1 /******************************************************************************
2  * Copyright(c) 2008 - 2010 Realtek Corporation. All rights reserved.
3  * Linux device driver for RTL8192U
4  *
5  * Based on the r8187 driver, which is:
6  * Copyright 2004-2005 Andrea Merello <andrea.merello@gmail.com>, et al.
7  * This program is free software; you can redistribute it and/or modify it
8  * under the terms of version 2 of the GNU General Public License as
9  * published by the Free Software Foundation.
10  *
11  * This program is distributed in the hope that it will be useful, but WITHOUT
12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
14  * more details.
15  *
16  * You should have received a copy of the GNU General Public License along with
17  * this program; if not, write to the Free Software Foundation, Inc.,
18  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
19  *
20  * The full GNU General Public License is included in this distribution in the
21  * file called LICENSE.
22  *
23  * Contact Information:
24  * Jerry chuang <wlanfae@realtek.com>
25  */
26 
27 #ifndef CONFIG_FORCE_HARD_FLOAT
28 double __floatsidf(int i)
29 {
30 	return i;
31 }
32 
33 unsigned int __fixunsdfsi(double d)
34 {
35 	return d;
36 }
37 
38 double __adddf3(double a, double b)
39 {
40 	return a + b;
41 }
42 
43 double __addsf3(float a, float b)
44 {
45 	return a + b;
46 }
47 
48 double __subdf3(double a, double b)
49 {
50 	return a - b;
51 }
52 
53 double __extendsfdf2(float a)
54 {
55 	return a;
56 }
57 #endif
58 
59 #define CONFIG_RTL8192_IO_MAP
60 
61 #include <linux/uaccess.h>
62 #include "r8192U_hw.h"
63 #include "r8192U.h"
64 #include "r8190_rtl8256.h" /* RTL8225 Radio frontend */
65 #include "r8180_93cx6.h"   /* Card EEPROM */
66 #include "r8192U_wx.h"
67 #include "r819xU_phy.h"
68 #include "r819xU_phyreg.h"
69 #include "r819xU_cmdpkt.h"
70 #include "r8192U_dm.h"
71 #include <linux/usb.h>
72 #include <linux/slab.h>
73 #include <linux/proc_fs.h>
74 #include <linux/seq_file.h>
75 /* FIXME: check if 2.6.7 is ok */
76 
77 #include "dot11d.h"
78 /* set here to open your trace code. */
79 u32 rt_global_debug_component = COMP_DOWN	|
80 				COMP_SEC	|
81 				COMP_ERR; /* always open err flags on */
82 
83 #define TOTAL_CAM_ENTRY 32
84 #define CAM_CONTENT_COUNT 8
85 
86 static const struct usb_device_id rtl8192_usb_id_tbl[] = {
87 	/* Realtek */
88 	{USB_DEVICE(0x0bda, 0x8709)},
89 	/* Corega */
90 	{USB_DEVICE(0x07aa, 0x0043)},
91 	/* Belkin */
92 	{USB_DEVICE(0x050d, 0x805E)},
93 	/* Sitecom */
94 	{USB_DEVICE(0x0df6, 0x0031)},
95 	/* EnGenius */
96 	{USB_DEVICE(0x1740, 0x9201)},
97 	/* Dlink */
98 	{USB_DEVICE(0x2001, 0x3301)},
99 	/* Zinwell */
100 	{USB_DEVICE(0x5a57, 0x0290)},
101 	/* LG */
102 	{USB_DEVICE(0x043e, 0x7a01)},
103 	{}
104 };
105 
106 MODULE_LICENSE("GPL");
107 MODULE_VERSION("V 1.1");
108 MODULE_DEVICE_TABLE(usb, rtl8192_usb_id_tbl);
109 MODULE_DESCRIPTION("Linux driver for Realtek RTL8192 USB WiFi cards");
110 
111 static char *ifname = "wlan%d";
112 static int hwwep = 1;  /* default use hw. set 0 to use software security */
113 static int channels = 0x3fff;
114 
115 
116 
117 module_param(ifname, charp, 0644);
118 module_param(hwwep, int, 0644);
119 module_param(channels, int, 0644);
120 
121 MODULE_PARM_DESC(ifname, " Net interface name, wlan%d=default");
122 MODULE_PARM_DESC(hwwep, " Try to use hardware security support. ");
123 MODULE_PARM_DESC(channels, " Channel bitmask for specific locales. NYI");
124 
125 static int rtl8192_usb_probe(struct usb_interface *intf,
126 			     const struct usb_device_id *id);
127 static void rtl8192_usb_disconnect(struct usb_interface *intf);
128 
129 
130 static struct usb_driver rtl8192_usb_driver = {
131 	.name		= RTL819xU_MODULE_NAME,		  /* Driver name   */
132 	.id_table	= rtl8192_usb_id_tbl,		  /* PCI_ID table  */
133 	.probe		= rtl8192_usb_probe,		  /* probe fn      */
134 	.disconnect	= rtl8192_usb_disconnect,	  /* remove fn     */
135 	.suspend	= NULL,				  /* PM suspend fn */
136 	.resume		= NULL,				  /* PM resume fn  */
137 };
138 
139 
140 struct CHANNEL_LIST {
141 	u8	Channel[32];
142 	u8	Len;
143 };
144 
145 static struct CHANNEL_LIST ChannelPlan[] = {
146 	/* FCC */
147 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165}, 24},
148 	/* IC */
149 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}, 11},
150 	/* ETSI */
151 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 36, 40, 44, 48, 52, 56, 60, 64}, 21},
152 	/* Spain. Change to ETSI. */
153 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
154 	/* France. Change to ETSI. */
155 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
156 	/* MKK */
157 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
158 	/* MKK1 */
159 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
160 	/* Israel. */
161 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
162 	/* For 11a , TELEC */
163 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
164 	/* MIC */
165 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
166 	/* For Global Domain. 1-11:active scan, 12-14 passive scan. */
167 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14}, 14}
168 };
169 
170 static void rtl819x_set_channel_map(u8 channel_plan, struct r8192_priv *priv)
171 {
172 	int i, max_chan = -1, min_chan = -1;
173 	struct ieee80211_device *ieee = priv->ieee80211;
174 
175 	switch (channel_plan) {
176 	case COUNTRY_CODE_FCC:
177 	case COUNTRY_CODE_IC:
178 	case COUNTRY_CODE_ETSI:
179 	case COUNTRY_CODE_SPAIN:
180 	case COUNTRY_CODE_FRANCE:
181 	case COUNTRY_CODE_MKK:
182 	case COUNTRY_CODE_MKK1:
183 	case COUNTRY_CODE_ISRAEL:
184 	case COUNTRY_CODE_TELEC:
185 	case COUNTRY_CODE_MIC:
186 		Dot11d_Init(ieee);
187 		ieee->bGlobalDomain = false;
188 		/* actually 8225 & 8256 rf chips only support B,G,24N mode */
189 		if ((priv->rf_chip == RF_8225) || (priv->rf_chip == RF_8256)) {
190 			min_chan = 1;
191 			max_chan = 14;
192 		} else {
193 			RT_TRACE(COMP_ERR,
194 				 "unknown rf chip, can't set channel map in function:%s()\n",
195 				 __func__);
196 		}
197 		if (ChannelPlan[channel_plan].Len != 0) {
198 			/* Clear old channel map */
199 			memset(GET_DOT11D_INFO(ieee)->channel_map, 0,
200 			       sizeof(GET_DOT11D_INFO(ieee)->channel_map));
201 			/* Set new channel map */
202 			for (i = 0; i < ChannelPlan[channel_plan].Len; i++) {
203 				if (ChannelPlan[channel_plan].Channel[i] < min_chan || ChannelPlan[channel_plan].Channel[i] > max_chan)
204 					break;
205 				GET_DOT11D_INFO(ieee)->channel_map[ChannelPlan[channel_plan].Channel[i]] = 1;
206 			}
207 		}
208 		break;
209 
210 	case COUNTRY_CODE_GLOBAL_DOMAIN:
211 		/* this flag enabled to follow 11d country IE setting,
212 		 * otherwise, it shall follow global domain settings.
213 		 */
214 		GET_DOT11D_INFO(ieee)->bEnabled = 0;
215 		Dot11d_Reset(ieee);
216 		ieee->bGlobalDomain = true;
217 		break;
218 
219 	default:
220 		break;
221 	}
222 }
223 
224 
225 
226 
227 static void CamResetAllEntry(struct net_device *dev)
228 {
229 	u32 ulcommand = 0;
230 	/* In static WEP, OID_ADD_KEY or OID_ADD_WEP are set before STA
231 	 * associate to AP. However, ResetKey is called on
232 	 * OID_802_11_INFRASTRUCTURE_MODE and MlmeAssociateRequest. In this
233 	 * condition, Cam can not be reset because upper layer will not set
234 	 * this static key again.
235 	 */
236 	ulcommand |= BIT(31) | BIT(30);
237 	write_nic_dword(dev, RWCAM, ulcommand);
238 }
239 
240 
241 void write_cam(struct net_device *dev, u8 addr, u32 data)
242 {
243 	write_nic_dword(dev, WCAMI, data);
244 	write_nic_dword(dev, RWCAM, BIT(31) | BIT(16) | (addr & 0xff));
245 }
246 
247 u32 read_cam(struct net_device *dev, u8 addr)
248 {
249 	u32 data;
250 
251 	write_nic_dword(dev, RWCAM, 0x80000000 | (addr & 0xff));
252 	read_nic_dword(dev, 0xa8, &data);
253 	return data;
254 }
255 
256 int write_nic_byte_E(struct net_device *dev, int indx, u8 data)
257 {
258 	int status;
259 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
260 	struct usb_device *udev = priv->udev;
261 	u8 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
262 
263 	if (!usbdata)
264 		return -ENOMEM;
265 	*usbdata = data;
266 
267 	status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
268 				 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
269 				 indx | 0xfe00, 0, usbdata, 1, HZ / 2);
270 	kfree(usbdata);
271 
272 	if (status < 0) {
273 		netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
274 		return status;
275 	}
276 	return 0;
277 }
278 
279 int read_nic_byte_E(struct net_device *dev, int indx, u8 *data)
280 {
281 	int status;
282 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
283 	struct usb_device *udev = priv->udev;
284 	u8 *usbdata = kzalloc(sizeof(u8), GFP_KERNEL);
285 
286 	if (!usbdata)
287 		return -ENOMEM;
288 
289 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
290 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
291 				 indx | 0xfe00, 0, usbdata, 1, HZ / 2);
292 	*data = *usbdata;
293 	kfree(usbdata);
294 
295 	if (status < 0) {
296 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
297 		return status;
298 	}
299 
300 	return 0;
301 }
302 
303 /* as 92U has extend page from 4 to 16, so modify functions below. */
304 int write_nic_byte(struct net_device *dev, int indx, u8 data)
305 {
306 	int status;
307 
308 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
309 	struct usb_device *udev = priv->udev;
310 	u8 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
311 
312 	if (!usbdata)
313 		return -ENOMEM;
314 	*usbdata = data;
315 
316 	status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
317 				 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
318 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
319 				 usbdata, 1, HZ / 2);
320 	kfree(usbdata);
321 
322 	if (status < 0) {
323 		netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
324 		return status;
325 	}
326 
327 	return 0;
328 }
329 
330 
331 int write_nic_word(struct net_device *dev, int indx, u16 data)
332 {
333 	int status;
334 
335 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
336 	struct usb_device *udev = priv->udev;
337 	u16 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
338 
339 	if (!usbdata)
340 		return -ENOMEM;
341 	*usbdata = data;
342 
343 	status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
344 				 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
345 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
346 				 usbdata, 2, HZ / 2);
347 	kfree(usbdata);
348 
349 	if (status < 0) {
350 		netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
351 		return status;
352 	}
353 
354 	return 0;
355 }
356 
357 
358 int write_nic_dword(struct net_device *dev, int indx, u32 data)
359 {
360 	int status;
361 
362 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
363 	struct usb_device *udev = priv->udev;
364 	u32 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
365 
366 	if (!usbdata)
367 		return -ENOMEM;
368 	*usbdata = data;
369 
370 	status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
371 				 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
372 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
373 				 usbdata, 4, HZ / 2);
374 	kfree(usbdata);
375 
376 
377 	if (status < 0) {
378 		netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
379 		return status;
380 	}
381 
382 	return 0;
383 }
384 
385 
386 
387 int read_nic_byte(struct net_device *dev, int indx, u8 *data)
388 {
389 	int status;
390 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
391 	struct usb_device *udev = priv->udev;
392 	u8 *usbdata = kzalloc(sizeof(u8), GFP_KERNEL);
393 
394 	if (!usbdata)
395 		return -ENOMEM;
396 
397 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
398 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
399 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
400 				 usbdata, 1, HZ / 2);
401 	*data = *usbdata;
402 	kfree(usbdata);
403 
404 	if (status < 0) {
405 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
406 		return status;
407 	}
408 
409 	return 0;
410 }
411 
412 
413 
414 int read_nic_word(struct net_device *dev, int indx, u16 *data)
415 {
416 	int status;
417 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
418 	struct usb_device *udev = priv->udev;
419 	u16 *usbdata = kzalloc(sizeof(u16), GFP_KERNEL);
420 
421 	if (!usbdata)
422 		return -ENOMEM;
423 
424 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
425 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
426 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
427 				 usbdata, 2, HZ / 2);
428 	*data = *usbdata;
429 	kfree(usbdata);
430 
431 	if (status < 0) {
432 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
433 		return status;
434 	}
435 
436 	return 0;
437 }
438 
439 static int read_nic_word_E(struct net_device *dev, int indx, u16 *data)
440 {
441 	int status;
442 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
443 	struct usb_device *udev = priv->udev;
444 	u16 *usbdata = kzalloc(sizeof(u16), GFP_KERNEL);
445 
446 	if (!usbdata)
447 		return -ENOMEM;
448 
449 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
450 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
451 				 indx | 0xfe00, 0, usbdata, 2, HZ / 2);
452 	*data = *usbdata;
453 	kfree(usbdata);
454 
455 	if (status < 0) {
456 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
457 		return status;
458 	}
459 
460 	return 0;
461 }
462 
463 int read_nic_dword(struct net_device *dev, int indx, u32 *data)
464 {
465 	int status;
466 
467 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
468 	struct usb_device *udev = priv->udev;
469 	u32 *usbdata = kzalloc(sizeof(u32), GFP_KERNEL);
470 
471 	if (!usbdata)
472 		return -ENOMEM;
473 
474 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
475 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
476 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
477 				 usbdata, 4, HZ / 2);
478 	*data = *usbdata;
479 	kfree(usbdata);
480 
481 	if (status < 0) {
482 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
483 		return status;
484 	}
485 
486 	return 0;
487 }
488 
489 /* u8 read_phy_cck(struct net_device *dev, u8 adr); */
490 /* u8 read_phy_ofdm(struct net_device *dev, u8 adr); */
491 /* this might still called in what was the PHY rtl8185/rtl8192 common code
492  * plans are to possibility turn it again in one common code...
