due to scheduling problem\n"));
                /* change g_assert_type to trigger Kernel panic */
                g_assert_type = 2;
                /* use ASSERT() to trigger panic */
                ASSERT(0);
        }
#endif /* DHD_KERNEL_SCHED_DEBUG && DHD_FW_COREDUMP */

        WL_ERR(("***SCAN event timeout. WQ state:0x%x scan_enq_time:"SEC_USEC_FMT
                " evt_hdlr_entry_time:"SEC_USEC_FMT" evt_deq_time:"SEC_USEC_FMT
                "\nscan_deq_time:"SEC_USEC_FMT" scan_hdlr_cmplt_time:"SEC_USEC_FMT
                " scan_cmplt_time:"SEC_USEC_FMT" evt_hdlr_exit_time:"SEC_USEC_FMT
                "\ncurrent_time:"SEC_USEC_FMT"\n", work_busy(&cfg->event_work),
                GET_SEC_USEC(cfg->scan_enq_time), GET_SEC_USEC(cfg->wl_evt_hdlr_entry_time),
                GET_SEC_USEC(cfg->wl_evt_deq_time), GET_SEC_USEC(cfg->scan_deq_time),
                GET_SEC_USEC(cfg->scan_hdlr_cmplt_time), GET_SEC_USEC(cfg->scan_cmplt_time),
                GET_SEC_USEC(cfg->wl_evt_hdlr_exit_time), GET_SEC_USEC(cur_time)));
        if (cfg->scan_enq_time) {
                WL_ERR(("Elapsed time(ns): %llu\n", (cur_time - cfg->scan_enq_time)));
        }
        WL_ERR(("lock_states:[%d:%d:%d:%d:%d:%d]\n",
                mutex_is_locked(&cfg->if_sync),
                mutex_is_locked(&cfg->usr_sync),
                mutex_is_locked(&cfg->pm_sync),
                mutex_is_locked(&cfg->scan_sync),
                spin_is_locked(&cfg->cfgdrv_lock),
                spin_is_locked(&cfg->eq_lock)));
        dhd_bus_intr_count_dump(dhdp);

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 1, 0)) && !defined(CONFIG_MODULES)
        /* Print WQ states. Enable only for in-built drivers as the symbol is not exported  */
        show_workqueue_state();
#endif /* LINUX_VER >= 4.1 && !CONFIG_MODULES */

        bss_list = wl_escan_get_buf(cfg, FALSE);
        if (!bss_list) {
                WL_ERR(("bss_list is null. Didn't receive any partial scan results\n"));
        } else {
                WL_ERR(("Dump scan buffer:\n"
                        "scanned AP count (%d)\n", bss_list->count));

                bi = next_bss(bss_list, bi);
                for_each_bss(bss_list, bi, i) {
                        channel = wf_chspec_ctlchan(wl_chspec_driver_to_host(bi->chanspec));
                        WL_ERR(("SSID :%s  Channel :%d\n", bi->SSID, channel));
                }
        }

        ndev = wdev_to_wlc_ndev(wdev, cfg);
        bzero(&msg, sizeof(wl_event_msg_t));
        WL_ERR(("timer expired\n"));
#ifdef BCMPCIE
        (void)dhd_pcie_dump_int_regs(dhdp);
        dhd_pcie_dump_rc_conf_space_cap(dhdp);
#endif /* BCMPCIE */
#ifdef DHD_FW_COREDUMP
        if (dhdp->memdump_enabled) {
                dhdp->memdump_enabled = DUMP_MEMFILE;
                dhdp->memdump_type = DUMP_TYPE_SCAN_TIMEOUT;
                dhd_bus_mem_dump(dhdp);
                dhdp->memdump_enabled = prev_memdump_mode;
        }
#endif /* DHD_FW_COREDUMP */
        msg.event_type = hton32(WLC_E_ESCAN_RESULT);
        msg.status = hton32(WLC_E_STATUS_TIMEOUT);
        msg.reason = 0xFFFFFFFF;
        wl_cfg80211_event(ndev, &msg, NULL);
#ifdef CUSTOMER_HW4_DEBUG
        if (!wl_scan_timeout_dbg_enabled)
                wl_scan_timeout_dbg_set();
#endif /* CUSTOMER_HW4_DEBUG */
}

#ifdef DHD_LOSSLESS_ROAMING
static void wl_del_roam_timeout(struct bcm_cfg80211 *cfg)
{
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        /* restore prec_map to ALLPRIO */
        dhdp->dequeue_prec_map = ALLPRIO;
        if (timer_pending(&cfg->roam_timeout)) {
                del_timer_sync(&cfg->roam_timeout);
        }

}

static void wl_roam_timeout(unsigned long data)
{
        struct bcm_cfg80211 *cfg = (struct bcm_cfg80211 *)data;
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        WL_ERR(("roam timer expired\n"));

        /* restore prec_map to ALLPRIO */
        dhdp->dequeue_prec_map = ALLPRIO;
}

#endif /* DHD_LOSSLESS_ROAMING */

static s32
wl_cfg80211_netdev_notifier_call(struct notifier_block * nb,
        unsigned long state, void *ptr)
{
#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 11, 0))
        struct net_device *dev = ptr;
#else
        struct net_device *dev = netdev_notifier_info_to_dev(ptr);
#endif /* LINUX_VERSION < VERSION(3, 11, 0) */
        struct wireless_dev *wdev = NULL;
        struct bcm_cfg80211 *cfg = NULL;

        WL_DBG(("Enter state:%lu  ndev%p \n", state, dev));
        if (!dev) {
                WL_ERR(("dev null\n"));
                return NOTIFY_DONE;
        }

        wdev = ndev_to_wdev(dev);
        if (!wdev) {
                WL_ERR(("wdev null. Do nothing\n"));
                return NOTIFY_DONE;
        }

        cfg = (struct bcm_cfg80211 *)wiphy_priv(wdev->wiphy);
        if (!cfg || (cfg != wl_cfg80211_get_bcmcfg())) {
                /* If cfg80211 priv is null or doesn't match return */
                WL_ERR(("wrong cfg ptr (%p)\n", cfg));
                return NOTIFY_DONE;
        }

        if (dev == bcmcfg_to_prmry_ndev(cfg)) {
                /* Nothing to be done for primary I/F */
                return NOTIFY_DONE;
        }

        switch (state) {
                case NETDEV_DOWN:
                {
#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 11, 0))
                        int max_wait_timeout = 2;
                        int max_wait_count = 100;
                        int refcnt = 0;
                        unsigned long limit = jiffies + max_wait_timeout * HZ;
                        while (work_pending(&wdev->cleanup_work)) {
                                if (refcnt%5 == 0) {
                                        WL_ERR(("[NETDEV_DOWN] wait for "
                                                "complete of cleanup_work"
                                                " (%d th)\n", refcnt));
                                }
                                if (!time_before(jiffies, limit)) {
                                        WL_ERR(("[NETDEV_DOWN] cleanup_work"
                                                " of CFG80211 is not"
                                                " completed in %d sec\n",
                                                max_wait_timeout));
                                        break;
                                }
                                if (refcnt >= max_wait_count) {
                                        WL_ERR(("[NETDEV_DOWN] cleanup_work"
                                                " of CFG80211 is not"
                                                " completed in %d loop\n",
                                                max_wait_count));
                                        break;
                                }
                                set_current_state(TASK_INTERRUPTIBLE);
                                (void)schedule_timeout(100);
                                set_current_state(TASK_RUNNING);
                                refcnt++;
                        }
#endif /* LINUX_VERSION < VERSION(3, 14, 0) */
                        break;
                }
                case NETDEV_UNREGISTER:
                        wl_cfg80211_clear_per_bss_ies(cfg, wdev);
                        /* after calling list_del_rcu(&wdev->list) */
                        wl_dealloc_netinfo_by_wdev(cfg, wdev);
                        break;
                case NETDEV_GOING_DOWN:
                        /*
                         * At NETDEV_DOWN state, wdev_cleanup_work work will be called.
                         * In front of door, the function checks whether current scan
                         * is working or not. If the scanning is still working,
                         * wdev_cleanup_work call WARN_ON and make the scan done forcibly.
                         */
                        if (wl_get_drv_status(cfg, SCANNING, dev))
                                wl_cfg80211_cancel_scan(cfg);
                        break;
        }
        return NOTIFY_DONE;
}

static struct notifier_block wl_cfg80211_netdev_notifier = {
        .notifier_call = wl_cfg80211_netdev_notifier_call,
};

/*
 * to make sure we won't register the same notifier twice, otherwise a loop is likely to be
 * created in kernel notifier link list (with 'next' pointing to itself)
 */
static bool wl_cfg80211_netdev_notifier_registered = FALSE;

static void wl_cfg80211_cancel_scan(struct bcm_cfg80211 *cfg)
{
        struct wireless_dev *wdev = NULL;
        struct net_device *ndev = NULL;

        mutex_lock(&cfg->scan_sync);
        if (!cfg->scan_request) {
                goto exit;
        }

#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 6, 0))
        if (cfg->scan_request->dev)
                wdev = cfg->scan_request->dev->ieee80211_ptr;
#else
        wdev = cfg->scan_request->wdev;
#endif /* LINUX_VERSION < KERNEL_VERSION(3, 6, 0) */

        if (!wdev) {
                WL_ERR(("No wireless_dev present\n"));
                goto exit;
        }

        ndev = wdev_to_wlc_ndev(wdev, cfg);
        wl_notify_escan_complete(cfg, ndev, true, true);
        WL_INFORM_MEM(("Scan aborted! \n"));
exit:
        mutex_unlock(&cfg->scan_sync);
}

void wl_cfg80211_scan_abort(struct bcm_cfg80211 *cfg)
{
        wl_scan_params_t *params = NULL;
        s32 params_size = 0;
        s32 err = BCME_OK;
        struct net_device *dev = bcmcfg_to_prmry_ndev(cfg);
        if (!in_atomic()) {
                /* Our scan params only need space for 1 channel and 0 ssids */
                params = wl_cfg80211_scan_alloc_params(cfg, -1, 0, &params_size);
                if (params == NULL) {
                        WL_ERR(("scan params allocation failed \n"));
                        err = -ENOMEM;
                } else {
                        /* Do a scan abort to stop the driver's scan engine */
                        err = wldev_ioctl_set(dev, WLC_SCAN, params, params_size);
                        if (err < 0) {
                                /* scan abort can fail if there is no outstanding scan */
                                WL_DBG(("scan abort  failed \n"));
                        }
                        MFREE(cfg->osh, params, params_size);
                }
        }
#ifdef WLTDLS
        if (cfg->tdls_mgmt_frame) {
                MFREE(cfg->osh, cfg->tdls_mgmt_frame, cfg->tdls_mgmt_frame_len);
                cfg->tdls_mgmt_frame = NULL;
                cfg->tdls_mgmt_frame_len = 0;
        }
#endif /* WLTDLS */
}

static s32 wl_notify_escan_complete(struct bcm_cfg80211 *cfg,
        struct net_device *ndev,
        bool aborted, bool fw_abort)
{
        s32 err = BCME_OK;
        unsigned long flags;
        struct net_device *dev;
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        WL_DBG(("Enter \n"));
        BCM_REFERENCE(dhdp);

        if (!ndev) {
                WL_ERR(("ndev is null\n"));
                err = BCME_ERROR;
                goto out;
        }

        if (cfg->escan_info.ndev != ndev) {
                WL_ERR(("Outstanding scan req ndev not matching (%p:%p)\n",
                        cfg->escan_info.ndev, ndev));
                err = BCME_ERROR;
                goto out;
        }

        if (cfg->scan_request) {
                dev = bcmcfg_to_prmry_ndev(cfg);
#if defined(WL_ENABLE_P2P_IF)
                if (cfg->scan_request->dev != cfg->p2p_net)
                        dev = cfg->scan_request->dev;
#elif defined(WL_CFG80211_P2P_DEV_IF)
                if (cfg->scan_request->wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
                        dev = cfg->scan_request->wdev->netdev;
#endif /* WL_ENABLE_P2P_IF */
        }
        else {
                WL_DBG(("cfg->scan_request is NULL. Internal scan scenario."
                        "doing scan_abort for ndev %p primary %p",
                        ndev, bcmcfg_to_prmry_ndev(cfg)));
                dev = ndev;
        }
        if (fw_abort && !in_atomic())
                wl_cfg80211_scan_abort(cfg);
        if (timer_pending(&cfg->scan_timeout))
                del_timer_sync(&cfg->scan_timeout);
        cfg->scan_enq_time = 0;
#if defined(ESCAN_RESULT_PATCH)
        if (likely(cfg->scan_request)) {
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 8, 0))
                if (aborted && p2p_scan(cfg) &&
                        (cfg->scan_request->flags & NL80211_SCAN_FLAG_FLUSH)) {
                        WL_ERR(("scan list is changed"));
                        cfg->bss_list = wl_escan_get_buf(cfg, !aborted);
                } else
#endif // endif
                        cfg->bss_list = wl_escan_get_buf(cfg, aborted);

                wl_inform_bss(cfg);
        }
#endif /* ESCAN_RESULT_PATCH */
        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
#ifdef WL_SCHED_SCAN
        if (cfg->sched_scan_req && !cfg->scan_request) {
                if (!aborted) {
                        WL_INFORM_MEM(("[%s] Report sched scan done.\n", dev->name));
                        cfg80211_sched_scan_results(cfg->sched_scan_req->wiphy);
                }

                DBG_EVENT_LOG(dhdp, WIFI_EVENT_DRIVER_PNO_SCAN_COMPLETE);
                cfg->sched_scan_running = FALSE;
        }
#endif /* WL_SCHED_SCAN */
        if (likely(cfg->scan_request)) {
                WL_INFORM_MEM(("[%s] Report scan done.\n", dev->name));
                wl_notify_scan_done(cfg, aborted);
                cfg->scan_request = NULL;
        }
        if (p2p_is_on(cfg))
                wl_clr_p2p_status(cfg, SCANNING);
        wl_clr_drv_status(cfg, SCANNING, dev);

        DHD_OS_SCAN_WAKE_UNLOCK((dhd_pub_t *)(cfg->pub));
        DHD_ENABLE_RUNTIME_PM((dhd_pub_t *)(cfg->pub));
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);

out:
        return err;
}

#ifdef ESCAN_BUF_OVERFLOW_MGMT
#ifndef WL_DRV_AVOID_SCANCACHE
static void
wl_cfg80211_find_removal_candidate(wl_bss_info_t *bss, removal_element_t *candidate)
{
        int idx;
        for (idx = 0; idx < BUF_OVERFLOW_MGMT_COUNT; idx++) {
                int len = BUF_OVERFLOW_MGMT_COUNT - idx - 1;
                if (bss->RSSI < candidate[idx].RSSI) {
                        if (len)
                                memcpy(&candidate[idx + 1], &candidate[idx],
                                        sizeof(removal_element_t) * len);
                        candidate[idx].RSSI = bss->RSSI;
                        candidate[idx].length = bss->length;
                        memcpy(&candidate[idx].BSSID, &bss->BSSID, ETHER_ADDR_LEN);
                        return;
                }
        }
}

static void
wl_cfg80211_remove_lowRSSI_info(wl_scan_results_t *list, removal_element_t *candidate,
        wl_bss_info_t *bi)
{
        int idx1, idx2;
        int total_delete_len = 0;
        for (idx1 = 0; idx1 < BUF_OVERFLOW_MGMT_COUNT; idx1++) {
                int cur_len = WL_SCAN_RESULTS_FIXED_SIZE;
                wl_bss_info_t *bss = NULL;
                if (candidate[idx1].RSSI >= bi->RSSI)
                        continue;
                for (idx2 = 0; idx2 < list->count; idx2++) {
                        bss = bss ? (wl_bss_info_t *)((uintptr)bss + dtoh32(bss->length)) :
                                list->bss_info;
                        if (!bcmp(&candidate[idx1].BSSID, &bss->BSSID, ETHER_ADDR_LEN) &&
                                candidate[idx1].RSSI == bss->RSSI &&
                                candidate[idx1].length == dtoh32(bss->length)) {
                                u32 delete_len = dtoh32(bss->length);
                                WL_DBG(("delete scan info of " MACDBG " to add new AP\n",
                                        MAC2STRDBG(bss->BSSID.octet)));
                                if (idx2 < list->count -1) {
                                        memmove((u8 *)bss, (u8 *)bss + delete_len,
                                                list->buflen - cur_len - delete_len);
                                }
                                list->buflen -= delete_len;
                                list->count--;
                                total_delete_len += delete_len;
                                /* if delete_len is greater than or equal to result length */
                                if (total_delete_len >= bi->length) {
                                        return;
                                }
                                break;
                        }
                        cur_len += dtoh32(bss->length);
                }
        }
}
#endif /* WL_DRV_AVOID_SCANCACHE */
#endif /* ESCAN_BUF_OVERFLOW_MGMT */

#ifdef WL_DRV_AVOID_SCANCACHE
static u32 wl_p2p_find_peer_channel(struct bcm_cfg80211 *cfg, s32 status, wl_bss_info_t *bi,
                u32 bi_length)
{
        u32 ret;
        u8 *p2p_dev_addr = NULL;

        ret = wl_get_drv_status_all(cfg, FINDING_COMMON_CHANNEL);
        if (!ret) {
                return ret;
        }
        if (status == WLC_E_STATUS_PARTIAL) {
                p2p_dev_addr = wl_cfgp2p_retreive_p2p_dev_addr(bi, bi_length);
                if (p2p_dev_addr && !memcmp(p2p_dev_addr,
                        cfg->afx_hdl->tx_dst_addr.octet, ETHER_ADDR_LEN)) {
                        s32 channel = wf_chspec_ctlchan(
                                wl_chspec_driver_to_host(bi->chanspec));

                        if ((channel > MAXCHANNEL) || (channel <= 0)) {
                                channel = WL_INVALID;
                        } else {
                                WL_ERR(("ACTION FRAME SCAN : Peer " MACDBG " found,"
                                        " channel : %d\n",
                                        MAC2STRDBG(cfg->afx_hdl->tx_dst_addr.octet),
                                        channel));
                        }
                        wl_clr_p2p_status(cfg, SCANNING);
                        cfg->afx_hdl->peer_chan = channel;
                        complete(&cfg->act_frm_scan);
                }
        } else {
                WL_INFORM_MEM(("ACTION FRAME SCAN DONE\n"));
                wl_clr_p2p_status(cfg, SCANNING);
                wl_clr_drv_status(cfg, SCANNING, cfg->afx_hdl->dev);
                if (cfg->afx_hdl->peer_chan == WL_INVALID)
                        complete(&cfg->act_frm_scan);
        }

        return ret;
}

static s32 wl_escan_without_scan_cache(struct bcm_cfg80211 *cfg, wl_escan_result_t *escan_result,
        struct net_device *ndev, const wl_event_msg_t *e, s32 status)
{
        s32 err = BCME_OK;
        wl_bss_info_t *bi;
        u32 bi_length;
        bool aborted = false;
        bool fw_abort = false;
        bool notify_escan_complete = false;

        if (wl_escan_check_sync_id(status, escan_result->sync_id,
                cfg->escan_info.cur_sync_id) < 0) {
                goto exit;
        }

        wl_escan_print_sync_id(status, escan_result->sync_id,
                        cfg->escan_info.cur_sync_id);

        if (!(status == WLC_E_STATUS_TIMEOUT) || !(status == WLC_E_STATUS_PARTIAL)) {
                cfg->escan_info.escan_state = WL_ESCAN_STATE_IDLE;
        }

        if ((likely(cfg->scan_request)) || (cfg->sched_scan_running)) {
                notify_escan_complete = true;
        }

        if (status == WLC_E_STATUS_PARTIAL) {
                WL_DBG(("WLC_E_STATUS_PARTIAL \n"));
                DBG_EVENT_LOG((dhd_pub_t *)cfg->pub, WIFI_EVENT_DRIVER_SCAN_RESULT_FOUND);
                if ((!escan_result) || (dtoh16(escan_result->bss_count) != 1)) {
                        WL_ERR(("Invalid escan result (NULL pointer) or invalid bss_count\n"));
                        goto exit;
                }

                bi = escan_result->bss_info;
                bi_length = dtoh32(bi->length);
                if ((!bi) ||
                (bi_length != (dtoh32(escan_result->buflen) - WL_ESCAN_RESULTS_FIXED_SIZE))) {
                        WL_ERR(("Invalid escan bss info (NULL pointer)"
                                "or invalid bss_info length\n"));
                        goto exit;
                }

                if (!(bcmcfg_to_wiphy(cfg)->interface_modes & BIT(NL80211_IFTYPE_ADHOC))) {
                        if (dtoh16(bi->capability) & DOT11_CAP_IBSS) {
                                WL_DBG(("Ignoring IBSS result\n"));
                                goto exit;
                        }
                }

                if (wl_p2p_find_peer_channel(cfg, status, bi, bi_length)) {
                        goto exit;
                } else {
                        if (scan_req_match(cfg)) {
                                /* p2p scan && allow only probe response */
                                if ((cfg->p2p->search_state != WL_P2P_DISC_ST_SCAN) &&
                                        (bi->flags & WL_BSS_FLAGS_FROM_BEACON))
                                        goto exit;
                        }
#ifdef ROAM_CHANNEL_CACHE
                        add_roam_cache(cfg, bi);
#endif /* ROAM_CHANNEL_CACHE */
                        err = wl_inform_single_bss(cfg, bi, false);
#ifdef ROAM_CHANNEL_CACHE
                        /* print_roam_cache(); */
                        update_roam_cache(cfg, ioctl_version);
#endif /* ROAM_CHANNEL_CACHE */

                        /*
                         * !Broadcast && number of ssid = 1 && number of channels =1
                         * means specific scan to association
                         */
                        if (wl_cfgp2p_is_p2p_specific_scan(cfg->scan_request)) {
                                WL_ERR(("P2P assoc scan fast aborted.\n"));
                                aborted = false;
                                fw_abort = true;
                        }
                        /* Directly exit from function here and
                        * avoid sending notify completion to cfg80211
                        */
                        goto exit;
                }
        } else if (status == WLC_E_STATUS_SUCCESS) {
                if (wl_p2p_find_peer_channel(cfg, status, NULL, 0)) {
                        goto exit;
                }
                WL_INFORM_MEM(("ESCAN COMPLETED\n"));
                DBG_EVENT_LOG((dhd_pub_t *)cfg->pub, WIFI_EVENT_DRIVER_SCAN_COMPLETE);

                /* Update escan complete status */
                aborted = false;
                fw_abort = false;

#ifdef CUSTOMER_HW4_DEBUG
                if (wl_scan_timeout_dbg_enabled)
                        wl_scan_timeout_dbg_clear();
#endif /* CUSTOMER_HW4_DEBUG */
        } else if ((status == WLC_E_STATUS_ABORT) || (status == WLC_E_STATUS_NEWSCAN) ||
#ifdef BCMCCX
                (status == WLC_E_STATUS_CCXFASTRM) ||
#endif /* BCMCCX */
                (status == WLC_E_STATUS_11HQUIET) || (status == WLC_E_STATUS_CS_ABORT) ||
                (status == WLC_E_STATUS_NEWASSOC)) {
                /* Handle all cases of scan abort */

                WL_DBG(("ESCAN ABORT reason: %d\n", status));
                if (wl_p2p_find_peer_channel(cfg, status, NULL, 0)) {
                        goto exit;
                }
                WL_INFORM_MEM(("ESCAN ABORTED\n"));

                /* Update escan complete status */
                aborted = true;
                fw_abort = false;

        } else if (status == WLC_E_STATUS_TIMEOUT) {
                WL_ERR(("WLC_E_STATUS_TIMEOUT : scan_request[%p]\n", cfg->scan_request));
                WL_ERR(("reason[0x%x]\n", e->reason));
                if (e->reason == 0xFFFFFFFF) {
                        /* Update escan complete status */
                        aborted = true;
                        fw_abort = true;
                }
        } else {
                WL_ERR(("unexpected Escan Event %d : abort\n", status));

                if (wl_p2p_find_peer_channel(cfg, status, NULL, 0)) {
                        goto exit;
                }
                /* Update escan complete status */
                aborted = true;
                fw_abort = false;
        }

        /* Notify escan complete status */
        if (notify_escan_complete) {
                wl_notify_escan_complete(cfg, ndev, aborted, fw_abort);
        }

exit:
        return err;

}
#endif /* WL_DRV_AVOID_SCANCACHE */

#ifdef WL_BCNRECV
/* Beacon recv results handler sending to upper layer */
static s32
wl_bcnrecv_result_handler(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
                wl_bss_info_v109_2_t *bi, uint32 scan_status)
{
        s32 err = BCME_OK;
        struct wiphy *wiphy = NULL;
        wl_bcnrecv_result_t *bcn_recv = NULL;
        struct timespec ts;
        if (!bi) {
                WL_ERR(("%s: bi is NULL\n", __func__));
                err = BCME_NORESOURCE;
                goto exit;
        }
        if ((bi->length - bi->ie_length) < sizeof(wl_bss_info_v109_2_t)) {
                WL_ERR(("bi info version doesn't support bcn_recv attributes\n"));
                goto exit;
        }

        if (scan_status == WLC_E_STATUS_RXBCN) {
                wiphy = cfg->wdev->wiphy;
                if (!wiphy) {
                         WL_ERR(("wiphy is NULL\n"));
                         err = BCME_NORESOURCE;
                         goto exit;
                }
                bcn_recv = (wl_bcnrecv_result_t *)MALLOCZ(cfg->osh, sizeof(*bcn_recv));
                if (unlikely(!bcn_recv)) {
                        WL_ERR(("Failed to allocate memory\n"));
                        return -ENOMEM;
                }
                memcpy((char *)bcn_recv->SSID, (char *)bi->SSID, DOT11_MAX_SSID_LEN);
                memcpy(&bcn_recv->BSSID, &bi->BSSID, ETH_ALEN);
                bcn_recv->channel = wf_chspec_ctlchan(
                        wl_chspec_driver_to_host(bi->chanspec));
                bcn_recv->beacon_interval = bi->beacon_period;

                /* kernal timestamp */
                get_monotonic_boottime(&ts);
                bcn_recv->system_time = ((u64)ts.tv_sec*1000000)
                                + ts.tv_nsec / 1000;
                bcn_recv->timestamp[0] = bi->timestamp[0];
                bcn_recv->timestamp[1] = bi->timestamp[1];
                if (bcn_recv) {
                        if ((err = wl_android_bcnrecv_event(cfgdev_to_wlc_ndev(cfgdev, cfg),
                                BCNRECV_ATTR_BCNINFO, 0, 0, (uint8 *)bcn_recv, sizeof(*bcn_recv)))
                                                != BCME_OK) {
                                WL_ERR(("failed to send bcnrecv event, error:%d\n", err));
                        }
                }
        } else {
                WL_DBG(("Ignoring Escan Event:%d \n", scan_status));
        }
exit:
        if (bcn_recv) {
                MFREE(cfg->osh, bcn_recv, sizeof(*bcn_recv));
        }
        return err;
}
#endif /* WL_BCNRECV */

static s32 wl_escan_handler(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data)
{
        s32 err = BCME_OK;
        s32 status = ntoh32(e->status);
        wl_escan_result_t *escan_result;
        struct net_device *ndev = NULL;
#ifndef WL_DRV_AVOID_SCANCACHE
        wl_bss_info_t *bi;
        u32 bi_length;
        const wifi_p2p_ie_t * p2p_ie;
        const u8 *p2p_dev_addr = NULL;
        wl_scan_results_t *list;
        wl_bss_info_t *bss = NULL;
        u32 i;
#endif /* WL_DRV_AVOID_SCANCACHE */

        WL_DBG((" enter event type : %d, status : %d \n",
                ntoh32(e->event_type), ntoh32(e->status)));

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);

        mutex_lock(&cfg->scan_sync);
        /* P2P SCAN is coming from primary interface */
        if (wl_get_p2p_status(cfg, SCANNING)) {
                if (wl_get_drv_status_all(cfg, SENDING_ACT_FRM))
                        ndev = cfg->afx_hdl->dev;
                else
                        ndev = cfg->escan_info.ndev;
        }
        escan_result = (wl_escan_result_t *)data;
#ifdef WL_BCNRECV
        if (cfg->bcnrecv_info.bcnrecv_state == BEACON_RECV_STARTED &&
                status == WLC_E_STATUS_RXBCN) {
                /* handle beacon recv scan results */
                wl_bss_info_v109_2_t *bi_info;
                bi_info = (wl_bss_info_v109_2_t *)escan_result->bss_info;
                err = wl_bcnrecv_result_handler(cfg, cfgdev, bi_info, status);
                goto exit;
        }
#endif /* WL_BCNRECV */
        if (!ndev || (!wl_get_drv_status(cfg, SCANNING, ndev) && !cfg->sched_scan_running)) {
                WL_ERR_RLMT(("escan is not ready. drv_scan_status 0x%x"
                " e_type %d e_states %d\n",
                wl_get_drv_status(cfg, SCANNING, ndev),
                ntoh32(e->event_type), ntoh32(e->status)));
                goto exit;
        }

#ifndef WL_DRV_AVOID_SCANCACHE
        if (status == WLC_E_STATUS_PARTIAL) {
                WL_DBG(("WLC_E_STATUS_PARTIAL \n"));
                DBG_EVENT_LOG((dhd_pub_t *)cfg->pub, WIFI_EVENT_DRIVER_SCAN_RESULT_FOUND);
                if (!escan_result) {
                        WL_ERR(("Invalid escan result (NULL pointer)\n"));
                        goto exit;
                }
                if ((dtoh32(escan_result->buflen) > (int)ESCAN_BUF_SIZE) ||
                    (dtoh32(escan_result->buflen) < sizeof(wl_escan_result_t))) {
                        WL_ERR(("Invalid escan buffer len:%d\n", dtoh32(escan_result->buflen)));
                        goto exit;
                }
                if (dtoh16(escan_result->bss_count) != 1) {
                        WL_ERR(("Invalid bss_count %d: ignoring\n", escan_result->bss_count));
                        goto exit;
                }
                bi = escan_result->bss_info;
                if (!bi) {
                        WL_ERR(("Invalid escan bss info (NULL pointer)\n"));
                        goto exit;
                }
                bi_length = dtoh32(bi->length);
                if (bi_length != (dtoh32(escan_result->buflen) - WL_ESCAN_RESULTS_FIXED_SIZE)) {
                        WL_ERR(("Invalid bss_info length %d: ignoring\n", bi_length));
                        goto exit;
                }
                if (wl_escan_check_sync_id(status, escan_result->sync_id,
                        cfg->escan_info.cur_sync_id) < 0)
                        goto exit;

                if (!(bcmcfg_to_wiphy(cfg)->interface_modes & BIT(NL80211_IFTYPE_ADHOC))) {
                        if (dtoh16(bi->capability) & DOT11_CAP_IBSS) {
                                WL_DBG(("Ignoring IBSS result\n"));
                                goto exit;
                        }
                }

                if (wl_get_drv_status_all(cfg, FINDING_COMMON_CHANNEL)) {
                        p2p_dev_addr = wl_cfgp2p_retreive_p2p_dev_addr(bi, bi_length);
                        if (p2p_dev_addr && !memcmp(p2p_dev_addr,
                                cfg->afx_hdl->tx_dst_addr.octet, ETHER_ADDR_LEN)) {
                                s32 channel = wf_chspec_ctlchan(
                                        wl_chspec_driver_to_host(bi->chanspec));

                                if ((channel > MAXCHANNEL) || (channel <= 0))
                                        channel = WL_INVALID;
                                else
                                        WL_ERR(("ACTION FRAME SCAN : Peer " MACDBG " found,"
                                                " channel : %d\n",
                                                MAC2STRDBG(cfg->afx_hdl->tx_dst_addr.octet),
                                                channel));

                                wl_clr_p2p_status(cfg, SCANNING);
                                cfg->afx_hdl->peer_chan = channel;
                                complete(&cfg->act_frm_scan);
                                goto exit;
                        }

                } else {
                        int cur_len = WL_SCAN_RESULTS_FIXED_SIZE;
#ifdef ESCAN_BUF_OVERFLOW_MGMT
                        removal_element_t candidate[BUF_OVERFLOW_MGMT_COUNT];
                        int remove_lower_rssi = FALSE;

                        bzero(candidate, sizeof(removal_element_t)*BUF_OVERFLOW_MGMT_COUNT);
#endif /* ESCAN_BUF_OVERFLOW_MGMT */

                        list = wl_escan_get_buf(cfg, FALSE);
                        if (scan_req_match(cfg)) {
#ifdef WL_HOST_BAND_MGMT
                                s32 channel_band = 0;
                                chanspec_t chspec;
#endif /* WL_HOST_BAND_MGMT */
                                /* p2p scan && allow only probe response */
                                if ((cfg->p2p->search_state != WL_P2P_DISC_ST_SCAN) &&
                                        (bi->flags & WL_BSS_FLAGS_FROM_BEACON))
                                        goto exit;
                                if ((p2p_ie = wl_cfgp2p_find_p2pie(((u8 *) bi) + bi->ie_offset,
                                        bi->ie_length)) == NULL) {
                                                WL_ERR(("Couldn't find P2PIE in probe"
                                                        " response/beacon\n"));
                                                goto exit;
                                }
#ifdef WL_HOST_BAND_MGMT
                                chspec = wl_chspec_driver_to_host(bi->chanspec);
                                channel_band = CHSPEC2WLC_BAND(chspec);

                                if ((cfg->curr_band == WLC_BAND_5G) &&
                                        (channel_band == WLC_BAND_2G)) {
                                        /* Avoid sending the GO results in band conflict */
                                        if (wl_cfgp2p_retreive_p2pattrib(p2p_ie,
                                                P2P_SEID_GROUP_ID) != NULL)
                                                goto exit;
                                }
#endif /* WL_HOST_BAND_MGMT */
                        }
#ifdef ESCAN_BUF_OVERFLOW_MGMT
                        if (bi_length > ESCAN_BUF_SIZE - list->buflen)
                                remove_lower_rssi = TRUE;
#endif /* ESCAN_BUF_OVERFLOW_MGMT */

                        for (i = 0; i < list->count; i++) {
                                bss = bss ? (wl_bss_info_t *)((uintptr)bss + dtoh32(bss->length))
                                        : list->bss_info;
                                if (!bss) {
                                        WL_ERR(("bss is NULL\n"));
                                        goto exit;
                                }
#ifdef ESCAN_BUF_OVERFLOW_MGMT
                                WL_TRACE(("%s("MACDBG"), i=%d bss: RSSI %d list->count %d\n",
                                        bss->SSID, MAC2STRDBG(bss->BSSID.octet),
                                        i, bss->RSSI, list->count));

                                if (remove_lower_rssi)
                                        wl_cfg80211_find_removal_candidate(bss, candidate);
#endif /* ESCAN_BUF_OVERFLOW_MGMT */

                                if (!bcmp(&bi->BSSID, &bss->BSSID, ETHER_ADDR_LEN) &&
                                        (CHSPEC_BAND(wl_chspec_driver_to_host(bi->chanspec))
                                        == CHSPEC_BAND(wl_chspec_driver_to_host(bss->chanspec))) &&
                                        bi->SSID_len == bss->SSID_len &&
                                        !bcmp(bi->SSID, bss->SSID, bi->SSID_len)) {

                                        /* do not allow beacon data to update
                                        *the data recd from a probe response
                                        */
                                        if (!(bss->flags & WL_BSS_FLAGS_FROM_BEACON) &&
                                                (bi->flags & WL_BSS_FLAGS_FROM_BEACON))
                                                goto exit;

                                        WL_DBG(("%s("MACDBG"), i=%d prev: RSSI %d"
                                                " flags 0x%x, new: RSSI %d flags 0x%x\n",
                                                bss->SSID, MAC2STRDBG(bi->BSSID.octet), i,
                                                bss->RSSI, bss->flags, bi->RSSI, bi->flags));

                                        if ((bss->flags & WL_BSS_FLAGS_RSSI_ONCHANNEL) ==
                                                (bi->flags & WL_BSS_FLAGS_RSSI_ONCHANNEL)) {
                                                /* preserve max RSSI if the measurements are
                                                * both on-channel or both off-channel
                                                */
                                                WL_SCAN(("%s("MACDBG"), same onchan"
                                                ", RSSI: prev %d new %d\n",
                                                bss->SSID, MAC2STRDBG(bi->BSSID.octet),
                                                bss->RSSI, bi->RSSI));
                                                bi->RSSI = MAX(bss->RSSI, bi->RSSI);
                                        } else if ((bss->flags & WL_BSS_FLAGS_RSSI_ONCHANNEL) &&
                                                (bi->flags & WL_BSS_FLAGS_RSSI_ONCHANNEL) == 0) {
                                                /* preserve the on-channel rssi measurement
                                                * if the new measurement is off channel
                                                */
                                                WL_SCAN(("%s("MACDBG"), prev onchan"
                                                ", RSSI: prev %d new %d\n",
                                                bss->SSID, MAC2STRDBG(bi->BSSID.octet),
                                                bss->RSSI, bi->RSSI));
                                                bi->RSSI = bss->RSSI;
                                                bi->flags |= WL_BSS_FLAGS_RSSI_ONCHANNEL;
                                        }
                                        if (dtoh32(bss->length) != bi_length) {
                                                u32 prev_len = dtoh32(bss->length);

                                                WL_SCAN(("bss info replacement"
                                                        " is occured(bcast:%d->probresp%d)\n",
                                                        bss->ie_length, bi->ie_length));
                                                WL_DBG(("%s("MACDBG"), replacement!(%d -> %d)\n",
                                                bss->SSID, MAC2STRDBG(bi->BSSID.octet),
                                                prev_len, bi_length));

                                                if (list->buflen - prev_len + bi_length
                                                        > ESCAN_BUF_SIZE) {
                                                        WL_ERR(("Buffer is too small: keep the"
                                                                " previous result of this AP\n"));
                                                        /* Only update RSSI */
                                                        bss->RSSI = bi->RSSI;
                                                        bss->flags |= (bi->flags
                                                                & WL_BSS_FLAGS_RSSI_ONCHANNEL);
                                                        goto exit;
                                                }

                                                if (i < list->count - 1) {
                                                        /* memory copy required by this case only */
                                                        memmove((u8 *)bss + bi_length,
                                                                (u8 *)bss + prev_len,
                                                                list->buflen - cur_len - prev_len);
                                                }
                                                list->buflen -= prev_len;
                                                list->buflen += bi_length;
                                        }
                                        list->version = dtoh32(bi->version);
                                        memcpy((u8 *)bss, (u8 *)bi, bi_length);
                                        goto exit;
                                }
                                cur_len += dtoh32(bss->length);
                        }
                        if (bi_length > ESCAN_BUF_SIZE - list->buflen) {
#ifdef ESCAN_BUF_OVERFLOW_MGMT
                                wl_cfg80211_remove_lowRSSI_info(list, candidate, bi);
                                if (bi_length > ESCAN_BUF_SIZE - list->buflen) {
                                        WL_DBG(("RSSI(" MACDBG ") is too low(%d) to add Buffer\n",
                                                MAC2STRDBG(bi->BSSID.octet), bi->RSSI));
                                        goto exit;
                                }
#else
                                WL_ERR(("Buffer is too small: ignoring\n"));
                                goto exit;
#endif /* ESCAN_BUF_OVERFLOW_MGMT */
                        }

                        memcpy(&(((char *)list)[list->buflen]), bi, bi_length);
                        list->version = dtoh32(bi->version);
                        list->buflen += bi_length;
                        list->count++;

                        /*
                         * !Broadcast && number of ssid = 1 && number of channels =1
                         * means specific scan to association
                         */
                        if (wl_cfgp2p_is_p2p_specific_scan(cfg->scan_request)) {
                                WL_ERR(("P2P assoc scan fast aborted.\n"));
                                wl_notify_escan_complete(cfg, cfg->escan_info.ndev, false, true);
                                goto exit;
                        }
                }
        }
        else if (status == WLC_E_STATUS_SUCCESS) {
                cfg->escan_info.escan_state = WL_ESCAN_STATE_IDLE;
                wl_escan_print_sync_id(status, cfg->escan_info.cur_sync_id,
                        escan_result->sync_id);

                if (wl_get_drv_status_all(cfg, FINDING_COMMON_CHANNEL)) {
                        WL_DBG(("ACTION FRAME SCAN DONE\n"));
                        wl_clr_p2p_status(cfg, SCANNING);
                        wl_clr_drv_status(cfg, SCANNING, cfg->afx_hdl->dev);
                        if (cfg->afx_hdl->peer_chan == WL_INVALID)
                                complete(&cfg->act_frm_scan);
                } else if ((likely(cfg->scan_request)) || (cfg->sched_scan_running)) {
                        WL_INFORM_MEM(("ESCAN COMPLETED\n"));
                        DBG_EVENT_LOG((dhd_pub_t *)cfg->pub, WIFI_EVENT_DRIVER_SCAN_COMPLETE);
                        cfg->bss_list = wl_escan_get_buf(cfg, FALSE);
                        if (!scan_req_match(cfg)) {
                                WL_TRACE_HW4(("SCAN COMPLETED: scanned AP count=%d\n",
                                        cfg->bss_list->count));
                        }
#if defined(SUPPORT_RANDOM_MAC_SCAN) && defined(DHD_RANDOM_MAC_SCAN)
                        wl_cfg80211_random_mac_disable(ndev);
#endif /* SUPPORT_RANDOM_MAC_SCAN && DHD_RANDOM_MAC_SCAN */
                        wl_inform_bss(cfg);
                        wl_notify_escan_complete(cfg, ndev, false, false);
                }
                wl_escan_increment_sync_id(cfg, SCAN_BUF_NEXT);
#ifdef CUSTOMER_HW4_DEBUG
                if (wl_scan_timeout_dbg_enabled)
                        wl_scan_timeout_dbg_clear();
#endif /* CUSTOMER_HW4_DEBUG */
        } else if ((status == WLC_E_STATUS_ABORT) || (status == WLC_E_STATUS_NEWSCAN) ||
#ifdef BCMCCX
                (status == WLC_E_STATUS_CCXFASTRM) ||
#endif /* BCMCCX */
                (status == WLC_E_STATUS_11HQUIET) || (status == WLC_E_STATUS_CS_ABORT) ||
                (status == WLC_E_STATUS_NEWASSOC)) {
                /* Dump FW preserve buffer content */
                if (status == WLC_E_STATUS_ABORT) {
                        wl_flush_fw_log_buffer(ndev, FW_LOGSET_MASK_ALL);
                }
                /* Handle all cases of scan abort */
                cfg->escan_info.escan_state = WL_ESCAN_STATE_IDLE;
                wl_escan_print_sync_id(status, escan_result->sync_id,
                        cfg->escan_info.cur_sync_id);
                WL_DBG(("ESCAN ABORT reason: %d\n", status));
                if (wl_get_drv_status_all(cfg, FINDING_COMMON_CHANNEL)) {
                        WL_DBG(("ACTION FRAME SCAN DONE\n"));
                        wl_clr_drv_status(cfg, SCANNING, cfg->afx_hdl->dev);
                        wl_clr_p2p_status(cfg, SCANNING);
                        if (cfg->afx_hdl->peer_chan == WL_INVALID)
                                complete(&cfg->act_frm_scan);
                } else if ((likely(cfg->scan_request)) || (cfg->sched_scan_running)) {
                        WL_INFORM_MEM(("ESCAN ABORTED\n"));

