a4df95cc7f607bccb56a54218156ea816e00bfbb
[muen/linux.git] / drivers / staging / rtl8192u / r8192U_core.c
1 /******************************************************************************
2  * Copyright(c) 2008 - 2010 Realtek Corporation. All rights reserved.
3  * Linux device driver for RTL8192U
4  *
5  * Based on the r8187 driver, which is:
6  * Copyright 2004-2005 Andrea Merello <andrea.merello@gmail.com>, et al.
7  * This program is free software; you can redistribute it and/or modify it
8  * under the terms of version 2 of the GNU General Public License as
9  * published by the Free Software Foundation.
10  *
11  * This program is distributed in the hope that it will be useful, but WITHOUT
12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
14  * more details.
15  *
16  * You should have received a copy of the GNU General Public License along with
17  * this program; if not, write to the Free Software Foundation, Inc.,
18  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
19  *
20  * The full GNU General Public License is included in this distribution in the
21  * file called LICENSE.
22  *
23  * Contact Information:
24  * Jerry chuang <wlanfae@realtek.com>
25  */
26
27 #ifndef CONFIG_FORCE_HARD_FLOAT
28 double __floatsidf(int i)
29 {
30         return i;
31 }
32
33 unsigned int __fixunsdfsi(double d)
34 {
35         return d;
36 }
37
38 double __adddf3(double a, double b)
39 {
40         return a + b;
41 }
42
43 double __addsf3(float a, float b)
44 {
45         return a + b;
46 }
47
48 double __subdf3(double a, double b)
49 {
50         return a - b;
51 }
52
53 double __extendsfdf2(float a)
54 {
55         return a;
56 }
57 #endif
58
59 #define CONFIG_RTL8192_IO_MAP
60
61 #include <linux/uaccess.h>
62 #include "r8192U_hw.h"
63 #include "r8192U.h"
64 #include "r8190_rtl8256.h" /* RTL8225 Radio frontend */
65 #include "r8180_93cx6.h"   /* Card EEPROM */
66 #include "r8192U_wx.h"
67 #include "r819xU_phy.h"
68 #include "r819xU_phyreg.h"
69 #include "r819xU_cmdpkt.h"
70 #include "r8192U_dm.h"
71 #include <linux/usb.h>
72 #include <linux/slab.h>
73 #include <linux/proc_fs.h>
74 #include <linux/seq_file.h>
75 /* FIXME: check if 2.6.7 is ok */
76
77 #include "dot11d.h"
78 /* set here to open your trace code. */
79 u32 rt_global_debug_component = COMP_DOWN       |
80                                 COMP_SEC        |
81                                 COMP_ERR; /* always open err flags on */
82
83 #define TOTAL_CAM_ENTRY 32
84 #define CAM_CONTENT_COUNT 8
85
86 static const struct usb_device_id rtl8192_usb_id_tbl[] = {
87         /* Realtek */
88         {USB_DEVICE(0x0bda, 0x8709)},
89         /* Corega */
90         {USB_DEVICE(0x07aa, 0x0043)},
91         /* Belkin */
92         {USB_DEVICE(0x050d, 0x805E)},
93         /* Sitecom */
94         {USB_DEVICE(0x0df6, 0x0031)},
95         /* EnGenius */
96         {USB_DEVICE(0x1740, 0x9201)},
97         /* Dlink */
98         {USB_DEVICE(0x2001, 0x3301)},
99         /* Zinwell */
100         {USB_DEVICE(0x5a57, 0x0290)},
101         /* LG */
102         {USB_DEVICE(0x043e, 0x7a01)},
103         {}
104 };
105
106 MODULE_LICENSE("GPL");
107 MODULE_VERSION("V 1.1");
108 MODULE_DEVICE_TABLE(usb, rtl8192_usb_id_tbl);
109 MODULE_DESCRIPTION("Linux driver for Realtek RTL8192 USB WiFi cards");
110
111 static char *ifname = "wlan%d";
112 static int hwwep = 1;  /* default use hw. set 0 to use software security */
113 static int channels = 0x3fff;
114
115
116
117 module_param(ifname, charp, 0644);
118 module_param(hwwep, int, 0644);
119 module_param(channels, int, 0644);
120
121 MODULE_PARM_DESC(ifname, " Net interface name, wlan%d=default");
122 MODULE_PARM_DESC(hwwep, " Try to use hardware security support. ");
123 MODULE_PARM_DESC(channels, " Channel bitmask for specific locales. NYI");
124
125 static int rtl8192_usb_probe(struct usb_interface *intf,
126                              const struct usb_device_id *id);
127 static void rtl8192_usb_disconnect(struct usb_interface *intf);
128
129
130 static struct usb_driver rtl8192_usb_driver = {
131         .name           = RTL819xU_MODULE_NAME,           /* Driver name   */
132         .id_table       = rtl8192_usb_id_tbl,             /* PCI_ID table  */
133         .probe          = rtl8192_usb_probe,              /* probe fn      */
134         .disconnect     = rtl8192_usb_disconnect,         /* remove fn     */
135         .suspend        = NULL,                           /* PM suspend fn */
136         .resume         = NULL,                           /* PM resume fn  */
137 };
138
139
140 struct CHANNEL_LIST {
141         u8      Channel[32];
142         u8      Len;
143 };
144
145 static struct CHANNEL_LIST ChannelPlan[] = {
146         /* FCC */
147         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165}, 24},
148         /* IC */
149         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}, 11},
150         /* ETSI */
151         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 36, 40, 44, 48, 52, 56, 60, 64}, 21},
152         /* Spain. Change to ETSI. */
153         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
154         /* France. Change to ETSI. */
155         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
156         /* MKK */
157         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
158         /* MKK1 */
159         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
160         /* Israel. */
161         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
162         /* For 11a , TELEC */
163         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
164         /* MIC */
165         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
166         /* For Global Domain. 1-11:active scan, 12-14 passive scan. */
167         {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14}, 14}
168 };
169
170 static void rtl819x_set_channel_map(u8 channel_plan, struct r8192_priv *priv)
171 {
172         int i, max_chan = -1, min_chan = -1;
173         struct ieee80211_device *ieee = priv->ieee80211;
174
175         switch (channel_plan) {
176         case COUNTRY_CODE_FCC:
177         case COUNTRY_CODE_IC:
178         case COUNTRY_CODE_ETSI:
179         case COUNTRY_CODE_SPAIN:
180         case COUNTRY_CODE_FRANCE:
181         case COUNTRY_CODE_MKK:
182         case COUNTRY_CODE_MKK1:
183         case COUNTRY_CODE_ISRAEL:
184         case COUNTRY_CODE_TELEC:
185         case COUNTRY_CODE_MIC:
186                 Dot11d_Init(ieee);
187                 ieee->bGlobalDomain = false;
188                 /* actually 8225 & 8256 rf chips only support B,G,24N mode */
189                 if ((priv->rf_chip == RF_8225) || (priv->rf_chip == RF_8256)) {
190                         min_chan = 1;
191                         max_chan = 14;
192                 } else {
193                         RT_TRACE(COMP_ERR,
194                                  "unknown rf chip, can't set channel map in function:%s()\n",
195                                  __func__);
196                 }
197                 if (ChannelPlan[channel_plan].Len != 0) {
198                         /* Clear old channel map */
199                         memset(GET_DOT11D_INFO(ieee)->channel_map, 0,
200                                sizeof(GET_DOT11D_INFO(ieee)->channel_map));
201                         /* Set new channel map */
202                         for (i = 0; i < ChannelPlan[channel_plan].Len; i++) {
203                                 if (ChannelPlan[channel_plan].Channel[i] < min_chan || ChannelPlan[channel_plan].Channel[i] > max_chan)
204                                         break;
205                                 GET_DOT11D_INFO(ieee)->channel_map[ChannelPlan[channel_plan].Channel[i]] = 1;
206                         }
207                 }
208                 break;
209
210         case COUNTRY_CODE_GLOBAL_DOMAIN:
211                 /* this flag enabled to follow 11d country IE setting,
212                  * otherwise, it shall follow global domain settings.
213                  */
214                 GET_DOT11D_INFO(ieee)->bEnabled = 0;
215                 Dot11d_Reset(ieee);
216                 ieee->bGlobalDomain = true;
217                 break;
218
219         default:
220                 break;
221         }
222 }
223
224
225
226
227 static void CamResetAllEntry(struct net_device *dev)
228 {
229         u32 ulcommand = 0;
230         /* In static WEP, OID_ADD_KEY or OID_ADD_WEP are set before STA
231          * associate to AP. However, ResetKey is called on
232          * OID_802_11_INFRASTRUCTURE_MODE and MlmeAssociateRequest. In this
233          * condition, Cam can not be reset because upper layer will not set
234          * this static key again.
235          */
236         ulcommand |= BIT(31) | BIT(30);
237         write_nic_dword(dev, RWCAM, ulcommand);
238 }
239
240
241 void write_cam(struct net_device *dev, u8 addr, u32 data)
242 {
243         write_nic_dword(dev, WCAMI, data);
244         write_nic_dword(dev, RWCAM, BIT(31) | BIT(16) | (addr & 0xff));
245 }
246
247 u32 read_cam(struct net_device *dev, u8 addr)
248 {
249         u32 data;
250
251         write_nic_dword(dev, RWCAM, 0x80000000 | (addr & 0xff));
252         read_nic_dword(dev, 0xa8, &data);
253         return data;
254 }
255
256 int write_nic_byte_E(struct net_device *dev, int indx, u8 data)
257 {
258         int status;
259         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
260         struct usb_device *udev = priv->udev;
261         u8 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
262
263         if (!usbdata)
264                 return -ENOMEM;
265         *usbdata = data;
266
267         status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
268                                  RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
269                                  indx | 0xfe00, 0, usbdata, 1, HZ / 2);
270         kfree(usbdata);
271
272         if (status < 0) {
273                 netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
274                 return status;
275         }
276         return 0;
277 }
278
279 int read_nic_byte_E(struct net_device *dev, int indx, u8 *data)
280 {
281         int status;
282         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
283         struct usb_device *udev = priv->udev;
284         u8 *usbdata = kzalloc(sizeof(u8), GFP_KERNEL);
285
286         if (!usbdata)
287                 return -ENOMEM;
288
289         status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
290                                  RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
291                                  indx | 0xfe00, 0, usbdata, 1, HZ / 2);
292         *data = *usbdata;
293         kfree(usbdata);
294
295         if (status < 0) {
296                 netdev_err(dev, "%s failure status: %d\n", __func__, status);
297                 return status;
298         }
299
300         return 0;
301 }
302
303 /* as 92U has extend page from 4 to 16, so modify functions below. */
304 int write_nic_byte(struct net_device *dev, int indx, u8 data)
305 {
306         int status;
307
308         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
309         struct usb_device *udev = priv->udev;
310         u8 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
311
312         if (!usbdata)
313                 return -ENOMEM;
314         *usbdata = data;
315
316         status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
317                                  RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
318                                  (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
319                                  usbdata, 1, HZ / 2);
320         kfree(usbdata);
321
322         if (status < 0) {
323                 netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
324                 return status;
325         }
326
327         return 0;
328 }
329
330
331 int write_nic_word(struct net_device *dev, int indx, u16 data)
332 {
333         int status;
334
335         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
336         struct usb_device *udev = priv->udev;
337         u16 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
338
339         if (!usbdata)
340                 return -ENOMEM;
341         *usbdata = data;
342
343         status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
344                                  RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
345                                  (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
346                                  usbdata, 2, HZ / 2);
347         kfree(usbdata);
348
349         if (status < 0) {
350                 netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
351                 return status;
352         }
353
354         return 0;
355 }
356
357
358 int write_nic_dword(struct net_device *dev, int indx, u32 data)
359 {
360         int status;
361
362         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
363         struct usb_device *udev = priv->udev;
364         u32 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
365
366         if (!usbdata)
367                 return -ENOMEM;
368         *usbdata = data;
369
370         status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
371                                  RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
372                                  (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
373                                  usbdata, 4, HZ / 2);
374         kfree(usbdata);
375
376
377         if (status < 0) {
378                 netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
379                 return status;
380         }
381
382         return 0;
383 }
384
385
386
387 int read_nic_byte(struct net_device *dev, int indx, u8 *data)
388 {
389         int status;
390         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
391         struct usb_device *udev = priv->udev;
392         u8 *usbdata = kzalloc(sizeof(u8), GFP_KERNEL);
393
394         if (!usbdata)
395                 return -ENOMEM;
396
397         status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
398                                  RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
399                                  (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
400                                  usbdata, 1, HZ / 2);
401         *data = *usbdata;
402         kfree(usbdata);
403
404         if (status < 0) {
405                 netdev_err(dev, "%s failure status: %d\n", __func__, status);
406                 return status;
407         }
408
409         return 0;
410 }
411
412
413
414 int read_nic_word(struct net_device *dev, int indx, u16 *data)
415 {
416         int status;
417         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
418         struct usb_device *udev = priv->udev;
419         u16 *usbdata = kzalloc(sizeof(u16), GFP_KERNEL);
420
421         if (!usbdata)
422                 return -ENOMEM;
423
424         status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
425                                  RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
426                                  (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
427                                  usbdata, 2, HZ / 2);
428         *data = *usbdata;
429         kfree(usbdata);
430
431         if (status < 0) {
432                 netdev_err(dev, "%s failure status: %d\n", __func__, status);
433                 return status;
434         }
435
436         return 0;
437 }
438
439 static int read_nic_word_E(struct net_device *dev, int indx, u16 *data)
440 {
441         int status;
442         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
443         struct usb_device *udev = priv->udev;
444         u16 *usbdata = kzalloc(sizeof(u16), GFP_KERNEL);
445
446         if (!usbdata)
447                 return -ENOMEM;
448
449         status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
450                                  RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
451                                  indx | 0xfe00, 0, usbdata, 2, HZ / 2);
452         *data = *usbdata;
453         kfree(usbdata);
454
455         if (status < 0) {
456                 netdev_err(dev, "%s failure status: %d\n", __func__, status);
457                 return status;
458         }
459
460         return 0;
461 }
462
463 int read_nic_dword(struct net_device *dev, int indx, u32 *data)
464 {
465         int status;
466
467         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
468         struct usb_device *udev = priv->udev;
469         u32 *usbdata = kzalloc(sizeof(u32), GFP_KERNEL);
470
471         if (!usbdata)
472                 return -ENOMEM;
473
474         status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
475                                  RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
476                                  (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
477                                  usbdata, 4, HZ / 2);
478         *data = *usbdata;
479         kfree(usbdata);
480
481         if (status < 0) {
482                 netdev_err(dev, "%s failure status: %d\n", __func__, status);
483                 return status;
484         }
485
486         return 0;
487 }
488
489 /* u8 read_phy_cck(struct net_device *dev, u8 adr); */
490 /* u8 read_phy_ofdm(struct net_device *dev, u8 adr); */
491 /* this might still called in what was the PHY rtl8185/rtl8192 common code
492  * plans are to possibility turn it again in one common code...