493  */
494 inline void force_pci_posting(struct net_device *dev)
495 {
496 }
497 
498 static struct net_device_stats *rtl8192_stats(struct net_device *dev);
499 static void rtl8192_restart(struct work_struct *work);
500 static void watch_dog_timer_callback(struct timer_list *t);
501 
502 /****************************************************************************
503  *   -----------------------------PROCFS STUFF-------------------------
504  ****************************************************************************/
505 
506 static struct proc_dir_entry *rtl8192_proc;
507 
508 static int proc_get_stats_ap(struct seq_file *m, void *v)
509 {
510 	struct net_device *dev = m->private;
511 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
512 	struct ieee80211_device *ieee = priv->ieee80211;
513 	struct ieee80211_network *target;
514 
515 	list_for_each_entry(target, &ieee->network_list, list) {
516 		const char *wpa = "non_WPA";
517 
518 		if (target->wpa_ie_len > 0 || target->rsn_ie_len > 0)
519 			wpa = "WPA";
520 
521 		seq_printf(m, "%s %s\n", target->ssid, wpa);
522 	}
523 
524 	return 0;
525 }
526 
527 static int proc_get_registers(struct seq_file *m, void *v)
528 {
529 	struct net_device *dev = m->private;
530 	int i, n, max = 0xff;
531 	u8 byte_rd;
532 
533 	seq_puts(m, "\n####################page 0##################\n ");
534 
535 	for (n = 0; n <= max;) {
536 		seq_printf(m, "\nD:  %2x > ", n);
537 
538 		for (i = 0; i < 16 && n <= max; i++, n++) {
539 			read_nic_byte(dev, 0x000 | n, &byte_rd);
540 			seq_printf(m, "%2x ", byte_rd);
541 		}
542 	}
543 
544 	seq_puts(m, "\n####################page 1##################\n ");
545 	for (n = 0; n <= max;) {
546 		seq_printf(m, "\nD:  %2x > ", n);
547 
548 		for (i = 0; i < 16 && n <= max; i++, n++) {
549 			read_nic_byte(dev, 0x100 | n, &byte_rd);
550 			seq_printf(m, "%2x ", byte_rd);
551 		}
552 	}
553 
554 	seq_puts(m, "\n####################page 3##################\n ");
555 	for (n = 0; n <= max;) {
556 		seq_printf(m, "\nD:  %2x > ", n);
557 
558 		for (i = 0; i < 16 && n <= max; i++, n++) {
559 			read_nic_byte(dev, 0x300 | n, &byte_rd);
560 			seq_printf(m, "%2x ", byte_rd);
561 		}
562 	}
563 
564 	seq_putc(m, '\n');
565 	return 0;
566 }
567 
568 static int proc_get_stats_tx(struct seq_file *m, void *v)
569 {
570 	struct net_device *dev = m->private;
571 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
572 
573 	seq_printf(m,
574 		   "TX VI priority ok int: %lu\n"
575 		   "TX VI priority error int: %lu\n"
576 		   "TX VO priority ok int: %lu\n"
577 		   "TX VO priority error int: %lu\n"
578 		   "TX BE priority ok int: %lu\n"
579 		   "TX BE priority error int: %lu\n"
580 		   "TX BK priority ok int: %lu\n"
581 		   "TX BK priority error int: %lu\n"
582 		   "TX MANAGE priority ok int: %lu\n"
583 		   "TX MANAGE priority error int: %lu\n"
584 		   "TX BEACON priority ok int: %lu\n"
585 		   "TX BEACON priority error int: %lu\n"
586 		   "TX queue resume: %lu\n"
587 		   "TX queue stopped?: %d\n"
588 		   "TX fifo overflow: %lu\n"
589 		   "TX VI queue: %d\n"
590 		   "TX VO queue: %d\n"
591 		   "TX BE queue: %d\n"
592 		   "TX BK queue: %d\n"
593 		   "TX VI dropped: %lu\n"
594 		   "TX VO dropped: %lu\n"
595 		   "TX BE dropped: %lu\n"
596 		   "TX BK dropped: %lu\n"
597 		   "TX total data packets %lu\n",
598 		   priv->stats.txviokint,
599 		   priv->stats.txvierr,
600 		   priv->stats.txvookint,
601 		   priv->stats.txvoerr,
602 		   priv->stats.txbeokint,
603 		   priv->stats.txbeerr,
604 		   priv->stats.txbkokint,
605 		   priv->stats.txbkerr,
606 		   priv->stats.txmanageokint,
607 		   priv->stats.txmanageerr,
608 		   priv->stats.txbeaconokint,
609 		   priv->stats.txbeaconerr,
610 		   priv->stats.txresumed,
611 		   netif_queue_stopped(dev),
612 		   priv->stats.txoverflow,
613 		   atomic_read(&(priv->tx_pending[VI_PRIORITY])),
614 		   atomic_read(&(priv->tx_pending[VO_PRIORITY])),
615 		   atomic_read(&(priv->tx_pending[BE_PRIORITY])),
616 		   atomic_read(&(priv->tx_pending[BK_PRIORITY])),
617 		   priv->stats.txvidrop,
618 		   priv->stats.txvodrop,
619 		   priv->stats.txbedrop,
620 		   priv->stats.txbkdrop,
621 		   priv->stats.txdatapkt
622 		);
623 
624 	return 0;
625 }
626 
627 static int proc_get_stats_rx(struct seq_file *m, void *v)
628 {
629 	struct net_device *dev = m->private;
630 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
631 
632 	seq_printf(m,
633 		   "RX packets: %lu\n"
634 		   "RX urb status error: %lu\n"
635 		   "RX invalid urb error: %lu\n",
636 		   priv->stats.rxoktotal,
637 		   priv->stats.rxstaterr,
638 		   priv->stats.rxurberr);
639 
640 	return 0;
641 }
642 
643 static void rtl8192_proc_module_init(void)
644 {
645 	RT_TRACE(COMP_INIT, "Initializing proc filesystem");
646 	rtl8192_proc = proc_mkdir(RTL819xU_MODULE_NAME, init_net.proc_net);
647 }
648 
649 /*
650  * seq_file wrappers for procfile show routines.
651  */
652 static int rtl8192_proc_open(struct inode *inode, struct file *file)
653 {
654 	struct net_device *dev = proc_get_parent_data(inode);
655 	int (*show)(struct seq_file *, void *) = PDE_DATA(inode);
656 
657 	return single_open(file, show, dev);
658 }
659 
660 static const struct file_operations rtl8192_proc_fops = {
661 	.open		= rtl8192_proc_open,
662 	.read		= seq_read,
663 	.llseek		= seq_lseek,
664 	.release	= single_release,
665 };
666 
667 /*
668  * Table of proc files we need to create.
669  */
670 struct rtl8192_proc_file {
671 	char name[12];
672 	int (*show)(struct seq_file *, void *);
673 };
674 
675 static const struct rtl8192_proc_file rtl8192_proc_files[] = {
676 	{ "stats-rx",	&proc_get_stats_rx },
677 	{ "stats-tx",	&proc_get_stats_tx },
678 	{ "stats-ap",	&proc_get_stats_ap },
679 	{ "registers",	&proc_get_registers },
680 	{ "" }
681 };
682 
683 static void rtl8192_proc_init_one(struct net_device *dev)
684 {
685 	const struct rtl8192_proc_file *f;
686 	struct proc_dir_entry *dir;
687 
688 	if (rtl8192_proc) {
689 		dir = proc_mkdir_data(dev->name, 0, rtl8192_proc, dev);
690 		if (!dir) {
691 			RT_TRACE(COMP_ERR,
692 				 "Unable to initialize /proc/net/rtl8192/%s\n",
693 				 dev->name);
694 			return;
695 		}
696 
697 		for (f = rtl8192_proc_files; f->name[0]; f++) {
698 			if (!proc_create_data(f->name, S_IFREG | S_IRUGO, dir,
699 					      &rtl8192_proc_fops, f->show)) {
700 				RT_TRACE(COMP_ERR,
701 					 "Unable to initialize /proc/net/rtl8192/%s/%s\n",
702 					 dev->name, f->name);
703 				return;
704 			}
705 		}
706 	}
707 }
708 
709 static void rtl8192_proc_remove_one(struct net_device *dev)
710 {
711 	remove_proc_subtree(dev->name, rtl8192_proc);
712 }
713 
714 /****************************************************************************
715  *  -----------------------------MISC STUFF-------------------------
716  *****************************************************************************/
717 
718 short check_nic_enough_desc(struct net_device *dev, int queue_index)
719 {
720 	struct r8192_priv *priv = ieee80211_priv(dev);
721 	int used = atomic_read(&priv->tx_pending[queue_index]);
722 
723 	return (used < MAX_TX_URB);
724 }
725 
726 static void tx_timeout(struct net_device *dev)
727 {
728 	struct r8192_priv *priv = ieee80211_priv(dev);
729 
730 	schedule_work(&priv->reset_wq);
731 }
732 
733 void rtl8192_update_msr(struct net_device *dev)
734 {
735 	struct r8192_priv *priv = ieee80211_priv(dev);
736 	u8 msr;
737 
738 	read_nic_byte(dev, MSR, &msr);
739 	msr &= ~MSR_LINK_MASK;
740 
741 	/* do not change in link_state != WLAN_LINK_ASSOCIATED.
742 	 * msr must be updated if the state is ASSOCIATING.