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 8, 0))
                        if (p2p_scan(cfg) && cfg->scan_request &&
                                (cfg->scan_request->flags & NL80211_SCAN_FLAG_FLUSH)) {
                                WL_ERR(("scan list is changed"));
                                cfg->bss_list = wl_escan_get_buf(cfg, FALSE);
                        } else
#endif // endif
                                cfg->bss_list = wl_escan_get_buf(cfg, TRUE);

                        if (!scan_req_match(cfg)) {
                                WL_TRACE_HW4(("SCAN ABORTED: scanned AP count=%d\n",
                                        cfg->bss_list->count));
                        }
#ifdef DUAL_ESCAN_RESULT_BUFFER
                        if (escan_result->sync_id != cfg->escan_info.cur_sync_id) {
                                /* If sync_id is not matching, then the abort might have
                                 * come for the old scan req or for the in-driver initiated
                                 * scan. So do abort for scan_req for which sync_id is
                                 * matching.
                                 */
                                WL_INFORM_MEM(("sync_id mismatch (%d != %d). "
                                        "Ignore the scan abort event.\n",
                                        escan_result->sync_id, cfg->escan_info.cur_sync_id));
                                goto exit;
                        } else {
                                /* sync id is matching, abort the scan */
                                WL_INFORM_MEM(("scan aborted for sync_id: %d \n",
                                        cfg->escan_info.cur_sync_id));
                                wl_inform_bss(cfg);
                                wl_notify_escan_complete(cfg, ndev, true, false);
                        }
#else
                        wl_inform_bss(cfg);
                        wl_notify_escan_complete(cfg, ndev, true, false);
#endif /* DUAL_ESCAN_RESULT_BUFFER */
                } else {
                        /* If there is no pending host initiated scan, do nothing */
                        WL_DBG(("ESCAN ABORT: No pending scans. Ignoring event.\n"));
                }
                wl_escan_increment_sync_id(cfg, SCAN_BUF_CNT);
        } else if (status == WLC_E_STATUS_TIMEOUT) {
                WL_ERR(("WLC_E_STATUS_TIMEOUT : scan_request[%p]\n", cfg->scan_request));
                WL_ERR(("reason[0x%x]\n", e->reason));
                if (e->reason == 0xFFFFFFFF) {
                        wl_notify_escan_complete(cfg, cfg->escan_info.ndev, true, true);
                }
        } else {
                WL_ERR(("unexpected Escan Event %d : abort\n", status));
                cfg->escan_info.escan_state = WL_ESCAN_STATE_IDLE;
                wl_escan_print_sync_id(status, escan_result->sync_id,
                        cfg->escan_info.cur_sync_id);
                if (wl_get_drv_status_all(cfg, FINDING_COMMON_CHANNEL)) {
                        WL_DBG(("ACTION FRAME SCAN DONE\n"));
                        wl_clr_p2p_status(cfg, SCANNING);
                        wl_clr_drv_status(cfg, SCANNING, cfg->afx_hdl->dev);
                        if (cfg->afx_hdl->peer_chan == WL_INVALID)
                                complete(&cfg->act_frm_scan);
                } else if ((likely(cfg->scan_request)) || (cfg->sched_scan_running)) {
                        cfg->bss_list = wl_escan_get_buf(cfg, TRUE);
                        if (!scan_req_match(cfg)) {
                                WL_TRACE_HW4(("SCAN ABORTED(UNEXPECTED): "
                                        "scanned AP count=%d\n",
                                        cfg->bss_list->count));
                        }
                        wl_inform_bss(cfg);
                        wl_notify_escan_complete(cfg, ndev, true, false);
                }
                wl_escan_increment_sync_id(cfg, 2);
        }
#else /* WL_DRV_AVOID_SCANCACHE */
        err = wl_escan_without_scan_cache(cfg, escan_result, ndev, e, status);
#endif /* WL_DRV_AVOID_SCANCACHE */
exit:
        mutex_unlock(&cfg->scan_sync);
        return err;
}

static void wl_cfg80211_concurrent_roam(struct bcm_cfg80211 *cfg, int enable)
{
        u32 connected_cnt  = wl_get_drv_status_all(cfg, CONNECTED);
        bool p2p_connected  = wl_cfgp2p_vif_created(cfg);
        struct net_info *iter, *next;

        if (!(cfg->roam_flags & WL_ROAM_OFF_ON_CONCURRENT))
                return;

        WL_DBG(("roam off:%d p2p_connected:%d connected_cnt:%d \n",
                enable, p2p_connected, connected_cnt));
        /* Disable FW roam when we have a concurrent P2P connection */
        if (enable && p2p_connected && connected_cnt > 1) {

                /* Mark it as to be reverted */
                cfg->roam_flags |= WL_ROAM_REVERT_STATUS;
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
                for_each_ndev(cfg, iter, next) {
                        if (iter->ndev && iter->wdev &&
                                        iter->wdev->iftype == NL80211_IFTYPE_STATION) {
                                if (wldev_iovar_setint(iter->ndev, "roam_off", TRUE)
                                                == BCME_OK) {
                                        iter->roam_off = TRUE;
                                }
                                else {
                                        WL_ERR(("error to enable roam_off\n"));
                                }
                        }
                }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif
        }
        else if (!enable && (cfg->roam_flags & WL_ROAM_REVERT_STATUS)) {
                cfg->roam_flags &= ~WL_ROAM_REVERT_STATUS;
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
                for_each_ndev(cfg, iter, next) {
                        if (iter->ndev && iter->wdev &&
                                        iter->wdev->iftype == NL80211_IFTYPE_STATION) {
                                if (iter->roam_off != WL_INVALID) {
                                        if (wldev_iovar_setint(iter->ndev, "roam_off", FALSE)
                                                        == BCME_OK) {
                                                iter->roam_off = FALSE;
                                        }
                                        else {
                                                WL_ERR(("error to disable roam_off\n"));
                                        }
                                }
                        }
                }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif
        }

        return;
}

static void wl_cfg80211_determine_vsdb_mode(struct bcm_cfg80211 *cfg)
{
        struct net_info *iter, *next;
        u32 ctl_chan = 0;
        u32 chanspec = 0;
        u32 pre_ctl_chan = 0;
        u32 connected_cnt  = wl_get_drv_status_all(cfg, CONNECTED);
        cfg->vsdb_mode = false;

        if (connected_cnt <= 1)  {
                return;
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
        for_each_ndev(cfg, iter, next) {
                /* p2p discovery iface ndev could be null */
                if (iter->ndev) {
                        chanspec = 0;
                        ctl_chan = 0;
                        if (wl_get_drv_status(cfg, CONNECTED, iter->ndev)) {
                                if (wldev_iovar_getint(iter->ndev, "chanspec",
                                        (s32 *)&chanspec) == BCME_OK) {
                                        chanspec = wl_chspec_driver_to_host(chanspec);
                                        ctl_chan = wf_chspec_ctlchan(chanspec);
                                        wl_update_prof(cfg, iter->ndev, NULL,
                                                &ctl_chan, WL_PROF_CHAN);
                                }
                                if (!cfg->vsdb_mode) {
                                        if (!pre_ctl_chan && ctl_chan)
                                                pre_ctl_chan = ctl_chan;
                                        else if (pre_ctl_chan && (pre_ctl_chan != ctl_chan)) {
                                                cfg->vsdb_mode = true;
                                        }
                                }
                        }
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif
        WL_ERR(("%s concurrency is enabled\n", cfg->vsdb_mode ? "Multi Channel" : "Same Channel"));
        return;
}

int
wl_cfg80211_determine_p2p_rsdb_mode(struct bcm_cfg80211 *cfg)
{
        struct net_info *iter, *next;
        u32 chanspec = 0;
        u32 band = 0;
        u32 pre_band = 0;
        bool is_rsdb_supported = FALSE;
        bool rsdb_mode = FALSE;

        is_rsdb_supported = DHD_OPMODE_SUPPORTED(cfg->pub, DHD_FLAG_RSDB_MODE);

        if (!is_rsdb_supported) {
                return 0;
        }

#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
        for_each_ndev(cfg, iter, next) {
                /* p2p discovery iface ndev could be null */
                if (iter->ndev) {
                        chanspec = 0;
                        band = 0;
                        if (wl_get_drv_status(cfg, CONNECTED, iter->ndev)) {
                                if (wldev_iovar_getint(iter->ndev, "chanspec",
                                        (s32 *)&chanspec) == BCME_OK) {
                                        chanspec = wl_chspec_driver_to_host(chanspec);
                                        band = CHSPEC_BAND(chanspec);
                                }

                                if (!pre_band && band) {
                                        pre_band = band;
                                } else if (pre_band && (pre_band != band)) {
                                        rsdb_mode = TRUE;
                                }
                        }
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif
        WL_DBG(("RSDB mode is %s\n", rsdb_mode ? "enabled" : "disabled"));

        return rsdb_mode;
}

static s32 wl_notifier_change_state(struct bcm_cfg80211 *cfg, struct net_info *_net_info,
        enum wl_status state, bool set)
{
        s32 pm = PM_FAST;
        s32 err = BCME_OK;
        u32 mode;
        u32 chan = 0;
        struct net_device *primary_dev = bcmcfg_to_prmry_ndev(cfg);
        dhd_pub_t *dhd = cfg->pub;
#ifdef RTT_SUPPORT
        rtt_status_info_t *rtt_status;
#endif /* RTT_SUPPORT */
        if (dhd->busstate == DHD_BUS_DOWN) {
                WL_ERR(("%s : busstate is DHD_BUS_DOWN!\n", __FUNCTION__));
                return 0;
        }
        WL_DBG(("Enter state %d set %d _net_info->pm_restore %d iface %s\n",
                state, set, _net_info->pm_restore, _net_info->ndev->name));

        if (state != WL_STATUS_CONNECTED)
                return 0;
        mode = wl_get_mode_by_netdev(cfg, _net_info->ndev);
        if (set) {
                wl_cfg80211_concurrent_roam(cfg, 1);
                wl_cfg80211_determine_vsdb_mode(cfg);
                if (mode == WL_MODE_AP) {
                        if (wl_add_remove_eventmsg(primary_dev, WLC_E_P2P_PROBREQ_MSG, false))
                                WL_ERR((" failed to unset WLC_E_P2P_PROPREQ_MSG\n"));
                }
                pm = PM_OFF;
                if ((err = wldev_ioctl_set(_net_info->ndev, WLC_SET_PM, &pm,
                                sizeof(pm))) != 0) {
                        if (err == -ENODEV)
                                WL_DBG(("%s:netdev not ready\n",
                                        _net_info->ndev->name));
                        else
                                WL_ERR(("%s:error (%d)\n",
                                        _net_info->ndev->name, err));

                        wl_cfg80211_update_power_mode(_net_info->ndev);
                }
                wl_add_remove_pm_enable_work(cfg, WL_PM_WORKQ_SHORT);
#if defined(WLTDLS)
                if (wl_cfg80211_is_concurrent_mode(primary_dev)) {
                        err = wldev_iovar_setint(primary_dev, "tdls_enable", 0);
                }
#endif /* defined(WLTDLS) */

#ifdef DISABLE_FRAMEBURST_VSDB
                if (!DHD_OPMODE_SUPPORTED(cfg->pub, DHD_FLAG_HOSTAP_MODE) &&
                        wl_cfg80211_is_concurrent_mode(primary_dev) &&
                        !wl_cfg80211_determine_p2p_rsdb_mode(cfg)) {
                        wl_cfg80211_set_frameburst(cfg, FALSE);
                }
#endif /* DISABLE_FRAMEBURST_VSDB */
#ifdef DISABLE_WL_FRAMEBURST_SOFTAP
                if (DHD_OPMODE_STA_SOFTAP_CONCURR(dhd) &&
                        wl_get_drv_status(cfg, CONNECTED, bcmcfg_to_prmry_ndev(cfg))) {
                        /* Enable frameburst for
                         * STA/SoftAP concurrent mode
                         */
                        wl_cfg80211_set_frameburst(cfg, TRUE);
                }
#endif /* DISABLE_WL_FRAMEBURST_SOFTAP */
        } else { /* clear */
                chan = 0;
                /* clear chan information when the net device is disconnected */
                wl_update_prof(cfg, _net_info->ndev, NULL, &chan, WL_PROF_CHAN);
                wl_cfg80211_determine_vsdb_mode(cfg);
                if (primary_dev == _net_info->ndev) {
                        pm = PM_FAST;
#ifdef RTT_SUPPORT
                        rtt_status = GET_RTTSTATE(dhd);
                        if (rtt_status->status != RTT_ENABLED)
#endif /* RTT_SUPPORT */
                                if ((err = wldev_ioctl_set(_net_info->ndev, WLC_SET_PM, &pm,
                                                sizeof(pm))) != 0) {
                                        if (err == -ENODEV)
                                                WL_DBG(("%s:netdev not ready\n",
                                                        _net_info->ndev->name));
                                        else
                                                WL_ERR(("%s:error (%d)\n",
                                                        _net_info->ndev->name, err));

                                        wl_cfg80211_update_power_mode(_net_info->ndev);
                                }
                }
                wl_cfg80211_concurrent_roam(cfg, 0);
#if defined(WLTDLS)
                if (!wl_cfg80211_is_concurrent_mode(primary_dev)) {
                        err = wldev_iovar_setint(primary_dev, "tdls_enable", 1);
                }
#endif /* defined(WLTDLS) */

#if defined(DISABLE_FRAMEBURST_VSDB)
                if (!DHD_OPMODE_SUPPORTED(cfg->pub, DHD_FLAG_HOSTAP_MODE)) {
                        wl_cfg80211_set_frameburst(cfg, TRUE);
                }
#endif /* DISABLE_FRAMEBURST_VSDB */
#ifdef DISABLE_WL_FRAMEBURST_SOFTAP
                if (DHD_OPMODE_STA_SOFTAP_CONCURR(dhd) &&
                        (cfg->ap_oper_channel <= CH_MAX_2G_CHANNEL)) {
                        /* Disable frameburst for stand-alone 2GHz SoftAP */
                        wl_cfg80211_set_frameburst(cfg, FALSE);
                }
#endif /* DISABLE_WL_FRAMEBURST_SOFTAP */
        }
        return err;
}
static s32 wl_init_scan(struct bcm_cfg80211 *cfg)
{
        int err = 0;

        cfg->evt_handler[WLC_E_ESCAN_RESULT] = wl_escan_handler;
        cfg->escan_info.escan_state = WL_ESCAN_STATE_IDLE;
        wl_escan_init_sync_id(cfg);

        /* Init scan_timeout timer */
        init_timer(&cfg->scan_timeout);
        cfg->scan_timeout.data = (unsigned long) cfg;
        cfg->scan_timeout.function = wl_scan_timeout;

        return err;
}

#ifdef DHD_LOSSLESS_ROAMING
static s32 wl_init_roam_timeout(struct bcm_cfg80211 *cfg)
{
        int err = 0;

        /* Init roam timer */
        init_timer(&cfg->roam_timeout);
        cfg->roam_timeout.data = (unsigned long) cfg;
        cfg->roam_timeout.function = wl_roam_timeout;

        return err;
}
#endif /* DHD_LOSSLESS_ROAMING */

static s32 wl_init_priv(struct bcm_cfg80211 *cfg)
{
        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
        s32 err = 0;

        cfg->scan_request = NULL;
        cfg->pwr_save = !!(wiphy->flags & WIPHY_FLAG_PS_ON_BY_DEFAULT);
#ifdef DISABLE_BUILTIN_ROAM
        cfg->roam_on = false;
#else
        cfg->roam_on = true;
#endif /* DISABLE_BUILTIN_ROAM */
        cfg->active_scan = true;
        cfg->rf_blocked = false;
        cfg->vsdb_mode = false;
#if defined(BCMSDIO)
        cfg->wlfc_on = false;
#endif /* defined(BCMSDIO) */
        cfg->roam_flags |= WL_ROAM_OFF_ON_CONCURRENT;
        cfg->disable_roam_event = false;
        /* register interested state */
        set_bit(WL_STATUS_CONNECTED, &cfg->interrested_state);
        spin_lock_init(&cfg->cfgdrv_lock);
        mutex_init(&cfg->ioctl_buf_sync);
        init_waitqueue_head(&cfg->netif_change_event);
        init_completion(&cfg->send_af_done);
        init_completion(&cfg->iface_disable);
        wl_init_eq(cfg);
        err = wl_init_priv_mem(cfg);
        if (err)
                return err;
        if (wl_create_event_handler(cfg))
                return -ENOMEM;
        wl_init_event_handler(cfg);
        mutex_init(&cfg->usr_sync);
        mutex_init(&cfg->event_sync);
        mutex_init(&cfg->if_sync);
        mutex_init(&cfg->scan_sync);
#ifdef WLTDLS
        mutex_init(&cfg->tdls_sync);
#endif  /* WLTDLS */
#ifdef WL_BCNRECV
        mutex_init(&cfg->bcn_sync);
#endif /* WL_BCNRECV */
#ifdef WL_WPS_SYNC
        wl_init_wps_reauth_sm(cfg);
#endif /* WL_WPS_SYNC */
        err = wl_init_scan(cfg);
        if (err)
                return err;
#ifdef DHD_LOSSLESS_ROAMING
        err = wl_init_roam_timeout(cfg);
        if (err) {
                return err;
        }
#endif /* DHD_LOSSLESS_ROAMING */
        wl_init_conf(cfg->conf);
        wl_init_prof(cfg, ndev);
        wl_link_down(cfg);
        DNGL_FUNC(dhd_cfg80211_init, (cfg));
#ifdef WL_NAN
        cfg->nan_dp_state = NAN_DP_STATE_DISABLED;
        init_waitqueue_head(&cfg->ndp_if_change_event);
#endif /* WL_NAN */
        return err;
}

static void wl_deinit_priv(struct bcm_cfg80211 *cfg)
{
        DNGL_FUNC(dhd_cfg80211_deinit, (cfg));
        wl_destroy_event_handler(cfg);
        wl_flush_eq(cfg);
        wl_link_down(cfg);
        del_timer_sync(&cfg->scan_timeout);
#ifdef DHD_LOSSLESS_ROAMING
        del_timer_sync(&cfg->roam_timeout);
#endif // endif
        wl_deinit_priv_mem(cfg);
        if (wl_cfg80211_netdev_notifier_registered) {
                wl_cfg80211_netdev_notifier_registered = FALSE;
                unregister_netdevice_notifier(&wl_cfg80211_netdev_notifier);
        }
}

#if defined(WL_ENABLE_P2P_IF) || defined(WL_NEWCFG_PRIVCMD_SUPPORT)
static s32 wl_cfg80211_attach_p2p(struct bcm_cfg80211 *cfg)
{
        WL_TRACE(("Enter \n"));

        if (wl_cfgp2p_register_ndev(cfg) < 0) {
                WL_ERR(("P2P attach failed. \n"));
                return -ENODEV;
        }

        return 0;
}

static s32  wl_cfg80211_detach_p2p(struct bcm_cfg80211 *cfg)
{
#ifndef WL_NEWCFG_PRIVCMD_SUPPORT
        struct wireless_dev *wdev;
#endif /* WL_NEWCFG_PRIVCMD_SUPPORT */

        WL_DBG(("Enter \n"));
        if (!cfg) {
                WL_ERR(("Invalid Ptr\n"));
                return -EINVAL;
        }
#ifndef WL_NEWCFG_PRIVCMD_SUPPORT
        else {
                wdev = cfg->p2p_wdev;
                if (!wdev) {
                        WL_ERR(("Invalid Ptr\n"));
                        return -EINVAL;
                }
        }
#endif /* WL_NEWCFG_PRIVCMD_SUPPORT */

        wl_cfgp2p_unregister_ndev(cfg);

        cfg->p2p_wdev = NULL;
        cfg->p2p_net = NULL;
#ifndef WL_NEWCFG_PRIVCMD_SUPPORT
        WL_DBG(("Freeing 0x%p \n", wdev));
        MFREE(cfg->osh, wdev, sizeof(*wdev));
#endif /* WL_NEWCFG_PRIVCMD_SUPPORT */

        return 0;
}
#endif /* WL_ENABLE_P2P_IF || WL_NEWCFG_PRIVCMD_SUPPORT */

static s32 wl_cfg80211_attach_post(struct net_device *ndev)
{
        struct bcm_cfg80211 * cfg;
        s32 err = 0;
        s32 ret = 0;
        WL_INFORM_MEM(("In\n"));
        if (unlikely(!ndev)) {
                WL_ERR(("ndev is invaild\n"));
                return -ENODEV;
        }
        cfg = wl_get_cfg(ndev);
        if (unlikely(!cfg)) {
                WL_ERR(("cfg is invaild\n"));
                return -EINVAL;
        }
        if (!wl_get_drv_status(cfg, READY, ndev)) {
                if (cfg->wdev) {
                        ret = wl_cfgp2p_supported(cfg, ndev);
                        if (ret > 0) {
#if !defined(WL_ENABLE_P2P_IF)
                                cfg->wdev->wiphy->interface_modes |=
                                        (BIT(NL80211_IFTYPE_P2P_CLIENT)|
                                        BIT(NL80211_IFTYPE_P2P_GO));
#endif /* !WL_ENABLE_P2P_IF */
                                if ((err = wl_cfgp2p_init_priv(cfg)) != 0)
                                        goto fail;

#if defined(WL_ENABLE_P2P_IF)
                                if (cfg->p2p_net) {
                                        /* Update MAC addr for p2p0 interface here. */
                                        memcpy(cfg->p2p_net->dev_addr, ndev->dev_addr, ETH_ALEN);
                                        cfg->p2p_net->dev_addr[0] |= 0x02;
                                        WL_ERR(("%s: p2p_dev_addr="MACDBG "\n",
                                                cfg->p2p_net->name,
                                                MAC2STRDBG(cfg->p2p_net->dev_addr)));
                                } else {
                                        WL_ERR(("p2p_net not yet populated."
                                        " Couldn't update the MAC Address for p2p0 \n"));
                                        return -ENODEV;
                                }
#endif /* WL_ENABLE_P2P_IF */
                                cfg->p2p_supported = true;
                        } else if (ret == 0) {
                                if ((err = wl_cfgp2p_init_priv(cfg)) != 0)
                                        goto fail;
                        } else {
                                /* SDIO bus timeout */
                                err = -ENODEV;
                                goto fail;
                        }
                }
        }
        wl_set_drv_status(cfg, READY, ndev);
fail:
        return err;
}

struct bcm_cfg80211 *wl_get_cfg(struct net_device *ndev)
{
        struct wireless_dev *wdev = ndev->ieee80211_ptr;

        if (!wdev)
                return NULL;

        return wiphy_priv(wdev->wiphy);
}

s32
wl_cfg80211_net_attach(struct net_device *primary_ndev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(primary_ndev);

        if (!cfg) {
                WL_ERR(("cfg null\n"));
                return BCME_ERROR;
        }
#ifdef WL_STATIC_IF
        /* Register dummy n/w iface. FW init will happen only from dev_open */
        if (wl_cfg80211_register_static_if(cfg, NL80211_IFTYPE_STATION,
                WL_STATIC_IFNAME_PREFIX) == NULL) {
                WL_ERR(("static i/f registration failed!\n"));
                return BCME_ERROR;
        }
#endif /* WL_STATIC_IF */
        return BCME_OK;
}

s32 wl_cfg80211_attach(struct net_device *ndev, void *context)
{
        struct wireless_dev *wdev;
        struct bcm_cfg80211 *cfg;
        s32 err = 0;
        struct device *dev;
        u16 bssidx = 0;
        u16 ifidx = 0;
        dhd_pub_t *dhd = (struct dhd_pub *)(context);

        WL_TRACE(("In\n"));
        if (!ndev) {
                WL_ERR(("ndev is invaild\n"));
                return -ENODEV;
        }
        WL_DBG(("func %p\n", wl_cfg80211_get_parent_dev()));
        dev = wl_cfg80211_get_parent_dev();

        wdev = (struct wireless_dev *)MALLOCZ(dhd->osh, sizeof(*wdev));
        if (unlikely(!wdev)) {
                WL_ERR(("Could not allocate wireless device\n"));
                return -ENOMEM;
        }
        err = wl_setup_wiphy(wdev, dev, context);
        if (unlikely(err)) {
                MFREE(dhd->osh, wdev, sizeof(*wdev));
                return -ENOMEM;
        }
        wdev->iftype = wl_mode_to_nl80211_iftype(WL_MODE_BSS);
        cfg = wiphy_priv(wdev->wiphy);
        cfg->wdev = wdev;
        cfg->pub = context;
        cfg->osh = dhd->osh;
        INIT_LIST_HEAD(&cfg->net_list);
#ifdef WBTEXT
        INIT_LIST_HEAD(&cfg->wbtext_bssid_list);
#endif /* WBTEXT */
        INIT_LIST_HEAD(&cfg->vndr_oui_list);
        spin_lock_init(&cfg->vndr_oui_sync);
        spin_lock_init(&cfg->net_list_sync);
        ndev->ieee80211_ptr = wdev;
        SET_NETDEV_DEV(ndev, wiphy_dev(wdev->wiphy));
        wdev->netdev = ndev;
        cfg->state_notifier = wl_notifier_change_state;
        err = wl_alloc_netinfo(cfg, ndev, wdev, WL_IF_TYPE_STA, PM_ENABLE, bssidx, ifidx);
        if (err) {
                WL_ERR(("Failed to alloc net_info (%d)\n", err));
                goto cfg80211_attach_out;
        }
        err = wl_init_priv(cfg);
        if (err) {
                WL_ERR(("Failed to init iwm_priv (%d)\n", err));
                goto cfg80211_attach_out;
        }

        err = wl_setup_rfkill(cfg, TRUE);
        if (err) {
                WL_ERR(("Failed to setup rfkill %d\n", err));
                goto cfg80211_attach_out;
        }
#ifdef DEBUGFS_CFG80211
        err = wl_setup_debugfs(cfg);
        if (err) {
                WL_ERR(("Failed to setup debugfs %d\n", err));
                goto cfg80211_attach_out;
        }
#endif // endif
        if (!wl_cfg80211_netdev_notifier_registered) {
                wl_cfg80211_netdev_notifier_registered = TRUE;
                err = register_netdevice_notifier(&wl_cfg80211_netdev_notifier);
                if (err) {
                        wl_cfg80211_netdev_notifier_registered = FALSE;
                        WL_ERR(("Failed to register notifierl %d\n", err));
                        goto cfg80211_attach_out;
                }
        }
#if defined(COEX_DHCP)
        cfg->btcoex_info = wl_cfg80211_btcoex_init(cfg->wdev->netdev);
        if (!cfg->btcoex_info)
                goto cfg80211_attach_out;
#endif // endif
#if defined(SUPPORT_RANDOM_MAC_SCAN) && defined(DHD_RANDOM_MAC_SCAN)
        cfg->random_mac_running = FALSE;
#endif /* SUPPORT_RANDOM_MAC_SCAN && DHD_RANDOM_MAC_SCAN */

#if defined(WL_ENABLE_P2P_IF) || defined(WL_NEWCFG_PRIVCMD_SUPPORT)
        err = wl_cfg80211_attach_p2p(cfg);
        if (err)
                goto cfg80211_attach_out;
#endif /* WL_ENABLE_P2P_IF || WL_NEWCFG_PRIVCMD_SUPPORT */

        INIT_DELAYED_WORK(&cfg->pm_enable_work, wl_cfg80211_work_handler);
        mutex_init(&cfg->pm_sync);
#ifdef WL_NAN
        mutex_init(&cfg->nancfg.nan_sync);
        init_waitqueue_head(&cfg->nancfg.nan_event_wait);
#endif /* WL_NAN */
        wl_cfg80211_set_bcmcfg(cfg);
#ifdef BIGDATA_SOFTAP
        wl_attach_ap_stainfo(cfg);
#endif /* BIGDATA_SOFTAP */
        cfg->rssi_sum_report = FALSE;
#ifdef WL_BAM
        wl_bad_ap_mngr_init(cfg);
#endif  /* WL_BAM */

        return err;

cfg80211_attach_out:
        wl_setup_rfkill(cfg, FALSE);
        wl_free_wdev(cfg);
        return err;
}

void wl_cfg80211_detach(struct bcm_cfg80211 *cfg)
{
        WL_DBG(("Enter\n"));
        if (!cfg) {
                return;
        }
        wl_add_remove_pm_enable_work(cfg, WL_PM_WORKQ_DEL);

#if defined(COEX_DHCP)
        wl_cfg80211_btcoex_deinit();
        cfg->btcoex_info = NULL;
#endif // endif

        wl_setup_rfkill(cfg, FALSE);
#ifdef DEBUGFS_CFG80211
        wl_free_debugfs(cfg);
#endif // endif
        if (cfg->p2p_supported) {
                if (timer_pending(&cfg->p2p->listen_timer))
                        del_timer_sync(&cfg->p2p->listen_timer);
                wl_cfgp2p_deinit_priv(cfg);
        }

#ifdef WL_WPS_SYNC
        wl_deinit_wps_reauth_sm(cfg);
#endif /* WL_WPS_SYNC */

        if (timer_pending(&cfg->scan_timeout))
                del_timer_sync(&cfg->scan_timeout);
#ifdef DHD_LOSSLESS_ROAMING
        if (timer_pending(&cfg->roam_timeout)) {
                del_timer_sync(&cfg->roam_timeout);
        }
#endif /* DHD_LOSSLESS_ROAMING */

#ifdef WL_STATIC_IF
        wl_cfg80211_unregister_static_if(cfg);
#endif /* WL_STATIC_IF */
#if defined(WL_CFG80211_P2P_DEV_IF)
        if (cfg->p2p_wdev)
                wl_cfgp2p_del_p2p_disc_if(cfg->p2p_wdev, cfg);
#endif /* WL_CFG80211_P2P_DEV_IF  */
#if defined(WL_ENABLE_P2P_IF) || defined(WL_NEWCFG_PRIVCMD_SUPPORT)
        wl_cfg80211_detach_p2p(cfg);
#endif /* WL_ENABLE_P2P_IF || WL_NEWCFG_PRIVCMD_SUPPORT */
#ifdef BIGDATA_SOFTAP
        wl_detach_ap_stainfo(cfg);
#endif /* BIGDATA_SOFTAP */
#ifdef WL_BAM
        wl_bad_ap_mngr_deinit(cfg);
#endif  /* WL_BAM */
        wl_cfg80211_ibss_vsie_free(cfg);
        wl_dealloc_netinfo_by_wdev(cfg, cfg->wdev);
        wl_cfg80211_set_bcmcfg(NULL);
        wl_deinit_priv(cfg);
        wl_cfg80211_clear_parent_dev();
        wl_free_wdev(cfg);
        /* PLEASE do NOT call any function after wl_free_wdev, the driver's private
         * structure "cfg", which is the private part of wiphy, has been freed in
         * wl_free_wdev !!!!!!!!!!!
         */
        WL_DBG(("Exit\n"));
}

static void wl_print_event_data(struct bcm_cfg80211 *cfg,
        uint32 event_type, const wl_event_msg_t *e)
{
        s32 status = ntoh32(e->status);
        s32 reason = ntoh32(e->reason);
        s32 ifidx = ntoh32(e->ifidx);
        s32 bssidx = ntoh32(e->bsscfgidx);

        switch (event_type) {
                case WLC_E_ESCAN_RESULT:
                        if ((status == WLC_E_STATUS_SUCCESS) ||
                                (status == WLC_E_STATUS_ABORT)) {
                                WL_INFORM_MEM(("event_type (%d), ifidx: %d"
                                        " bssidx: %d scan_type:%d\n",
                                        event_type, ifidx, bssidx, status));
                        }
                        break;
                case WLC_E_LINK:
                case WLC_E_DISASSOC:
                case WLC_E_DISASSOC_IND:
                case WLC_E_DEAUTH:
                case WLC_E_DEAUTH_IND:
                        WL_INFORM_MEM(("event_type (%d), ifidx: %d bssidx: %d"
                                " status:%d reason:%d\n",
                                event_type, ifidx, bssidx, status, reason));
                                break;

                default:
                        /* Print only when DBG verbose is enabled */
                        WL_DBG(("event_type (%d), ifidx: %d bssidx: %d status:%d reason: %d\n",
                                event_type, ifidx, bssidx, status, reason));
        }
}

static void wl_event_handler(struct work_struct *work_data)
{
        struct bcm_cfg80211 *cfg = NULL;
        struct wl_event_q *e;
        struct wireless_dev *wdev = NULL;

        WL_DBG(("Enter \n"));
        BCM_SET_CONTAINER_OF(cfg, work_data, struct bcm_cfg80211, event_work);
        cfg->wl_evt_hdlr_entry_time = OSL_LOCALTIME_NS();
        DHD_EVENT_WAKE_LOCK(cfg->pub);
        while ((e = wl_deq_event(cfg))) {
                s32 status = ntoh32(e->emsg.status);
                u32 event_type = ntoh32(e->emsg.event_type);
                bool scan_cmplt_evt = (event_type == WLC_E_ESCAN_RESULT) &&
                        ((status == WLC_E_STATUS_SUCCESS) || (status == WLC_E_STATUS_ABORT));

                cfg->wl_evt_deq_time = OSL_LOCALTIME_NS();
                if (scan_cmplt_evt) {
                        cfg->scan_deq_time = OSL_LOCALTIME_NS();
                }
                /* Print only critical events to avoid too many prints */
                wl_print_event_data(cfg, e->etype, &e->emsg);

                if (e->emsg.ifidx > WL_MAX_IFS) {
                        WL_ERR((" Event ifidx not in range. val:%d \n", e->emsg.ifidx));
                        goto fail;
                }

                /* Make sure iface operations, don't creat race conditions */
                mutex_lock(&cfg->if_sync);
                if (!(wdev = wl_get_wdev_by_fw_idx(cfg,
                        e->emsg.bsscfgidx, e->emsg.ifidx))) {
                        /* For WLC_E_IF would be handled by wl_host_event */
                        if (e->etype != WLC_E_IF)
                                WL_ERR(("No wdev corresponding to bssidx: 0x%x found!"
                                        " Ignoring event.\n", e->emsg.bsscfgidx));
                } else if (e->etype < WLC_E_LAST && cfg->evt_handler[e->etype]) {
                        dhd_pub_t *dhd = (struct dhd_pub *)(cfg->pub);
                        if (dhd->busstate == DHD_BUS_DOWN) {
                                WL_ERR((": BUS is DOWN.\n"));
                        } else
                        {
                                WL_DBG(("event_type %d event_sub %d\n",
                                        ntoh32(e->emsg.event_type),
                                        ntoh32(e->emsg.reason)));
                                cfg->evt_handler[e->etype](cfg, wdev_to_cfgdev(wdev),
                                        &e->emsg, e->edata);
                                if (scan_cmplt_evt) {
                                        cfg->scan_hdlr_cmplt_time = OSL_LOCALTIME_NS();
                                }
                        }
                } else {
                        WL_DBG(("Unknown Event (%d): ignoring\n", e->etype));
                }
                mutex_unlock(&cfg->if_sync);
fail:
                wl_put_event(cfg, e);
                if (scan_cmplt_evt) {
                        cfg->scan_cmplt_time = OSL_LOCALTIME_NS();
                }
                cfg->wl_evt_hdlr_exit_time = OSL_LOCALTIME_NS();
        }
        DHD_EVENT_WAKE_UNLOCK(cfg->pub);
}

void
wl_cfg80211_event(struct net_device *ndev, const wl_event_msg_t * e, void *data)
{
        s32 status = ntoh32(e->status);
        u32 event_type = ntoh32(e->event_type);
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        struct net_info *netinfo;

        WL_TRACE(("event_type (%d): reason (%d): %s\n", event_type, ntoh32(e->reason),
                bcmevent_get_name(event_type)));
        if ((cfg == NULL) || (cfg->p2p_supported && cfg->p2p == NULL)) {
                WL_ERR(("Stale event ignored\n"));
                return;
        }

        if (cfg->event_workq == NULL) {
                WL_ERR(("Event handler is not created\n"));
                return;
        }

        if (wl_get_p2p_status(cfg, IF_CHANGING) || wl_get_p2p_status(cfg, IF_ADDING)) {
                WL_ERR(("during IF change, ignore event %d\n", event_type));
                return;
        }

        if (event_type == WLC_E_IF) {
                /* Don't process WLC_E_IF events in wl_cfg80211 layer */
                return;
        }

        netinfo = wl_get_netinfo_by_fw_idx(cfg, e->bsscfgidx, e->ifidx);
        if (!netinfo) {
                /* Since the netinfo entry is not there, the netdev entry is not
                 * created via cfg80211 interface. so the event is not of interest
                 * to the cfg80211 layer.
                 */
                WL_TRACE(("ignore event %d, not interested\n", event_type));
                return;
        }

        if (event_type == WLC_E_PFN_NET_FOUND) {
                WL_DBG((" PNOEVENT: PNO_NET_FOUND\n"));
        }
        else if (event_type == WLC_E_PFN_NET_LOST) {
                WL_DBG((" PNOEVENT: PNO_NET_LOST\n"));
        }

        if (likely(!wl_enq_event(cfg, ndev, event_type, e, data))) {
                queue_work(cfg->event_workq, &cfg->event_work);
        }
        /* Mark timeout value for thread sched */
        if ((event_type == WLC_E_ESCAN_RESULT) &&
                ((status == WLC_E_STATUS_SUCCESS) ||
                (status == WLC_E_STATUS_ABORT)))  {
                cfg->scan_enq_time = OSL_LOCALTIME_NS();
                WL_INFORM_MEM(("Enqueing escan completion (%d). WQ state:0x%x \n",
                        status, work_busy(&cfg->event_work)));
        }
}

static void wl_init_eq(struct bcm_cfg80211 *cfg)
{
        wl_init_eq_lock(cfg);
        INIT_LIST_HEAD(&cfg->eq_list);
}

static void wl_flush_eq(struct bcm_cfg80211 *cfg)
{
        struct wl_event_q *e;
        unsigned long flags;

        flags = wl_lock_eq(cfg);
        while (!list_empty_careful(&cfg->eq_list)) {
                BCM_SET_LIST_FIRST_ENTRY(e, &cfg->eq_list, struct wl_event_q, eq_list);
                list_del(&e->eq_list);
                MFREE(cfg->osh, e, e->datalen + sizeof(struct wl_event_q));
        }
        wl_unlock_eq(cfg, flags);
}

/*
* retrieve first queued event from head
*/

static struct wl_event_q *wl_deq_event(struct bcm_cfg80211 *cfg)
{
        struct wl_event_q *e = NULL;
        unsigned long flags;

        flags = wl_lock_eq(cfg);
        if (likely(!list_empty(&cfg->eq_list))) {
                BCM_SET_LIST_FIRST_ENTRY(e, &cfg->eq_list, struct wl_event_q, eq_list);
                list_del(&e->eq_list);
        }
        wl_unlock_eq(cfg, flags);

        return e;
}

/*
 * push event to tail of the queue
 */

static s32
wl_enq_event(struct bcm_cfg80211 *cfg, struct net_device *ndev, u32 event,
        const wl_event_msg_t *msg, void *data)
{
        struct wl_event_q *e;
        s32 err = 0;
        uint32 evtq_size;
        uint32 data_len;
        unsigned long flags;

        data_len = 0;
        if (data)
                data_len = ntoh32(msg->datalen);
        evtq_size = (uint32)(sizeof(struct wl_event_q) + data_len);
        e = (struct wl_event_q *)MALLOCZ(cfg->osh, evtq_size);
        if (unlikely(!e)) {
                WL_ERR(("event alloc failed\n"));
                return -ENOMEM;
        }
        e->etype = event;
        memcpy(&e->emsg, msg, sizeof(wl_event_msg_t));
        if (data)
                memcpy(e->edata, data, data_len);
        e->datalen = data_len;
        flags = wl_lock_eq(cfg);
        list_add_tail(&e->eq_list, &cfg->eq_list);
        wl_unlock_eq(cfg, flags);

        return err;
}

static void wl_put_event(struct bcm_cfg80211 *cfg, struct wl_event_q *e)
{
        MFREE(cfg->osh, e, e->datalen + sizeof(struct wl_event_q));
}

static s32 wl_config_infra(struct bcm_cfg80211 *cfg, struct net_device *ndev, u16 iftype)
{
        s32 infra = 0;
        s32 err = 0;
        bool skip_infra = false;

        switch (iftype) {
                case WL_IF_TYPE_IBSS:
                case WL_IF_TYPE_AIBSS:
                        infra = 0;
                        break;
                case WL_IF_TYPE_AP:
                case WL_IF_TYPE_STA:
                case WL_IF_TYPE_P2P_GO:
                case WL_IF_TYPE_P2P_GC:
                        /* Intentional fall through */
                        infra = 1;
                        break;
                case WL_IF_TYPE_MONITOR:
                case WL_IF_TYPE_AWDL:
                case WL_IF_TYPE_NAN:
                        /* Intentionall fall through */
                default:
                        skip_infra = true;
                        WL_ERR(("Skipping infra setting for type:%d\n", iftype));
                        break;
        }

        if (!skip_infra) {
                infra = htod32(infra);
                err = wldev_ioctl_set(ndev, WLC_SET_INFRA, &infra, sizeof(infra));
                if (unlikely(err)) {
                        WL_ERR(("WLC_SET_INFRA error (%d)\n", err));
                        return err;
                }
        }
        return 0;
}

void wl_cfg80211_add_to_eventbuffer(struct wl_eventmsg_buf *ev, u16 event, bool set)
{
        if (!ev || (event > WLC_E_LAST))
                return;

        if (ev->num < MAX_EVENT_BUF_NUM) {
                ev->event[ev->num].type = event;
                ev->event[ev->num].set = set;
                ev->num++;
        } else {
                WL_ERR(("evenbuffer doesn't support > %u events. Update"
                        " the define MAX_EVENT_BUF_NUM \n", MAX_EVENT_BUF_NUM));
                ASSERT(0);
        }
}

s32 wl_cfg80211_apply_eventbuffer(
        struct net_device *ndev,
        struct bcm_cfg80211 *cfg,
        wl_eventmsg_buf_t *ev)
{
        char eventmask[WL_EVENTING_MASK_LEN];
        int i, ret = 0;
        s8 iovbuf[WL_EVENTING_MASK_LEN + 12];

        if (!ev || (!ev->num))
                return -EINVAL;

        mutex_lock(&cfg->event_sync);