493  */
494 inline void force_pci_posting(struct net_device *dev)
495 {
496 }
497
498 static struct net_device_stats *rtl8192_stats(struct net_device *dev);
499 static void rtl8192_restart(struct work_struct *work);
500 static void watch_dog_timer_callback(struct timer_list *t);
501
502 /****************************************************************************
503  *   -----------------------------PROCFS STUFF-------------------------
504  ****************************************************************************/
505
506 static struct proc_dir_entry *rtl8192_proc;
507
508 static int proc_get_stats_ap(struct seq_file *m, void *v)
509 {
510         struct net_device *dev = m->private;
511         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
512         struct ieee80211_device *ieee = priv->ieee80211;
513         struct ieee80211_network *target;
514
515         list_for_each_entry(target, &ieee->network_list, list) {
516                 const char *wpa = "non_WPA";
517
518                 if (target->wpa_ie_len > 0 || target->rsn_ie_len > 0)
519                         wpa = "WPA";
520
521                 seq_printf(m, "%s %s\n", target->ssid, wpa);
522         }
523
524         return 0;
525 }
526
527 static int proc_get_registers(struct seq_file *m, void *v)
528 {
529         struct net_device *dev = m->private;
530         int i, n, max = 0xff;
531         u8 byte_rd;
532
533         seq_puts(m, "\n####################page 0##################\n ");
534
535         for (n = 0; n <= max;) {
536                 seq_printf(m, "\nD:  %2x > ", n);
537
538                 for (i = 0; i < 16 && n <= max; i++, n++) {
539                         read_nic_byte(dev, 0x000 | n, &byte_rd);
540                         seq_printf(m, "%2x ", byte_rd);
541                 }
542         }
543
544         seq_puts(m, "\n####################page 1##################\n ");
545         for (n = 0; n <= max;) {
546                 seq_printf(m, "\nD:  %2x > ", n);
547
548                 for (i = 0; i < 16 && n <= max; i++, n++) {
549                         read_nic_byte(dev, 0x100 | n, &byte_rd);
550                         seq_printf(m, "%2x ", byte_rd);
551                 }
552         }
553
554         seq_puts(m, "\n####################page 3##################\n ");
555         for (n = 0; n <= max;) {
556                 seq_printf(m, "\nD:  %2x > ", n);
557
558                 for (i = 0; i < 16 && n <= max; i++, n++) {
559                         read_nic_byte(dev, 0x300 | n, &byte_rd);
560                         seq_printf(m, "%2x ", byte_rd);
561                 }
562         }
563
564         seq_putc(m, '\n');
565         return 0;
566 }
567
568 static int proc_get_stats_tx(struct seq_file *m, void *v)
569 {
570         struct net_device *dev = m->private;
571         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
572
573         seq_printf(m,
574                    "TX VI priority ok int: %lu\n"
575                    "TX VI priority error int: %lu\n"
576                    "TX VO priority ok int: %lu\n"
577                    "TX VO priority error int: %lu\n"
578                    "TX BE priority ok int: %lu\n"
579                    "TX BE priority error int: %lu\n"
580                    "TX BK priority ok int: %lu\n"
581                    "TX BK priority error int: %lu\n"
582                    "TX MANAGE priority ok int: %lu\n"
583                    "TX MANAGE priority error int: %lu\n"
584                    "TX BEACON priority ok int: %lu\n"
585                    "TX BEACON priority error int: %lu\n"
586                    "TX queue resume: %lu\n"
587                    "TX queue stopped?: %d\n"
588                    "TX fifo overflow: %lu\n"
589                    "TX VI queue: %d\n"
590                    "TX VO queue: %d\n"
591                    "TX BE queue: %d\n"
592                    "TX BK queue: %d\n"
593                    "TX VI dropped: %lu\n"
594                    "TX VO dropped: %lu\n"
595                    "TX BE dropped: %lu\n"
596                    "TX BK dropped: %lu\n"
597                    "TX total data packets %lu\n",
598                    priv->stats.txviokint,
599                    priv->stats.txvierr,
600                    priv->stats.txvookint,
601                    priv->stats.txvoerr,
602                    priv->stats.txbeokint,
603                    priv->stats.txbeerr,
604                    priv->stats.txbkokint,
605                    priv->stats.txbkerr,
606                    priv->stats.txmanageokint,
607                    priv->stats.txmanageerr,
608                    priv->stats.txbeaconokint,
609                    priv->stats.txbeaconerr,
610                    priv->stats.txresumed,
611                    netif_queue_stopped(dev),
612                    priv->stats.txoverflow,
613                    atomic_read(&(priv->tx_pending[VI_PRIORITY])),
614                    atomic_read(&(priv->tx_pending[VO_PRIORITY])),
615                    atomic_read(&(priv->tx_pending[BE_PRIORITY])),
616                    atomic_read(&(priv->tx_pending[BK_PRIORITY])),
617                    priv->stats.txvidrop,
618                    priv->stats.txvodrop,
619                    priv->stats.txbedrop,
620                    priv->stats.txbkdrop,
621                    priv->stats.txdatapkt
622                 );
623
624         return 0;
625 }
626
627 static int proc_get_stats_rx(struct seq_file *m, void *v)
628 {
629         struct net_device *dev = m->private;
630         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
631
632         seq_printf(m,
633                    "RX packets: %lu\n"
634                    "RX urb status error: %lu\n"
635                    "RX invalid urb error: %lu\n",
636                    priv->stats.rxoktotal,
637                    priv->stats.rxstaterr,
638                    priv->stats.rxurberr);
639
640         return 0;
641 }
642
643 static void rtl8192_proc_module_init(void)
644 {
645         RT_TRACE(COMP_INIT, "Initializing proc filesystem");
646         rtl8192_proc = proc_mkdir(RTL819xU_MODULE_NAME, init_net.proc_net);
647 }
648
649 static void rtl8192_proc_init_one(struct net_device *dev)
650 {
651         struct proc_dir_entry *dir;
652
653         if (!rtl8192_proc)
654                 return;
655
656         dir = proc_mkdir_data(dev->name, 0, rtl8192_proc, dev);
657         if (!dir)
658                 return;
659
660         proc_create_single("stats-rx", S_IFREG | S_IRUGO, dir,
661                         proc_get_stats_rx);
662         proc_create_single("stats-tx", S_IFREG | S_IRUGO, dir,
663                         proc_get_stats_tx);
664         proc_create_single("stats-ap", S_IFREG | S_IRUGO, dir,
665                         proc_get_stats_ap);
666         proc_create_single("registers", S_IFREG | S_IRUGO, dir,
667                         proc_get_registers);
668 }
669
670 static void rtl8192_proc_remove_one(struct net_device *dev)
671 {
672         remove_proc_subtree(dev->name, rtl8192_proc);
673 }
674
675 /****************************************************************************
676  *  -----------------------------MISC STUFF-------------------------
677  *****************************************************************************/
678
679 short check_nic_enough_desc(struct net_device *dev, int queue_index)
680 {
681         struct r8192_priv *priv = ieee80211_priv(dev);
682         int used = atomic_read(&priv->tx_pending[queue_index]);
683
684         return (used < MAX_TX_URB);
685 }
686
687 static void tx_timeout(struct net_device *dev)
688 {
689         struct r8192_priv *priv = ieee80211_priv(dev);
690
691         schedule_work(&priv->reset_wq);
692 }
693
694 void rtl8192_update_msr(struct net_device *dev)
695 {
696         struct r8192_priv *priv = ieee80211_priv(dev);
697         u8 msr;
698
699         read_nic_byte(dev, MSR, &msr);
700         msr &= ~MSR_LINK_MASK;
701
702         /* do not change in link_state != WLAN_LINK_ASSOCIATED.
703          * msr must be updated if the state is ASSOCIATING.
704          * this is intentional and make sense for ad-hoc and
705          * master (see the create BSS/IBSS func)
706          */
707         if (priv->ieee80211->state == IEEE80211_LINKED) {
708                 if (priv->ieee80211->iw_mode == IW_MODE_INFRA)
709                         msr |= (MSR_LINK_MANAGED << MSR_LINK_SHIFT);
710                 else if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
711                         msr |= (MSR_LINK_ADHOC << MSR_LINK_SHIFT);
712                 else if (priv->ieee80211->iw_mode == IW_MODE_MASTER)
713                         msr |= (MSR_LINK_MASTER << MSR_LINK_SHIFT);
714
715         } else {
716                 msr |= (MSR_LINK_NONE << MSR_LINK_SHIFT);
717         }
718
719         write_nic_byte(dev, MSR, msr);
720 }
721
722 void rtl8192_set_chan(struct net_device *dev, short ch)
723 {
724         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
725
726         RT_TRACE(COMP_CH, "=====>%s()====ch:%d\n", __func__, ch);
727         priv->chan = ch;
728
729         /* this hack should avoid frame TX during channel setting*/
730
731         /* need to implement rf set channel here */
732
733         if (priv->rf_set_chan)
734                 priv->rf_set_chan(dev, priv->chan);
735         mdelay(10);
736 }
737
738 static void rtl8192_rx_isr(struct urb *urb);
739
740 static u32 get_rxpacket_shiftbytes_819xusb(struct ieee80211_rx_stats *pstats)
741 {
742         return (sizeof(rx_desc_819x_usb) + pstats->RxDrvInfoSize
743                 + pstats->RxBufShift);
744 }
745
746 static int rtl8192_rx_initiate(struct net_device *dev)
747 {
748         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
749         struct urb *entry;
750         struct sk_buff *skb;
751         struct rtl8192_rx_info *info;
752
753         /* nomal packet rx procedure */
754         while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB) {
755                 skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
756                 if (!skb)
757                         break;
758                 entry = usb_alloc_urb(0, GFP_KERNEL);
759                 if (!entry) {
760                         kfree_skb(skb);
761                         break;
762                 }
763                 usb_fill_bulk_urb(entry, priv->udev,
764                                   usb_rcvbulkpipe(priv->udev, 3),
765                                   skb_tail_pointer(skb),
766                                   RX_URB_SIZE, rtl8192_rx_isr, skb);
767                 info = (struct rtl8192_rx_info *)skb->cb;
768                 info->urb = entry;
769                 info->dev = dev;
770                 info->out_pipe = 3; /* denote rx normal packet queue */
771                 skb_queue_tail(&priv->rx_queue, skb);
772                 usb_submit_urb(entry, GFP_KERNEL);
773         }
774
775         /* command packet rx procedure */
776         while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB + 3) {
777                 skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
778                 if (!skb)
779                         break;
780                 entry = usb_alloc_urb(0, GFP_KERNEL);
781                 if (!entry) {
782                         kfree_skb(skb);
783                         break;
784                 }
785                 usb_fill_bulk_urb(entry, priv->udev,
786                                   usb_rcvbulkpipe(priv->udev, 9),
787                                   skb_tail_pointer(skb),
788                                   RX_URB_SIZE, rtl8192_rx_isr, skb);
789                 info = (struct rtl8192_rx_info *)skb->cb;
790                 info->urb = entry;
791                 info->dev = dev;
792                 info->out_pipe = 9; /* denote rx cmd packet queue */
793                 skb_queue_tail(&priv->rx_queue, skb);
794                 usb_submit_urb(entry, GFP_KERNEL);
795         }
796
797         return 0;
798 }
799
800 void rtl8192_set_rxconf(struct net_device *dev)
801 {
802         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
803         u32 rxconf;
804
805         read_nic_dword(dev, RCR, &rxconf);
806         rxconf = rxconf & ~MAC_FILTER_MASK;
807         rxconf = rxconf | RCR_AMF;
808         rxconf = rxconf | RCR_ADF;
809         rxconf = rxconf | RCR_AB;
810         rxconf = rxconf | RCR_AM;
811
812         if (dev->flags & IFF_PROMISC)
813                 DMESG("NIC in promisc mode");
814
815         if (priv->ieee80211->iw_mode == IW_MODE_MONITOR ||
816             dev->flags & IFF_PROMISC) {
817                 rxconf = rxconf | RCR_AAP;
818         } else {
819                 rxconf = rxconf | RCR_APM;
820                 rxconf = rxconf | RCR_CBSSID;
821         }
822
823
824         if (priv->ieee80211->iw_mode == IW_MODE_MONITOR) {
825                 rxconf = rxconf | RCR_AICV;
826                 rxconf = rxconf | RCR_APWRMGT;
827         }
828
829         if (priv->crcmon == 1 && priv->ieee80211->iw_mode == IW_MODE_MONITOR)
830                 rxconf = rxconf | RCR_ACRC32;
831
832
833         rxconf = rxconf & ~RX_FIFO_THRESHOLD_MASK;
834         rxconf = rxconf | (RX_FIFO_THRESHOLD_NONE << RX_FIFO_THRESHOLD_SHIFT);
835         rxconf = rxconf & ~MAX_RX_DMA_MASK;
836         rxconf = rxconf | ((u32)7 << RCR_MXDMA_OFFSET);
837
838         rxconf = rxconf | RCR_ONLYERLPKT;
839
840         write_nic_dword(dev, RCR, rxconf);
841 }
842
843 /* wait to be removed */
844 void rtl8192_rx_enable(struct net_device *dev)
845 {
846         rtl8192_rx_initiate(dev);
847 }
848
849
850 void rtl8192_tx_enable(struct net_device *dev)
851 {
852 }
853
854
855
856 void rtl8192_rtx_disable(struct net_device *dev)
857 {
858         u8 cmd;
859         struct r8192_priv *priv = ieee80211_priv(dev);
860         struct sk_buff *skb;
861         struct rtl8192_rx_info *info;
862
863         read_nic_byte(dev, CMDR, &cmd);
864         write_nic_byte(dev, CMDR, cmd & ~(CR_TE | CR_RE));
865         force_pci_posting(dev);
866         mdelay(10);
867
868         while ((skb = __skb_dequeue(&priv->rx_queue))) {
869                 info = (struct rtl8192_rx_info *)skb->cb;
870                 if (!info->urb)
871                         continue;
872
873                 usb_kill_urb(info->urb);
874                 kfree_skb(skb);
875         }
876
877         if (skb_queue_len(&priv->skb_queue))
878                 netdev_warn(dev, "skb_queue not empty\n");
879
880         skb_queue_purge(&priv->skb_queue);
881 }
882
883 /* The prototype of rx_isr has changed since one version of Linux Kernel */
884 static void rtl8192_rx_isr(struct urb *urb)
885 {
886         struct sk_buff *skb = (struct sk_buff *)urb->context;
887         struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
888         struct net_device *dev = info->dev;
889         struct r8192_priv *priv = ieee80211_priv(dev);
890         int out_pipe = info->out_pipe;
891         int err;
892
893         if (!priv->up)
894                 return;
895
896         if (unlikely(urb->status)) {
897                 info->urb = NULL;
898                 priv->stats.rxstaterr++;
899                 priv->ieee80211->stats.rx_errors++;
900                 usb_free_urb(urb);
901                 return;
902         }
903         skb_unlink(skb, &priv->rx_queue);
904         skb_put(skb, urb->actual_length);
905
906         skb_queue_tail(&priv->skb_queue, skb);
907         tasklet_schedule(&priv->irq_rx_tasklet);
908
909         skb = dev_alloc_skb(RX_URB_SIZE);
910         if (unlikely(!skb)) {
911                 usb_free_urb(urb);
912                 netdev_err(dev, "%s(): can't alloc skb\n", __func__);
913                 /* TODO check rx queue length and refill *somewhere* */
914                 return;
915         }
916
917         usb_fill_bulk_urb(urb, priv->udev,
918                           usb_rcvbulkpipe(priv->udev, out_pipe),
919                           skb_tail_pointer(skb),
920                           RX_URB_SIZE, rtl8192_rx_isr, skb);
921
922         info = (struct rtl8192_rx_info *)skb->cb;
923         info->urb = urb;
924         info->dev = dev;
925         info->out_pipe = out_pipe;
926
927         urb->transfer_buffer = skb_tail_pointer(skb);
928         urb->context = skb;
929         skb_queue_tail(&priv->rx_queue, skb);
930         err = usb_submit_urb(urb, GFP_ATOMIC);
931         if (err && err != EPERM)
932                 netdev_err(dev,
933                            "can not submit rxurb, err is %x, URB status is %x\n",
934                            err, urb->status);
935 }
936
937 static u32 rtl819xusb_rx_command_packet(struct net_device *dev,
938                                         struct ieee80211_rx_stats *pstats)
939 {
940         u32     status;
941
942         status = cmpk_message_handle_rx(dev, pstats);
943         if (status)
944                 DMESG("rxcommandpackethandle819xusb: It is a command packet\n");
945
946         return status;
947 }
948
949
950 static void rtl8192_data_hard_stop(struct net_device *dev)
951 {
952         /* FIXME !! */
953 }
954
955
956 static void rtl8192_data_hard_resume(struct net_device *dev)
957 {
958         /* FIXME !! */
959 }
960
961 /* this function TX data frames when the ieee80211 stack requires this.
962  * It checks also if we need to stop the ieee tx queue, eventually do it
963  */
964 static void rtl8192_hard_data_xmit(struct sk_buff *skb, struct net_device *dev,
965                                    int rate)
966 {
967         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
968         int ret;
969         unsigned long flags;
970         struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
971         u8 queue_index = tcb_desc->queue_index;
972
973         /* shall not be referred by command packet */
974         RTL8192U_ASSERT(queue_index != TXCMD_QUEUE);
975
976         spin_lock_irqsave(&priv->tx_lock, flags);
977
978         *(struct net_device **)(skb->cb) = dev;
979         tcb_desc->bTxEnableFwCalcDur = 1;
980         skb_push(skb, priv->ieee80211->tx_headroom);
981         ret = rtl8192_tx(dev, skb);
982
983         spin_unlock_irqrestore(&priv->tx_lock, flags);
984 }
985
986 /* This is a rough attempt to TX a frame
987  * This is called by the ieee 80211 stack to TX management frames.