743 	 * this is intentional and make sense for ad-hoc and
744 	 * master (see the create BSS/IBSS func)
745 	 */
746 	if (priv->ieee80211->state == IEEE80211_LINKED) {
747 		if (priv->ieee80211->iw_mode == IW_MODE_INFRA)
748 			msr |= (MSR_LINK_MANAGED << MSR_LINK_SHIFT);
749 		else if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
750 			msr |= (MSR_LINK_ADHOC << MSR_LINK_SHIFT);
751 		else if (priv->ieee80211->iw_mode == IW_MODE_MASTER)
752 			msr |= (MSR_LINK_MASTER << MSR_LINK_SHIFT);
753 
754 	} else {
755 		msr |= (MSR_LINK_NONE << MSR_LINK_SHIFT);
756 	}
757 
758 	write_nic_byte(dev, MSR, msr);
759 }
760 
761 void rtl8192_set_chan(struct net_device *dev, short ch)
762 {
763 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
764 
765 	RT_TRACE(COMP_CH, "=====>%s()====ch:%d\n", __func__, ch);
766 	priv->chan = ch;
767 
768 	/* this hack should avoid frame TX during channel setting*/
769 
770 	/* need to implement rf set channel here */
771 
772 	if (priv->rf_set_chan)
773 		priv->rf_set_chan(dev, priv->chan);
774 	mdelay(10);
775 }
776 
777 static void rtl8192_rx_isr(struct urb *urb);
778 
779 static u32 get_rxpacket_shiftbytes_819xusb(struct ieee80211_rx_stats *pstats)
780 {
781 	return (sizeof(rx_desc_819x_usb) + pstats->RxDrvInfoSize
782 		+ pstats->RxBufShift);
783 }
784 
785 static int rtl8192_rx_initiate(struct net_device *dev)
786 {
787 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
788 	struct urb *entry;
789 	struct sk_buff *skb;
790 	struct rtl8192_rx_info *info;
791 
792 	/* nomal packet rx procedure */
793 	while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB) {
794 		skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
795 		if (!skb)
796 			break;
797 		entry = usb_alloc_urb(0, GFP_KERNEL);
798 		if (!entry) {
799 			kfree_skb(skb);
800 			break;
801 		}
802 		usb_fill_bulk_urb(entry, priv->udev,
803 				  usb_rcvbulkpipe(priv->udev, 3),
804 				  skb_tail_pointer(skb),
805 				  RX_URB_SIZE, rtl8192_rx_isr, skb);
806 		info = (struct rtl8192_rx_info *)skb->cb;
807 		info->urb = entry;
808 		info->dev = dev;
809 		info->out_pipe = 3; /* denote rx normal packet queue */
810 		skb_queue_tail(&priv->rx_queue, skb);
811 		usb_submit_urb(entry, GFP_KERNEL);
812 	}
813 
814 	/* command packet rx procedure */
815 	while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB + 3) {
816 		skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
817 		if (!skb)
818 			break;
819 		entry = usb_alloc_urb(0, GFP_KERNEL);
820 		if (!entry) {
821 			kfree_skb(skb);
822 			break;
823 		}
824 		usb_fill_bulk_urb(entry, priv->udev,
825 				  usb_rcvbulkpipe(priv->udev, 9),
826 				  skb_tail_pointer(skb),
827 				  RX_URB_SIZE, rtl8192_rx_isr, skb);
828 		info = (struct rtl8192_rx_info *)skb->cb;
829 		info->urb = entry;
830 		info->dev = dev;
831 		info->out_pipe = 9; /* denote rx cmd packet queue */
832 		skb_queue_tail(&priv->rx_queue, skb);
833 		usb_submit_urb(entry, GFP_KERNEL);
834 	}
835 
836 	return 0;
837 }
838 
839 void rtl8192_set_rxconf(struct net_device *dev)
840 {
841 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
842 	u32 rxconf;
843 
844 	read_nic_dword(dev, RCR, &rxconf);
845 	rxconf = rxconf & ~MAC_FILTER_MASK;
846 	rxconf = rxconf | RCR_AMF;
847 	rxconf = rxconf | RCR_ADF;
848 	rxconf = rxconf | RCR_AB;
849 	rxconf = rxconf | RCR_AM;
850 
851 	if (dev->flags & IFF_PROMISC)
852 		DMESG("NIC in promisc mode");
853 
854 	if (priv->ieee80211->iw_mode == IW_MODE_MONITOR ||
855 	    dev->flags & IFF_PROMISC) {
856 		rxconf = rxconf | RCR_AAP;
857 	} else {
858 		rxconf = rxconf | RCR_APM;
859 		rxconf = rxconf | RCR_CBSSID;
860 	}
861 
862 
863 	if (priv->ieee80211->iw_mode == IW_MODE_MONITOR) {
864 		rxconf = rxconf | RCR_AICV;
865 		rxconf = rxconf | RCR_APWRMGT;
866 	}
867 
868 	if (priv->crcmon == 1 && priv->ieee80211->iw_mode == IW_MODE_MONITOR)
869 		rxconf = rxconf | RCR_ACRC32;
870 
871 
872 	rxconf = rxconf & ~RX_FIFO_THRESHOLD_MASK;
873 	rxconf = rxconf | (RX_FIFO_THRESHOLD_NONE << RX_FIFO_THRESHOLD_SHIFT);
874 	rxconf = rxconf & ~MAX_RX_DMA_MASK;
875 	rxconf = rxconf | ((u32)7 << RCR_MXDMA_OFFSET);
876 
877 	rxconf = rxconf | RCR_ONLYERLPKT;
878 
879 	write_nic_dword(dev, RCR, rxconf);
880 }
881 
882 /* wait to be removed */
883 void rtl8192_rx_enable(struct net_device *dev)
884 {
885 	rtl8192_rx_initiate(dev);
886 }
887 
888 
889 void rtl8192_tx_enable(struct net_device *dev)
890 {
891 }
892 
893 
894 
895 void rtl8192_rtx_disable(struct net_device *dev)
896 {
897 	u8 cmd;
898 	struct r8192_priv *priv = ieee80211_priv(dev);
899 	struct sk_buff *skb;
900 	struct rtl8192_rx_info *info;
901 
902 	read_nic_byte(dev, CMDR, &cmd);
903 	write_nic_byte(dev, CMDR, cmd & ~(CR_TE | CR_RE));
904 	force_pci_posting(dev);
905 	mdelay(10);
906 
907 	while ((skb = __skb_dequeue(&priv->rx_queue))) {
908 		info = (struct rtl8192_rx_info *)skb->cb;
909 		if (!info->urb)
910 			continue;
911 
912 		usb_kill_urb(info->urb);
913 		kfree_skb(skb);
914 	}
915 
916 	if (skb_queue_len(&priv->skb_queue))
917 		netdev_warn(dev, "skb_queue not empty\n");
918 
919 	skb_queue_purge(&priv->skb_queue);
920 }
921 
922 /* The prototype of rx_isr has changed since one version of Linux Kernel */
923 static void rtl8192_rx_isr(struct urb *urb)
924 {
925 	struct sk_buff *skb = (struct sk_buff *)urb->context;
926 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
927 	struct net_device *dev = info->dev;
928 	struct r8192_priv *priv = ieee80211_priv(dev);
929 	int out_pipe = info->out_pipe;
930 	int err;
931 
932 	if (!priv->up)
933 		return;
934 
935 	if (unlikely(urb->status)) {
936 		info->urb = NULL;
937 		priv->stats.rxstaterr++;
938 		priv->ieee80211->stats.rx_errors++;
939 		usb_free_urb(urb);
940 		return;
941 	}
942 	skb_unlink(skb, &priv->rx_queue);
943 	skb_put(skb, urb->actual_length);
944 
945 	skb_queue_tail(&priv->skb_queue, skb);
946 	tasklet_schedule(&priv->irq_rx_tasklet);
947 
948 	skb = dev_alloc_skb(RX_URB_SIZE);
949 	if (unlikely(!skb)) {
950 		usb_free_urb(urb);
951 		netdev_err(dev, "%s(): can't alloc skb\n", __func__);
952 		/* TODO check rx queue length and refill *somewhere* */
953 		return;
954 	}
955 
956 	usb_fill_bulk_urb(urb, priv->udev,
957 			  usb_rcvbulkpipe(priv->udev, out_pipe),
958 			  skb_tail_pointer(skb),
959 			  RX_URB_SIZE, rtl8192_rx_isr, skb);
960 
961 	info = (struct rtl8192_rx_info *)skb->cb;
962 	info->urb = urb;
963 	info->dev = dev;
964 	info->out_pipe = out_pipe;
965 
966 	urb->transfer_buffer = skb_tail_pointer(skb);
967 	urb->context = skb;
968 	skb_queue_tail(&priv->rx_queue, skb);
969 	err = usb_submit_urb(urb, GFP_ATOMIC);
970 	if (err && err != EPERM)
971 		netdev_err(dev,
972 			   "can not submit rxurb, err is %x, URB status is %x\n",
973 			   err, urb->status);
974 }
975 
976 static u32 rtl819xusb_rx_command_packet(struct net_device *dev,
977 					struct ieee80211_rx_stats *pstats)
978 {
979 	u32	status;
980 
981 	status = cmpk_message_handle_rx(dev, pstats);
982 	if (status)
983 		DMESG("rxcommandpackethandle819xusb: It is a command packet\n");
984 
985 	return status;
986 }
987 
988 
989 static void rtl8192_data_hard_stop(struct net_device *dev)
990 {
991 	/* FIXME !! */
992 }
993 
994 
995 static void rtl8192_data_hard_resume(struct net_device *dev)
996 {
997 	/* FIXME !! */
998 }
999 
1000 /* this function TX data frames when the ieee80211 stack requires this.
1001  * It checks also if we need to stop the ieee tx queue, eventually do it
1002  */
1003 static void rtl8192_hard_data_xmit(struct sk_buff *skb, struct net_device *dev,
1004 				   int rate)
1005 {
1006 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
1007 	int ret;
1008 	unsigned long flags;
1009 	struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1010 	u8 queue_index = tcb_desc->queue_index;
1011 
1012 	/* shall not be referred by command packet */
1013 	RTL8192U_ASSERT(queue_index != TXCMD_QUEUE);
1014 
1015 	spin_lock_irqsave(&priv->tx_lock, flags);
1016 
1017 	*(struct net_device **)(skb->cb) = dev;
1018 	tcb_desc->bTxEnableFwCalcDur = 1;
1019 	skb_push(skb, priv->ieee80211->tx_headroom);
1020 	ret = rtl8192_tx(dev, skb);
1021 
1022 	spin_unlock_irqrestore(&priv->tx_lock, flags);
1023 }
1024 
1025 /* This is a rough attempt to TX a frame
1026  * This is called by the ieee 80211 stack to TX management frames.
1027  * If the ring is full packet are dropped (for data frame the queue
1028  * is stopped before this can happen).
1029  */
1030 static int rtl8192_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
1031 {
1032 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
1033 	int ret;
1034 	unsigned long flags;
1035 	struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1036 	u8 queue_index = tcb_desc->queue_index;
1037 
1038 
1039 	spin_lock_irqsave(&priv->tx_lock, flags);
1040 
1041 	memcpy((unsigned char *)(skb->cb), &dev, sizeof(dev));
1042 	if (queue_index == TXCMD_QUEUE) {
1043 		skb_push(skb, USB_HWDESC_HEADER_LEN);
1044 		rtl819xU_tx_cmd(dev, skb);
1045 		ret = 1;
1046 	} else {
1047 		skb_push(skb, priv->ieee80211->tx_headroom);
1048 		ret = rtl8192_tx(dev, skb);
1049 	}
1050 
1051 	spin_unlock_irqrestore(&priv->tx_lock, flags);
1052 
1053 	return ret;
1054 }
1055 
1056 static void rtl8192_tx_isr(struct urb *tx_urb)
1057 {
1058 	struct sk_buff *skb = (struct sk_buff *)tx_urb->context;
1059 	struct net_device *dev;
1060 	struct r8192_priv *priv = NULL;
1061 	struct cb_desc *tcb_desc;
1062 	u8  queue_index;
1063 
1064 	if (!skb)
1065 		return;
1066 
1067 	dev = *(struct net_device **)(skb->cb);
1068 	tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1069 	queue_index = tcb_desc->queue_index;
1070 
1071 	priv = ieee80211_priv(dev);
1072 
1073 	if (tcb_desc->queue_index != TXCMD_QUEUE) {
1074 		if (tx_urb->status == 0) {
1075 			netif_trans_update(dev);
1076 			priv->stats.txoktotal++;
1077 			priv->ieee80211->LinkDetectInfo.NumTxOkInPeriod++;
1078 			priv->stats.txbytesunicast +=
1079 				(skb->len - priv->ieee80211->tx_headroom);
1080 		} else {
1081 			priv->ieee80211->stats.tx_errors++;
1082 			/* TODO */
1083 		}
1084 	}
1085 
1086 	/* free skb and tx_urb */
1087 	dev_kfree_skb_any(skb);
1088 	usb_free_urb(tx_urb);
1089 	atomic_dec(&priv->tx_pending[queue_index]);
1090 
1091 	/*
1092 	 * Handle HW Beacon:
1093 	 * We had transfer our beacon frame to host controller at this moment.
1094 	 *
1095 	 *
1096 	 * Caution:
1097 	 * Handling the wait queue of command packets.
1098 	 * For Tx command packets, we must not do TCB fragment because it is
1099 	 * not handled right now. We must cut the packets to match the size of
1100 	 * TX_CMD_PKT before we send it.
1101 	 */
1102 
1103 	/* Handle MPDU in wait queue. */
1104 	if (queue_index != BEACON_QUEUE) {
1105 		/* Don't send data frame during scanning.*/
1106 		if ((skb_queue_len(&priv->ieee80211->skb_waitQ[queue_index]) != 0) &&
1107 		    (!(priv->ieee80211->queue_stop))) {
1108 			skb = skb_dequeue(&(priv->ieee80211->skb_waitQ[queue_index]));
1109 			if (skb)
1110 				priv->ieee80211->softmac_hard_start_xmit(skb,
1111 									 dev);
1112 
1113 			return; /* avoid further processing AMSDU */
1114 		}
1115 	}
1116 }
1117 
1118 static void rtl8192_config_rate(struct net_device *dev, u16 *rate_config)
1119 {
1120 	struct r8192_priv *priv = ieee80211_priv(dev);
1121 	struct ieee80211_network *net;
1122 	u8 i = 0, basic_rate = 0;
1123 
1124 	net = &priv->ieee80211->current_network;
1125 
1126 	for (i = 0; i < net->rates_len; i++) {
1127 		basic_rate = net->rates[i] & 0x7f;
1128 		switch (basic_rate) {
1129 		case MGN_1M:
1130 			*rate_config |= RRSR_1M;
1131 			break;
1132 		case MGN_2M:
1133 			*rate_config |= RRSR_2M;
1134 			break;
1135 		case MGN_5_5M:
1136 			*rate_config |= RRSR_5_5M;
1137 			break;
1138 		case MGN_11M:
1139 			*rate_config |= RRSR_11M;
1140 			break;
1141 		case MGN_6M:
1142 			*rate_config |= RRSR_6M;
1143 			break;
1144 		case MGN_9M:
1145 			*rate_config |= RRSR_9M;
1146 			break;
1147 		case MGN_12M:
1148 			*rate_config |= RRSR_12M;
1149 			break;
1150 		case MGN_18M:
1151 			*rate_config |= RRSR_18M;
1152 			break;
1153 		case MGN_24M:
1154 			*rate_config |= RRSR_24M;
1155 			break;
1156 		case MGN_36M:
1157 			*rate_config |= RRSR_36M;
1158 			break;
1159 		case MGN_48M:
1160 			*rate_config |= RRSR_48M;
1161 			break;
1162 		case MGN_54M:
1163 			*rate_config |= RRSR_54M;
1164 			break;
1165 		}
1166 	}
1167 	for (i = 0; i < net->rates_ex_len; i++) {
1168 		basic_rate = net->rates_ex[i] & 0x7f;
1169 		switch (basic_rate) {
1170 		case MGN_1M:
1171 			*rate_config |= RRSR_1M;
1172 			break;
1173 		case MGN_2M:
1174 			*rate_config |= RRSR_2M;
1175 			break;
1176 		case MGN_5_5M:
1177 			*rate_config |= RRSR_5_5M;
1178 			break;
1179 		case MGN_11M:
1180 			*rate_config |= RRSR_11M;
1181 			break;
1182 		case MGN_6M:
1183 			*rate_config |= RRSR_6M;
1184 			break;
1185 		case MGN_9M:
1186 			*rate_config |= RRSR_9M;
1187 			break;
1188 		case MGN_12M:
1189 			*rate_config |= RRSR_12M;
1190 			break;
1191 		case MGN_18M:
1192 			*rate_config |= RRSR_18M;
1193 			break;
1194 		case MGN_24M:
1195 			*rate_config |= RRSR_24M;
1196 			break;
1197 		case MGN_36M:
1198 			*rate_config |= RRSR_36M;
1199 			break;
1200 		case MGN_48M:
1201 			*rate_config |= RRSR_48M;
1202 			break;
1203 		case MGN_54M:
1204 			*rate_config |= RRSR_54M;
1205 			break;
1206 		}
1207 	}
1208 }
1209 
1210 
1211 #define SHORT_SLOT_TIME 9
1212 #define NON_SHORT_SLOT_TIME 20
1213 
1214 static void rtl8192_update_cap(struct net_device *dev, u16 cap)
1215 {
1216 	u32 tmp = 0;
1217 	struct r8192_priv *priv = ieee80211_priv(dev);
1218 	struct ieee80211_network *net = &priv->ieee80211->current_network;
1219 
1220 	priv->short_preamble = cap & WLAN_CAPABILITY_SHORT_PREAMBLE;
1221 	tmp = priv->basic_rate;
1222 	if (priv->short_preamble)
1223 		tmp |= BRSR_AckShortPmb;
1224 	write_nic_dword(dev, RRSR, tmp);
1225 
1226 	if (net->mode & (IEEE_G | IEEE_N_24G)) {
1227 		u8 slot_time = 0;
1228 
1229 		if ((cap & WLAN_CAPABILITY_SHORT_SLOT) &&
1230 		    (!priv->ieee80211->pHTInfo->bCurrentRT2RTLongSlotTime))
1231 			/* short slot time */
1232 			slot_time = SHORT_SLOT_TIME;
1233 		else	/* long slot time */
1234 			slot_time = NON_SHORT_SLOT_TIME;
1235 		priv->slot_time = slot_time;
1236 		write_nic_byte(dev, SLOT_TIME, slot_time);
1237 	}
1238 }
1239 
1240 static void rtl8192_net_update(struct net_device *dev)
1241 {
1242 	struct r8192_priv *priv = ieee80211_priv(dev);
1243 	struct ieee80211_network *net;
1244 	u16 BcnTimeCfg = 0, BcnCW = 6, BcnIFS = 0xf;
1245 	u16 rate_config = 0;
1246 
1247 	net = &priv->ieee80211->current_network;
1248 
1249 	rtl8192_config_rate(dev, &rate_config);
1250 	priv->basic_rate = rate_config & 0x15f;
1251 
1252 	write_nic_dword(dev, BSSIDR, ((u32 *)net->bssid)[0]);
1253 	write_nic_word(dev, BSSIDR + 4, ((u16 *)net->bssid)[2]);
1254 
1255 	rtl8192_update_msr(dev);
1256 	if (priv->ieee80211->iw_mode == IW_MODE_ADHOC) {
1257 		write_nic_word(dev, ATIMWND, 2);
1258 		write_nic_word(dev, BCN_DMATIME, 1023);
1259 		write_nic_word(dev, BCN_INTERVAL, net->beacon_interval);
1260 		write_nic_word(dev, BCN_DRV_EARLY_INT, 1);
1261 		write_nic_byte(dev, BCN_ERR_THRESH, 100);
1262 		BcnTimeCfg |= (BcnCW << BCN_TCFG_CW_SHIFT);
1263 		/* TODO: BcnIFS may required to be changed on ASIC */
1264 		BcnTimeCfg |= BcnIFS << BCN_TCFG_IFS;
1265 
1266 		write_nic_word(dev, BCN_TCFG, BcnTimeCfg);
1267 	}
1268 }
1269 
1270 /* temporary hw beacon is not used any more.
