1 /*
2 
3   Broadcom B43legacy wireless driver
4 
5   Copyright (c) 2005 Martin Langer <martin-langer@gmx.de>,
6 		     Stefano Brivio <stefano.brivio@polimi.it>
7 		     Michael Buesch <m@bues.ch>
8 		     Danny van Dyk <kugelfang@gentoo.org>
9      Andreas Jaggi <andreas.jaggi@waterwave.ch>
10   Copyright (c) 2007 Larry Finger <Larry.Finger@lwfinger.net>
11 
12   Some parts of the code in this file are derived from the ipw2200
13   driver  Copyright(c) 2003 - 2004 Intel Corporation.
14 
15   This program is free software; you can redistribute it and/or modify
16   it under the terms of the GNU General Public License as published by
17   the Free Software Foundation; either version 2 of the License, or
18   (at your option) any later version.
19 
20   This program is distributed in the hope that it will be useful,
21   but WITHOUT ANY WARRANTY; without even the implied warranty of
22   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
23   GNU General Public License for more details.
24 
25   You should have received a copy of the GNU General Public License
26   along with this program; see the file COPYING.  If not, write to
27   the Free Software Foundation, Inc., 51 Franklin Steet, Fifth Floor,
28   Boston, MA 02110-1301, USA.
29 
30 */
31 
32 #include <linux/delay.h>
33 #include <linux/pci.h>
34 #include <linux/sched.h>
35 #include <linux/slab.h>
36 #include <linux/types.h>
37 
38 #include "b43legacy.h"
39 #include "phy.h"
40 #include "main.h"
41 #include "radio.h"
42 #include "ilt.h"
43 
44 
45 static const s8 b43legacy_tssi2dbm_b_table[] = {
46 	0x4D, 0x4C, 0x4B, 0x4A,
47 	0x4A, 0x49, 0x48, 0x47,
48 	0x47, 0x46, 0x45, 0x45,
49 	0x44, 0x43, 0x42, 0x42,
50 	0x41, 0x40, 0x3F, 0x3E,
51 	0x3D, 0x3C, 0x3B, 0x3A,
52 	0x39, 0x38, 0x37, 0x36,
53 	0x35, 0x34, 0x32, 0x31,
54 	0x30, 0x2F, 0x2D, 0x2C,
55 	0x2B, 0x29, 0x28, 0x26,
56 	0x25, 0x23, 0x21, 0x1F,
57 	0x1D, 0x1A, 0x17, 0x14,
58 	0x10, 0x0C, 0x06, 0x00,
59 	  -7,   -7,   -7,   -7,
60 	  -7,   -7,   -7,   -7,
61 	  -7,   -7,   -7,   -7,
62 };
63 
64 static const s8 b43legacy_tssi2dbm_g_table[] = {
65 	 77,  77,  77,  76,
66 	 76,  76,  75,  75,
67 	 74,  74,  73,  73,
68 	 73,  72,  72,  71,
69 	 71,  70,  70,  69,
70 	 68,  68,  67,  67,
71 	 66,  65,  65,  64,
72 	 63,  63,  62,  61,
73 	 60,  59,  58,  57,
74 	 56,  55,  54,  53,
75 	 52,  50,  49,  47,
76 	 45,  43,  40,  37,
77 	 33,  28,  22,  14,
78 	  5,  -7, -20, -20,
79 	-20, -20, -20, -20,
80 	-20, -20, -20, -20,
81 };
82 
83 static void b43legacy_phy_initg(struct b43legacy_wldev *dev);
84 
85 
86 static inline
87 void b43legacy_voluntary_preempt(void)
88 {
89 	B43legacy_BUG_ON(!(!in_atomic() && !in_irq() &&
90 			  !in_interrupt() && !irqs_disabled()));
91 #ifndef CONFIG_PREEMPT
92 	cond_resched();
93 #endif /* CONFIG_PREEMPT */
94 }
95 
96 /* Lock the PHY registers against concurrent access from the microcode.
97  * This lock is nonrecursive. */
98 void b43legacy_phy_lock(struct b43legacy_wldev *dev)
99 {
100 #if B43legacy_DEBUG
101 	B43legacy_WARN_ON(dev->phy.phy_locked);
102 	dev->phy.phy_locked = 1;
103 #endif
104 
105 	if (dev->dev->id.revision < 3) {
106 		b43legacy_mac_suspend(dev);
107 	} else {
108 		if (!b43legacy_is_mode(dev->wl, NL80211_IFTYPE_AP))
109 			b43legacy_power_saving_ctl_bits(dev, -1, 1);
110 	}
111 }
112 
113 void b43legacy_phy_unlock(struct b43legacy_wldev *dev)
114 {
115 #if B43legacy_DEBUG
116 	B43legacy_WARN_ON(!dev->phy.phy_locked);
117 	dev->phy.phy_locked = 0;
118 #endif
119 
120 	if (dev->dev->id.revision < 3) {
121 		b43legacy_mac_enable(dev);
122 	} else {
123 		if (!b43legacy_is_mode(dev->wl, NL80211_IFTYPE_AP))
124 			b43legacy_power_saving_ctl_bits(dev, -1, -1);
125 	}
126 }
127 
128 u16 b43legacy_phy_read(struct b43legacy_wldev *dev, u16 offset)
129 {
130 	b43legacy_write16(dev, B43legacy_MMIO_PHY_CONTROL, offset);
131 	return b43legacy_read16(dev, B43legacy_MMIO_PHY_DATA);
132 }
133 
134 void b43legacy_phy_write(struct b43legacy_wldev *dev, u16 offset, u16 val)
135 {
136 	b43legacy_write16(dev, B43legacy_MMIO_PHY_CONTROL, offset);
137 	mmiowb();
138 	b43legacy_write16(dev, B43legacy_MMIO_PHY_DATA, val);
139 }
140 
141 void b43legacy_phy_calibrate(struct b43legacy_wldev *dev)
142 {
143 	struct b43legacy_phy *phy = &dev->phy;
144 
145 	b43legacy_read32(dev, B43legacy_MMIO_MACCTL); /* Dummy read. */
146 	if (phy->calibrated)
147 		return;
148 	if (phy->type == B43legacy_PHYTYPE_G && phy->rev == 1) {
149 		b43legacy_wireless_core_reset(dev, 0);
150 		b43legacy_phy_initg(dev);
151 		b43legacy_wireless_core_reset(dev, B43legacy_TMSLOW_GMODE);
152 	}
153 	phy->calibrated = 1;
154 }
155 
156 /* initialize B PHY power control
157  * as described in http://bcm-specs.sipsolutions.net/InitPowerControl
158  */
159 static void b43legacy_phy_init_pctl(struct b43legacy_wldev *dev)
160 {
161 	struct b43legacy_phy *phy = &dev->phy;
162 	u16 saved_batt = 0;
163 	u16 saved_ratt = 0;
164 	u16 saved_txctl1 = 0;
165 	int must_reset_txpower = 0;
166 
167 	B43legacy_BUG_ON(!(phy->type == B43legacy_PHYTYPE_B ||
168 			  phy->type == B43legacy_PHYTYPE_G));
169 	if (is_bcm_board_vendor(dev) &&
170 	    (dev->dev->bus->boardinfo.type == 0x0416))
171 		return;
172 
173 	b43legacy_phy_write(dev, 0x0028, 0x8018);
174 	b43legacy_write16(dev, 0x03E6, b43legacy_read16(dev, 0x03E6) & 0xFFDF);
175 
176 	if (phy->type == B43legacy_PHYTYPE_G) {
177 		if (!phy->gmode)
178 			return;
179 		b43legacy_phy_write(dev, 0x047A, 0xC111);
180 	}
181 	if (phy->savedpctlreg != 0xFFFF)
182 		return;
183 #ifdef CONFIG_B43LEGACY_DEBUG
184 	if (phy->manual_txpower_control)
185 		return;
186 #endif
187 
188 	if (phy->type == B43legacy_PHYTYPE_B &&
189 	    phy->rev >= 2 &&
190 	    phy->radio_ver == 0x2050)
191 		b43legacy_radio_write16(dev, 0x0076,
192 					b43legacy_radio_read16(dev, 0x0076)
193 					| 0x0084);
194 	else {
195 		saved_batt = phy->bbatt;
196 		saved_ratt = phy->rfatt;
197 		saved_txctl1 = phy->txctl1;
198 		if ((phy->radio_rev >= 6) && (phy->radio_rev <= 8)
199 		    && /*FIXME: incomplete specs for 5 < revision < 9 */ 0)
200 			b43legacy_radio_set_txpower_bg(dev, 0xB, 0x1F, 0);
201 		else
202 			b43legacy_radio_set_txpower_bg(dev, 0xB, 9, 0);
203 		must_reset_txpower = 1;
204 	}
205 	b43legacy_dummy_transmission(dev);
206 
207 	phy->savedpctlreg = b43legacy_phy_read(dev, B43legacy_PHY_G_PCTL);
208 
209 	if (must_reset_txpower)
210 		b43legacy_radio_set_txpower_bg(dev, saved_batt, saved_ratt,
211 					       saved_txctl1);
212 	else
213 		b43legacy_radio_write16(dev, 0x0076, b43legacy_radio_read16(dev,
214 					0x0076) & 0xFF7B);
215 	b43legacy_radio_clear_tssi(dev);
216 }
217 
218 static void b43legacy_phy_agcsetup(struct b43legacy_wldev *dev)
219 {
220 	struct b43legacy_phy *phy = &dev->phy;
221 	u16 offset = 0x0000;
222 
223 	if (phy->rev == 1)
224 		offset = 0x4C00;
225 
226 	b43legacy_ilt_write(dev, offset, 0x00FE);
227 	b43legacy_ilt_write(dev, offset + 1, 0x000D);
228 	b43legacy_ilt_write(dev, offset + 2, 0x0013);
229 	b43legacy_ilt_write(dev, offset + 3, 0x0019);
230 
231 	if (phy->rev == 1) {
232 		b43legacy_ilt_write(dev, 0x1800, 0x2710);
233 		b43legacy_ilt_write(dev, 0x1801, 0x9B83);
234 		b43legacy_ilt_write(dev, 0x1802, 0x9B83);
235 		b43legacy_ilt_write(dev, 0x1803, 0x0F8D);
236 		b43legacy_phy_write(dev, 0x0455, 0x0004);
237 	}
238 
239 	b43legacy_phy_write(dev, 0x04A5, (b43legacy_phy_read(dev, 0x04A5)
240 					  & 0x00FF) | 0x5700);
241 	b43legacy_phy_write(dev, 0x041A, (b43legacy_phy_read(dev, 0x041A)
242 					  & 0xFF80) | 0x000F);
243 	b43legacy_phy_write(dev, 0x041A, (b43legacy_phy_read(dev, 0x041A)
244 					  & 0xC07F) | 0x2B80);
245 	b43legacy_phy_write(dev, 0x048C, (b43legacy_phy_read(dev, 0x048C)
246 					  & 0xF0FF) | 0x0300);
247 
248 	b43legacy_radio_write16(dev, 0x007A,
249 				b43legacy_radio_read16(dev, 0x007A)
250 				| 0x0008);
251 
252 	b43legacy_phy_write(dev, 0x04A0, (b43legacy_phy_read(dev, 0x04A0)
253 			    & 0xFFF0) | 0x0008);
254 	b43legacy_phy_write(dev, 0x04A1, (b43legacy_phy_read(dev, 0x04A1)
255 			    & 0xF0FF) | 0x0600);
256 	b43legacy_phy_write(dev, 0x04A2, (b43legacy_phy_read(dev, 0x04A2)
257 			    & 0xF0FF) | 0x0700);
258 	b43legacy_phy_write(dev, 0x04A0, (b43legacy_phy_read(dev, 0x04A0)
259 			    & 0xF0FF) | 0x0100);
260 
261 	if (phy->rev == 1)
262 		b43legacy_phy_write(dev, 0x04A2,
263 				    (b43legacy_phy_read(dev, 0x04A2)
264 				    & 0xFFF0) | 0x0007);
265 
266 	b43legacy_phy_write(dev, 0x0488, (b43legacy_phy_read(dev, 0x0488)
267 			    & 0xFF00) | 0x001C);
268 	b43legacy_phy_write(dev, 0x0488, (b43legacy_phy_read(dev, 0x0488)
269 			    & 0xC0FF) | 0x0200);
270 	b43legacy_phy_write(dev, 0x0496, (b43legacy_phy_read(dev, 0x0496)
271 			    & 0xFF00) | 0x001C);
272 	b43legacy_phy_write(dev, 0x0489, (b43legacy_phy_read(dev, 0x0489)
273 			    & 0xFF00) | 0x0020);
274 	b43legacy_phy_write(dev, 0x0489, (b43legacy_phy_read(dev, 0x0489)
275 			    & 0xC0FF) | 0x0200);
276 	b43legacy_phy_write(dev, 0x0482, (b43legacy_phy_read(dev, 0x0482)
277 			    & 0xFF00) | 0x002E);
278 	b43legacy_phy_write(dev, 0x0496, (b43legacy_phy_read(dev, 0x0496)
279 			    & 0x00FF) | 0x1A00);
280 	b43legacy_phy_write(dev, 0x0481, (b43legacy_phy_read(dev, 0x0481)
281 			    & 0xFF00) | 0x0028);
282 	b43legacy_phy_write(dev, 0x0481, (b43legacy_phy_read(dev, 0x0481)
283 			    & 0x00FF) | 0x2C00);
284 
285 	if (phy->rev == 1) {
286 		b43legacy_phy_write(dev, 0x0430, 0x092B);
287 		b43legacy_phy_write(dev, 0x041B,
288 				    (b43legacy_phy_read(dev, 0x041B)
289 				    & 0xFFE1) | 0x0002);
290 	} else {
291 		b43legacy_phy_write(dev, 0x041B,
292 				    b43legacy_phy_read(dev, 0x041B) & 0xFFE1);
293 		b43legacy_phy_write(dev, 0x041F, 0x287A);
294 		b43legacy_phy_write(dev, 0x0420,
295 				    (b43legacy_phy_read(dev, 0x0420)
296 				    & 0xFFF0) | 0x0004);