988  * If the ring is full packet are dropped (for data frame the queue
989  * is stopped before this can happen).
990  */
991 static int rtl8192_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
992 {
993         struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
994         int ret;
995         unsigned long flags;
996         struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
997         u8 queue_index = tcb_desc->queue_index;
998
999
1000         spin_lock_irqsave(&priv->tx_lock, flags);
1001
1002         memcpy((unsigned char *)(skb->cb), &dev, sizeof(dev));
1003         if (queue_index == TXCMD_QUEUE) {
1004                 skb_push(skb, USB_HWDESC_HEADER_LEN);
1005                 rtl819xU_tx_cmd(dev, skb);
1006                 ret = 1;
1007         } else {
1008                 skb_push(skb, priv->ieee80211->tx_headroom);
1009                 ret = rtl8192_tx(dev, skb);
1010         }
1011
1012         spin_unlock_irqrestore(&priv->tx_lock, flags);
1013
1014         return ret;
1015 }
1016
1017 static void rtl8192_tx_isr(struct urb *tx_urb)
1018 {
1019         struct sk_buff *skb = (struct sk_buff *)tx_urb->context;
1020         struct net_device *dev;
1021         struct r8192_priv *priv = NULL;
1022         struct cb_desc *tcb_desc;
1023         u8  queue_index;
1024
1025         if (!skb)
1026                 return;
1027
1028         dev = *(struct net_device **)(skb->cb);
1029         tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1030         queue_index = tcb_desc->queue_index;
1031
1032         priv = ieee80211_priv(dev);
1033
1034         if (tcb_desc->queue_index != TXCMD_QUEUE) {
1035                 if (tx_urb->status == 0) {
1036                         netif_trans_update(dev);
1037                         priv->stats.txoktotal++;
1038                         priv->ieee80211->LinkDetectInfo.NumTxOkInPeriod++;
1039                         priv->stats.txbytesunicast +=
1040                                 (skb->len - priv->ieee80211->tx_headroom);
1041                 } else {
1042                         priv->ieee80211->stats.tx_errors++;
1043                         /* TODO */
1044                 }
1045         }
1046
1047         /* free skb and tx_urb */
1048         dev_kfree_skb_any(skb);
1049         usb_free_urb(tx_urb);
1050         atomic_dec(&priv->tx_pending[queue_index]);
1051
1052         /*
1053          * Handle HW Beacon:
1054          * We had transfer our beacon frame to host controller at this moment.
1055          *
1056          *
1057          * Caution:
1058          * Handling the wait queue of command packets.
1059          * For Tx command packets, we must not do TCB fragment because it is
1060          * not handled right now. We must cut the packets to match the size of
1061          * TX_CMD_PKT before we send it.
1062          */
1063
1064         /* Handle MPDU in wait queue. */
1065         if (queue_index != BEACON_QUEUE) {
1066                 /* Don't send data frame during scanning.*/
1067                 if ((skb_queue_len(&priv->ieee80211->skb_waitQ[queue_index]) != 0) &&
1068                     (!(priv->ieee80211->queue_stop))) {
1069                         skb = skb_dequeue(&(priv->ieee80211->skb_waitQ[queue_index]));
1070                         if (skb)
1071                                 priv->ieee80211->softmac_hard_start_xmit(skb,
1072                                                                          dev);
1073
1074                         return; /* avoid further processing AMSDU */
1075                 }
1076         }
1077 }
1078
1079 static void rtl8192_config_rate(struct net_device *dev, u16 *rate_config)
1080 {
1081         struct r8192_priv *priv = ieee80211_priv(dev);
1082         struct ieee80211_network *net;
1083         u8 i = 0, basic_rate = 0;
1084
1085         net = &priv->ieee80211->current_network;
1086
1087         for (i = 0; i < net->rates_len; i++) {
1088                 basic_rate = net->rates[i] & 0x7f;
1089                 switch (basic_rate) {
1090                 case MGN_1M:
1091                         *rate_config |= RRSR_1M;
1092                         break;
1093                 case MGN_2M:
1094                         *rate_config |= RRSR_2M;
1095                         break;
1096                 case MGN_5_5M:
1097                         *rate_config |= RRSR_5_5M;
1098                         break;
1099                 case MGN_11M:
1100                         *rate_config |= RRSR_11M;
1101                         break;
1102                 case MGN_6M:
1103                         *rate_config |= RRSR_6M;
1104                         break;
1105                 case MGN_9M:
1106                         *rate_config |= RRSR_9M;
1107                         break;
1108                 case MGN_12M:
1109                         *rate_config |= RRSR_12M;
1110                         break;
1111                 case MGN_18M:
1112                         *rate_config |= RRSR_18M;
1113                         break;
1114                 case MGN_24M:
1115                         *rate_config |= RRSR_24M;
1116                         break;
1117                 case MGN_36M:
1118                         *rate_config |= RRSR_36M;
1119                         break;
1120                 case MGN_48M:
1121                         *rate_config |= RRSR_48M;
1122                         break;
1123                 case MGN_54M:
1124                         *rate_config |= RRSR_54M;
1125                         break;
1126                 }
1127         }
1128         for (i = 0; i < net->rates_ex_len; i++) {
1129                 basic_rate = net->rates_ex[i] & 0x7f;
1130                 switch (basic_rate) {
1131                 case MGN_1M:
1132                         *rate_config |= RRSR_1M;
1133                         break;
1134                 case MGN_2M:
1135                         *rate_config |= RRSR_2M;
1136                         break;
1137                 case MGN_5_5M:
1138                         *rate_config |= RRSR_5_5M;
1139                         break;
1140                 case MGN_11M:
1141                         *rate_config |= RRSR_11M;
1142                         break;
1143                 case MGN_6M:
1144                         *rate_config |= RRSR_6M;
1145                         break;
1146                 case MGN_9M:
1147                         *rate_config |= RRSR_9M;
1148                         break;
1149                 case MGN_12M:
1150                         *rate_config |= RRSR_12M;
1151                         break;
1152                 case MGN_18M:
1153                         *rate_config |= RRSR_18M;
1154                         break;
1155                 case MGN_24M:
1156                         *rate_config |= RRSR_24M;
1157                         break;
1158                 case MGN_36M:
1159                         *rate_config |= RRSR_36M;
1160                         break;
1161                 case MGN_48M:
1162                         *rate_config |= RRSR_48M;
1163                         break;
1164                 case MGN_54M:
1165                         *rate_config |= RRSR_54M;
1166                         break;
1167                 }
1168         }
1169 }
1170
1171
1172 #define SHORT_SLOT_TIME 9
1173 #define NON_SHORT_SLOT_TIME 20
1174
1175 static void rtl8192_update_cap(struct net_device *dev, u16 cap)
1176 {
1177         u32 tmp = 0;
1178         struct r8192_priv *priv = ieee80211_priv(dev);
1179         struct ieee80211_network *net = &priv->ieee80211->current_network;
1180
1181         priv->short_preamble = cap & WLAN_CAPABILITY_SHORT_PREAMBLE;
1182         tmp = priv->basic_rate;
1183         if (priv->short_preamble)
1184                 tmp |= BRSR_AckShortPmb;
1185         write_nic_dword(dev, RRSR, tmp);
1186
1187         if (net->mode & (IEEE_G | IEEE_N_24G)) {
1188                 u8 slot_time = 0;
1189
1190                 if ((cap & WLAN_CAPABILITY_SHORT_SLOT) &&
1191                     (!priv->ieee80211->pHTInfo->bCurrentRT2RTLongSlotTime))
1192                         /* short slot time */
1193                         slot_time = SHORT_SLOT_TIME;
1194                 else    /* long slot time */
1195                         slot_time = NON_SHORT_SLOT_TIME;
1196                 priv->slot_time = slot_time;
1197                 write_nic_byte(dev, SLOT_TIME, slot_time);
1198         }
1199 }
1200
1201 static void rtl8192_net_update(struct net_device *dev)
1202 {
1203         struct r8192_priv *priv = ieee80211_priv(dev);
1204         struct ieee80211_network *net;
1205         u16 BcnTimeCfg = 0, BcnCW = 6, BcnIFS = 0xf;
1206         u16 rate_config = 0;
1207
1208         net = &priv->ieee80211->current_network;
1209
1210         rtl8192_config_rate(dev, &rate_config);
1211         priv->basic_rate = rate_config & 0x15f;
1212
1213         write_nic_dword(dev, BSSIDR, ((u32 *)net->bssid)[0]);
1214         write_nic_word(dev, BSSIDR + 4, ((u16 *)net->bssid)[2]);
1215
1216         rtl8192_update_msr(dev);
1217         if (priv->ieee80211->iw_mode == IW_MODE_ADHOC) {
1218                 write_nic_word(dev, ATIMWND, 2);
1219                 write_nic_word(dev, BCN_DMATIME, 1023);
1220                 write_nic_word(dev, BCN_INTERVAL, net->beacon_interval);
1221                 write_nic_word(dev, BCN_DRV_EARLY_INT, 1);
1222                 write_nic_byte(dev, BCN_ERR_THRESH, 100);
1223                 BcnTimeCfg |= (BcnCW << BCN_TCFG_CW_SHIFT);
1224                 /* TODO: BcnIFS may required to be changed on ASIC */
1225                 BcnTimeCfg |= BcnIFS << BCN_TCFG_IFS;
1226
1227                 write_nic_word(dev, BCN_TCFG, BcnTimeCfg);
1228         }
1229 }
1230
1231 /* temporary hw beacon is not used any more.
1232  * open it when necessary
1233  */
1234 void rtl819xusb_beacon_tx(struct net_device *dev, u16  tx_rate)
1235 {
1236
1237 }
1238
1239 short rtl819xU_tx_cmd(struct net_device *dev, struct sk_buff *skb)
1240 {
1241         struct r8192_priv *priv = ieee80211_priv(dev);
1242         int                     status;
1243         struct urb              *tx_urb;
1244         unsigned int            idx_pipe;
1245         tx_desc_cmd_819x_usb *pdesc = (tx_desc_cmd_819x_usb *)skb->data;
1246         struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1247         u8 queue_index = tcb_desc->queue_index;
1248
1249         atomic_inc(&priv->tx_pending[queue_index]);
1250         tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
1251         if (!tx_urb) {
1252                 dev_kfree_skb(skb);
1253                 return -ENOMEM;
1254         }
1255
1256         memset(pdesc, 0, USB_HWDESC_HEADER_LEN);
1257         /* Tx descriptor ought to be set according to the skb->cb */
1258         pdesc->FirstSeg = 1;
1259         pdesc->LastSeg = 1;
1260         pdesc->CmdInit = tcb_desc->bCmdOrInit;
1261         pdesc->TxBufferSize = tcb_desc->txbuf_size;
1262         pdesc->OWN = 1;
1263         pdesc->LINIP = tcb_desc->bLastIniPkt;
1264
1265         /*---------------------------------------------------------------------
1266          * Fill up USB_OUT_CONTEXT.
1267          *---------------------------------------------------------------------
1268          */
1269         idx_pipe = 0x04;
1270         usb_fill_bulk_urb(tx_urb, priv->udev,
1271                           usb_sndbulkpipe(priv->udev, idx_pipe),
1272                           skb->data, skb->len, rtl8192_tx_isr, skb);
1273
1274         status = usb_submit_urb(tx_urb, GFP_ATOMIC);
1275
1276         if (!status)
1277                 return 0;
1278
1279         DMESGE("Error TX CMD URB, error %d", status);
1280         return -1;
1281 }
1282
1283 /*
1284  * Mapping Software/Hardware descriptor queue id to "Queue Select Field"
1285  * in TxFwInfo data structure
1286  * 2006.10.30 by Emily
1287  *
1288  * \param QUEUEID       Software Queue
1289  */
1290 static u8 MapHwQueueToFirmwareQueue(u8 QueueID)
1291 {
1292         u8 QueueSelect = 0x0;       /* default set to */
1293
1294         switch (QueueID) {
1295         case BE_QUEUE:
1296                 QueueSelect = QSLT_BE;
1297                 break;
1298
1299         case BK_QUEUE:
1300                 QueueSelect = QSLT_BK;
1301                 break;
1302
1303         case VO_QUEUE:
1304                 QueueSelect = QSLT_VO;
1305                 break;
1306
1307         case VI_QUEUE:
1308                 QueueSelect = QSLT_VI;
1309                 break;
1310         case MGNT_QUEUE:
1311                 QueueSelect = QSLT_MGNT;
1312                 break;
1313
1314         case BEACON_QUEUE:
1315                 QueueSelect = QSLT_BEACON;
1316                 break;
1317
1318                 /* TODO: mark other queue selection until we verify it is OK */
1319                 /* TODO: Remove Assertions */
1320         case TXCMD_QUEUE:
1321                 QueueSelect = QSLT_CMD;
1322                 break;
1323         case HIGH_QUEUE:
1324                 QueueSelect = QSLT_HIGH;
1325                 break;
1326
1327         default:
1328                 RT_TRACE(COMP_ERR,
1329                          "TransmitTCB(): Impossible Queue Selection: %d\n",
1330                          QueueID);
1331                 break;
1332         }
1333         return QueueSelect;
1334 }
1335
1336 static u8 MRateToHwRate8190Pci(u8 rate)
1337 {
1338         u8  ret = DESC90_RATE1M;
1339
1340         switch (rate) {
1341         case MGN_1M:
1342                 ret = DESC90_RATE1M;
1343                 break;
1344         case MGN_2M:
1345                 ret = DESC90_RATE2M;
1346                 break;
1347         case MGN_5_5M:
1348                 ret = DESC90_RATE5_5M;
1349                 break;
1350         case MGN_11M:
1351                 ret = DESC90_RATE11M;
1352                 break;
1353         case MGN_6M:
1354                 ret = DESC90_RATE6M;
1355                 break;
1356         case MGN_9M:
1357                 ret = DESC90_RATE9M;
1358                 break;
1359         case MGN_12M:
1360                 ret = DESC90_RATE12M;
1361                 break;
1362         case MGN_18M:
1363                 ret = DESC90_RATE18M;
1364                 break;
1365         case MGN_24M:
1366                 ret = DESC90_RATE24M;
1367                 break;
1368         case MGN_36M:
1369                 ret = DESC90_RATE36M;
1370                 break;
1371         case MGN_48M:
1372                 ret = DESC90_RATE48M;
1373                 break;
1374         case MGN_54M:
1375                 ret = DESC90_RATE54M;
1376                 break;
1377
1378         /* HT rate since here */
1379         case MGN_MCS0:
1380                 ret = DESC90_RATEMCS0;
1381                 break;
1382         case MGN_MCS1:
1383                 ret = DESC90_RATEMCS1;
1384                 break;
1385         case MGN_MCS2:
1386                 ret = DESC90_RATEMCS2;
1387                 break;
1388         case MGN_MCS3:
1389                 ret = DESC90_RATEMCS3;
1390                 break;
1391         case MGN_MCS4:
1392                 ret = DESC90_RATEMCS4;
1393                 break;
1394         case MGN_MCS5:
1395                 ret = DESC90_RATEMCS5;
1396                 break;
1397         case MGN_MCS6:
1398                 ret = DESC90_RATEMCS6;
1399                 break;
1400         case MGN_MCS7:
1401                 ret = DESC90_RATEMCS7;
1402                 break;
1403         case MGN_MCS8:
1404                 ret = DESC90_RATEMCS8;
1405                 break;
1406         case MGN_MCS9:
1407                 ret = DESC90_RATEMCS9;
1408                 break;
1409         case MGN_MCS10:
1410                 ret = DESC90_RATEMCS10;
1411                 break;
1412         case MGN_MCS11:
1413                 ret = DESC90_RATEMCS11;
1414                 break;
1415         case MGN_MCS12:
1416                 ret = DESC90_RATEMCS12;
1417                 break;
1418         case MGN_MCS13:
1419                 ret = DESC90_RATEMCS13;
1420                 break;
1421         case MGN_MCS14:
1422                 ret = DESC90_RATEMCS14;
1423                 break;
1424         case MGN_MCS15:
1425                 ret = DESC90_RATEMCS15;
1426                 break;
1427         case (0x80 | 0x20):
1428                 ret = DESC90_RATEMCS32;
1429                 break;
1430
1431         default:
1432                 break;
1433         }
1434         return ret;
1435 }
1436
1437
1438 static u8 QueryIsShort(u8 TxHT, u8 TxRate, struct cb_desc *tcb_desc)
1439 {
1440         u8   tmp_Short;
1441
1442         tmp_Short = (TxHT == 1) ?