        /* Read event_msgs mask */
        ret = wldev_iovar_getbuf(ndev, "event_msgs", NULL, 0, iovbuf, sizeof(iovbuf), NULL);
        if (unlikely(ret)) {
                WL_ERR(("Get event_msgs error (%d)\n", ret));
                goto exit;
        }
        memcpy(eventmask, iovbuf, WL_EVENTING_MASK_LEN);

        /* apply the set bits */
        for (i = 0; i < ev->num; i++) {
                if (ev->event[i].set)
                        setbit(eventmask, ev->event[i].type);
                else
                        clrbit(eventmask, ev->event[i].type);
        }

        /* Write updated Event mask */
        ret = wldev_iovar_setbuf(ndev, "event_msgs", eventmask, sizeof(eventmask), iovbuf,
                        sizeof(iovbuf), NULL);
        if (unlikely(ret)) {
                WL_ERR(("Set event_msgs error (%d)\n", ret));
        }

exit:
        mutex_unlock(&cfg->event_sync);
        return ret;
}

s32 wl_add_remove_eventmsg(struct net_device *ndev, u16 event, bool add)
{
        s8 iovbuf[WL_EVENTING_MASK_LEN + 12];
        s8 eventmask[WL_EVENTING_MASK_LEN];
        s32 err = 0;
        struct bcm_cfg80211 *cfg;

        if (!ndev)
                return -ENODEV;

        cfg = wl_get_cfg(ndev);
        if (!cfg)
                return -ENODEV;

        mutex_lock(&cfg->event_sync);

        /* Setup event_msgs */
        err = wldev_iovar_getbuf(ndev, "event_msgs", NULL, 0, iovbuf, sizeof(iovbuf), NULL);
        if (unlikely(err)) {
                WL_ERR(("Get event_msgs error (%d)\n", err));
                goto eventmsg_out;
        }
        memcpy(eventmask, iovbuf, WL_EVENTING_MASK_LEN);
        if (add) {
                setbit(eventmask, event);
        } else {
                clrbit(eventmask, event);
        }
        err = wldev_iovar_setbuf(ndev, "event_msgs", eventmask, WL_EVENTING_MASK_LEN, iovbuf,
                        sizeof(iovbuf), NULL);
        if (unlikely(err)) {
                WL_ERR(("Set event_msgs error (%d)\n", err));
                goto eventmsg_out;
        }

eventmsg_out:
        mutex_unlock(&cfg->event_sync);
        return err;
}

static int wl_construct_reginfo(struct bcm_cfg80211 *cfg, s32 bw_cap)
{
        struct net_device *dev = bcmcfg_to_prmry_ndev(cfg);
        struct ieee80211_channel *band_chan_arr = NULL;
        wl_uint32_list_t *list;
        u32 i, j, index, n_2g, n_5g, band, channel, array_size;
        u32 *n_cnt = NULL;
        chanspec_t c = 0;
        s32 err = BCME_OK;
        bool update;
        bool ht40_allowed;
        u8 *pbuf = NULL;
        bool dfs_radar_disabled = FALSE;

#define LOCAL_BUF_LEN 1024
        pbuf = (u8 *)MALLOCZ(cfg->osh, LOCAL_BUF_LEN);
        if (pbuf == NULL) {
                WL_ERR(("failed to allocate local buf\n"));
                return -ENOMEM;
        }

        err = wldev_iovar_getbuf_bsscfg(dev, "chanspecs", NULL,
                0, pbuf, LOCAL_BUF_LEN, 0, &cfg->ioctl_buf_sync);
        if (err != 0) {
                WL_ERR(("get chanspecs failed with %d\n", err));
                MFREE(cfg->osh, pbuf, LOCAL_BUF_LEN);
                return err;
        }

        list = (wl_uint32_list_t *)(void *)pbuf;
        band = array_size = n_2g = n_5g = 0;
        for (i = 0; i < dtoh32(list->count); i++) {
                index = 0;
                update = false;
                ht40_allowed = false;
                c = (chanspec_t)dtoh32(list->element[i]);
                c = wl_chspec_driver_to_host(c);
                channel = wf_chspec_ctlchan(c);

                if (!CHSPEC_IS40(c) && ! CHSPEC_IS20(c)) {
                        WL_DBG(("HT80/160/80p80 center channel : %d\n", channel));
                        continue;
                }
                if (CHSPEC_IS2G(c) && (channel >= CH_MIN_2G_CHANNEL) &&
                        (channel <= CH_MAX_2G_CHANNEL)) {
                        band_chan_arr = __wl_2ghz_channels;
                        array_size = ARRAYSIZE(__wl_2ghz_channels);
                        n_cnt = &n_2g;
                        band = NL80211_BAND_2GHZ;
                        ht40_allowed = (bw_cap  == WLC_N_BW_40ALL)? true : false;
                } else if (CHSPEC_IS5G(c) && channel >= CH_MIN_5G_CHANNEL) {
                        band_chan_arr = __wl_5ghz_a_channels;
                        array_size = ARRAYSIZE(__wl_5ghz_a_channels);
                        n_cnt = &n_5g;
                        band = NL80211_BAND_5GHZ;
                        ht40_allowed = (bw_cap  == WLC_N_BW_20ALL)? false : true;
                } else {
                        WL_ERR(("Invalid channel Sepc. 0x%x.\n", c));
                        continue;
                }
                if (!ht40_allowed && CHSPEC_IS40(c))
                        continue;
                for (j = 0; (j < *n_cnt && (*n_cnt < array_size)); j++) {
                        if (band_chan_arr[j].hw_value == channel) {
                                update = true;
                                break;
                        }
                }
                if (update)
                        index = j;
                else
                        index = *n_cnt;
                if (index <  array_size) {
#if LINUX_VERSION_CODE == KERNEL_VERSION(2, 6, 38) && !defined(WL_COMPAT_WIRELESS)
                        band_chan_arr[index].center_freq =
                                ieee80211_channel_to_frequency(channel);
#else
                        band_chan_arr[index].center_freq =
                                ieee80211_channel_to_frequency(channel, band);
#endif // endif
                        band_chan_arr[index].hw_value = channel;
                        band_chan_arr[index].beacon_found = false;

                        if (CHSPEC_IS40(c) && ht40_allowed) {
                                /* assuming the order is HT20, HT40 Upper,
                                 *  HT40 lower from chanspecs
                                 */
                                u32 ht40_flag = band_chan_arr[index].flags & IEEE80211_CHAN_NO_HT40;
                                if (CHSPEC_SB_UPPER(c)) {
                                        if (ht40_flag == IEEE80211_CHAN_NO_HT40)
                                                band_chan_arr[index].flags &=
                                                        ~IEEE80211_CHAN_NO_HT40;
                                        band_chan_arr[index].flags |= IEEE80211_CHAN_NO_HT40PLUS;
                                } else {
                                        /* It should be one of
                                         * IEEE80211_CHAN_NO_HT40 or IEEE80211_CHAN_NO_HT40PLUS
                                         */
                                        band_chan_arr[index].flags &= ~IEEE80211_CHAN_NO_HT40;
                                        if (ht40_flag == IEEE80211_CHAN_NO_HT40)
                                                band_chan_arr[index].flags |=
                                                        IEEE80211_CHAN_NO_HT40MINUS;
                                }
                        } else {
                                band_chan_arr[index].flags = IEEE80211_CHAN_NO_HT40;
                                if (!dfs_radar_disabled) {
                                        if (band == NL80211_BAND_2GHZ)
                                                channel |= WL_CHANSPEC_BAND_2G;
                                        else
                                                channel |= WL_CHANSPEC_BAND_5G;
                                        channel |= WL_CHANSPEC_BW_20;
                                        channel = wl_chspec_host_to_driver(channel);
                                        err = wldev_iovar_getint(dev, "per_chan_info", &channel);
                                        if (!err) {
                                                if (channel & WL_CHAN_RADAR) {
#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 14, 0))
                                                        band_chan_arr[index].flags |=
                                                                (IEEE80211_CHAN_RADAR
                                                                | IEEE80211_CHAN_NO_IBSS);
#else
                                                        band_chan_arr[index].flags |=
                                                                IEEE80211_CHAN_RADAR;
#endif // endif
                                                }

                                                if (channel & WL_CHAN_PASSIVE)
#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 14, 0))
                                                        band_chan_arr[index].flags |=
                                                                IEEE80211_CHAN_PASSIVE_SCAN;
#else
                                                        band_chan_arr[index].flags |=
                                                                IEEE80211_CHAN_NO_IR;
#endif // endif
                                        } else if (err == BCME_UNSUPPORTED) {
                                                dfs_radar_disabled = TRUE;
                                                WL_ERR(("does not support per_chan_info\n"));
                                        }
                                }
                        }
                        if (!update)
                                (*n_cnt)++;
                }

        }
        __wl_band_2ghz.n_channels = n_2g;
        __wl_band_5ghz_a.n_channels = n_5g;
        MFREE(cfg->osh, pbuf, LOCAL_BUF_LEN);
#undef LOCAL_BUF_LEN

        return err;
}

static s32 __wl_update_wiphybands(struct bcm_cfg80211 *cfg, bool notify)
{
        struct wiphy *wiphy;
        struct net_device *dev = bcmcfg_to_prmry_ndev(cfg);
        u32 bandlist[3];
        u32 nband = 0;
        u32 i = 0;
        s32 err = 0;
        s32 index = 0;
        s32 nmode = 0;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 6, 0))
        u32 j = 0;
        s32 vhtmode = 0;
        s32 txstreams = 0;
        s32 rxstreams = 0;
        s32 ldpc_cap = 0;
        s32 stbc_rx = 0;
        s32 stbc_tx = 0;
        s32 txbf_bfe_cap = 0;
        s32 txbf_bfr_cap = 0;
#endif // endif
        s32 bw_cap = 0;
        s32 cur_band = -1;
        struct ieee80211_supported_band *bands[NUM_NL80211_BANDS] = {NULL, };

        memset(bandlist, 0, sizeof(bandlist));
        err = wldev_ioctl_get(dev, WLC_GET_BANDLIST, bandlist,
                sizeof(bandlist));
        if (unlikely(err)) {
                WL_ERR(("error read bandlist (%d)\n", err));
                return err;
        }
        err = wldev_ioctl_get(dev, WLC_GET_BAND, &cur_band,
                sizeof(s32));
        if (unlikely(err)) {
                WL_ERR(("error (%d)\n", err));
                return err;
        }

        err = wldev_iovar_getint(dev, "nmode", &nmode);
        if (unlikely(err)) {
                WL_ERR(("error reading nmode (%d)\n", err));
        }

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 6, 0))
        err = wldev_iovar_getint(dev, "vhtmode", &vhtmode);
        if (unlikely(err)) {
                WL_ERR(("error reading vhtmode (%d)\n", err));
        }

        if (vhtmode) {
                err = wldev_iovar_getint(dev, "txstreams", &txstreams);
                if (unlikely(err)) {
                        WL_ERR(("error reading txstreams (%d)\n", err));
                }

                err = wldev_iovar_getint(dev, "rxstreams", &rxstreams);
                if (unlikely(err)) {
                        WL_ERR(("error reading rxstreams (%d)\n", err));
                }

                err = wldev_iovar_getint(dev, "ldpc_cap", &ldpc_cap);
                if (unlikely(err)) {
                        WL_ERR(("error reading ldpc_cap (%d)\n", err));
                }

                err = wldev_iovar_getint(dev, "stbc_rx", &stbc_rx);
                if (unlikely(err)) {
                        WL_ERR(("error reading stbc_rx (%d)\n", err));
                }

                err = wldev_iovar_getint(dev, "stbc_tx", &stbc_tx);
                if (unlikely(err)) {
                        WL_ERR(("error reading stbc_tx (%d)\n", err));
                }

                err = wldev_iovar_getint(dev, "txbf_bfe_cap", &txbf_bfe_cap);
                if (unlikely(err)) {
                        WL_ERR(("error reading txbf_bfe_cap (%d)\n", err));
                }

                err = wldev_iovar_getint(dev, "txbf_bfr_cap", &txbf_bfr_cap);
                if (unlikely(err)) {
                        WL_ERR(("error reading txbf_bfr_cap (%d)\n", err));
                }
        }
#endif // endif

        /* For nmode and vhtmode   check bw cap */
        if (nmode ||
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 6, 0))
                vhtmode ||
#endif // endif
                0) {
                err = wldev_iovar_getint(dev, "mimo_bw_cap", &bw_cap);
                if (unlikely(err)) {
                        WL_ERR(("error get mimo_bw_cap (%d)\n", err));
                }
        }

        err = wl_construct_reginfo(cfg, bw_cap);
        if (err) {
                WL_ERR(("wl_construct_reginfo() fails err=%d\n", err));
                if (err != BCME_UNSUPPORTED)
                        return err;
        }

        wiphy = bcmcfg_to_wiphy(cfg);
        nband = bandlist[0];

        for (i = 1; i <= nband && i < ARRAYSIZE(bandlist); i++) {
                index = -1;
                if (bandlist[i] == WLC_BAND_5G && __wl_band_5ghz_a.n_channels > 0) {
                        bands[NL80211_BAND_5GHZ] =
                                &__wl_band_5ghz_a;
                        index = NL80211_BAND_5GHZ;
                        if (nmode && (bw_cap == WLC_N_BW_40ALL || bw_cap == WLC_N_BW_20IN2G_40IN5G))
                                bands[index]->ht_cap.cap |= IEEE80211_HT_CAP_SGI_40;

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 6, 0))
                        /* VHT capabilities. */
                        if (vhtmode) {
                                /* Supported */
                                bands[index]->vht_cap.vht_supported = TRUE;

                                for (j = 1; j <= VHT_CAP_MCS_MAP_NSS_MAX; j++) {
                                        /* TX stream rates. */
                                        if (j <= txstreams) {
                                                VHT_MCS_MAP_SET_MCS_PER_SS(j, VHT_CAP_MCS_MAP_0_9,
                                                        bands[index]->vht_cap.vht_mcs.tx_mcs_map);
                                        } else {
                                                VHT_MCS_MAP_SET_MCS_PER_SS(j, VHT_CAP_MCS_MAP_NONE,
                                                        bands[index]->vht_cap.vht_mcs.tx_mcs_map);
                                        }

                                        /* RX stream rates. */
                                        if (j <= rxstreams) {
                                                VHT_MCS_MAP_SET_MCS_PER_SS(j, VHT_CAP_MCS_MAP_0_9,
                                                        bands[index]->vht_cap.vht_mcs.rx_mcs_map);
                                        } else {
                                                VHT_MCS_MAP_SET_MCS_PER_SS(j, VHT_CAP_MCS_MAP_NONE,
                                                        bands[index]->vht_cap.vht_mcs.rx_mcs_map);
                                        }
                                }

                                /* Capabilities */
                                /* 80 MHz is mandatory */
                                bands[index]->vht_cap.cap |=
                                        IEEE80211_VHT_CAP_SHORT_GI_80;

                                if (WL_BW_CAP_160MHZ(bw_cap)) {
                                        bands[index]->vht_cap.cap |=
                                                IEEE80211_VHT_CAP_SUPP_CHAN_WIDTH_160MHZ;
                                        bands[index]->vht_cap.cap |=
                                                IEEE80211_VHT_CAP_SHORT_GI_160;
                                }

                                bands[index]->vht_cap.cap |=
                                        IEEE80211_VHT_CAP_MAX_MPDU_LENGTH_11454;

                                if (ldpc_cap)
                                        bands[index]->vht_cap.cap |=
                                                IEEE80211_VHT_CAP_RXLDPC;

                                if (stbc_tx)
                                        bands[index]->vht_cap.cap |=
                                                IEEE80211_VHT_CAP_TXSTBC;

                                if (stbc_rx)
                                        bands[index]->vht_cap.cap |=
                                                (stbc_rx << VHT_CAP_INFO_RX_STBC_SHIFT);

                                if (txbf_bfe_cap)
                                        bands[index]->vht_cap.cap |=
                                                IEEE80211_VHT_CAP_SU_BEAMFORMEE_CAPABLE;

                                if (txbf_bfr_cap) {
                                        bands[index]->vht_cap.cap |=
                                                IEEE80211_VHT_CAP_SU_BEAMFORMER_CAPABLE;
                                }

                                if (txbf_bfe_cap || txbf_bfr_cap) {
                                        bands[index]->vht_cap.cap |=
                                                (2 << VHT_CAP_INFO_NUM_BMFMR_ANT_SHIFT);
                                        bands[index]->vht_cap.cap |=
                                                ((txstreams - 1) <<
                                                        VHT_CAP_INFO_NUM_SOUNDING_DIM_SHIFT);
                                        bands[index]->vht_cap.cap |=
                                                IEEE80211_VHT_CAP_VHT_LINK_ADAPTATION_VHT_MRQ_MFB;
                                }

                                /* AMPDU length limit, support max 1MB (2 ^ (13 + 7)) */
                                bands[index]->vht_cap.cap |=
                                        (7 << VHT_CAP_INFO_AMPDU_MAXLEN_EXP_SHIFT);
                                WL_DBG(("%s band[%d] vht_enab=%d vht_cap=%08x "
                                        "vht_rx_mcs_map=%04x vht_tx_mcs_map=%04x\n",
                                        __FUNCTION__, index,
                                        bands[index]->vht_cap.vht_supported,
                                        bands[index]->vht_cap.cap,
                                        bands[index]->vht_cap.vht_mcs.rx_mcs_map,
                                        bands[index]->vht_cap.vht_mcs.tx_mcs_map));
                        }
#endif // endif
                }
                else if (bandlist[i] == WLC_BAND_2G && __wl_band_2ghz.n_channels > 0) {
                        bands[NL80211_BAND_2GHZ] =
                                &__wl_band_2ghz;
                        index = NL80211_BAND_2GHZ;
                        if (bw_cap == WLC_N_BW_40ALL)
                                bands[index]->ht_cap.cap |= IEEE80211_HT_CAP_SGI_40;
                }

                if ((index >= 0) && nmode) {
                        bands[index]->ht_cap.cap |=
                                (IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_DSSSCCK40);
                        bands[index]->ht_cap.ht_supported = TRUE;
                        bands[index]->ht_cap.ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K;
                        bands[index]->ht_cap.ampdu_density = IEEE80211_HT_MPDU_DENSITY_16;
                        /* An HT shall support all EQM rates for one spatial stream */
                        bands[index]->ht_cap.mcs.rx_mask[0] = 0xff;
                }

        }

        wiphy->bands[NL80211_BAND_2GHZ] = bands[NL80211_BAND_2GHZ];
        wiphy->bands[NL80211_BAND_5GHZ] = bands[NL80211_BAND_5GHZ];

        /* check if any bands populated otherwise makes 2Ghz as default */
        if (wiphy->bands[NL80211_BAND_2GHZ] == NULL &&
                wiphy->bands[NL80211_BAND_5GHZ] == NULL) {
                /* Setup 2Ghz band as default */
                wiphy->bands[NL80211_BAND_2GHZ] = &__wl_band_2ghz;
        }

        if (notify)
                wiphy_apply_custom_regulatory(wiphy, &brcm_regdom);

        return 0;
}

#ifdef WL_BCNRECV
static s32
wl_bcnrecv_aborted_event_handler(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
                const wl_event_msg_t *e, void *data)
{
        s32 status = ntoh32(e->status);
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
        /* Abort fakeapscan, when Roam is in progress */
        if (status == WLC_E_STATUS_RXBCN_ABORT) {
                wl_android_bcnrecv_stop(ndev, WL_BCNRECV_ROAMABORT);
        } else {
                WL_ERR(("UNKNOWN STATUS. status:%d\n", status));
        }
        return BCME_OK;
}
#endif /* WL_BCNRECV */

/* Get the concurrency mode */
int wl_cfg80211_get_concurrency_mode(struct bcm_cfg80211 *cfg)
{
        struct net_info *iter, *next;
        uint cmode = CONCURRENCY_MODE_NONE;
        u32 connected_cnt = 0;
        u32 pre_channel = 0, channel = 0;
        u32 pre_band = 0;
        u32 chanspec = 0;
        u32 band = 0;

        connected_cnt = wl_get_drv_status_all(cfg, CONNECTED);
        if (connected_cnt <= 1) {
                return cmode;
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
        for_each_ndev(cfg, iter, next) {
                if (iter->ndev) {
                        if (wl_get_drv_status(cfg, CONNECTED, iter->ndev)) {
                                if (wldev_iovar_getint(iter->ndev, "chanspec",
                                        (s32 *)&chanspec) == BCME_OK) {
                                        channel = wf_chspec_ctlchan(
                                                wl_chspec_driver_to_host(chanspec));
                                        band = (channel <= CH_MAX_2G_CHANNEL) ?
                                                NL80211_BAND_2GHZ : NL80211_BAND_5GHZ;
                                }
                                if ((!pre_channel && channel)) {
                                        pre_band = band;
                                        pre_channel = channel;
                                } else if (pre_channel) {
                                        if ((pre_band == band) && (pre_channel == channel)) {
                                                cmode = CONCURRENCY_SCC_MODE;
                                                goto exit;
                                        } else if ((pre_band == band) && (pre_channel != channel)) {
                                                cmode = CONCURRENCY_VSDB_MODE;
                                                goto exit;
                                        } else if (pre_band != band) {
                                                cmode = CONCURRENCY_RSDB_MODE;
                                                goto exit;
                                        }
                                }
                        }
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif
exit:
        return cmode;
}
s32 wl_update_wiphybands(struct bcm_cfg80211 *cfg, bool notify)
{
        s32 err;

        mutex_lock(&cfg->usr_sync);
        err = __wl_update_wiphybands(cfg, notify);
        mutex_unlock(&cfg->usr_sync);

        return err;
}

static s32 __wl_cfg80211_up(struct bcm_cfg80211 *cfg)
{
        s32 err = 0;
#ifdef WL_HOST_BAND_MGMT
        s32 ret = 0;
#endif /* WL_HOST_BAND_MGMT */
        struct net_info *netinfo = NULL;
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
        struct wireless_dev *wdev = ndev->ieee80211_ptr;
#ifdef WBTEXT
        dhd_pub_t *dhd =  (dhd_pub_t *)(cfg->pub);
#endif /* WBTEXT */
#ifdef WLTDLS
        u32 tdls;
#endif /* WLTDLS */
        u16 wl_iftype = 0;
        u16 wl_mode = 0;

        WL_DBG(("In\n"));

        /* Reserve 0x8000 toggle bit for P2P GO/GC */
        cfg->vif_macaddr_mask = 0x8000;

        err = dhd_config_dongle(cfg);
        if (unlikely(err))
                return err;

        /* Always bring up interface in STA mode.
        * Did observe , if previous SofAP Bringup/cleanup
        * is not done properly, iftype is stuck with AP mode.
        * So during next wlan0 up, forcing the type to STA
        */
        netinfo = wl_get_netinfo_by_wdev(cfg, wdev);
        if (!netinfo) {
                WL_ERR(("there is no netinfo\n"));
                return -ENODEV;
        }
        ndev->ieee80211_ptr->iftype = NL80211_IFTYPE_STATION;
        netinfo->iftype = WL_IF_TYPE_STA;

        if (cfg80211_to_wl_iftype(wdev->iftype, &wl_iftype, &wl_mode) < 0) {
                return -EINVAL;
        }
        err = wl_config_infra(cfg, ndev, wl_iftype);
        if (unlikely(err && err != -EINPROGRESS)) {
                WL_ERR(("wl_config_infra failed\n"));
                if (err == -1) {
                        WL_ERR(("return error %d\n", err));
                        return err;
                }
        }
        err = __wl_update_wiphybands(cfg, true);
        if (unlikely(err)) {
                WL_ERR(("wl_update_wiphybands failed\n"));
                if (err == -1) {
                        WL_ERR(("return error %d\n", err));
                        return err;
                }
        }
        if (!dhd_download_fw_on_driverload) {
                err = wl_create_event_handler(cfg);
                if (err) {
                        WL_ERR(("wl_create_event_handler failed\n"));
                        return err;
                }
                wl_init_event_handler(cfg);
        }
        err = wl_init_scan(cfg);
        if (err) {
                WL_ERR(("wl_init_scan failed\n"));
                return err;
        }
#ifdef DHD_LOSSLESS_ROAMING
        if (timer_pending(&cfg->roam_timeout)) {
                del_timer_sync(&cfg->roam_timeout);
        }
#endif /* DHD_LOSSLESS_ROAMING */

        err = dhd_monitor_init(cfg->pub);

#ifdef WL_HOST_BAND_MGMT
        /* By default the curr_band is initialized to BAND_AUTO */
        if ((ret = wl_cfg80211_set_band(ndev, WLC_BAND_AUTO)) < 0) {
                if (ret == BCME_UNSUPPORTED) {
                        /* Don't fail the initialization, lets just
                         * fall back to the original method
                         */
                        WL_ERR(("WL_HOST_BAND_MGMT defined, "
                                "but roam_band iovar not supported \n"));
                } else {
                        WL_ERR(("roam_band failed. ret=%d", ret));
                        err = -1;
                }
        }
#endif /* WL_HOST_BAND_MGMT */
#if defined(WES_SUPPORT)
        /* Reset WES mode to 0 */
        wes_mode = 0;
#endif // endif
#ifdef WBTEXT
        /* when wifi up, set roam_prof to default value */
        if (dhd->wbtext_support) {
                if (dhd->op_mode & DHD_FLAG_STA_MODE) {
                        wl_cfg80211_wbtext_set_default(ndev);
                        wl_cfg80211_wbtext_clear_bssid_list(cfg);
                }
        }
#endif /* WBTEXT */
#ifdef WLTDLS
        if (wldev_iovar_getint(ndev, "tdls_enable", &tdls) == 0) {
                WL_DBG(("TDLS supported in fw\n"));
                cfg->tdls_supported = true;
        }
#endif /* WLTDLS */
        INIT_DELAYED_WORK(&cfg->pm_enable_work, wl_cfg80211_work_handler);
        wl_set_drv_status(cfg, READY, ndev);
        return err;
}

static s32 __wl_cfg80211_down(struct bcm_cfg80211 *cfg)
{
        s32 err = 0;
        unsigned long flags;
        struct net_info *iter, *next;
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
#if defined(WL_CFG80211) && (defined(WL_ENABLE_P2P_IF) || \
        defined(WL_NEWCFG_PRIVCMD_SUPPORT)) && !defined(PLATFORM_SLP)
        struct net_device *p2p_net = cfg->p2p_net;
#endif /* WL_CFG80211 && (WL_ENABLE_P2P_IF || WL_NEWCFG_PRIVCMD_SUPPORT) && !PLATFORM_SLP */
        dhd_pub_t *dhd =  (dhd_pub_t *)(cfg->pub);
        WL_INFORM_MEM(("cfg80211 down\n"));

        /* Check if cfg80211 interface is already down */
        if (!wl_get_drv_status(cfg, READY, ndev)) {
                WL_DBG(("cfg80211 interface is already down\n"));
                return err;     /* it is even not ready */
        }

#ifdef SHOW_LOGTRACE
        /* Stop the event logging */
        wl_add_remove_eventmsg(ndev, WLC_E_TRACE, FALSE);
#endif /* SHOW_LOGTRACE */

        /* clear vendor OUI list */
        wl_vndr_ies_clear_vendor_oui_list(cfg);

        /* Delete pm_enable_work */
        wl_add_remove_pm_enable_work(cfg, WL_PM_WORKQ_DEL);

        if (cfg->p2p_supported) {
                wl_clr_p2p_status(cfg, GO_NEG_PHASE);
#ifdef PROP_TXSTATUS_VSDB
#if defined(BCMSDIO)
                if (wl_cfgp2p_vif_created(cfg)) {
                        bool enabled = false;
                        dhd_wlfc_get_enable(dhd, &enabled);
                        if (enabled && cfg->wlfc_on && dhd->op_mode != DHD_FLAG_HOSTAP_MODE &&
                                dhd->op_mode != DHD_FLAG_IBSS_MODE) {
                                dhd_wlfc_deinit(dhd);
                                cfg->wlfc_on = false;
                        }
                }
#endif /* defined(BCMSDIO) */
#endif /* PROP_TXSTATUS_VSDB */
        }

        if (!dhd_download_fw_on_driverload) {
                /* For built-in drivers/other drivers that do reset on
                 * "ifconfig <primary_iface> down", cleanup any left
                 * over interfaces
                 */
                wl_cfg80211_cleanup_virtual_ifaces(cfg, false);
        }
        /* Clear used mac addr mask */
        cfg->vif_macaddr_mask = 0;

#ifdef WL_NAN
        err = wl_cfgnan_disable(cfg, NAN_BUS_IS_DOWN);
        if (err != BCME_OK) {
                WL_ERR(("failed to disable nan, error[%d]\n", err));
        }
#endif /* WL_NAN */

        if (dhd->up)
        {
                /* If primary BSS is operational (for e.g SoftAP), bring it down */
                if (wl_cfg80211_bss_isup(ndev, 0)) {
                        if (wl_cfg80211_bss_up(cfg, ndev, 0, 0) < 0)
                                WL_ERR(("BSS down failed \n"));
                }

                /* clear all the security setting on primary Interface */
                wl_cfg80211_clear_security(cfg);
        }

#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
        for_each_ndev(cfg, iter, next) {
                if (iter->ndev) /* p2p discovery iface is null */
                        wl_set_drv_status(cfg, SCAN_ABORTING, iter->ndev);
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif

#ifdef P2P_LISTEN_OFFLOADING
        wl_cfg80211_p2plo_deinit(cfg);
#endif /* P2P_LISTEN_OFFLOADING */

        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
        if (cfg->scan_request) {
                wl_notify_scan_done(cfg, true);
                cfg->scan_request = NULL;
        }
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
        for_each_ndev(cfg, iter, next) {
                /* p2p discovery iface ndev ptr could be null */
                if (iter->ndev == NULL)
                        continue;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0))
                WL_INFORM_MEM(("wl_cfg80211_down. connection state bit status: [%u:%u:%u:%u]\n",
                        wl_get_drv_status(cfg, CONNECTING, ndev),
                        wl_get_drv_status(cfg, CONNECTED, ndev),
                        wl_get_drv_status(cfg, DISCONNECTING, ndev),
                        wl_get_drv_status(cfg, NESTED_CONNECT, ndev)));

                if ((iter->ndev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION) &&
                        wl_get_drv_status(cfg, CONNECTED, iter->ndev)) {
                        CFG80211_DISCONNECTED(iter->ndev, 0, NULL, 0, false, GFP_KERNEL);
                }

                if ((iter->ndev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION) &&
                        wl_get_drv_status(cfg, CONNECTING, iter->ndev)) {
                        u8 *latest_bssid = wl_read_prof(cfg, ndev, WL_PROF_LATEST_BSSID);
                        struct wiphy *wiphy = bcmcfg_to_wiphy(cfg);
                        struct wireless_dev *wdev = ndev->ieee80211_ptr;
                        struct cfg80211_bss *bss = CFG80211_GET_BSS(wiphy, NULL, latest_bssid,
                                wdev->ssid, wdev->ssid_len);

                        prhex("bssid:", (uchar *)latest_bssid, ETHER_ADDR_LEN);
                        prhex("ssid:", (uchar *)wdev->ssid, wdev->ssid_len);
                        if (!bss) {
                                WL_DBG(("null bss\n"));
                        }

                        CFG80211_CONNECT_RESULT(ndev,
                                        latest_bssid, bss, NULL, 0, NULL, 0,
                                        WLAN_STATUS_UNSPECIFIED_FAILURE,
                                        GFP_KERNEL);
                }
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0)) */
                wl_clr_drv_status(cfg, READY, iter->ndev);
                wl_clr_drv_status(cfg, SCANNING, iter->ndev);
                wl_clr_drv_status(cfg, SCAN_ABORTING, iter->ndev);
                wl_clr_drv_status(cfg, CONNECTING, iter->ndev);
                wl_clr_drv_status(cfg, CONNECTED, iter->ndev);
                wl_clr_drv_status(cfg, DISCONNECTING, iter->ndev);
                wl_clr_drv_status(cfg, AP_CREATED, iter->ndev);
                wl_clr_drv_status(cfg, AP_CREATING, iter->ndev);
                wl_clr_drv_status(cfg, NESTED_CONNECT, iter->ndev);
                wl_clr_drv_status(cfg, CFG80211_CONNECT, iter->ndev);
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif
        bcmcfg_to_prmry_ndev(cfg)->ieee80211_ptr->iftype =
                NL80211_IFTYPE_STATION;
#if defined(WL_CFG80211) && (defined(WL_ENABLE_P2P_IF) || \
        defined(WL_NEWCFG_PRIVCMD_SUPPORT)) && !defined(PLATFORM_SLP)
#ifdef SUPPORT_DEEP_SLEEP
        if (!trigger_deep_sleep)
#endif /* SUPPORT_DEEP_SLEEP */
                if (p2p_net)
                        dev_close(p2p_net);
#endif /* WL_CFG80211 && (WL_ENABLE_P2P_IF || WL_NEWCFG_PRIVCMD_SUPPORT)&& !PLATFORM_SLP */

        /* Avoid deadlock from wl_cfg80211_down */
        if (!dhd_download_fw_on_driverload) {
                mutex_unlock(&cfg->usr_sync);
                wl_destroy_event_handler(cfg);
                mutex_lock(&cfg->usr_sync);
        }

        wl_flush_eq(cfg);
        wl_link_down(cfg);
        if (cfg->p2p_supported) {
                if (timer_pending(&cfg->p2p->listen_timer))
                        del_timer_sync(&cfg->p2p->listen_timer);
                wl_cfgp2p_down(cfg);
        }

        if (timer_pending(&cfg->scan_timeout)) {
                del_timer_sync(&cfg->scan_timeout);
        }

        wl_cfg80211_clear_mgmt_vndr_ies(cfg);
        DHD_OS_SCAN_WAKE_UNLOCK((dhd_pub_t *)(cfg->pub));

        dhd_monitor_uninit();
#ifdef WLAIBSS_MCHAN
        bcm_cfg80211_del_ibss_if(cfg->wdev->wiphy, cfg->ibss_cfgdev);
#endif /* WLAIBSS_MCHAN */

#ifdef WL11U
        /* Clear interworking element. */
        if (cfg->wl11u) {
                cfg->wl11u = FALSE;
        }
#endif /* WL11U */

#ifdef CUSTOMER_HW4_DEBUG
        if (wl_scan_timeout_dbg_enabled) {
                wl_scan_timeout_dbg_clear();
        }
#endif /* CUSTOMER_HW4_DEBUG */

        cfg->disable_roam_event = false;

        DNGL_FUNC(dhd_cfg80211_down, (cfg));

#ifdef DHD_IFDEBUG
        /* Printout all netinfo entries */
        wl_probe_wdev_all(cfg);
#endif /* DHD_IFDEBUG */

        return err;
}

s32 wl_cfg80211_up(struct net_device *net)
{
        struct bcm_cfg80211 *cfg;
        s32 err = 0;
        int val = 1;
        dhd_pub_t *dhd;
#ifdef DISABLE_PM_BCNRX
        s32 interr = 0;
        uint param = 0;
        s8 iovbuf[WLC_IOCTL_SMLEN];
#endif /* DISABLE_PM_BCNRX */

        WL_DBG(("In\n"));
        cfg = wl_get_cfg(net);

        if ((err = wldev_ioctl_get(bcmcfg_to_prmry_ndev(cfg), WLC_GET_VERSION, &val,
                sizeof(int)) < 0)) {
                WL_ERR(("WLC_GET_VERSION failed, err=%d\n", err));
                return err;
        }
        val = dtoh32(val);
        if (val != WLC_IOCTL_VERSION && val != 1) {
                WL_ERR(("Version mismatch, please upgrade. Got %d, expected %d or 1\n",
                        val, WLC_IOCTL_VERSION));
                return BCME_VERSION;
        }
        ioctl_version = val;
        WL_TRACE(("WLC_GET_VERSION=%d\n", ioctl_version));

        mutex_lock(&cfg->usr_sync);
        dhd = (dhd_pub_t *)(cfg->pub);
        if (!(dhd->op_mode & DHD_FLAG_HOSTAP_MODE)) {
                err = wl_cfg80211_attach_post(bcmcfg_to_prmry_ndev(cfg));
                if (unlikely(err)) {
                        mutex_unlock(&cfg->usr_sync);
                        return err;
                }
        }
#if defined(BCMSUP_4WAY_HANDSHAKE)
        if (dhd->fw_4way_handshake) {
                /* This is a hacky method to indicate fw 4WHS support and
                 * is used only for kernels (kernels < 3.14). For newer
                 * kernels, we would be using vendor extn. path to advertise
                 * FW based 4-way handshake feature support.
                 */
                cfg->wdev->wiphy->features |= NL80211_FEATURE_FW_4WAY_HANDSHAKE;
        }
#endif /* BCMSUP_4WAY_HANDSHAKE */
        err = __wl_cfg80211_up(cfg);
        if (unlikely(err))
                WL_ERR(("__wl_cfg80211_up failed\n"));

#ifdef ROAM_CHANNEL_CACHE
        if (init_roam_cache(cfg, ioctl_version) == 0) {
                /* Enable support for Roam cache */
                cfg->rcc_enabled = true;
                WL_ERR(("Roam channel cache enabled\n"));
        } else {
                WL_ERR(("Failed to enable RCC.\n"));
        }
#endif /* ROAM_CHANNEL_CACHE */

#if defined(FORCE_DISABLE_SINGLECORE_SCAN)
        dhd_force_disable_singlcore_scan(dhd);
#endif /* FORCE_DISABLE_SINGLECORE_SCAN */

        /* IOVAR configurations with 'up' condition */
#ifdef DISABLE_PM_BCNRX
        interr = wldev_iovar_setbuf(net, "pm_bcnrx", (char *)&param, sizeof(param), iovbuf,
                        sizeof(iovbuf), &cfg->ioctl_buf_sync);

        if (unlikely(interr)) {
                WL_ERR(("Set pm_bcnrx returned (%d)\n", interr));
        }
#endif /* DISABLE_PM_BCNRX */

        mutex_unlock(&cfg->usr_sync);

#ifdef WLAIBSS_MCHAN
        bcm_cfg80211_add_ibss_if(cfg->wdev->wiphy, IBSS_IF_NAME);
#endif /* WLAIBSS_MCHAN */

#ifdef DUAL_STA_STATIC_IF
        /* Static Interface support is currently supported only for STA only builds (without P2P) */
        wl_cfg80211_create_iface(cfg->wdev->wiphy, WL_IF_TYPE_STA, NULL, "wlan%d");
#endif /* DUAL_STA_STATIC_IF */

#ifdef SUPPORT_CUSTOM_SET_CAC
        cfg->enable_cac = 0;
#endif  /* SUPPORT_CUSTOM_SET_CAC */

        return err;
}

/* Private Event to Supplicant with indication that chip hangs */
int wl_cfg80211_hang(struct net_device *dev, u16 reason)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhd;
#if defined(SOFTAP_SEND_HANGEVT)
        /* specifc mac address used for hang event */
        uint8 hang_mac[ETHER_ADDR_LEN] = {0x11, 0x11, 0x11, 0x11, 0x11, 0x11};
#endif /* SOFTAP_SEND_HANGEVT */
        if (!cfg) {
                return BCME_ERROR;
        }

        RETURN_EIO_IF_NOT_UP(cfg);

        dhd = (dhd_pub_t *)(cfg->pub);
#if defined(DHD_HANG_SEND_UP_TEST)
        if (dhd->req_hang_type) {
                WL_ERR(("%s, Clear HANG test request 0x%x\n",
                        __FUNCTION__, dhd->req_hang_type));
                dhd->req_hang_type = 0;
        }
#endif /* DHD_HANG_SEND_UP_TEST */
        if ((dhd->hang_reason <= HANG_REASON_MASK) || (dhd->hang_reason >= HANG_REASON_MAX)) {
                WL_ERR(("%s, Invalid hang reason 0x%x\n",
                        __FUNCTION__, dhd->hang_reason));
                dhd->hang_reason = HANG_REASON_UNKNOWN;
        }
#ifdef DHD_USE_EXTENDED_HANG_REASON
        if (dhd->hang_reason != 0) {
                reason = dhd->hang_reason;
        }
#endif /* DHD_USE_EXTENDED_HANG_REASON */
        WL_ERR(("In : chip crash eventing, reason=0x%x\n", (uint32)(dhd->hang_reason)));

        wl_add_remove_pm_enable_work(cfg, WL_PM_WORKQ_DEL);
#ifdef SOFTAP_SEND_HANGEVT
        if (dhd->op_mode & DHD_FLAG_HOSTAP_MODE) {
                cfg80211_del_sta(dev, hang_mac, GFP_ATOMIC);
        } else
#endif /* SOFTAP_SEND_HANGEVT */
        {
                if (dhd->up == TRUE) {
#ifdef WL_CFGVENDOR_SEND_HANG_EVENT
                        wl_cfgvendor_send_hang_event(dev, reason,
                                        dhd->hang_info, dhd->hang_info_cnt);
#else
                        CFG80211_DISCONNECTED(dev, reason, NULL, 0, false, GFP_KERNEL);
#endif /* WL_CFGVENDOR_SEND_HANG_EVENT */
                }
        }
        if (cfg != NULL) {
                wl_link_down(cfg);
        }
        return 0;
}

s32 wl_cfg80211_down(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        s32 err = BCME_ERROR;