297 	}
298 
299 	if (phy->rev > 2) {
300 		b43legacy_phy_write(dev, 0x0422, 0x287A);
301 		b43legacy_phy_write(dev, 0x0420,
302 				    (b43legacy_phy_read(dev, 0x0420)
303 				    & 0x0FFF) | 0x3000);
304 	}
305 
306 	b43legacy_phy_write(dev, 0x04A8, (b43legacy_phy_read(dev, 0x04A8)
307 			    & 0x8080) | 0x7874);
308 	b43legacy_phy_write(dev, 0x048E, 0x1C00);
309 
310 	if (phy->rev == 1) {
311 		b43legacy_phy_write(dev, 0x04AB,
312 				    (b43legacy_phy_read(dev, 0x04AB)
313 				    & 0xF0FF) | 0x0600);
314 		b43legacy_phy_write(dev, 0x048B, 0x005E);
315 		b43legacy_phy_write(dev, 0x048C,
316 				    (b43legacy_phy_read(dev, 0x048C) & 0xFF00)
317 				    | 0x001E);
318 		b43legacy_phy_write(dev, 0x048D, 0x0002);
319 	}
320 
321 	b43legacy_ilt_write(dev, offset + 0x0800, 0);
322 	b43legacy_ilt_write(dev, offset + 0x0801, 7);
323 	b43legacy_ilt_write(dev, offset + 0x0802, 16);
324 	b43legacy_ilt_write(dev, offset + 0x0803, 28);
325 
326 	if (phy->rev >= 6) {
327 		b43legacy_phy_write(dev, 0x0426,
328 				    (b43legacy_phy_read(dev, 0x0426) & 0xFFFC));
329 		b43legacy_phy_write(dev, 0x0426,
330 				    (b43legacy_phy_read(dev, 0x0426) & 0xEFFF));
331 	}
332 }
333 
334 static void b43legacy_phy_setupg(struct b43legacy_wldev *dev)
335 {
336 	struct b43legacy_phy *phy = &dev->phy;
337 	u16 i;
338 
339 	B43legacy_BUG_ON(phy->type != B43legacy_PHYTYPE_G);
340 	if (phy->rev == 1) {
341 		b43legacy_phy_write(dev, 0x0406, 0x4F19);
342 		b43legacy_phy_write(dev, B43legacy_PHY_G_CRS,
343 				    (b43legacy_phy_read(dev,
344 				    B43legacy_PHY_G_CRS) & 0xFC3F) | 0x0340);
345 		b43legacy_phy_write(dev, 0x042C, 0x005A);
346 		b43legacy_phy_write(dev, 0x0427, 0x001A);
347 
348 		for (i = 0; i < B43legacy_ILT_FINEFREQG_SIZE; i++)
349 			b43legacy_ilt_write(dev, 0x5800 + i,
350 					    b43legacy_ilt_finefreqg[i]);
351 		for (i = 0; i < B43legacy_ILT_NOISEG1_SIZE; i++)
352 			b43legacy_ilt_write(dev, 0x1800 + i,
353 					    b43legacy_ilt_noiseg1[i]);
354 		for (i = 0; i < B43legacy_ILT_ROTOR_SIZE; i++)
355 			b43legacy_ilt_write32(dev, 0x2000 + i,
356 					      b43legacy_ilt_rotor[i]);
357 	} else {
358 		/* nrssi values are signed 6-bit values. Why 0x7654 here? */
359 		b43legacy_nrssi_hw_write(dev, 0xBA98, (s16)0x7654);
360 
361 		if (phy->rev == 2) {
362 			b43legacy_phy_write(dev, 0x04C0, 0x1861);
363 			b43legacy_phy_write(dev, 0x04C1, 0x0271);
364 		} else if (phy->rev > 2) {
365 			b43legacy_phy_write(dev, 0x04C0, 0x0098);
366 			b43legacy_phy_write(dev, 0x04C1, 0x0070);
367 			b43legacy_phy_write(dev, 0x04C9, 0x0080);
368 		}
369 		b43legacy_phy_write(dev, 0x042B, b43legacy_phy_read(dev,
370 				    0x042B) | 0x800);
371 
372 		for (i = 0; i < 64; i++)
373 			b43legacy_ilt_write(dev, 0x4000 + i, i);
374 		for (i = 0; i < B43legacy_ILT_NOISEG2_SIZE; i++)
375 			b43legacy_ilt_write(dev, 0x1800 + i,
376 					    b43legacy_ilt_noiseg2[i]);
377 	}
378 
379 	if (phy->rev <= 2)
380 		for (i = 0; i < B43legacy_ILT_NOISESCALEG_SIZE; i++)
381 			b43legacy_ilt_write(dev, 0x1400 + i,
382 					    b43legacy_ilt_noisescaleg1[i]);
383 	else if ((phy->rev >= 7) && (b43legacy_phy_read(dev, 0x0449) & 0x0200))
384 		for (i = 0; i < B43legacy_ILT_NOISESCALEG_SIZE; i++)
385 			b43legacy_ilt_write(dev, 0x1400 + i,
386 					    b43legacy_ilt_noisescaleg3[i]);
387 	else
388 		for (i = 0; i < B43legacy_ILT_NOISESCALEG_SIZE; i++)
389 			b43legacy_ilt_write(dev, 0x1400 + i,
390 					    b43legacy_ilt_noisescaleg2[i]);
391 
392 	if (phy->rev == 2)
393 		for (i = 0; i < B43legacy_ILT_SIGMASQR_SIZE; i++)
394 			b43legacy_ilt_write(dev, 0x5000 + i,
395 					    b43legacy_ilt_sigmasqr1[i]);
396 	else if ((phy->rev > 2) && (phy->rev <= 8))
397 		for (i = 0; i < B43legacy_ILT_SIGMASQR_SIZE; i++)
398 			b43legacy_ilt_write(dev, 0x5000 + i,
399 					    b43legacy_ilt_sigmasqr2[i]);
400 
401 	if (phy->rev == 1) {
402 		for (i = 0; i < B43legacy_ILT_RETARD_SIZE; i++)
403 			b43legacy_ilt_write32(dev, 0x2400 + i,
404 					      b43legacy_ilt_retard[i]);
405 		for (i = 4; i < 20; i++)
406 			b43legacy_ilt_write(dev, 0x5400 + i, 0x0020);
407 		b43legacy_phy_agcsetup(dev);
408 
409 		if (is_bcm_board_vendor(dev) &&
410 		    (dev->dev->bus->boardinfo.type == 0x0416) &&
411 		    (dev->dev->bus->sprom.board_rev == 0x0017))
412 			return;
413 
414 		b43legacy_ilt_write(dev, 0x5001, 0x0002);
415 		b43legacy_ilt_write(dev, 0x5002, 0x0001);
416 	} else {
417 		for (i = 0; i <= 0x20; i++)
418 			b43legacy_ilt_write(dev, 0x1000 + i, 0x0820);
419 		b43legacy_phy_agcsetup(dev);
420 		b43legacy_phy_read(dev, 0x0400); /* dummy read */
421 		b43legacy_phy_write(dev, 0x0403, 0x1000);
422 		b43legacy_ilt_write(dev, 0x3C02, 0x000F);
423 		b43legacy_ilt_write(dev, 0x3C03, 0x0014);
424 
425 		if (is_bcm_board_vendor(dev) &&
426 		    (dev->dev->bus->boardinfo.type == 0x0416) &&
427 		    (dev->dev->bus->sprom.board_rev == 0x0017))
428 			return;
429 
430 		b43legacy_ilt_write(dev, 0x0401, 0x0002);
431 		b43legacy_ilt_write(dev, 0x0402, 0x0001);
432 	}
433 }
434 
435 /* Initialize the APHY portion of a GPHY. */
436 static void b43legacy_phy_inita(struct b43legacy_wldev *dev)
437 {
438 
439 	might_sleep();
440 
441 	b43legacy_phy_setupg(dev);
442 	if (dev->dev->bus->sprom.boardflags_lo & B43legacy_BFL_PACTRL)
443 		b43legacy_phy_write(dev, 0x046E, 0x03CF);
444 }
445 
446 static void b43legacy_phy_initb2(struct b43legacy_wldev *dev)
447 {
448 	struct b43legacy_phy *phy = &dev->phy;
449 	u16 offset;
450 	int val;
451 
452 	b43legacy_write16(dev, 0x03EC, 0x3F22);
453 	b43legacy_phy_write(dev, 0x0020, 0x301C);
454 	b43legacy_phy_write(dev, 0x0026, 0x0000);
455 	b43legacy_phy_write(dev, 0x0030, 0x00C6);
456 	b43legacy_phy_write(dev, 0x0088, 0x3E00);
457 	val = 0x3C3D;
458 	for (offset = 0x0089; offset < 0x00A7; offset++) {
459 		b43legacy_phy_write(dev, offset, val);
460 		val -= 0x0202;
461 	}
462 	b43legacy_phy_write(dev, 0x03E4, 0x3000);
463 	b43legacy_radio_selectchannel(dev, phy->channel, 0);
464 	if (phy->radio_ver != 0x2050) {
465 		b43legacy_radio_write16(dev, 0x0075, 0x0080);
466 		b43legacy_radio_write16(dev, 0x0079, 0x0081);
467 	}
468 	b43legacy_radio_write16(dev, 0x0050, 0x0020);
469 	b43legacy_radio_write16(dev, 0x0050, 0x0023);
470 	if (phy->radio_ver == 0x2050) {
471 		b43legacy_radio_write16(dev, 0x0050, 0x0020);
472 		b43legacy_radio_write16(dev, 0x005A, 0x0070);
473 		b43legacy_radio_write16(dev, 0x005B, 0x007B);
474 		b43legacy_radio_write16(dev, 0x005C, 0x00B0);
475 		b43legacy_radio_write16(dev, 0x007A, 0x000F);
476 		b43legacy_phy_write(dev, 0x0038, 0x0677);
477 		b43legacy_radio_init2050(dev);
478 	}
479 	b43legacy_phy_write(dev, 0x0014, 0x0080);
480 	b43legacy_phy_write(dev, 0x0032, 0x00CA);
481 	b43legacy_phy_write(dev, 0x0032, 0x00CC);
482 	b43legacy_phy_write(dev, 0x0035, 0x07C2);
483 	b43legacy_phy_lo_b_measure(dev);
484 	b43legacy_phy_write(dev, 0x0026, 0xCC00);
485 	if (phy->radio_ver != 0x2050)
486 		b43legacy_phy_write(dev, 0x0026, 0xCE00);
487 	b43legacy_write16(dev, B43legacy_MMIO_CHANNEL_EXT, 0x1000);
488 	b43legacy_phy_write(dev, 0x002A, 0x88A3);
489 	if (phy->radio_ver != 0x2050)
490 		b43legacy_phy_write(dev, 0x002A, 0x88C2);
491 	b43legacy_radio_set_txpower_bg(dev, 0xFFFF, 0xFFFF, 0xFFFF);
492 	b43legacy_phy_init_pctl(dev);
493 }
494 
495 static void b43legacy_phy_initb4(struct b43legacy_wldev *dev)
496 {
497 	struct b43legacy_phy *phy = &dev->phy;
498 	u16 offset;
499 	u16 val;
500 
501 	b43legacy_write16(dev, 0x03EC, 0x3F22);
502 	b43legacy_phy_write(dev, 0x0020, 0x301C);
503 	b43legacy_phy_write(dev, 0x0026, 0x0000);
504 	b43legacy_phy_write(dev, 0x0030, 0x00C6);
505 	b43legacy_phy_write(dev, 0x0088, 0x3E00);
506 	val = 0x3C3D;
507 	for (offset = 0x0089; offset < 0x00A7; offset++) {
508 		b43legacy_phy_write(dev, offset, val);
509 		val -= 0x0202;
510 	}
511 	b43legacy_phy_write(dev, 0x03E4, 0x3000);
512 	b43legacy_radio_selectchannel(dev, phy->channel, 0);
513 	if (phy->radio_ver != 0x2050) {
514 		b43legacy_radio_write16(dev, 0x0075, 0x0080);
515 		b43legacy_radio_write16(dev, 0x0079, 0x0081);
516 	}
517 	b43legacy_radio_write16(dev, 0x0050, 0x0020);
518 	b43legacy_radio_write16(dev, 0x0050, 0x0023);
519 	if (phy->radio_ver == 0x2050) {
520 		b43legacy_radio_write16(dev, 0x0050, 0x0020);
521 		b43legacy_radio_write16(dev, 0x005A, 0x0070);
522 		b43legacy_radio_write16(dev, 0x005B, 0x007B);
523 		b43legacy_radio_write16(dev, 0x005C, 0x00B0);
524 		b43legacy_radio_write16(dev, 0x007A, 0x000F);
525 		b43legacy_phy_write(dev, 0x0038, 0x0677);
526 		b43legacy_radio_init2050(dev);
527 	}
528 	b43legacy_phy_write(dev, 0x0014, 0x0080);
529 	b43legacy_phy_write(dev, 0x0032, 0x00CA);
530 	if (phy->radio_ver == 0x2050)
531 		b43legacy_phy_write(dev, 0x0032, 0x00E0);
532 	b43legacy_phy_write(dev, 0x0035, 0x07C2);
533 
534 	b43legacy_phy_lo_b_measure(dev);
535 
536 	b43legacy_phy_write(dev, 0x0026, 0xCC00);
537 	if (phy->radio_ver == 0x2050)
538 		b43legacy_phy_write(dev, 0x0026, 0xCE00);
539 	b43legacy_write16(dev, B43legacy_MMIO_CHANNEL_EXT, 0x1100);
540 	b43legacy_phy_write(dev, 0x002A, 0x88A3);
541 	if (phy->radio_ver == 0x2050)
542 		b43legacy_phy_write(dev, 0x002A, 0x88C2);
543 	b43legacy_radio_set_txpower_bg(dev, 0xFFFF, 0xFFFF, 0xFFFF);
544 	if (dev->dev->bus->sprom.boardflags_lo & B43legacy_BFL_RSSI) {
545 		b43legacy_calc_nrssi_slope(dev);
546 		b43legacy_calc_nrssi_threshold(dev);
547 	}
548 	b43legacy_phy_init_pctl(dev);
549 }
550 
551 static void b43legacy_phy_initb5(struct b43legacy_wldev *dev)
552 {
553 	struct b43legacy_phy *phy = &dev->phy;
554 	u16 offset;
555 	u16 value;
556 	u8 old_channel;
557 
558 	if (phy->analog == 1)
559 		b43legacy_radio_write16(dev, 0x007A,
560 					b43legacy_radio_read16(dev, 0x007A)
561 					| 0x0050);
562 	if (!is_bcm_board_vendor(dev) &&
563 	    (dev->dev->bus->boardinfo.type != 0x0416)) {