1443                         ((tcb_desc->bUseShortGI) ? 1 : 0) :
1444                         ((tcb_desc->bUseShortPreamble) ? 1 : 0);
1445
1446         if (TxHT == 1 && TxRate != DESC90_RATEMCS15)
1447                 tmp_Short = 0;
1448
1449         return tmp_Short;
1450 }
1451
1452 static void tx_zero_isr(struct urb *tx_urb)
1453 {
1454 }
1455
1456 /*
1457  * The tx procedure is just as following,
1458  * skb->cb will contain all the following information,
1459  * priority, morefrag, rate, &dev.
1460  */
1461 short rtl8192_tx(struct net_device *dev, struct sk_buff *skb)
1462 {
1463         struct r8192_priv *priv = ieee80211_priv(dev);
1464         struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1465         tx_desc_819x_usb *tx_desc = (tx_desc_819x_usb *)skb->data;
1466         tx_fwinfo_819x_usb *tx_fwinfo =
1467                 (tx_fwinfo_819x_usb *)(skb->data + USB_HWDESC_HEADER_LEN);
1468         struct usb_device *udev = priv->udev;
1469         int pend;
1470         int status;
1471         struct urb *tx_urb = NULL, *tx_urb_zero = NULL;
1472         unsigned int idx_pipe;
1473
1474         pend = atomic_read(&priv->tx_pending[tcb_desc->queue_index]);
1475         /* we are locked here so the two atomic_read and inc are executed
1476          * without interleaves
1477          * !!! For debug purpose
1478          */
1479         if (pend > MAX_TX_URB) {
1480                 netdev_dbg(dev, "To discard skb packet!\n");
1481                 dev_kfree_skb_any(skb);
1482                 return -1;
1483         }
1484
1485         tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
1486         if (!tx_urb) {
1487                 dev_kfree_skb_any(skb);
1488                 return -ENOMEM;
1489         }
1490
1491         /* Fill Tx firmware info */
1492         memset(tx_fwinfo, 0, sizeof(tx_fwinfo_819x_usb));
1493         /* DWORD 0 */
1494         tx_fwinfo->TxHT = (tcb_desc->data_rate & 0x80) ? 1 : 0;
1495         tx_fwinfo->TxRate = MRateToHwRate8190Pci(tcb_desc->data_rate);
1496         tx_fwinfo->EnableCPUDur = tcb_desc->bTxEnableFwCalcDur;
1497         tx_fwinfo->Short = QueryIsShort(tx_fwinfo->TxHT, tx_fwinfo->TxRate,
1498                                         tcb_desc);
1499         if (tcb_desc->bAMPDUEnable) { /* AMPDU enabled */
1500                 tx_fwinfo->AllowAggregation = 1;
1501                 /* DWORD 1 */
1502                 tx_fwinfo->RxMF = tcb_desc->ampdu_factor;
1503                 tx_fwinfo->RxAMD = tcb_desc->ampdu_density & 0x07;
1504         } else {
1505                 tx_fwinfo->AllowAggregation = 0;
1506                 /* DWORD 1 */
1507                 tx_fwinfo->RxMF = 0;
1508                 tx_fwinfo->RxAMD = 0;
1509         }
1510
1511         /* Protection mode related */
1512         tx_fwinfo->RtsEnable = (tcb_desc->bRTSEnable) ? 1 : 0;
1513         tx_fwinfo->CtsEnable = (tcb_desc->bCTSEnable) ? 1 : 0;
1514         tx_fwinfo->RtsSTBC = (tcb_desc->bRTSSTBC) ? 1 : 0;
1515         tx_fwinfo->RtsHT = (tcb_desc->rts_rate & 0x80) ? 1 : 0;
1516         tx_fwinfo->RtsRate =  MRateToHwRate8190Pci((u8)tcb_desc->rts_rate);
1517         tx_fwinfo->RtsSubcarrier = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->RTSSC) : 0;
1518         tx_fwinfo->RtsBandwidth = (tx_fwinfo->RtsHT == 1) ? ((tcb_desc->bRTSBW) ? 1 : 0) : 0;
1519         tx_fwinfo->RtsShort = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->bRTSUseShortPreamble ? 1 : 0) :
1520                               (tcb_desc->bRTSUseShortGI ? 1 : 0);
1521
1522         /* Set Bandwidth and sub-channel settings. */
1523         if (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20_40) {
1524                 if (tcb_desc->bPacketBW) {
1525                         tx_fwinfo->TxBandwidth = 1;
1526                         /* use duplicated mode */
1527                         tx_fwinfo->TxSubCarrier = 0;
1528                 } else {
1529                         tx_fwinfo->TxBandwidth = 0;
1530                         tx_fwinfo->TxSubCarrier = priv->nCur40MhzPrimeSC;
1531                 }
1532         } else {
1533                 tx_fwinfo->TxBandwidth = 0;
1534                 tx_fwinfo->TxSubCarrier = 0;
1535         }
1536
1537         /* Fill Tx descriptor */
1538         memset(tx_desc, 0, sizeof(tx_desc_819x_usb));
1539         /* DWORD 0 */
1540         tx_desc->LINIP = 0;
1541         tx_desc->CmdInit = 1;
1542         tx_desc->Offset =  sizeof(tx_fwinfo_819x_usb) + 8;
1543         tx_desc->PktSize = (skb->len - TX_PACKET_SHIFT_BYTES) & 0xffff;
1544
1545         /*DWORD 1*/
1546         tx_desc->SecCAMID = 0;
1547         tx_desc->RATid = tcb_desc->RATRIndex;
1548         tx_desc->NoEnc = 1;
1549         tx_desc->SecType = 0x0;
1550         if (tcb_desc->bHwSec) {
1551                 switch (priv->ieee80211->pairwise_key_type) {
1552                 case KEY_TYPE_WEP40:
1553                 case KEY_TYPE_WEP104:
1554                         tx_desc->SecType = 0x1;
1555                         tx_desc->NoEnc = 0;
1556                         break;
1557                 case KEY_TYPE_TKIP:
1558                         tx_desc->SecType = 0x2;
1559                         tx_desc->NoEnc = 0;
1560                         break;
1561                 case KEY_TYPE_CCMP:
1562                         tx_desc->SecType = 0x3;
1563                         tx_desc->NoEnc = 0;
1564                         break;
1565                 case KEY_TYPE_NA:
1566                         tx_desc->SecType = 0x0;
1567                         tx_desc->NoEnc = 1;
1568                         break;
1569                 }
1570         }
1571
1572         tx_desc->QueueSelect = MapHwQueueToFirmwareQueue(tcb_desc->queue_index);
1573         tx_desc->TxFWInfoSize =  sizeof(tx_fwinfo_819x_usb);
1574
1575         tx_desc->DISFB = tcb_desc->bTxDisableRateFallBack;
1576         tx_desc->USERATE = tcb_desc->bTxUseDriverAssingedRate;
1577
1578         /* Fill fields that are required to be initialized in
1579          * all of the descriptors
1580          */
1581         /* DWORD 0 */
1582         tx_desc->FirstSeg = 1;
1583         tx_desc->LastSeg = 1;
1584         tx_desc->OWN = 1;
1585
1586         /* DWORD 2 */
1587         tx_desc->TxBufferSize = (u32)(skb->len - USB_HWDESC_HEADER_LEN);
1588         idx_pipe = 0x5;
1589
1590         /* To submit bulk urb */
1591         usb_fill_bulk_urb(tx_urb, udev,
1592                           usb_sndbulkpipe(udev, idx_pipe), skb->data,
1593                           skb->len, rtl8192_tx_isr, skb);
1594
1595         status = usb_submit_urb(tx_urb, GFP_ATOMIC);
1596         if (!status) {
1597                 /* We need to send 0 byte packet whenever
1598                  * 512N bytes/64N(HIGN SPEED/NORMAL SPEED) bytes packet has
1599                  * been transmitted. Otherwise, it will be halt to wait for
1600                  * another packet.
1601                  */
1602                 bool bSend0Byte = false;
1603                 u8 zero = 0;
1604
1605                 if (udev->speed == USB_SPEED_HIGH) {
1606                         if (skb->len > 0 && skb->len % 512 == 0)
1607                                 bSend0Byte = true;
1608                 } else {
1609                         if (skb->len > 0 && skb->len % 64 == 0)
1610                                 bSend0Byte = true;
1611                 }
1612                 if (bSend0Byte) {
1613                         tx_urb_zero = usb_alloc_urb(0, GFP_ATOMIC);
1614                         if (!tx_urb_zero)
1615                                 return -ENOMEM;
1616                         usb_fill_bulk_urb(tx_urb_zero, udev,
1617                                           usb_sndbulkpipe(udev, idx_pipe),
1618                                           &zero, 0, tx_zero_isr, dev);
1619                         status = usb_submit_urb(tx_urb_zero, GFP_ATOMIC);
1620                         if (status) {
1621                                 RT_TRACE(COMP_ERR,
1622                                          "Error TX URB for zero byte %d, error %d",
1623                                          atomic_read(&priv->tx_pending[tcb_desc->queue_index]),
1624                                          status);
1625                                 return -1;
1626                         }
1627                 }
1628                 netif_trans_update(dev);
1629                 atomic_inc(&priv->tx_pending[tcb_desc->queue_index]);
1630                 return 0;
1631         }
1632
1633         RT_TRACE(COMP_ERR, "Error TX URB %d, error %d",
1634                  atomic_read(&priv->tx_pending[tcb_desc->queue_index]),
1635                  status);
1636         return -1;
1637 }
1638
1639 static short rtl8192_usb_initendpoints(struct net_device *dev)
1640 {
1641         struct r8192_priv *priv = ieee80211_priv(dev);
1642
1643         priv->rx_urb = kmalloc(sizeof(struct urb *) * (MAX_RX_URB + 1),
1644                                GFP_KERNEL);
1645         if (!priv->rx_urb)
1646                 return -ENOMEM;
1647
1648 #ifndef JACKSON_NEW_RX
1649         for (i = 0; i < (MAX_RX_URB + 1); i++) {
1650                 priv->rx_urb[i] = usb_alloc_urb(0, GFP_KERNEL);
1651                 if (!priv->rx_urb[i])
1652                         return -ENOMEM;
1653
1654                 priv->rx_urb[i]->transfer_buffer =
1655                         kmalloc(RX_URB_SIZE, GFP_KERNEL);
1656                 if (!priv->rx_urb[i]->transfer_buffer)
1657                         return -ENOMEM;
1658
1659                 priv->rx_urb[i]->transfer_buffer_length = RX_URB_SIZE;
1660         }
1661 #endif
1662
1663 #ifdef THOMAS_BEACON
1664         {
1665                 long align = 0;
1666                 void *oldaddr, *newaddr;
1667
1668                 priv->rx_urb[16] = usb_alloc_urb(0, GFP_KERNEL);
1669                 priv->oldaddr = kmalloc(16, GFP_KERNEL);
1670                 if (!priv->oldaddr)
1671                         return -ENOMEM;
1672                 oldaddr = priv->oldaddr;
1673                 align = ((long)oldaddr) & 3;
1674                 if (align) {
1675                         newaddr = oldaddr + 4 - align;
1676                         priv->rx_urb[16]->transfer_buffer_length = 16 - 4 + align;
1677                 } else {
1678                         newaddr = oldaddr;
1679                         priv->rx_urb[16]->transfer_buffer_length = 16;
1680                 }
1681                 priv->rx_urb[16]->transfer_buffer = newaddr;
1682         }
1683 #endif
1684
1685         memset(priv->rx_urb, 0, sizeof(struct urb *) * MAX_RX_URB);
1686         priv->pp_rxskb = kcalloc(MAX_RX_URB, sizeof(struct sk_buff *),
1687                                  GFP_KERNEL);
1688         if (!priv->pp_rxskb) {
1689                 kfree(priv->rx_urb);
1690
1691                 priv->pp_rxskb = NULL;
1692                 priv->rx_urb = NULL;
1693
1694                 DMESGE("Endpoint Alloc Failure");
1695                 return -ENOMEM;
1696         }
1697
1698         netdev_dbg(dev, "End of initendpoints\n");
1699         return 0;
1700 }
1701
1702 #ifdef THOMAS_BEACON
1703 static void rtl8192_usb_deleteendpoints(struct net_device *dev)
1704 {
1705         int i;
1706         struct r8192_priv *priv = ieee80211_priv(dev);
1707
1708         if (priv->rx_urb) {
1709                 for (i = 0; i < (MAX_RX_URB + 1); i++) {
1710                         usb_kill_urb(priv->rx_urb[i]);
1711                         usb_free_urb(priv->rx_urb[i]);
1712                 }
1713                 kfree(priv->rx_urb);
1714                 priv->rx_urb = NULL;
1715         }
1716         kfree(priv->oldaddr);
1717         priv->oldaddr = NULL;
1718
1719         kfree(priv->pp_rxskb);
1720         priv->pp_rxskb = NULL;
1721 }
1722 #else
1723 void rtl8192_usb_deleteendpoints(struct net_device *dev)
1724 {
1725         int i;
1726         struct r8192_priv *priv = ieee80211_priv(dev);
1727
1728 #ifndef JACKSON_NEW_RX
1729
1730         if (priv->rx_urb) {
1731                 for (i = 0; i < (MAX_RX_URB + 1); i++) {
1732                         usb_kill_urb(priv->rx_urb[i]);
1733                         kfree(priv->rx_urb[i]->transfer_buffer);
1734                         usb_free_urb(priv->rx_urb[i]);
1735                 }
1736                 kfree(priv->rx_urb);
1737                 priv->rx_urb = NULL;
1738         }
1739 #else
1740         kfree(priv->rx_urb);
1741         priv->rx_urb = NULL;
1742         kfree(priv->oldaddr);
1743         priv->oldaddr = NULL;
1744
1745         kfree(priv->pp_rxskb);
1746         priv->pp_rxskb = 0;
1747
1748 #endif
1749 }
1750 #endif
1751
1752 static void rtl8192_update_ratr_table(struct net_device *dev);
1753 static void rtl8192_link_change(struct net_device *dev)
1754 {
1755         struct r8192_priv *priv = ieee80211_priv(dev);
1756         struct ieee80211_device *ieee = priv->ieee80211;
1757
1758         if (ieee->state == IEEE80211_LINKED) {
1759                 rtl8192_net_update(dev);
1760                 rtl8192_update_ratr_table(dev);
1761                 /* Add this as in pure N mode, wep encryption will use software
1762                  * way, but there is no chance to set this as wep will not set
1763                  * group key in wext.