        WL_DBG(("In\n"));

        if (cfg) {
                mutex_lock(&cfg->usr_sync);
                err = __wl_cfg80211_down(cfg);
                mutex_unlock(&cfg->usr_sync);
        }

        return err;
}

void
wl_cfg80211_sta_ifdown(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        WL_DBG(("In\n"));

        if (cfg) {
                if (cfg->scan_request) {
                        wl_notify_scan_done(cfg, true);
                        cfg->scan_request = NULL;
                }
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0))
                if ((dev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION) &&
                        wl_get_drv_status(cfg, CONNECTED, dev)) {
                        CFG80211_DISCONNECTED(dev, 0, NULL, 0, false, GFP_KERNEL);
                }
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 14, 0)) */
        }
}

static void *wl_read_prof(struct bcm_cfg80211 *cfg, struct net_device *ndev, s32 item)
{
        unsigned long flags;
        void *rptr = NULL;
        struct wl_profile *profile = wl_get_profile_by_netdev(cfg, ndev);

        if (!profile)
                return NULL;
        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
        switch (item) {
        case WL_PROF_SEC:
                rptr = &profile->sec;
                break;
        case WL_PROF_ACT:
                rptr = &profile->active;
                break;
        case WL_PROF_BSSID:
                rptr = profile->bssid;
                break;
        case WL_PROF_SSID:
                rptr = &profile->ssid;
                break;
        case WL_PROF_CHAN:
                rptr = &profile->channel;
                break;
        case WL_PROF_LATEST_BSSID:
                rptr = profile->latest_bssid;
                break;
        }
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);
        if (!rptr)
                WL_ERR(("invalid item (%d)\n", item));
        return rptr;
}

static s32
wl_update_prof(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const wl_event_msg_t *e, const void *data, s32 item)
{
        s32 err = 0;
        const struct wlc_ssid *ssid;
        unsigned long flags;
        struct wl_profile *profile = wl_get_profile_by_netdev(cfg, ndev);

        if (!profile)
                return WL_INVALID;
        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
        switch (item) {
        case WL_PROF_SSID:
                ssid = (const wlc_ssid_t *) data;
                memset(profile->ssid.SSID, 0,
                        sizeof(profile->ssid.SSID));
                profile->ssid.SSID_len = MIN(ssid->SSID_len, DOT11_MAX_SSID_LEN);
                memcpy(profile->ssid.SSID, ssid->SSID, profile->ssid.SSID_len);
                break;
        case WL_PROF_BSSID:
                if (data)
                        memcpy(profile->bssid, data, ETHER_ADDR_LEN);
                else
                        memset(profile->bssid, 0, ETHER_ADDR_LEN);
                break;
        case WL_PROF_SEC:
                memcpy(&profile->sec, data, sizeof(profile->sec));
                break;
        case WL_PROF_ACT:
                profile->active = *(const bool *)data;
                break;
        case WL_PROF_BEACONINT:
                profile->beacon_interval = *(const u16 *)data;
                break;
        case WL_PROF_DTIMPERIOD:
                profile->dtim_period = *(const u8 *)data;
                break;
        case WL_PROF_CHAN:
                profile->channel = *(const u32*)data;
                break;
        case WL_PROF_LATEST_BSSID:
                if (data) {
                        memcpy(profile->latest_bssid, data, ETHER_ADDR_LEN);
                } else {
                        memset(profile->latest_bssid, 0, ETHER_ADDR_LEN);
                }
                break;
        default:
                err = -EOPNOTSUPP;
                break;
        }
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);

        if (err == -EOPNOTSUPP)
                WL_ERR(("unsupported item (%d)\n", item));

        return err;
}

void wl_cfg80211_dbg_level(u32 level)
{
        /*
        * prohibit to change debug level
        * by insmod parameter.
        * eventually debug level will be configured
        * in compile time by using CONFIG_XXX
        */
        /* wl_dbg_level = level; */
}

static bool wl_is_ibssmode(struct bcm_cfg80211 *cfg, struct net_device *ndev)
{
        return wl_get_mode_by_netdev(cfg, ndev) == WL_MODE_IBSS;
}

static __used bool wl_is_ibssstarter(struct bcm_cfg80211 *cfg)
{
        return cfg->ibss_starter;
}

static void wl_rst_ie(struct bcm_cfg80211 *cfg)
{
        struct wl_ie *ie = wl_to_ie(cfg);

        ie->offset = 0;
}

static __used s32 wl_add_ie(struct bcm_cfg80211 *cfg, u8 t, u8 l, u8 *v)
{
        struct wl_ie *ie = wl_to_ie(cfg);
        s32 err = 0;

        if (unlikely(ie->offset + l + 2 > WL_TLV_INFO_MAX)) {
                WL_ERR(("ei crosses buffer boundary\n"));
                return -ENOSPC;
        }
        ie->buf[ie->offset] = t;
        ie->buf[ie->offset + 1] = l;
        memcpy(&ie->buf[ie->offset + 2], v, l);
        ie->offset += l + 2;

        return err;
}

static void wl_update_hidden_ap_ie(wl_bss_info_t *bi, const u8 *ie_stream, u32 *ie_size,
        bool roam)
{
        u8 *ssidie;
        int32 ssid_len = MIN(bi->SSID_len, DOT11_MAX_SSID_LEN);
        int32 remaining_ie_buf_len, available_buffer_len, unused_buf_len;
        /* cfg80211_find_ie defined in kernel returning const u8 */

#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
        ssidie = (u8 *)cfg80211_find_ie(WLAN_EID_SSID, ie_stream, *ie_size);
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif

        /* ERROR out if
         * 1. No ssid IE is FOUND or
         * 2. New ssid length is > what was allocated for existing ssid (as
         * we do not want to overwrite the rest of the IEs) or
         * 3. If in case of erroneous buffer input where ssid length doesnt match the space
         * allocated to it.
         */
        if (!ssidie) {
                return;
        }
        available_buffer_len = ((int)(*ie_size)) - (ssidie + 2 - ie_stream);
        remaining_ie_buf_len = available_buffer_len - (int)ssidie[1];
        unused_buf_len = WL_EXTRA_BUF_MAX - (4 + bi->length + *ie_size);
        if (ssidie[1] > available_buffer_len) {
                WL_ERR_MEM(("%s: skip wl_update_hidden_ap_ie : overflow\n", __FUNCTION__));
                return;
        }

        if (ssidie[1] != ssid_len) {
                if (ssidie[1]) {
                        WL_INFORM_MEM(("%s: Wrong SSID len: %d != %d\n",
                                __FUNCTION__, ssidie[1], bi->SSID_len));
                }
                if ((roam && (ssid_len > ssidie[1])) && (unused_buf_len > ssid_len)) {
                        WL_INFORM_MEM(("Changing the SSID Info.\n"));
                        memmove(ssidie + ssid_len + 2,
                                (ssidie + 2) + ssidie[1],
                                remaining_ie_buf_len);
                        memcpy(ssidie + 2, bi->SSID, ssid_len);
                        *ie_size = *ie_size + ssid_len - ssidie[1];
                        ssidie[1] = ssid_len;
                } else if (ssid_len < ssidie[1]) {
                        WL_ERR_MEM(("%s: Invalid SSID len: %d < %d\n",
                                __FUNCTION__, bi->SSID_len, ssidie[1]));
                }
                return;
        }
        if (*(ssidie + 2) == '\0')
                 memcpy(ssidie + 2, bi->SSID, ssid_len);
        return;
}

static s32 wl_mrg_ie(struct bcm_cfg80211 *cfg, u8 *ie_stream, u16 ie_size)
{
        struct wl_ie *ie = wl_to_ie(cfg);
        s32 err = 0;

        if (unlikely(ie->offset + ie_size > WL_TLV_INFO_MAX)) {
                WL_ERR(("ei_stream crosses buffer boundary\n"));
                return -ENOSPC;
        }
        memcpy(&ie->buf[ie->offset], ie_stream, ie_size);
        ie->offset += ie_size;

        return err;
}

static s32 wl_cp_ie(struct bcm_cfg80211 *cfg, u8 *dst, u16 dst_size)
{
        struct wl_ie *ie = wl_to_ie(cfg);
        s32 err = 0;

        if (unlikely(ie->offset > dst_size)) {
                WL_ERR(("dst_size is not enough\n"));
                return -ENOSPC;
        }
        memcpy(dst, &ie->buf[0], ie->offset);

        return err;
}

static u32 wl_get_ielen(struct bcm_cfg80211 *cfg)
{
        struct wl_ie *ie = wl_to_ie(cfg);

        return ie->offset;
}

static void wl_link_up(struct bcm_cfg80211 *cfg)
{
        cfg->link_up = true;
}

static void wl_link_down(struct bcm_cfg80211 *cfg)
{
        struct wl_connect_info *conn_info = wl_to_conn(cfg);

        WL_DBG(("In\n"));
        cfg->link_up = false;
        conn_info->req_ie_len = 0;
        conn_info->resp_ie_len = 0;
}

static unsigned long wl_lock_eq(struct bcm_cfg80211 *cfg)
{
        unsigned long flags;

        spin_lock_irqsave(&cfg->eq_lock, flags);
        return flags;
}

static void wl_unlock_eq(struct bcm_cfg80211 *cfg, unsigned long flags)
{
        spin_unlock_irqrestore(&cfg->eq_lock, flags);
}

static void wl_init_eq_lock(struct bcm_cfg80211 *cfg)
{
        spin_lock_init(&cfg->eq_lock);
}

static void wl_delay(u32 ms)
{
        if (in_atomic() || (ms < jiffies_to_msecs(1))) {
                OSL_DELAY(ms*1000);
        } else {
                OSL_SLEEP(ms);
        }
}

s32 wl_cfg80211_get_p2p_dev_addr(struct net_device *net, struct ether_addr *p2pdev_addr)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(net);
        struct ether_addr primary_mac;
        if (!cfg->p2p)
                return -1;
        if (!p2p_is_on(cfg)) {
                get_primary_mac(cfg, &primary_mac);
                wl_cfgp2p_generate_bss_mac(cfg, &primary_mac);
                memcpy((void *)&p2pdev_addr, (void *)&primary_mac, ETHER_ADDR_LEN);
        } else {
                memcpy(p2pdev_addr->octet, wl_to_p2p_bss_macaddr(cfg, P2PAPI_BSSCFG_DEVICE).octet,
                        ETHER_ADDR_LEN);
        }

        return 0;
}
s32 wl_cfg80211_set_p2p_noa(struct net_device *net, char* buf, int len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(net);

        return wl_cfgp2p_set_p2p_noa(cfg, net, buf, len);
}

s32 wl_cfg80211_get_p2p_noa(struct net_device *net, char* buf, int len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(net);

        return wl_cfgp2p_get_p2p_noa(cfg, net, buf, len);
}

s32 wl_cfg80211_set_p2p_ps(struct net_device *net, char* buf, int len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(net);

        return wl_cfgp2p_set_p2p_ps(cfg, net, buf, len);
}

s32 wl_cfg80211_set_p2p_ecsa(struct net_device *net, char* buf, int len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(net);

        return wl_cfgp2p_set_p2p_ecsa(cfg, net, buf, len);
}

s32 wl_cfg80211_increase_p2p_bw(struct net_device *net, char* buf, int len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(net);

        return wl_cfgp2p_increase_p2p_bw(cfg, net, buf, len);
}

#ifdef P2PLISTEN_AP_SAMECHN
s32 wl_cfg80211_set_p2p_resp_ap_chn(struct net_device *net, s32 enable)
{
        s32 ret = wldev_iovar_setint(net, "p2p_resp_ap_chn", enable);

        if ((ret == 0) && enable) {
                /* disable PM for p2p responding on infra AP channel */
                s32 pm = PM_OFF;

                ret = wldev_ioctl_set(net, WLC_SET_PM, &pm, sizeof(pm));
        }

        return ret;
}
#endif /* P2PLISTEN_AP_SAMECHN */

s32 wl_cfg80211_channel_to_freq(u32 channel)
{
        int freq = 0;

#if LINUX_VERSION_CODE == KERNEL_VERSION(2, 6, 38) && !defined(WL_COMPAT_WIRELESS)
        freq = ieee80211_channel_to_frequency(channel);
#else
        {
                u16 band = 0;
                if (channel <= CH_MAX_2G_CHANNEL)
                        band = NL80211_BAND_2GHZ;
                else
                        band = NL80211_BAND_5GHZ;
                freq = ieee80211_channel_to_frequency(channel, band);
        }
#endif // endif
        return freq;
}

#ifdef WLTDLS
static s32
wl_tdls_event_handler(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        const wl_event_msg_t *e, void *data) {

        struct net_device *ndev = NULL;
        u32 reason = ntoh32(e->reason);
        s8 *msg = NULL;

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);

        switch (reason) {
        case WLC_E_TDLS_PEER_DISCOVERED :
                msg = " TDLS PEER DISCOVERD ";
                break;
        case WLC_E_TDLS_PEER_CONNECTED :
                if (cfg->tdls_mgmt_frame) {
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 18, 0))
                        cfg80211_rx_mgmt(cfgdev, cfg->tdls_mgmt_freq, 0,
                                        cfg->tdls_mgmt_frame, cfg->tdls_mgmt_frame_len, 0);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 12, 0))
                        cfg80211_rx_mgmt(cfgdev, cfg->tdls_mgmt_freq, 0,
                                        cfg->tdls_mgmt_frame, cfg->tdls_mgmt_frame_len, 0,
                                        GFP_ATOMIC);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 4, 0)) || \
                        defined(WL_COMPAT_WIRELESS)
                        cfg80211_rx_mgmt(cfgdev, cfg->tdls_mgmt_freq, 0,
                                        cfg->tdls_mgmt_frame, cfg->tdls_mgmt_frame_len,
                                        GFP_ATOMIC);
#else
                        cfg80211_rx_mgmt(cfgdev, cfg->tdls_mgmt_freq,
                                        cfg->tdls_mgmt_frame, cfg->tdls_mgmt_frame_len, GFP_ATOMIC);

#endif /* LINUX_VERSION >= VERSION(3, 18,0) || WL_COMPAT_WIRELESS */
                }
                msg = " TDLS PEER CONNECTED ";
#ifdef SUPPORT_SET_CAC
                /* TDLS connect reset CAC */
                wl_cfg80211_set_cac(cfg, 0);
#endif /* SUPPORT_SET_CAC */
                break;
        case WLC_E_TDLS_PEER_DISCONNECTED :
                if (cfg->tdls_mgmt_frame) {
                        MFREE(cfg->osh, cfg->tdls_mgmt_frame, cfg->tdls_mgmt_frame_len);
                        cfg->tdls_mgmt_frame = NULL;
                        cfg->tdls_mgmt_frame_len = 0;
                        cfg->tdls_mgmt_freq = 0;
                }
                msg = "TDLS PEER DISCONNECTED ";
#ifdef SUPPORT_SET_CAC
                /* TDLS disconnec, set CAC */
                wl_cfg80211_set_cac(cfg, 1);
#endif /* SUPPORT_SET_CAC */
                break;
        }
        if (msg) {
                WL_ERR(("%s: " MACDBG " on %s ndev\n", msg, MAC2STRDBG((const u8*)(&e->addr)),
                        (bcmcfg_to_prmry_ndev(cfg) == ndev) ? "primary" : "secondary"));
        }
        return 0;

}
#endif  /* WLTDLS */

#if (LINUX_VERSION_CODE > KERNEL_VERSION(3, 2, 0)) || defined(WL_COMPAT_WIRELESS)
#if (defined(CONFIG_ARCH_MSM) && defined(TDLS_MGMT_VERSION2)) || (LINUX_VERSION_CODE < \
        KERNEL_VERSION(3, 16, 0) && LINUX_VERSION_CODE >= KERNEL_VERSION(3, 15, 0))
static s32
wl_cfg80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
        u8 *peer, u8 action_code, u8 dialog_token, u16 status_code,
        u32 peer_capability, const u8 *buf, size_t len)
#elif ((LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0)) && \
                (LINUX_VERSION_CODE < KERNEL_VERSION(3, 18, 0)))
static s32 wl_cfg80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
        const u8 *peer, u8 action_code, u8 dialog_token, u16 status_code,
        u32 peer_capability, const u8 *buf, size_t len)
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 18, 0))
static s32 wl_cfg80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
       const u8 *peer, u8 action_code, u8 dialog_token, u16 status_code,
       u32 peer_capability, bool initiator, const u8 *buf, size_t len)
#else /* CONFIG_ARCH_MSM && TDLS_MGMT_VERSION2 */
static s32
wl_cfg80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
        u8 *peer, u8 action_code, u8 dialog_token, u16 status_code,
        const u8 *buf, size_t len)
#endif /* CONFIG_ARCH_MSM && TDLS_MGMT_VERSION2 */
{
        s32 ret = 0;
#ifdef WLTDLS
        struct bcm_cfg80211 *cfg;
        tdls_wfd_ie_iovar_t info;
        memset(&info, 0, sizeof(tdls_wfd_ie_iovar_t));
        cfg = wl_get_cfg(dev);

#if defined(CONFIG_ARCH_MSM) && defined(TDLS_MGMT_VERSION2)
        /* Some customer platform back ported this feature from kernel 3.15 to kernel 3.10
         * and that cuases build error
         */
        BCM_REFERENCE(peer_capability);
#endif  /* CONFIG_ARCH_MSM && TDLS_MGMT_VERSION2 */

        switch (action_code) {
                /* We need to set TDLS Wifi Display IE to firmware
                 * using tdls_wfd_ie iovar
                 */
                case WLAN_TDLS_SET_PROBE_WFD_IE:
                        WL_ERR(("%s WLAN_TDLS_SET_PROBE_WFD_IE\n", __FUNCTION__));
                        info.mode = TDLS_WFD_PROBE_IE_TX;
                        memcpy(&info.data, buf, len);
                        info.length = len;
                        break;
                case WLAN_TDLS_SET_SETUP_WFD_IE:
                        WL_ERR(("%s WLAN_TDLS_SET_SETUP_WFD_IE\n", __FUNCTION__));
                        info.mode = TDLS_WFD_IE_TX;
                        memcpy(&info.data, buf, len);
                        info.length = len;
                        break;
                case WLAN_TDLS_SET_WFD_ENABLED:
                        WL_ERR(("%s WLAN_TDLS_SET_MODE_WFD_ENABLED\n", __FUNCTION__));
                        dhd_tdls_set_mode((dhd_pub_t *)(cfg->pub), true);
                        goto out;
                case WLAN_TDLS_SET_WFD_DISABLED:
                        WL_ERR(("%s WLAN_TDLS_SET_MODE_WFD_DISABLED\n", __FUNCTION__));
                        dhd_tdls_set_mode((dhd_pub_t *)(cfg->pub), false);
                        goto out;
                default:
                        WL_ERR(("Unsupported action code : %d\n", action_code));
                        goto out;
        }
        ret = wldev_iovar_setbuf(dev, "tdls_wfd_ie", &info, sizeof(info),
                        cfg->ioctl_buf, WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);

        if (ret) {
                WL_ERR(("tdls_wfd_ie error %d\n", ret));
        }

out:
#endif /* WLTDLS */
        return ret;
}

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 16, 0))
static s32
wl_cfg80211_tdls_oper(struct wiphy *wiphy, struct net_device *dev,
        const u8 *peer, enum nl80211_tdls_operation oper)
#else
static s32
wl_cfg80211_tdls_oper(struct wiphy *wiphy, struct net_device *dev,
        u8 *peer, enum nl80211_tdls_operation oper)
#endif // endif
{
        s32 ret = 0;
#ifdef WLTDLS
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        tdls_iovar_t info;
        dhd_pub_t *dhdp;
        bool tdls_auto_mode = false;
        dhdp = (dhd_pub_t *)(cfg->pub);
        memset(&info, 0, sizeof(tdls_iovar_t));
        if (peer) {
                memcpy(&info.ea, peer, ETHER_ADDR_LEN);
        } else {
                return -1;
        }
        switch (oper) {
        case NL80211_TDLS_DISCOVERY_REQ:
                /* If the discovery request is broadcast then we need to set
                 * info.mode to Tunneled Probe Request
                 */
                if (memcmp(peer, (const uint8 *)BSSID_BROADCAST, ETHER_ADDR_LEN) == 0) {
                        info.mode = TDLS_MANUAL_EP_WFD_TPQ;
                        WL_ERR(("%s TDLS TUNNELED PRBOBE REQUEST\n", __FUNCTION__));
                } else {
                        info.mode = TDLS_MANUAL_EP_DISCOVERY;
                }
                break;
        case NL80211_TDLS_SETUP:
                if (dhdp->tdls_mode == true) {
                        info.mode = TDLS_MANUAL_EP_CREATE;
                        tdls_auto_mode = false;
                        /* Do tear down and create a fresh one */
                        ret = wl_cfg80211_tdls_config(cfg, TDLS_STATE_TEARDOWN, tdls_auto_mode);
                        if (ret < 0) {
                                return ret;
                        }
                } else {
                        tdls_auto_mode = true;
                }
                break;
        case NL80211_TDLS_TEARDOWN:
                info.mode = TDLS_MANUAL_EP_DELETE;
                break;
        default:
                WL_ERR(("Unsupported operation : %d\n", oper));
                goto out;
        }
        /* turn on TDLS */
        ret = wl_cfg80211_tdls_config(cfg, TDLS_STATE_SETUP, tdls_auto_mode);
        if (ret < 0) {
                return ret;
        }
        if (info.mode) {
                ret = wldev_iovar_setbuf(dev, "tdls_endpoint", &info, sizeof(info),
                        cfg->ioctl_buf, WLC_IOCTL_MAXLEN, &cfg->ioctl_buf_sync);
                if (ret) {
                        WL_ERR(("tdls_endpoint error %d\n", ret));
                }
        }
out:
        if (ret) {
                wl_flush_fw_log_buffer(dev, FW_LOGSET_MASK_ALL);
                return -ENOTSUPP;
        }
#endif /* WLTDLS */
        return ret;
}
#endif /* LINUX_VERSION > VERSION(3,2,0) || WL_COMPAT_WIRELESS */

s32 wl_cfg80211_set_wps_p2p_ie(struct net_device *ndev, char *buf, int len,
        enum wl_management_type type)
{
        struct bcm_cfg80211 *cfg;
        s32 ret = 0;
        struct ether_addr primary_mac;
        s32 bssidx = 0;
        s32 pktflag = 0;
        cfg = wl_get_cfg(ndev);

        if (wl_get_drv_status(cfg, AP_CREATING, ndev)) {
                /* Vendor IEs should be set to FW
                 * after SoftAP interface is brought up
                 */
                WL_DBG(("Skipping set IE since AP is not up \n"));
                goto exit;
        } else  if (ndev == bcmcfg_to_prmry_ndev(cfg)) {
                /* Either stand alone AP case or P2P discovery */
                if (wl_get_drv_status(cfg, AP_CREATED, ndev)) {
                        /* Stand alone AP case on primary interface */
                        WL_DBG(("Apply IEs for Primary AP Interface \n"));
                        bssidx = 0;
                } else {
                        if (!cfg->p2p) {
                                /* If p2p not initialized, return failure */
                                WL_ERR(("P2P not initialized \n"));
                                goto exit;
                        }
                        /* P2P Discovery case (p2p listen) */
                        if (!cfg->p2p->on) {
                                /* Turn on Discovery interface */
                                get_primary_mac(cfg, &primary_mac);
                                wl_cfgp2p_generate_bss_mac(cfg, &primary_mac);
                                p2p_on(cfg) = true;
                                ret = wl_cfgp2p_enable_discovery(cfg, ndev, NULL, 0);
                                if (unlikely(ret)) {
                                        WL_ERR(("Enable discovery failed \n"));
                                        goto exit;
                                }
                        }
                        WL_DBG(("Apply IEs for P2P Discovery Iface \n"));
                        ndev = wl_to_p2p_bss_ndev(cfg, P2PAPI_BSSCFG_PRIMARY);
                        bssidx = wl_to_p2p_bss_bssidx(cfg, P2PAPI_BSSCFG_DEVICE);
                }
        } else {
                /* Virtual AP/ P2P Group Interface */
                WL_DBG(("Apply IEs for iface:%s\n", ndev->name));
                bssidx = wl_get_bssidx_by_wdev(cfg, ndev->ieee80211_ptr);
        }

        if (ndev != NULL) {
                switch (type) {
                        case WL_BEACON:
                                pktflag = VNDR_IE_BEACON_FLAG;
                                break;
                        case WL_PROBE_RESP:
                                pktflag = VNDR_IE_PRBRSP_FLAG;
                                break;
                        case WL_ASSOC_RESP:
                                pktflag = VNDR_IE_ASSOCRSP_FLAG;
                                break;
                }
                if (pktflag) {
                        ret = wl_cfg80211_set_mgmt_vndr_ies(cfg,
                                ndev_to_cfgdev(ndev), bssidx, pktflag, buf, len);
                }
        }
exit:
        return ret;
}

#ifdef WL_SUPPORT_AUTO_CHANNEL
static s32
wl_cfg80211_set_auto_channel_scan_state(struct net_device *ndev)
{
        u32 val = 0;
        s32 ret = BCME_ERROR;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);

        if (wl_check_dongle_idle(bcmcfg_to_wiphy(cfg)) != TRUE) {
                WL_ERR(("FW is busy to add interface"));
                return ret;
        }

        /* Set interface up, explicitly. */
        val = 1;

        ret = wldev_ioctl_set(ndev, WLC_UP, (void *)&val, sizeof(val));
        if (ret < 0) {
                WL_ERR(("set interface up failed, error = %d\n", ret));
                goto done;
        }

        /* Stop all scan explicitly, till auto channel selection complete. */
        wl_set_drv_status(cfg, SCANNING, ndev);
        if (cfg->escan_info.ndev == NULL) {
                ret = BCME_OK;
                goto done;
        }

        wl_cfg80211_cancel_scan(cfg);

done:
        return ret;
}

static bool
wl_cfg80211_valid_chanspec_p2p(chanspec_t chanspec)
{
        bool valid = false;
        char chanbuf[CHANSPEC_STR_LEN];

        /* channel 1 to 14 */
        if ((chanspec >= 0x2b01) && (chanspec <= 0x2b0e)) {
                valid = true;
        }
        /* channel 36 to 48 */
        else if ((chanspec >= 0x1b24) && (chanspec <= 0x1b30)) {
                valid = true;
        }
        /* channel 149 to 161 */
        else if ((chanspec >= 0x1b95) && (chanspec <= 0x1ba1)) {
                valid = true;
        }
        else {
                valid = false;
                WL_INFORM_MEM(("invalid P2P chanspec, chanspec = %s\n",
                        wf_chspec_ntoa_ex(chanspec, chanbuf)));
        }

        return valid;
}

s32
wl_cfg80211_get_chanspecs_2g(struct net_device *ndev, void *buf, s32 buflen)
{
        s32 ret = BCME_ERROR;
        struct bcm_cfg80211 *cfg = NULL;
        chanspec_t chanspec = 0;

        cfg = wl_get_cfg(ndev);

        /* Restrict channels to 2.4GHz, 20MHz BW, no SB. */
        chanspec |= (WL_CHANSPEC_BAND_2G | WL_CHANSPEC_BW_20 |
                WL_CHANSPEC_CTL_SB_NONE);
        chanspec = wl_chspec_host_to_driver(chanspec);

        ret = wldev_iovar_getbuf_bsscfg(ndev, "chanspecs", (void *)&chanspec,
                sizeof(chanspec), buf, buflen, 0, &cfg->ioctl_buf_sync);
        if (ret < 0) {
                WL_ERR(("get 'chanspecs' failed, error = %d\n", ret));
        }

        return ret;
}

s32
wl_cfg80211_get_chanspecs_5g(struct net_device *ndev, void *buf, s32 buflen)
{
        u32 channel = 0;
        s32 ret = BCME_ERROR;
        s32 i = 0;
        s32 j = 0;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        wl_uint32_list_t *list = NULL;
        chanspec_t chanspec = 0;

        /* Restrict channels to 5GHz, 20MHz BW, no SB. */
        chanspec |= (WL_CHANSPEC_BAND_5G | WL_CHANSPEC_BW_20 |
                WL_CHANSPEC_CTL_SB_NONE);
        chanspec = wl_chspec_host_to_driver(chanspec);

        ret = wldev_iovar_getbuf_bsscfg(ndev, "chanspecs", (void *)&chanspec,
                sizeof(chanspec), buf, buflen, 0, &cfg->ioctl_buf_sync);
        if (ret < 0) {
                WL_ERR(("get 'chanspecs' failed, error = %d\n", ret));
                goto done;
        }

        list = (wl_uint32_list_t *)buf;
        /* Skip DFS and inavlid P2P channel. */
        for (i = 0, j = 0; i < dtoh32(list->count); i++) {
                chanspec = (chanspec_t) dtoh32(list->element[i]);
                channel = CHSPEC_CHANNEL(chanspec);

                ret = wldev_iovar_getint(ndev, "per_chan_info", &channel);
                if (ret < 0) {
                        WL_ERR(("get 'per_chan_info' failed, error = %d\n", ret));
                        goto done;
                }

                if (CHANNEL_IS_RADAR(channel) ||
                        !(wl_cfg80211_valid_chanspec_p2p(chanspec))) {
                        continue;
                } else {
                        list->element[j] = list->element[i];
                }

                j++;
        }

        list->count = j;

done:
        return ret;
}

static s32
wl_cfg80211_get_best_channel(struct net_device *ndev, void *buf, int buflen,
        int *channel)
{
        s32 ret = BCME_ERROR;
        int chosen = 0;
        int retry = 0;

        /* Start auto channel selection scan. */
        ret = wldev_ioctl_set(ndev, WLC_START_CHANNEL_SEL, NULL, 0);
        if (ret < 0) {
                WL_ERR(("can't start auto channel scan, error = %d\n", ret));
                *channel = 0;
                goto done;
        }

        /* Wait for auto channel selection, worst case possible delay is 5250ms. */
        retry = CHAN_SEL_RETRY_COUNT;

        while (retry--) {
                OSL_SLEEP(CHAN_SEL_IOCTL_DELAY);
                chosen = 0;
                ret = wldev_ioctl_get(ndev, WLC_GET_CHANNEL_SEL, &chosen, sizeof(chosen));
                if ((ret == 0) && (dtoh32(chosen) != 0)) {
                        *channel = (u16)(chosen & 0x00FF);
                        WL_INFORM_MEM(("selected channel = %d\n", *channel));
                        break;
                }
                WL_DBG(("attempt = %d, ret = %d, chosen = %d\n",
                        (CHAN_SEL_RETRY_COUNT - retry), ret, dtoh32(chosen)));
        }

        if (retry <= 0) {
                WL_ERR(("failure, auto channel selection timed out\n"));
                *channel = 0;
                ret = BCME_ERROR;
        }

done:
        return ret;
}

static s32
wl_cfg80211_restore_auto_channel_scan_state(struct net_device *ndev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        /* Clear scan stop driver status. */
        wl_clr_drv_status(cfg, SCANNING, ndev);

        return BCME_OK;
}

s32
wl_cfg80211_get_best_channels(struct net_device *dev, char* cmd, int total_len)
{
        int channel = 0;
        s32 ret = BCME_ERROR;
        u8 *buf = NULL;
        char *pos = cmd;
        struct bcm_cfg80211 *cfg = NULL;
        struct net_device *ndev = NULL;

        memset(cmd, 0, total_len);
        cfg = wl_get_cfg(dev);

        buf = (u8 *)MALLOC(cfg->osh, CHANSPEC_BUF_SIZE);
        if (buf == NULL) {
                WL_ERR(("failed to allocate chanspec buffer\n"));
                return -ENOMEM;
        }

        /*
         * Always use primary interface, irrespective of interface on which
         * command came.
         */
        ndev = bcmcfg_to_prmry_ndev(cfg);

        /*
         * Make sure that FW and driver are in right state to do auto channel
         * selection scan.
         */
        ret = wl_cfg80211_set_auto_channel_scan_state(ndev);
        if (ret < 0) {
                WL_ERR(("can't set auto channel scan state, error = %d\n", ret));
                goto done;
        }

        /* Best channel selection in 2.4GHz band. */
        ret = wl_cfg80211_get_chanspecs_2g(ndev, (void *)buf, CHANSPEC_BUF_SIZE);
        if (ret < 0) {
                WL_ERR(("can't get chanspecs in 2.4GHz, error = %d\n", ret));
                goto done;
        }

        ret = wl_cfg80211_get_best_channel(ndev, (void *)buf, CHANSPEC_BUF_SIZE,
                &channel);
        if (ret < 0) {
                WL_ERR(("can't select best channel scan in 2.4GHz, error = %d\n", ret));
                goto done;
        }

        if (CHANNEL_IS_2G(channel)) {
                channel = ieee80211_channel_to_frequency(channel, NL80211_BAND_2GHZ);
        } else {
                WL_ERR(("invalid 2.4GHz channel, channel = %d\n", channel));
                channel = 0;
        }

        pos += snprintf(pos, total_len, "%04d ", channel);

        /* Best channel selection in 5GHz band. */
        ret = wl_cfg80211_get_chanspecs_5g(ndev, (void *)buf, CHANSPEC_BUF_SIZE);
        if (ret < 0) {
                WL_ERR(("can't get chanspecs in 5GHz, error = %d\n", ret));
                goto done;
        }

        ret = wl_cfg80211_get_best_channel(ndev, (void *)buf, CHANSPEC_BUF_SIZE,
                &channel);
        if (ret < 0) {
                WL_ERR(("can't select best channel scan in 5GHz, error = %d\n", ret));
                goto done;
        }

        if (CHANNEL_IS_5G(channel)) {
                channel = ieee80211_channel_to_frequency(channel, NL80211_BAND_5GHZ);
        } else {
                WL_ERR(("invalid 5GHz channel, channel = %d\n", channel));
                channel = 0;
        }

        pos += snprintf(pos, total_len - (pos - cmd), "%04d ", channel);

        /* Set overall best channel same as 5GHz best channel. */
        pos += snprintf(pos, total_len - (pos - cmd), "%04d ", channel);

done:
        if (NULL != buf) {
                MFREE(cfg->osh, buf, CHANSPEC_BUF_SIZE);
        }

        /* Restore FW and driver back to normal state. */
        ret = wl_cfg80211_restore_auto_channel_scan_state(ndev);
        if (ret < 0) {
                WL_ERR(("can't restore auto channel scan state, error = %d\n", ret));
        }

        return (pos - cmd);
}
#endif /* WL_SUPPORT_AUTO_CHANNEL */

static const struct rfkill_ops wl_rfkill_ops = {
        .set_block = wl_rfkill_set
};

static int wl_rfkill_set(void *data, bool blocked)
{
        struct bcm_cfg80211 *cfg = (struct bcm_cfg80211 *)data;

        WL_DBG(("Enter \n"));
        WL_DBG(("RF %s\n", blocked ? "blocked" : "unblocked"));

        if (!cfg)
                return -EINVAL;

        cfg->rf_blocked = blocked;

        return 0;
}

static int wl_setup_rfkill(struct bcm_cfg80211 *cfg, bool setup)
{
        s32 err = 0;

        WL_DBG(("Enter \n"));
        if (!cfg)
                return -EINVAL;
        if (setup) {
                cfg->rfkill = rfkill_alloc("brcmfmac-wifi",
                        wl_cfg80211_get_parent_dev(),
                        RFKILL_TYPE_WLAN, &wl_rfkill_ops, (void *)cfg);

                if (!cfg->rfkill) {
                        err = -ENOMEM;
                        goto err_out;
                }

                err = rfkill_register(cfg->rfkill);

                if (err)
                        rfkill_destroy(cfg->rfkill);
        } else {
                if (!cfg->rfkill) {
                        err = -ENOMEM;
                        goto err_out;
                }

                rfkill_unregister(cfg->rfkill);
                rfkill_destroy(cfg->rfkill);
        }

err_out:
        return err;
}

#ifdef DEBUGFS_CFG80211
/**
* Format : echo "SCAN:1 DBG:1" > /sys/kernel/debug/dhd/debug_level
* to turn on SCAN and DBG log.
* To turn off SCAN partially, echo "SCAN:0" > /sys/kernel/debug/dhd/debug_level
* To see current setting of debug level,
* cat /sys/kernel/debug/dhd/debug_level
*/
static ssize_t
wl_debuglevel_write(struct file *file, const char __user *userbuf,
        size_t count, loff_t *ppos)
{
        char tbuf[SUBLOGLEVELZ * ARRAYSIZE(sublogname_map)], sublog[SUBLOGLEVELZ];
        char *params, *token, *colon;
        uint i, tokens, log_on = 0;
        size_t minsize = min_t(size_t, (sizeof(tbuf) - 1), count);

        memset(tbuf, 0, sizeof(tbuf));
        memset(sublog, 0, sizeof(sublog));
        if (copy_from_user(&tbuf, userbuf, minsize)) {
                return -EFAULT;
        }

        tbuf[minsize] = '\0';
        params = &tbuf[0];
        colon = strchr(params, '\n');
        if (colon != NULL)
                *colon = '\0';
        while ((token = strsep(&params, " ")) != NULL) {
                memset(sublog, 0, sizeof(sublog));
                if (token == NULL || !*token)
                        break;
                if (*token == '\0')
                        continue;
                colon = strchr(token, ':');
                if (colon != NULL) {
                        *colon = ' ';
                }
                tokens = sscanf(token, "%"S(SUBLOGLEVEL)"s %u", sublog, &log_on);
                if (colon != NULL)
                        *colon = ':';

                if (tokens == 2) {
                                for (i = 0; i < ARRAYSIZE(sublogname_map); i++) {
                                        if (!strncmp(sublog, sublogname_map[i].sublogname,
                                                strlen(sublogname_map[i].sublogname))) {
                                                if (log_on)
                                                        wl_dbg_level |=
                                                        (sublogname_map[i].log_level);
                                                else
                                                        wl_dbg_level &=
                                                        ~(sublogname_map[i].log_level);
                                        }
                                }
                } else
                        WL_ERR(("%s: can't parse '%s' as a "
                               "SUBMODULE:LEVEL (%d tokens)\n",
                               tbuf, token, tokens));

        }
        return count;
}

static ssize_t
wl_debuglevel_read(struct file *file, char __user *user_buf,
        size_t count, loff_t *ppos)
{
        char *param;
        char tbuf[SUBLOGLEVELZ * ARRAYSIZE(sublogname_map)];
        uint i;
        memset(tbuf, 0, sizeof(tbuf));
        param = &tbuf[0];
        for (i = 0; i < ARRAYSIZE(sublogname_map); i++) {
                param += snprintf(param, sizeof(tbuf) - 1, "%s:%d ",
                        sublogname_map[i].sublogname,
                        (wl_dbg_level & sublogname_map[i].log_level) ? 1 : 0);
        }
        *param = '\n';
        return simple_read_from_buffer(user_buf, count, ppos, tbuf, strlen(&tbuf[0]));

}
static const struct file_operations fops_debuglevel = {
        .open = NULL,
        .write = wl_debuglevel_write,
        .read = wl_debuglevel_read,
        .owner = THIS_MODULE,
        .llseek = NULL,
};

static s32 wl_setup_debugfs(struct bcm_cfg80211 *cfg)
{
        s32 err = 0;
        struct dentry *_dentry;
        if (!cfg)
                return -EINVAL;
        cfg->debugfs = debugfs_create_dir(KBUILD_MODNAME, NULL);
        if (!cfg->debugfs || IS_ERR(cfg->debugfs)) {
                if (cfg->debugfs == ERR_PTR(-ENODEV))
                        WL_ERR(("Debugfs is not enabled on this kernel\n"));
                else
                        WL_ERR(("Can not create debugfs directory\n"));
                cfg->debugfs = NULL;
                goto exit;

        }
        _dentry = debugfs_create_file("debug_level", S_IRUSR | S_IWUSR,
                cfg->debugfs, cfg, &fops_debuglevel);
        if (!_dentry || IS_ERR(_dentry)) {
                WL_ERR(("failed to create debug_level debug file\n"));
                wl_free_debugfs(cfg);
        }
exit:
        return err;
}
static s32 wl_free_debugfs(struct bcm_cfg80211 *cfg)
{
        if (!cfg)
                return -EINVAL;
        if (cfg->debugfs)
                debugfs_remove_recursive(cfg->debugfs);
        cfg->debugfs = NULL;
        return 0;
}
#endif /* DEBUGFS_CFG80211 */

struct bcm_cfg80211 *wl_cfg80211_get_bcmcfg(void)
{
        return g_bcmcfg;
}

void wl_cfg80211_set_bcmcfg(struct bcm_cfg80211 *cfg)
{
        g_bcmcfg = cfg;
}

struct device *wl_cfg80211_get_parent_dev(void)
{
        return cfg80211_parent_dev;
}

void wl_cfg80211_set_parent_dev(void *dev)
{
        cfg80211_parent_dev = dev;
}

static void wl_cfg80211_clear_parent_dev(void)
{
        cfg80211_parent_dev = NULL;
}

void get_primary_mac(struct bcm_cfg80211 *cfg, struct ether_addr *mac)
{
        u8 ioctl_buf[WLC_IOCTL_SMLEN];

        if (wldev_iovar_getbuf_bsscfg(bcmcfg_to_prmry_ndev(cfg),
                        "cur_etheraddr", NULL, 0, ioctl_buf, sizeof(ioctl_buf),
                        0, NULL) == BCME_OK) {
                memcpy(mac->octet, ioctl_buf, ETHER_ADDR_LEN);
        } else {
                memset(mac->octet, 0, ETHER_ADDR_LEN);
        }
}
static bool check_dev_role_integrity(struct bcm_cfg80211 *cfg, u32 dev_role)
{
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);
        if (((dev_role == NL80211_IFTYPE_AP) &&
                !(dhd->op_mode & DHD_FLAG_HOSTAP_MODE)) ||
                ((dev_role == NL80211_IFTYPE_P2P_GO) &&
                !(dhd->op_mode & DHD_FLAG_P2P_GO_MODE)))
        {
                WL_ERR(("device role select failed role:%d op_mode:%d \n", dev_role, dhd->op_mode));
                return false;
        }
        return true;
}

int wl_cfg80211_do_driver_init(struct net_device *net)
{
        struct bcm_cfg80211 *cfg = *(struct bcm_cfg80211 **)netdev_priv(net);

        if (!cfg || !cfg->wdev)
                return -EINVAL;

        if (dhd_do_driver_init(cfg->wdev->netdev) < 0)
                return -1;

        return 0;
}

void wl_cfg80211_enable_trace(bool set, u32 level)
{
        if (set)
                wl_dbg_level = level & WL_DBG_LEVEL;
        else
                wl_dbg_level |= (WL_DBG_LEVEL & level);
}
#if defined(WL_SUPPORT_BACKPORTED_KPATCHES) || (LINUX_VERSION_CODE >= KERNEL_VERSION(3, \
        2, 0))
static s32
wl_cfg80211_mgmt_tx_cancel_wait(struct wiphy *wiphy,
        bcm_struct_cfgdev *cfgdev, u64 cookie)
{
        /* CFG80211 checks for tx_cancel_wait callback when ATTR_DURATION
         * is passed with CMD_FRAME. This callback is supposed to cancel
         * the OFFCHANNEL Wait. Since we are already taking care of that
         *  with the tx_mgmt logic, do nothing here.
         */

        return 0;
}
#endif /* WL_SUPPORT_BACKPORTED_PATCHES || KERNEL >= 3.2.0 */

#ifdef WL11U
static bcm_tlv_t *
wl_cfg80211_find_interworking_ie(const u8 *parse, u32 len)
{
        bcm_tlv_t *ie;