564 		value = 0x2120;
565 		for (offset = 0x00A8 ; offset < 0x00C7; offset++) {
566 			b43legacy_phy_write(dev, offset, value);
567 			value += 0x0202;
568 		}
569 	}
570 	b43legacy_phy_write(dev, 0x0035,
571 			    (b43legacy_phy_read(dev, 0x0035) & 0xF0FF)
572 			    | 0x0700);
573 	if (phy->radio_ver == 0x2050)
574 		b43legacy_phy_write(dev, 0x0038, 0x0667);
575 
576 	if (phy->gmode) {
577 		if (phy->radio_ver == 0x2050) {
578 			b43legacy_radio_write16(dev, 0x007A,
579 					b43legacy_radio_read16(dev, 0x007A)
580 					| 0x0020);
581 			b43legacy_radio_write16(dev, 0x0051,
582 					b43legacy_radio_read16(dev, 0x0051)
583 					| 0x0004);
584 		}
585 		b43legacy_write16(dev, B43legacy_MMIO_PHY_RADIO, 0x0000);
586 
587 		b43legacy_phy_write(dev, 0x0802, b43legacy_phy_read(dev, 0x0802)
588 				    | 0x0100);
589 		b43legacy_phy_write(dev, 0x042B, b43legacy_phy_read(dev, 0x042B)
590 				    | 0x2000);
591 
592 		b43legacy_phy_write(dev, 0x001C, 0x186A);
593 
594 		b43legacy_phy_write(dev, 0x0013, (b43legacy_phy_read(dev,
595 				    0x0013) & 0x00FF) | 0x1900);
596 		b43legacy_phy_write(dev, 0x0035, (b43legacy_phy_read(dev,
597 				    0x0035) & 0xFFC0) | 0x0064);
598 		b43legacy_phy_write(dev, 0x005D, (b43legacy_phy_read(dev,
599 				    0x005D) & 0xFF80) | 0x000A);
600 		b43legacy_phy_write(dev, 0x5B, 0x0000);
601 		b43legacy_phy_write(dev, 0x5C, 0x0000);
602 	}
603 
604 	if (dev->bad_frames_preempt)
605 		b43legacy_phy_write(dev, B43legacy_PHY_RADIO_BITFIELD,
606 				    b43legacy_phy_read(dev,
607 				    B43legacy_PHY_RADIO_BITFIELD) | (1 << 12));
608 
609 	if (phy->analog == 1) {
610 		b43legacy_phy_write(dev, 0x0026, 0xCE00);
611 		b43legacy_phy_write(dev, 0x0021, 0x3763);
612 		b43legacy_phy_write(dev, 0x0022, 0x1BC3);
613 		b43legacy_phy_write(dev, 0x0023, 0x06F9);
614 		b43legacy_phy_write(dev, 0x0024, 0x037E);
615 	} else
616 		b43legacy_phy_write(dev, 0x0026, 0xCC00);
617 	b43legacy_phy_write(dev, 0x0030, 0x00C6);
618 	b43legacy_write16(dev, 0x03EC, 0x3F22);
619 
620 	if (phy->analog == 1)
621 		b43legacy_phy_write(dev, 0x0020, 0x3E1C);
622 	else
623 		b43legacy_phy_write(dev, 0x0020, 0x301C);
624 
625 	if (phy->analog == 0)
626 		b43legacy_write16(dev, 0x03E4, 0x3000);
627 
628 	old_channel = (phy->channel == 0xFF) ? 1 : phy->channel;
629 	/* Force to channel 7, even if not supported. */
630 	b43legacy_radio_selectchannel(dev, 7, 0);
631 
632 	if (phy->radio_ver != 0x2050) {
633 		b43legacy_radio_write16(dev, 0x0075, 0x0080);
634 		b43legacy_radio_write16(dev, 0x0079, 0x0081);
635 	}
636 
637 	b43legacy_radio_write16(dev, 0x0050, 0x0020);
638 	b43legacy_radio_write16(dev, 0x0050, 0x0023);
639 
640 	if (phy->radio_ver == 0x2050) {
641 		b43legacy_radio_write16(dev, 0x0050, 0x0020);
642 		b43legacy_radio_write16(dev, 0x005A, 0x0070);
643 	}
644 
645 	b43legacy_radio_write16(dev, 0x005B, 0x007B);
646 	b43legacy_radio_write16(dev, 0x005C, 0x00B0);
647 
648 	b43legacy_radio_write16(dev, 0x007A, b43legacy_radio_read16(dev,
649 				0x007A) | 0x0007);
650 
651 	b43legacy_radio_selectchannel(dev, old_channel, 0);
652 
653 	b43legacy_phy_write(dev, 0x0014, 0x0080);
654 	b43legacy_phy_write(dev, 0x0032, 0x00CA);
655 	b43legacy_phy_write(dev, 0x002A, 0x88A3);
656 
657 	b43legacy_radio_set_txpower_bg(dev, 0xFFFF, 0xFFFF, 0xFFFF);
658 
659 	if (phy->radio_ver == 0x2050)
660 		b43legacy_radio_write16(dev, 0x005D, 0x000D);
661 
662 	b43legacy_write16(dev, 0x03E4, (b43legacy_read16(dev, 0x03E4) &
663 			  0xFFC0) | 0x0004);
664 }
665 
666 static void b43legacy_phy_initb6(struct b43legacy_wldev *dev)
667 {
668 	struct b43legacy_phy *phy = &dev->phy;
669 	u16 offset;
670 	u16 val;
671 	u8 old_channel;
672 
673 	b43legacy_phy_write(dev, 0x003E, 0x817A);
674 	b43legacy_radio_write16(dev, 0x007A,
675 				(b43legacy_radio_read16(dev, 0x007A) | 0x0058));
676 	if (phy->radio_rev == 4 ||
677 	     phy->radio_rev == 5) {
678 		b43legacy_radio_write16(dev, 0x0051, 0x0037);
679 		b43legacy_radio_write16(dev, 0x0052, 0x0070);
680 		b43legacy_radio_write16(dev, 0x0053, 0x00B3);
681 		b43legacy_radio_write16(dev, 0x0054, 0x009B);
682 		b43legacy_radio_write16(dev, 0x005A, 0x0088);
683 		b43legacy_radio_write16(dev, 0x005B, 0x0088);
684 		b43legacy_radio_write16(dev, 0x005D, 0x0088);
685 		b43legacy_radio_write16(dev, 0x005E, 0x0088);
686 		b43legacy_radio_write16(dev, 0x007D, 0x0088);
687 		b43legacy_shm_write32(dev, B43legacy_SHM_SHARED,
688 				      B43legacy_UCODEFLAGS_OFFSET,
689 				      (b43legacy_shm_read32(dev,
690 				      B43legacy_SHM_SHARED,
691 				      B43legacy_UCODEFLAGS_OFFSET)
692 				      | 0x00000200));
693 	}
694 	if (phy->radio_rev == 8) {
695 		b43legacy_radio_write16(dev, 0x0051, 0x0000);
696 		b43legacy_radio_write16(dev, 0x0052, 0x0040);
697 		b43legacy_radio_write16(dev, 0x0053, 0x00B7);
698 		b43legacy_radio_write16(dev, 0x0054, 0x0098);
699 		b43legacy_radio_write16(dev, 0x005A, 0x0088);
700 		b43legacy_radio_write16(dev, 0x005B, 0x006B);
701 		b43legacy_radio_write16(dev, 0x005C, 0x000F);
702 		if (dev->dev->bus->sprom.boardflags_lo & 0x8000) {
703 			b43legacy_radio_write16(dev, 0x005D, 0x00FA);
704 			b43legacy_radio_write16(dev, 0x005E, 0x00D8);
705 		} else {
706 			b43legacy_radio_write16(dev, 0x005D, 0x00F5);
707 			b43legacy_radio_write16(dev, 0x005E, 0x00B8);
708 		}
709 		b43legacy_radio_write16(dev, 0x0073, 0x0003);
710 		b43legacy_radio_write16(dev, 0x007D, 0x00A8);
711 		b43legacy_radio_write16(dev, 0x007C, 0x0001);
712 		b43legacy_radio_write16(dev, 0x007E, 0x0008);
713 	}
714 	val = 0x1E1F;
715 	for (offset = 0x0088; offset < 0x0098; offset++) {
716 		b43legacy_phy_write(dev, offset, val);
717 		val -= 0x0202;
718 	}
719 	val = 0x3E3F;
720 	for (offset = 0x0098; offset < 0x00A8; offset++) {
721 		b43legacy_phy_write(dev, offset, val);
722 		val -= 0x0202;
723 	}
724 	val = 0x2120;
725 	for (offset = 0x00A8; offset < 0x00C8; offset++) {
726 		b43legacy_phy_write(dev, offset, (val & 0x3F3F));
727 		val += 0x0202;
728 	}
729 	if (phy->type == B43legacy_PHYTYPE_G) {
730 		b43legacy_radio_write16(dev, 0x007A,
731 					b43legacy_radio_read16(dev, 0x007A) |
732 					0x0020);
733 		b43legacy_radio_write16(dev, 0x0051,
734 					b43legacy_radio_read16(dev, 0x0051) |
735 					0x0004);
736 		b43legacy_phy_write(dev, 0x0802,
737 				    b43legacy_phy_read(dev, 0x0802) | 0x0100);
738 		b43legacy_phy_write(dev, 0x042B,
739 				    b43legacy_phy_read(dev, 0x042B) | 0x2000);
740 		b43legacy_phy_write(dev, 0x5B, 0x0000);
741 		b43legacy_phy_write(dev, 0x5C, 0x0000);
742 	}
743 
744 	old_channel = phy->channel;
745 	if (old_channel >= 8)
746 		b43legacy_radio_selectchannel(dev, 1, 0);
747 	else
748 		b43legacy_radio_selectchannel(dev, 13, 0);
749 
750 	b43legacy_radio_write16(dev, 0x0050, 0x0020);
751 	b43legacy_radio_write16(dev, 0x0050, 0x0023);
752 	udelay(40);
753 	if (phy->radio_rev < 6 || phy->radio_rev == 8) {
754 		b43legacy_radio_write16(dev, 0x007C,
755 					(b43legacy_radio_read16(dev, 0x007C)
756 					| 0x0002));
757 		b43legacy_radio_write16(dev, 0x0050, 0x0020);
758 	}
759 	if (phy->radio_rev <= 2) {
760 		b43legacy_radio_write16(dev, 0x0050, 0x0020);
761 		b43legacy_radio_write16(dev, 0x005A, 0x0070);
762 		b43legacy_radio_write16(dev, 0x005B, 0x007B);
763 		b43legacy_radio_write16(dev, 0x005C, 0x00B0);
764 	}
765 	b43legacy_radio_write16(dev, 0x007A,
766 				(b43legacy_radio_read16(dev,
767 				0x007A) & 0x00F8) | 0x0007);
768 
769 	b43legacy_radio_selectchannel(dev, old_channel, 0);
770 
771 	b43legacy_phy_write(dev, 0x0014, 0x0200);
772 	if (phy->radio_rev >= 6)
773 		b43legacy_phy_write(dev, 0x002A, 0x88C2);
774 	else
775 		b43legacy_phy_write(dev, 0x002A, 0x8AC0);
776 	b43legacy_phy_write(dev, 0x0038, 0x0668);
777 	b43legacy_radio_set_txpower_bg(dev, 0xFFFF, 0xFFFF, 0xFFFF);
778 	if (phy->radio_rev == 4 || phy->radio_rev == 5)
779 		b43legacy_phy_write(dev, 0x005D, (b43legacy_phy_read(dev,
780 				    0x005D) & 0xFF80) | 0x0003);
781 	if (phy->radio_rev <= 2)
782 		b43legacy_radio_write16(dev, 0x005D, 0x000D);
783 
784 	if (phy->analog == 4) {
785 		b43legacy_write16(dev, 0x03E4, 0x0009);
786 		b43legacy_phy_write(dev, 0x61, b43legacy_phy_read(dev, 0x61)
787 				    & 0xFFF);
788 	} else
789 		b43legacy_phy_write(dev, 0x0002, (b43legacy_phy_read(dev,
790 				    0x0002) & 0xFFC0) | 0x0004);
791 	if (phy->type == B43legacy_PHYTYPE_G)
792 		b43legacy_write16(dev, 0x03E6, 0x0);
793 	if (phy->type == B43legacy_PHYTYPE_B) {
794 		b43legacy_write16(dev, 0x03E6, 0x8140);
795 		b43legacy_phy_write(dev, 0x0016, 0x0410);
796 		b43legacy_phy_write(dev, 0x0017, 0x0820);
797 		b43legacy_phy_write(dev, 0x0062, 0x0007);
798 		b43legacy_radio_init2050(dev);
799 		b43legacy_phy_lo_g_measure(dev);
800 		if (dev->dev->bus->sprom.boardflags_lo &
801 		    B43legacy_BFL_RSSI) {
802 			b43legacy_calc_nrssi_slope(dev);
803 			b43legacy_calc_nrssi_threshold(dev);
804 		}
805 		b43legacy_phy_init_pctl(dev);
806 	}
807 }
808 
809 static void b43legacy_calc_loopback_gain(struct b43legacy_wldev *dev)
810 {
811 	struct b43legacy_phy *phy = &dev->phy;
812 	u16 backup_phy[15] = {0};
813 	u16 backup_radio[3];
814 	u16 backup_bband;
815 	u16 i;
816 	u16 loop1_cnt;
817 	u16 loop1_done;
818 	u16 loop1_omitted;
819 	u16 loop2_done;
820 
821 	backup_phy[0] = b43legacy_phy_read(dev, 0x0429);
822 	backup_phy[1] = b43legacy_phy_read(dev, 0x0001);
823 	backup_phy[2] = b43legacy_phy_read(dev, 0x0811);
824 	backup_phy[3] = b43legacy_phy_read(dev, 0x0812);
825 	if (phy->rev != 1) {
826 		backup_phy[4] = b43legacy_phy_read(dev, 0x0814);
827 		backup_phy[5] = b43legacy_phy_read(dev, 0x0815);
828 	}
829 	backup_phy[6] = b43legacy_phy_read(dev, 0x005A);
830 	backup_phy[7] = b43legacy_phy_read(dev, 0x0059);
831 	backup_phy[8] = b43legacy_phy_read(dev, 0x0058);
832 	backup_phy[9] = b43legacy_phy_read(dev, 0x000A);