1764                  */
1765                 if (ieee->pairwise_key_type == KEY_TYPE_WEP40 ||
1766                     ieee->pairwise_key_type == KEY_TYPE_WEP104)
1767                         EnableHWSecurityConfig8192(dev);
1768         }
1769         /*update timing params*/
1770         if (ieee->iw_mode == IW_MODE_INFRA || ieee->iw_mode == IW_MODE_ADHOC) {
1771                 u32 reg = 0;
1772
1773                 read_nic_dword(dev, RCR, &reg);
1774                 if (priv->ieee80211->state == IEEE80211_LINKED)
1775                         priv->ReceiveConfig = reg |= RCR_CBSSID;
1776                 else
1777                         priv->ReceiveConfig = reg &= ~RCR_CBSSID;
1778                 write_nic_dword(dev, RCR, reg);
1779         }
1780 }
1781
1782 static const struct ieee80211_qos_parameters def_qos_parameters = {
1783         {cpu_to_le16(3), cpu_to_le16(3), cpu_to_le16(3), cpu_to_le16(3)},
1784         {cpu_to_le16(7), cpu_to_le16(7), cpu_to_le16(7), cpu_to_le16(7)},
1785         {2, 2, 2, 2},/* aifs */
1786         {0, 0, 0, 0},/* flags */
1787         {0, 0, 0, 0} /* tx_op_limit */
1788 };
1789
1790
1791 static void rtl8192_update_beacon(struct work_struct *work)
1792 {
1793         struct r8192_priv *priv = container_of(work, struct r8192_priv,
1794                                                update_beacon_wq.work);
1795         struct net_device *dev = priv->ieee80211->dev;
1796         struct ieee80211_device *ieee = priv->ieee80211;
1797         struct ieee80211_network *net = &ieee->current_network;
1798
1799         if (ieee->pHTInfo->bCurrentHTSupport)
1800                 HTUpdateSelfAndPeerSetting(ieee, net);
1801         ieee->pHTInfo->bCurrentRT2RTLongSlotTime =
1802                 net->bssht.bdRT2RTLongSlotTime;
1803         rtl8192_update_cap(dev, net->capability);
1804 }
1805
1806 /*
1807  * background support to run QoS activate functionality
1808  */
1809 static int WDCAPARA_ADD[] = {EDCAPARA_BE, EDCAPARA_BK,
1810                              EDCAPARA_VI, EDCAPARA_VO};
1811 static void rtl8192_qos_activate(struct work_struct *work)
1812 {
1813         struct r8192_priv *priv = container_of(work, struct r8192_priv,
1814                                                qos_activate);
1815         struct net_device *dev = priv->ieee80211->dev;
1816         struct ieee80211_qos_parameters *qos_parameters =
1817                 &priv->ieee80211->current_network.qos_data.parameters;
1818         u8 mode = priv->ieee80211->current_network.mode;
1819         u32  u1bAIFS;
1820         u32 u4bAcParam;
1821         u32 op_limit;
1822         u32 cw_max;
1823         u32 cw_min;
1824         int i;
1825
1826         mutex_lock(&priv->mutex);
1827         if (priv->ieee80211->state != IEEE80211_LINKED)
1828                 goto success;
1829         RT_TRACE(COMP_QOS,
1830                  "qos active process with associate response received\n");
1831         /* It better set slot time at first
1832          *
1833          * For we just support b/g mode at present, let the slot time at
1834          * 9/20 selection
1835          *
1836          * update the ac parameter to related registers
1837          */
1838         for (i = 0; i <  QOS_QUEUE_NUM; i++) {
1839                 /* Mode G/A: slotTimeTimer = 9; Mode B: 20 */
1840                 u1bAIFS = qos_parameters->aifs[i] * ((mode & (IEEE_G | IEEE_N_24G)) ? 9 : 20) + aSifsTime;
1841                 u1bAIFS <<= AC_PARAM_AIFS_OFFSET;
1842                 op_limit = (u32)le16_to_cpu(qos_parameters->tx_op_limit[i]);
1843                 op_limit <<= AC_PARAM_TXOP_LIMIT_OFFSET;
1844                 cw_max = (u32)le16_to_cpu(qos_parameters->cw_max[i]);
1845                 cw_max <<= AC_PARAM_ECW_MAX_OFFSET;
1846                 cw_min = (u32)le16_to_cpu(qos_parameters->cw_min[i]);
1847                 cw_min <<= AC_PARAM_ECW_MIN_OFFSET;
1848                 u4bAcParam = op_limit | cw_max | cw_min | u1bAIFS;
1849                 write_nic_dword(dev, WDCAPARA_ADD[i], u4bAcParam);
1850         }
1851
1852 success:
1853         mutex_unlock(&priv->mutex);
1854 }
1855
1856 static int rtl8192_qos_handle_probe_response(struct r8192_priv *priv,
1857                                              int active_network,
1858                                              struct ieee80211_network *network)
1859 {
1860         int ret = 0;
1861         u32 size = sizeof(struct ieee80211_qos_parameters);
1862
1863         if (priv->ieee80211->state != IEEE80211_LINKED)
1864                 return ret;
1865
1866         if (priv->ieee80211->iw_mode != IW_MODE_INFRA)
1867                 return ret;
1868
1869         if (network->flags & NETWORK_HAS_QOS_MASK) {
1870                 if (active_network &&
1871                     (network->flags & NETWORK_HAS_QOS_PARAMETERS))
1872                         network->qos_data.active = network->qos_data.supported;
1873
1874                 if ((network->qos_data.active == 1) && (active_network == 1) &&
1875                     (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
1876                     (network->qos_data.old_param_count !=
1877                      network->qos_data.param_count)) {
1878                         network->qos_data.old_param_count =
1879                                 network->qos_data.param_count;
1880                         schedule_work(&priv->qos_activate);
1881                         RT_TRACE(COMP_QOS,
1882                                  "QoS parameters change call qos_activate\n");
1883                 }
1884         } else {
1885                 memcpy(&priv->ieee80211->current_network.qos_data.parameters,
1886                        &def_qos_parameters, size);
1887
1888                 if ((network->qos_data.active == 1) && (active_network == 1)) {
1889                         schedule_work(&priv->qos_activate);
1890                         RT_TRACE(COMP_QOS,
1891                                  "QoS was disabled call qos_activate\n");
1892                 }
1893                 network->qos_data.active = 0;
1894                 network->qos_data.supported = 0;
1895         }
1896
1897         return 0;
1898 }
1899
1900 /* handle and manage frame from beacon and probe response */
1901 static int rtl8192_handle_beacon(struct net_device *dev,
1902                                  struct ieee80211_beacon *beacon,
1903                                  struct ieee80211_network *network)
1904 {
1905         struct r8192_priv *priv = ieee80211_priv(dev);
1906
1907         rtl8192_qos_handle_probe_response(priv, 1, network);
1908         schedule_delayed_work(&priv->update_beacon_wq, 0);
1909         return 0;
1910 }
1911
1912 /*
1913  * handling the beaconing responses. if we get different QoS setting
1914  * off the network from the associated setting, adjust the QoS
1915  * setting
1916  */
1917 static int rtl8192_qos_association_resp(struct r8192_priv *priv,
1918                                         struct ieee80211_network *network)
1919 {
1920         unsigned long flags;
1921         u32 size = sizeof(struct ieee80211_qos_parameters);
1922         int set_qos_param = 0;
1923
1924         if (!priv || !network)
1925                 return 0;
1926
1927         if (priv->ieee80211->state != IEEE80211_LINKED)
1928                 return 0;
1929
1930         if (priv->ieee80211->iw_mode != IW_MODE_INFRA)
1931                 return 0;
1932
1933         spin_lock_irqsave(&priv->ieee80211->lock, flags);
1934         if (network->flags & NETWORK_HAS_QOS_PARAMETERS) {
1935                 memcpy(&priv->ieee80211->current_network.qos_data.parameters,
1936                        &network->qos_data.parameters,
1937                        sizeof(struct ieee80211_qos_parameters));
1938                 priv->ieee80211->current_network.qos_data.active = 1;
1939                 set_qos_param = 1;
1940                 /* update qos parameter for current network */
1941                 priv->ieee80211->current_network.qos_data.old_param_count =
1942                         priv->ieee80211->current_network.qos_data.param_count;
1943                 priv->ieee80211->current_network.qos_data.param_count =
1944                         network->qos_data.param_count;
1945         } else {
1946                 memcpy(&priv->ieee80211->current_network.qos_data.parameters,
1947                        &def_qos_parameters, size);
1948                 priv->ieee80211->current_network.qos_data.active = 0;
1949                 priv->ieee80211->current_network.qos_data.supported = 0;
1950                 set_qos_param = 1;
1951         }
1952
1953         spin_unlock_irqrestore(&priv->ieee80211->lock, flags);
1954
1955         RT_TRACE(COMP_QOS, "%s: network->flags = %d,%d\n", __func__,
1956                  network->flags,
1957                  priv->ieee80211->current_network.qos_data.active);
1958         if (set_qos_param == 1)
1959                 schedule_work(&priv->qos_activate);
1960
1961
1962         return 0;
1963 }
1964
1965
1966 static int rtl8192_handle_assoc_response(
1967                 struct net_device *dev,
1968                 struct ieee80211_assoc_response_frame *resp,
1969                 struct ieee80211_network *network)
1970 {
1971         struct r8192_priv *priv = ieee80211_priv(dev);
1972
1973         rtl8192_qos_association_resp(priv, network);
1974         return 0;
1975 }
1976
1977
1978 static void rtl8192_update_ratr_table(struct net_device *dev)
1979 {
1980         struct r8192_priv *priv = ieee80211_priv(dev);
1981         struct ieee80211_device *ieee = priv->ieee80211;
1982         u8 *pMcsRate = ieee->dot11HTOperationalRateSet;
1983         u32 ratr_value = 0;
1984         u8 rate_index = 0;
1985
1986         rtl8192_config_rate(dev, (u16 *)(&ratr_value));
1987         ratr_value |= (*(u16 *)(pMcsRate)) << 12;
1988         switch (ieee->mode) {
1989         case IEEE_A:
1990                 ratr_value &= 0x00000FF0;
1991                 break;
1992         case IEEE_B:
1993                 ratr_value &= 0x0000000F;
1994                 break;
1995         case IEEE_G:
1996                 ratr_value &= 0x00000FF7;
1997                 break;
1998         case IEEE_N_24G:
1999         case IEEE_N_5G:
2000                 if (ieee->pHTInfo->PeerMimoPs == 0) { /* MIMO_PS_STATIC */
2001                         ratr_value &= 0x0007F007;
2002                 } else {
2003                         if (priv->rf_type == RF_1T2R)
2004                                 ratr_value &= 0x000FF007;
2005                         else
2006                                 ratr_value &= 0x0F81F007;
2007                 }
2008                 break;
2009         default:
2010                 break;
2011         }
2012         ratr_value &= 0x0FFFFFFF;
2013         if (ieee->pHTInfo->bCurTxBW40MHz && ieee->pHTInfo->bCurShortGI40MHz)
2014                 ratr_value |= 0x80000000;
2015         else if (!ieee->pHTInfo->bCurTxBW40MHz &&
2016                  ieee->pHTInfo->bCurShortGI20MHz)
2017                 ratr_value |= 0x80000000;
2018         write_nic_dword(dev, RATR0 + rate_index * 4, ratr_value);
2019         write_nic_byte(dev, UFWP, 1);
2020 }
2021
2022 static u8 ccmp_ie[4] = {0x00, 0x50, 0xf2, 0x04};
2023 static u8 ccmp_rsn_ie[4] = {0x00, 0x0f, 0xac, 0x04};
2024 static bool GetNmodeSupportBySecCfg8192(struct net_device *dev)
2025 {
2026         struct r8192_priv *priv = ieee80211_priv(dev);
2027         struct ieee80211_device *ieee = priv->ieee80211;
2028         struct ieee80211_network *network = &ieee->current_network;
2029         int wpa_ie_len = ieee->wpa_ie_len;
2030         struct ieee80211_crypt_data *crypt;
2031         int encrypt;
2032
2033         crypt = ieee->crypt[ieee->tx_keyidx];
2034         /* we use connecting AP's capability instead of only security config
2035          * on our driver to distinguish whether it should use N mode or G mode
2036          */
2037         encrypt = (network->capability & WLAN_CAPABILITY_PRIVACY) ||
2038                   (ieee->host_encrypt && crypt && crypt->ops &&
2039                    (strcmp(crypt->ops->name, "WEP") == 0));
2040
2041         /* simply judge  */
2042         if (encrypt && (wpa_ie_len == 0)) {
2043                 /* wep encryption, no N mode setting */
2044                 return false;
2045         } else if ((wpa_ie_len != 0)) {
2046                 /* parse pairwise key type */
2047                 if (((ieee->wpa_ie[0] == 0xdd) && (!memcmp(&(ieee->wpa_ie[14]), ccmp_ie, 4))) || ((ieee->wpa_ie[0] == 0x30) && (!memcmp(&ieee->wpa_ie[10], ccmp_rsn_ie, 4))))
2048                         return true;
2049                 else
2050                         return false;
2051         } else {
2052                 return true;
2053         }
2054
2055         return true;
2056 }
2057
2058 static bool GetHalfNmodeSupportByAPs819xUsb(struct net_device *dev)
2059 {
2060         struct r8192_priv *priv = ieee80211_priv(dev);
2061
2062         return priv->ieee80211->bHalfWirelessN24GMode;
2063 }
2064
2065 static void rtl8192_refresh_supportrate(struct r8192_priv *priv)
2066 {
2067         struct ieee80211_device *ieee = priv->ieee80211;
2068         /* We do not consider set support rate for ABG mode, only
2069          * HT MCS rate is set here.