1271  * open it when necessary
1272  */
1273 void rtl819xusb_beacon_tx(struct net_device *dev, u16  tx_rate)
1274 {
1275 
1276 }
1277 
1278 short rtl819xU_tx_cmd(struct net_device *dev, struct sk_buff *skb)
1279 {
1280 	struct r8192_priv *priv = ieee80211_priv(dev);
1281 	int			status;
1282 	struct urb		*tx_urb;
1283 	unsigned int		idx_pipe;
1284 	tx_desc_cmd_819x_usb *pdesc = (tx_desc_cmd_819x_usb *)skb->data;
1285 	struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1286 	u8 queue_index = tcb_desc->queue_index;
1287 
1288 	atomic_inc(&priv->tx_pending[queue_index]);
1289 	tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
1290 	if (!tx_urb) {
1291 		dev_kfree_skb(skb);
1292 		return -ENOMEM;
1293 	}
1294 
1295 	memset(pdesc, 0, USB_HWDESC_HEADER_LEN);
1296 	/* Tx descriptor ought to be set according to the skb->cb */
1297 	pdesc->FirstSeg = 1;
1298 	pdesc->LastSeg = 1;
1299 	pdesc->CmdInit = tcb_desc->bCmdOrInit;
1300 	pdesc->TxBufferSize = tcb_desc->txbuf_size;
1301 	pdesc->OWN = 1;
1302 	pdesc->LINIP = tcb_desc->bLastIniPkt;
1303 
1304 	/*---------------------------------------------------------------------
1305 	 * Fill up USB_OUT_CONTEXT.
1306 	 *---------------------------------------------------------------------
1307 	 */
1308 	idx_pipe = 0x04;
1309 	usb_fill_bulk_urb(tx_urb, priv->udev,
1310 			  usb_sndbulkpipe(priv->udev, idx_pipe),
1311 			  skb->data, skb->len, rtl8192_tx_isr, skb);
1312 
1313 	status = usb_submit_urb(tx_urb, GFP_ATOMIC);
1314 
1315 	if (!status)
1316 		return 0;
1317 
1318 	DMESGE("Error TX CMD URB, error %d", status);
1319 	return -1;
1320 }
1321 
1322 /*
1323  * Mapping Software/Hardware descriptor queue id to "Queue Select Field"
1324  * in TxFwInfo data structure
1325  * 2006.10.30 by Emily
1326  *
1327  * \param QUEUEID       Software Queue
1328  */
1329 static u8 MapHwQueueToFirmwareQueue(u8 QueueID)
1330 {
1331 	u8 QueueSelect = 0x0;       /* default set to */
1332 
1333 	switch (QueueID) {
1334 	case BE_QUEUE:
1335 		QueueSelect = QSLT_BE;
1336 		break;
1337 
1338 	case BK_QUEUE:
1339 		QueueSelect = QSLT_BK;
1340 		break;
1341 
1342 	case VO_QUEUE:
1343 		QueueSelect = QSLT_VO;
1344 		break;
1345 
1346 	case VI_QUEUE:
1347 		QueueSelect = QSLT_VI;
1348 		break;
1349 	case MGNT_QUEUE:
1350 		QueueSelect = QSLT_MGNT;
1351 		break;
1352 
1353 	case BEACON_QUEUE:
1354 		QueueSelect = QSLT_BEACON;
1355 		break;
1356 
1357 		/* TODO: mark other queue selection until we verify it is OK */
1358 		/* TODO: Remove Assertions */
1359 	case TXCMD_QUEUE:
1360 		QueueSelect = QSLT_CMD;
1361 		break;
1362 	case HIGH_QUEUE:
1363 		QueueSelect = QSLT_HIGH;
1364 		break;
1365 
1366 	default:
1367 		RT_TRACE(COMP_ERR,
1368 			 "TransmitTCB(): Impossible Queue Selection: %d\n",
1369 			 QueueID);
1370 		break;
1371 	}
1372 	return QueueSelect;
1373 }
1374 
1375 static u8 MRateToHwRate8190Pci(u8 rate)
1376 {
1377 	u8  ret = DESC90_RATE1M;
1378 
1379 	switch (rate) {
1380 	case MGN_1M:
1381 		ret = DESC90_RATE1M;
1382 		break;
1383 	case MGN_2M:
1384 		ret = DESC90_RATE2M;
1385 		break;
1386 	case MGN_5_5M:
1387 		ret = DESC90_RATE5_5M;
1388 		break;
1389 	case MGN_11M:
1390 		ret = DESC90_RATE11M;
1391 		break;
1392 	case MGN_6M:
1393 		ret = DESC90_RATE6M;
1394 		break;
1395 	case MGN_9M:
1396 		ret = DESC90_RATE9M;
1397 		break;
1398 	case MGN_12M:
1399 		ret = DESC90_RATE12M;
1400 		break;
1401 	case MGN_18M:
1402 		ret = DESC90_RATE18M;
1403 		break;
1404 	case MGN_24M:
1405 		ret = DESC90_RATE24M;
1406 		break;
1407 	case MGN_36M:
1408 		ret = DESC90_RATE36M;
1409 		break;
1410 	case MGN_48M:
1411 		ret = DESC90_RATE48M;
1412 		break;
1413 	case MGN_54M:
1414 		ret = DESC90_RATE54M;
1415 		break;
1416 
1417 	/* HT rate since here */
1418 	case MGN_MCS0:
1419 		ret = DESC90_RATEMCS0;
1420 		break;
1421 	case MGN_MCS1:
1422 		ret = DESC90_RATEMCS1;
1423 		break;
1424 	case MGN_MCS2:
1425 		ret = DESC90_RATEMCS2;
1426 		break;
1427 	case MGN_MCS3:
1428 		ret = DESC90_RATEMCS3;
1429 		break;
1430 	case MGN_MCS4:
1431 		ret = DESC90_RATEMCS4;
1432 		break;
1433 	case MGN_MCS5:
1434 		ret = DESC90_RATEMCS5;
1435 		break;
1436 	case MGN_MCS6:
1437 		ret = DESC90_RATEMCS6;
1438 		break;
1439 	case MGN_MCS7:
1440 		ret = DESC90_RATEMCS7;
1441 		break;
1442 	case MGN_MCS8:
1443 		ret = DESC90_RATEMCS8;
1444 		break;
1445 	case MGN_MCS9:
1446 		ret = DESC90_RATEMCS9;
1447 		break;
1448 	case MGN_MCS10:
1449 		ret = DESC90_RATEMCS10;
1450 		break;
1451 	case MGN_MCS11:
1452 		ret = DESC90_RATEMCS11;
1453 		break;
1454 	case MGN_MCS12:
1455 		ret = DESC90_RATEMCS12;
1456 		break;
1457 	case MGN_MCS13:
1458 		ret = DESC90_RATEMCS13;
1459 		break;
1460 	case MGN_MCS14:
1461 		ret = DESC90_RATEMCS14;
1462 		break;
1463 	case MGN_MCS15:
1464 		ret = DESC90_RATEMCS15;
1465 		break;
1466 	case (0x80 | 0x20):
1467 		ret = DESC90_RATEMCS32;
1468 		break;
1469 
1470 	default:
1471 		break;
1472 	}
1473 	return ret;
1474 }
1475 
1476 
1477 static u8 QueryIsShort(u8 TxHT, u8 TxRate, struct cb_desc *tcb_desc)
1478 {
1479 	u8   tmp_Short;
1480 
1481 	tmp_Short = (TxHT == 1) ?
1482 			((tcb_desc->bUseShortGI) ? 1 : 0) :
1483 			((tcb_desc->bUseShortPreamble) ? 1 : 0);
1484 
1485 	if (TxHT == 1 && TxRate != DESC90_RATEMCS15)
1486 		tmp_Short = 0;
1487 
1488 	return tmp_Short;
1489 }
1490 
1491 static void tx_zero_isr(struct urb *tx_urb)
1492 {
1493 }
1494 
1495 /*
1496  * The tx procedure is just as following,
1497  * skb->cb will contain all the following information,
1498  * priority, morefrag, rate, &dev.
1499  */
1500 short rtl8192_tx(struct net_device *dev, struct sk_buff *skb)
1501 {
1502 	struct r8192_priv *priv = ieee80211_priv(dev);
1503 	struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1504 	tx_desc_819x_usb *tx_desc = (tx_desc_819x_usb *)skb->data;
1505 	tx_fwinfo_819x_usb *tx_fwinfo =
1506 		(tx_fwinfo_819x_usb *)(skb->data + USB_HWDESC_HEADER_LEN);
1507 	struct usb_device *udev = priv->udev;
1508 	int pend;
1509 	int status;
1510 	struct urb *tx_urb = NULL, *tx_urb_zero = NULL;
1511 	unsigned int idx_pipe;
1512 
1513 	pend = atomic_read(&priv->tx_pending[tcb_desc->queue_index]);
1514 	/* we are locked here so the two atomic_read and inc are executed
1515 	 * without interleaves
1516 	 * !!! For debug purpose
1517 	 */
1518 	if (pend > MAX_TX_URB) {
1519 		netdev_dbg(dev, "To discard skb packet!\n");
1520 		dev_kfree_skb_any(skb);
1521 		return -1;
1522 	}
1523 
1524 	tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
1525 	if (!tx_urb) {
1526 		dev_kfree_skb_any(skb);
1527 		return -ENOMEM;
1528 	}
1529 
1530 	/* Fill Tx firmware info */
1531 	memset(tx_fwinfo, 0, sizeof(tx_fwinfo_819x_usb));
1532 	/* DWORD 0 */
1533 	tx_fwinfo->TxHT = (tcb_desc->data_rate & 0x80) ? 1 : 0;
1534 	tx_fwinfo->TxRate = MRateToHwRate8190Pci(tcb_desc->data_rate);
1535 	tx_fwinfo->EnableCPUDur = tcb_desc->bTxEnableFwCalcDur;
1536 	tx_fwinfo->Short = QueryIsShort(tx_fwinfo->TxHT, tx_fwinfo->TxRate,
1537 					tcb_desc);
1538 	if (tcb_desc->bAMPDUEnable) { /* AMPDU enabled */
1539 		tx_fwinfo->AllowAggregation = 1;
1540 		/* DWORD 1 */
1541 		tx_fwinfo->RxMF = tcb_desc->ampdu_factor;
1542 		tx_fwinfo->RxAMD = tcb_desc->ampdu_density & 0x07;
1543 	} else {
1544 		tx_fwinfo->AllowAggregation = 0;
1545 		/* DWORD 1 */
1546 		tx_fwinfo->RxMF = 0;
1547 		tx_fwinfo->RxAMD = 0;
1548 	}
1549 
1550 	/* Protection mode related */
1551 	tx_fwinfo->RtsEnable = (tcb_desc->bRTSEnable) ? 1 : 0;
1552 	tx_fwinfo->CtsEnable = (tcb_desc->bCTSEnable) ? 1 : 0;
1553 	tx_fwinfo->RtsSTBC = (tcb_desc->bRTSSTBC) ? 1 : 0;
1554 	tx_fwinfo->RtsHT = (tcb_desc->rts_rate & 0x80) ? 1 : 0;
1555 	tx_fwinfo->RtsRate =  MRateToHwRate8190Pci((u8)tcb_desc->rts_rate);
1556 	tx_fwinfo->RtsSubcarrier = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->RTSSC) : 0;
1557 	tx_fwinfo->RtsBandwidth = (tx_fwinfo->RtsHT == 1) ? ((tcb_desc->bRTSBW) ? 1 : 0) : 0;
1558 	tx_fwinfo->RtsShort = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->bRTSUseShortPreamble ? 1 : 0) :
1559 			      (tcb_desc->bRTSUseShortGI ? 1 : 0);
1560 
1561 	/* Set Bandwidth and sub-channel settings. */
1562 	if (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20_40) {
1563 		if (tcb_desc->bPacketBW) {
1564 			tx_fwinfo->TxBandwidth = 1;
1565 			/* use duplicated mode */
1566 			tx_fwinfo->TxSubCarrier = 0;
1567 		} else {
1568 			tx_fwinfo->TxBandwidth = 0;
1569 			tx_fwinfo->TxSubCarrier = priv->nCur40MhzPrimeSC;
1570 		}
1571 	} else {
1572 		tx_fwinfo->TxBandwidth = 0;
1573 		tx_fwinfo->TxSubCarrier = 0;
1574 	}
1575 
1576 	/* Fill Tx descriptor */
1577 	memset(tx_desc, 0, sizeof(tx_desc_819x_usb));
1578 	/* DWORD 0 */
1579 	tx_desc->LINIP = 0;
1580 	tx_desc->CmdInit = 1;
1581 	tx_desc->Offset =  sizeof(tx_fwinfo_819x_usb) + 8;
1582 	tx_desc->PktSize = (skb->len - TX_PACKET_SHIFT_BYTES) & 0xffff;
1583 
1584 	/*DWORD 1*/
1585 	tx_desc->SecCAMID = 0;
1586 	tx_desc->RATid = tcb_desc->RATRIndex;
1587 	tx_desc->NoEnc = 1;
1588 	tx_desc->SecType = 0x0;
1589 	if (tcb_desc->bHwSec) {
1590 		switch (priv->ieee80211->pairwise_key_type) {
1591 		case KEY_TYPE_WEP40:
1592 		case KEY_TYPE_WEP104:
1593 			tx_desc->SecType = 0x1;
1594 			tx_desc->NoEnc = 0;
1595 			break;
1596 		case KEY_TYPE_TKIP:
1597 			tx_desc->SecType = 0x2;
1598 			tx_desc->NoEnc = 0;
1599 			break;
1600 		case KEY_TYPE_CCMP:
1601 			tx_desc->SecType = 0x3;
1602 			tx_desc->NoEnc = 0;
1603 			break;
1604 		case KEY_TYPE_NA:
1605 			tx_desc->SecType = 0x0;
1606 			tx_desc->NoEnc = 1;
1607 			break;
1608 		}
1609 	}
1610 
1611 	tx_desc->QueueSelect = MapHwQueueToFirmwareQueue(tcb_desc->queue_index);
1612 	tx_desc->TxFWInfoSize =  sizeof(tx_fwinfo_819x_usb);
1613 
1614 	tx_desc->DISFB = tcb_desc->bTxDisableRateFallBack;
1615 	tx_desc->USERATE = tcb_desc->bTxUseDriverAssingedRate;
1616 
1617 	/* Fill fields that are required to be initialized in
1618 	 * all of the descriptors
1619 	 */
1620 	/* DWORD 0 */
1621 	tx_desc->FirstSeg = 1;
1622 	tx_desc->LastSeg = 1;
1623 	tx_desc->OWN = 1;
1624 
1625 	/* DWORD 2 */
1626 	tx_desc->TxBufferSize = (u32)(skb->len - USB_HWDESC_HEADER_LEN);
1627 	idx_pipe = 0x5;
1628 
1629 	/* To submit bulk urb */
1630 	usb_fill_bulk_urb(tx_urb, udev,
1631 			  usb_sndbulkpipe(udev, idx_pipe), skb->data,
1632 			  skb->len, rtl8192_tx_isr, skb);
1633 
1634 	status = usb_submit_urb(tx_urb, GFP_ATOMIC);
1635 	if (!status) {
1636 		/* We need to send 0 byte packet whenever
1637 		 * 512N bytes/64N(HIGN SPEED/NORMAL SPEED) bytes packet has
1638 		 * been transmitted. Otherwise, it will be halt to wait for
1639 		 * another packet.