/* unfortunately it's too much work to dispose the const cast - bcm_parse_tlvs
 * is used everywhere and changing its prototype to take const qualifier needs
 * a massive change to all its callers...
 */

        if ((ie = bcm_parse_tlvs(parse, len, DOT11_MNG_INTERWORKING_ID))) {
                return ie;
        }
        return NULL;
}

static s32
wl_cfg80211_clear_iw_ie(struct bcm_cfg80211 *cfg, struct net_device *ndev, s32 bssidx)
{
        ie_setbuf_t ie_setbuf;

        WL_DBG(("clear interworking IE\n"));

        memset(&ie_setbuf, 0, sizeof(ie_setbuf_t));

        ie_setbuf.ie_buffer.iecount = htod32(1);
        ie_setbuf.ie_buffer.ie_list[0].ie_data.id = DOT11_MNG_INTERWORKING_ID;
        ie_setbuf.ie_buffer.ie_list[0].ie_data.len = 0;

        return wldev_iovar_setbuf_bsscfg(ndev, "ie", &ie_setbuf, sizeof(ie_setbuf),
                cfg->ioctl_buf, WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync);
}

static s32
wl_cfg80211_add_iw_ie(struct bcm_cfg80211 *cfg, struct net_device *ndev, s32 bssidx, s32 pktflag,
                      uint8 ie_id, uint8 *data, uint8 data_len)
{
        s32 err = BCME_OK;
        s32 buf_len;
        ie_setbuf_t *ie_setbuf;
        ie_getbuf_t ie_getbufp;
        char getbuf[WLC_IOCTL_SMLEN];

        if (ie_id != DOT11_MNG_INTERWORKING_ID) {
                WL_ERR(("unsupported (id=%d)\n", ie_id));
                return BCME_UNSUPPORTED;
        }

        /* access network options (1 octet)  is the mandatory field */
        if (!data || data_len == 0 || data_len > IW_IES_MAX_BUF_LEN) {
                WL_ERR(("wrong interworking IE (len=%d)\n", data_len));
                return BCME_BADARG;
        }

        /* Validate the pktflag parameter */
        if ((pktflag & ~(VNDR_IE_BEACON_FLAG | VNDR_IE_PRBRSP_FLAG |
                        VNDR_IE_ASSOCRSP_FLAG | VNDR_IE_AUTHRSP_FLAG |
                        VNDR_IE_PRBREQ_FLAG | VNDR_IE_ASSOCREQ_FLAG|
                        VNDR_IE_CUSTOM_FLAG))) {
                WL_ERR(("invalid packet flag 0x%x\n", pktflag));
                return BCME_BADARG;
        }

        buf_len = sizeof(ie_setbuf_t) + data_len - 1;

        ie_getbufp.id = DOT11_MNG_INTERWORKING_ID;
        if (wldev_iovar_getbuf_bsscfg(ndev, "ie", (void *)&ie_getbufp,
                        sizeof(ie_getbufp), getbuf, WLC_IOCTL_SMLEN, bssidx, &cfg->ioctl_buf_sync)
                        == BCME_OK) {
                if (!memcmp(&getbuf[TLV_HDR_LEN], data, data_len)) {
                        WL_DBG(("skip to set interworking IE\n"));
                        return BCME_OK;
                }
        }

        /* if already set with previous values, delete it first */
        if (cfg->wl11u) {
                if ((err = wl_cfg80211_clear_iw_ie(cfg, ndev, bssidx)) != BCME_OK) {
                        return err;
                }
        }

        ie_setbuf = (ie_setbuf_t *)MALLOCZ(cfg->osh, buf_len);
        if (!ie_setbuf) {
                WL_ERR(("Error allocating buffer for IE\n"));
                return -ENOMEM;
        }
        strncpy(ie_setbuf->cmd, "add", sizeof(ie_setbuf->cmd));
        ie_setbuf->cmd[sizeof(ie_setbuf->cmd) - 1] = '\0';

        /* Buffer contains only 1 IE */
        ie_setbuf->ie_buffer.iecount = htod32(1);
        /* use VNDR_IE_CUSTOM_FLAG flags for none vendor IE . currently fixed value */
        ie_setbuf->ie_buffer.ie_list[0].pktflag = htod32(pktflag);

        /* Now, add the IE to the buffer */
        ie_setbuf->ie_buffer.ie_list[0].ie_data.id = DOT11_MNG_INTERWORKING_ID;
        ie_setbuf->ie_buffer.ie_list[0].ie_data.len = data_len;
        memcpy((uchar *)&ie_setbuf->ie_buffer.ie_list[0].ie_data.data[0], data, data_len);

        if ((err = wldev_iovar_setbuf_bsscfg(ndev, "ie", ie_setbuf, buf_len,
                        cfg->ioctl_buf, WLC_IOCTL_MAXLEN, bssidx, &cfg->ioctl_buf_sync))
                        == BCME_OK) {
                WL_DBG(("set interworking IE\n"));
                cfg->wl11u = TRUE;
                err = wldev_iovar_setint_bsscfg(ndev, "grat_arp", 1, bssidx);
        }

        MFREE(cfg->osh, ie_setbuf, buf_len);
        return err;
}
#endif /* WL11U */

#ifdef WL_HOST_BAND_MGMT
s32
wl_cfg80211_set_band(struct net_device *ndev, int band)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        int ret = 0;
        char ioctl_buf[50];

        if ((band < WLC_BAND_AUTO) || (band > WLC_BAND_2G)) {
                WL_ERR(("Invalid band\n"));
                return -EINVAL;
        }

        if ((ret = wldev_iovar_setbuf(ndev, "roam_band", &band,
                sizeof(int), ioctl_buf, sizeof(ioctl_buf), NULL)) < 0) {
                WL_ERR(("seting roam_band failed code=%d\n", ret));
                return ret;
        }

        WL_DBG(("Setting band to %d\n", band));
        cfg->curr_band = band;

        return 0;
}
#endif /* WL_HOST_BAND_MGMT */

s32
wl_cfg80211_set_if_band(struct net_device *ndev, int band)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        int ret = 0, wait_cnt;
        char ioctl_buf[32];

        if ((band < WLC_BAND_AUTO) || (band > WLC_BAND_2G)) {
                WL_ERR(("Invalid band\n"));
                return -EINVAL;
        }
        if (wl_get_drv_status(cfg, CONNECTED, ndev)) {
                ret = wldev_ioctl_set(ndev, WLC_DISASSOC, NULL, 0);
                if (ret < 0) {
                        WL_ERR(("WLC_DISASSOC error %d\n", ret));
                        /* continue to set 'if_band' */
                }
                else {
                        /* This is to ensure that 'if_band' iovar is issued only after
                        * disconnection is completed
                        */
                        wait_cnt = WAIT_FOR_DISCONNECT_MAX;
                        while (wl_get_drv_status(cfg, CONNECTED, ndev) && wait_cnt) {
                                WL_DBG(("Wait until disconnected. wait_cnt: %d\n", wait_cnt));
                                wait_cnt--;
                                OSL_SLEEP(50);
                        }
                }
        }
        if ((ret = wldev_iovar_setbuf(ndev, "if_band", &band,
                        sizeof(int), ioctl_buf, sizeof(ioctl_buf), NULL)) < 0) {
                WL_ERR(("seting if_band failed ret=%d\n", ret));
                /* issue 'WLC_SET_BAND' if if_band is not supported */
                if (ret == BCME_UNSUPPORTED) {
                        ret = wldev_set_band(ndev, band);
                        if (ret < 0) {
                                WL_ERR(("seting band failed ret=%d\n", ret));
                        }
                }
        }
        return ret;
}

s32
wl_cfg80211_dfs_ap_move(struct net_device *ndev, char *data, char *command, int total_len)
{
        char ioctl_buf[WLC_IOCTL_SMLEN];
        int err = 0;
        uint32 val = 0;
        chanspec_t chanspec = 0;
        int abort;
        int bytes_written = 0;
        struct wl_dfs_ap_move_status_v2 *status;
        char chanbuf[CHANSPEC_STR_LEN];
        const char *dfs_state_str[DFS_SCAN_S_MAX] = {
                "Radar Free On Channel",
                "Radar Found On Channel",
                "Radar Scan In Progress",
                "Radar Scan Aborted",
                "RSDB Mode switch in Progress For Scan"
        };
        if (ndev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
                bytes_written = snprintf(command, total_len, "AP is not up\n");
                return bytes_written;
        }
        if (!*data) {
                if ((err = wldev_iovar_getbuf(ndev, "dfs_ap_move", NULL, 0,
                                ioctl_buf, sizeof(ioctl_buf), NULL))) {
                        WL_ERR(("setting dfs_ap_move failed with err=%d \n", err));
                        return err;
                }
                status = (struct wl_dfs_ap_move_status_v2 *)ioctl_buf;

                if (status->version != WL_DFS_AP_MOVE_VERSION) {
                        err = BCME_UNSUPPORTED;
                        WL_ERR(("err=%d version=%d\n", err, status->version));
                        return err;
                }

                if (status->move_status != (int8) DFS_SCAN_S_IDLE) {
                        chanspec = wl_chspec_driver_to_host(status->chanspec);
                        if (chanspec != 0 && chanspec != INVCHANSPEC) {
                                wf_chspec_ntoa(chanspec, chanbuf);
                                bytes_written = snprintf(command, total_len,
                                        "AP Target Chanspec %s (0x%x)\n", chanbuf, chanspec);
                        }
                        bytes_written += snprintf(command + bytes_written,
                                        total_len - bytes_written,
                                        "%s\n", dfs_state_str[status->move_status]);
                        return bytes_written;
                } else {
                        bytes_written = snprintf(command, total_len, "dfs AP move in IDLE state\n");
                        return bytes_written;
                }
        }

        abort = bcm_atoi(data);
        if (abort == -1) {
                if ((err = wldev_iovar_setbuf(ndev, "dfs_ap_move", &abort,
                                sizeof(int), ioctl_buf, sizeof(ioctl_buf), NULL)) < 0) {
                        WL_ERR(("seting dfs_ap_move failed with err %d\n", err));
                        return err;
                }
        } else {
                chanspec = wf_chspec_aton(data);
                if (chanspec != 0) {
                        val = wl_chspec_host_to_driver(chanspec);
                        if (val != INVCHANSPEC) {
                                if ((err = wldev_iovar_setbuf(ndev, "dfs_ap_move", &val,
                                        sizeof(int), ioctl_buf, sizeof(ioctl_buf), NULL)) < 0) {
                                        WL_ERR(("seting dfs_ap_move failed with err %d\n", err));
                                        return err;
                                }
                                WL_DBG((" set dfs_ap_move successfull"));
                        } else {
                                err = BCME_USAGE_ERROR;
                        }
                }
        }
        return err;
}

#ifdef WBTEXT
s32
wl_cfg80211_wbtext_set_default(struct net_device *ndev)
{
        char commandp[WLC_IOCTL_SMLEN];
        s32 ret = BCME_OK;
        char *data;

        WL_DBG(("set wbtext to default\n"));

        /* set roam profile */
        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_PROFILE_CONFIG, DEFAULT_WBTEXT_PROFILE_A);
        data = (commandp + strlen(CMD_WBTEXT_PROFILE_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set roam_prof %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_PROFILE_CONFIG, DEFAULT_WBTEXT_PROFILE_B);
        data = (commandp + strlen(CMD_WBTEXT_PROFILE_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set roam_prof %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        /* set RSSI weight */
        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_WEIGHT_CONFIG, DEFAULT_WBTEXT_WEIGHT_RSSI_A);
        data = (commandp + strlen(CMD_WBTEXT_WEIGHT_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_weight_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set weight config %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_WEIGHT_CONFIG, DEFAULT_WBTEXT_WEIGHT_RSSI_B);
        data = (commandp + strlen(CMD_WBTEXT_WEIGHT_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_weight_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set weight config %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        /* set CU weight */
        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_WEIGHT_CONFIG, DEFAULT_WBTEXT_WEIGHT_CU_A);
        data = (commandp + strlen(CMD_WBTEXT_WEIGHT_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_weight_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set weight config %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_WEIGHT_CONFIG, DEFAULT_WBTEXT_WEIGHT_CU_B);
        data = (commandp + strlen(CMD_WBTEXT_WEIGHT_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_weight_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set weight config %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        /* set RSSI table */
        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_TABLE_CONFIG, DEFAULT_WBTEXT_TABLE_RSSI_A);
        data = (commandp + strlen(CMD_WBTEXT_TABLE_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_table_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set RSSI table %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_TABLE_CONFIG, DEFAULT_WBTEXT_TABLE_RSSI_B);
        data = (commandp + strlen(CMD_WBTEXT_TABLE_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_table_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set RSSI table %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        /* set CU table */
        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_TABLE_CONFIG, DEFAULT_WBTEXT_TABLE_CU_A);
        data = (commandp + strlen(CMD_WBTEXT_TABLE_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_table_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set CU table %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        memset(commandp, 0, sizeof(commandp));
        snprintf(commandp, WLC_IOCTL_SMLEN, "%s %s",
                CMD_WBTEXT_TABLE_CONFIG, DEFAULT_WBTEXT_TABLE_CU_B);
        data = (commandp + strlen(CMD_WBTEXT_TABLE_CONFIG) + 1);
        ret = wl_cfg80211_wbtext_table_config(ndev, data, commandp, WLC_IOCTL_SMLEN);
        if (ret != BCME_OK) {
                WL_ERR(("%s: Failed to set CU table %s error = %d\n",
                        __FUNCTION__, data, ret));
                return ret;
        }

        return ret;
}

s32
wl_cfg80211_wbtext_config(struct net_device *ndev, char *data, char *command, int total_len)
{
        uint i = 0;
        long int rssi_lower, roam_trigger;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        wl_roam_prof_band_v2_t *rp;
        int err = -EINVAL, bytes_written = 0;
        size_t len = strlen(data);
        int rp_len = 0;
        u8 ioctl_buf[WLC_IOCTL_MEDLEN];

        data[len] = '\0';
        rp = (wl_roam_prof_band_v2_t *)MALLOCZ(cfg->osh, sizeof(*rp)
                        * WL_MAX_ROAM_PROF_BRACKETS);
        if (unlikely(!rp)) {
                WL_ERR(("%s: failed to allocate memory\n", __func__));
                err =  -ENOMEM;
                goto exit;
        }
        rp->ver = WL_MAX_ROAM_PROF_VER;
        if (*data && (!strncmp(data, "b", 1))) {
                rp->band = WLC_BAND_2G;
        } else if (*data && (!strncmp(data, "a", 1))) {
                rp->band = WLC_BAND_5G;
        } else {
                err = snprintf(command, total_len, "Missing band\n");
                goto exit;
        }
        data++;
        rp->len = 0;
        /* Getting roam profile from fw */
        if ((err = wldev_iovar_getbuf(ndev, "roam_prof", rp, sizeof(*rp),
                ioctl_buf, sizeof(ioctl_buf), NULL))) {
                WL_ERR(("Getting roam_profile failed with err=%d \n", err));
                goto exit;
        }
        memcpy(rp, ioctl_buf, sizeof(*rp) * WL_MAX_ROAM_PROF_BRACKETS);
        /* roam_prof version get */
        if (rp->ver != WL_MAX_ROAM_PROF_VER) {
                WL_ERR(("bad version (=%d) in return data\n", rp->ver));
                err = -EINVAL;
                goto exit;
        }
        if ((rp->len % sizeof(wl_roam_prof_v2_t)) != 0) {
                WL_ERR(("bad length (=%d) in return data\n", rp->len));
                err = -EINVAL;
                goto exit;
        }

        if (!*data) {
                for (i = 0; i < WL_MAX_ROAM_PROF_BRACKETS; i++) {
                        /* printing contents of roam profile data from fw and exits
                         * if code hits any of one of the below condtion. If remaining
                         * length of buffer is less than roam profile size or
                         * if there is no valid entry.
                         */
                        if (((i * sizeof(wl_roam_prof_v2_t)) > rp->len) ||
                                (rp->roam_prof[i].fullscan_period == 0)) {
                                break;
                        }
                        bytes_written += snprintf(command+bytes_written,
                                        total_len - bytes_written,
                                        "RSSI[%d,%d] CU(trigger:%d%%: duration:%ds)\n",
                                        rp->roam_prof[i].roam_trigger, rp->roam_prof[i].rssi_lower,
                                        rp->roam_prof[i].channel_usage,
                                        rp->roam_prof[i].cu_avg_calc_dur);
                }
                err = bytes_written;
                goto exit;
        } else {
                for (i = 0; i < WL_MAX_ROAM_PROF_BRACKETS; i++) {
                        /* reading contents of roam profile data from fw and exits
                         * if code hits any of one of the below condtion, If remaining
                         * length of buffer is less than roam profile size or if there
                         * is no valid entry.
                         */
                        if (((i * sizeof(wl_roam_prof_v2_t)) > rp->len) ||
                                (rp->roam_prof[i].fullscan_period == 0)) {
                                break;
                        }
                }
                /* Do not set roam_prof from upper layer if fw doesn't have 2 rows */
                if (i != 2) {
                        WL_ERR(("FW must have 2 rows to fill roam_prof\n"));
                        err = -EINVAL;
                        goto exit;
                }
                /* setting roam profile to fw */
                data++;
                for (i = 0; i < WL_MAX_ROAM_PROF_BRACKETS; i++) {
                        roam_trigger = simple_strtol(data, &data, 10);
                        if (roam_trigger >= 0) {
                                WL_ERR(("roam trigger[%d] value must be negative\n", i));
                                err = -EINVAL;
                                goto exit;
                        }
                        rp->roam_prof[i].roam_trigger = roam_trigger;
                        data++;
                        rssi_lower = simple_strtol(data, &data, 10);
                        if (rssi_lower >= 0) {
                                WL_ERR(("rssi lower[%d] value must be negative\n", i));
                                err = -EINVAL;
                                goto exit;
                        }
                        rp->roam_prof[i].rssi_lower = rssi_lower;
                        data++;
                        rp->roam_prof[i].channel_usage = simple_strtol(data, &data, 10);
                        data++;
                        rp->roam_prof[i].cu_avg_calc_dur = simple_strtol(data, &data, 10);

                        rp_len += sizeof(wl_roam_prof_v2_t);

                        if (*data == '\0') {
                                break;
                        }
                        data++;
                }
                if (i != 1) {
                        WL_ERR(("Only two roam_prof rows supported.\n"));
                        err = -EINVAL;
                        goto exit;
                }
                rp->len = rp_len;
                if ((err = wldev_iovar_setbuf(ndev, "roam_prof", rp,
                                sizeof(*rp), cfg->ioctl_buf, WLC_IOCTL_MEDLEN,
                                &cfg->ioctl_buf_sync)) < 0) {
                        WL_ERR(("seting roam_profile failed with err %d\n", err));
                }
        }
exit:
        if (rp) {
                MFREE(cfg->osh, rp, sizeof(*rp) * WL_MAX_ROAM_PROF_BRACKETS);
        }
        return err;
}

int wl_cfg80211_wbtext_weight_config(struct net_device *ndev, char *data,
                char *command, int total_len)
{
        int bytes_written = 0, err = -EINVAL, argc = 0;
        char rssi[BUFSZN], band[BUFSZN], weight[BUFSZN];
        char *endptr = NULL;
        wnm_bss_select_weight_cfg_t *bwcfg;
        u8 ioctl_buf[WLC_IOCTL_SMLEN];
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);

        bwcfg = (wnm_bss_select_weight_cfg_t *)MALLOCZ(cfg->osh, sizeof(*bwcfg));
        if (unlikely(!bwcfg)) {
                WL_ERR(("%s: failed to allocate memory\n", __func__));
                err = -ENOMEM;
                goto exit;
        }
        bwcfg->version =  WNM_BSSLOAD_MONITOR_VERSION;
        bwcfg->type = 0;
        bwcfg->weight = 0;

        argc = sscanf(data, "%"S(BUFSZ)"s %"S(BUFSZ)"s %"S(BUFSZ)"s", rssi, band, weight);

        if (!strcasecmp(rssi, "rssi"))
                bwcfg->type = WNM_BSS_SELECT_TYPE_RSSI;
        else if (!strcasecmp(rssi, "cu"))
                bwcfg->type = WNM_BSS_SELECT_TYPE_CU;
        else {
                /* Usage DRIVER WBTEXT_WEIGHT_CONFIG <rssi/cu> <band> <weight> */
                WL_ERR(("%s: Command usage error\n", __func__));
                goto exit;
        }

        if (!strcasecmp(band, "a"))
                bwcfg->band = WLC_BAND_5G;
        else if (!strcasecmp(band, "b"))
                bwcfg->band = WLC_BAND_2G;
        else if (!strcasecmp(band, "all"))
                bwcfg->band = WLC_BAND_ALL;
        else {
                WL_ERR(("%s: Command usage error\n", __func__));
                goto exit;
        }

        if (argc == 2) {
                /* If there is no data after band, getting wnm_bss_select_weight from fw */
                if (bwcfg->band == WLC_BAND_ALL) {
                        WL_ERR(("band option \"all\" is for set only, not get\n"));
                        goto exit;
                }
                if ((err = wldev_iovar_getbuf(ndev, "wnm_bss_select_weight", bwcfg,
                                sizeof(*bwcfg),
                                ioctl_buf, sizeof(ioctl_buf), NULL))) {
                        WL_ERR(("Getting wnm_bss_select_weight failed with err=%d \n", err));
                        goto exit;
                }
                memcpy(bwcfg, ioctl_buf, sizeof(*bwcfg));
                bytes_written = snprintf(command, total_len, "%s %s weight = %d\n",
                        (bwcfg->type == WNM_BSS_SELECT_TYPE_RSSI) ? "RSSI" : "CU",
                        (bwcfg->band == WLC_BAND_2G) ? "2G" : "5G", bwcfg->weight);
                err = bytes_written;
                goto exit;
        } else {
                /* if weight is non integer returns command usage error */
                bwcfg->weight = simple_strtol(weight, &endptr, 0);
                if (*endptr != '\0') {
                        WL_ERR(("%s: Command usage error", __func__));
                        goto exit;
                }
                /* setting weight for iovar wnm_bss_select_weight to fw */
                if ((err = wldev_iovar_setbuf(ndev, "wnm_bss_select_weight", bwcfg,
                                sizeof(*bwcfg),
                                ioctl_buf, sizeof(ioctl_buf), NULL))) {
                        WL_ERR(("Getting wnm_bss_select_weight failed with err=%d\n", err));
                }
        }
exit:
        if (bwcfg) {
                MFREE(cfg->osh, bwcfg, sizeof(*bwcfg));
        }
        return err;
}

/* WBTEXT_TUPLE_MIN_LEN_CHECK :strlen(low)+" "+strlen(high)+" "+strlen(factor) */
#define WBTEXT_TUPLE_MIN_LEN_CHECK 5

int wl_cfg80211_wbtext_table_config(struct net_device *ndev, char *data,
        char *command, int total_len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        int bytes_written = 0, err = -EINVAL;
        char rssi[BUFSZN], band[BUFSZN];
        int btcfg_len = 0, i = 0, parsed_len = 0;
        wnm_bss_select_factor_cfg_t *btcfg;
        size_t slen = strlen(data);
        char *start_addr = NULL;
        u8 ioctl_buf[WLC_IOCTL_SMLEN];

        data[slen] = '\0';
        btcfg = (wnm_bss_select_factor_cfg_t *)MALLOCZ(cfg->osh,
                (sizeof(*btcfg) + sizeof(*btcfg) * WL_FACTOR_TABLE_MAX_LIMIT));
        if (unlikely(!btcfg)) {
                WL_ERR(("%s: failed to allocate memory\n", __func__));
                err = -ENOMEM;
                goto exit;
        }

        btcfg->version = WNM_BSS_SELECT_FACTOR_VERSION;
        btcfg->band = WLC_BAND_AUTO;
        btcfg->type = 0;
        btcfg->count = 0;

        sscanf(data, "%"S(BUFSZ)"s %"S(BUFSZ)"s", rssi, band);

        if (!strcasecmp(rssi, "rssi")) {
                btcfg->type = WNM_BSS_SELECT_TYPE_RSSI;
        }
        else if (!strcasecmp(rssi, "cu")) {
                btcfg->type = WNM_BSS_SELECT_TYPE_CU;
        }
        else {
                WL_ERR(("%s: Command usage error\n", __func__));
                goto exit;
        }

        if (!strcasecmp(band, "a")) {
                btcfg->band = WLC_BAND_5G;
        }
        else if (!strcasecmp(band, "b")) {
                btcfg->band = WLC_BAND_2G;
        }
        else if (!strcasecmp(band, "all")) {
                btcfg->band = WLC_BAND_ALL;
        }
        else {
                WL_ERR(("%s: Command usage, Wrong band\n", __func__));
                goto exit;
        }

        if ((slen - 1) == (strlen(rssi) + strlen(band))) {
                /* Getting factor table using iovar 'wnm_bss_select_table' from fw */
                if ((err = wldev_iovar_getbuf(ndev, "wnm_bss_select_table", btcfg,
                                sizeof(*btcfg),
                                ioctl_buf, sizeof(ioctl_buf), NULL))) {
                        WL_ERR(("Getting wnm_bss_select_table failed with err=%d \n", err));
                        goto exit;
                }
                memcpy(btcfg, ioctl_buf, sizeof(*btcfg));
                memcpy(btcfg, ioctl_buf, (btcfg->count+1) * sizeof(*btcfg));

                bytes_written += snprintf(command + bytes_written, total_len - bytes_written,
                                        "No of entries in table: %d\n", btcfg->count);
                bytes_written += snprintf(command + bytes_written, total_len - bytes_written,
                                "%s factor table\n",
                                (btcfg->type == WNM_BSS_SELECT_TYPE_RSSI) ? "RSSI" : "CU");
                bytes_written += snprintf(command + bytes_written, total_len - bytes_written,
                                        "low\thigh\tfactor\n");
                for (i = 0; i <= btcfg->count-1; i++) {
                        bytes_written += snprintf(command + bytes_written,
                                total_len - bytes_written, "%d\t%d\t%d\n", btcfg->params[i].low,
                                btcfg->params[i].high, btcfg->params[i].factor);
                }
                err = bytes_written;
                goto exit;
        } else {
                memset(btcfg->params, 0, sizeof(wnm_bss_select_factor_params_t)
                                        * WL_FACTOR_TABLE_MAX_LIMIT);
                data += (strlen(rssi) + strlen(band) + 2);
                start_addr = data;
                slen = slen - (strlen(rssi) + strlen(band) + 2);
                for (i = 0; i < WL_FACTOR_TABLE_MAX_LIMIT; i++) {
                        if (parsed_len + WBTEXT_TUPLE_MIN_LEN_CHECK <= slen) {
                                btcfg->params[i].low = simple_strtol(data, &data, 10);
                                data++;
                                btcfg->params[i].high = simple_strtol(data, &data, 10);
                                data++;
                                btcfg->params[i].factor = simple_strtol(data, &data, 10);
                                btcfg->count++;
                                if (*data == '\0') {
                                        break;
                                }
                                data++;
                                parsed_len = data - start_addr;
                        } else {
                                WL_ERR(("%s:Command usage:less no of args\n", __func__));
                                goto exit;
                        }
                }
                btcfg_len = sizeof(*btcfg) + ((btcfg->count) * sizeof(*btcfg));
                if ((err = wldev_iovar_setbuf(ndev, "wnm_bss_select_table", btcfg, btcfg_len,
                                cfg->ioctl_buf, WLC_IOCTL_MEDLEN, &cfg->ioctl_buf_sync)) < 0) {
                        WL_ERR(("seting wnm_bss_select_table failed with err %d\n", err));
                        goto exit;
                }
        }
exit:
        if (btcfg) {
                MFREE(cfg->osh, btcfg,
                        (sizeof(*btcfg) + sizeof(*btcfg) * WL_FACTOR_TABLE_MAX_LIMIT));
        }
        return err;
}

s32
wl_cfg80211_wbtext_delta_config(struct net_device *ndev, char *data, char *command, int total_len)
{
        uint i = 0;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        int err = -EINVAL, bytes_written = 0, argc = 0, val, len = 0;
        char delta[BUFSZN], band[BUFSZN], *endptr = NULL;
        wl_roam_prof_band_v2_t *rp;
        u8 ioctl_buf[WLC_IOCTL_MEDLEN];

        rp = (wl_roam_prof_band_v2_t *)MALLOCZ(cfg->osh, sizeof(*rp)
                        * WL_MAX_ROAM_PROF_BRACKETS);
        if (unlikely(!rp)) {
                WL_ERR(("%s: failed to allocate memory\n", __func__));
                err = -ENOMEM;
                goto exit;
        }

        argc = sscanf(data, "%"S(BUFSZ)"s %"S(BUFSZ)"s", band, delta);
        if (!strcasecmp(band, "a"))
                rp->band = WLC_BAND_5G;
        else if (!strcasecmp(band, "b"))
                rp->band = WLC_BAND_2G;
        else {
                WL_ERR(("%s: Missing band\n", __func__));
                goto exit;
        }
        /* Getting roam profile  from fw */
        if ((err = wldev_iovar_getbuf(ndev, "roam_prof", rp, sizeof(*rp),
                ioctl_buf, sizeof(ioctl_buf), NULL))) {
                WL_ERR(("Getting roam_profile failed with err=%d \n", err));
                goto exit;
        }
        memcpy(rp, ioctl_buf, sizeof(wl_roam_prof_band_v2_t));
        if (rp->ver != WL_MAX_ROAM_PROF_VER) {
                WL_ERR(("bad version (=%d) in return data\n", rp->ver));
                err = -EINVAL;
                goto exit;
        }
        if ((rp->len % sizeof(wl_roam_prof_v2_t)) != 0) {
                WL_ERR(("bad length (=%d) in return data\n", rp->len));
                err = -EINVAL;
                goto exit;
        }

        if (argc == 2) {
                /* if delta is non integer returns command usage error */
                val = simple_strtol(delta, &endptr, 0);
                if (*endptr != '\0') {
                        WL_ERR(("%s: Command usage error", __func__));
                        goto exit;
                }
                for (i = 0; i < WL_MAX_ROAM_PROF_BRACKETS; i++) {
                /*
                 * Checking contents of roam profile data from fw and exits
                 * if code hits below condtion. If remaining length of buffer is
                 * less than roam profile size or if there is no valid entry.
                 */
                        if (((i * sizeof(wl_roam_prof_v2_t)) > rp->len) ||
                                (rp->roam_prof[i].fullscan_period == 0)) {
                                break;
                        }
                        if (rp->roam_prof[i].channel_usage != 0) {
                                rp->roam_prof[i].roam_delta = val;
                        }
                        len += sizeof(wl_roam_prof_v2_t);
                }
        }
        else {
                if (rp->roam_prof[i].channel_usage != 0) {
                        bytes_written = snprintf(command, total_len,
                                "%s Delta %d\n", (rp->band == WLC_BAND_2G) ? "2G" : "5G",
                                rp->roam_prof[0].roam_delta);
                }
                err = bytes_written;
                goto exit;
        }
        rp->len = len;
        if ((err = wldev_iovar_setbuf(ndev, "roam_prof", rp,
                        sizeof(*rp), cfg->ioctl_buf, WLC_IOCTL_MEDLEN,
                        &cfg->ioctl_buf_sync)) < 0) {
                WL_ERR(("seting roam_profile failed with err %d\n", err));
        }
exit :
        if (rp) {
                MFREE(cfg->osh, rp, sizeof(*rp)
                        * WL_MAX_ROAM_PROF_BRACKETS);
        }
        return err;
}
#endif /* WBTEXT */

int wl_cfg80211_scan_stop(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev)
{
        struct net_device *ndev = NULL;
        unsigned long flags;
        int clear_flag = 0;
        int ret = 0;

        WL_TRACE(("Enter\n"));

        if (!cfg || !cfgdev)
                return -EINVAL;

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);

        spin_lock_irqsave(&cfg->cfgdrv_lock, flags);
#ifdef WL_CFG80211_P2P_DEV_IF
        if (cfg->scan_request && cfg->scan_request->wdev == cfgdev) {
#else
        if (cfg->scan_request && cfg->scan_request->dev == cfgdev) {
#endif // endif
                wl_notify_scan_done(cfg, true);
                cfg->scan_request = NULL;
                clear_flag = 1;
        }
        spin_unlock_irqrestore(&cfg->cfgdrv_lock, flags);

        if (clear_flag)
                wl_clr_drv_status(cfg, SCANNING, ndev);

        return ret;
}

bool wl_cfg80211_is_concurrent_mode(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        if ((cfg) && (wl_get_drv_status_all(cfg, CONNECTED) > 1)) {
                return true;
        } else {
                return false;
        }
}

void* wl_cfg80211_get_dhdp(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        return cfg->pub;
}

bool wl_cfg80211_is_p2p_active(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        return (cfg && cfg->p2p);
}

bool wl_cfg80211_is_roam_offload(struct net_device * dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        return (cfg && cfg->roam_offload);
}

bool wl_cfg80211_is_event_from_connected_bssid(struct net_device * dev, const wl_event_msg_t *e,
                int ifidx)
{
        u8 *curbssid = NULL;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if (!cfg) {
                return NULL;
        }
        curbssid = wl_read_prof(cfg, dev, WL_PROF_BSSID);

        if (memcmp(curbssid, &e->addr, ETHER_ADDR_LEN) == 0) {
                return true;
        }
        return false;
}

static void wl_cfg80211_work_handler(struct work_struct * work)
{
        struct bcm_cfg80211 *cfg = NULL;
        struct net_info *iter, *next;
        s32 err = BCME_OK;
        s32 pm = PM_FAST;
        BCM_SET_CONTAINER_OF(cfg, work, struct bcm_cfg80211, pm_enable_work.work);
        WL_DBG(("Enter \n"));
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
        for_each_ndev(cfg, iter, next) {
                /* p2p discovery iface ndev could be null */
                if (iter->ndev) {
                        if (!wl_get_drv_status(cfg, CONNECTED, iter->ndev) ||
                                (wl_get_mode_by_netdev(cfg, iter->ndev) != WL_MODE_BSS &&
                                wl_get_mode_by_netdev(cfg, iter->ndev) != WL_MODE_IBSS))
                                continue;
                        if (iter->ndev) {
                                if ((err = wldev_ioctl_set(iter->ndev, WLC_SET_PM,
                                                &pm, sizeof(pm))) != 0) {
                                        if (err == -ENODEV)
                                                WL_DBG(("%s:netdev not ready\n",
                                                        iter->ndev->name));
                                        else
                                                WL_ERR(("%s:error (%d)\n",
                                                        iter->ndev->name, err));
                                } else
                                        wl_cfg80211_update_power_mode(iter->ndev);
                        }
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif
        DHD_PM_WAKE_UNLOCK(cfg->pub);
}

u8
wl_get_action_category(void *frame, u32 frame_len)
{
        u8 category;
        u8 *ptr = (u8 *)frame;
        if (frame == NULL)
                return DOT11_ACTION_CAT_ERR_MASK;
        if (frame_len < DOT11_ACTION_HDR_LEN)
                return DOT11_ACTION_CAT_ERR_MASK;
        category = ptr[DOT11_ACTION_CAT_OFF];
        WL_DBG(("Action Category: %d\n", category));
        return category;
}

int
wl_get_public_action(void *frame, u32 frame_len, u8 *ret_action)
{
        u8 *ptr = (u8 *)frame;
        if (frame == NULL || ret_action == NULL)
                return BCME_ERROR;
        if (frame_len < DOT11_ACTION_HDR_LEN)
                return BCME_ERROR;
        if (DOT11_ACTION_CAT_PUBLIC != wl_get_action_category(frame, frame_len))
                return BCME_ERROR;
        *ret_action = ptr[DOT11_ACTION_ACT_OFF];
        WL_DBG(("Public Action : %d\n", *ret_action));
        return BCME_OK;
}

#ifdef WLFBT
int
wl_cfg80211_get_fbt_key(struct net_device *dev, uint8 *key, int total_len)
{
        struct bcm_cfg80211 * cfg = wl_get_cfg(dev);
        int bytes_written = -1;

        if (total_len < FBT_KEYLEN) {
                WL_ERR(("%s: Insufficient buffer \n", __FUNCTION__));
                goto end;
        }
        if (cfg) {
                memcpy(key, cfg->fbt_key, FBT_KEYLEN);
                bytes_written = FBT_KEYLEN;
        } else {
                memset(key, 0, FBT_KEYLEN);
                WL_ERR(("%s: Failed to copy KCK and KEK \n", __FUNCTION__));
        }
        prhex("KCK, KEK", (uchar *)key, FBT_KEYLEN);
end:
        return bytes_written;
}
#endif /* WLFBT */

static int
wl_cfg80211_delayed_roam(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        const struct ether_addr *bssid)
{
        s32 err;
        wl_event_msg_t e;

        bzero(&e, sizeof(e));
        e.event_type = cpu_to_be32(WLC_E_ROAM);
        memcpy(&e.addr, bssid, ETHER_ADDR_LEN);
        /* trigger the roam event handler */
        err = wl_notify_roaming_status(cfg, ndev_to_cfgdev(ndev), &e, NULL);

        return err;
}

static s32
wl_cfg80211_parse_vndr_ies(const u8 *parse, u32 len,
    struct parsed_vndr_ies *vndr_ies)
{
        s32 err = BCME_OK;
        const vndr_ie_t *vndrie;
        const bcm_tlv_t *ie;
        struct parsed_vndr_ie_info *parsed_info;
        u32 count = 0;
        s32 remained_len;

        remained_len = (s32)len;
        memset(vndr_ies, 0, sizeof(*vndr_ies));

        WL_DBG(("---> len %d\n", len));
        ie = (const bcm_tlv_t *) parse;
        if (!bcm_valid_tlv(ie, remained_len))
                ie = NULL;
        while (ie) {
                if (count >= MAX_VNDR_IE_NUMBER)
                        break;
                if (ie->id == DOT11_MNG_VS_ID) {
                        vndrie = (const vndr_ie_t *) ie;
                        /* len should be bigger than OUI length + one data length at least */
                        if (vndrie->len < (VNDR_IE_MIN_LEN + 1)) {
                                WL_ERR(("%s: invalid vndr ie. length is too small %d\n",
                                        __FUNCTION__, vndrie->len));
                                goto end;
                        }
                        /* if wpa or wme ie, do not add ie */
                        if (!bcmp(vndrie->oui, (u8*)WPA_OUI, WPA_OUI_LEN) &&
                                ((vndrie->data[0] == WPA_OUI_TYPE) ||
                                (vndrie->data[0] == WME_OUI_TYPE))) {
                                CFGP2P_DBG(("Found WPA/WME oui. Do not add it\n"));
                                goto end;
                        }

                        parsed_info = &vndr_ies->ie_info[count++];

                        /* save vndr ie information */
                        parsed_info->ie_ptr = (const char *)vndrie;
                        parsed_info->ie_len = (vndrie->len + TLV_HDR_LEN);
                        memcpy(&parsed_info->vndrie, vndrie, sizeof(vndr_ie_t));
                        vndr_ies->count = count;

                        WL_DBG(("\t ** OUI "MACOUIDBG", type 0x%02x len:%d\n",
                                MACOUI2STRDBG(parsed_info->vndrie.oui),
                                parsed_info->vndrie.data[0], parsed_info->ie_len));
                }
end:
                ie = bcm_next_tlv(ie, &remained_len);
        }
        return err;
}

static bool
wl_vndr_ies_exclude_vndr_oui(struct parsed_vndr_ie_info *vndr_info)
{
        int i = 0;

        while (exclude_vndr_oui_list[i]) {
                if (!memcmp(vndr_info->vndrie.oui,
                        exclude_vndr_oui_list[i],
                        DOT11_OUI_LEN)) {
                        return TRUE;
                }
                i++;
        }

        return FALSE;
}

static bool
wl_vndr_ies_check_duplicate_vndr_oui(struct bcm_cfg80211 *cfg,
                struct parsed_vndr_ie_info *vndr_info)
{
        wl_vndr_oui_entry_t *oui_entry = NULL;
        unsigned long flags;

        spin_lock_irqsave(&cfg->vndr_oui_sync, flags);
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
        list_for_each_entry(oui_entry, &cfg->vndr_oui_list, list) {
                if (!memcmp(oui_entry->oui, vndr_info->vndrie.oui, DOT11_OUI_LEN)) {
                        spin_unlock_irqrestore(&cfg->vndr_oui_sync, flags);
                        return TRUE;
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
        spin_unlock_irqrestore(&cfg->vndr_oui_sync, flags);
        return FALSE;
}

static bool
wl_vndr_ies_add_vendor_oui_list(struct bcm_cfg80211 *cfg,
        struct parsed_vndr_ie_info *vndr_info)
{
        wl_vndr_oui_entry_t *oui_entry = NULL;
        unsigned long flags;

        oui_entry = (wl_vndr_oui_entry_t *)MALLOC(cfg->osh, sizeof(*oui_entry));
        if (oui_entry == NULL) {
                WL_ERR(("alloc failed\n"));
                return FALSE;
        }

        memcpy(oui_entry->oui, vndr_info->vndrie.oui, DOT11_OUI_LEN);

        INIT_LIST_HEAD(&oui_entry->list);
        spin_lock_irqsave(&cfg->vndr_oui_sync, flags);
        list_add_tail(&oui_entry->list, &cfg->vndr_oui_list);
        spin_unlock_irqrestore(&cfg->vndr_oui_sync, flags);

        return TRUE;
}

static void
wl_vndr_ies_clear_vendor_oui_list(struct bcm_cfg80211 *cfg)
{
        wl_vndr_oui_entry_t *oui_entry = NULL;
        unsigned long flags;

        spin_lock_irqsave(&cfg->vndr_oui_sync, flags);
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
        while (!list_empty(&cfg->vndr_oui_list)) {
                oui_entry = list_entry(cfg->vndr_oui_list.next, wl_vndr_oui_entry_t, list);
                if (oui_entry) {
                        list_del(&oui_entry->list);
                        MFREE(cfg->osh, oui_entry, sizeof(*oui_entry));
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
        spin_unlock_irqrestore(&cfg->vndr_oui_sync, flags);
}

static int
wl_vndr_ies_get_vendor_oui(struct bcm_cfg80211 *cfg, struct net_device *ndev,
        char *vndr_oui, u32 vndr_oui_len)
{
        int i;
        int vndr_oui_num = 0;

        struct wl_connect_info *conn_info = wl_to_conn(cfg);
        wl_vndr_oui_entry_t *oui_entry = NULL;
        struct parsed_vndr_ie_info *vndr_info;
        struct parsed_vndr_ies vndr_ies;

        char *pos = vndr_oui;
        u32 remained_buf_len = vndr_oui_len;
        unsigned long flags;

        if (!conn_info->resp_ie_len) {
                return BCME_ERROR;
        }

        wl_vndr_ies_clear_vendor_oui_list(cfg);

        if ((wl_cfg80211_parse_vndr_ies((u8 *)conn_info->resp_ie,
                conn_info->resp_ie_len, &vndr_ies)) == BCME_OK) {
                for (i = 0; i < vndr_ies.count; i++) {
                        vndr_info = &vndr_ies.ie_info[i];
                        if (wl_vndr_ies_exclude_vndr_oui(vndr_info)) {
                                continue;
                        }