2070          */
2071         if (ieee->mode == WIRELESS_MODE_N_24G ||
2072             ieee->mode == WIRELESS_MODE_N_5G)
2073                 memcpy(ieee->Regdot11HTOperationalRateSet,
2074                        ieee->RegHTSuppRateSet, 16);
2075         else
2076                 memset(ieee->Regdot11HTOperationalRateSet, 0, 16);
2077 }
2078
2079 static u8 rtl8192_getSupportedWireleeMode(struct net_device *dev)
2080 {
2081         struct r8192_priv *priv = ieee80211_priv(dev);
2082         u8 ret = 0;
2083
2084         switch (priv->rf_chip) {
2085         case RF_8225:
2086         case RF_8256:
2087         case RF_PSEUDO_11N:
2088                 ret = WIRELESS_MODE_N_24G | WIRELESS_MODE_G | WIRELESS_MODE_B;
2089                 break;
2090         case RF_8258:
2091                 ret = WIRELESS_MODE_A | WIRELESS_MODE_N_5G;
2092                 break;
2093         default:
2094                 ret = WIRELESS_MODE_B;
2095                 break;
2096         }
2097         return ret;
2098 }
2099
2100 static void rtl8192_SetWirelessMode(struct net_device *dev, u8 wireless_mode)
2101 {
2102         struct r8192_priv *priv = ieee80211_priv(dev);
2103         u8 bSupportMode = rtl8192_getSupportedWireleeMode(dev);
2104
2105         if (wireless_mode == WIRELESS_MODE_AUTO ||
2106             (wireless_mode & bSupportMode) == 0) {
2107                 if (bSupportMode & WIRELESS_MODE_N_24G) {
2108                         wireless_mode = WIRELESS_MODE_N_24G;
2109                 } else if (bSupportMode & WIRELESS_MODE_N_5G) {
2110                         wireless_mode = WIRELESS_MODE_N_5G;
2111                 } else if ((bSupportMode & WIRELESS_MODE_A)) {
2112                         wireless_mode = WIRELESS_MODE_A;
2113                 } else if ((bSupportMode & WIRELESS_MODE_G)) {
2114                         wireless_mode = WIRELESS_MODE_G;
2115                 } else if ((bSupportMode & WIRELESS_MODE_B)) {
2116                         wireless_mode = WIRELESS_MODE_B;
2117                 } else {
2118                         RT_TRACE(COMP_ERR,
2119                                  "%s(), No valid wireless mode supported, SupportedWirelessMode(%x)!!!\n",
2120                                  __func__, bSupportMode);
2121                         wireless_mode = WIRELESS_MODE_B;
2122                 }
2123         }
2124 #ifdef TO_DO_LIST
2125         /* TODO: this function doesn't work well at this time,
2126          * we should wait for FPGA
2127          */
2128         ActUpdateChannelAccessSetting(
2129                         pAdapter, pHalData->CurrentWirelessMode,
2130                         &pAdapter->MgntInfo.Info8185.ChannelAccessSetting);
2131 #endif
2132         priv->ieee80211->mode = wireless_mode;
2133
2134         if (wireless_mode == WIRELESS_MODE_N_24G ||
2135             wireless_mode == WIRELESS_MODE_N_5G)
2136                 priv->ieee80211->pHTInfo->bEnableHT = 1;
2137         else
2138                 priv->ieee80211->pHTInfo->bEnableHT = 0;
2139         RT_TRACE(COMP_INIT, "Current Wireless Mode is %x\n", wireless_mode);
2140         rtl8192_refresh_supportrate(priv);
2141 }
2142
2143 /* init priv variables here. only non_zero value should be initialized here. */
2144 static void rtl8192_init_priv_variable(struct net_device *dev)
2145 {
2146         struct r8192_priv *priv = ieee80211_priv(dev);
2147         u8 i;
2148
2149         priv->card_8192 = NIC_8192U;
2150         priv->chan = 1; /* set to channel 1 */
2151         priv->ieee80211->mode = WIRELESS_MODE_AUTO; /* SET AUTO */
2152         priv->ieee80211->iw_mode = IW_MODE_INFRA;
2153         priv->ieee80211->ieee_up = 0;
2154         priv->retry_rts = DEFAULT_RETRY_RTS;
2155         priv->retry_data = DEFAULT_RETRY_DATA;
2156         priv->ieee80211->rts = DEFAULT_RTS_THRESHOLD;
2157         priv->ieee80211->rate = 110; /* 11 mbps */
2158         priv->ieee80211->short_slot = 1;
2159         priv->promisc = (dev->flags & IFF_PROMISC) ? 1 : 0;
2160         priv->CckPwEnl = 6;
2161         /* for silent reset */
2162         priv->IrpPendingCount = 1;
2163         priv->ResetProgress = RESET_TYPE_NORESET;
2164         priv->bForcedSilentReset = false;
2165         priv->bDisableNormalResetCheck = false;
2166         priv->force_reset = false;
2167
2168         /* we don't use FW read/write RF until stable firmware is available. */
2169         priv->ieee80211->FwRWRF = 0;
2170         priv->ieee80211->current_network.beacon_interval =
2171                 DEFAULT_BEACONINTERVAL;
2172         priv->ieee80211->softmac_features  = IEEE_SOFTMAC_SCAN |
2173                 IEEE_SOFTMAC_ASSOCIATE | IEEE_SOFTMAC_PROBERQ |
2174                 IEEE_SOFTMAC_PROBERS | IEEE_SOFTMAC_TX_QUEUE |
2175                 IEEE_SOFTMAC_BEACONS;
2176
2177         priv->ieee80211->active_scan = 1;
2178         priv->ieee80211->modulation =
2179                 IEEE80211_CCK_MODULATION | IEEE80211_OFDM_MODULATION;
2180         priv->ieee80211->host_encrypt = 1;
2181         priv->ieee80211->host_decrypt = 1;
2182         priv->ieee80211->start_send_beacons = NULL;
2183         priv->ieee80211->stop_send_beacons = NULL;
2184         priv->ieee80211->softmac_hard_start_xmit = rtl8192_hard_start_xmit;
2185         priv->ieee80211->set_chan = rtl8192_set_chan;
2186         priv->ieee80211->link_change = rtl8192_link_change;
2187         priv->ieee80211->softmac_data_hard_start_xmit = rtl8192_hard_data_xmit;
2188         priv->ieee80211->data_hard_stop = rtl8192_data_hard_stop;
2189         priv->ieee80211->data_hard_resume = rtl8192_data_hard_resume;
2190         priv->ieee80211->init_wmmparam_flag = 0;
2191         priv->ieee80211->fts = DEFAULT_FRAG_THRESHOLD;
2192         priv->ieee80211->check_nic_enough_desc = check_nic_enough_desc;
2193         priv->ieee80211->tx_headroom = TX_PACKET_SHIFT_BYTES;
2194         priv->ieee80211->qos_support = 1;
2195
2196         priv->ieee80211->SetBWModeHandler = rtl8192_SetBWMode;
2197         priv->ieee80211->handle_assoc_response = rtl8192_handle_assoc_response;
2198         priv->ieee80211->handle_beacon = rtl8192_handle_beacon;
2199
2200         priv->ieee80211->GetNmodeSupportBySecCfg = GetNmodeSupportBySecCfg8192;
2201         priv->ieee80211->GetHalfNmodeSupportByAPsHandler =
2202                 GetHalfNmodeSupportByAPs819xUsb;
2203         priv->ieee80211->SetWirelessMode = rtl8192_SetWirelessMode;
2204
2205         priv->ieee80211->InitialGainHandler = InitialGain819xUsb;
2206         priv->card_type = USB;
2207 #ifdef TO_DO_LIST
2208         if (Adapter->bInHctTest) {
2209                 pHalData->ShortRetryLimit = 7;
2210                 pHalData->LongRetryLimit = 7;
2211         }
2212 #endif
2213         priv->ShortRetryLimit = 0x30;
2214         priv->LongRetryLimit = 0x30;
2215         priv->EarlyRxThreshold = 7;
2216         priv->enable_gpio0 = 0;
2217         priv->TransmitConfig =
2218                 /* Max DMA Burst Size per Tx DMA Burst, 7: reserved. */
2219                 (TCR_MXDMA_2048 << TCR_MXDMA_OFFSET)      |
2220                 /* Short retry limit */
2221                 (priv->ShortRetryLimit << TCR_SRL_OFFSET) |
2222                 /* Long retry limit */
2223                 (priv->LongRetryLimit << TCR_LRL_OFFSET)  |
2224                 /* FALSE: HW provides PLCP length and LENGEXT
2225                  * TRUE: SW provides them
2226                  */
2227                 (false ? TCR_SAT : 0);
2228 #ifdef TO_DO_LIST
2229         if (Adapter->bInHctTest)
2230                 pHalData->ReceiveConfig =
2231                         pHalData->CSMethod |
2232                         /* accept management/data */
2233                         RCR_AMF | RCR_ADF |
2234                         /* accept control frame for SW
2235                          * AP needs PS-poll
2236                          */
2237                         RCR_ACF |
2238                         /* accept BC/MC/UC */
2239                         RCR_AB | RCR_AM | RCR_APM |
2240                         /* accept ICV/CRC error
2241                          * packet
2242                          */
2243                         RCR_AICV | RCR_ACRC32 |
2244                         /* Max DMA Burst Size per Tx
2245                          * DMA Burst, 7: unlimited.
2246                          */
2247                         ((u32)7 << RCR_MXDMA_OFFSET) |
2248                         /* Rx FIFO Threshold,
2249                          * 7: No Rx threshold.
2250                          */
2251                         (pHalData->EarlyRxThreshold << RCR_FIFO_OFFSET) |
2252                         (pHalData->EarlyRxThreshold == 7 ? RCR_OnlyErlPkt : 0);
2253         else
2254
2255 #endif
2256         priv->ReceiveConfig     =
2257                 /* accept management/data */
2258                 RCR_AMF | RCR_ADF |
2259                 /* accept control frame for SW AP needs PS-poll */
2260                 RCR_ACF |
2261                 /* accept BC/MC/UC */
2262                 RCR_AB | RCR_AM | RCR_APM |
2263                 /* Max DMA Burst Size per Rx DMA Burst, 7: unlimited. */
2264                 ((u32)7 << RCR_MXDMA_OFFSET) |
2265                 /* Rx FIFO Threshold, 7: No Rx threshold. */
2266                 (priv->EarlyRxThreshold << RX_FIFO_THRESHOLD_SHIFT) |
2267                 (priv->EarlyRxThreshold == 7 ? RCR_ONLYERLPKT : 0);
2268
2269         priv->AcmControl = 0;
2270         priv->pFirmware = kzalloc(sizeof(rt_firmware), GFP_KERNEL);
2271
2272         /* rx related queue */
2273         skb_queue_head_init(&priv->rx_queue);
2274         skb_queue_head_init(&priv->skb_queue);
2275
2276         /* Tx related queue */
2277         for (i = 0; i < MAX_QUEUE_SIZE; i++)
2278                 skb_queue_head_init(&priv->ieee80211->skb_waitQ[i]);
2279         for (i = 0; i < MAX_QUEUE_SIZE; i++)
2280                 skb_queue_head_init(&priv->ieee80211->skb_aggQ[i]);
2281         for (i = 0; i < MAX_QUEUE_SIZE; i++)
2282                 skb_queue_head_init(&priv->ieee80211->skb_drv_aggQ[i]);
2283         priv->rf_set_chan = rtl8192_phy_SwChnl;
2284 }
2285
2286 /* init lock here */
2287 static void rtl8192_init_priv_lock(struct r8192_priv *priv)
2288 {
2289         spin_lock_init(&priv->tx_lock);
2290         spin_lock_init(&priv->irq_lock);
2291         mutex_init(&priv->wx_mutex);
2292         mutex_init(&priv->mutex);
2293 }
2294
2295 static void rtl819x_watchdog_wqcallback(struct work_struct *work);
2296
2297 static void rtl8192_irq_rx_tasklet(struct r8192_priv *priv);
2298 /* init tasklet and wait_queue here. only 2.6 above kernel is considered */
2299 #define DRV_NAME "wlan0"
2300 static void rtl8192_init_priv_task(struct net_device *dev)
2301 {
2302         struct r8192_priv *priv = ieee80211_priv(dev);
2303
2304
2305         INIT_WORK(&priv->reset_wq, rtl8192_restart);
2306
2307         INIT_DELAYED_WORK(&priv->watch_dog_wq,
2308                           rtl819x_watchdog_wqcallback);
2309         INIT_DELAYED_WORK(&priv->txpower_tracking_wq,
2310                           dm_txpower_trackingcallback);
2311         INIT_DELAYED_WORK(&priv->rfpath_check_wq,
2312                           dm_rf_pathcheck_workitemcallback);
2313         INIT_DELAYED_WORK(&priv->update_beacon_wq,
2314                           rtl8192_update_beacon);
2315         INIT_DELAYED_WORK(&priv->initialgain_operate_wq,
2316                           InitialGainOperateWorkItemCallBack);
2317         INIT_WORK(&priv->qos_activate, rtl8192_qos_activate);
2318
2319         tasklet_init(&priv->irq_rx_tasklet,
2320                      (void(*)(unsigned long))rtl8192_irq_rx_tasklet,
2321                      (unsigned long)priv);
2322 }
2323
2324 static void rtl8192_get_eeprom_size(struct net_device *dev)
2325 {
2326         u16 curCR = 0;
2327         struct r8192_priv *priv = ieee80211_priv(dev);
2328
2329         RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
2330         read_nic_word_E(dev, EPROM_CMD, &curCR);
2331         RT_TRACE(COMP_EPROM,
2332                  "read from Reg EPROM_CMD(%x):%x\n", EPROM_CMD, curCR);
2333         /* whether need I consider BIT(5?) */
2334         priv->epromtype =
2335                 (curCR & Cmd9346CR_9356SEL) ? EPROM_93c56 : EPROM_93c46;
2336         RT_TRACE(COMP_EPROM,
2337                  "<===========%s(), epromtype:%d\n", __func__, priv->epromtype);
2338 }
2339
2340 /* used to swap endian. as ntohl & htonl are not necessary
2341  * to swap endian, so use this instead.
2342  */
2343 static inline u16 endian_swap(u16 *data)
2344 {
2345         u16 tmp = *data;
2346         *data = (tmp >> 8) | (tmp << 8);
2347         return *data;
2348 }
2349
2350 static int rtl8192_read_eeprom_info(struct net_device *dev)
2351 {
2352         u16 wEPROM_ID = 0;
2353         u8 bMac_Tmp_Addr[6] = {0x00, 0xe0, 0x4c, 0x00, 0x00, 0x02};
2354         u8 bLoad_From_EEPOM = false;
2355         struct r8192_priv *priv = ieee80211_priv(dev);
2356         u16 tmpValue = 0;
2357         int i;
2358         int ret;
2359
2360         RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
2361         ret = eprom_read(dev, 0); /* first read EEPROM ID out; */
2362         if (ret < 0)
2363                 return ret;
2364         wEPROM_ID = (u16)ret;
2365         RT_TRACE(COMP_EPROM, "EEPROM ID is 0x%x\n", wEPROM_ID);
2366
2367         if (wEPROM_ID != RTL8190_EEPROM_ID)
2368                 RT_TRACE(COMP_ERR,
2369                          "EEPROM ID is invalid(is 0x%x(should be 0x%x)\n",
2370                          wEPROM_ID, RTL8190_EEPROM_ID);
2371         else
2372                 bLoad_From_EEPOM = true;
2373
2374         if (bLoad_From_EEPOM) {
2375                 tmpValue = eprom_read(dev, EEPROM_VID >> 1);
2376                 ret = eprom_read(dev, EEPROM_VID >> 1);
2377                 if (ret < 0)
2378                         return ret;
2379                 tmpValue = (u16)ret;
2380                 priv->eeprom_vid = endian_swap(&tmpValue);
2381                 ret = eprom_read(dev, EEPROM_PID >> 1);
2382                 if (ret < 0)
2383                         return ret;
2384                 priv->eeprom_pid = (u16)ret;
2385                 ret = eprom_read(dev, EEPROM_ChannelPlan >> 1);
2386                 if (ret < 0)
2387                         return ret;
2388                 tmpValue = (u16)ret;
2389                 priv->eeprom_ChannelPlan = (tmpValue & 0xff00) >> 8;
2390                 priv->btxpowerdata_readfromEEPORM = true;
2391                 ret = eprom_read(dev, (EEPROM_Customer_ID >> 1)) >> 8;
2392                 if (ret < 0)
2393                         return ret;
2394                 priv->eeprom_CustomerID = (u16)ret;
2395         } else {
2396                 priv->eeprom_vid = 0;
2397                 priv->eeprom_pid = 0;
2398                 priv->card_8192_version = VERSION_819xU_B;
2399                 priv->eeprom_ChannelPlan = 0;
2400                 priv->eeprom_CustomerID = 0;
2401         }
2402         RT_TRACE(COMP_EPROM,
2403                  "vid:0x%4x, pid:0x%4x, CustomID:0x%2x, ChanPlan:0x%x\n",
2404                  priv->eeprom_vid, priv->eeprom_pid, priv->eeprom_CustomerID,
2405                  priv->eeprom_ChannelPlan);
2406         /* set channelplan from eeprom */
2407         priv->ChannelPlan = priv->eeprom_ChannelPlan;
2408         if (bLoad_From_EEPOM) {
2409                 int i;
2410
2411                 for (i = 0; i < 6; i += 2) {
2412                         ret = eprom_read(dev, (u16)((EEPROM_NODE_ADDRESS_BYTE_0 + i) >> 1));