1640 		 */
1641 		bool bSend0Byte = false;
1642 		u8 zero = 0;
1643 
1644 		if (udev->speed == USB_SPEED_HIGH) {
1645 			if (skb->len > 0 && skb->len % 512 == 0)
1646 				bSend0Byte = true;
1647 		} else {
1648 			if (skb->len > 0 && skb->len % 64 == 0)
1649 				bSend0Byte = true;
1650 		}
1651 		if (bSend0Byte) {
1652 			tx_urb_zero = usb_alloc_urb(0, GFP_ATOMIC);
1653 			if (!tx_urb_zero)
1654 				return -ENOMEM;
1655 			usb_fill_bulk_urb(tx_urb_zero, udev,
1656 					  usb_sndbulkpipe(udev, idx_pipe),
1657 					  &zero, 0, tx_zero_isr, dev);
1658 			status = usb_submit_urb(tx_urb_zero, GFP_ATOMIC);
1659 			if (status) {
1660 				RT_TRACE(COMP_ERR,
1661 					 "Error TX URB for zero byte %d, error %d",
1662 					 atomic_read(&priv->tx_pending[tcb_desc->queue_index]),
1663 					 status);
1664 				return -1;
1665 			}
1666 		}
1667 		netif_trans_update(dev);
1668 		atomic_inc(&priv->tx_pending[tcb_desc->queue_index]);
1669 		return 0;
1670 	}
1671 
1672 	RT_TRACE(COMP_ERR, "Error TX URB %d, error %d",
1673 		 atomic_read(&priv->tx_pending[tcb_desc->queue_index]),
1674 		 status);
1675 	return -1;
1676 }
1677 
1678 static short rtl8192_usb_initendpoints(struct net_device *dev)
1679 {
1680 	struct r8192_priv *priv = ieee80211_priv(dev);
1681 
1682 	priv->rx_urb = kmalloc(sizeof(struct urb *) * (MAX_RX_URB + 1),
1683 			       GFP_KERNEL);
1684 	if (!priv->rx_urb)
1685 		return -ENOMEM;
1686 
1687 #ifndef JACKSON_NEW_RX
1688 	for (i = 0; i < (MAX_RX_URB + 1); i++) {
1689 		priv->rx_urb[i] = usb_alloc_urb(0, GFP_KERNEL);
1690 		if (!priv->rx_urb[i])
1691 			return -ENOMEM;
1692 
1693 		priv->rx_urb[i]->transfer_buffer =
1694 			kmalloc(RX_URB_SIZE, GFP_KERNEL);
1695 		if (!priv->rx_urb[i]->transfer_buffer)
1696 			return -ENOMEM;
1697 
1698 		priv->rx_urb[i]->transfer_buffer_length = RX_URB_SIZE;
1699 	}
1700 #endif
1701 
1702 #ifdef THOMAS_BEACON
1703 	{
1704 		long align = 0;
1705 		void *oldaddr, *newaddr;
1706 
1707 		priv->rx_urb[16] = usb_alloc_urb(0, GFP_KERNEL);
1708 		priv->oldaddr = kmalloc(16, GFP_KERNEL);
1709 		oldaddr = priv->oldaddr;
1710 		align = ((long)oldaddr) & 3;
1711 		if (align) {
1712 			newaddr = oldaddr + 4 - align;
1713 			priv->rx_urb[16]->transfer_buffer_length = 16 - 4 + align;
1714 		} else {
1715 			newaddr = oldaddr;
1716 			priv->rx_urb[16]->transfer_buffer_length = 16;
1717 		}
1718 		priv->rx_urb[16]->transfer_buffer = newaddr;
1719 	}
1720 #endif
1721 
1722 	memset(priv->rx_urb, 0, sizeof(struct urb *) * MAX_RX_URB);
1723 	priv->pp_rxskb = kcalloc(MAX_RX_URB, sizeof(struct sk_buff *),
1724 				 GFP_KERNEL);
1725 	if (!priv->pp_rxskb) {
1726 		kfree(priv->rx_urb);
1727 
1728 		priv->pp_rxskb = NULL;
1729 		priv->rx_urb = NULL;
1730 
1731 		DMESGE("Endpoint Alloc Failure");
1732 		return -ENOMEM;
1733 	}
1734 
1735 	netdev_dbg(dev, "End of initendpoints\n");
1736 	return 0;
1737 }
1738 
1739 #ifdef THOMAS_BEACON
1740 static void rtl8192_usb_deleteendpoints(struct net_device *dev)
1741 {
1742 	int i;
1743 	struct r8192_priv *priv = ieee80211_priv(dev);
1744 
1745 	if (priv->rx_urb) {
1746 		for (i = 0; i < (MAX_RX_URB + 1); i++) {
1747 			usb_kill_urb(priv->rx_urb[i]);
1748 			usb_free_urb(priv->rx_urb[i]);
1749 		}
1750 		kfree(priv->rx_urb);
1751 		priv->rx_urb = NULL;
1752 	}
1753 	kfree(priv->oldaddr);
1754 	priv->oldaddr = NULL;
1755 
1756 	kfree(priv->pp_rxskb);
1757 	priv->pp_rxskb = NULL;
1758 }
1759 #else
1760 void rtl8192_usb_deleteendpoints(struct net_device *dev)
1761 {
1762 	int i;
1763 	struct r8192_priv *priv = ieee80211_priv(dev);
1764 
1765 #ifndef JACKSON_NEW_RX
1766 
1767 	if (priv->rx_urb) {
1768 		for (i = 0; i < (MAX_RX_URB + 1); i++) {
1769 			usb_kill_urb(priv->rx_urb[i]);
1770 			kfree(priv->rx_urb[i]->transfer_buffer);
1771 			usb_free_urb(priv->rx_urb[i]);
1772 		}
1773 		kfree(priv->rx_urb);
1774 		priv->rx_urb = NULL;
1775 	}
1776 #else
1777 	kfree(priv->rx_urb);
1778 	priv->rx_urb = NULL;
1779 	kfree(priv->oldaddr);
1780 	priv->oldaddr = NULL;
1781 
1782 	kfree(priv->pp_rxskb);
1783 	priv->pp_rxskb = 0;
1784 
1785 #endif
1786 }
1787 #endif
1788 
1789 static void rtl8192_update_ratr_table(struct net_device *dev);
1790 static void rtl8192_link_change(struct net_device *dev)
1791 {
1792 	struct r8192_priv *priv = ieee80211_priv(dev);
1793 	struct ieee80211_device *ieee = priv->ieee80211;
1794 
1795 	if (ieee->state == IEEE80211_LINKED) {
1796 		rtl8192_net_update(dev);
1797 		rtl8192_update_ratr_table(dev);
1798 		/* Add this as in pure N mode, wep encryption will use software
1799 		 * way, but there is no chance to set this as wep will not set
1800 		 * group key in wext.
1801 		 */
1802 		if (ieee->pairwise_key_type == KEY_TYPE_WEP40 ||
1803 		    ieee->pairwise_key_type == KEY_TYPE_WEP104)
1804 			EnableHWSecurityConfig8192(dev);
1805 	}
1806 	/*update timing params*/
1807 	if (ieee->iw_mode == IW_MODE_INFRA || ieee->iw_mode == IW_MODE_ADHOC) {
1808 		u32 reg = 0;
1809 
1810 		read_nic_dword(dev, RCR, &reg);
1811 		if (priv->ieee80211->state == IEEE80211_LINKED)
1812 			priv->ReceiveConfig = reg |= RCR_CBSSID;
1813 		else
1814 			priv->ReceiveConfig = reg &= ~RCR_CBSSID;
1815 		write_nic_dword(dev, RCR, reg);
1816 	}
1817 }
1818 
1819 static const struct ieee80211_qos_parameters def_qos_parameters = {
1820 	{cpu_to_le16(3), cpu_to_le16(3), cpu_to_le16(3), cpu_to_le16(3)},
1821 	{cpu_to_le16(7), cpu_to_le16(7), cpu_to_le16(7), cpu_to_le16(7)},
1822 	{2, 2, 2, 2},/* aifs */
1823 	{0, 0, 0, 0},/* flags */
1824 	{0, 0, 0, 0} /* tx_op_limit */
1825 };
1826 
1827 
1828 static void rtl8192_update_beacon(struct work_struct *work)
1829 {
1830 	struct r8192_priv *priv = container_of(work, struct r8192_priv,
1831 					       update_beacon_wq.work);
1832 	struct net_device *dev = priv->ieee80211->dev;
1833 	struct ieee80211_device *ieee = priv->ieee80211;
1834 	struct ieee80211_network *net = &ieee->current_network;
1835 
1836 	if (ieee->pHTInfo->bCurrentHTSupport)
1837 		HTUpdateSelfAndPeerSetting(ieee, net);
1838 	ieee->pHTInfo->bCurrentRT2RTLongSlotTime =
1839 		net->bssht.bdRT2RTLongSlotTime;
1840 	rtl8192_update_cap(dev, net->capability);
1841 }
1842 
1843 /*
1844  * background support to run QoS activate functionality
1845  */
1846 static int WDCAPARA_ADD[] = {EDCAPARA_BE, EDCAPARA_BK,
1847 			     EDCAPARA_VI, EDCAPARA_VO};
1848 static void rtl8192_qos_activate(struct work_struct *work)
1849 {
1850 	struct r8192_priv *priv = container_of(work, struct r8192_priv,
1851 					       qos_activate);
1852 	struct net_device *dev = priv->ieee80211->dev;
1853 	struct ieee80211_qos_parameters *qos_parameters =
1854 		&priv->ieee80211->current_network.qos_data.parameters;
1855 	u8 mode = priv->ieee80211->current_network.mode;
1856 	u32  u1bAIFS;
1857 	u32 u4bAcParam;
1858 	u32 op_limit;
1859 	u32 cw_max;
1860 	u32 cw_min;
1861 	int i;
1862 
1863 	mutex_lock(&priv->mutex);
1864 	if (priv->ieee80211->state != IEEE80211_LINKED)
1865 		goto success;
1866 	RT_TRACE(COMP_QOS,
1867 		 "qos active process with associate response received\n");
1868 	/* It better set slot time at first
1869 	 *
1870 	 * For we just support b/g mode at present, let the slot time at
1871 	 * 9/20 selection
1872 	 *
1873 	 * update the ac parameter to related registers
1874 	 */
1875 	for (i = 0; i <  QOS_QUEUE_NUM; i++) {
1876 		/* Mode G/A: slotTimeTimer = 9; Mode B: 20 */
1877 		u1bAIFS = qos_parameters->aifs[i] * ((mode & (IEEE_G | IEEE_N_24G)) ? 9 : 20) + aSifsTime;
1878 		u1bAIFS <<= AC_PARAM_AIFS_OFFSET;
1879 		op_limit = (u32)le16_to_cpu(qos_parameters->tx_op_limit[i]);
1880 		op_limit <<= AC_PARAM_TXOP_LIMIT_OFFSET;
1881 		cw_max = (u32)le16_to_cpu(qos_parameters->cw_max[i]);
1882 		cw_max <<= AC_PARAM_ECW_MAX_OFFSET;
1883 		cw_min = (u32)le16_to_cpu(qos_parameters->cw_min[i]);
1884 		cw_min <<= AC_PARAM_ECW_MIN_OFFSET;
1885 		u4bAcParam = op_limit | cw_max | cw_min | u1bAIFS;
1886 		write_nic_dword(dev, WDCAPARA_ADD[i], u4bAcParam);
1887 	}
1888 
1889 success:
1890 	mutex_unlock(&priv->mutex);
1891 }
1892 
1893 static int rtl8192_qos_handle_probe_response(struct r8192_priv *priv,
1894 					     int active_network,
1895 					     struct ieee80211_network *network)
1896 {
1897 	int ret = 0;
1898 	u32 size = sizeof(struct ieee80211_qos_parameters);
1899 
1900 	if (priv->ieee80211->state != IEEE80211_LINKED)
1901 		return ret;
1902 
1903 	if (priv->ieee80211->iw_mode != IW_MODE_INFRA)
1904 		return ret;
1905 
1906 	if (network->flags & NETWORK_HAS_QOS_MASK) {
1907 		if (active_network &&
1908 		    (network->flags & NETWORK_HAS_QOS_PARAMETERS))
1909 			network->qos_data.active = network->qos_data.supported;
1910 
1911 		if ((network->qos_data.active == 1) && (active_network == 1) &&
1912 		    (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
1913 		    (network->qos_data.old_param_count !=
1914 		     network->qos_data.param_count)) {
1915 			network->qos_data.old_param_count =
1916 				network->qos_data.param_count;
1917 			schedule_work(&priv->qos_activate);
1918 			RT_TRACE(COMP_QOS,
1919 				 "QoS parameters change call qos_activate\n");
1920 		}
1921 	} else {
1922 		memcpy(&priv->ieee80211->current_network.qos_data.parameters,
1923 		       &def_qos_parameters, size);
1924 
1925 		if ((network->qos_data.active == 1) && (active_network == 1)) {
1926 			schedule_work(&priv->qos_activate);
1927 			RT_TRACE(COMP_QOS,
1928 				 "QoS was disabled call qos_activate\n");
1929 		}
1930 		network->qos_data.active = 0;
1931 		network->qos_data.supported = 0;
1932 	}
1933 
1934 	return 0;
1935 }
1936 
1937 /* handle and manage frame from beacon and probe response */
1938 static int rtl8192_handle_beacon(struct net_device *dev,
1939 				 struct ieee80211_beacon *beacon,
1940 				 struct ieee80211_network *network)
1941 {
1942 	struct r8192_priv *priv = ieee80211_priv(dev);
1943 
1944 	rtl8192_qos_handle_probe_response(priv, 1, network);