                        if (wl_vndr_ies_check_duplicate_vndr_oui(cfg, vndr_info)) {
                                continue;
                        }

                        wl_vndr_ies_add_vendor_oui_list(cfg, vndr_info);
                        vndr_oui_num++;
                }
        }

        if (vndr_oui) {
                spin_lock_irqsave(&cfg->vndr_oui_sync, flags);
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
                list_for_each_entry(oui_entry, &cfg->vndr_oui_list, list) {
                        if (remained_buf_len < VNDR_OUI_STR_LEN) {
                                spin_unlock_irqrestore(&cfg->vndr_oui_sync, flags);
                                return BCME_ERROR;
                        }
                        pos += snprintf(pos, VNDR_OUI_STR_LEN, "%02X-%02X-%02X ",
                                oui_entry->oui[0], oui_entry->oui[1], oui_entry->oui[2]);
                        remained_buf_len -= VNDR_OUI_STR_LEN;
                }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
                spin_unlock_irqrestore(&cfg->vndr_oui_sync, flags);
        }

        return vndr_oui_num;
}

void
wl_cfg80211_clear_p2p_disc_ies(struct bcm_cfg80211 *cfg)
{
        /* Legacy P2P used to store it in primary dev cache */
        s32 index;
        struct net_device *ndev;
        s32 bssidx;
        s32 ret;
        s32 vndrie_flag[] = {VNDR_IE_BEACON_FLAG, VNDR_IE_PRBRSP_FLAG,
                VNDR_IE_ASSOCRSP_FLAG, VNDR_IE_PRBREQ_FLAG, VNDR_IE_ASSOCREQ_FLAG};

        WL_DBG(("Clear IEs for P2P Discovery Iface \n"));
        /* certain vendors uses p2p0 interface in addition to
         * the dedicated p2p interface supported by the linux
         * kernel.
         */
        ndev = wl_to_p2p_bss_ndev(cfg, P2PAPI_BSSCFG_PRIMARY);
        bssidx = wl_to_p2p_bss_bssidx(cfg, P2PAPI_BSSCFG_DEVICE);
        if (bssidx == WL_INVALID) {
                WL_DBG(("No discovery I/F available. Do nothing.\n"));
                return;
        }

        for (index = 0; index < ARRAYSIZE(vndrie_flag); index++) {
                if ((ret = wl_cfg80211_set_mgmt_vndr_ies(cfg, ndev_to_cfgdev(ndev),
                        bssidx, vndrie_flag[index], NULL, 0)) < 0) {
                        if (ret != BCME_NOTFOUND) {
                                WL_ERR(("vndr_ies clear failed (%d). Ignoring.. \n", ret));
                        }
                }
        }

        if (cfg->p2p_wdev && (ndev->ieee80211_ptr != cfg->p2p_wdev)) {
                /* clear IEs for dedicated p2p interface */
                wl_cfg80211_clear_per_bss_ies(cfg, cfg->p2p_wdev);
        }
}

s32
wl_cfg80211_clear_per_bss_ies(struct bcm_cfg80211 *cfg, struct wireless_dev *wdev)
{
        s32 index;
        s32 ret;
        struct net_info *netinfo;
        s32 vndrie_flag[] = {VNDR_IE_BEACON_FLAG, VNDR_IE_PRBRSP_FLAG,
                VNDR_IE_ASSOCRSP_FLAG, VNDR_IE_PRBREQ_FLAG, VNDR_IE_ASSOCREQ_FLAG};

        netinfo = wl_get_netinfo_by_wdev(cfg, wdev);
        if (!netinfo || !netinfo->wdev) {
                WL_ERR(("netinfo or netinfo->wdev is NULL\n"));
                return -1;
        }

        WL_DBG(("clear management vendor IEs for bssidx:%d \n", netinfo->bssidx));
        /* Clear the IEs set in the firmware so that host is in sync with firmware */
        for (index = 0; index < ARRAYSIZE(vndrie_flag); index++) {
                if ((ret = wl_cfg80211_set_mgmt_vndr_ies(cfg, wdev_to_cfgdev(netinfo->wdev),
                        netinfo->bssidx, vndrie_flag[index], NULL, 0)) < 0)
                        if (ret != BCME_NOTFOUND) {
                                WL_ERR(("vndr_ies clear failed. Ignoring.. \n"));
                        }
        }

        return 0;
}

s32
wl_cfg80211_clear_mgmt_vndr_ies(struct bcm_cfg80211 *cfg)
{
        struct net_info *iter, *next;

        WL_DBG(("clear management vendor IEs \n"));
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic push")
_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
#endif // endif
        for_each_ndev(cfg, iter, next) {
                wl_cfg80211_clear_per_bss_ies(cfg, iter->wdev);
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__) && (__GNUC__ > 4 || (__GNUC__ == \
        4 && __GNUC_MINOR__ >= 6))
_Pragma("GCC diagnostic pop")
#endif // endif
        return 0;
}

#define WL_VNDR_IE_MAXLEN 2048
static s8 g_mgmt_ie_buf[WL_VNDR_IE_MAXLEN];
int
wl_cfg80211_set_mgmt_vndr_ies(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
        s32 bssidx, s32 pktflag, const u8 *vndr_ie, u32 vndr_ie_len)
{
        struct net_device *ndev = NULL;
        s32 ret = BCME_OK;
        u8  *curr_ie_buf = NULL;
        u8  *mgmt_ie_buf = NULL;
        u32 mgmt_ie_buf_len = 0;
        u32 *mgmt_ie_len = 0;
        u32 del_add_ie_buf_len = 0;
        u32 total_ie_buf_len = 0;
        u32 parsed_ie_buf_len = 0;
        struct parsed_vndr_ies old_vndr_ies;
        struct parsed_vndr_ies new_vndr_ies;
        s32 i;
        u8 *ptr;
        s32 remained_buf_len;
        wl_bss_vndr_ies_t *ies = NULL;
        struct net_info *netinfo;
        struct wireless_dev *wdev;

        if (!cfgdev) {
                WL_ERR(("cfgdev is NULL\n"));
                return -EINVAL;
        }

        ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
        wdev = cfgdev_to_wdev(cfgdev);

        if (bssidx > WL_MAX_IFS) {
                WL_ERR(("bssidx > supported concurrent Ifaces \n"));
                return -EINVAL;
        }

        netinfo = wl_get_netinfo_by_wdev(cfg, wdev);
        if (!netinfo) {
                WL_ERR(("net_info ptr is NULL \n"));
                return -EINVAL;
        }

        /* Clear the global buffer */
        memset(g_mgmt_ie_buf, 0, sizeof(g_mgmt_ie_buf));
        curr_ie_buf = g_mgmt_ie_buf;
        ies = &netinfo->bss.ies;

        WL_DBG(("Enter. pktflag:0x%x bssidx:%x vnd_ie_len:%d wdev:%p\n",
                pktflag, bssidx, vndr_ie_len, wdev));

        switch (pktflag) {
                case VNDR_IE_PRBRSP_FLAG :
                        mgmt_ie_buf = ies->probe_res_ie;
                        mgmt_ie_len = &ies->probe_res_ie_len;
                        mgmt_ie_buf_len = sizeof(ies->probe_res_ie);
                        break;
                case VNDR_IE_ASSOCRSP_FLAG :
                        mgmt_ie_buf = ies->assoc_res_ie;
                        mgmt_ie_len = &ies->assoc_res_ie_len;
                        mgmt_ie_buf_len = sizeof(ies->assoc_res_ie);
                        break;
                case VNDR_IE_BEACON_FLAG :
                        mgmt_ie_buf = ies->beacon_ie;
                        mgmt_ie_len = &ies->beacon_ie_len;
                        mgmt_ie_buf_len = sizeof(ies->beacon_ie);
                        break;
                case VNDR_IE_PRBREQ_FLAG :
                        mgmt_ie_buf = ies->probe_req_ie;
                        mgmt_ie_len = &ies->probe_req_ie_len;
                        mgmt_ie_buf_len = sizeof(ies->probe_req_ie);
                        break;
                case VNDR_IE_ASSOCREQ_FLAG :
                        mgmt_ie_buf = ies->assoc_req_ie;
                        mgmt_ie_len = &ies->assoc_req_ie_len;
                        mgmt_ie_buf_len = sizeof(ies->assoc_req_ie);
                        break;
                default:
                        mgmt_ie_buf = NULL;
                        mgmt_ie_len = NULL;
                        WL_ERR(("not suitable packet type (%d)\n", pktflag));
                        return BCME_ERROR;
        }

        if (vndr_ie_len > mgmt_ie_buf_len) {
                WL_ERR(("extra IE size too big\n"));
                ret = -ENOMEM;
        } else {
                /* parse and save new vndr_ie in curr_ie_buff before comparing it */
                if (vndr_ie && vndr_ie_len && curr_ie_buf) {
                        ptr = curr_ie_buf;

                        if ((ret = wl_cfg80211_parse_vndr_ies((const u8 *)vndr_ie,
                                                              vndr_ie_len, &new_vndr_ies)) < 0) {
                                WL_ERR(("parse vndr ie failed \n"));
                                goto exit;
                        }

                        for (i = 0; i < new_vndr_ies.count; i++) {
                                struct parsed_vndr_ie_info *vndrie_info =
                                        &new_vndr_ies.ie_info[i];

                                if ((parsed_ie_buf_len + vndrie_info->ie_len) > WL_VNDR_IE_MAXLEN) {
                                        WL_ERR(("IE size is too big (%d > %d)\n",
                                                parsed_ie_buf_len, WL_VNDR_IE_MAXLEN));
                                        ret = -EINVAL;
                                        goto exit;
                                }

                                memcpy(ptr + parsed_ie_buf_len, vndrie_info->ie_ptr,
                                        vndrie_info->ie_len);
                                parsed_ie_buf_len += vndrie_info->ie_len;
                        }
                }

                if (mgmt_ie_buf != NULL) {
                        if (parsed_ie_buf_len && (parsed_ie_buf_len == *mgmt_ie_len) &&
                                (memcmp(mgmt_ie_buf, curr_ie_buf, parsed_ie_buf_len) == 0)) {
                                WL_DBG(("Previous mgmt IE is equals to current IE"));
                                goto exit;
                        }

                        /* parse old vndr_ie */
                        if ((ret = wl_cfg80211_parse_vndr_ies(mgmt_ie_buf, *mgmt_ie_len,
                                &old_vndr_ies)) < 0) {
                                WL_ERR(("parse vndr ie failed \n"));
                                goto exit;
                        }
                        /* make a command to delete old ie */
                        for (i = 0; i < old_vndr_ies.count; i++) {
                                struct parsed_vndr_ie_info *vndrie_info =
                                &old_vndr_ies.ie_info[i];

                                WL_DBG(("DELETED ID : %d, Len: %d , OUI:"MACOUIDBG"\n",
                                        vndrie_info->vndrie.id, vndrie_info->vndrie.len,
                                        MACOUI2STRDBG(vndrie_info->vndrie.oui)));

                                del_add_ie_buf_len = wl_cfgp2p_vndr_ie(cfg, curr_ie_buf,
                                        pktflag, vndrie_info->vndrie.oui,
                                        vndrie_info->vndrie.id,
                                        vndrie_info->ie_ptr + VNDR_IE_FIXED_LEN,
                                        vndrie_info->ie_len - VNDR_IE_FIXED_LEN,
                                        "del");

                                curr_ie_buf += del_add_ie_buf_len;
                                total_ie_buf_len += del_add_ie_buf_len;
                        }
                }

                *mgmt_ie_len = 0;
                /* Add if there is any extra IE */
                if (mgmt_ie_buf && parsed_ie_buf_len) {
                        ptr = mgmt_ie_buf;

                        remained_buf_len = mgmt_ie_buf_len;

                        /* make a command to add new ie */
                        for (i = 0; i < new_vndr_ies.count; i++) {
                                struct parsed_vndr_ie_info *vndrie_info =
                                        &new_vndr_ies.ie_info[i];

                                WL_DBG(("ADDED ID : %d, Len: %d(%d), OUI:"MACOUIDBG"\n",
                                        vndrie_info->vndrie.id, vndrie_info->vndrie.len,
                                        vndrie_info->ie_len - 2,
                                        MACOUI2STRDBG(vndrie_info->vndrie.oui)));

                                del_add_ie_buf_len = wl_cfgp2p_vndr_ie(cfg, curr_ie_buf,
                                        pktflag, vndrie_info->vndrie.oui,
                                        vndrie_info->vndrie.id,
                                        vndrie_info->ie_ptr + VNDR_IE_FIXED_LEN,
                                        vndrie_info->ie_len - VNDR_IE_FIXED_LEN,
                                        "add");

                                /* verify remained buf size before copy data */
                                if (remained_buf_len >= vndrie_info->ie_len) {
                                        remained_buf_len -= vndrie_info->ie_len;
                                } else {
                                        WL_ERR(("no space in mgmt_ie_buf: pktflag = %d, "
                                        "found vndr ies # = %d(cur %d), remained len %d, "
                                        "cur mgmt_ie_len %d, new ie len = %d\n",
                                        pktflag, new_vndr_ies.count, i, remained_buf_len,
                                        *mgmt_ie_len, vndrie_info->ie_len));
                                        break;
                                }

                                /* save the parsed IE in cfg struct */
                                memcpy(ptr + (*mgmt_ie_len), vndrie_info->ie_ptr,
                                        vndrie_info->ie_len);
                                *mgmt_ie_len += vndrie_info->ie_len;
                                curr_ie_buf += del_add_ie_buf_len;
                                total_ie_buf_len += del_add_ie_buf_len;
                        }
                }

                if (total_ie_buf_len && cfg->ioctl_buf != NULL) {
                        ret  = wldev_iovar_setbuf_bsscfg(ndev, "vndr_ie", g_mgmt_ie_buf,
                                total_ie_buf_len, cfg->ioctl_buf, WLC_IOCTL_MAXLEN,
                                bssidx, &cfg->ioctl_buf_sync);
                        if (ret)
                                WL_ERR(("vndr ie set error : %d\n", ret));
                }
        }
exit:

return ret;
}

#ifdef WL_CFG80211_ACL
static int
wl_cfg80211_set_mac_acl(struct wiphy *wiphy, struct net_device *cfgdev,
        const struct cfg80211_acl_data *acl)
{
        int i;
        int ret = 0;
        int macnum = 0;
        int macmode = MACLIST_MODE_DISABLED;
        struct maclist *list;
        struct bcm_cfg80211 *cfg = wl_get_cfg(cfgdev);

        /* get the MAC filter mode */
        if (acl && acl->acl_policy == NL80211_ACL_POLICY_DENY_UNLESS_LISTED) {
                macmode = MACLIST_MODE_ALLOW;
        } else if (acl && acl->acl_policy == NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
        acl->n_acl_entries) {
                macmode = MACLIST_MODE_DENY;
        }

        /* if acl == NULL, macmode is still disabled.. */
        if (macmode == MACLIST_MODE_DISABLED) {
                if ((ret = wl_android_set_ap_mac_list(cfgdev, macmode, NULL)) != 0)
                        WL_ERR(("%s : Setting MAC list failed error=%d\n", __FUNCTION__, ret));

                return ret;
        }

        macnum = acl->n_acl_entries;
        if (macnum < 0 || macnum > MAX_NUM_MAC_FILT) {
                WL_ERR(("%s : invalid number of MAC address entries %d\n",
                        __FUNCTION__, macnum));
                return -1;
        }

        /* allocate memory for the MAC list */
        list = (struct maclist *)MALLOC(cfg->osh, sizeof(int) +
                sizeof(struct ether_addr) * macnum);
        if (!list) {
                WL_ERR(("%s : failed to allocate memory\n", __FUNCTION__));
                return -1;
        }

        /* prepare the MAC list */
        list->count = htod32(macnum);
        for (i = 0; i < macnum; i++) {
                memcpy(&list->ea[i], &acl->mac_addrs[i], ETHER_ADDR_LEN);
        }
        /* set the list */
        if ((ret = wl_android_set_ap_mac_list(cfgdev, macmode, list)) != 0)
                WL_ERR(("%s : Setting MAC list failed error=%d\n", __FUNCTION__, ret));

        MFREE(cfg->osh, list, sizeof(int) +
                sizeof(struct ether_addr) * macnum);

        return ret;
}
#endif /* WL_CFG80211_ACL */
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 5, 0))
int wl_chspec_chandef(chanspec_t chanspec,
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 8, 0))
        struct cfg80211_chan_def *chandef,
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 5, 0) && (LINUX_VERSION_CODE <= (3, 7, \
        \
        0)))
        struct chan_info *chaninfo,
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 5, 0)) */
        struct wiphy *wiphy)
{
        uint16 freq = 0;
        int chan_type = 0;
        int channel = 0;
        struct ieee80211_channel *chan;

        if (!chandef) {
                return -1;
        }
        channel = CHSPEC_CHANNEL(chanspec);

        switch (CHSPEC_BW(chanspec)) {
                case WL_CHANSPEC_BW_20:
                        chan_type = NL80211_CHAN_HT20;
                        break;
                case WL_CHANSPEC_BW_40:
                {
                        if (CHSPEC_SB_UPPER(chanspec)) {
                                channel += CH_10MHZ_APART;
                        } else {
                                channel -= CH_10MHZ_APART;
                        }
                }
                        chan_type = NL80211_CHAN_HT40PLUS;
                        break;

#if (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0))
                case WL_CHANSPEC_BW_80:
                case WL_CHANSPEC_BW_8080:
                {
                        uint16 sb = CHSPEC_CTL_SB(chanspec);

                        if (sb == WL_CHANSPEC_CTL_SB_LL) {
                                channel -= (CH_10MHZ_APART + CH_20MHZ_APART);
                        } else if (sb == WL_CHANSPEC_CTL_SB_LU) {
                                channel -= CH_10MHZ_APART;
                        } else if (sb == WL_CHANSPEC_CTL_SB_UL) {
                                channel += CH_10MHZ_APART;
                        } else {
                                /* WL_CHANSPEC_CTL_SB_UU */
                                channel += (CH_10MHZ_APART + CH_20MHZ_APART);
                        }

                        if (sb == WL_CHANSPEC_CTL_SB_LL || sb == WL_CHANSPEC_CTL_SB_LU)
                                chan_type = NL80211_CHAN_HT40MINUS;
                        else if (sb == WL_CHANSPEC_CTL_SB_UL || sb == WL_CHANSPEC_CTL_SB_UU)
                                chan_type = NL80211_CHAN_HT40PLUS;
                }
                        break;
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0)) */
                default:
                        chan_type = NL80211_CHAN_HT20;
                        break;

        }

        if (CHSPEC_IS5G(chanspec))
                freq = ieee80211_channel_to_frequency(channel, NL80211_BAND_5GHZ);
        else
                freq = ieee80211_channel_to_frequency(channel, NL80211_BAND_2GHZ);

        chan = ieee80211_get_channel(wiphy, freq);
        WL_DBG(("channel:%d freq:%d chan_type: %d chan_ptr:%p \n",
                channel, freq, chan_type, chan));

        if (unlikely(!chan)) {
                /* fw and cfg80211 channel lists are not in sync */
                WL_ERR(("Couldn't find matching channel in wiphy channel list \n"));
                ASSERT(0);
                return -EINVAL;
        }

#if (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0))
        cfg80211_chandef_create(chandef, chan, chan_type);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 5, 0) && (LINUX_VERSION_CODE <= (3, 7, \
        \
        0)))
        chaninfo->freq = freq;
        chaninfo->chan_type = chan_type;
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0)) */
        return 0;
}

void
wl_cfg80211_ch_switch_notify(struct net_device *dev, uint16 chanspec, struct wiphy *wiphy)
{
        u32 freq;
#if (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0))
        struct cfg80211_chan_def chandef;
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 5, 0) && (LINUX_VERSION_CODE <= (3, 7, \
        \
        0)))
        struct chan_info chaninfo;
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0)) */

        if (!wiphy) {
                WL_ERR(("wiphy is null\n"));
                return;
        }
#if (LINUX_VERSION_CODE <= KERNEL_VERSION (3, 18, 0))
        /* Channel switch support is only for AP/GO/ADHOC/MESH */
        if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION ||
                dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_CLIENT) {
                WL_ERR(("No channel switch notify support for STA/GC\n"));
                return;
        }
#endif /* (LINUX_VERSION_CODE <= KERNEL_VERSION (3, 18, 0)) */
#if (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0))
        if (wl_chspec_chandef(chanspec, &chandef, wiphy)) {
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 5, 0) && (LINUX_VERSION_CODE <= (3, 7, \
        \
        0)))
        if (wl_chspec_chandef(chanspec, &chaninfo, wiphy)) {
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0)) */

                WL_ERR(("chspec_chandef failed\n"));
                return;
        }
#if (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0))
        freq = chandef.chan ? chandef.chan->center_freq : chandef.center_freq1;
        cfg80211_ch_switch_notify(dev, &chandef);
#elif (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 5, 0) && (LINUX_VERSION_CODE <= (3, 7, \
        \
        0)))
        freq = chan_info.freq;
        cfg80211_ch_switch_notify(dev, freq, chan_info.chan_type);
#endif /* (LINUX_VERSION_CODE >= KERNEL_VERSION (3, 8, 0)) */

        WL_ERR(("Channel switch notification for freq: %d chanspec: 0x%x\n", freq, chanspec));
        return;
}
#endif /* LINUX_VERSION_CODE >= (3, 5, 0) */

static void
wl_ap_channel_ind(struct bcm_cfg80211 *cfg,
        struct net_device *ndev,
        chanspec_t chanspec)
{
        u32 channel = LCHSPEC_CHANNEL(chanspec);

        WL_INFORM_MEM(("(%s) AP channel:%d chspec:0x%x \n",
                ndev->name, channel, chanspec));
        if (cfg->ap_oper_channel && (cfg->ap_oper_channel != channel)) {
                /*
                 * If cached channel is different from the channel indicated
                 * by the event, notify user space about the channel switch.
                 */
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 5, 0))
                wl_cfg80211_ch_switch_notify(ndev, chanspec, bcmcfg_to_wiphy(cfg));
#endif /* LINUX_VERSION_CODE >= (3, 5, 0) */
                cfg->ap_oper_channel = channel;
        }
}

static s32
wl_ap_start_ind(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
const wl_event_msg_t *e, void *data)
{
        struct net_device *ndev = NULL;
        chanspec_t chanspec;

        WL_DBG(("Enter\n"));
        if (unlikely(e->status)) {
                WL_ERR(("status:0x%x \n", e->status));
                return -1;
        }

        if (!data) {
                return -EINVAL;
        }

        if (likely(cfgdev)) {
                ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
                chanspec = *((chanspec_t *)data);

                if (wl_get_mode_by_netdev(cfg, ndev) == WL_MODE_AP) {
                        /* For AP/GO role */
                        wl_ap_channel_ind(cfg, ndev, chanspec);
                }
        }

        return 0;
}

static s32
wl_csa_complete_ind(struct bcm_cfg80211 *cfg, bcm_struct_cfgdev *cfgdev,
const wl_event_msg_t *e, void *data)
{
        int error = 0;
        u32 chanspec = 0;
        struct net_device *ndev = NULL;

        WL_DBG(("Enter\n"));
        if (unlikely(e->status)) {
                WL_ERR(("status:0x%x \n", e->status));
                return -1;
        }

        if (likely(cfgdev)) {
                ndev = cfgdev_to_wlc_ndev(cfgdev, cfg);
                error = wldev_iovar_getint(ndev, "chanspec", &chanspec);
                if (unlikely(error)) {
                        WL_ERR(("Get chanspec error: %d \n", error));
                        return -1;
                }

                WL_INFORM_MEM(("[%s] CSA ind. ch:0x%x\n", ndev->name, chanspec));
                if (wl_get_mode_by_netdev(cfg, ndev) == WL_MODE_AP) {
                        /* For AP/GO role */
                        wl_ap_channel_ind(cfg, ndev, chanspec);
                } else {
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 5, 0))
                        wl_cfg80211_ch_switch_notify(ndev, chanspec, bcmcfg_to_wiphy(cfg));
#endif /* LINUX_VERSION_CODE >= (3, 5, 0) */
                }

        }

        return 0;
}

void wl_cfg80211_clear_security(struct bcm_cfg80211 *cfg)
{
        struct net_device *dev = bcmcfg_to_prmry_ndev(cfg);
        int err;

        /* Clear the security settings on the primary Interface */
        err = wldev_iovar_setint(dev, "wsec", 0);
        if (unlikely(err)) {
                WL_ERR(("wsec clear failed \n"));
        }
        err = wldev_iovar_setint(dev, "auth", 0);
        if (unlikely(err)) {
                WL_ERR(("auth clear failed \n"));
        }
        err = wldev_iovar_setint(dev, "wpa_auth", WPA_AUTH_DISABLED);
        if (unlikely(err)) {
                WL_ERR(("wpa_auth clear failed \n"));
        }
}

#ifdef WL_CFG80211_P2P_DEV_IF
void wl_cfg80211_del_p2p_wdev(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct wireless_dev *wdev = NULL;

        WL_DBG(("Enter \n"));
        if (!cfg) {
                WL_ERR(("Invalid Ptr\n"));
                return;
        } else {
                wdev = cfg->p2p_wdev;
        }

        if (wdev) {
                wl_cfgp2p_del_p2p_disc_if(wdev, cfg);
        }
}
#endif /* WL_CFG80211_P2P_DEV_IF */

#ifdef GTK_OFFLOAD_SUPPORT
#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 1, 0))
static s32
wl_cfg80211_set_rekey_data(struct wiphy *wiphy, struct net_device *dev,
                struct cfg80211_gtk_rekey_data *data)
{
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        s32 err = 0;
        gtk_keyinfo_t keyinfo;

        WL_DBG(("Enter\n"));
        if (data == NULL || cfg->p2p_net == dev) {
                WL_ERR(("data is NULL or wrong net device\n"));
                return -EINVAL;
        }

        prhex("kck", (const u8 *) (data->kck), RSN_KCK_LENGTH);
        prhex("kek", (const u8 *) (data->kek), RSN_KEK_LENGTH);
        prhex("replay_ctr", (const u8 *) (data->replay_ctr), RSN_REPLAY_LEN);
        bcopy(data->kck, keyinfo.KCK, RSN_KCK_LENGTH);
        bcopy(data->kek, keyinfo.KEK, RSN_KEK_LENGTH);
        bcopy(data->replay_ctr, keyinfo.ReplayCounter, RSN_REPLAY_LEN);

        if ((err = wldev_iovar_setbuf(dev, "gtk_key_info", &keyinfo, sizeof(keyinfo),
                cfg->ioctl_buf, WLC_IOCTL_SMLEN, &cfg->ioctl_buf_sync)) < 0) {
                WL_ERR(("seting gtk_key_info failed code=%d\n", err));
                return err;
        }
        WL_DBG(("Exit\n"));
        return err;
}
#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(3, 1, 0) */
#endif /* GTK_OFFLOAD_SUPPORT */

#if defined(WL_SUPPORT_AUTO_CHANNEL)
int
wl_cfg80211_set_spect(struct net_device *dev, int spect)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        int wlc_down = 1;
        int wlc_up = 1;
        int err = BCME_OK;

        if (!wl_get_drv_status_all(cfg, CONNECTED)) {
                err = wldev_ioctl_set(dev, WLC_DOWN, &wlc_down, sizeof(wlc_down));
                if (err) {
                        WL_ERR(("%s: WLC_DOWN failed: code: %d\n", __func__, err));
                        return err;
                }

                err = wldev_ioctl_set(dev, WLC_SET_SPECT_MANAGMENT, &spect, sizeof(spect));
                if (err) {
                        WL_ERR(("%s: error setting spect: code: %d\n", __func__, err));
                        return err;
                }

                err = wldev_ioctl_set(dev, WLC_UP, &wlc_up, sizeof(wlc_up));
                if (err) {
                        WL_ERR(("%s: WLC_UP failed: code: %d\n", __func__, err));
                        return err;
                }
        }
        return err;
}

int
wl_cfg80211_get_sta_channel(struct bcm_cfg80211 *cfg)
{
        int channel = 0;

        if (wl_get_drv_status(cfg, CONNECTED, bcmcfg_to_prmry_ndev(cfg))) {
                channel = cfg->channel;
        }
        return channel;
}
#endif /* WL_SUPPORT_AUTO_CHANNEL */

u64
wl_cfg80211_get_new_roc_id(struct bcm_cfg80211 *cfg)
{
        u64 id = 0;
        id = ++cfg->last_roc_id;
#ifdef  P2P_LISTEN_OFFLOADING
        if (id == P2PO_COOKIE) {
                id = ++cfg->last_roc_id;
        }
#endif /* P2P_LISTEN_OFFLOADING */
        if (id == 0)
                id = ++cfg->last_roc_id;
        return id;
}

#if defined(SUPPORT_RANDOM_MAC_SCAN)
int
wl_cfg80211_set_random_mac(struct net_device *dev, bool enable)
{
        return BCME_OK;
}

#if defined(DHD_RANDOM_MAC_SCAN)
int
wl_cfg80211_dhd_driven_random_mac_enable(struct net_device *dev, uint8 *rand_mac, uint8 *rand_mask)
{
        u8 random_mac_addr[ETHER_ADDR_LEN] = {0, };
        s32 err = BCME_ERROR;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        int i = 0;

        if ((rand_mac == NULL) || (rand_mask == NULL)) {
                err = BCME_BADARG;
                WL_ERR(("Fail to Set random mac, bad argument\n"));
                wl_cfg80211_random_mac_disable(dev);
                return err;
        }

        if (ETHER_ISNULLADDR(rand_mac)) {
                WL_DBG(("Fail to Set random mac, Invalid rand mac\n"));
                wl_cfg80211_random_mac_disable(dev);
                return err;
        }

        if (wl_get_drv_status_all(cfg, CONNECTED) || wl_get_drv_status_all(cfg, CONNECTING) ||
                wl_get_drv_status_all(cfg, AP_CREATED) || wl_get_drv_status_all(cfg, AP_CREATING)) {
                WL_ERR(("Skip to set random mac by current stastus\n"));
                return err;
        }

        /* Generate 6 bytes random address */
        get_random_bytes(&random_mac_addr, sizeof(random_mac_addr));

        /* Overwrite unmasked MAC address */
        for (i = 0; i < ETHER_ADDR_LEN; i++) {
                if (rand_mask[i]) {
                        random_mac_addr[i] = rand_mac[i];
                }
        }

        /* Modify last mac address if 0x00 or 0xff */
        if (random_mac_addr[5] == 0x0 || random_mac_addr[5] == 0xff) {
                random_mac_addr[5] = 0xf0;
        }
        err = wldev_iovar_setbuf_bsscfg(bcmcfg_to_prmry_ndev(cfg), "cur_etheraddr",
                random_mac_addr, ETHER_ADDR_LEN, cfg->ioctl_buf, WLC_IOCTL_SMLEN,
                0, &cfg->ioctl_buf_sync);

        if (err != BCME_OK) {
                WL_ERR(("Failed to set random generate MAC address\n"));
        } else {
                cfg->random_mac_running = TRUE;
                WL_INFORM(("Set random mac " MACDBG " to " MACDBG "\n",
                        MAC2STRDBG((const u8 *)bcmcfg_to_prmry_ndev(cfg)->dev_addr),
                        MAC2STRDBG((const u8 *)&random_mac_addr)));
        }
        return err;
}

int
wl_cfg80211_dhd_driven_random_mac_disable(struct net_device *dev)
{
        s32 err = BCME_ERROR;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if (cfg->random_mac_running) {
                WL_INFORM(("Restore to original MAC address " MACDBG "\n",
                        MAC2STRDBG((const u8 *)bcmcfg_to_prmry_ndev(cfg)->dev_addr)));

                err = wldev_iovar_setbuf_bsscfg(bcmcfg_to_prmry_ndev(cfg), "cur_etheraddr",
                        bcmcfg_to_prmry_ndev(cfg)->dev_addr, ETHER_ADDR_LEN,
                        cfg->ioctl_buf, WLC_IOCTL_SMLEN, 0, &cfg->ioctl_buf_sync);

                if (err != BCME_OK) {
                        WL_ERR(("Failed to restore original MAC address\n"));
                } else {
                        cfg->random_mac_running = FALSE;
                        WL_ERR(("Random MAC disable done\n"));
                }
        }
        return err;
}

#endif /* DHD_RANDOM_MAC_SCAN */

int
wl_cfg80211_random_mac_enable(struct net_device *dev, uint8 *rand_mac, uint8 *rand_mask)
{
        s32 err = BCME_ERROR;
#if defined(DHD_RANDOM_MAC_SCAN)
        err = wl_cfg80211_dhd_driven_random_mac_enable(dev, rand_mac, rand_mask);
#else /* Random mac by scan mac feature */
        err = wl_cfg80211_scan_mac_enable(dev, rand_mac, rand_mask);
#endif /* DHD_RANDOM_MAC_SCAN */

        return err;
}

int
wl_cfg80211_random_mac_disable(struct net_device *dev)
{
        s32 err = BCME_ERROR;
#if defined(DHD_RANDOM_MAC_SCAN)
        err = wl_cfg80211_dhd_driven_random_mac_disable(dev);
#else /* Random mac by scan mac featur */
        err = wl_cfg80211_scan_mac_disable(dev);
#endif /* DHD_RANDOM_MAC_SCAN */

        return err;
}

/*
 * This is new interface for mac randomization. It takes randmac and randmask
 * as arg and it uses scanmac iovar to offload the mac randomization to firmware.
 */
int wl_cfg80211_scan_mac_enable(struct net_device *dev, uint8 *rand_mac, uint8 *rand_mask)
{
        int byte_index = 0;
        s32 err = BCME_ERROR;
        uint8 buffer[WLC_IOCTL_SMLEN] = {0, };
        wl_scanmac_t *sm = NULL;
        int len = 0;
        wl_scanmac_enable_t *sm_enable = NULL;
        wl_scanmac_config_t *sm_config = NULL;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if ((rand_mac == NULL) || (rand_mask == NULL)) {
                err = BCME_BADARG;
                WL_ERR(("fail to Set random mac, bad argument\n"));
                /* Disable the current scanmac config */
                wl_cfg80211_scan_mac_disable(dev);
                return err;
        }

        if (ETHER_ISNULLADDR(rand_mac)) {
                WL_DBG(("fail to Set random mac, Invalid rand mac\n"));
                /* Disable the current scanmac config */
                wl_cfg80211_scan_mac_disable(dev);
                return err;
        }

        if (wl_get_drv_status_all(cfg, CONNECTED) || wl_get_drv_status_all(cfg, CONNECTING) ||
            wl_get_drv_status_all(cfg, AP_CREATED) || wl_get_drv_status_all(cfg, AP_CREATING)) {
                WL_ERR(("fail to Set random mac, current state is wrong\n"));
                return BCME_UNSUPPORTED;
        }

        /* Enable scan mac */
        sm = (wl_scanmac_t *)buffer;
        sm_enable = (wl_scanmac_enable_t *)sm->data;
        sm->len = sizeof(*sm_enable);
        sm_enable->enable = 1;
        len = OFFSETOF(wl_scanmac_t, data) + sm->len;
        sm->subcmd_id = WL_SCANMAC_SUBCMD_ENABLE;

        err = wldev_iovar_setbuf_bsscfg(dev, "scanmac",
                sm, len, cfg->ioctl_buf, WLC_IOCTL_SMLEN, 0, &cfg->ioctl_buf_sync);

        if (err == BCME_OK) {
                        /* Configure scanmac */
                memset(buffer, 0x0, sizeof(buffer));
                sm_config = (wl_scanmac_config_t *)sm->data;
                sm->len = sizeof(*sm_config);
                sm->subcmd_id = WL_SCANMAC_SUBCMD_CONFIG;
                sm_config->scan_bitmap = WL_SCANMAC_SCAN_UNASSOC;

                /* Set randomize mac address recv from upper layer */
                memcpy(&sm_config->mac.octet, rand_mac, ETH_ALEN);

                /* Set randomize mask recv from upper layer */

                /* There is a difference in how to interpret rand_mask between
                 * upperlayer and firmware. If the byte is set as FF then for
                 * upper layer it  means keep that byte and do not randomize whereas
                 * for firmware it means randomize those bytes and vice versa. Hence
                 * conversion is needed before setting the iovar
                 */
                memset(&sm_config->random_mask.octet, 0x0, ETH_ALEN);
                /* Only byte randomization is supported currently. If mask recv is 0x0F
                 * for a particular byte then it will be treated as no randomization
                 * for that byte.
                 */
                while (byte_index < ETH_ALEN) {
                        if (rand_mask[byte_index] == 0xFF) {
                                sm_config->random_mask.octet[byte_index] = 0x00;
                        } else if (rand_mask[byte_index] == 0x00) {
                                sm_config->random_mask.octet[byte_index] = 0xFF;
                        }
                        byte_index++;
                }

                WL_DBG(("recv random mac addr " MACDBG  "recv rand mask" MACDBG "\n",
                        MAC2STRDBG((const u8 *)&sm_config->mac.octet),
                        MAC2STRDBG((const u8 *)&sm_config->random_mask)));

                len = OFFSETOF(wl_scanmac_t, data) + sm->len;
                err = wldev_iovar_setbuf_bsscfg(dev, "scanmac",
                        sm, len, cfg->ioctl_buf, WLC_IOCTL_SMLEN, 0, &cfg->ioctl_buf_sync);

                if (err != BCME_OK) {
                        WL_ERR(("failed scanmac configuration\n"));

                        /* Disable scan mac for clean-up */
                        wl_cfg80211_scan_mac_disable(dev);
                        return err;
                }
                WL_DBG(("scanmac enable done"));
        } else  {
                WL_ERR(("failed to enable scanmac, err=%d\n", err));
        }

        return err;
}

int wl_cfg80211_scan_mac_disable(struct net_device *dev)
{
        s32 err = BCME_ERROR;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        uint8 buffer[WLC_IOCTL_SMLEN] = {0, };
        wl_scanmac_t *sm = NULL;
        int len = 0;
        wl_scanmac_enable_t *sm_enable = NULL;

        sm = (wl_scanmac_t *)buffer;
        sm_enable = (wl_scanmac_enable_t *)sm->data;
        sm->len = sizeof(*sm_enable);
        /* Disable scanmac */
        sm_enable->enable = 0;
        len = OFFSETOF(wl_scanmac_t, data) + sm->len;

        sm->subcmd_id = WL_SCANMAC_SUBCMD_ENABLE;

        err = wldev_iovar_setbuf_bsscfg(dev, "scanmac",
                sm, len, cfg->ioctl_buf, WLC_IOCTL_SMLEN, 0, &cfg->ioctl_buf_sync);

        if (err != BCME_OK) {
                WL_ERR(("failed to disable scanmac, err=%d\n", err));
        } else {
                WL_DBG(("random MAC disable done\n"));
        }
        return err;
}
#endif /* SUPPORT_RANDOM_MAC_SCAN */

#ifdef WLTDLS
static s32
wl_cfg80211_tdls_config(struct bcm_cfg80211 *cfg, enum wl_tdls_config state, bool auto_mode)
{
        struct net_device *ndev = bcmcfg_to_prmry_ndev(cfg);
        int err = 0;
        struct net_info *iter, *next;
        int update_reqd = 0;
        int enable = 0;
        dhd_pub_t *dhdp;
        dhdp = (dhd_pub_t *)(cfg->pub);

        /*
         * TDLS need to be enabled only if we have a single STA/GC
         * connection.
         */

        WL_DBG(("Enter state:%d\n", state));
        if (!cfg->tdls_supported) {
                /* FW doesn't support tdls. Do nothing */
                return -ENODEV;
        }

        /* Protect tdls config session */
        mutex_lock(&cfg->tdls_sync);

        if (state == TDLS_STATE_TEARDOWN) {
                /* Host initiated TDLS tear down */
                err = dhd_tdls_enable(ndev, false, auto_mode, NULL);
                goto exit;
        } else if ((state == TDLS_STATE_AP_CREATE) ||
                (state == TDLS_STATE_NDI_CREATE)) {
                /* We don't support tdls while AP/GO/NAN is operational */
                update_reqd = true;
                enable = false;
        } else if ((state == TDLS_STATE_CONNECT) || (state == TDLS_STATE_IF_CREATE)) {
                if (wl_get_drv_status_all(cfg,
                        CONNECTED) >= TDLS_MAX_IFACE_FOR_ENABLE) {
                        /* For STA/GC connect command request, disable
                         * tdls if we have any concurrent interfaces
                         * operational.
                         */
                        WL_DBG(("Interface limit restriction. disable tdls.\n"));
                        update_reqd = true;
                        enable = false;
                }
        } else if ((state == TDLS_STATE_DISCONNECT) ||
                (state == TDLS_STATE_AP_DELETE) ||
                (state == TDLS_STATE_SETUP) ||
                (state == TDLS_STATE_IF_DELETE)) {
                /* Enable back the tdls connection only if we have less than
                 * or equal to a single STA/GC connection.
                 */
                if (wl_get_drv_status_all(cfg,
                        CONNECTED) == 0) {
                        /* If there are no interfaces connected, enable tdls */
                        update_reqd = true;
                        enable = true;
                } else if (wl_get_drv_status_all(cfg,
                        CONNECTED) == TDLS_MAX_IFACE_FOR_ENABLE) {
                        /* We have one interface in CONNECTED state.
                         * Verify whether its a STA interface before
                         * we enable back tdls.
                         */
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
                        for_each_ndev(cfg, iter, next) {
                                if ((iter->ndev) &&
                                        (wl_get_drv_status(cfg, CONNECTED, ndev)) &&
                                        (ndev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION)) {
                                        WL_DBG(("Non STA iface operational. cfg_iftype:%d "
                                                "Can't enable tdls.\n",
                                                ndev->ieee80211_ptr->iftype));
                                        err = -ENOTSUPP;
                                        goto exit;
                                }
                        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
                        /* No AP/GO found. Enable back tdls */
                        update_reqd = true;
                        enable = true;
                } else {
                        WL_DBG(("Concurrent connection mode. Can't enable tdls. \n"));
                        err = -ENOTSUPP;
                        goto exit;
                }
        } else {
                WL_ERR(("Unknown tdls state:%d \n", state));
                err = -EINVAL;
                goto exit;
        }

        if (update_reqd == true) {
                if (dhdp->tdls_enable == enable) {
                        WL_DBG(("No change in tdls state. Do nothing."
                                " tdls_enable:%d\n", enable));
                        goto exit;
                }
                err = wldev_iovar_setint(ndev, "tdls_enable", enable);
                if (unlikely(err)) {
                        WL_ERR(("tdls_enable setting failed. err:%d\n", err));
                        goto exit;
                } else {
                        WL_INFORM_MEM(("tdls_enable %d state:%d\n", enable, state));
                        /* Update the dhd state variable to be in sync */
                        dhdp->tdls_enable = enable;
                        if (state == TDLS_STATE_SETUP) {
                                /* For host initiated setup, apply TDLS params
                                 * Don't propagate errors up for param config
                                 * failures
                                 */
                                dhd_tdls_enable(ndev, true, auto_mode, NULL);