833 	backup_phy[10] = b43legacy_phy_read(dev, 0x0003);
834 	backup_phy[11] = b43legacy_phy_read(dev, 0x080F);
835 	backup_phy[12] = b43legacy_phy_read(dev, 0x0810);
836 	backup_phy[13] = b43legacy_phy_read(dev, 0x002B);
837 	backup_phy[14] = b43legacy_phy_read(dev, 0x0015);
838 	b43legacy_phy_read(dev, 0x002D); /* dummy read */
839 	backup_bband = phy->bbatt;
840 	backup_radio[0] = b43legacy_radio_read16(dev, 0x0052);
841 	backup_radio[1] = b43legacy_radio_read16(dev, 0x0043);
842 	backup_radio[2] = b43legacy_radio_read16(dev, 0x007A);
843 
844 	b43legacy_phy_write(dev, 0x0429,
845 			    b43legacy_phy_read(dev, 0x0429) & 0x3FFF);
846 	b43legacy_phy_write(dev, 0x0001,
847 			    b43legacy_phy_read(dev, 0x0001) & 0x8000);
848 	b43legacy_phy_write(dev, 0x0811,
849 			    b43legacy_phy_read(dev, 0x0811) | 0x0002);
850 	b43legacy_phy_write(dev, 0x0812,
851 			    b43legacy_phy_read(dev, 0x0812) & 0xFFFD);
852 	b43legacy_phy_write(dev, 0x0811,
853 			    b43legacy_phy_read(dev, 0x0811) | 0x0001);
854 	b43legacy_phy_write(dev, 0x0812,
855 			    b43legacy_phy_read(dev, 0x0812) & 0xFFFE);
856 	if (phy->rev != 1) {
857 		b43legacy_phy_write(dev, 0x0814,
858 				    b43legacy_phy_read(dev, 0x0814) | 0x0001);
859 		b43legacy_phy_write(dev, 0x0815,
860 				    b43legacy_phy_read(dev, 0x0815) & 0xFFFE);
861 		b43legacy_phy_write(dev, 0x0814,
862 				    b43legacy_phy_read(dev, 0x0814) | 0x0002);
863 		b43legacy_phy_write(dev, 0x0815,
864 				    b43legacy_phy_read(dev, 0x0815) & 0xFFFD);
865 	}
866 	b43legacy_phy_write(dev, 0x0811, b43legacy_phy_read(dev, 0x0811) |
867 			    0x000C);
868 	b43legacy_phy_write(dev, 0x0812, b43legacy_phy_read(dev, 0x0812) |
869 			    0x000C);
870 
871 	b43legacy_phy_write(dev, 0x0811, (b43legacy_phy_read(dev, 0x0811)
872 			    & 0xFFCF) | 0x0030);
873 	b43legacy_phy_write(dev, 0x0812, (b43legacy_phy_read(dev, 0x0812)
874 			    & 0xFFCF) | 0x0010);
875 
876 	b43legacy_phy_write(dev, 0x005A, 0x0780);
877 	b43legacy_phy_write(dev, 0x0059, 0xC810);
878 	b43legacy_phy_write(dev, 0x0058, 0x000D);
879 	if (phy->analog == 0)
880 		b43legacy_phy_write(dev, 0x0003, 0x0122);
881 	else
882 		b43legacy_phy_write(dev, 0x000A,
883 				    b43legacy_phy_read(dev, 0x000A)
884 				    | 0x2000);
885 	if (phy->rev != 1) {
886 		b43legacy_phy_write(dev, 0x0814,
887 				    b43legacy_phy_read(dev, 0x0814) | 0x0004);
888 		b43legacy_phy_write(dev, 0x0815,
889 				    b43legacy_phy_read(dev, 0x0815) & 0xFFFB);
890 	}
891 	b43legacy_phy_write(dev, 0x0003,
892 			    (b43legacy_phy_read(dev, 0x0003)
893 			     & 0xFF9F) | 0x0040);
894 	if (phy->radio_ver == 0x2050 && phy->radio_rev == 2) {
895 		b43legacy_radio_write16(dev, 0x0052, 0x0000);
896 		b43legacy_radio_write16(dev, 0x0043,
897 					(b43legacy_radio_read16(dev, 0x0043)
898 					 & 0xFFF0) | 0x0009);
899 		loop1_cnt = 9;
900 	} else if (phy->radio_rev == 8) {
901 		b43legacy_radio_write16(dev, 0x0043, 0x000F);
902 		loop1_cnt = 15;
903 	} else
904 		loop1_cnt = 0;
905 
906 	b43legacy_phy_set_baseband_attenuation(dev, 11);
907 
908 	if (phy->rev >= 3)
909 		b43legacy_phy_write(dev, 0x080F, 0xC020);
910 	else
911 		b43legacy_phy_write(dev, 0x080F, 0x8020);
912 	b43legacy_phy_write(dev, 0x0810, 0x0000);
913 
914 	b43legacy_phy_write(dev, 0x002B,
915 			    (b43legacy_phy_read(dev, 0x002B)
916 			     & 0xFFC0) | 0x0001);
917 	b43legacy_phy_write(dev, 0x002B,
918 			    (b43legacy_phy_read(dev, 0x002B)
919 			     & 0xC0FF) | 0x0800);
920 	b43legacy_phy_write(dev, 0x0811,
921 			    b43legacy_phy_read(dev, 0x0811) | 0x0100);
922 	b43legacy_phy_write(dev, 0x0812,
923 			    b43legacy_phy_read(dev, 0x0812) & 0xCFFF);
924 	if (dev->dev->bus->sprom.boardflags_lo & B43legacy_BFL_EXTLNA) {
925 		if (phy->rev >= 7) {
926 			b43legacy_phy_write(dev, 0x0811,
927 					    b43legacy_phy_read(dev, 0x0811)
928 					    | 0x0800);
929 			b43legacy_phy_write(dev, 0x0812,
930 					    b43legacy_phy_read(dev, 0x0812)
931 					    | 0x8000);
932 		}
933 	}
934 	b43legacy_radio_write16(dev, 0x007A,
935 				b43legacy_radio_read16(dev, 0x007A)
936 				& 0x00F7);
937 
938 	for (i = 0; i < loop1_cnt; i++) {
939 		b43legacy_radio_write16(dev, 0x0043, loop1_cnt);
940 		b43legacy_phy_write(dev, 0x0812,
941 				    (b43legacy_phy_read(dev, 0x0812)
942 				     & 0xF0FF) | (i << 8));
943 		b43legacy_phy_write(dev, 0x0015,
944 				    (b43legacy_phy_read(dev, 0x0015)
945 				     & 0x0FFF) | 0xA000);
946 		b43legacy_phy_write(dev, 0x0015,
947 				    (b43legacy_phy_read(dev, 0x0015)
948 				     & 0x0FFF) | 0xF000);
949 		udelay(20);
950 		if (b43legacy_phy_read(dev, 0x002D) >= 0x0DFC)
951 			break;
952 	}
953 	loop1_done = i;
954 	loop1_omitted = loop1_cnt - loop1_done;
955 
956 	loop2_done = 0;
957 	if (loop1_done >= 8) {
958 		b43legacy_phy_write(dev, 0x0812,
959 				    b43legacy_phy_read(dev, 0x0812)
960 				    | 0x0030);
961 		for (i = loop1_done - 8; i < 16; i++) {
962 			b43legacy_phy_write(dev, 0x0812,
963 					    (b43legacy_phy_read(dev, 0x0812)
964 					     & 0xF0FF) | (i << 8));
965 			b43legacy_phy_write(dev, 0x0015,
966 					    (b43legacy_phy_read(dev, 0x0015)
967 					     & 0x0FFF) | 0xA000);
968 			b43legacy_phy_write(dev, 0x0015,
969 					    (b43legacy_phy_read(dev, 0x0015)
970 					     & 0x0FFF) | 0xF000);
971 			udelay(20);
972 			if (b43legacy_phy_read(dev, 0x002D) >= 0x0DFC)
973 				break;
974 		}
975 	}
976 
977 	if (phy->rev != 1) {
978 		b43legacy_phy_write(dev, 0x0814, backup_phy[4]);
979 		b43legacy_phy_write(dev, 0x0815, backup_phy[5]);
980 	}
981 	b43legacy_phy_write(dev, 0x005A, backup_phy[6]);
982 	b43legacy_phy_write(dev, 0x0059, backup_phy[7]);
983 	b43legacy_phy_write(dev, 0x0058, backup_phy[8]);
984 	b43legacy_phy_write(dev, 0x000A, backup_phy[9]);
985 	b43legacy_phy_write(dev, 0x0003, backup_phy[10]);
986 	b43legacy_phy_write(dev, 0x080F, backup_phy[11]);
987 	b43legacy_phy_write(dev, 0x0810, backup_phy[12]);
988 	b43legacy_phy_write(dev, 0x002B, backup_phy[13]);
989 	b43legacy_phy_write(dev, 0x0015, backup_phy[14]);
990 
991 	b43legacy_phy_set_baseband_attenuation(dev, backup_bband);
992 
993 	b43legacy_radio_write16(dev, 0x0052, backup_radio[0]);
994 	b43legacy_radio_write16(dev, 0x0043, backup_radio[1]);
995 	b43legacy_radio_write16(dev, 0x007A, backup_radio[2]);
996 
997 	b43legacy_phy_write(dev, 0x0811, backup_phy[2] | 0x0003);
998 	udelay(10);
999 	b43legacy_phy_write(dev, 0x0811, backup_phy[2]);
1000 	b43legacy_phy_write(dev, 0x0812, backup_phy[3]);
1001 	b43legacy_phy_write(dev, 0x0429, backup_phy[0]);
1002 	b43legacy_phy_write(dev, 0x0001, backup_phy[1]);
1003 
1004 	phy->loopback_gain[0] = ((loop1_done * 6) - (loop1_omitted * 4)) - 11;
1005 	phy->loopback_gain[1] = (24 - (3 * loop2_done)) * 2;
1006 }
1007 
1008 static void b43legacy_phy_initg(struct b43legacy_wldev *dev)
1009 {
1010 	struct b43legacy_phy *phy = &dev->phy;
1011 	u16 tmp;
1012 
1013 	if (phy->rev == 1)
1014 		b43legacy_phy_initb5(dev);
1015 	else
1016 		b43legacy_phy_initb6(dev);
1017 	if (phy->rev >= 2 && phy->gmode)
1018 		b43legacy_phy_inita(dev);
1019 
1020 	if (phy->rev >= 2) {
1021 		b43legacy_phy_write(dev, 0x0814, 0x0000);
1022 		b43legacy_phy_write(dev, 0x0815, 0x0000);
1023 	}
1024 	if (phy->rev == 2) {
1025 		b43legacy_phy_write(dev, 0x0811, 0x0000);
1026 		b43legacy_phy_write(dev, 0x0015, 0x00C0);
1027 	}
1028 	if (phy->rev > 5) {
1029 		b43legacy_phy_write(dev, 0x0811, 0x0400);
1030 		b43legacy_phy_write(dev, 0x0015, 0x00C0);
1031 	}
1032 	if (phy->gmode) {
1033 		tmp = b43legacy_phy_read(dev, 0x0400) & 0xFF;
1034 		if (tmp == 3) {
1035 			b43legacy_phy_write(dev, 0x04C2, 0x1816);
1036 			b43legacy_phy_write(dev, 0x04C3, 0x8606);
1037 		}
1038 		if (tmp == 4 || tmp == 5) {
1039 			b43legacy_phy_write(dev, 0x04C2, 0x1816);
1040 			b43legacy_phy_write(dev, 0x04C3, 0x8006);
1041 			b43legacy_phy_write(dev, 0x04CC,
1042 					    (b43legacy_phy_read(dev,
1043 					     0x04CC) & 0x00FF) |
1044 					     0x1F00);
1045 		}
1046 		if (phy->rev >= 2)
1047 			b43legacy_phy_write(dev, 0x047E, 0x0078);
1048 	}
1049 	if (phy->radio_rev == 8) {
1050 		b43legacy_phy_write(dev, 0x0801, b43legacy_phy_read(dev, 0x0801)
1051 				    | 0x0080);
1052 		b43legacy_phy_write(dev, 0x043E, b43legacy_phy_read(dev, 0x043E)
1053 				    | 0x0004);
1054 	}
1055 	if (phy->rev >= 2 && phy->gmode)
1056 		b43legacy_calc_loopback_gain(dev);
1057 	if (phy->radio_rev != 8) {
1058 		if (phy->initval == 0xFFFF)
1059 			phy->initval = b43legacy_radio_init2050(dev);
1060 		else
1061 			b43legacy_radio_write16(dev, 0x0078, phy->initval);
1062 	}
1063 	if (phy->txctl2 == 0xFFFF)
1064 		b43legacy_phy_lo_g_measure(dev);
1065 	else {
1066 		if (phy->radio_ver == 0x2050 && phy->radio_rev == 8)
1067 			b43legacy_radio_write16(dev, 0x0052,
1068 						(phy->txctl1 << 4) |
1069 						phy->txctl2);
1070 		else
1071 			b43legacy_radio_write16(dev, 0x0052,
1072 						(b43legacy_radio_read16(dev,
1073 						 0x0052) & 0xFFF0) |
1074 						 phy->txctl1);
1075 		if (phy->rev >= 6)
1076 			b43legacy_phy_write(dev, 0x0036,
1077 					    (b43legacy_phy_read(dev, 0x0036)
1078 					     & 0x0FFF) | (phy->txctl2 << 12));
1079 		if (dev->dev->bus->sprom.boardflags_lo &
1080 		    B43legacy_BFL_PACTRL)
1081 			b43legacy_phy_write(dev, 0x002E, 0x8075);
1082 		else
1083 			b43legacy_phy_write(dev, 0x002E, 0x807F);
1084 		if (phy->rev < 2)
1085 			b43legacy_phy_write(dev, 0x002F, 0x0101);
1086 		else
1087 			b43legacy_phy_write(dev, 0x002F, 0x0202);
1088 	}
1089 	if (phy->gmode) {
1090 		b43legacy_phy_lo_adjust(dev, 0);
1091 		b43legacy_phy_write(dev, 0x080F, 0x8078);
1092 	}
1093 
1094 	if (!(dev->dev->bus->sprom.boardflags_lo & B43legacy_BFL_RSSI)) {
1095 		/* The specs state to update the NRSSI LT with
1096 		 * the value 0x7FFFFFFF here. I think that is some weird
1097 		 * compiler optimization in the original driver.