1945 	schedule_delayed_work(&priv->update_beacon_wq, 0);
1946 	return 0;
1947 }
1948 
1949 /*
1950  * handling the beaconing responses. if we get different QoS setting
1951  * off the network from the associated setting, adjust the QoS
1952  * setting
1953  */
1954 static int rtl8192_qos_association_resp(struct r8192_priv *priv,
1955 					struct ieee80211_network *network)
1956 {
1957 	unsigned long flags;
1958 	u32 size = sizeof(struct ieee80211_qos_parameters);
1959 	int set_qos_param = 0;
1960 
1961 	if (!priv || !network)
1962 		return 0;
1963 
1964 	if (priv->ieee80211->state != IEEE80211_LINKED)
1965 		return 0;
1966 
1967 	if (priv->ieee80211->iw_mode != IW_MODE_INFRA)
1968 		return 0;
1969 
1970 	spin_lock_irqsave(&priv->ieee80211->lock, flags);
1971 	if (network->flags & NETWORK_HAS_QOS_PARAMETERS) {
1972 		memcpy(&priv->ieee80211->current_network.qos_data.parameters,
1973 		       &network->qos_data.parameters,
1974 		       sizeof(struct ieee80211_qos_parameters));
1975 		priv->ieee80211->current_network.qos_data.active = 1;
1976 		set_qos_param = 1;
1977 		/* update qos parameter for current network */
1978 		priv->ieee80211->current_network.qos_data.old_param_count =
1979 			priv->ieee80211->current_network.qos_data.param_count;
1980 		priv->ieee80211->current_network.qos_data.param_count =
1981 			network->qos_data.param_count;
1982 	} else {
1983 		memcpy(&priv->ieee80211->current_network.qos_data.parameters,
1984 		       &def_qos_parameters, size);
1985 		priv->ieee80211->current_network.qos_data.active = 0;
1986 		priv->ieee80211->current_network.qos_data.supported = 0;
1987 		set_qos_param = 1;
1988 	}
1989 
1990 	spin_unlock_irqrestore(&priv->ieee80211->lock, flags);
1991 
1992 	RT_TRACE(COMP_QOS, "%s: network->flags = %d,%d\n", __func__,
1993 		 network->flags,
1994 		 priv->ieee80211->current_network.qos_data.active);
1995 	if (set_qos_param == 1)
1996 		schedule_work(&priv->qos_activate);
1997 
1998 
1999 	return 0;
2000 }
2001 
2002 
2003 static int rtl8192_handle_assoc_response(
2004 		struct net_device *dev,
2005 		struct ieee80211_assoc_response_frame *resp,
2006 		struct ieee80211_network *network)
2007 {
2008 	struct r8192_priv *priv = ieee80211_priv(dev);
2009 
2010 	rtl8192_qos_association_resp(priv, network);
2011 	return 0;
2012 }
2013 
2014 
2015 static void rtl8192_update_ratr_table(struct net_device *dev)
2016 {
2017 	struct r8192_priv *priv = ieee80211_priv(dev);
2018 	struct ieee80211_device *ieee = priv->ieee80211;
2019 	u8 *pMcsRate = ieee->dot11HTOperationalRateSet;
2020 	u32 ratr_value = 0;
2021 	u8 rate_index = 0;
2022 
2023 	rtl8192_config_rate(dev, (u16 *)(&ratr_value));
2024 	ratr_value |= (*(u16 *)(pMcsRate)) << 12;
2025 	switch (ieee->mode) {
2026 	case IEEE_A:
2027 		ratr_value &= 0x00000FF0;
2028 		break;
2029 	case IEEE_B:
2030 		ratr_value &= 0x0000000F;
2031 		break;
2032 	case IEEE_G:
2033 		ratr_value &= 0x00000FF7;
2034 		break;
2035 	case IEEE_N_24G:
2036 	case IEEE_N_5G:
2037 		if (ieee->pHTInfo->PeerMimoPs == 0) { /* MIMO_PS_STATIC */
2038 			ratr_value &= 0x0007F007;
2039 		} else {
2040 			if (priv->rf_type == RF_1T2R)
2041 				ratr_value &= 0x000FF007;
2042 			else
2043 				ratr_value &= 0x0F81F007;
2044 		}
2045 		break;
2046 	default:
2047 		break;
2048 	}
2049 	ratr_value &= 0x0FFFFFFF;
2050 	if (ieee->pHTInfo->bCurTxBW40MHz && ieee->pHTInfo->bCurShortGI40MHz)
2051 		ratr_value |= 0x80000000;
2052 	else if (!ieee->pHTInfo->bCurTxBW40MHz &&
2053 		 ieee->pHTInfo->bCurShortGI20MHz)
2054 		ratr_value |= 0x80000000;
2055 	write_nic_dword(dev, RATR0 + rate_index * 4, ratr_value);
2056 	write_nic_byte(dev, UFWP, 1);
2057 }
2058 
2059 static u8 ccmp_ie[4] = {0x00, 0x50, 0xf2, 0x04};
2060 static u8 ccmp_rsn_ie[4] = {0x00, 0x0f, 0xac, 0x04};
2061 static bool GetNmodeSupportBySecCfg8192(struct net_device *dev)
2062 {
2063 	struct r8192_priv *priv = ieee80211_priv(dev);
2064 	struct ieee80211_device *ieee = priv->ieee80211;
2065 	struct ieee80211_network *network = &ieee->current_network;
2066 	int wpa_ie_len = ieee->wpa_ie_len;
2067 	struct ieee80211_crypt_data *crypt;
2068 	int encrypt;
2069 
2070 	crypt = ieee->crypt[ieee->tx_keyidx];
2071 	/* we use connecting AP's capability instead of only security config
2072 	 * on our driver to distinguish whether it should use N mode or G mode
2073 	 */
2074 	encrypt = (network->capability & WLAN_CAPABILITY_PRIVACY) ||
2075 		  (ieee->host_encrypt && crypt && crypt->ops &&
2076 		   (strcmp(crypt->ops->name, "WEP") == 0));
2077 
2078 	/* simply judge  */
2079 	if (encrypt && (wpa_ie_len == 0)) {
2080 		/* wep encryption, no N mode setting */
2081 		return false;
2082 	} else if ((wpa_ie_len != 0)) {
2083 		/* parse pairwise key type */
2084 		if (((ieee->wpa_ie[0] == 0xdd) && (!memcmp(&(ieee->wpa_ie[14]), ccmp_ie, 4))) || ((ieee->wpa_ie[0] == 0x30) && (!memcmp(&ieee->wpa_ie[10], ccmp_rsn_ie, 4))))
2085 			return true;
2086 		else
2087 			return false;
2088 	} else {
2089 		return true;
2090 	}
2091 
2092 	return true;
2093 }
2094 
2095 static bool GetHalfNmodeSupportByAPs819xUsb(struct net_device *dev)
2096 {
2097 	struct r8192_priv *priv = ieee80211_priv(dev);
2098 
2099 	return priv->ieee80211->bHalfWirelessN24GMode;
2100 }
2101 
2102 static void rtl8192_refresh_supportrate(struct r8192_priv *priv)
2103 {
2104 	struct ieee80211_device *ieee = priv->ieee80211;
2105 	/* We do not consider set support rate for ABG mode, only
2106 	 * HT MCS rate is set here.
2107 	 */
2108 	if (ieee->mode == WIRELESS_MODE_N_24G ||
2109 	    ieee->mode == WIRELESS_MODE_N_5G)
2110 		memcpy(ieee->Regdot11HTOperationalRateSet,
2111 		       ieee->RegHTSuppRateSet, 16);
2112 	else
2113 		memset(ieee->Regdot11HTOperationalRateSet, 0, 16);
2114 }
2115 
2116 static u8 rtl8192_getSupportedWireleeMode(struct net_device *dev)
2117 {
2118 	struct r8192_priv *priv = ieee80211_priv(dev);
2119 	u8 ret = 0;
2120 
2121 	switch (priv->rf_chip) {
2122 	case RF_8225:
2123 	case RF_8256:
2124 	case RF_PSEUDO_11N:
2125 		ret = WIRELESS_MODE_N_24G | WIRELESS_MODE_G | WIRELESS_MODE_B;
2126 		break;
2127 	case RF_8258:
2128 		ret = WIRELESS_MODE_A | WIRELESS_MODE_N_5G;
2129 		break;
2130 	default:
2131 		ret = WIRELESS_MODE_B;
2132 		break;
2133 	}
2134 	return ret;
2135 }
2136 
2137 static void rtl8192_SetWirelessMode(struct net_device *dev, u8 wireless_mode)
2138 {
2139 	struct r8192_priv *priv = ieee80211_priv(dev);
2140 	u8 bSupportMode = rtl8192_getSupportedWireleeMode(dev);
2141 
2142 	if (wireless_mode == WIRELESS_MODE_AUTO ||
2143 	    (wireless_mode & bSupportMode) == 0) {
2144 		if (bSupportMode & WIRELESS_MODE_N_24G) {
2145 			wireless_mode = WIRELESS_MODE_N_24G;
2146 		} else if (bSupportMode & WIRELESS_MODE_N_5G) {
2147 			wireless_mode = WIRELESS_MODE_N_5G;
2148 		} else if ((bSupportMode & WIRELESS_MODE_A)) {
2149 			wireless_mode = WIRELESS_MODE_A;
2150 		} else if ((bSupportMode & WIRELESS_MODE_G)) {
2151 			wireless_mode = WIRELESS_MODE_G;
2152 		} else if ((bSupportMode & WIRELESS_MODE_B)) {
2153 			wireless_mode = WIRELESS_MODE_B;
2154 		} else {
2155 			RT_TRACE(COMP_ERR,
2156 				 "%s(), No valid wireless mode supported, SupportedWirelessMode(%x)!!!\n",
2157 				 __func__, bSupportMode);
2158 			wireless_mode = WIRELESS_MODE_B;
2159 		}
2160 	}
2161 #ifdef TO_DO_LIST
2162 	/* TODO: this function doesn't work well at this time,
2163 	 * we should wait for FPGA
2164 	 */
2165 	ActUpdateChannelAccessSetting(
2166 			pAdapter, pHalData->CurrentWirelessMode,
2167 			&pAdapter->MgntInfo.Info8185.ChannelAccessSetting);
2168 #endif
2169 	priv->ieee80211->mode = wireless_mode;
2170 
2171 	if (wireless_mode == WIRELESS_MODE_N_24G ||
2172 	    wireless_mode == WIRELESS_MODE_N_5G)
2173 		priv->ieee80211->pHTInfo->bEnableHT = 1;
2174 	else
2175 		priv->ieee80211->pHTInfo->bEnableHT = 0;
2176 	RT_TRACE(COMP_INIT, "Current Wireless Mode is %x\n", wireless_mode);
2177 	rtl8192_refresh_supportrate(priv);
2178 }
2179 
2180 /* init priv variables here. only non_zero value should be initialized here. */
2181 static void rtl8192_init_priv_variable(struct net_device *dev)
2182 {
2183 	struct r8192_priv *priv = ieee80211_priv(dev);
2184 	u8 i;
2185 
2186 	priv->card_8192 = NIC_8192U;
2187 	priv->chan = 1; /* set to channel 1 */
2188 	priv->ieee80211->mode = WIRELESS_MODE_AUTO; /* SET AUTO */
2189 	priv->ieee80211->iw_mode = IW_MODE_INFRA;
2190 	priv->ieee80211->ieee_up = 0;
2191 	priv->retry_rts = DEFAULT_RETRY_RTS;
2192 	priv->retry_data = DEFAULT_RETRY_DATA;
2193 	priv->ieee80211->rts = DEFAULT_RTS_THRESHOLD;
2194 	priv->ieee80211->rate = 110; /* 11 mbps */
2195 	priv->ieee80211->short_slot = 1;
2196 	priv->promisc = (dev->flags & IFF_PROMISC) ? 1 : 0;
2197 	priv->CckPwEnl = 6;
2198 	/* for silent reset */
2199 	priv->IrpPendingCount = 1;
2200 	priv->ResetProgress = RESET_TYPE_NORESET;
2201 	priv->bForcedSilentReset = false;
2202 	priv->bDisableNormalResetCheck = false;
2203 	priv->force_reset = false;
2204 
2205 	/* we don't use FW read/write RF until stable firmware is available. */
2206 	priv->ieee80211->FwRWRF = 0;
2207 	priv->ieee80211->current_network.beacon_interval =
2208 		DEFAULT_BEACONINTERVAL;
2209 	priv->ieee80211->softmac_features  = IEEE_SOFTMAC_SCAN |
2210 		IEEE_SOFTMAC_ASSOCIATE | IEEE_SOFTMAC_PROBERQ |
2211 		IEEE_SOFTMAC_PROBERS | IEEE_SOFTMAC_TX_QUEUE |
2212 		IEEE_SOFTMAC_BEACONS;
2213 
2214 	priv->ieee80211->active_scan = 1;
2215 	priv->ieee80211->modulation =
2216 		IEEE80211_CCK_MODULATION | IEEE80211_OFDM_MODULATION;
2217 	priv->ieee80211->host_encrypt = 1;
2218 	priv->ieee80211->host_decrypt = 1;
2219 	priv->ieee80211->start_send_beacons = NULL;
2220 	priv->ieee80211->stop_send_beacons = NULL;
2221 	priv->ieee80211->softmac_hard_start_xmit = rtl8192_hard_start_xmit;
2222 	priv->ieee80211->set_chan = rtl8192_set_chan;
2223 	priv->ieee80211->link_change = rtl8192_link_change;