                        }
                }
        } else {
                WL_DBG(("Skip tdls config. state:%d update_reqd:%d "
                        "current_status:%d \n",
                        state, update_reqd, dhdp->tdls_enable));
        }

exit:
        if (err) {
                wl_flush_fw_log_buffer(ndev, FW_LOGSET_MASK_ALL);
        }
        mutex_unlock(&cfg->tdls_sync);
        return err;
}
#endif /* WLTDLS */

struct net_device* wl_get_ap_netdev(struct bcm_cfg80211 *cfg, char *ifname)
{
        struct net_info *iter, *next;
        struct net_device *ndev = NULL;

#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
        for_each_ndev(cfg, iter, next) {
                if (iter->ndev) {
                        if (strncmp(iter->ndev->name, ifname, IFNAMSIZ) == 0) {
                                if (iter->ndev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP) {
                                        ndev = iter->ndev;
                                        break;
                                }
                        }
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif

        return ndev;
}

struct net_device*
wl_get_netdev_by_name(struct bcm_cfg80211 *cfg, char *ifname)
{
        struct net_info *iter, *next;
        struct net_device *ndev = NULL;

#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
        for_each_ndev(cfg, iter, next) {
                if (iter->ndev) {
                        if (strncmp(iter->ndev->name, ifname, IFNAMSIZ) == 0) {
                                ndev = iter->ndev;
                                break;
                        }
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif

        return ndev;
}

#ifdef SUPPORT_AP_HIGHER_BEACONRATE
#define WLC_RATE_FLAG   0x80
#define RATE_MASK               0x7f

int wl_set_ap_beacon_rate(struct net_device *dev, int val, char *ifname)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhdp;
        wl_rateset_args_t rs;
        int error = BCME_ERROR, i;
        struct net_device *ndev = NULL;

        dhdp = (dhd_pub_t *)(cfg->pub);

        if (dhdp && !(dhdp->op_mode & DHD_FLAG_HOSTAP_MODE)) {
                WL_ERR(("Not Hostapd mode\n"));
                return BCME_NOTAP;
        }

        ndev = wl_get_ap_netdev(cfg, ifname);

        if (ndev == NULL) {
                WL_ERR(("No softAP interface named %s\n", ifname));
                return BCME_NOTAP;
        }

        bzero(&rs, sizeof(wl_rateset_args_t));
        error = wldev_iovar_getbuf(ndev, "rateset", NULL, 0,
                &rs, sizeof(wl_rateset_args_t), NULL);
        if (error < 0) {
                WL_ERR(("get rateset failed = %d\n", error));
                return error;
        }

        if (rs.count < 1) {
                WL_ERR(("Failed to get rate count\n"));
                return BCME_ERROR;
        }

        /* Host delivers target rate in the unit of 500kbps */
        /* To make it to 1mbps unit, atof should be implemented for 5.5mbps basic rate */
        for (i = 0; i < rs.count && i < WL_NUMRATES; i++)
                if (rs.rates[i] & WLC_RATE_FLAG)
                        if ((rs.rates[i] & RATE_MASK) == val)
                                break;

        /* Valid rate has been delivered as an argument */
        if (i < rs.count && i < WL_NUMRATES) {
                error = wldev_iovar_setint(ndev, "force_bcn_rspec", val);
                if (error < 0) {
                        WL_ERR(("set beacon rate failed = %d\n", error));
                        return BCME_ERROR;
                }
        } else {
                WL_ERR(("Rate is invalid"));
                return BCME_BADARG;
        }

        return BCME_OK;
}

int
wl_get_ap_basic_rate(struct net_device *dev, char* command, char *ifname, int total_len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhdp;
        wl_rateset_args_t rs;
        int error = BCME_ERROR;
        int i, bytes_written = 0;
        struct net_device *ndev = NULL;

        dhdp = (dhd_pub_t *)(cfg->pub);

        if (!(dhdp->op_mode & DHD_FLAG_HOSTAP_MODE)) {
                WL_ERR(("Not Hostapd mode\n"));
                return BCME_NOTAP;
        }

        ndev = wl_get_ap_netdev(cfg, ifname);

        if (ndev == NULL) {
                WL_ERR(("No softAP interface named %s\n", ifname));
                return BCME_NOTAP;
        }

        bzero(&rs, sizeof(wl_rateset_args_t));
        error = wldev_iovar_getbuf(ndev, "rateset", NULL, 0,
                &rs, sizeof(wl_rateset_args_t), NULL);
        if (error < 0) {
                WL_ERR(("get rateset failed = %d\n", error));
                return error;
        }

        if (rs.count < 1) {
                WL_ERR(("Failed to get rate count\n"));
                return BCME_ERROR;
        }

        /* Delivers basic rate in the unit of 500kbps to host */
        for (i = 0; i < rs.count && i < WL_NUMRATES; i++)
                if (rs.rates[i] & WLC_RATE_FLAG)
                        bytes_written += snprintf(command + bytes_written, total_len,
                                                        "%d ", rs.rates[i] & RATE_MASK);

        /* Remove last space in the command buffer */
        if (bytes_written && (bytes_written < total_len)) {
                command[bytes_written - 1] = '\0';
                bytes_written--;
        }

        return bytes_written;

}
#endif /* SUPPORT_AP_HIGHER_BEACONRATE */

#ifdef SUPPORT_AP_RADIO_PWRSAVE
#define MSEC_PER_MIN    (60000L)

static int
_wl_update_ap_rps_params(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = NULL;
        rpsnoa_iovar_params_t iovar;
        u8 smbuf[WLC_IOCTL_SMLEN];

        if (!dev)
                return BCME_BADARG;

        cfg = wl_get_cfg(dev);

        memset(&iovar, 0, sizeof(iovar));
        memset(smbuf, 0, sizeof(smbuf));

        iovar.hdr.ver = RADIO_PWRSAVE_VERSION;
        iovar.hdr.subcmd = WL_RPSNOA_CMD_PARAMS;
        iovar.hdr.len = sizeof(iovar);
        iovar.param->band = WLC_BAND_ALL;
        iovar.param->level = cfg->ap_rps_info.level;
        iovar.param->stas_assoc_check = cfg->ap_rps_info.sta_assoc_check;
        iovar.param->pps = cfg->ap_rps_info.pps;
        iovar.param->quiet_time = cfg->ap_rps_info.quiet_time;

        if (wldev_iovar_setbuf(dev, "rpsnoa", &iovar, sizeof(iovar),
                smbuf, sizeof(smbuf), NULL)) {
                WL_ERR(("Failed to set rpsnoa params"));
                return BCME_ERROR;
        }

        return BCME_OK;
}

int
wl_get_ap_rps(struct net_device *dev, char* command, char *ifname, int total_len)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhdp;
        int error = BCME_ERROR;
        int bytes_written = 0;
        struct net_device *ndev = NULL;
        rpsnoa_iovar_status_t iovar;
        u8 smbuf[WLC_IOCTL_SMLEN];
        u32 chanspec = 0;
        u8 idx = 0;
        u16 state;
        u32 sleep;
        u32 time_since_enable;

        dhdp = (dhd_pub_t *)(cfg->pub);

        if (!dhdp) {
                error = BCME_NOTUP;
                goto fail;
        }

        if (!(dhdp->op_mode & DHD_FLAG_HOSTAP_MODE)) {
                WL_ERR(("Not Hostapd mode\n"));
                error = BCME_NOTAP;
                goto fail;
        }

        ndev = wl_get_ap_netdev(cfg, ifname);

        if (ndev == NULL) {
                WL_ERR(("No softAP interface named %s\n", ifname));
                error = BCME_NOTAP;
                goto fail;
        }

        memset(&iovar, 0, sizeof(iovar));
        memset(smbuf, 0, sizeof(smbuf));

        iovar.hdr.ver = RADIO_PWRSAVE_VERSION;
        iovar.hdr.subcmd = WL_RPSNOA_CMD_STATUS;
        iovar.hdr.len = sizeof(iovar);
        iovar.stats->band = WLC_BAND_ALL;

        error = wldev_iovar_getbuf(ndev, "rpsnoa", &iovar, sizeof(iovar),
                smbuf, sizeof(smbuf), NULL);
        if (error < 0) {
                WL_ERR(("get ap radio pwrsave failed = %d\n", error));
                goto fail;
        }

        /* RSDB event doesn't seem to be handled correctly.
         * So check chanspec of AP directly from the firmware
         */
        error = wldev_iovar_getint(ndev, "chanspec", (s32 *)&chanspec);
        if (error < 0) {
                WL_ERR(("get chanspec from AP failed = %d\n", error));
                goto fail;
        }

        chanspec = wl_chspec_driver_to_host(chanspec);
        if (CHSPEC_IS2G(chanspec))
                idx = 0;
        else if (CHSPEC_IS5G(chanspec))
                idx = 1;
        else {
                error = BCME_BADCHAN;
                goto fail;
        }

        state = ((rpsnoa_iovar_status_t *)smbuf)->stats[idx].state;
        sleep = ((rpsnoa_iovar_status_t *)smbuf)->stats[idx].sleep_dur;
        time_since_enable = ((rpsnoa_iovar_status_t *)smbuf)->stats[idx].sleep_avail_dur;

        /* Conver ms to minute, round down only */
        sleep = DIV_U64_BY_U32(sleep, MSEC_PER_MIN);
        time_since_enable = DIV_U64_BY_U32(time_since_enable, MSEC_PER_MIN);

        bytes_written += snprintf(command + bytes_written, total_len,
                "state=%d sleep=%d time_since_enable=%d", state, sleep, time_since_enable);
        error = bytes_written;

fail:
        return error;
}

int
wl_set_ap_rps(struct net_device *dev, bool enable, char *ifname)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhdp;
        struct net_device *ndev = NULL;
        rpsnoa_iovar_t iovar;
        u8 smbuf[WLC_IOCTL_SMLEN];
        int ret = BCME_OK;

        dhdp = (dhd_pub_t *)(cfg->pub);

        if (!dhdp) {
                ret = BCME_NOTUP;
                goto exit;
        }

        if (!(dhdp->op_mode & DHD_FLAG_HOSTAP_MODE)) {
                WL_ERR(("Not Hostapd mode\n"));
                ret = BCME_NOTAP;
                goto exit;
        }

        ndev = wl_get_ap_netdev(cfg, ifname);

        if (ndev == NULL) {
                WL_ERR(("No softAP interface named %s\n", ifname));
                ret = BCME_NOTAP;
                goto exit;
        }

        if (cfg->ap_rps_info.enable != enable) {
                cfg->ap_rps_info.enable = enable;
                if (enable) {
                        ret = _wl_update_ap_rps_params(ndev);
                        if (ret) {
                                WL_ERR(("Filed to update rpsnoa params\n"));
                                goto exit;
                        }
                }
                memset(&iovar, 0, sizeof(iovar));
                memset(smbuf, 0, sizeof(smbuf));

                iovar.hdr.ver = RADIO_PWRSAVE_VERSION;
                iovar.hdr.subcmd = WL_RPSNOA_CMD_ENABLE;
                iovar.hdr.len = sizeof(iovar);
                iovar.data->band = WLC_BAND_ALL;
                iovar.data->value = (int16)enable;

                ret = wldev_iovar_setbuf(ndev, "rpsnoa", &iovar, sizeof(iovar),
                        smbuf, sizeof(smbuf), NULL);
                if (ret) {
                        WL_ERR(("Failed to enable AP radio power save"));
                        goto exit;
                }
                cfg->ap_rps_info.enable = enable;
        }
exit:
        return ret;
}

int
wl_update_ap_rps_params(struct net_device *dev, ap_rps_info_t* rps, char *ifname)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhdp;
        struct net_device *ndev = NULL;

        dhdp = (dhd_pub_t *)(cfg->pub);

        if (!dhdp)
                return BCME_NOTUP;

        if (!(dhdp->op_mode & DHD_FLAG_HOSTAP_MODE)) {
                WL_ERR(("Not Hostapd mode\n"));
                return BCME_NOTAP;
        }

        ndev = wl_get_ap_netdev(cfg, ifname);

        if (ndev == NULL) {
                WL_ERR(("No softAP interface named %s\n", ifname));
                return BCME_NOTAP;
        }

        if (!rps)
                return BCME_BADARG;

        if (rps->pps < RADIO_PWRSAVE_PPS_MIN)
                return BCME_BADARG;

        if (rps->level < RADIO_PWRSAVE_LEVEL_MIN ||
                rps->level > RADIO_PWRSAVE_LEVEL_MAX)
                return BCME_BADARG;

        if (rps->quiet_time < RADIO_PWRSAVE_QUIETTIME_MIN)
                return BCME_BADARG;

        if (rps->sta_assoc_check > RADIO_PWRSAVE_ASSOCCHECK_MAX ||
                rps->sta_assoc_check < RADIO_PWRSAVE_ASSOCCHECK_MIN)
                return BCME_BADARG;

        cfg->ap_rps_info.pps = rps->pps;
        cfg->ap_rps_info.level = rps->level;
        cfg->ap_rps_info.quiet_time = rps->quiet_time;
        cfg->ap_rps_info.sta_assoc_check = rps->sta_assoc_check;

        if (cfg->ap_rps_info.enable) {
                if (_wl_update_ap_rps_params(ndev)) {
                        WL_ERR(("Failed to update rpsnoa params"));
                        return BCME_ERROR;
                }
        }

        return BCME_OK;
}

void
wl_cfg80211_init_ap_rps(struct bcm_cfg80211 *cfg)
{
        cfg->ap_rps_info.enable = FALSE;
        cfg->ap_rps_info.sta_assoc_check = RADIO_PWRSAVE_STAS_ASSOC_CHECK;
        cfg->ap_rps_info.pps = RADIO_PWRSAVE_PPS;
        cfg->ap_rps_info.quiet_time = RADIO_PWRSAVE_QUIET_TIME;
        cfg->ap_rps_info.level = RADIO_PWRSAVE_LEVEL;
}
#endif /* SUPPORT_AP_RADIO_PWRSAVE */

int
wl_cfg80211_iface_count(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct net_info *iter, *next;
        int iface_count = 0;

        /* Return the count of network interfaces (skip netless p2p discovery
         * interface)
         */
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif
        for_each_ndev(cfg, iter, next) {
                if (iter->ndev) {
                        iface_count++;
                }
        }
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic pop
#endif // endif
        return iface_count;
}

#ifdef DHD_ABORT_SCAN_CREATE_INTERFACE
int
wl_abort_scan_and_check(struct bcm_cfg80211 *cfg)
{
        int wait_cnt = MAX_SCAN_ABORT_WAIT_CNT;
        int ret = TRUE;

        wl_cfg80211_scan_abort(cfg);
        while (wl_get_drv_status_all(cfg, SCANNING) && wait_cnt) {
                WL_DBG(("Waiting for SCANNING terminated, wait_cnt: %d\n", wait_cnt));
                wait_cnt--;
                OSL_SLEEP(WAIT_SCAN_ABORT_OSL_SLEEP_TIME);
        }

        if (!wait_cnt && wl_get_drv_status_all(cfg, SCANNING)) {
                WL_ERR(("Failed to abort scan\n"));
                ret = FALSE;
        }

        return ret;
}
#endif /* DHD_ABORT_SCAN_CREATE_INTERFACE */

#ifdef DHD_USE_CHECK_DONGLE_IDLE
#define CHECK_DONGLE_IDLE_TIME  50
#define CHECK_DONGLE_IDLE_CNT   100

int
wl_check_dongle_idle(struct wiphy *wiphy)
{
        int error = 0;
        struct bcm_cfg80211 *cfg = wiphy_priv(wiphy);
        struct net_device *primary_ndev;
        int retry = 0;
        struct channel_info ci;

        if (!cfg) {
                return FALSE;
        }

        /* Use primary I/F for sending cmds down to firmware */
        primary_ndev = bcmcfg_to_prmry_ndev(cfg);

        while (retry++ < CHECK_DONGLE_IDLE_CNT) {
                memset(&ci, 0, sizeof(ci));
                error = wldev_ioctl_get(primary_ndev, WLC_GET_CHANNEL, &ci, sizeof(ci));
                if (error != BCME_OK || ci.scan_channel != 0) {
                        if (error == -ENODEV) {
                                WL_ERR(("Firmware is not ready, return TRUE\n"));
                                return TRUE;
                        }
                        WL_DBG(("Firmware is busy(err:%d scan channel:%d). wait %dms\n",
                                error, ci.scan_channel, CHECK_DONGLE_IDLE_TIME));
                } else {
                        break;
                }
                wl_delay(CHECK_DONGLE_IDLE_TIME);
        }
        if (retry >= CHECK_DONGLE_IDLE_CNT) {
                WL_ERR(("DONGLE is BUSY too long\n"));
                return FALSE;
        }
        WL_DBG(("DONGLE is idle\n"));
        return TRUE;
}
#undef CHECK_DONGLE_IDLE_TIME
#undef CHECK_DONGLE_IDLE_CNT
#endif /* DHD_USE_CHECK_DONGLE_IDLE */

#ifdef WES_SUPPORT
#ifdef CUSTOMER_SCAN_TIMEOUT_SETTING
s32 wl_cfg80211_custom_scan_time(struct net_device *dev,
                enum wl_custom_scan_time_type type, int time)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        if (cfg == NULL) {
                return FALSE;
        }

        switch (type) {
                case WL_CUSTOM_SCAN_CHANNEL_TIME :
                        WL_ERR(("Scan Channel Time %d\n", time));
                        cfg->custom_scan_channel_time = time;
                        break;
                case WL_CUSTOM_SCAN_UNASSOC_TIME :
                        WL_ERR(("Scan Unassoc Time %d\n", time));
                        cfg->custom_scan_unassoc_time = time;
                        break;
                case WL_CUSTOM_SCAN_PASSIVE_TIME :
                        WL_ERR(("Scan Passive Time %d\n", time));
                        cfg->custom_scan_passive_time = time;
                        break;
                case WL_CUSTOM_SCAN_HOME_TIME :
                        WL_ERR(("Scan Home Time %d\n", time));
                        cfg->custom_scan_home_time = time;
                        break;
                case WL_CUSTOM_SCAN_HOME_AWAY_TIME :
                        WL_ERR(("Scan Home Away Time %d\n", time));
                        cfg->custom_scan_home_away_time = time;
                        break;
                default:
                        return FALSE;
        }
        return TRUE;
}
#endif /* CUSTOMER_SCAN_TIMEOUT_SETTING */
#endif /* WES_SUPPORT */
#ifdef WBTEXT
static bool wl_cfg80211_wbtext_check_bssid_list(struct bcm_cfg80211 *cfg, struct ether_addr *ea)
{
        wl_wbtext_bssid_t *bssid = NULL;
#if defined(STRICT_GCC_WARNINGS) && defined(__GNUC__)
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wcast-qual"
#endif // endif

        /* check duplicate */
        list_for_each_entry(bssid, &cfg->wbtext_bssid_list, list) {
                if (!memcmp(bssid->ea.octet, ea, ETHER_ADDR_LEN)) {
                        return FALSE;
                }
        }

        return TRUE;
}

static bool wl_cfg80211_wbtext_add_bssid_list(struct bcm_cfg80211 *cfg, struct ether_addr *ea)
{
        wl_wbtext_bssid_t *bssid = NULL;
        char eabuf[ETHER_ADDR_STR_LEN];

        bssid = (wl_wbtext_bssid_t *)MALLOC(cfg->osh, sizeof(wl_wbtext_bssid_t));
        if (bssid == NULL) {
                WL_ERR(("alloc failed\n"));
                return FALSE;
        }

        memcpy(bssid->ea.octet, ea, ETHER_ADDR_LEN);

        INIT_LIST_HEAD(&bssid->list);
        list_add_tail(&bssid->list, &cfg->wbtext_bssid_list);

        WL_DBG(("add wbtext bssid : %s\n", bcm_ether_ntoa(ea, eabuf)));

        return TRUE;
}

static void wl_cfg80211_wbtext_clear_bssid_list(struct bcm_cfg80211 *cfg)
{
        wl_wbtext_bssid_t *bssid = NULL;
        char eabuf[ETHER_ADDR_STR_LEN];

        while (!list_empty(&cfg->wbtext_bssid_list)) {
                bssid = list_entry(cfg->wbtext_bssid_list.next, wl_wbtext_bssid_t, list);
                if (bssid) {
                        WL_DBG(("clear wbtext bssid : %s\n", bcm_ether_ntoa(&bssid->ea, eabuf)));
                        list_del(&bssid->list);
                        MFREE(cfg->osh, bssid, sizeof(wl_wbtext_bssid_t));
                }
        }
}

static void wl_cfg80211_wbtext_update_rcc(struct bcm_cfg80211 *cfg, struct net_device *dev)
{
        struct wl_connect_info *conn_info = wl_to_conn(cfg);
        bcm_tlv_t * cap_ie = NULL;
        bool req_sent = FALSE;
        struct wl_profile *profile;

        WL_DBG(("Enter\n"));

        profile = wl_get_profile_by_netdev(cfg, dev);
        if (!profile) {
                WL_ERR(("no profile exists\n"));
                return;
        }

        if (wl_cfg80211_wbtext_check_bssid_list(cfg,
                        (struct ether_addr *)&profile->bssid) == FALSE) {
                WL_DBG(("already updated\n"));
                return;
        }

        /* first, check NBR bit in RRM IE */
        if ((cap_ie = bcm_parse_tlvs(conn_info->resp_ie, conn_info->resp_ie_len,
                        DOT11_MNG_RRM_CAP_ID)) != NULL) {
                if (isset(cap_ie->data, DOT11_RRM_CAP_NEIGHBOR_REPORT)) {
                        req_sent = wl_cfg80211_wbtext_send_nbr_req(cfg, dev, profile);
                }
        }

        /* if RRM nbr was not supported, check BTM bit in extend cap. IE */
        if (!req_sent) {
                if ((cap_ie = bcm_parse_tlvs(conn_info->resp_ie, conn_info->resp_ie_len,
                                DOT11_MNG_EXT_CAP_ID)) != NULL) {
                        if (cap_ie->len >= DOT11_EXTCAP_LEN_BSSTRANS &&
                                        isset(cap_ie->data, DOT11_EXT_CAP_BSSTRANS_MGMT)) {
                                wl_cfg80211_wbtext_send_btm_query(cfg, dev, profile);
                        }
                }
        }
}

static bool wl_cfg80211_wbtext_send_nbr_req(struct bcm_cfg80211 *cfg, struct net_device *dev,
        struct wl_profile *profile)
{
        int error = -1;
        char *smbuf = NULL;
        struct wl_connect_info *conn_info = wl_to_conn(cfg);
        bcm_tlv_t * rrm_cap_ie = NULL;
        wlc_ssid_t *ssid = NULL;
        bool ret = FALSE;

        WL_DBG(("Enter\n"));

        /* check RRM nbr bit in extend cap. IE of assoc response */
        if ((rrm_cap_ie = bcm_parse_tlvs(conn_info->resp_ie, conn_info->resp_ie_len,
                        DOT11_MNG_RRM_CAP_ID)) != NULL) {
                if (!isset(rrm_cap_ie->data, DOT11_RRM_CAP_NEIGHBOR_REPORT)) {
                        WL_DBG(("AP doesn't support neighbor report\n"));
                        return FALSE;
                }
        }

        smbuf = (char *)MALLOCZ(cfg->osh, WLC_IOCTL_MAXLEN);
        if (smbuf == NULL) {
                WL_ERR(("failed to allocated memory\n"));
                goto nbr_req_out;
        }

        ssid = (wlc_ssid_t *)MALLOCZ(cfg->osh, sizeof(wlc_ssid_t));
        if (ssid == NULL) {
                WL_ERR(("failed to allocated memory\n"));
                goto nbr_req_out;
        }

        ssid->SSID_len = MIN(profile->ssid.SSID_len, DOT11_MAX_SSID_LEN);
        memcpy(ssid->SSID, profile->ssid.SSID, ssid->SSID_len);

        error = wldev_iovar_setbuf(dev, "rrm_nbr_req", ssid,
                sizeof(wlc_ssid_t), smbuf, WLC_IOCTL_MAXLEN, NULL);
        if (error == BCME_OK) {
                ret = wl_cfg80211_wbtext_add_bssid_list(cfg,
                        (struct ether_addr *)&profile->bssid);
        } else {
                WL_ERR(("failed to send neighbor report request, error=%d\n", error));
        }

nbr_req_out:
        if (ssid) {
                MFREE(cfg->osh, ssid, sizeof(wlc_ssid_t));
        }

        if (smbuf) {
                MFREE(cfg->osh, smbuf, WLC_IOCTL_MAXLEN);
        }
        return ret;
}

static bool wl_cfg80211_wbtext_send_btm_query(struct bcm_cfg80211 *cfg, struct net_device *dev,
        struct wl_profile *profile)

{
        int error = -1;
        bool ret = FALSE;
        wl_bsstrans_query_t btq;

        WL_DBG(("Enter\n"));

        memset(&btq, 0, sizeof(wl_bsstrans_query_t));

        btq.version = WL_BSSTRANS_QUERY_VERSION_1;
        error = wldev_iovar_setbuf(dev, "wnm_bsstrans_query", &btq,
                sizeof(btq), cfg->ioctl_buf, WLC_IOCTL_SMLEN, &cfg->ioctl_buf_sync);
        if (error == BCME_OK) {
                ret = wl_cfg80211_wbtext_add_bssid_list(cfg,
                        (struct ether_addr *)&profile->bssid);
        } else {
                WL_ERR(("%s: failed to set BTM query, error=%d\n", __FUNCTION__, error));
        }
        return ret;
}

static void wl_cfg80211_wbtext_set_wnm_maxidle(struct bcm_cfg80211 *cfg, struct net_device *dev)
{
        keepalives_max_idle_t keepalive = {0, 0, 0, 0};
        s32 bssidx, error;
        int wnm_maxidle = 0;
        struct wl_connect_info *conn_info = wl_to_conn(cfg);

        /* AP supports wnm max idle ? */
        if (bcm_parse_tlvs(conn_info->resp_ie, conn_info->resp_ie_len,
                        DOT11_MNG_BSS_MAX_IDLE_PERIOD_ID) != NULL) {
                error = wldev_iovar_getint(dev, "wnm_maxidle", &wnm_maxidle);
                if (error < 0) {
                        WL_ERR(("failed to get wnm max idle period : %d\n", error));
                }
        }

        WL_DBG(("wnm max idle period : %d\n", wnm_maxidle));

        /* if wnm maxidle has valid period, set it as keep alive */
        if (wnm_maxidle > 0) {
                keepalive.keepalive_count = 1;
        }

        if ((bssidx = wl_get_bssidx_by_wdev(cfg, dev->ieee80211_ptr)) >= 0) {
                error = wldev_iovar_setbuf_bsscfg(dev, "wnm_keepalives_max_idle", &keepalive,
                        sizeof(keepalives_max_idle_t), cfg->ioctl_buf, WLC_IOCTL_SMLEN,
                        bssidx, &cfg->ioctl_buf_sync);
                if (error < 0) {
                        WL_ERR(("set wnm_keepalives_max_idle failed : %d\n", error));
                }
        }
}

static int
wl_cfg80211_recv_nbr_resp(struct net_device *dev, uint8 *body, uint body_len)
{
        dot11_rm_action_t *rm_rep;
        bcm_tlv_t *tlvs;
        uint tlv_len;
        int i, error;
        dot11_neighbor_rep_ie_t *nbr_rep_ie;
        chanspec_t ch;
        wl_roam_channel_list_t channel_list;
        char iobuf[WLC_IOCTL_SMLEN];

        if (body_len < DOT11_RM_ACTION_LEN) {
                WL_ERR(("Received Neighbor Report frame with incorrect length %d\n",
                        body_len));
                return BCME_ERROR;
        }

        rm_rep = (dot11_rm_action_t *)body;
        WL_DBG(("received neighbor report (token = %d)\n", rm_rep->token));

        tlvs = (bcm_tlv_t *)&rm_rep->data[0];

        tlv_len = body_len - DOT11_RM_ACTION_LEN;

        while (tlvs && tlvs->id == DOT11_MNG_NEIGHBOR_REP_ID) {
                nbr_rep_ie = (dot11_neighbor_rep_ie_t *)tlvs;

                if (nbr_rep_ie->len < DOT11_NEIGHBOR_REP_IE_FIXED_LEN) {
                        WL_ERR(("malformed Neighbor Report element with length %d\n",
                                nbr_rep_ie->len));
                        tlvs = bcm_next_tlv(tlvs, &tlv_len);
                        continue;
                }

                ch = CH20MHZ_CHSPEC(nbr_rep_ie->channel);
                WL_DBG(("ch:%d, bssid:"MACDBG"\n",
                        ch, MAC2STRDBG(nbr_rep_ie->bssid.octet)));

                /* get RCC list */
                error = wldev_iovar_getbuf(dev, "roamscan_channels", 0, 0,
                        (void *)&channel_list, sizeof(channel_list), NULL);
                if (error) {
                        WL_ERR(("Failed to get roamscan channels, error = %d\n", error));
                        return BCME_ERROR;
                }

                /* update RCC */
                if (channel_list.n < MAX_ROAM_CHANNEL) {
                        for (i = 0; i < channel_list.n; i++) {
                                if (channel_list.channels[i] == ch) {
                                        break;
                                }
                        }
                        if (i == channel_list.n) {
                                channel_list.channels[channel_list.n] = ch;
                                channel_list.n++;
                        }
                }

                /* set RCC list */
                error = wldev_iovar_setbuf(dev, "roamscan_channels", &channel_list,
                        sizeof(channel_list), iobuf, sizeof(iobuf), NULL);
                if (error) {
                        WL_DBG(("Failed to set roamscan channels, error = %d\n", error));
                }

                tlvs = bcm_next_tlv(tlvs, &tlv_len);
        }

        return BCME_OK;
}
#endif /* WBTEXT */

#ifdef DYNAMIC_MUMIMO_CONTROL
void
wl_set_murx_block_eapol_status(struct bcm_cfg80211 *cfg, int enable)
{
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        if (dhdp) {
                dhdp->murx_block_eapol = enable;
        }
}

bool
wl_get_murx_reassoc_status(struct bcm_cfg80211 *cfg)
{
        int status = 0;
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        if (dhdp) {
                status = dhdp->reassoc_mumimo_sw;
        }

        return status ? TRUE : FALSE;
}

void
wl_set_murx_reassoc_status(struct bcm_cfg80211 *cfg, int enable)
{
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        if (dhdp) {
                dhdp->reassoc_mumimo_sw = enable;
        }
}

int
wl_check_bss_support_mumimo(struct net_device *dev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        struct wiphy *wiphy = NULL;
        struct cfg80211_bss *bss = NULL;
        struct wlc_ssid *ssid = NULL;
        struct wl_bss_info *bi = NULL;
        bcm_tlv_t *vht_ie = NULL;
        u8 *bssid = NULL;
        u8 *ie = NULL;
        u32 ie_len = 0;
        u16 ie_mu_mimo_cap = 0;

        if (!wl_get_drv_status(cfg, CONNECTED, dev)) {
                WL_DBG(("Not associated\n"));
                return BCME_ERROR;
        }

        wiphy = bcmcfg_to_wiphy(cfg);
        ssid = (struct wlc_ssid *)wl_read_prof(cfg, dev, WL_PROF_SSID);
        bssid = (u8 *)wl_read_prof(cfg, dev, WL_PROF_BSSID);

        if (wiphy && ssid && bssid) {
                bss = CFG80211_GET_BSS(wiphy, NULL, bssid,
                        ssid->SSID, ssid->SSID_len);
        } else {
                WL_DBG(("Could not find the associated AP\n"));
                return FALSE;
        }

        if (bss) {
#if defined(WL_CFG80211_P2P_DEV_IF)
                ie = (u8 *)bss->ies->data;
                ie_len = bss->ies->len;
#else
                ie = bss->information_elements;
                ie_len = bss->len_information_elements;
#endif /* WL_CFG80211_P2P_DEV_IF */
                bi = (struct wl_bss_info *)(cfg->extra_buf + 4);
                if (bi && bi->vht_cap) {
                        vht_ie = bcm_parse_tlvs(ie, ie_len, DOT11_MNG_VHT_CAP_ID);
                        if (vht_ie) {
                                ie_mu_mimo_cap = (vht_ie->data[2] & 0x08) >> 3;
                        }
                }
                CFG80211_PUT_BSS(wiphy, bss);
        }

        return ie_mu_mimo_cap ? TRUE : FALSE;
}

int
wl_get_murx_bfe_cap(struct net_device *dev, int *cap)
{
        int err;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        /* Now there is only single interface */
        err = wldev_iovar_getbuf_bsscfg(dev, "murx_bfe_cap",
                NULL, 0, cfg->ioctl_buf, WLC_IOCTL_SMLEN, 0, &cfg->ioctl_buf_sync);
        if (unlikely(err)) {
                WL_ERR(("Failed to get murx_bfe_cap IOVAR, error = %d\n", err));
                return err;
        }

        memcpy(cap, cfg->ioctl_buf, sizeof(*cap));

        return err;
}

int
wl_set_murx_bfe_cap(struct net_device *dev, int val, bool reassoc_req)
{
        int err;
        int cur_val;
        int iface_count = wl_cfg80211_iface_count(dev);
        struct ether_addr bssid;
        wl_reassoc_params_t params;
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);

        if (iface_count > 1) {
                WL_ERR(("murx_bfe_cap change is not allowed when "
                        "there are multiple interfaces\n"));
                return -EINVAL;
        }

        if (reassoc_req && wl_get_murx_reassoc_status(cfg)) {
                WL_ERR(("Reassociation is in progress...\n"));
                return BCME_OK;
        }

        /* Check the current value */
        err = wl_get_murx_bfe_cap(dev, &cur_val);
        if (err) {
                return err;
        }

        if (cur_val == val) {
                /* We don't need to configure the new value. */
                WL_DBG(("Already set murx_bfe_cap to %d\n", val));
                return BCME_OK;
        }

        /* Now there is only single interface */
        err = wldev_iovar_setbuf_bsscfg(dev, "murx_bfe_cap", (void *)&val,
                sizeof(val), cfg->ioctl_buf, WLC_IOCTL_SMLEN, 0,
                &cfg->ioctl_buf_sync);
        if (unlikely(err)) {
                WL_ERR(("Failed to set murx_bfe_cap IOVAR to %d,"
                        "error %d\n", val, err));
                return err;
        }

        if (reassoc_req) {
                DHD_DISABLE_RUNTIME_PM(dhdp);

                /* Enable Tx flow control not to send any data frames to dongle
                 * while reassociation procedure is in progress
                 */
                dhd_txflowcontrol(dhdp, ALL_INTERFACES, ON);

                /* If successful intiate a reassoc */
                if ((err = wldev_ioctl_get(dev, WLC_GET_BSSID, &bssid, ETHER_ADDR_LEN)) < 0) {
                        WL_ERR(("Failed to get bssid, error=%d\n", err));
                        DHD_ENABLE_RUNTIME_PM(dhdp);
                        dhd_txflowcontrol(dhdp, ALL_INTERFACES, OFF);
                        return err;
                }

                bzero(&params, sizeof(wl_reassoc_params_t));
                memcpy(&params.bssid, &bssid, ETHER_ADDR_LEN);

                if ((err = wldev_ioctl_set(dev, WLC_REASSOC, &params,
                        sizeof(wl_reassoc_params_t))) < 0) {
                        WL_ERR(("reassoc failed err:%d\n", err));
                        DHD_ENABLE_RUNTIME_PM(dhdp);
                        dhd_txflowcontrol(dhdp, ALL_INTERFACES, OFF);
                        /* configure previous value */
                        err = wldev_iovar_setbuf_bsscfg(dev, "murx_bfe_cap", (void *)&cur_val,
                                sizeof(val), cfg->ioctl_buf, WLC_IOCTL_SMLEN, 0,
                                &cfg->ioctl_buf_sync);
                        if (unlikely(err)) {
                                WL_ERR(("Failed to set murx_bfe_cap IOVAR to %d,"
                                        "error %d\n", val, err));
                        }
                        wl_set_murx_reassoc_status(cfg, FALSE);
                } else {
                        WL_ERR(("reassoc issued successfully\n"));
                        wl_set_murx_reassoc_status(cfg, TRUE);
                        wl_set_murx_block_eapol_status(cfg, TRUE);
                }
        }

        return err;
}
#endif /* DYNAMIC_MUMIMO_CONTROL */

#ifdef SUPPORT_SET_CAC
void
wl_cfg80211_set_cac(struct bcm_cfg80211 *cfg, int enable)
{
        int ret = 0;
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);

#ifdef SUPPORT_CUSTOM_SET_CAC
        if (cfg->enable_cac == 0) {
                WL_DBG(("enable_cac %d\n", cfg->enable_cac));
                enable = 0;
        }
#endif  /* SUPPORT_CUSTOM_SET_CAC */

        WL_DBG(("cac enable %d, op_mode 0x%04x\n", enable, dhd->op_mode));
        if (!dhd) {
                WL_ERR(("dhd is NULL\n"));
                return;
        }
        if (enable && ((dhd->op_mode & DHD_FLAG_HOSTAP_MODE) ||
                (dhd->op_mode & DHD_FLAG_P2P_GC_MODE) ||
                (dhd->op_mode & DHD_FLAG_P2P_GO_MODE))) {
                WL_ERR(("op_mode 0x%04x\n", dhd->op_mode));
                enable = 0;
        }
        if ((ret = dhd_wl_ioctl_set_intiovar(dhd, "cac", enable,
                WLC_SET_VAR, TRUE, 0)) < 0) {
                WL_ERR(("Failed set CAC, ret=%d\n", ret));
        } else {
                WL_DBG(("CAC set successfully\n"));
        }
        return;
}

int
wl_cfg80211_enable_cac(struct net_device *dev, int enable)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);

        WL_DBG(("enable %d\n", enable));

#ifdef SUPPORT_CUSTOM_SET_CAC
        cfg->enable_cac = enable;
#endif /* SUPPORT_CUSTOM_SET_CAC */
        wl_cfg80211_set_cac(cfg, enable);
        return 0;
}
#endif /* SUPPORT_SET_CAC */

#ifdef SUPPORT_RSSI_SUM_REPORT
int
wl_get_rssi_per_ant(struct net_device *dev, char *ifname, char *peer_mac, void *param)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        wl_rssi_ant_mimo_t *get_param = (wl_rssi_ant_mimo_t *)param;
        rssi_ant_param_t *set_param = NULL;
        struct net_device *ifdev = NULL;
        char iobuf[WLC_IOCTL_SMLEN];
        int err = BCME_OK;
        int iftype = 0;

        memset(iobuf, 0, WLC_IOCTL_SMLEN);

        /* Check the interface type */
        ifdev = wl_get_netdev_by_name(cfg, ifname);
        if (ifdev == NULL) {
                WL_ERR(("Could not find net_device for ifname:%s\n", ifname));
                err = BCME_BADARG;
                goto fail;
        }

        iftype = ifdev->ieee80211_ptr->iftype;
        if (iftype == NL80211_IFTYPE_AP || iftype == NL80211_IFTYPE_P2P_GO) {
                if (peer_mac) {
                        set_param = (rssi_ant_param_t *)MALLOCZ(cfg->osh, sizeof(rssi_ant_param_t));
                        err = wl_cfg80211_ether_atoe(peer_mac, &set_param->ea);
                        if (!err) {
                                WL_ERR(("Invalid Peer MAC format\n"));
                                err = BCME_BADARG;
                                goto fail;
                        }
                } else {
                        WL_ERR(("Peer MAC is not provided for iftype %d\n", iftype));
                        err = BCME_BADARG;
                        goto fail;
                }
        }

        err = wldev_iovar_getbuf(ifdev, "phy_rssi_ant", peer_mac ?
                (void *)&(set_param->ea) : NULL, peer_mac ? ETHER_ADDR_LEN : 0,
                (void *)iobuf, sizeof(iobuf), NULL);
        if (unlikely(err)) {
                WL_ERR(("Failed to get rssi info, err=%d\n", err));
        } else {
                memcpy(get_param, iobuf, sizeof(wl_rssi_ant_mimo_t));
                if (get_param->count == 0) {
                        WL_ERR(("Not supported on this chip\n"));
                        err = BCME_UNSUPPORTED;
                }
        }

fail:
        if (set_param) {
                MFREE(cfg->osh, set_param, sizeof(rssi_ant_param_t));
        }

        return err;
}

int
wl_get_rssi_logging(struct net_device *dev, void *param)
{
        rssilog_get_param_t *get_param = (rssilog_get_param_t *)param;
        char iobuf[WLC_IOCTL_SMLEN];
        int err = BCME_OK;

        memset(iobuf, 0, WLC_IOCTL_SMLEN);
        memset(get_param, 0, sizeof(*get_param));
        err = wldev_iovar_getbuf(dev, "rssilog", NULL, 0, (void *)iobuf,
                sizeof(iobuf), NULL);
        if (err) {
                WL_ERR(("Failed to get rssi logging info, err=%d\n", err));
        } else {
                memcpy(get_param, iobuf, sizeof(*get_param));
        }

        return err;
}

int
wl_set_rssi_logging(struct net_device *dev, void *param)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(dev);
        rssilog_set_param_t *set_param = (rssilog_set_param_t *)param;
        int err;

        err = wldev_iovar_setbuf(dev, "rssilog", set_param,
                sizeof(*set_param), cfg->ioctl_buf, WLC_IOCTL_SMLEN,
                &cfg->ioctl_buf_sync);
        if (err) {
                WL_ERR(("Failed to set rssi logging param, err=%d\n", err));
        }

        return err;
}
#endif /* SUPPORT_RSSI_SUM_REPORT */

#ifdef APSTA_RESTRICTED_CHANNEL
#define CMD_BLOCK_CH    "block_ch"
#define BAND5G_CHANNELS_BLOCK_OP1       999
#define BAND5G_CHANNELS_BLOCK_OP2       -1

bool
wl_cfg80211_check_indoor_channels(struct net_device *ndev, int channel)
{
        uint i = 0;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        wl_block_ch_t *block_ch = NULL;
        int data_len = WLC_IOCTL_SMLEN;
        bool ret = FALSE;