1098 		 * Essentially, what we do here is resetting all NRSSI LT
1099 		 * entries to -32 (see the clamp_val() in nrssi_hw_update())
1100 		 */
1101 		b43legacy_nrssi_hw_update(dev, 0xFFFF);
1102 		b43legacy_calc_nrssi_threshold(dev);
1103 	} else if (phy->gmode || phy->rev >= 2) {
1104 		if (phy->nrssi[0] == -1000) {
1105 			B43legacy_WARN_ON(phy->nrssi[1] != -1000);
1106 			b43legacy_calc_nrssi_slope(dev);
1107 		} else {
1108 			B43legacy_WARN_ON(phy->nrssi[1] == -1000);
1109 			b43legacy_calc_nrssi_threshold(dev);
1110 		}
1111 	}
1112 	if (phy->radio_rev == 8)
1113 		b43legacy_phy_write(dev, 0x0805, 0x3230);
1114 	b43legacy_phy_init_pctl(dev);
1115 	if (dev->dev->bus->chip_id == 0x4306
1116 	    && dev->dev->bus->chip_package == 2) {
1117 		b43legacy_phy_write(dev, 0x0429,
1118 				    b43legacy_phy_read(dev, 0x0429) & 0xBFFF);
1119 		b43legacy_phy_write(dev, 0x04C3,
1120 				    b43legacy_phy_read(dev, 0x04C3) & 0x7FFF);
1121 	}
1122 }
1123 
1124 static u16 b43legacy_phy_lo_b_r15_loop(struct b43legacy_wldev *dev)
1125 {
1126 	int i;
1127 	u16 ret = 0;
1128 	unsigned long flags;
1129 
1130 	local_irq_save(flags);
1131 	for (i = 0; i < 10; i++) {
1132 		b43legacy_phy_write(dev, 0x0015, 0xAFA0);
1133 		udelay(1);
1134 		b43legacy_phy_write(dev, 0x0015, 0xEFA0);
1135 		udelay(10);
1136 		b43legacy_phy_write(dev, 0x0015, 0xFFA0);
1137 		udelay(40);
1138 		ret += b43legacy_phy_read(dev, 0x002C);
1139 	}
1140 	local_irq_restore(flags);
1141 	b43legacy_voluntary_preempt();
1142 
1143 	return ret;
1144 }
1145 
1146 void b43legacy_phy_lo_b_measure(struct b43legacy_wldev *dev)
1147 {
1148 	struct b43legacy_phy *phy = &dev->phy;
1149 	u16 regstack[12] = { 0 };
1150 	u16 mls;
1151 	u16 fval;
1152 	int i;
1153 	int j;
1154 
1155 	regstack[0] = b43legacy_phy_read(dev, 0x0015);
1156 	regstack[1] = b43legacy_radio_read16(dev, 0x0052) & 0xFFF0;
1157 
1158 	if (phy->radio_ver == 0x2053) {
1159 		regstack[2] = b43legacy_phy_read(dev, 0x000A);
1160 		regstack[3] = b43legacy_phy_read(dev, 0x002A);
1161 		regstack[4] = b43legacy_phy_read(dev, 0x0035);
1162 		regstack[5] = b43legacy_phy_read(dev, 0x0003);
1163 		regstack[6] = b43legacy_phy_read(dev, 0x0001);
1164 		regstack[7] = b43legacy_phy_read(dev, 0x0030);
1165 
1166 		regstack[8] = b43legacy_radio_read16(dev, 0x0043);
1167 		regstack[9] = b43legacy_radio_read16(dev, 0x007A);
1168 		regstack[10] = b43legacy_read16(dev, 0x03EC);
1169 		regstack[11] = b43legacy_radio_read16(dev, 0x0052) & 0x00F0;
1170 
1171 		b43legacy_phy_write(dev, 0x0030, 0x00FF);
1172 		b43legacy_write16(dev, 0x03EC, 0x3F3F);
1173 		b43legacy_phy_write(dev, 0x0035, regstack[4] & 0xFF7F);
1174 		b43legacy_radio_write16(dev, 0x007A, regstack[9] & 0xFFF0);
1175 	}
1176 	b43legacy_phy_write(dev, 0x0015, 0xB000);
1177 	b43legacy_phy_write(dev, 0x002B, 0x0004);
1178 
1179 	if (phy->radio_ver == 0x2053) {
1180 		b43legacy_phy_write(dev, 0x002B, 0x0203);
1181 		b43legacy_phy_write(dev, 0x002A, 0x08A3);
1182 	}
1183 
1184 	phy->minlowsig[0] = 0xFFFF;
1185 
1186 	for (i = 0; i < 4; i++) {
1187 		b43legacy_radio_write16(dev, 0x0052, regstack[1] | i);
1188 		b43legacy_phy_lo_b_r15_loop(dev);
1189 	}
1190 	for (i = 0; i < 10; i++) {
1191 		b43legacy_radio_write16(dev, 0x0052, regstack[1] | i);
1192 		mls = b43legacy_phy_lo_b_r15_loop(dev) / 10;
1193 		if (mls < phy->minlowsig[0]) {
1194 			phy->minlowsig[0] = mls;
1195 			phy->minlowsigpos[0] = i;
1196 		}
1197 	}
1198 	b43legacy_radio_write16(dev, 0x0052, regstack[1]
1199 				| phy->minlowsigpos[0]);
1200 
1201 	phy->minlowsig[1] = 0xFFFF;
1202 
1203 	for (i = -4; i < 5; i += 2) {
1204 		for (j = -4; j < 5; j += 2) {
1205 			if (j < 0)
1206 				fval = (0x0100 * i) + j + 0x0100;
1207 			else
1208 				fval = (0x0100 * i) + j;
1209 			b43legacy_phy_write(dev, 0x002F, fval);
1210 			mls = b43legacy_phy_lo_b_r15_loop(dev) / 10;
1211 			if (mls < phy->minlowsig[1]) {
1212 				phy->minlowsig[1] = mls;
1213 				phy->minlowsigpos[1] = fval;
1214 			}
1215 		}
1216 	}
1217 	phy->minlowsigpos[1] += 0x0101;
1218 
1219 	b43legacy_phy_write(dev, 0x002F, phy->minlowsigpos[1]);
1220 	if (phy->radio_ver == 0x2053) {
1221 		b43legacy_phy_write(dev, 0x000A, regstack[2]);
1222 		b43legacy_phy_write(dev, 0x002A, regstack[3]);
1223 		b43legacy_phy_write(dev, 0x0035, regstack[4]);
1224 		b43legacy_phy_write(dev, 0x0003, regstack[5]);
1225 		b43legacy_phy_write(dev, 0x0001, regstack[6]);
1226 		b43legacy_phy_write(dev, 0x0030, regstack[7]);
1227 
1228 		b43legacy_radio_write16(dev, 0x0043, regstack[8]);
1229 		b43legacy_radio_write16(dev, 0x007A, regstack[9]);
1230 
1231 		b43legacy_radio_write16(dev, 0x0052,
1232 					(b43legacy_radio_read16(dev, 0x0052)
1233 					& 0x000F) | regstack[11]);
1234 
1235 		b43legacy_write16(dev, 0x03EC, regstack[10]);
1236 	}
1237 	b43legacy_phy_write(dev, 0x0015, regstack[0]);
1238 }
1239 
1240 static inline
1241 u16 b43legacy_phy_lo_g_deviation_subval(struct b43legacy_wldev *dev,
1242 					u16 control)
1243 {
1244 	struct b43legacy_phy *phy = &dev->phy;
1245 	u16 ret;
1246 	unsigned long flags;
1247 
1248 	local_irq_save(flags);
1249 	if (phy->gmode) {
1250 		b43legacy_phy_write(dev, 0x15, 0xE300);
1251 		control <<= 8;
1252 		b43legacy_phy_write(dev, 0x0812, control | 0x00B0);
1253 		udelay(5);
1254 		b43legacy_phy_write(dev, 0x0812, control | 0x00B2);
1255 		udelay(2);
1256 		b43legacy_phy_write(dev, 0x0812, control | 0x00B3);
1257 		udelay(4);
1258 		b43legacy_phy_write(dev, 0x0015, 0xF300);
1259 		udelay(8);
1260 	} else {
1261 		b43legacy_phy_write(dev, 0x0015, control | 0xEFA0);
1262 		udelay(2);
1263 		b43legacy_phy_write(dev, 0x0015, control | 0xEFE0);
1264 		udelay(4);
1265 		b43legacy_phy_write(dev, 0x0015, control | 0xFFE0);
1266 		udelay(8);
1267 	}
1268 	ret = b43legacy_phy_read(dev, 0x002D);
1269 	local_irq_restore(flags);
1270 	b43legacy_voluntary_preempt();
1271 
1272 	return ret;
1273 }
1274 
1275 static u32 b43legacy_phy_lo_g_singledeviation(struct b43legacy_wldev *dev,
1276 					      u16 control)
1277 {
1278 	int i;
1279 	u32 ret = 0;
1280 
1281 	for (i = 0; i < 8; i++)
1282 		ret += b43legacy_phy_lo_g_deviation_subval(dev, control);
1283 
1284 	return ret;
1285 }
1286 
1287 /* Write the LocalOscillator CONTROL */
1288 static inline
1289 void b43legacy_lo_write(struct b43legacy_wldev *dev,
1290 			struct b43legacy_lopair *pair)
1291 {
1292 	u16 value;
1293 
1294 	value = (u8)(pair->low);
1295 	value |= ((u8)(pair->high)) << 8;
1296 
1297 #ifdef CONFIG_B43LEGACY_DEBUG
1298 	/* Sanity check. */
1299 	if (pair->low < -8 || pair->low > 8 ||
1300 	    pair->high < -8 || pair->high > 8) {
1301 		b43legacydbg(dev->wl,
1302 		       "WARNING: Writing invalid LOpair "
1303 		       "(low: %d, high: %d)\n",
1304 		       pair->low, pair->high);
1305 		dump_stack();
1306 	}
1307 #endif
1308 
1309 	b43legacy_phy_write(dev, B43legacy_PHY_G_LO_CONTROL, value);
1310 }
1311 
1312 static inline
1313 struct b43legacy_lopair *b43legacy_find_lopair(struct b43legacy_wldev *dev,
1314 					       u16 bbatt,
1315 					       u16 rfatt,
1316 					       u16 tx)
1317 {
1318 	static const u8 dict[10] = { 11, 10, 11, 12, 13, 12, 13, 12, 13, 12 };
1319 	struct b43legacy_phy *phy = &dev->phy;
1320 
1321 	if (bbatt > 6)
1322 		bbatt = 6;
1323 	B43legacy_WARN_ON(rfatt >= 10);
1324 
1325 	if (tx == 3)
1326 		return b43legacy_get_lopair(phy, rfatt, bbatt);
1327 	return b43legacy_get_lopair(phy, dict[rfatt], bbatt);
1328 }
1329 
1330 static inline
1331 struct b43legacy_lopair *b43legacy_current_lopair(struct b43legacy_wldev *dev)
1332 {
1333 	struct b43legacy_phy *phy = &dev->phy;
1334 
1335 	return b43legacy_find_lopair(dev, phy->bbatt,
1336 				     phy->rfatt, phy->txctl1);
1337 }
1338 
1339 /* Adjust B/G LO */
1340 void b43legacy_phy_lo_adjust(struct b43legacy_wldev *dev, int fixed)
1341 {
1342 	struct b43legacy_lopair *pair;
1343 
1344 	if (fixed) {
1345 		/* Use fixed values. Only for initialization. */
1346 		pair = b43legacy_find_lopair(dev, 2, 3, 0);
1347 	} else
1348 		pair = b43legacy_current_lopair(dev);
1349 	b43legacy_lo_write(dev, pair);
1350 }
1351 
1352 static void b43legacy_phy_lo_g_measure_txctl2(struct b43legacy_wldev *dev)
1353 {
1354 	struct b43legacy_phy *phy = &dev->phy;
1355 	u16 txctl2 = 0;
1356 	u16 i;
1357 	u32 smallest;
1358 	u32 tmp;
1359 
1360 	b43legacy_radio_write16(dev, 0x0052, 0x0000);
1361 	udelay(10);
1362 	smallest = b43legacy_phy_lo_g_singledeviation(dev, 0);
1363 	for (i = 0; i < 16; i++) {
1364 		b43legacy_radio_write16(dev, 0x0052, i);
1365 		udelay(10);
1366 		tmp = b43legacy_phy_lo_g_singledeviation(dev, 0);
1367 		if (tmp < smallest) {
1368 			smallest = tmp;
1369 			txctl2 = i;
1370 		}
1371 	}
1372 	phy->txctl2 = txctl2;
1373 }
1374 
1375 static
1376 void b43legacy_phy_lo_g_state(struct b43legacy_wldev *dev,
1377 			      const struct b43legacy_lopair *in_pair,
1378 			      struct b43legacy_lopair *out_pair,
1379 			      u16 r27)
1380 {
1381 	static const struct b43legacy_lopair transitions[8] = {
1382 		{ .high =  1,  .low =  1, },
1383 		{ .high =  1,  .low =  0, },
1384 		{ .high =  1,  .low = -1, },
1385 		{ .high =  0,  .low = -1, },
1386 		{ .high = -1,  .low = -1, },
1387 		{ .high = -1,  .low =  0, },
1388 		{ .high = -1,  .low =  1, },
1389 		{ .high =  0,  .low =  1, },
1390 	};
1391 	struct b43legacy_lopair lowest_transition = {
1392 		.high = in_pair->high,
1393 		.low = in_pair->low,
1394 	};
1395 	struct b43legacy_lopair tmp_pair;
1396 	struct b43legacy_lopair transition;
1397 	int i = 12;
1398 	int state = 0;
1399 	int found_lower;
1400 	int j;
1401 	int begin;
1402 	int end;
1403 	u32 lowest_deviation;
1404 	u32 tmp;
1405 
1406 	/* Note that in_pair and out_pair can point to the same pair.