2224 	priv->ieee80211->softmac_data_hard_start_xmit = rtl8192_hard_data_xmit;
2225 	priv->ieee80211->data_hard_stop = rtl8192_data_hard_stop;
2226 	priv->ieee80211->data_hard_resume = rtl8192_data_hard_resume;
2227 	priv->ieee80211->init_wmmparam_flag = 0;
2228 	priv->ieee80211->fts = DEFAULT_FRAG_THRESHOLD;
2229 	priv->ieee80211->check_nic_enough_desc = check_nic_enough_desc;
2230 	priv->ieee80211->tx_headroom = TX_PACKET_SHIFT_BYTES;
2231 	priv->ieee80211->qos_support = 1;
2232 
2233 	priv->ieee80211->SetBWModeHandler = rtl8192_SetBWMode;
2234 	priv->ieee80211->handle_assoc_response = rtl8192_handle_assoc_response;
2235 	priv->ieee80211->handle_beacon = rtl8192_handle_beacon;
2236 
2237 	priv->ieee80211->GetNmodeSupportBySecCfg = GetNmodeSupportBySecCfg8192;
2238 	priv->ieee80211->GetHalfNmodeSupportByAPsHandler =
2239 		GetHalfNmodeSupportByAPs819xUsb;
2240 	priv->ieee80211->SetWirelessMode = rtl8192_SetWirelessMode;
2241 
2242 	priv->ieee80211->InitialGainHandler = InitialGain819xUsb;
2243 	priv->card_type = USB;
2244 #ifdef TO_DO_LIST
2245 	if (Adapter->bInHctTest) {
2246 		pHalData->ShortRetryLimit = 7;
2247 		pHalData->LongRetryLimit = 7;
2248 	}
2249 #endif
2250 	priv->ShortRetryLimit = 0x30;
2251 	priv->LongRetryLimit = 0x30;
2252 	priv->EarlyRxThreshold = 7;
2253 	priv->enable_gpio0 = 0;
2254 	priv->TransmitConfig =
2255 		/* Max DMA Burst Size per Tx DMA Burst, 7: reserved. */
2256 		(TCR_MXDMA_2048 << TCR_MXDMA_OFFSET)	  |
2257 		/* Short retry limit */
2258 		(priv->ShortRetryLimit << TCR_SRL_OFFSET) |
2259 		/* Long retry limit */
2260 		(priv->LongRetryLimit << TCR_LRL_OFFSET)  |
2261 		/* FALSE: HW provides PLCP length and LENGEXT
2262 		 * TRUE: SW provides them
2263 		 */
2264 		(false ? TCR_SAT : 0);
2265 #ifdef TO_DO_LIST
2266 	if (Adapter->bInHctTest)
2267 		pHalData->ReceiveConfig =
2268 			pHalData->CSMethod |
2269 			/* accept management/data */
2270 			RCR_AMF | RCR_ADF |
2271 			/* accept control frame for SW
2272 			 * AP needs PS-poll
2273 			 */
2274 			RCR_ACF |
2275 			/* accept BC/MC/UC */
2276 			RCR_AB | RCR_AM | RCR_APM |
2277 			/* accept ICV/CRC error
2278 			 * packet
2279 			 */
2280 			RCR_AICV | RCR_ACRC32 |
2281 			/* Max DMA Burst Size per Tx
2282 			 * DMA Burst, 7: unlimited.
2283 			 */
2284 			((u32)7 << RCR_MXDMA_OFFSET) |
2285 			/* Rx FIFO Threshold,
2286 			 * 7: No Rx threshold.
2287 			 */
2288 			(pHalData->EarlyRxThreshold << RCR_FIFO_OFFSET) |
2289 			(pHalData->EarlyRxThreshold == 7 ? RCR_OnlyErlPkt : 0);
2290 	else
2291 
2292 #endif
2293 	priv->ReceiveConfig	=
2294 		/* accept management/data */
2295 		RCR_AMF | RCR_ADF |
2296 		/* accept control frame for SW AP needs PS-poll */
2297 		RCR_ACF |
2298 		/* accept BC/MC/UC */
2299 		RCR_AB | RCR_AM | RCR_APM |
2300 		/* Max DMA Burst Size per Rx DMA Burst, 7: unlimited. */
2301 		((u32)7 << RCR_MXDMA_OFFSET) |
2302 		/* Rx FIFO Threshold, 7: No Rx threshold. */
2303 		(priv->EarlyRxThreshold << RX_FIFO_THRESHOLD_SHIFT) |
2304 		(priv->EarlyRxThreshold == 7 ? RCR_ONLYERLPKT : 0);
2305 
2306 	priv->AcmControl = 0;
2307 	priv->pFirmware = kzalloc(sizeof(rt_firmware), GFP_KERNEL);
2308 
2309 	/* rx related queue */
2310 	skb_queue_head_init(&priv->rx_queue);
2311 	skb_queue_head_init(&priv->skb_queue);
2312 
2313 	/* Tx related queue */
2314 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
2315 		skb_queue_head_init(&priv->ieee80211->skb_waitQ[i]);
2316 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
2317 		skb_queue_head_init(&priv->ieee80211->skb_aggQ[i]);
2318 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
2319 		skb_queue_head_init(&priv->ieee80211->skb_drv_aggQ[i]);
2320 	priv->rf_set_chan = rtl8192_phy_SwChnl;
2321 }
2322 
2323 /* init lock here */
2324 static void rtl8192_init_priv_lock(struct r8192_priv *priv)
2325 {
2326 	spin_lock_init(&priv->tx_lock);
2327 	spin_lock_init(&priv->irq_lock);
2328 	mutex_init(&priv->wx_mutex);
2329 	mutex_init(&priv->mutex);
2330 }
2331 
2332 static void rtl819x_watchdog_wqcallback(struct work_struct *work);
2333 
2334 static void rtl8192_irq_rx_tasklet(struct r8192_priv *priv);
2335 /* init tasklet and wait_queue here. only 2.6 above kernel is considered */
2336 #define DRV_NAME "wlan0"
2337 static void rtl8192_init_priv_task(struct net_device *dev)
2338 {
2339 	struct r8192_priv *priv = ieee80211_priv(dev);
2340 
2341 
2342 	INIT_WORK(&priv->reset_wq, rtl8192_restart);
2343 
2344 	INIT_DELAYED_WORK(&priv->watch_dog_wq,
2345 			  rtl819x_watchdog_wqcallback);
2346 	INIT_DELAYED_WORK(&priv->txpower_tracking_wq,
2347 			  dm_txpower_trackingcallback);
2348 	INIT_DELAYED_WORK(&priv->rfpath_check_wq,
2349 			  dm_rf_pathcheck_workitemcallback);
2350 	INIT_DELAYED_WORK(&priv->update_beacon_wq,
2351 			  rtl8192_update_beacon);
2352 	INIT_DELAYED_WORK(&priv->initialgain_operate_wq,
2353 			  InitialGainOperateWorkItemCallBack);
2354 	INIT_WORK(&priv->qos_activate, rtl8192_qos_activate);
2355 
2356 	tasklet_init(&priv->irq_rx_tasklet,
2357 		     (void(*)(unsigned long))rtl8192_irq_rx_tasklet,
2358 		     (unsigned long)priv);
2359 }
2360 
2361 static void rtl8192_get_eeprom_size(struct net_device *dev)
2362 {
2363 	u16 curCR = 0;
2364 	struct r8192_priv *priv = ieee80211_priv(dev);
2365 
2366 	RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
2367 	read_nic_word_E(dev, EPROM_CMD, &curCR);
2368 	RT_TRACE(COMP_EPROM,
2369 		 "read from Reg EPROM_CMD(%x):%x\n", EPROM_CMD, curCR);
2370 	/* whether need I consider BIT(5?) */
2371 	priv->epromtype =
2372 		(curCR & Cmd9346CR_9356SEL) ? EPROM_93c56 : EPROM_93c46;
2373 	RT_TRACE(COMP_EPROM,
2374 		 "<===========%s(), epromtype:%d\n", __func__, priv->epromtype);
2375 }
2376 
2377 /* used to swap endian. as ntohl & htonl are not necessary
2378  * to swap endian, so use this instead.
2379  */
2380 static inline u16 endian_swap(u16 *data)
2381 {
2382 	u16 tmp = *data;
2383 	*data = (tmp >> 8) | (tmp << 8);
2384 	return *data;
2385 }
2386 
2387 static int rtl8192_read_eeprom_info(struct net_device *dev)
2388 {
2389 	u16 wEPROM_ID = 0;
2390 	u8 bMac_Tmp_Addr[6] = {0x00, 0xe0, 0x4c, 0x00, 0x00, 0x02};
2391 	u8 bLoad_From_EEPOM = false;
2392 	struct r8192_priv *priv = ieee80211_priv(dev);
2393 	u16 tmpValue = 0;
2394 	int i;
2395 	int ret;
2396 
2397 	RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
2398 	ret = eprom_read(dev, 0); /* first read EEPROM ID out; */
2399 	if (ret < 0)
2400 		return ret;
2401 	wEPROM_ID = (u16)ret;
2402 	RT_TRACE(COMP_EPROM, "EEPROM ID is 0x%x\n", wEPROM_ID);
2403 
2404 	if (wEPROM_ID != RTL8190_EEPROM_ID)
2405 		RT_TRACE(COMP_ERR,
2406 			 "EEPROM ID is invalid(is 0x%x(should be 0x%x)\n",
2407 			 wEPROM_ID, RTL8190_EEPROM_ID);
2408 	else
2409 		bLoad_From_EEPOM = true;
2410 
2411 	if (bLoad_From_EEPOM) {
2412 		tmpValue = eprom_read(dev, EEPROM_VID >> 1);
2413 		ret = eprom_read(dev, EEPROM_VID >> 1);
2414 		if (ret < 0)
2415 			return ret;
2416 		tmpValue = (u16)ret;
2417 		priv->eeprom_vid = endian_swap(&tmpValue);
2418 		ret = eprom_read(dev, EEPROM_PID >> 1);
2419 		if (ret < 0)
2420 			return ret;
2421 		priv->eeprom_pid = (u16)ret;
2422 		ret = eprom_read(dev, EEPROM_ChannelPlan >> 1);
2423 		if (ret < 0)
2424 			return ret;
2425 		tmpValue = (u16)ret;
2426 		priv->eeprom_ChannelPlan = (tmpValue & 0xff00) >> 8;
2427 		priv->btxpowerdata_readfromEEPORM = true;
2428 		ret = eprom_read(dev, (EEPROM_Customer_ID >> 1)) >> 8;
2429 		if (ret < 0)
2430 			return ret;
2431 		priv->eeprom_CustomerID = (u16)ret;
2432 	} else {
2433 		priv->eeprom_vid = 0;
2434 		priv->eeprom_pid = 0;
2435 		priv->card_8192_version = VERSION_819xU_B;
2436 		priv->eeprom_ChannelPlan = 0;
2437 		priv->eeprom_CustomerID = 0;
2438 	}
2439 	RT_TRACE(COMP_EPROM,
2440 		 "vid:0x%4x, pid:0x%4x, CustomID:0x%2x, ChanPlan:0x%x\n",
2441 		 priv->eeprom_vid, priv->eeprom_pid, priv->eeprom_CustomerID,
2442 		 priv->eeprom_ChannelPlan);
2443 	/* set channelplan from eeprom */
2444 	priv->ChannelPlan = priv->eeprom_ChannelPlan;
2445 	if (bLoad_From_EEPOM) {
2446 		int i;
2447 
2448 		for (i = 0; i < 6; i += 2) {
2449 			ret = eprom_read(dev, (u16)((EEPROM_NODE_ADDRESS_BYTE_0 + i) >> 1));
2450 			if (ret < 0)
2451 				return ret;
2452 			*(u16 *)(&dev->dev_addr[i]) = (u16)ret;
2453 		}
2454 	} else {
2455 		memcpy(dev->dev_addr, bMac_Tmp_Addr, 6);
2456 		/* should I set IDR0 here? */
2457 	}
2458 	RT_TRACE(COMP_EPROM, "MAC addr:%pM\n", dev->dev_addr);
2459 	priv->rf_type = RTL819X_DEFAULT_RF_TYPE; /* default 1T2R */
2460 	priv->rf_chip = RF_8256;
2461 
2462 	if (priv->card_8192_version == (u8)VERSION_819xU_A) {
2463 		/* read Tx power gain offset of legacy OFDM to HT rate */
2464 		if (bLoad_From_EEPOM) {
2465 			ret = eprom_read(dev, (EEPROM_TxPowerDiff >> 1));
2466 			if (ret < 0)
2467 				return ret;
2468 			priv->EEPROMTxPowerDiff = ((u16)ret & 0xff00) >> 8;
2469 		} else
2470 			priv->EEPROMTxPowerDiff = EEPROM_Default_TxPower;
2471 		RT_TRACE(COMP_EPROM, "TxPowerDiff:%d\n", priv->EEPROMTxPowerDiff);
2472 		/* read ThermalMeter from EEPROM */
2473 		if (bLoad_From_EEPOM) {
2474 			ret = eprom_read(dev, (EEPROM_ThermalMeter >> 1));
2475 			if (ret < 0)
2476 				return ret;
2477 			priv->EEPROMThermalMeter = (u8)((u16)ret & 0x00ff);
2478 		} else
2479 			priv->EEPROMThermalMeter = EEPROM_Default_ThermalMeter;
2480 		RT_TRACE(COMP_EPROM, "ThermalMeter:%d\n", priv->EEPROMThermalMeter);
2481 		/* for tx power track */
2482 		priv->TSSI_13dBm = priv->EEPROMThermalMeter * 100;
2483 		/* read antenna tx power offset of B/C/D to A from EEPROM */
2484 		if (bLoad_From_EEPOM) {
2485 			ret = eprom_read(dev, (EEPROM_PwDiff >> 1));
2486 			if (ret < 0)
2487 				return ret;
2488 			priv->EEPROMPwDiff = ((u16)ret & 0x0f00) >> 8;
2489 		} else
2490 			priv->EEPROMPwDiff = EEPROM_Default_PwDiff;
2491 		RT_TRACE(COMP_EPROM, "TxPwDiff:%d\n", priv->EEPROMPwDiff);
2492 		/* Read CrystalCap from EEPROM */