        /* Get operation */
        block_ch = (wl_block_ch_t *)MALLOCZ(dhdp->osh, data_len);
        if (block_ch == NULL) {
                WL_ERR(("Fail to allocate memory\n"));
                goto exit;
        }

        if (wl_cfg80211_read_indoor_channels(ndev, block_ch, data_len) < 0) {
                WL_ERR(("Failed to read indoor channels\n"));
                goto exit;
        }

        if (block_ch->channel_num) {
                for (i = 0; i < block_ch->channel_num; i++) {
                        if (channel == block_ch->channel[i]) {
                                WL_ERR(("channel %d is in the indoor "
                                        "channel list\n", channel));
                                ret = TRUE;
                                break;
                        }
                }
        }

exit:
        if (block_ch) {
                MFREE(dhdp->osh, block_ch, data_len);
        }

        return ret;
}

s32
wl_cfg80211_read_indoor_channels(struct net_device *ndev, void *buf, int buflen)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        wl_block_ch_t *iov_buf = NULL;
        wl_block_ch_t *block_ch = NULL;
        int data_len = 0;
        int err = BCME_OK;

        if (!dhdp) {
                WL_ERR(("dhdp is NULL\n"));
                return BCME_ERROR;
        }

        if (buflen < WLC_IOCTL_SMLEN) {
                WL_ERR(("Buf is too short, buflen=%d\n", buflen));
                return BCME_BUFTOOSHORT;
        }

        data_len = OFFSETOF(wl_block_ch_t, channel);
        iov_buf = (wl_block_ch_t *)MALLOCZ(dhdp->osh, data_len);
        if (iov_buf == NULL) {
                WL_ERR(("Fail to allocate memory\n"));
                err = BCME_NOMEM;
                goto exit;
        }

        iov_buf->version = WL_BLOCK_CHANNEL_VER_1;
        iov_buf->len = data_len;
        iov_buf->band = WF_CHAN_FACTOR_5_G;
        iov_buf->channel_num = 0;

        err = wldev_iovar_getbuf(ndev, CMD_BLOCK_CH, iov_buf, data_len,
                cfg->ioctl_buf, WLC_IOCTL_SMLEN, &cfg->ioctl_buf_sync);
        if (err < 0) {
                WL_ERR(("Setting block_ch failed with err=%d \n", err));
                goto exit;
        }

        block_ch = (wl_block_ch_t *)(cfg->ioctl_buf);
        if (block_ch->version != WL_BLOCK_CHANNEL_VER_1) {
                WL_ERR(("Version mismatched! actual %d expected: %d\n",
                        block_ch->version, WL_BLOCK_CHANNEL_VER_1));
                err = BCME_ERROR;
        } else {
                memcpy(buf, cfg->ioctl_buf, WLC_IOCTL_SMLEN);
        }

exit:
        if (iov_buf) {
                MFREE(dhdp->osh, iov_buf, data_len);
        }

        return err;
}

s32
wl_cfg80211_set_indoor_channels(struct net_device *ndev, char *command, int total_len)
{
        uint i = 0, j = 0;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        struct net_device *prmry_ndev = bcmcfg_to_prmry_ndev(cfg);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        wl_block_ch_t *block_ch = NULL;
        int block_ch_len = 0;
        int err = BCME_OK;
        ulong channel_num = 0;
        ulong channel = 0;
        char *pos, *token;
        u8 chan_buf[sizeof(u32)*(WL_NUMCHANNELS + 1)];
        wl_uint32_list_t *list;
        u32 n_valid_chan = 0;
        bool band5g_all_ch = FALSE;

        BCM_REFERENCE(total_len);

        pos = command;
        /* drop command */
        token = bcmstrtok(&pos, " ", NULL);
        /* number of channel */
        token = bcmstrtok(&pos, " ", NULL);

        if (token == NULL) {
                err = BCME_BADARG;
                goto exit;
        }

        channel_num = bcm_strtoul(token, NULL, 0);
        if (token == NULL) {
                err = BCME_BADARG;
                goto exit;
        }

        if ((channel_num == BAND5G_CHANNELS_BLOCK_OP1) ||
                (channel_num == BAND5G_CHANNELS_BLOCK_OP2)) {

                band5g_all_ch = TRUE;

                if ((err = wl_get_valid_channels(ndev, chan_buf, sizeof(chan_buf))) < 0) {
                        WL_ERR(("Failed to get valid channels - err %d\n", err));
                        goto exit;
                } else {
                        list = (wl_uint32_list_t *) chan_buf;
                        n_valid_chan = dtoh32(list->count);
                        channel_num = 0;

                        if (n_valid_chan > WL_NUMCHANNELS) {
                                WL_ERR(("wrong n_valid_chan:%d\n", n_valid_chan));
                                err = BCME_OUTOFRANGECHAN;
                                goto exit;
                        }

                        for (i = 0; i < n_valid_chan; i++) {
                                if (CHANNEL_IS_5G(dtoh32(list->element[i])))  {
                                        channel_num++;
                                }
                        }
                        if (channel_num == 0) {
                                WL_ERR(("5G channels are not supported\n"));
                                err = BCME_BADCHAN;
                                goto exit;
                        }
                }
        } else if (channel_num > MAXCHANNEL_NUM) {
                WL_ERR(("Out of Range. Max channel number is %d\n", MAXCHANNEL_NUM));
                err = BCME_RANGE;
                goto exit;
        }

        block_ch_len = OFFSETOF(wl_block_ch_t, channel) + channel_num;
        block_ch = (wl_block_ch_t *)MALLOCZ(dhdp->osh, block_ch_len);

        if (unlikely(!block_ch)) {
                WL_ERR(("Failed to allocate memory\n"));
                err = BCME_NOMEM;
                goto exit;
        }

        block_ch->version = WL_BLOCK_CHANNEL_VER_1;
        block_ch->len = block_ch_len;
        block_ch->band = WF_CHAN_FACTOR_5_G;
        block_ch->channel_num = channel_num;

        if (band5g_all_ch) {
                for (i = 0; i < n_valid_chan; i++) {
                        channel = dtoh32(list->element[i]);
                        if (CHANNEL_IS_5G(channel)) {
                                block_ch->channel[j] = channel;
                                j++;
                                if (j >= channel_num) {
                                        break;
                                }
                        }
                }
        } else {
                for (i = 0; i < channel_num; i++) {
                        token = bcmstrtok(&pos, " ", NULL);
                        if (token == NULL) {
                                err = BCME_BADARG;
                                goto exit;
                        }
                        channel = bcm_strtoul(token, NULL, 0);

                        if (!CHANNEL_IS_5G(channel)) {
                                WL_ERR(("%d is Invalid Channel!\n", block_ch->channel[i]));
                                err = BCME_BADCHAN;
                                goto exit;
                        }
                        block_ch->channel[i] = channel;
                }
        }

        /* Abort any association before setting block channel */
        if (wl_get_drv_status(cfg, CONNECTING, prmry_ndev)) {
                wl_cfg80211_disassoc(prmry_ndev);
        }

        /* Setting block channel list to fw */
        if ((err = wldev_iovar_setbuf(ndev, CMD_BLOCK_CH, block_ch, block_ch->len,
                cfg->ioctl_buf, WLC_IOCTL_SMLEN,  &cfg->ioctl_buf_sync))) {
                WL_ERR(("Setting block_ch failed with err = %d\n", err));
                goto exit;
        }
exit:
        if (err == BCME_BADARG) {
                WL_ERR(("Failed due to Bad Argument!\n"));
        }
        if (block_ch) {
                MFREE(dhdp->osh, block_ch, block_ch_len);
        }
        return err;
}

s32
wl_cfg80211_get_indoor_channels(struct net_device *ndev, char *command, int total_len)
{
        uint i = 0;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        dhd_pub_t *dhdp = (dhd_pub_t *)(cfg->pub);
        wl_block_ch_t *block_ch = NULL;
        int data_len = WLC_IOCTL_SMLEN;
        int err = BCME_OK;
        char *pos;

        pos = command;

        /* Get operation */
        block_ch = (wl_block_ch_t *)MALLOCZ(dhdp->osh, data_len);
        if (block_ch == NULL) {
                WL_ERR(("Fail to allocate memory\n"));
                err = BCME_NOMEM;
                goto exit;
        }

        err = wl_cfg80211_read_indoor_channels(ndev, block_ch, data_len);
        if (err < 0) {
                WL_ERR(("Failed to read indoor channels, err=%d\n", err));
                goto exit;
        }

        if (block_ch->channel_num) {
                pos += snprintf(pos, total_len, "%d ", block_ch->channel_num);
                for (i = 0; i < block_ch->channel_num; i++) {
                        pos += snprintf(pos, total_len, "%d ", block_ch->channel[i]);
                }
                err = (pos - command);
        }

exit:
        if (block_ch) {
                MFREE(dhdp->osh, block_ch, data_len);
        }

        return err;
}
#endif /* APSTA_RESTRICTED_CHANNEL */

#ifdef DHD_LOG_DUMP
/* Function to flush the FW preserve buffer content
* The buffer content is sent to host in form of events.
*/
void
wl_flush_fw_log_buffer(struct net_device *dev, uint32 logset_mask)
{
        int i;
        int err = 0;
        u8 buf[WLC_IOCTL_SMLEN] = {0};
        wl_el_set_params_t set_param;

        /* Set the size of data to retrieve */
        memset(&set_param, 0, sizeof(set_param));
        set_param.size = WLC_IOCTL_SMLEN;

        for (i = 0; i < WL_MAX_PRESERVE_BUFFER; i++)
        {
                if ((0x01u << i) & logset_mask) {
                        set_param.set = i;
                        err = wldev_iovar_setbuf(dev, "event_log_get", &set_param,
                                sizeof(struct wl_el_set_params_s), buf, WLC_IOCTL_SMLEN,
                                NULL);
                        if (err) {
                                WL_DBG(("Failed to get fw preserve logs, err=%d\n", err));
                        }
                }
        }
}
#endif /* DHD_LOG_DUMP */

s32
wl_cfg80211_set_dbg_verbose(struct net_device *ndev, u32 level)
{
        /* configure verbose level for debugging */
        if (level) {
                /* Enable increased verbose */
                wl_dbg_level |= WL_DBG_DBG;
        } else {
                /* Disable */
                wl_dbg_level &= ~WL_DBG_DBG;
        }
        WL_INFORM(("debug verbose set to %d\n", level));

        return BCME_OK;
}

s32
wl_cfg80211_check_for_nan_support(struct bcm_cfg80211 *cfg)
{
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);
        if (((p2p_is_on(cfg)) && (wl_get_p2p_status(cfg, SCANNING) ||
                        wl_to_p2p_bss_ndev(cfg, P2PAPI_BSSCFG_CONNECTION1))) ||
                        (dhd->op_mode & DHD_FLAG_HOSTAP_MODE))
        {
                WL_ERR(("p2p/softap is enabled, cannot support nan\n"));
                return FALSE;
        }
        return TRUE;
}

uint8 wl_cfg80211_get_bus_state(struct bcm_cfg80211 *cfg)
{
        dhd_pub_t *dhd = (dhd_pub_t *)(cfg->pub);
        WL_INFORM(("dhd->hang_was_sent = %d and busstate = %d\n",
                        dhd->hang_was_sent, dhd->busstate));
        return ((dhd->busstate == DHD_BUS_DOWN) || dhd->hang_was_sent);
}

#ifdef WL_WPS_SYNC
static void wl_wps_reauth_timeout(unsigned long data)
{
        struct net_device *ndev = (struct net_device *)data;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        s32 inst;
        unsigned long flags;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        inst = wl_get_wps_inst_match(cfg, ndev);
        if (inst >= 0) {
                WL_ERR(("[%s][WPS] Reauth Timeout Inst:%d! state:%d\n",
                                ndev->name, inst, cfg->wps_session[inst].state));
                if (cfg->wps_session[inst].state == WPS_STATE_REAUTH_WAIT) {
                        /* Session should get deleted from success (linkup) or
                         * deauth case. Just in case, link reassoc failed, clear
                         * state here.
                         */
                        WL_ERR(("[%s][WPS] Reauth Timeout Inst:%d!\n",
                                ndev->name, inst));
                        cfg->wps_session[inst].state = WPS_STATE_IDLE;
                        cfg->wps_session[inst].in_use = false;
                }
        }
        spin_unlock_irqrestore(&cfg->wps_sync, flags);
}

static void wl_init_wps_reauth_sm(struct bcm_cfg80211 *cfg)
{
        /* Only two instances are supported as of now. one for
         * infra STA and other for infra STA/GC.
         */
        int i = 0;
        struct net_device *pdev = bcmcfg_to_prmry_ndev(cfg);

        spin_lock_init(&cfg->wps_sync);
        for (i = 0; i < WPS_MAX_SESSIONS; i++) {
                /* Init scan_timeout timer */
                init_timer(&cfg->wps_session[i].timer);
                cfg->wps_session[i].timer.data = (unsigned long) pdev;
                cfg->wps_session[i].timer.function = wl_wps_reauth_timeout;
                cfg->wps_session[i].in_use = false;
                cfg->wps_session[i].state = WPS_STATE_IDLE;
        }
}

static void wl_deinit_wps_reauth_sm(struct bcm_cfg80211 *cfg)
{
        int i = 0;

        for (i = 0; i < WPS_MAX_SESSIONS; i++) {
                cfg->wps_session[i].in_use = false;
                cfg->wps_session[i].state = WPS_STATE_IDLE;
                if (timer_pending(&cfg->wps_session[i].timer)) {
                        del_timer_sync(&cfg->wps_session[i].timer);
                }
        }

}

static s32
wl_get_free_wps_inst(struct bcm_cfg80211 *cfg)
{
        int i;

        for (i = 0; i < WPS_MAX_SESSIONS; i++) {
                if (!cfg->wps_session[i].in_use) {
                        return i;
                }
        }
        return BCME_ERROR;
}

static s32
wl_get_wps_inst_match(struct bcm_cfg80211 *cfg, struct net_device *ndev)
{
        int i;

        for (i = 0; i < WPS_MAX_SESSIONS; i++) {
                if ((cfg->wps_session[i].in_use) &&
                        (ndev == cfg->wps_session[i].ndev)) {
                        return i;
                }
        }

        return BCME_ERROR;
}

static s32
wl_wps_session_add(struct net_device *ndev, u16 mode, u8 *mac_addr)
{
        s32 inst;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        /* Fetch and initialize a wps instance */
        inst = wl_get_free_wps_inst(cfg);
        if (inst == BCME_ERROR) {
                WL_ERR(("[WPS] No free insance\n"));
                spin_unlock_irqrestore(&cfg->wps_sync, flags);
                return BCME_ERROR;
        }
        cfg->wps_session[inst].in_use = true;
        cfg->wps_session[inst].state = WPS_STATE_STARTED;
        cfg->wps_session[inst].ndev = ndev;
        cfg->wps_session[inst].mode = mode;
        memcpy(cfg->wps_session[inst].peer_mac, mac_addr, ETH_ALEN);
        spin_unlock_irqrestore(&cfg->wps_sync, flags);

        WL_INFORM_MEM(("[%s][WPS] session created.  Peer: " MACDBG "\n",
                ndev->name, MAC2STRDBG(mac_addr)));
        return BCME_OK;
}

static void
wl_wps_session_del(struct net_device *ndev)
{
        s32 inst;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;

        spin_lock_irqsave(&cfg->wps_sync, flags);

        /* Get current instance for the given ndev */
        inst = wl_get_wps_inst_match(cfg, ndev);
        if (inst == BCME_ERROR) {
                WL_DBG(("[WPS] instance match NOT found\n"));
                spin_unlock_irqrestore(&cfg->wps_sync, flags);
                return;
        }

        cur_state = cfg->wps_session[inst].state;
        if (cur_state != WPS_STATE_DONE) {
                WL_DBG(("[WPS] wrong state:%d\n", cur_state));
                spin_unlock_irqrestore(&cfg->wps_sync, flags);
                return;
        }

        /* Mark this as unused */
        cfg->wps_session[inst].in_use = false;
        cfg->wps_session[inst].state = WPS_STATE_IDLE;
        spin_unlock_irqrestore(&cfg->wps_sync, flags);

        /* Ensure this API is called from sleepable context. */
        if (timer_pending(&cfg->wps_session[inst].timer)) {
                del_timer_sync(&cfg->wps_session[inst].timer);
        }

        WL_INFORM_MEM(("[%s][WPS] session deleted\n", ndev->name));
}

static void
wl_wps_handle_ifdel(struct net_device *ndev)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        s32 inst;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        inst = wl_get_wps_inst_match(cfg, ndev);
        if (inst == BCME_ERROR) {
                WL_DBG(("[WPS] instance match NOT found\n"));
                spin_unlock_irqrestore(&cfg->wps_sync, flags);
                return;
        }
        cur_state = cfg->wps_session[inst].state;
        cfg->wps_session[inst].state = WPS_STATE_DONE;
        spin_unlock_irqrestore(&cfg->wps_sync, flags);

        WL_INFORM_MEM(("[%s][WPS] state:%x\n", ndev->name, cur_state));
        if (cur_state > WPS_STATE_IDLE) {
                wl_wps_session_del(ndev);
        }
}

static s32
wl_wps_handle_sta_linkdown(struct net_device *ndev, u16 inst)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        bool wps_done = false;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        cur_state = cfg->wps_session[inst].state;
        if (cur_state == WPS_STATE_REAUTH_WAIT) {
                spin_unlock_irqrestore(&cfg->wps_sync, flags);
                wl_clr_drv_status(cfg, CONNECTED, ndev);
                wl_clr_drv_status(cfg, DISCONNECTING, ndev);
                WL_INFORM_MEM(("[%s][WPS] REAUTH link down\n", ndev->name));
                /* Drop the link down event while we are waiting for reauth */
                return BCME_UNSUPPORTED;
        } else if (cur_state == WPS_STATE_STARTED) {
                /* Link down before reaching EAP-FAIL. End WPS session */
                cfg->wps_session[inst].state = WPS_STATE_DONE;
                wps_done = true;
                WL_INFORM_MEM(("[%s][WPS] link down after wps start\n", ndev->name));
        } else {
                WL_DBG(("[%s][WPS] link down in state:%d\n",
                        ndev->name, cur_state));
        }

        spin_unlock_irqrestore(&cfg->wps_sync, flags);

        if (wps_done) {
                wl_wps_session_del(ndev);
        }
        return BCME_OK;
}

static s32
wl_wps_handle_peersta_linkdown(struct net_device *ndev, u16 inst, const u8 *peer_mac)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        s32 ret = BCME_OK;
        bool wps_done = false;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        cur_state = cfg->wps_session[inst].state;

        if (!peer_mac) {
                WL_ERR(("Invalid arg\n"));
                ret = BCME_ERROR;
                goto exit;
        }

        /* AP/GO can have multiple clients. so validate peer_mac addr
         * and ensure states are updated only for right peer.
         */
        if (memcmp(cfg->wps_session[inst].peer_mac, peer_mac, ETH_ALEN)) {
                /* Mac addr not matching. Ignore. */
                WL_DBG(("[%s][WPS] No active WPS session"
                        "for the peer:" MACDBG "\n", ndev->name, MAC2STRDBG(peer_mac)));
                ret = BCME_OK;
                goto exit;
        }
        if (cur_state == WPS_STATE_REAUTH_WAIT) {
                WL_INFORM_MEM(("[%s][WPS] REAUTH link down."
                        " Peer: " MACDBG "\n",
                        ndev->name, MAC2STRDBG(peer_mac)));
#ifdef NOT_YET
                /* Link down during REAUTH state is expected. However,
                 * if this is send up, hostapd statemachine issues a
                 * deauth down and that may pre-empt WPS reauth state
                 * at GC.
                 */
                WL_INFORM_MEM(("[%s][WPS] REAUTH link down. Ignore."
                        " for client:" MACDBG "\n",
                        ndev->name, MAC2STRDBG(peer_mac)));
                ret = BCME_UNSUPPORTED;
#endif // endif
        } else if (cur_state == WPS_STATE_STARTED) {
                /* Link down before reaching REAUTH_WAIT state. WPS
                 * session ended.
                 */
                cfg->wps_session[inst].state = WPS_STATE_DONE;
                WL_INFORM_MEM(("[%s][WPS] link down after wps start"
                        " client:" MACDBG "\n",
                        ndev->name, MAC2STRDBG(peer_mac)));
                wps_done = true;
                /* since we have freed lock above, return from here */
                ret = BCME_OK;
        } else {
                WL_ERR(("[%s][WPS] Unsupported state:%d",
                        ndev->name, cur_state));
                ret = BCME_ERROR;
        }
exit:
        spin_unlock_irqrestore(&cfg->wps_sync, flags);
        if (wps_done) {
                wl_wps_session_del(ndev);
        }
        return ret;
}

static s32
wl_wps_handle_sta_linkup(struct net_device *ndev, u16 inst)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        s32 ret = BCME_OK;
        bool wps_done = false;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        cur_state = cfg->wps_session[inst].state;
        if (cur_state == WPS_STATE_REAUTH_WAIT) {
                /* WPS session succeeded. del session. */
                cfg->wps_session[inst].state = WPS_STATE_DONE;
                wps_done = true;
                WL_INFORM_MEM(("[%s][WPS] WPS_REAUTH link up (WPS DONE)\n", ndev->name));
                ret = BCME_OK;
        } else {
                WL_ERR(("[%s][WPS] unexpected link up in state:%d \n",
                        ndev->name, cur_state));
                ret = BCME_ERROR;
        }
        spin_unlock_irqrestore(&cfg->wps_sync, flags);
        if (wps_done) {
                wl_wps_session_del(ndev);
        }
        return ret;
}

static s32
wl_wps_handle_peersta_linkup(struct net_device *ndev, u16 inst, const u8 *peer_mac)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        s32 ret = BCME_OK;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        cur_state = cfg->wps_session[inst].state;

        /* For AP case, check whether call came for right peer */
        if (!peer_mac ||
                memcmp(cfg->wps_session[inst].peer_mac, peer_mac, ETH_ALEN)) {
                WL_ERR(("[WPS] macaddr mismatch\n"));
                spin_unlock_irqrestore(&cfg->wps_sync, flags);
                /* Mac addr not matching. Ignore. */
                return BCME_ERROR;
        }

        if (cur_state == WPS_STATE_REAUTH_WAIT) {
                WL_INFORM_MEM(("[%s][WPS] REAUTH link up\n", ndev->name));
                ret = BCME_OK;
        } else {
                WL_INFORM_MEM(("[%s][WPS] unexpected link up in state:%d \n",
                        ndev->name, cur_state));
                ret = BCME_ERROR;
        }

        spin_unlock_irqrestore(&cfg->wps_sync, flags);

        return ret;
}

static s32
wl_wps_handle_authorize(struct net_device *ndev, u16 inst, const u8 *peer_mac)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        bool wps_done = false;
        s32 ret = BCME_OK;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        cur_state = cfg->wps_session[inst].state;

        /* For AP case, check whether call came for right peer */
        if (!peer_mac ||
                memcmp(cfg->wps_session[inst].peer_mac, peer_mac, ETH_ALEN)) {
                WL_ERR(("[WPS] macaddr mismatch\n"));
                spin_unlock_irqrestore(&cfg->wps_sync, flags);
                /* Mac addr not matching. Ignore. */
                return BCME_ERROR;
        }

        if (cur_state == WPS_STATE_REAUTH_WAIT) {
                /* WPS session succeeded. del session. */
                cfg->wps_session[inst].state = WPS_STATE_DONE;
                wps_done = true;
                WL_INFORM_MEM(("[%s][WPS] Authorize done (WPS DONE)\n", ndev->name));
                ret = BCME_OK;
        } else {
                WL_INFORM_MEM(("[%s][WPS] unexpected Authorize in state:%d \n",
                        ndev->name, cur_state));
                ret = BCME_ERROR;
        }

        spin_unlock_irqrestore(&cfg->wps_sync, flags);
        if (wps_done) {
                wl_wps_session_del(ndev);
        }
        return ret;
}

static s32
wl_wps_handle_reauth(struct net_device *ndev, u16 inst, const u8 *peer_mac)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        u16 mode;
        s32 ret = BCME_OK;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        cur_state = cfg->wps_session[inst].state;
        mode = cfg->wps_session[inst].mode;

        if (cur_state == WPS_STATE_STARTED) {
                /* Move to reauth wait */
                cfg->wps_session[inst].state = WPS_STATE_REAUTH_WAIT;
                /* Use ndev to find the wps instance which fired the timer */
                cfg->wps_session[inst].timer.data = (unsigned long) ndev;
                spin_unlock_irqrestore(&cfg->wps_sync, flags);
                mod_timer(&cfg->wps_session[inst].timer,
                        jiffies + msecs_to_jiffies(WL_WPS_REAUTH_TIMEOUT));
                WL_INFORM_MEM(("[%s][WPS] STATE_REAUTH_WAIT mode:%d Peer: " MACDBG "\n",
                        ndev->name, mode, MAC2STRDBG(peer_mac)));
                return BCME_OK;
        } else {
                /* 802.1x cases */
                WL_DBG(("[%s][WPS] EAP-FAIL\n", ndev->name));
        }
        spin_unlock_irqrestore(&cfg->wps_sync, flags);
        return ret;
}

static s32
wl_wps_handle_disconnect(struct net_device *ndev, u16 inst, const u8 *peer_mac)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        s32 ret = BCME_OK;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        cur_state = cfg->wps_session[inst].state;
        /* If Disconnect command comes from  user space for STA/GC,
         * respond with event without waiting for event from fw as
         * it would be dropped by the WPS_SYNC code.
         */
        if (cur_state == WPS_STATE_REAUTH_WAIT) {
                if (ETHER_ISBCAST(peer_mac)) {
                        WL_DBG(("[WPS] Bcast peer. Do nothing.\n"));
                } else {
                        /* Notify link down */
                        CFG80211_DISCONNECTED(ndev,
                                WLAN_REASON_DEAUTH_LEAVING, NULL, 0,
                                true, GFP_ATOMIC);
                }
        } else {
                WL_DBG(("[%s][WPS] Not valid state to report disconnected:%d",
                        ndev->name, cur_state));
                ret = BCME_UNSUPPORTED;
        }
        spin_unlock_irqrestore(&cfg->wps_sync, flags);
        return ret;
}

static s32
wl_wps_handle_disconnect_client(struct net_device *ndev, u16 inst, const u8 *peer_mac)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        s32 ret = BCME_OK;
        bool wps_done = false;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        cur_state = cfg->wps_session[inst].state;
        /* For GO/AP, ignore disconnect client during reauth state */
        if (cur_state == WPS_STATE_REAUTH_WAIT) {
                if (ETHER_ISBCAST(peer_mac)) {
                        /* If there is broadcast deauth, then mark wps session as ended */
                        cfg->wps_session[inst].state = WPS_STATE_DONE;
                        wps_done = true;
                        WL_INFORM_MEM(("[%s][WPS] BCAST deauth. WPS stopped.\n", ndev->name));
                        ret = BCME_OK;
                        goto exit;
                } else if (!(memcmp(cfg->wps_session[inst].peer_mac,
                        peer_mac, ETH_ALEN))) {
                        WL_ERR(("[%s][WPS] Drop disconnect client\n", ndev->name));
                        ret = BCME_UNSUPPORTED;
                }
        }

exit:
        spin_unlock_irqrestore(&cfg->wps_sync, flags);
        if (wps_done) {
                wl_wps_session_del(ndev);
        }
        return ret;
}

static s32
wl_wps_handle_connect_fail(struct net_device *ndev, u16 inst)
{
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        unsigned long flags;
        u16 cur_state;
        bool wps_done = false;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        cur_state = cfg->wps_session[inst].state;
        if (cur_state == WPS_STATE_REAUTH_WAIT) {
                cfg->wps_session[inst].state = WPS_STATE_DONE;
                wps_done = true;
                WL_INFORM_MEM(("[%s][WPS] Connect fail. WPS stopped.\n",
                        ndev->name));
        } else {
                WL_ERR(("[%s][WPS] Connect fail. state:%d\n",
                        ndev->name, cur_state));
        }
        spin_unlock_irqrestore(&cfg->wps_sync, flags);
        if (wps_done) {
                wl_wps_session_del(ndev);
        }
        return BCME_OK;
}

static s32
wl_wps_session_update(struct net_device *ndev, u16 state, const u8 *peer_mac)
{
        s32 inst;
        u16 mode;
        struct bcm_cfg80211 *cfg = wl_get_cfg(ndev);
        s32 ret = BCME_ERROR;
        unsigned long flags;

        spin_lock_irqsave(&cfg->wps_sync, flags);
        /* Get current instance for the given ndev */
        inst = wl_get_wps_inst_match(cfg, ndev);
        if (inst == BCME_ERROR) {
                /* No active WPS session. Do Nothing. */
                WL_DBG(("[%s][WPS] No matching instance.\n", ndev->name));
                spin_unlock_irqrestore(&cfg->wps_sync, flags);
                return BCME_OK;
        }
        mode = cfg->wps_session[inst].mode;
        spin_unlock_irqrestore(&cfg->wps_sync, flags);

        WL_DBG(("[%s][WPS] state:%d mode:%d Peer: " MACDBG "\n",
                ndev->name, state, mode, MAC2STRDBG(peer_mac)));

        switch (state) {
                case WPS_STATE_M8_RECVD:
                {
                        /* Occasionally, due to race condition between ctrl
                         * and data path, deauth ind is recvd before EAP-FAIL.
                         * Ignore deauth ind before EAP-FAIL
                         * So move to REAUTH WAIT on receiving M8 on GC and
                         * ignore deauth ind before EAP-FAIL till 'x' timeout.
                         * Kickoff a timer to monitor reauth status.
                         */
                        if (mode == WL_MODE_BSS) {
                                ret = wl_wps_handle_reauth(ndev, inst, peer_mac);
                        } else {
                                /* Nothing to be done for AP/GO mode */
                                ret = BCME_OK;
                        }
                        break;
                }
                case WPS_STATE_EAP_FAIL:
                {
                        /* Move to REAUTH WAIT following EAP-FAIL TX on GO/AP.
                         * Kickoff a timer to monitor reauth status
                         */
                        if (mode == WL_MODE_AP) {
                                ret = wl_wps_handle_reauth(ndev, inst, peer_mac);
                        } else {
                                /* Nothing to be done for STA/GC mode */
                                ret = BCME_OK;
                        }
                        break;
                }
                case WPS_STATE_LINKDOWN:
                {
                        if (mode == WL_MODE_BSS) {
                                ret = wl_wps_handle_sta_linkdown(ndev, inst);
                        } else if (mode == WL_MODE_AP) {
                                /* Take action only for matching peer mac */
                                if (!memcmp(cfg->wps_session[inst].peer_mac, peer_mac, ETH_ALEN)) {
                                        ret = wl_wps_handle_peersta_linkdown(ndev, inst, peer_mac);
                                }
                        }
                        break;
                }
                case WPS_STATE_LINKUP:
                {
                        if (mode == WL_MODE_BSS) {
                                wl_wps_handle_sta_linkup(ndev, inst);
                        } else if (mode == WL_MODE_AP) {
                                /* Take action only for matching peer mac */
                                if (!memcmp(cfg->wps_session[inst].peer_mac, peer_mac, ETH_ALEN)) {
                                        wl_wps_handle_peersta_linkup(ndev, inst, peer_mac);
                                }
                        }
                        break;
                }
                case WPS_STATE_DISCONNECT_CLIENT:
                {
                        /* Disconnect STA/GC command from user space */
                        if (mode == WL_MODE_AP) {
                                ret = wl_wps_handle_disconnect_client(ndev, inst, peer_mac);
                        } else {
                                WL_ERR(("[WPS] Unsupported mode %d\n", mode));
                        }
                        break;
                }
                case WPS_STATE_DISCONNECT:
                {
                        /* Disconnect command on STA/GC interface */
                        if (mode == WL_MODE_BSS) {
                                ret = wl_wps_handle_disconnect(ndev, inst, peer_mac);
                        }
                        break;
                }
                case WPS_STATE_CONNECT_FAIL:
                {
                        if (mode == WL_MODE_BSS) {
                                ret = wl_wps_handle_connect_fail(ndev, inst);
                        } else {
                                WL_ERR(("[WPS] Unsupported mode %d\n", mode));
                        }
                        break;
                }
                case WPS_STATE_AUTHORIZE:
                {
                        if (mode == WL_MODE_AP) {
                                /* Take action only for matching peer mac */
                                if (!memcmp(cfg->wps_session[inst].peer_mac, peer_mac, ETH_ALEN)) {
                                        wl_wps_handle_authorize(ndev, inst, peer_mac);
                                } else {
                                        WL_INFORM_MEM(("[WPS] Authorize Request for wrong peer\n"));
                                }
                        }
                        break;
                }

        default:
                WL_ERR(("[WPS] Unsupported state:%d mode:%d\n", state, mode));
                ret = BCME_ERROR;
        }

        return ret;
}

#define EAP_EXP_ATTRIB_DATA_OFFSET 14
void
wl_handle_wps_states(struct net_device *ndev, u8 *pkt, u16 len, bool direction)
{
        eapol_header_t *eapol_hdr;
        bool tx_packet = direction;
        u16 eapol_type;
        u16 mode;
        u8 *peer_mac;

        if (!ndev || !pkt) {
                WL_ERR(("[WPS] Invalid arg\n"));
                return;
        }

        if (len < (ETHER_HDR_LEN + EAPOL_HDR_LEN)) {
                WL_ERR(("[WPS] Invalid len\n"));
                return;
        }

        eapol_hdr = (eapol_header_t *)pkt;
        eapol_type = eapol_hdr->type;

        peer_mac = tx_packet ? eapol_hdr->eth.ether_dhost :
                        eapol_hdr->eth.ether_shost;
        /*
         * The implementation assumes only one WPS session would be active
         * per interface at a time. Even for hostap, the wps_pin session
         * is limited to one enrollee/client at a time. A session is marked
         * started on WSC_START and gets cleared from below contexts
         * a) Deauth/link down before reaching EAP-FAIL state. (Fail case)
         * b) Link up following EAP-FAIL. (success case)
         * c) Link up timeout after EAP-FAIL. (Fail case)
         */

        if (eapol_type == EAP_PACKET) {
                wl_eap_header_t *eap;

                if (len > sizeof(*eap)) {
                        eap = (wl_eap_header_t *)(pkt + ETHER_HDR_LEN + EAPOL_HDR_LEN);
                        if (eap->type == EAP_EXPANDED_TYPE) {
                                wl_eap_exp_t *exp = (wl_eap_exp_t *)eap->data;
                                if (eap->length > EAP_EXP_HDR_MIN_LENGTH) {
                                        /* opcode is at fixed offset */
                                        u8 opcode = exp->opcode;
                                        u16 eap_len = ntoh16(eap->length);

                                        WL_DBG(("[%s][WPS] EAP EXPANDED packet. opcode:%x len:%d\n",
                                                ndev->name, opcode, eap_len));
                                        if (opcode == EAP_WSC_MSG) {
                                                const u8 *msg;
                                                const u8* parse_buf = exp->data;
                                                /* Check if recvd pkt is fragmented */
                                                if ((!tx_packet) &&
                                                        (exp->flags &
                                                        EAP_EXP_FLAGS_FRAGMENTED_DATA)) {
                                                        if ((eap_len - EAP_EXP_ATTRIB_DATA_OFFSET)
                                                        > 2) {
                                                                parse_buf +=
                                                                EAP_EXP_FRAGMENT_LEN_OFFSET;
                                                                eap_len -=
                                                                EAP_EXP_FRAGMENT_LEN_OFFSET;
                                                                WL_DBG(("Rcvd EAP"
                                                                " fragmented pkt\n"));
                                                        } else {
                                                                /* If recvd pkt is fragmented
                                                                * and does not have
                                                                * length field drop the packet.
                                                                */
                                                                return;
                                                        }
                                                }

                                                msg = wl_find_attribute(parse_buf,
                                                        (eap_len - EAP_EXP_ATTRIB_DATA_OFFSET),
                                                        EAP_ATTRIB_MSGTYPE);
                                                if (unlikely(!msg)) {
                                                        WL_ERR(("[WPS] ATTRIB MSG not found!\n"));
                                                } else if ((*msg == EAP_WSC_MSG_M8) &&
                                                                !tx_packet) {
                                                        WL_INFORM_MEM(("[%s][WPS] M8\n",
                                                                ndev->name));
                                                        wl_wps_session_update(ndev,
                                                                WPS_STATE_M8_RECVD, peer_mac);
                                                } else {
                                                        WL_DBG(("[%s][WPS] EAP WSC MSG: 0x%X\n",
                                                                ndev->name, *msg));
                                                }
                                        } else if (opcode == EAP_WSC_START) {
                                                /* WSC session started. WSC_START - Tx from GO/AP.
                                                 * Session will be deleted on successful link up or
                                                 * on failure (deauth context)
                                                 */
                                                mode = tx_packet ? WL_MODE_AP : WL_MODE_BSS;
                                                wl_wps_session_add(ndev, mode, peer_mac);
                                                WL_INFORM_MEM(("[%s][WPS] WSC_START Mode:%d\n",
                                                        ndev->name, mode));
                                        } else if (opcode == EAP_WSC_DONE) {
                                                /* WSC session done. TX on STA/GC. RX on GO/AP
                                                 * On devices where config file save fails, it may
                                                 * return WPS_NAK with config_error:0. But the
                                                 * connection would still proceed. Hence don't let
                                                 * state machine depend on WSC DONE.
                                                 */
                                                WL_INFORM_MEM(("[%s][WPS] WSC_DONE\n", ndev->name));
                                        }
                                }
                        }

                        if (eap->code == EAP_CODE_FAILURE) {
                                /* EAP_FAIL */
                                WL_INFORM_MEM(("[%s][WPS] EAP_FAIL\n", ndev->name));
                                wl_wps_session_update(ndev,
                                        WPS_STATE_EAP_FAIL, peer_mac);
                        }
                }
        }
}
#endif /* WL_WPS_SYNC */

const u8 *
wl_find_attribute(const u8 *buf, u16 len, u16 element_id)
{
        const u8 *attrib;
        u16 attrib_id;
        u16 attrib_len;

        if (!buf) {
                WL_ERR(("buf null\n"));
                return NULL;
        }

        attrib = buf;
        while (len >= 4) {
                /* attribute id */
                attrib_id = *attrib++ << 8;
                attrib_id |= *attrib++;
                len -= 2;

                /* 2-byte little endian */
                attrib_len = *attrib++ << 8;
                attrib_len |= *attrib++;

                len -= 2;
                if (attrib_id == element_id) {
                        /* This will point to start of subelement attrib after
                         * attribute id & len
                         */
                        return attrib;
                }
                if (len > attrib_len) {
                        len -= attrib_len;      /* for the remaining subelt fields */
                        WL_DBG(("Attribue:%4x attrib_len:%d rem_len:%d\n",
                                attrib_id, attrib_len, len));

                        /* Go to next subelement */
                        attrib += attrib_len;
                } else {
                        WL_ERR(("Incorrect Attribue:%4x attrib_len:%d\n",
                                attrib_id, attrib_len));
                        return NULL;
                }
        }
        return NULL;
}

static const u8 *
wl_retrieve_wps_attribute(const u8 *buf, u16 element_id)
{
        const wl_wps_ie_t *ie = NULL;
        u16 len = 0;
        const u8 *attrib;

        if (!buf) {
                WL_ERR(("WPS IE not present"));
                return 0;
        }

        ie = (const wl_wps_ie_t*) buf;
        len = ie->len;

        /* Point subel to the P2P IE's subelt field.
         * Subtract the preceding fields (id, len, OUI, oui_type) from the length.
         */
        attrib = ie->attrib;
        len -= 4;       /* exclude OUI + OUI_TYPE */

        /* Search for attrib */
        return wl_find_attribute(attrib, len, element_id);
}

#define WPS_ATTR_REQ_TYPE 0x103a
#define WPS_REQ_TYPE_ENROLLEE 0x01
bool
wl_is_wps_enrollee_active(struct net_device *ndev, const u8 *ie_ptr, u16 len)
{
        const u8 *ie;
        const u8 *attrib;

        if ((ie = (const u8 *)wl_cfgp2p_find_wpsie(ie_ptr, len)) == NULL) {
                WL_DBG(("WPS IE not present. Do nothing.\n"));
                return false;
        }

        if ((attrib = wl_retrieve_wps_attribute(ie, WPS_ATTR_REQ_TYPE)) == NULL) {
                WL_DBG(("WPS_ATTR_REQ_TYPE not found!\n"));
                return false;
        }

        if (*attrib == WPS_REQ_TYPE_ENROLLEE) {
                WL_INFORM_MEM(("WPS Enrolle Active\n"));
                return true;
        } else {
                WL_DBG(("WPS_REQ_TYPE:%d\n", *attrib));
        }

        return false;
}

#ifdef USE_WFA_CERT_CONF
extern int g_frameburst;
#endif /* USE_WFA_CERT_CONF */

int
wl_cfg80211_set_frameburst(struct bcm_cfg80211 *cfg, bool enable)
{
        int ret = BCME_OK;
        int val = enable ? 1 : 0;

#ifdef USE_WFA_CERT_CONF
        if (!g_frameburst) {
                WL_DBG(("Skip setting frameburst\n"));
                return 0;
        }
#endif /* USE_WFA_CERT_CONF */

        WL_DBG(("Set frameburst %d\n", val));
        ret = wldev_ioctl_set(bcmcfg_to_prmry_ndev(cfg), WLC_SET_FAKEFRAG, &val, sizeof(val));
        if (ret < 0) {
                WL_ERR(("Failed set frameburst, ret=%d\n", ret));
        } else {
                WL_INFORM_MEM(("frameburst is %s\n", enable ? "enabled" : "disabled"));
        }

        return ret;
}