1407 	 * Be careful. */
1408 
1409 	b43legacy_lo_write(dev, &lowest_transition);
1410 	lowest_deviation = b43legacy_phy_lo_g_singledeviation(dev, r27);
1411 	do {
1412 		found_lower = 0;
1413 		B43legacy_WARN_ON(!(state >= 0 && state <= 8));
1414 		if (state == 0) {
1415 			begin = 1;
1416 			end = 8;
1417 		} else if (state % 2 == 0) {
1418 			begin = state - 1;
1419 			end = state + 1;
1420 		} else {
1421 			begin = state - 2;
1422 			end = state + 2;
1423 		}
1424 		if (begin < 1)
1425 			begin += 8;
1426 		if (end > 8)
1427 			end -= 8;
1428 
1429 		j = begin;
1430 		tmp_pair.high = lowest_transition.high;
1431 		tmp_pair.low = lowest_transition.low;
1432 		while (1) {
1433 			B43legacy_WARN_ON(!(j >= 1 && j <= 8));
1434 			transition.high = tmp_pair.high +
1435 					  transitions[j - 1].high;
1436 			transition.low = tmp_pair.low + transitions[j - 1].low;
1437 			if ((abs(transition.low) < 9)
1438 			     && (abs(transition.high) < 9)) {
1439 				b43legacy_lo_write(dev, &transition);
1440 				tmp = b43legacy_phy_lo_g_singledeviation(dev,
1441 								       r27);
1442 				if (tmp < lowest_deviation) {
1443 					lowest_deviation = tmp;
1444 					state = j;
1445 					found_lower = 1;
1446 
1447 					lowest_transition.high =
1448 								transition.high;
1449 					lowest_transition.low = transition.low;
1450 				}
1451 			}
1452 			if (j == end)
1453 				break;
1454 			if (j == 8)
1455 				j = 1;
1456 			else
1457 				j++;
1458 		}
1459 	} while (i-- && found_lower);
1460 
1461 	out_pair->high = lowest_transition.high;
1462 	out_pair->low = lowest_transition.low;
1463 }
1464 
1465 /* Set the baseband attenuation value on chip. */
1466 void b43legacy_phy_set_baseband_attenuation(struct b43legacy_wldev *dev,
1467 					    u16 bbatt)
1468 {
1469 	struct b43legacy_phy *phy = &dev->phy;
1470 	u16 value;
1471 
1472 	if (phy->analog == 0) {
1473 		value = (b43legacy_read16(dev, 0x03E6) & 0xFFF0);
1474 		value |= (bbatt & 0x000F);
1475 		b43legacy_write16(dev, 0x03E6, value);
1476 		return;
1477 	}
1478 
1479 	if (phy->analog > 1) {
1480 		value = b43legacy_phy_read(dev, 0x0060) & 0xFFC3;
1481 		value |= (bbatt << 2) & 0x003C;
1482 	} else {
1483 		value = b43legacy_phy_read(dev, 0x0060) & 0xFF87;
1484 		value |= (bbatt << 3) & 0x0078;
1485 	}
1486 	b43legacy_phy_write(dev, 0x0060, value);
1487 }
1488 
1489 /* http://bcm-specs.sipsolutions.net/LocalOscillator/Measure */
1490 void b43legacy_phy_lo_g_measure(struct b43legacy_wldev *dev)
1491 {
1492 	static const u8 pairorder[10] = { 3, 1, 5, 7, 9, 2, 0, 4, 6, 8 };
1493 	const int is_initializing = (b43legacy_status(dev)
1494 				     < B43legacy_STAT_STARTED);
1495 	struct b43legacy_phy *phy = &dev->phy;
1496 	u16 h;
1497 	u16 i;
1498 	u16 oldi = 0;
1499 	u16 j;
1500 	struct b43legacy_lopair control;
1501 	struct b43legacy_lopair *tmp_control;
1502 	u16 tmp;
1503 	u16 regstack[16] = { 0 };
1504 	u8 oldchannel;
1505 
1506 	/* XXX: What are these? */
1507 	u8 r27 = 0;
1508 	u16 r31;
1509 
1510 	oldchannel = phy->channel;
1511 	/* Setup */
1512 	if (phy->gmode) {
1513 		regstack[0] = b43legacy_phy_read(dev, B43legacy_PHY_G_CRS);
1514 		regstack[1] = b43legacy_phy_read(dev, 0x0802);
1515 		b43legacy_phy_write(dev, B43legacy_PHY_G_CRS, regstack[0]
1516 				    & 0x7FFF);
1517 		b43legacy_phy_write(dev, 0x0802, regstack[1] & 0xFFFC);
1518 	}
1519 	regstack[3] = b43legacy_read16(dev, 0x03E2);
1520 	b43legacy_write16(dev, 0x03E2, regstack[3] | 0x8000);
1521 	regstack[4] = b43legacy_read16(dev, B43legacy_MMIO_CHANNEL_EXT);
1522 	regstack[5] = b43legacy_phy_read(dev, 0x15);
1523 	regstack[6] = b43legacy_phy_read(dev, 0x2A);
1524 	regstack[7] = b43legacy_phy_read(dev, 0x35);
1525 	regstack[8] = b43legacy_phy_read(dev, 0x60);
1526 	regstack[9] = b43legacy_radio_read16(dev, 0x43);
1527 	regstack[10] = b43legacy_radio_read16(dev, 0x7A);
1528 	regstack[11] = b43legacy_radio_read16(dev, 0x52);
1529 	if (phy->gmode) {
1530 		regstack[12] = b43legacy_phy_read(dev, 0x0811);
1531 		regstack[13] = b43legacy_phy_read(dev, 0x0812);
1532 		regstack[14] = b43legacy_phy_read(dev, 0x0814);
1533 		regstack[15] = b43legacy_phy_read(dev, 0x0815);
1534 	}
1535 	b43legacy_radio_selectchannel(dev, 6, 0);
1536 	if (phy->gmode) {
1537 		b43legacy_phy_write(dev, B43legacy_PHY_G_CRS, regstack[0]
1538 				    & 0x7FFF);
1539 		b43legacy_phy_write(dev, 0x0802, regstack[1] & 0xFFFC);
1540 		b43legacy_dummy_transmission(dev);
1541 	}
1542 	b43legacy_radio_write16(dev, 0x0043, 0x0006);
1543 
1544 	b43legacy_phy_set_baseband_attenuation(dev, 2);
1545 
1546 	b43legacy_write16(dev, B43legacy_MMIO_CHANNEL_EXT, 0x0000);
1547 	b43legacy_phy_write(dev, 0x002E, 0x007F);
1548 	b43legacy_phy_write(dev, 0x080F, 0x0078);
1549 	b43legacy_phy_write(dev, 0x0035, regstack[7] & ~(1 << 7));
1550 	b43legacy_radio_write16(dev, 0x007A, regstack[10] & 0xFFF0);
1551 	b43legacy_phy_write(dev, 0x002B, 0x0203);
1552 	b43legacy_phy_write(dev, 0x002A, 0x08A3);
1553 	if (phy->gmode) {
1554 		b43legacy_phy_write(dev, 0x0814, regstack[14] | 0x0003);
1555 		b43legacy_phy_write(dev, 0x0815, regstack[15] & 0xFFFC);
1556 		b43legacy_phy_write(dev, 0x0811, 0x01B3);
1557 		b43legacy_phy_write(dev, 0x0812, 0x00B2);
1558 	}
1559 	if (is_initializing)
1560 		b43legacy_phy_lo_g_measure_txctl2(dev);
1561 	b43legacy_phy_write(dev, 0x080F, 0x8078);
1562 
1563 	/* Measure */
1564 	control.low = 0;
1565 	control.high = 0;
1566 	for (h = 0; h < 10; h++) {
1567 		/* Loop over each possible RadioAttenuation (0-9) */
1568 		i = pairorder[h];
1569 		if (is_initializing) {
1570 			if (i == 3) {
1571 				control.low = 0;
1572 				control.high = 0;
1573 			} else if (((i % 2 == 1) && (oldi % 2 == 1)) ||
1574 				  ((i % 2 == 0) && (oldi % 2 == 0))) {
1575 				tmp_control = b43legacy_get_lopair(phy, oldi,
1576 								   0);
1577 				memcpy(&control, tmp_control, sizeof(control));
1578 			} else {
1579 				tmp_control = b43legacy_get_lopair(phy, 3, 0);
1580 				memcpy(&control, tmp_control, sizeof(control));
1581 			}
1582 		}
1583 		/* Loop over each possible BasebandAttenuation/2 */
1584 		for (j = 0; j < 4; j++) {
1585 			if (is_initializing) {
1586 				tmp = i * 2 + j;
1587 				r27 = 0;
1588 				r31 = 0;
1589 				if (tmp > 14) {
1590 					r31 = 1;
1591 					if (tmp > 17)
1592 						r27 = 1;
1593 					if (tmp > 19)
1594 						r27 = 2;
1595 				}
1596 			} else {
1597 				tmp_control = b43legacy_get_lopair(phy, i,
1598 								   j * 2);
1599 				if (!tmp_control->used)
1600 					continue;
1601 				memcpy(&control, tmp_control, sizeof(control));
1602 				r27 = 3;
1603 				r31 = 0;
1604 			}
1605 			b43legacy_radio_write16(dev, 0x43, i);
1606 			b43legacy_radio_write16(dev, 0x52, phy->txctl2);
1607 			udelay(10);
1608 			b43legacy_voluntary_preempt();
1609 
1610 			b43legacy_phy_set_baseband_attenuation(dev, j * 2);
1611 
1612 			tmp = (regstack[10] & 0xFFF0);
1613 			if (r31)
1614 				tmp |= 0x0008;
1615 			b43legacy_radio_write16(dev, 0x007A, tmp);
1616 
1617 			tmp_control = b43legacy_get_lopair(phy, i, j * 2);
1618 			b43legacy_phy_lo_g_state(dev, &control, tmp_control,
1619 						 r27);
1620 		}
1621 		oldi = i;
1622 	}
1623 	/* Loop over each possible RadioAttenuation (10-13) */
1624 	for (i = 10; i < 14; i++) {
1625 		/* Loop over each possible BasebandAttenuation/2 */
1626 		for (j = 0; j < 4; j++) {
1627 			if (is_initializing) {
1628 				tmp_control = b43legacy_get_lopair(phy, i - 9,
1629 								 j * 2);
1630 				memcpy(&control, tmp_control, sizeof(control));
1631 				/* FIXME: The next line is wrong, as the
1632 				 * following if statement can never trigger. */
1633 				tmp = (i - 9) * 2 + j - 5;
1634 				r27 = 0;
1635 				r31 = 0;
1636 				if (tmp > 14) {
1637 					r31 = 1;
1638 					if (tmp > 17)
1639 						r27 = 1;
1640 					if (tmp > 19)
1641 						r27 = 2;
1642 				}
1643 			} else {
1644 				tmp_control = b43legacy_get_lopair(phy, i - 9,
1645 								   j * 2);
1646 				if (!tmp_control->used)
1647 					continue;
1648 				memcpy(&control, tmp_control, sizeof(control));
1649 				r27 = 3;
1650 				r31 = 0;
1651 			}
1652 			b43legacy_radio_write16(dev, 0x43, i - 9);
1653 			/* FIXME: shouldn't txctl1 be zero in the next line
1654 			 * and 3 in the loop above? */
1655 			b43legacy_radio_write16(dev, 0x52,
1656 					      phy->txctl2
1657 					      | (3/*txctl1*/ << 4));
1658 			udelay(10);