2413                         if (ret < 0)
2414                                 return ret;
2415                         *(u16 *)(&dev->dev_addr[i]) = (u16)ret;
2416                 }
2417         } else {
2418                 memcpy(dev->dev_addr, bMac_Tmp_Addr, 6);
2419                 /* should I set IDR0 here? */
2420         }
2421         RT_TRACE(COMP_EPROM, "MAC addr:%pM\n", dev->dev_addr);
2422         priv->rf_type = RTL819X_DEFAULT_RF_TYPE; /* default 1T2R */
2423         priv->rf_chip = RF_8256;
2424
2425         if (priv->card_8192_version == (u8)VERSION_819xU_A) {
2426                 /* read Tx power gain offset of legacy OFDM to HT rate */
2427                 if (bLoad_From_EEPOM) {
2428                         ret = eprom_read(dev, (EEPROM_TxPowerDiff >> 1));
2429                         if (ret < 0)
2430                                 return ret;
2431                         priv->EEPROMTxPowerDiff = ((u16)ret & 0xff00) >> 8;
2432                 } else
2433                         priv->EEPROMTxPowerDiff = EEPROM_Default_TxPower;
2434                 RT_TRACE(COMP_EPROM, "TxPowerDiff:%d\n", priv->EEPROMTxPowerDiff);
2435                 /* read ThermalMeter from EEPROM */
2436                 if (bLoad_From_EEPOM) {
2437                         ret = eprom_read(dev, (EEPROM_ThermalMeter >> 1));
2438                         if (ret < 0)
2439                                 return ret;
2440                         priv->EEPROMThermalMeter = (u8)((u16)ret & 0x00ff);
2441                 } else
2442                         priv->EEPROMThermalMeter = EEPROM_Default_ThermalMeter;
2443                 RT_TRACE(COMP_EPROM, "ThermalMeter:%d\n", priv->EEPROMThermalMeter);
2444                 /* for tx power track */
2445                 priv->TSSI_13dBm = priv->EEPROMThermalMeter * 100;
2446                 /* read antenna tx power offset of B/C/D to A from EEPROM */
2447                 if (bLoad_From_EEPOM) {
2448                         ret = eprom_read(dev, (EEPROM_PwDiff >> 1));
2449                         if (ret < 0)
2450                                 return ret;
2451                         priv->EEPROMPwDiff = ((u16)ret & 0x0f00) >> 8;
2452                 } else
2453                         priv->EEPROMPwDiff = EEPROM_Default_PwDiff;
2454                 RT_TRACE(COMP_EPROM, "TxPwDiff:%d\n", priv->EEPROMPwDiff);
2455                 /* Read CrystalCap from EEPROM */
2456                 if (bLoad_From_EEPOM) {
2457                         ret = eprom_read(dev, (EEPROM_CrystalCap >> 1));
2458                         if (ret < 0)
2459                                 return ret;
2460                         priv->EEPROMCrystalCap = (u16)ret & 0x0f;
2461                 } else
2462                         priv->EEPROMCrystalCap = EEPROM_Default_CrystalCap;
2463                 RT_TRACE(COMP_EPROM, "CrystalCap = %d\n", priv->EEPROMCrystalCap);
2464                 /* get per-channel Tx power level */
2465                 if (bLoad_From_EEPOM) {
2466                         ret = eprom_read(dev, (EEPROM_TxPwIndex_Ver >> 1));
2467                         if (ret < 0)
2468                                 return ret;
2469                         priv->EEPROM_Def_Ver = ((u16)ret & 0xff00) >> 8;
2470                 } else
2471                         priv->EEPROM_Def_Ver = 1;
2472                 RT_TRACE(COMP_EPROM, "EEPROM_DEF_VER:%d\n", priv->EEPROM_Def_Ver);
2473                 if (priv->EEPROM_Def_Ver == 0) { /* old eeprom definition */
2474                         int i;
2475
2476                         if (bLoad_From_EEPOM) {
2477                                 ret = eprom_read(dev, (EEPROM_TxPwIndex_CCK >> 1));
2478                                 if (ret < 0)
2479                                         return ret;
2480                                 priv->EEPROMTxPowerLevelCCK = ((u16)ret & 0xff) >> 8;
2481                         } else
2482                                 priv->EEPROMTxPowerLevelCCK = 0x10;
2483                         RT_TRACE(COMP_EPROM, "CCK Tx Power Levl: 0x%02x\n", priv->EEPROMTxPowerLevelCCK);
2484                         for (i = 0; i < 3; i++) {
2485                                 if (bLoad_From_EEPOM) {
2486                                         ret = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G + i) >> 1);
2487                                         if (ret < 0)
2488                                                 return ret;
2489                                         if (((EEPROM_TxPwIndex_OFDM_24G + i) % 2) == 0)
2490                                                 tmpValue = (u16)ret & 0x00ff;
2491                                         else
2492                                                 tmpValue = ((u16)ret & 0xff00) >> 8;
2493                                 } else {
2494                                         tmpValue = 0x10;
2495                                 }
2496                                 priv->EEPROMTxPowerLevelOFDM24G[i] = (u8)tmpValue;
2497                                 RT_TRACE(COMP_EPROM, "OFDM 2.4G Tx Power Level, Index %d = 0x%02x\n", i, priv->EEPROMTxPowerLevelCCK);
2498                         }
2499                 } else if (priv->EEPROM_Def_Ver == 1) {
2500                         if (bLoad_From_EEPOM) {
2501                                 ret = eprom_read(dev, EEPROM_TxPwIndex_CCK_V1 >> 1);
2502                                 if (ret < 0)
2503                                         return ret;
2504                                 tmpValue = ((u16)ret & 0xff00) >> 8;
2505                         } else {
2506                                 tmpValue = 0x10;
2507                         }
2508                         priv->EEPROMTxPowerLevelCCK_V1[0] = (u8)tmpValue;
2509
2510                         if (bLoad_From_EEPOM) {
2511                                 ret = eprom_read(dev, (EEPROM_TxPwIndex_CCK_V1 + 2) >> 1);
2512                                 if (ret < 0)
2513                                         return ret;
2514                                 tmpValue = (u16)ret;
2515                         } else
2516                                 tmpValue = 0x1010;
2517                         *((u16 *)(&priv->EEPROMTxPowerLevelCCK_V1[1])) = tmpValue;
2518                         if (bLoad_From_EEPOM)
2519                                 tmpValue = eprom_read(dev,
2520                                         EEPROM_TxPwIndex_OFDM_24G_V1 >> 1);
2521                         else
2522                                 tmpValue = 0x1010;
2523                         *((u16 *)(&priv->EEPROMTxPowerLevelOFDM24G[0])) = tmpValue;
2524                         if (bLoad_From_EEPOM)
2525                                 tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G_V1 + 2) >> 1);
2526                         else
2527                                 tmpValue = 0x10;
2528                         priv->EEPROMTxPowerLevelOFDM24G[2] = (u8)tmpValue;
2529                 } /* endif EEPROM_Def_Ver == 1 */
2530
2531                 /* update HAL variables */
2532                 for (i = 0; i < 14; i++) {
2533                         if (i <= 3)
2534                                 priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[0];
2535                         else if (i >= 4 && i <= 9)
2536                                 priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[1];
2537                         else
2538                                 priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[2];
2539                 }
2540
2541                 for (i = 0; i < 14; i++) {
2542                         if (priv->EEPROM_Def_Ver == 0) {
2543                                 if (i <= 3)
2544                                         priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[0] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
2545                                 else if (i >= 4 && i <= 9)
2546                                         priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK;
2547                                 else
2548                                         priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[2] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
2549                         } else if (priv->EEPROM_Def_Ver == 1) {
2550                                 if (i <= 3)
2551                                         priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[0];
2552                                 else if (i >= 4 && i <= 9)
2553                                         priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[1];
2554                                 else
2555                                         priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[2];
2556                         }
2557                 }
2558                 priv->TxPowerDiff = priv->EEPROMPwDiff;
2559                 /* Antenna B gain offset to antenna A, bit0~3 */
2560                 priv->AntennaTxPwDiff[0] = (priv->EEPROMTxPowerDiff & 0xf);
2561                 /* Antenna C gain offset to antenna A, bit4~7 */
2562                 priv->AntennaTxPwDiff[1] =
2563                         (priv->EEPROMTxPowerDiff & 0xf0) >> 4;
2564                 /* CrystalCap, bit12~15 */
2565                 priv->CrystalCap = priv->EEPROMCrystalCap;
2566                 /* ThermalMeter, bit0~3 for RFIC1, bit4~7 for RFIC2
2567                  * 92U does not enable TX power tracking.
2568                  */
2569                 priv->ThermalMeter[0] = priv->EEPROMThermalMeter;
2570         } /* end if VersionID == VERSION_819xU_A */
2571
2572         /* for dlink led */
2573         switch (priv->eeprom_CustomerID) {
2574         case EEPROM_CID_RUNTOP:
2575                 priv->CustomerID = RT_CID_819x_RUNTOP;
2576                 break;
2577
2578         case EEPROM_CID_DLINK:
2579                 priv->CustomerID = RT_CID_DLINK;
2580                 break;
2581
2582         default:
2583                 priv->CustomerID = RT_CID_DEFAULT;
2584                 break;
2585         }
2586
2587         switch (priv->CustomerID) {
2588         case RT_CID_819x_RUNTOP:
2589                 priv->LedStrategy = SW_LED_MODE2;
2590                 break;
2591
2592         case RT_CID_DLINK:
2593                 priv->LedStrategy = SW_LED_MODE4;
2594                 break;
2595
2596         default:
2597                 priv->LedStrategy = SW_LED_MODE0;
2598                 break;
2599         }
2600
2601
2602         if (priv->rf_type == RF_1T2R)
2603                 RT_TRACE(COMP_EPROM, "\n1T2R config\n");
2604         else
2605                 RT_TRACE(COMP_EPROM, "\n2T4R config\n");
2606
2607         /* We can only know RF type in the function. So we have to init
2608          * DIG RATR table again.
2609          */
2610         init_rate_adaptive(dev);
2611
2612         RT_TRACE(COMP_EPROM, "<===========%s()\n", __func__);
2613
2614         return 0;
2615 }
2616
2617 static short rtl8192_get_channel_map(struct net_device *dev)
2618 {
2619         struct r8192_priv *priv = ieee80211_priv(dev);
2620
2621         if (priv->ChannelPlan > COUNTRY_CODE_GLOBAL_DOMAIN) {
2622                 netdev_err(dev,
2623                            "rtl8180_init: Error channel plan! Set to default.\n");
2624                 priv->ChannelPlan = 0;
2625         }
2626         RT_TRACE(COMP_INIT, "Channel plan is %d\n", priv->ChannelPlan);
2627
2628         rtl819x_set_channel_map(priv->ChannelPlan, priv);
2629         return 0;
2630 }
2631
2632 static short rtl8192_init(struct net_device *dev)
2633 {
2634         struct r8192_priv *priv = ieee80211_priv(dev);
2635         int err;
2636
2637         memset(&(priv->stats), 0, sizeof(struct Stats));
2638         memset(priv->txqueue_to_outpipemap, 0, 9);
2639 #ifdef PIPE12
2640         {
2641                 int i = 0;
2642                 u8 queuetopipe[] = {3, 2, 1, 0, 4, 8, 7, 6, 5};
2643
2644                 memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
2645         }
2646 #else
2647         {
2648                 u8 queuetopipe[] = {3, 2, 1, 0, 4, 4, 0, 4, 4};
2649
2650                 memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
2651         }
2652 #endif
2653         rtl8192_init_priv_variable(dev);
2654         rtl8192_init_priv_lock(priv);
2655         rtl8192_init_priv_task(dev);
2656         rtl8192_get_eeprom_size(dev);
2657         err = rtl8192_read_eeprom_info(dev);
2658         if (err) {
2659                 DMESG("Reading EEPROM info failed");
2660                 return err;
2661         }
2662         rtl8192_get_channel_map(dev);
2663         init_hal_dm(dev);
2664         timer_setup(&priv->watch_dog_timer, watch_dog_timer_callback, 0);
2665         if (rtl8192_usb_initendpoints(dev) != 0) {
2666                 DMESG("Endopoints initialization failed");
2667                 return -ENOMEM;
2668         }
2669
2670         return 0;
2671 }
2672
2673 /******************************************************************************
2674  *function:  This function actually only set RRSR, RATR and BW_OPMODE registers
2675  *           not to do all the hw config as its name says
2676  *   input:  net_device dev
2677  *  output:  none
2678  *  return:  none
2679  *  notice:  This part need to modified according to the rate set we filtered
2680  * ****************************************************************************/
2681 static void rtl8192_hwconfig(struct net_device *dev)
2682 {
2683         u32 regRATR = 0, regRRSR = 0;
2684         u8 regBwOpMode = 0, regTmp = 0;
2685         struct r8192_priv *priv = ieee80211_priv(dev);
2686         u32 ratr_value = 0;
2687
2688         /* Set RRSR, RATR, and BW_OPMODE registers */
2689         switch (priv->ieee80211->mode) {
2690         case WIRELESS_MODE_B:
2691                 regBwOpMode = BW_OPMODE_20MHZ;
2692                 regRATR = RATE_ALL_CCK;
2693                 regRRSR = RATE_ALL_CCK;
2694                 break;
2695         case WIRELESS_MODE_A:
2696                 regBwOpMode = BW_OPMODE_5G | BW_OPMODE_20MHZ;
2697                 regRATR = RATE_ALL_OFDM_AG;
2698                 regRRSR = RATE_ALL_OFDM_AG;
2699                 break;
2700         case WIRELESS_MODE_G:
2701                 regBwOpMode = BW_OPMODE_20MHZ;
2702                 regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2703                 regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2704                 break;
2705         case WIRELESS_MODE_AUTO:
2706 #ifdef TO_DO_LIST
2707                 if (Adapter->bInHctTest) {
2708                         regBwOpMode = BW_OPMODE_20MHZ;
2709                         regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2710                         regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2711                 } else
2712 #endif
2713                 {
2714                         regBwOpMode = BW_OPMODE_20MHZ;
2715                         regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG |
2716                                   RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
2717                         regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2718                 }
2719                 break;
2720         case WIRELESS_MODE_N_24G:
2721                 /* It support CCK rate by default. CCK rate will be filtered
2722                  * out only when associated AP does not support it.