1659 			b43legacy_voluntary_preempt();
1660 
1661 			b43legacy_phy_set_baseband_attenuation(dev, j * 2);
1662 
1663 			tmp = (regstack[10] & 0xFFF0);
1664 			if (r31)
1665 				tmp |= 0x0008;
1666 			b43legacy_radio_write16(dev, 0x7A, tmp);
1667 
1668 			tmp_control = b43legacy_get_lopair(phy, i, j * 2);
1669 			b43legacy_phy_lo_g_state(dev, &control, tmp_control,
1670 						 r27);
1671 		}
1672 	}
1673 
1674 	/* Restoration */
1675 	if (phy->gmode) {
1676 		b43legacy_phy_write(dev, 0x0015, 0xE300);
1677 		b43legacy_phy_write(dev, 0x0812, (r27 << 8) | 0xA0);
1678 		udelay(5);
1679 		b43legacy_phy_write(dev, 0x0812, (r27 << 8) | 0xA2);
1680 		udelay(2);
1681 		b43legacy_phy_write(dev, 0x0812, (r27 << 8) | 0xA3);
1682 		b43legacy_voluntary_preempt();
1683 	} else
1684 		b43legacy_phy_write(dev, 0x0015, r27 | 0xEFA0);
1685 	b43legacy_phy_lo_adjust(dev, is_initializing);
1686 	b43legacy_phy_write(dev, 0x002E, 0x807F);
1687 	if (phy->gmode)
1688 		b43legacy_phy_write(dev, 0x002F, 0x0202);
1689 	else
1690 		b43legacy_phy_write(dev, 0x002F, 0x0101);
1691 	b43legacy_write16(dev, B43legacy_MMIO_CHANNEL_EXT, regstack[4]);
1692 	b43legacy_phy_write(dev, 0x0015, regstack[5]);
1693 	b43legacy_phy_write(dev, 0x002A, regstack[6]);
1694 	b43legacy_phy_write(dev, 0x0035, regstack[7]);
1695 	b43legacy_phy_write(dev, 0x0060, regstack[8]);
1696 	b43legacy_radio_write16(dev, 0x0043, regstack[9]);
1697 	b43legacy_radio_write16(dev, 0x007A, regstack[10]);
1698 	regstack[11] &= 0x00F0;
1699 	regstack[11] |= (b43legacy_radio_read16(dev, 0x52) & 0x000F);
1700 	b43legacy_radio_write16(dev, 0x52, regstack[11]);
1701 	b43legacy_write16(dev, 0x03E2, regstack[3]);
1702 	if (phy->gmode) {
1703 		b43legacy_phy_write(dev, 0x0811, regstack[12]);
1704 		b43legacy_phy_write(dev, 0x0812, regstack[13]);
1705 		b43legacy_phy_write(dev, 0x0814, regstack[14]);
1706 		b43legacy_phy_write(dev, 0x0815, regstack[15]);
1707 		b43legacy_phy_write(dev, B43legacy_PHY_G_CRS, regstack[0]);
1708 		b43legacy_phy_write(dev, 0x0802, regstack[1]);
1709 	}
1710 	b43legacy_radio_selectchannel(dev, oldchannel, 1);
1711 
1712 #ifdef CONFIG_B43LEGACY_DEBUG
1713 	{
1714 		/* Sanity check for all lopairs. */
1715 		for (i = 0; i < B43legacy_LO_COUNT; i++) {
1716 			tmp_control = phy->_lo_pairs + i;
1717 			if (tmp_control->low < -8 || tmp_control->low > 8 ||
1718 			    tmp_control->high < -8 || tmp_control->high > 8)
1719 				b43legacywarn(dev->wl,
1720 				       "WARNING: Invalid LOpair (low: %d, high:"
1721 				       " %d, index: %d)\n",
1722 				       tmp_control->low, tmp_control->high, i);
1723 		}
1724 	}
1725 #endif /* CONFIG_B43LEGACY_DEBUG */
1726 }
1727 
1728 static
1729 void b43legacy_phy_lo_mark_current_used(struct b43legacy_wldev *dev)
1730 {
1731 	struct b43legacy_lopair *pair;
1732 
1733 	pair = b43legacy_current_lopair(dev);
1734 	pair->used = 1;
1735 }
1736 
1737 void b43legacy_phy_lo_mark_all_unused(struct b43legacy_wldev *dev)
1738 {
1739 	struct b43legacy_phy *phy = &dev->phy;
1740 	struct b43legacy_lopair *pair;
1741 	int i;
1742 
1743 	for (i = 0; i < B43legacy_LO_COUNT; i++) {
1744 		pair = phy->_lo_pairs + i;
1745 		pair->used = 0;
1746 	}
1747 }
1748 
1749 /* http://bcm-specs.sipsolutions.net/EstimatePowerOut
1750  * This function converts a TSSI value to dBm in Q5.2
1751  */
1752 static s8 b43legacy_phy_estimate_power_out(struct b43legacy_wldev *dev, s8 tssi)
1753 {
1754 	struct b43legacy_phy *phy = &dev->phy;
1755 	s8 dbm = 0;
1756 	s32 tmp;
1757 
1758 	tmp = phy->idle_tssi;
1759 	tmp += tssi;
1760 	tmp -= phy->savedpctlreg;
1761 
1762 	switch (phy->type) {
1763 	case B43legacy_PHYTYPE_B:
1764 	case B43legacy_PHYTYPE_G:
1765 		tmp = clamp_val(tmp, 0x00, 0x3F);
1766 		dbm = phy->tssi2dbm[tmp];
1767 		break;
1768 	default:
1769 		B43legacy_BUG_ON(1);
1770 	}
1771 
1772 	return dbm;
1773 }
1774 
1775 /* http://bcm-specs.sipsolutions.net/RecalculateTransmissionPower */
1776 void b43legacy_phy_xmitpower(struct b43legacy_wldev *dev)
1777 {
1778 	struct b43legacy_phy *phy = &dev->phy;
1779 	u16 tmp;
1780 	u16 txpower;
1781 	s8 v0;
1782 	s8 v1;
1783 	s8 v2;
1784 	s8 v3;
1785 	s8 average;
1786 	int max_pwr;
1787 	s16 desired_pwr;
1788 	s16 estimated_pwr;
1789 	s16 pwr_adjust;
1790 	s16 radio_att_delta;
1791 	s16 baseband_att_delta;
1792 	s16 radio_attenuation;
1793 	s16 baseband_attenuation;
1794 
1795 	if (phy->savedpctlreg == 0xFFFF)
1796 		return;
1797 	if ((dev->dev->bus->boardinfo.type == 0x0416) &&
1798 	    is_bcm_board_vendor(dev))
1799 		return;
1800 #ifdef CONFIG_B43LEGACY_DEBUG
1801 	if (phy->manual_txpower_control)
1802 		return;
1803 #endif
1804 
1805 	B43legacy_BUG_ON(!(phy->type == B43legacy_PHYTYPE_B ||
1806 			 phy->type == B43legacy_PHYTYPE_G));
1807 	tmp = b43legacy_shm_read16(dev, B43legacy_SHM_SHARED, 0x0058);
1808 	v0 = (s8)(tmp & 0x00FF);
1809 	v1 = (s8)((tmp & 0xFF00) >> 8);
1810 	tmp = b43legacy_shm_read16(dev, B43legacy_SHM_SHARED, 0x005A);
1811 	v2 = (s8)(tmp & 0x00FF);
1812 	v3 = (s8)((tmp & 0xFF00) >> 8);
1813 	tmp = 0;
1814 
1815 	if (v0 == 0x7F || v1 == 0x7F || v2 == 0x7F || v3 == 0x7F) {
1816 		tmp = b43legacy_shm_read16(dev, B43legacy_SHM_SHARED,
1817 					 0x0070);
1818 		v0 = (s8)(tmp & 0x00FF);
1819 		v1 = (s8)((tmp & 0xFF00) >> 8);
1820 		tmp = b43legacy_shm_read16(dev, B43legacy_SHM_SHARED,
1821 					 0x0072);
1822 		v2 = (s8)(tmp & 0x00FF);
1823 		v3 = (s8)((tmp & 0xFF00) >> 8);
1824 		if (v0 == 0x7F || v1 == 0x7F || v2 == 0x7F || v3 == 0x7F)
1825 			return;
1826 		v0 = (v0 + 0x20) & 0x3F;
1827 		v1 = (v1 + 0x20) & 0x3F;
1828 		v2 = (v2 + 0x20) & 0x3F;
1829 		v3 = (v3 + 0x20) & 0x3F;
1830 		tmp = 1;
1831 	}
1832 	b43legacy_radio_clear_tssi(dev);
1833 
1834 	average = (v0 + v1 + v2 + v3 + 2) / 4;
1835 
1836 	if (tmp && (b43legacy_shm_read16(dev, B43legacy_SHM_SHARED, 0x005E)
1837 	    & 0x8))
1838 		average -= 13;
1839 
1840 	estimated_pwr = b43legacy_phy_estimate_power_out(dev, average);
1841 
1842 	max_pwr = dev->dev->bus->sprom.maxpwr_bg;
1843 
1844 	if ((dev->dev->bus->sprom.boardflags_lo
1845 	     & B43legacy_BFL_PACTRL) &&
1846 	    (phy->type == B43legacy_PHYTYPE_G))
1847 		max_pwr -= 0x3;
1848 	if (unlikely(max_pwr <= 0)) {
1849 		b43legacywarn(dev->wl, "Invalid max-TX-power value in SPROM."
1850 			"\n");
1851 		max_pwr = 74; /* fake it */
1852 		dev->dev->bus->sprom.maxpwr_bg = max_pwr;
1853 	}
1854 
1855 	/* Use regulatory information to get the maximum power.
1856 	 * In the absence of such data from mac80211, we will use 20 dBm, which
1857 	 * is the value for the EU, US, Canada, and most of the world.
1858 	 * The regulatory maximum is reduced by the antenna gain (from sprom)
1859 	 * and 1.5 dBm (a safety factor??). The result is in Q5.2 format
1860 	 * which accounts for the factor of 4 */
1861 #define REG_MAX_PWR 20
1862 	max_pwr = min(REG_MAX_PWR * 4
1863 		      - dev->dev->bus->sprom.antenna_gain.a0
1864 		      - 0x6, max_pwr);
1865 
1866 	/* find the desired power in Q5.2 - power_level is in dBm
1867 	 * and limit it - max_pwr is already in Q5.2 */
1868 	desired_pwr = clamp_val(phy->power_level << 2, 0, max_pwr);
1869 	if (b43legacy_debug(dev, B43legacy_DBG_XMITPOWER))
1870 		b43legacydbg(dev->wl, "Current TX power output: " Q52_FMT
1871 		       " dBm, Desired TX power output: " Q52_FMT
1872 		       " dBm\n", Q52_ARG(estimated_pwr),
1873 		       Q52_ARG(desired_pwr));
1874 	/* Check if we need to adjust the current power. The factor of 2 is
1875 	 * for damping */
1876 	pwr_adjust = (desired_pwr - estimated_pwr) / 2;
1877 	/* RF attenuation delta
1878 	 * The minus sign is because lower attenuation => more power */
1879 	radio_att_delta = -(pwr_adjust + 7) >> 3;
1880 	/* Baseband attenuation delta */
1881 	baseband_att_delta = -(pwr_adjust >> 1) - (4 * radio_att_delta);
1882 	/* Do we need to adjust anything? */
1883 	if ((radio_att_delta == 0) && (baseband_att_delta == 0)) {
1884 		b43legacy_phy_lo_mark_current_used(dev);
1885 		return;
1886 	}
1887 
1888 	/* Calculate the new attenuation values. */
1889 	baseband_attenuation = phy->bbatt;
1890 	baseband_attenuation += baseband_att_delta;
1891 	radio_attenuation = phy->rfatt;
1892 	radio_attenuation += radio_att_delta;
1893 
1894 	/* Get baseband and radio attenuation values into permitted ranges.
1895 	 * baseband 0-11, radio 0-9.
1896 	 * Radio attenuation affects power level 4 times as much as baseband.
1897 	 */
1898 	if (radio_attenuation < 0) {
1899 		baseband_attenuation -= (4 * -radio_attenuation);
1900 		radio_attenuation = 0;
1901 	} else if (radio_attenuation > 9) {
1902 		baseband_attenuation += (4 * (radio_attenuation - 9));
1903 		radio_attenuation = 9;
1904 	} else {
1905 		while (baseband_attenuation < 0 && radio_attenuation > 0) {
1906 			baseband_attenuation += 4;
1907 			radio_attenuation--;
1908 		}
1909 		while (baseband_attenuation > 11 && radio_attenuation < 9) {
1910 			baseband_attenuation -= 4;
1911 			radio_attenuation++;
1912 		}
1913 	}
1914 	baseband_attenuation = clamp_val(baseband_attenuation, 0, 11);
1915 
1916 	txpower = phy->txctl1;
1917 	if ((phy->radio_ver == 0x2050) && (phy->radio_rev == 2)) {
1918 		if (radio_attenuation <= 1) {
1919 			if (txpower == 0) {
1920 				txpower = 3;
1921 				radio_attenuation += 2;
1922 				baseband_attenuation += 2;
1923 			} else if (dev->dev->bus->sprom.boardflags_lo
1924 				   & B43legacy_BFL_PACTRL) {
1925 				baseband_attenuation += 4 *
1926 						     (radio_attenuation - 2);
1927 				radio_attenuation = 2;
1928 			}
1929 		} else if (radio_attenuation > 4 && txpower != 0) {
1930 			txpower = 0;
1931 			if (baseband_attenuation < 3) {
1932 				radio_attenuation -= 3;
1933 				baseband_attenuation += 2;
1934 			} else {
1935 				radio_attenuation -= 2;
1936 				baseband_attenuation -= 2;
1937 			}
1938 		}
1939 	}
1940 	/* Save the control values */
1941 	phy->txctl1 = txpower;
1942 	baseband_attenuation = clamp_val(baseband_attenuation, 0, 11);
1943 	radio_attenuation = clamp_val(radio_attenuation, 0, 9);
1944 	phy->rfatt = radio_attenuation;
1945 	phy->bbatt = baseband_attenuation;
1946 
1947 	/* Adjust the hardware */
1948 	b43legacy_phy_lock(dev);
1949 	b43legacy_radio_lock(dev);
1950 	b43legacy_radio_set_txpower_bg(dev, baseband_attenuation,
1951 				       radio_attenuation, txpower);
1952 	b43legacy_phy_lo_mark_current_used(dev);
1953 	b43legacy_radio_unlock(dev);
1954 	b43legacy_phy_unlock(dev);
1955 }
1956 
1957 static inline
1958 s32 b43legacy_tssi2dbm_ad(s32 num, s32 den)
1959 {
1960 	if (num < 0)
1961 		return num/den;
1962 	else
1963 		return (num+den/2)/den;
1964 }
1965 
1966 static inline
1967 s8 b43legacy_tssi2dbm_entry(s8 entry [], u8 index, s16 pab0, s16 pab1, s16 pab2)
1968 {
1969 	s32 m1;
1970 	s32 m2;
1971 	s32 f = 256;
1972 	s32 q;
1973 	s32 delta;
1974 	s8 i = 0;
1975 
1976 	m1 = b43legacy_tssi2dbm_ad(16 * pab0 + index * pab1, 32);
1977 	m2 = max(b43legacy_tssi2dbm_ad(32768 + index * pab2, 256), 1);
1978 	do {
1979 		if (i > 15)
1980 			return -EINVAL;
1981 		q = b43legacy_tssi2dbm_ad(f * 4096 -
1982 					  b43legacy_tssi2dbm_ad(m2 * f, 16) *
1983 					  f, 2048);
1984 		delta = abs(q - f);
1985 		f = q;
1986 		i++;
1987 	} while (delta >= 2);
1988 	entry[index] = clamp_val(b43legacy_tssi2dbm_ad(m1 * f, 8192),
1989 				   -127, 128);
1990 	return 0;
1991 }
1992 
1993 /* http://bcm-specs.sipsolutions.net/TSSI_to_DBM_Table */
1994 int b43legacy_phy_init_tssi2dbm_table(struct b43legacy_wldev *dev)
1995 {
1996 	struct b43legacy_phy *phy = &dev->phy;
1997 	s16 pab0;
1998 	s16 pab1;
1999 	s16 pab2;
2000 	u8 idx;
2001 	s8 *dyn_tssi2dbm;
2002 
2003 	B43legacy_WARN_ON(!(phy->type == B43legacy_PHYTYPE_B ||
2004 			  phy->type == B43legacy_PHYTYPE_G));
2005 	pab0 = (s16)(dev->dev->bus->sprom.pa0b0);
2006 	pab1 = (s16)(dev->dev->bus->sprom.pa0b1);
2007 	pab2 = (s16)(dev->dev->bus->sprom.pa0b2);
2008 
2009 	if ((dev->dev->bus->chip_id == 0x4301) && (phy->radio_ver != 0x2050)) {
2010 		phy->idle_tssi = 0x34;
2011 		phy->tssi2dbm = b43legacy_tssi2dbm_b_table;
2012 		return 0;
2013 	}
2014 
2015 	if (pab0 != 0 && pab1 != 0 && pab2 != 0 &&
2016 	    pab0 != -1 && pab1 != -1 && pab2 != -1) {
2017 		/* The pabX values are set in SPROM. Use them. */
2018 		if ((s8)dev->dev->bus->sprom.itssi_bg != 0 &&
2019 		    (s8)dev->dev->bus->sprom.itssi_bg != -1)
2020 			phy->idle_tssi = (s8)(dev->dev->bus->sprom.
2021 					  itssi_bg);
2022 		else
2023 			phy->idle_tssi = 62;
2024 		dyn_tssi2dbm = kmalloc(64, GFP_KERNEL);
2025 		if (dyn_tssi2dbm == NULL) {
2026 			b43legacyerr(dev->wl, "Could not allocate memory "
2027 			       "for tssi2dbm table\n");
2028 			return -ENOMEM;
2029 		}
2030 		for (idx = 0; idx < 64; idx++)
2031 			if (b43legacy_tssi2dbm_entry(dyn_tssi2dbm, idx, pab0,
2032 						     pab1, pab2)) {
2033 				phy->tssi2dbm = NULL;
2034 				b43legacyerr(dev->wl, "Could not generate "
2035 				       "tssi2dBm table\n");
2036 				kfree(dyn_tssi2dbm);
2037 				return -ENODEV;
2038 			}
2039 		phy->tssi2dbm = dyn_tssi2dbm;
2040 		phy->dyn_tssi_tbl = 1;
2041 	} else {
2042 		/* pabX values not set in SPROM. */
2043 		switch (phy->type) {
2044 		case B43legacy_PHYTYPE_B:
2045 			phy->idle_tssi = 0x34;
2046 			phy->tssi2dbm = b43legacy_tssi2dbm_b_table;
2047 			break;
2048 		case B43legacy_PHYTYPE_G:
2049 			phy->idle_tssi = 0x34;
2050 			phy->tssi2dbm = b43legacy_tssi2dbm_g_table;
2051 			break;
2052 		}
2053 	}
2054 
2055 	return 0;
2056 }
2057 
2058 int b43legacy_phy_init(struct b43legacy_wldev *dev)
2059 {
2060 	struct b43legacy_phy *phy = &dev->phy;
2061 	int err = -ENODEV;
2062 
2063 	switch (phy->type) {
2064 	case B43legacy_PHYTYPE_B:
2065 		switch (phy->rev) {
2066 		case 2:
2067 			b43legacy_phy_initb2(dev);
2068 			err = 0;
2069 			break;
2070 		case 4:
2071 			b43legacy_phy_initb4(dev);
2072 			err = 0;
2073 			break;
2074 		case 5:
2075 			b43legacy_phy_initb5(dev);
2076 			err = 0;
2077 			break;
2078 		case 6:
2079 			b43legacy_phy_initb6(dev);
2080 			err = 0;
2081 			break;
2082 		}
2083 		break;
2084 	case B43legacy_PHYTYPE_G:
2085 		b43legacy_phy_initg(dev);
2086 		err = 0;
2087 		break;
2088 	}
2089 	if (err)
2090 		b43legacyerr(dev->wl, "Unknown PHYTYPE found\n");
2091 
2092 	return err;
2093 }
2094 
2095 void b43legacy_phy_set_antenna_diversity(struct b43legacy_wldev *dev)
2096 {
2097 	struct b43legacy_phy *phy = &dev->phy;
2098 	u16 antennadiv;
2099 	u16 offset;
2100 	u16 value;
2101 	u32 ucodeflags;
2102 
2103 	antennadiv = phy->antenna_diversity;
2104 
2105 	if (antennadiv == 0xFFFF)
2106 		antennadiv = 3;
2107 	B43legacy_WARN_ON(antennadiv > 3);
2108 
2109 	ucodeflags = b43legacy_shm_read32(dev, B43legacy_SHM_SHARED,
2110 					  B43legacy_UCODEFLAGS_OFFSET);
2111 	b43legacy_shm_write32(dev, B43legacy_SHM_SHARED,
2112 			      B43legacy_UCODEFLAGS_OFFSET,
2113 			      ucodeflags & ~B43legacy_UCODEFLAG_AUTODIV);
2114 
2115 	switch (phy->type) {
2116 	case B43legacy_PHYTYPE_G:
2117 		offset = 0x0400;
2118 
2119 		if (antennadiv == 2)
2120 			value = (3/*automatic*/ << 7);
2121 		else
2122 			value = (antennadiv << 7);
2123 		b43legacy_phy_write(dev, offset + 1,
2124 				    (b43legacy_phy_read(dev, offset + 1)
2125 				    & 0x7E7F) | value);
2126 
2127 		if (antennadiv >= 2) {
2128 			if (antennadiv == 2)
2129 				value = (antennadiv << 7);
2130 			else
2131 				value = (0/*force0*/ << 7);
2132 			b43legacy_phy_write(dev, offset + 0x2B,
2133 					    (b43legacy_phy_read(dev,
2134 					    offset + 0x2B)
2135 					    & 0xFEFF) | value);
2136 		}
2137 
2138 		if (phy->type == B43legacy_PHYTYPE_G) {
2139 			if (antennadiv >= 2)
2140 				b43legacy_phy_write(dev, 0x048C,
2141 						    b43legacy_phy_read(dev,
2142 						    0x048C) | 0x2000);
2143 			else
2144 				b43legacy_phy_write(dev, 0x048C,
2145 						    b43legacy_phy_read(dev,
2146 						    0x048C) & ~0x2000);
2147 			if (phy->rev >= 2) {
2148 				b43legacy_phy_write(dev, 0x0461,
2149 						    b43legacy_phy_read(dev,
2150 						    0x0461) | 0x0010);
2151 				b43legacy_phy_write(dev, 0x04AD,
2152 						    (b43legacy_phy_read(dev,
2153 						    0x04AD)
2154 						    & 0x00FF) | 0x0015);
2155 				if (phy->rev == 2)
2156 					b43legacy_phy_write(dev, 0x0427,
2157 							    0x0008);
2158 				else
2159 					b43legacy_phy_write(dev, 0x0427,
2160 						(b43legacy_phy_read(dev, 0x0427)
2161 						 & 0x00FF) | 0x0008);
2162 			} else if (phy->rev >= 6)
2163 				b43legacy_phy_write(dev, 0x049B, 0x00DC);
2164 		} else {
2165 			if (phy->rev < 3)
2166 				b43legacy_phy_write(dev, 0x002B,
2167 						    (b43legacy_phy_read(dev,
2168 						    0x002B) & 0x00FF)
2169 						    | 0x0024);
2170 			else {
2171 				b43legacy_phy_write(dev, 0x0061,
2172 						    b43legacy_phy_read(dev,
2173 						    0x0061) | 0x0010);
2174 				if (phy->rev == 3) {
2175 					b43legacy_phy_write(dev, 0x0093,
2176 							    0x001D);
2177 					b43legacy_phy_write(dev, 0x0027,
2178 							    0x0008);
2179 				} else {
2180 					b43legacy_phy_write(dev, 0x0093,
2181 							    0x003A);
2182 					b43legacy_phy_write(dev, 0x0027,
2183 						(b43legacy_phy_read(dev, 0x0027)
2184 						 & 0x00FF) | 0x0008);
2185 				}
2186 			}
2187 		}
2188 		break;
2189 	case B43legacy_PHYTYPE_B:
2190 		if (dev->dev->id.revision == 2)
2191 			value = (3/*automatic*/ << 7);
2192 		else
2193 			value = (antennadiv << 7);
2194 		b43legacy_phy_write(dev, 0x03E2,
2195 				    (b43legacy_phy_read(dev, 0x03E2)
2196 				    & 0xFE7F) | value);
2197 		break;
2198 	default:
2199 		B43legacy_WARN_ON(1);
2200 	}
2201 
2202 	if (antennadiv >= 2) {
2203 		ucodeflags = b43legacy_shm_read32(dev, B43legacy_SHM_SHARED,
2204 						  B43legacy_UCODEFLAGS_OFFSET);
2205 		b43legacy_shm_write32(dev, B43legacy_SHM_SHARED,
2206 				      B43legacy_UCODEFLAGS_OFFSET,
2207 				      ucodeflags | B43legacy_UCODEFLAG_AUTODIV);
2208 	}
2209 
2210 	phy->antenna_diversity = antennadiv;
2211 }
2212 
2213 /* Set the PowerSavingControlBits.
2214  * Bitvalues:
2215  *   0  => unset the bit
2216  *   1  => set the bit
2217  *   -1 => calculate the bit
2218  */
2219 void b43legacy_power_saving_ctl_bits(struct b43legacy_wldev *dev,
2220 				     int bit25, int bit26)
2221 {
2222 	int i;
2223 	u32 status;
2224 
2225 /* FIXME: Force 25 to off and 26 to on for now: */
2226 bit25 = 0;
2227 bit26 = 1;
2228 
2229 	if (bit25 == -1) {
2230 		/* TODO: If powersave is not off and FIXME is not set and we
2231 		 *	are not in adhoc and thus is not an AP and we arei
2232 		 *	associated, set bit 25 */
2233 	}
2234 	if (bit26 == -1) {
2235 		/* TODO: If the device is awake or this is an AP, or we are
2236 		 *	scanning, or FIXME, or we are associated, or FIXME,
2237 		 *	or the latest PS-Poll packet sent was successful,
2238 		 *	set bit26  */
2239 	}
2240 	status = b43legacy_read32(dev, B43legacy_MMIO_MACCTL);
2241 	if (bit25)
2242 		status |= B43legacy_MACCTL_HWPS;
2243 	else
2244 		status &= ~B43legacy_MACCTL_HWPS;
2245 	if (bit26)
2246 		status |= B43legacy_MACCTL_AWAKE;
2247 	else
2248 		status &= ~B43legacy_MACCTL_AWAKE;
2249 	b43legacy_write32(dev, B43legacy_MMIO_MACCTL, status);
2250 	if (bit26 && dev->dev->id.revision >= 5) {
2251 		for (i = 0; i < 100; i++) {
2252 			if (b43legacy_shm_read32(dev, B43legacy_SHM_SHARED,
2253 						 0x0040) != 4)
2254 				break;
2255 			udelay(10);
2256 		}
2257 	}
2258 }
2259