2723                  */
2724                 regBwOpMode = BW_OPMODE_20MHZ;
2725                 regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG |
2726                           RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
2727                 regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2728                 break;
2729         case WIRELESS_MODE_N_5G:
2730                 regBwOpMode = BW_OPMODE_5G;
2731                 regRATR = RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS |
2732                           RATE_ALL_OFDM_2SS;
2733                 regRRSR = RATE_ALL_OFDM_AG;
2734                 break;
2735         }
2736
2737         write_nic_byte(dev, BW_OPMODE, regBwOpMode);
2738         ratr_value = regRATR;
2739         if (priv->rf_type == RF_1T2R)
2740                 ratr_value &= ~(RATE_ALL_OFDM_2SS);
2741         write_nic_dword(dev, RATR0, ratr_value);
2742         write_nic_byte(dev, UFWP, 1);
2743         read_nic_byte(dev, 0x313, &regTmp);
2744         regRRSR = ((regTmp) << 24) | (regRRSR & 0x00ffffff);
2745         write_nic_dword(dev, RRSR, regRRSR);
2746
2747         /* Set Retry Limit here */
2748         write_nic_word(dev, RETRY_LIMIT,
2749                        priv->ShortRetryLimit << RETRY_LIMIT_SHORT_SHIFT |
2750                        priv->LongRetryLimit << RETRY_LIMIT_LONG_SHIFT);
2751         /* Set Contention Window here */
2752
2753         /* Set Tx AGC */
2754
2755         /* Set Tx Antenna including Feedback control */
2756
2757         /* Set Auto Rate fallback control */
2758 }
2759
2760
2761 /* InitializeAdapter and PhyCfg */
2762 static bool rtl8192_adapter_start(struct net_device *dev)
2763 {
2764         struct r8192_priv *priv = ieee80211_priv(dev);
2765         u32 dwRegRead = 0;
2766         bool init_status = true;
2767         u8 SECR_value = 0x0;
2768         u8 tmp;
2769
2770         RT_TRACE(COMP_INIT, "====>%s()\n", __func__);
2771         priv->Rf_Mode = RF_OP_By_SW_3wire;
2772         /* for ASIC power on sequence */
2773         write_nic_byte_E(dev, 0x5f, 0x80);
2774         mdelay(50);
2775         write_nic_byte_E(dev, 0x5f, 0xf0);
2776         write_nic_byte_E(dev, 0x5d, 0x00);
2777         write_nic_byte_E(dev, 0x5e, 0x80);
2778         write_nic_byte(dev, 0x17, 0x37);
2779         mdelay(10);
2780         priv->pFirmware->firmware_status = FW_STATUS_0_INIT;
2781         /* config CPUReset Register */
2782         /* Firmware Reset or not? */
2783         read_nic_dword(dev, CPU_GEN, &dwRegRead);
2784         if (priv->pFirmware->firmware_status == FW_STATUS_0_INIT)
2785                 dwRegRead |= CPU_GEN_SYSTEM_RESET; /* do nothing here? */
2786         else if (priv->pFirmware->firmware_status == FW_STATUS_5_READY)
2787                 dwRegRead |= CPU_GEN_FIRMWARE_RESET;
2788         else
2789                 RT_TRACE(COMP_ERR,
2790                          "ERROR in %s(): undefined firmware state(%d)\n",
2791                          __func__,   priv->pFirmware->firmware_status);
2792
2793         write_nic_dword(dev, CPU_GEN, dwRegRead);
2794         /* config BB. */
2795         rtl8192_BBConfig(dev);
2796
2797         /* Loopback mode or not */
2798         priv->LoopbackMode = RTL819xU_NO_LOOPBACK;
2799
2800         read_nic_dword(dev, CPU_GEN, &dwRegRead);
2801         if (priv->LoopbackMode == RTL819xU_NO_LOOPBACK)
2802                 dwRegRead = (dwRegRead & CPU_GEN_NO_LOOPBACK_MSK) |
2803                             CPU_GEN_NO_LOOPBACK_SET;
2804         else if (priv->LoopbackMode == RTL819xU_MAC_LOOPBACK)
2805                 dwRegRead |= CPU_CCK_LOOPBACK;
2806         else
2807                 RT_TRACE(COMP_ERR,
2808                          "Serious error in %s(): wrong loopback mode setting(%d)\n",
2809                          __func__,  priv->LoopbackMode);
2810
2811         write_nic_dword(dev, CPU_GEN, dwRegRead);
2812
2813         /* after reset cpu, we need wait for a seconds to write in register. */
2814         udelay(500);
2815
2816         /* add for new bitfile:usb suspend reset pin set to 1. Do we need? */
2817         read_nic_byte_E(dev, 0x5f, &tmp);
2818         write_nic_byte_E(dev, 0x5f, tmp | 0x20);
2819
2820         /* Set Hardware */
2821         rtl8192_hwconfig(dev);
2822
2823         /* turn on Tx/Rx */
2824         write_nic_byte(dev, CMDR, CR_RE | CR_TE);
2825
2826         /* set IDR0 here */
2827         write_nic_dword(dev, MAC0, ((u32 *)dev->dev_addr)[0]);
2828         write_nic_word(dev, MAC4, ((u16 *)(dev->dev_addr + 4))[0]);
2829
2830         /* set RCR */
2831         write_nic_dword(dev, RCR, priv->ReceiveConfig);
2832
2833         /* Initialize Number of Reserved Pages in Firmware Queue */
2834         write_nic_dword(dev, RQPN1,
2835                 NUM_OF_PAGE_IN_FW_QUEUE_BK << RSVD_FW_QUEUE_PAGE_BK_SHIFT |
2836                 NUM_OF_PAGE_IN_FW_QUEUE_BE << RSVD_FW_QUEUE_PAGE_BE_SHIFT |
2837                 NUM_OF_PAGE_IN_FW_QUEUE_VI << RSVD_FW_QUEUE_PAGE_VI_SHIFT |
2838                 NUM_OF_PAGE_IN_FW_QUEUE_VO << RSVD_FW_QUEUE_PAGE_VO_SHIFT);
2839         write_nic_dword(dev, RQPN2,
2840                 NUM_OF_PAGE_IN_FW_QUEUE_MGNT << RSVD_FW_QUEUE_PAGE_MGNT_SHIFT |
2841                 NUM_OF_PAGE_IN_FW_QUEUE_CMD << RSVD_FW_QUEUE_PAGE_CMD_SHIFT);
2842         write_nic_dword(dev, RQPN3,
2843                 APPLIED_RESERVED_QUEUE_IN_FW |
2844                 NUM_OF_PAGE_IN_FW_QUEUE_BCN << RSVD_FW_QUEUE_PAGE_BCN_SHIFT);
2845         write_nic_dword(dev, RATR0 + 4 * 7, (RATE_ALL_OFDM_AG | RATE_ALL_CCK));
2846
2847         /* Set AckTimeout */
2848         /* TODO: (it value is only for FPGA version). need to be changed!! */
2849         write_nic_byte(dev, ACK_TIMEOUT, 0x30);
2850
2851         if (priv->ResetProgress == RESET_TYPE_NORESET)
2852                 rtl8192_SetWirelessMode(dev, priv->ieee80211->mode);
2853         if (priv->ResetProgress == RESET_TYPE_NORESET) {
2854                 CamResetAllEntry(dev);
2855                 SECR_value |= SCR_TxEncEnable;
2856                 SECR_value |= SCR_RxDecEnable;
2857                 SECR_value |= SCR_NoSKMC;
2858                 write_nic_byte(dev, SECR, SECR_value);
2859         }
2860
2861         /* Beacon related */
2862         write_nic_word(dev, ATIMWND, 2);
2863         write_nic_word(dev, BCN_INTERVAL, 100);
2864
2865 #define DEFAULT_EDCA 0x005e4332
2866         {
2867                 int i;
2868
2869                 for (i = 0; i < QOS_QUEUE_NUM; i++)
2870                         write_nic_dword(dev, WDCAPARA_ADD[i], DEFAULT_EDCA);
2871         }
2872
2873         rtl8192_phy_configmac(dev);
2874
2875         if (priv->card_8192_version == (u8)VERSION_819xU_A) {
2876                 rtl8192_phy_getTxPower(dev);
2877                 rtl8192_phy_setTxPower(dev, priv->chan);
2878         }
2879
2880         /* Firmware download */
2881         init_status = init_firmware(dev);
2882         if (!init_status) {
2883                 RT_TRACE(COMP_ERR, "ERR!!! %s(): Firmware download is failed\n",
2884                          __func__);
2885                 return init_status;
2886         }
2887         RT_TRACE(COMP_INIT, "%s():after firmware download\n", __func__);
2888
2889 #ifdef TO_DO_LIST
2890         if (Adapter->ResetProgress == RESET_TYPE_NORESET) {
2891                 if (pMgntInfo->RegRfOff) { /* User disable RF via registry. */
2892                         RT_TRACE((COMP_INIT | COMP_RF), DBG_LOUD,
2893                                  ("InitializeAdapter819xUsb(): Turn off RF for RegRfOff ----------\n"));
2894                         MgntActSet_RF_State(Adapter, eRfOff, RF_CHANGE_BY_SW);
2895                         /* Those actions will be discard in MgntActSet_RF_State
2896                          * because of the same state
2897                          */
2898                         for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++)
2899                                 PHY_SetRFReg(Adapter,
2900                                              (RF90_RADIO_PATH_E)eRFPath,
2901                                              0x4, 0xC00, 0x0);
2902                 } else if (pMgntInfo->RfOffReason > RF_CHANGE_BY_PS) {
2903                         /* H/W or S/W RF OFF before sleep. */
2904                         RT_TRACE((COMP_INIT | COMP_RF), DBG_LOUD,
2905                                  ("InitializeAdapter819xUsb(): Turn off RF for RfOffReason(%d) ----------\n",
2906                                   pMgntInfo->RfOffReason));
2907                         MgntActSet_RF_State(Adapter,
2908                                             eRfOff,
2909                                             pMgntInfo->RfOffReason);
2910                 } else {
2911                         pHalData->eRFPowerState = eRfOn;
2912                         pMgntInfo->RfOffReason = 0;
2913                         RT_TRACE((COMP_INIT | COMP_RF), DBG_LOUD,
2914                                  ("InitializeAdapter819xUsb(): RF is on ----------\n"));
2915                 }
2916         } else {
2917                 if (pHalData->eRFPowerState == eRfOff) {
2918                         MgntActSet_RF_State(Adapter,
2919                                             eRfOff,
2920                                             pMgntInfo->RfOffReason);
2921                         /* Those actions will be discard in MgntActSet_RF_State
2922                          * because of the same state
2923                          */
2924                         for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++)
2925                                 PHY_SetRFReg(Adapter,
2926                                              (RF90_RADIO_PATH_E)eRFPath,
2927                                              0x4, 0xC00, 0x0);
2928                 }
2929         }
2930 #endif
2931         /* config RF. */
2932         if (priv->ResetProgress == RESET_TYPE_NORESET) {
2933                 rtl8192_phy_RFConfig(dev);
2934                 RT_TRACE(COMP_INIT, "%s():after phy RF config\n", __func__);
2935         }
2936
2937
2938         if (priv->ieee80211->FwRWRF)
2939                 /* We can force firmware to do RF-R/W */
2940                 priv->Rf_Mode = RF_OP_By_FW;
2941         else
2942                 priv->Rf_Mode = RF_OP_By_SW_3wire;
2943
2944
2945         rtl8192_phy_updateInitGain(dev);
2946         /*--set CCK and OFDM Block "ON"--*/
2947         rtl8192_setBBreg(dev, rFPGA0_RFMOD, bCCKEn, 0x1);
2948         rtl8192_setBBreg(dev, rFPGA0_RFMOD, bOFDMEn, 0x1);
2949
2950         if (priv->ResetProgress == RESET_TYPE_NORESET) {
2951                 /* if D or C cut */
2952                 u8 tmpvalue;
2953
2954                 read_nic_byte(dev, 0x301, &tmpvalue);
2955                 if (tmpvalue == 0x03) {
2956                         priv->bDcut = true;
2957                         RT_TRACE(COMP_POWER_TRACKING, "D-cut\n");
2958                 } else {
2959                         priv->bDcut = false;
2960                         RT_TRACE(COMP_POWER_TRACKING, "C-cut\n");
2961                 }
2962                 dm_initialize_txpower_tracking(dev);
2963
2964                 if (priv->bDcut) {
2965                         u32 i, TempCCk;
2966                         u32 tmpRegA = rtl8192_QueryBBReg(dev,
2967                                                          rOFDM0_XATxIQImbalance,
2968                                                          bMaskDWord);
2969
2970                         for (i = 0; i < TxBBGainTableLength; i++) {
2971                                 if (tmpRegA == priv->txbbgain_table[i].txbbgain_value) {
2972                                         priv->rfa_txpowertrackingindex = (u8)i;
2973                                         priv->rfa_txpowertrackingindex_real =
2974                                                 (u8)i;
2975                                         priv->rfa_txpowertracking_default =
2976                                                 priv->rfa_txpowertrackingindex;
2977                                         break;
2978                                 }
2979                         }
2980
2981                         TempCCk = rtl8192_QueryBBReg(dev,
2982                                                      rCCK0_TxFilter1,
2983                                                      bMaskByte2);
2984
2985                         for (i = 0; i < CCKTxBBGainTableLength; i++) {
2986                                 if (TempCCk == priv->cck_txbbgain_table[i].ccktxbb_valuearray[0]) {
2987                                         priv->cck_present_attenuation_20Mdefault = (u8)i;
2988                                         break;
2989                                 }
2990                         }
2991                         priv->cck_present_attenuation_40Mdefault = 0;
2992                         priv->cck_present_attenuation_difference = 0;
2993                         priv->cck_present_attenuation =
2994                                 priv->cck_present_attenuation_20Mdefault;
2995                 }
2996         }
2997         write_nic_byte(dev, 0x87, 0x0);
2998
2999
3000         return init_status;
3001 }
3002
3003 /* this configures registers for beacon tx and enables it via
3004  * rtl8192_beacon_tx_enable(). rtl8192_beacon_tx_disable() might
3005  * be used to stop beacon transmission
3006  */
3007 /***************************************************************************
3008  *   -------------------------------NET STUFF---------------------------
3009  ***************************************************************************/
3010
3011 static struct net_device_stats *rtl8192_stats(struct net_device *dev)
3012 {
3013         struct r8192_priv *priv = ieee80211_priv(dev);
3014
3015         return &priv->ieee80211->stats;
3016 }
3017
3018 static bool HalTxCheckStuck819xUsb(struct net_device *dev)
3019 {
3020         struct r8192_priv *priv = ieee80211_priv(dev);
3021         u16             RegTxCounter;
3022         bool            bStuck = false;
3023
3024         read_nic_word(dev, 0x128, &RegTxCounter);
3025         RT_TRACE(COMP_RESET,
3026                  "%s():RegTxCounter is %d,TxCounter is %d\n", __func__,
3027                  RegTxCounter, priv->TxCounter);
3028         if (priv->TxCounter == RegTxCounter)
3029                 bStuck = true;
3030
3031         priv->TxCounter = RegTxCounter;
3032
3033         return bStuck;
3034 }
3035
3036 /*
3037  *      <Assumption: RT_TX_SPINLOCK is acquired.>
3038  *      First added: 2006.11.19 by emily
3039  */
3040 static RESET_TYPE TxCheckStuck(struct net_device *dev)
3041 {
3042         struct r8192_priv *priv = ieee80211_priv(dev);
3043         u8                      QueueID;
3044         bool                    bCheckFwTxCnt = false;
3045
3046         /* Decide such threshold according to current power save mode */
3047
3048         for (QueueID = 0; QueueID <= BEACON_QUEUE; QueueID++) {
3049                 if (QueueID == TXCMD_QUEUE)
3050                         continue;
3051                 if ((skb_queue_len(&priv->ieee80211->skb_waitQ[QueueID]) == 0)  && (skb_queue_len(&priv->ieee80211->skb_aggQ[QueueID]) == 0))
3052                         continue;
3053
3054                 bCheckFwTxCnt = true;
3055         }
3056         if (bCheckFwTxCnt) {
3057                 if (HalTxCheckStuck819xUsb(dev)) {
3058                         RT_TRACE(COMP_RESET,
3059                                  "%s: Fw indicates no Tx condition!\n",
3060                                  __func__);
3061                         return RESET_TYPE_SILENT;
3062                 }
3063         }
3064         return RESET_TYPE_NORESET;
3065 }
3066
3067 static bool HalRxCheckStuck819xUsb(struct net_device *dev)
3068 {
3069         u16     RegRxCounter;
3070         struct r8192_priv *priv = ieee80211_priv(dev);
3071         bool bStuck = false;
3072         static u8       rx_chk_cnt;
3073
3074         read_nic_word(dev, 0x130, &RegRxCounter);
3075         RT_TRACE(COMP_RESET,
3076                  "%s(): RegRxCounter is %d,RxCounter is %d\n", __func__,
3077                  RegRxCounter, priv->RxCounter);
3078         /* If rssi is small, we should check rx for long time because of bad rx.
3079          * or maybe it will continuous silent reset every 2 seconds.
3080          */
3081         rx_chk_cnt++;
3082         if (priv->undecorated_smoothed_pwdb >= (RateAdaptiveTH_High + 5)) {
3083                 rx_chk_cnt = 0; /* high rssi, check rx stuck right now. */
3084         } else if (priv->undecorated_smoothed_pwdb < (RateAdaptiveTH_High + 5) &&
3085                    ((priv->CurrentChannelBW != HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb >= RateAdaptiveTH_Low_40M) ||
3086                     (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb >= RateAdaptiveTH_Low_20M))) {
3087                 if (rx_chk_cnt < 2)
3088                         return bStuck;
3089
3090                 rx_chk_cnt = 0;
3091         } else if (((priv->CurrentChannelBW != HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb < RateAdaptiveTH_Low_40M) ||
3092                     (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb < RateAdaptiveTH_Low_20M)) &&
3093                      priv->undecorated_smoothed_pwdb >= VeryLowRSSI) {
3094                 if (rx_chk_cnt < 4)
3095                         return bStuck;
3096
3097                 rx_chk_cnt = 0;
3098         } else {
3099                 if (rx_chk_cnt < 8)
3100                         return bStuck;
3101
3102                 rx_chk_cnt = 0;
3103         }
3104
3105         if (priv->RxCounter == RegRxCounter)
3106                 bStuck = true;
3107
3108         priv->RxCounter = RegRxCounter;
3109
3110         return bStuck;
3111 }
3112
3113 static RESET_TYPE RxCheckStuck(struct net_device *dev)
3114 {
3115         struct r8192_priv *priv = ieee80211_priv(dev);
3116         bool        bRxCheck = false;
3117
3118         if (priv->IrpPendingCount > 1)
3119                 bRxCheck = true;
3120
3121         if (bRxCheck) {
3122                 if (HalRxCheckStuck819xUsb(dev)) {
3123                         RT_TRACE(COMP_RESET, "RxStuck Condition\n");
3124                         return RESET_TYPE_SILENT;
3125                 }
3126         }
3127         return RESET_TYPE_NORESET;
3128 }
3129
3130
3131 /**
3132  * This function is called by Checkforhang to check whether we should
3133  * ask OS to reset driver
3134  *
3135  * \param pAdapter      The adapter context for this miniport
3136  *
3137  * Note:NIC with USB interface sholud not call this function because we
3138  * cannot scan descriptor to judge whether there is tx stuck.
3139  * Note: This function may be required to be rewrite for Vista OS.
3140  * <<<Assumption: Tx spinlock has been acquired >>>
3141  *
3142  * 8185 and 8185b does not implement this function.
3143  */
3144 static RESET_TYPE rtl819x_ifcheck_resetornot(struct net_device *dev)
3145 {
3146         struct r8192_priv *priv = ieee80211_priv(dev);
3147         RESET_TYPE      TxResetType = RESET_TYPE_NORESET;
3148         RESET_TYPE      RxResetType = RESET_TYPE_NORESET;
3149         RT_RF_POWER_STATE       rfState;
3150
3151         rfState = priv->ieee80211->eRFPowerState;
3152
3153         TxResetType = TxCheckStuck(dev);
3154         if (rfState != eRfOff ||
3155             (priv->ieee80211->iw_mode != IW_MODE_ADHOC)) {
3156                 /* If driver is