2493 		if (bLoad_From_EEPOM) {
2494 			ret = eprom_read(dev, (EEPROM_CrystalCap >> 1));
2495 			if (ret < 0)
2496 				return ret;
2497 			priv->EEPROMCrystalCap = (u16)ret & 0x0f;
2498 		} else
2499 			priv->EEPROMCrystalCap = EEPROM_Default_CrystalCap;
2500 		RT_TRACE(COMP_EPROM, "CrystalCap = %d\n", priv->EEPROMCrystalCap);
2501 		/* get per-channel Tx power level */
2502 		if (bLoad_From_EEPOM) {
2503 			ret = eprom_read(dev, (EEPROM_TxPwIndex_Ver >> 1));
2504 			if (ret < 0)
2505 				return ret;
2506 			priv->EEPROM_Def_Ver = ((u16)ret & 0xff00) >> 8;
2507 		} else
2508 			priv->EEPROM_Def_Ver = 1;
2509 		RT_TRACE(COMP_EPROM, "EEPROM_DEF_VER:%d\n", priv->EEPROM_Def_Ver);
2510 		if (priv->EEPROM_Def_Ver == 0) { /* old eeprom definition */
2511 			int i;
2512 
2513 			if (bLoad_From_EEPOM) {
2514 				ret = eprom_read(dev, (EEPROM_TxPwIndex_CCK >> 1));
2515 				if (ret < 0)
2516 					return ret;
2517 				priv->EEPROMTxPowerLevelCCK = ((u16)ret & 0xff) >> 8;
2518 			} else
2519 				priv->EEPROMTxPowerLevelCCK = 0x10;
2520 			RT_TRACE(COMP_EPROM, "CCK Tx Power Levl: 0x%02x\n", priv->EEPROMTxPowerLevelCCK);
2521 			for (i = 0; i < 3; i++) {
2522 				if (bLoad_From_EEPOM) {
2523 					ret = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G + i) >> 1);
2524 					if (ret < 0)
2525 						return ret;
2526 					if (((EEPROM_TxPwIndex_OFDM_24G + i) % 2) == 0)
2527 						tmpValue = (u16)ret & 0x00ff;
2528 					else
2529 						tmpValue = ((u16)ret & 0xff00) >> 8;
2530 				} else {
2531 					tmpValue = 0x10;
2532 				}
2533 				priv->EEPROMTxPowerLevelOFDM24G[i] = (u8)tmpValue;
2534 				RT_TRACE(COMP_EPROM, "OFDM 2.4G Tx Power Level, Index %d = 0x%02x\n", i, priv->EEPROMTxPowerLevelCCK);
2535 			}
2536 		} else if (priv->EEPROM_Def_Ver == 1) {
2537 			if (bLoad_From_EEPOM) {
2538 				ret = eprom_read(dev, EEPROM_TxPwIndex_CCK_V1 >> 1);
2539 				if (ret < 0)
2540 					return ret;
2541 				tmpValue = ((u16)ret & 0xff00) >> 8;
2542 			} else {
2543 				tmpValue = 0x10;
2544 			}
2545 			priv->EEPROMTxPowerLevelCCK_V1[0] = (u8)tmpValue;
2546 
2547 			if (bLoad_From_EEPOM) {
2548 				ret = eprom_read(dev, (EEPROM_TxPwIndex_CCK_V1 + 2) >> 1);
2549 				if (ret < 0)
2550 					return ret;
2551 				tmpValue = (u16)ret;
2552 			} else
2553 				tmpValue = 0x1010;
2554 			*((u16 *)(&priv->EEPROMTxPowerLevelCCK_V1[1])) = tmpValue;
2555 			if (bLoad_From_EEPOM)
2556 				tmpValue = eprom_read(dev,
2557 					EEPROM_TxPwIndex_OFDM_24G_V1 >> 1);
2558 			else
2559 				tmpValue = 0x1010;
2560 			*((u16 *)(&priv->EEPROMTxPowerLevelOFDM24G[0])) = tmpValue;
2561 			if (bLoad_From_EEPOM)
2562 				tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G_V1 + 2) >> 1);
2563 			else
2564 				tmpValue = 0x10;
2565 			priv->EEPROMTxPowerLevelOFDM24G[2] = (u8)tmpValue;
2566 		} /* endif EEPROM_Def_Ver == 1 */
2567 
2568 		/* update HAL variables */
2569 		for (i = 0; i < 14; i++) {
2570 			if (i <= 3)
2571 				priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[0];
2572 			else if (i >= 4 && i <= 9)
2573 				priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[1];
2574 			else
2575 				priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[2];
2576 		}
2577 
2578 		for (i = 0; i < 14; i++) {
2579 			if (priv->EEPROM_Def_Ver == 0) {
2580 				if (i <= 3)
2581 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[0] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
2582 				else if (i >= 4 && i <= 9)
2583 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK;
2584 				else
2585 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[2] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
2586 			} else if (priv->EEPROM_Def_Ver == 1) {
2587 				if (i <= 3)
2588 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[0];
2589 				else if (i >= 4 && i <= 9)
2590 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[1];
2591 				else
2592 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[2];
2593 			}
2594 		}
2595 		priv->TxPowerDiff = priv->EEPROMPwDiff;
2596 		/* Antenna B gain offset to antenna A, bit0~3 */
2597 		priv->AntennaTxPwDiff[0] = (priv->EEPROMTxPowerDiff & 0xf);
2598 		/* Antenna C gain offset to antenna A, bit4~7 */
2599 		priv->AntennaTxPwDiff[1] =
2600 			(priv->EEPROMTxPowerDiff & 0xf0) >> 4;
2601 		/* CrystalCap, bit12~15 */
2602 		priv->CrystalCap = priv->EEPROMCrystalCap;
2603 		/* ThermalMeter, bit0~3 for RFIC1, bit4~7 for RFIC2
2604 		 * 92U does not enable TX power tracking.
2605 		 */
2606 		priv->ThermalMeter[0] = priv->EEPROMThermalMeter;
2607 	} /* end if VersionID == VERSION_819xU_A */
2608 
2609 	/* for dlink led */
2610 	switch (priv->eeprom_CustomerID) {
2611 	case EEPROM_CID_RUNTOP:
2612 		priv->CustomerID = RT_CID_819x_RUNTOP;
2613 		break;
2614 
2615 	case EEPROM_CID_DLINK:
2616 		priv->CustomerID = RT_CID_DLINK;
2617 		break;
2618 
2619 	default:
2620 		priv->CustomerID = RT_CID_DEFAULT;
2621 		break;
2622 	}
2623 
2624 	switch (priv->CustomerID) {
2625 	case RT_CID_819x_RUNTOP:
2626 		priv->LedStrategy = SW_LED_MODE2;
2627 		break;
2628 
2629 	case RT_CID_DLINK:
2630 		priv->LedStrategy = SW_LED_MODE4;
2631 		break;
2632 
2633 	default:
2634 		priv->LedStrategy = SW_LED_MODE0;
2635 		break;
2636 	}
2637 
2638 
2639 	if (priv->rf_type == RF_1T2R)
2640 		RT_TRACE(COMP_EPROM, "\n1T2R config\n");
2641 	else
2642 		RT_TRACE(COMP_EPROM, "\n2T4R config\n");
2643 
2644 	/* We can only know RF type in the function. So we have to init
2645 	 * DIG RATR table again.
2646 	 */
2647 	init_rate_adaptive(dev);
2648 
2649 	RT_TRACE(COMP_EPROM, "<===========%s()\n", __func__);
2650 
2651 	return 0;
2652 }
2653 
2654 static short rtl8192_get_channel_map(struct net_device *dev)
2655 {
2656 	struct r8192_priv *priv = ieee80211_priv(dev);
2657 
2658 	if (priv->ChannelPlan > COUNTRY_CODE_GLOBAL_DOMAIN) {
2659 		netdev_err(dev,
2660 			   "rtl8180_init: Error channel plan! Set to default.\n");
2661 		priv->ChannelPlan = 0;
2662 	}
2663 	RT_TRACE(COMP_INIT, "Channel plan is %d\n", priv->ChannelPlan);
2664 
2665 	rtl819x_set_channel_map(priv->ChannelPlan, priv);
2666 	return 0;
2667 }
2668 
2669 static short rtl8192_init(struct net_device *dev)
2670 {
2671 	struct r8192_priv *priv = ieee80211_priv(dev);
2672 	int err;
2673 
2674 	memset(&(priv->stats), 0, sizeof(struct Stats));
2675 	memset(priv->txqueue_to_outpipemap, 0, 9);
2676 #ifdef PIPE12
2677 	{
2678 		int i = 0;
2679 		u8 queuetopipe[] = {3, 2, 1, 0, 4, 8, 7, 6, 5};
2680 
2681 		memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
2682 	}
2683 #else
2684 	{
2685 		u8 queuetopipe[] = {3, 2, 1, 0, 4, 4, 0, 4, 4};
2686 
2687 		memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
2688 	}
2689 #endif
2690 	rtl8192_init_priv_variable(dev);
2691 	rtl8192_init_priv_lock(priv);
2692 	rtl8192_init_priv_task(dev);
2693 	rtl8192_get_eeprom_size(dev);
2694 	err = rtl8192_read_eeprom_info(dev);
2695 	if (err) {
2696 		DMESG("Reading EEPROM info failed");
2697 		return err;
2698 	}
2699 	rtl8192_get_channel_map(dev);
2700 	init_hal_dm(dev);
2701 	timer_setup(&priv->watch_dog_timer, watch_dog_timer_callback, 0);
2702 	if (rtl8192_usb_initendpoints(dev) != 0) {
2703 		DMESG("Endopoints initialization failed");
2704 		return -ENOMEM;
2705 	}
2706 
2707 	return 0;
2708 }
2709 
2710 /******************************************************************************
2711  *function:  This function actually only set RRSR, RATR and BW_OPMODE registers
2712  *	     not to do all the hw config as its name says
2713  *   input:  net_device dev
2714  *  output:  none
2715  *  return:  none
2716  *  notice:  This part need to modified according to the rate set we filtered
2717  * ****************************************************************************/
2718 static void rtl8192_hwconfig(struct net_device *dev)
2719 {
2720 	u32 regRATR = 0, regRRSR = 0;
2721 	u8 regBwOpMode = 0, regTmp = 0;
2722 	struct r8192_priv *priv = ieee80211_priv(dev);
2723 	u32 ratr_value = 0;
2724 
2725 	/* Set RRSR, RATR, and BW_OPMODE registers */
2726 	switch (priv->ieee80211->mode) {
2727 	case WIRELESS_MODE_B:
2728 		regBwOpMode = BW_OPMODE_20MHZ;
2729 		regRATR = RATE_ALL_CCK;
2730 		regRRSR = RATE_ALL_CCK;
2731 		break;
2732 	case WIRELESS_MODE_A:
2733 		regBwOpMode = BW_OPMODE_5G | BW_OPMODE_20MHZ;
2734 		regRATR = RATE_ALL_OFDM_AG;
2735 		regRRSR = RATE_ALL_OFDM_AG;
2736 		break;
2737 	case WIRELESS_MODE_G:
2738 		regBwOpMode = BW_OPMODE_20MHZ;
2739 		regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2740 		regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2741 		break;
2742 	case WIRELESS_MODE_AUTO:
2743 #ifdef TO_DO_LIST
2744 		if (Adapter->bInHctTest) {
2745 			regBwOpMode = BW_OPMODE_20MHZ;
2746 			regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2747 			regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2748 		} else
2749 #endif
2750 		{
2751 			regBwOpMode = BW_OPMODE_20MHZ;
2752 			regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG |
2753 				  RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
2754 			regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2755 		}
2756 		break;
2757 	case WIRELESS_MODE_N_24G:
2758 		/* It support CCK rate by default. CCK rate will be filtered
2759 		 * out only when associated AP does not support it.
2760 		 */
2761 		regBwOpMode = BW_OPMODE_20MHZ;
2762 		regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG |
2763 			  RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
2764 		regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2765 		break;
2766 	case WIRELESS_MODE_N_5G:
2767 		regBwOpMode = BW_OPMODE_5G;
2768 		regRATR = RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS |
2769 			  RATE_ALL_OFDM_2SS;
2770 		regRRSR = RATE_ALL_OFDM_AG;
2771 		break;
2772 	}
2773 
2774 	write_nic_byte(dev, BW_OPMODE, regBwOpMode);
2775 	ratr_value = regRATR;
2776 	if (priv->rf_type == RF_1T2R)
2777 		ratr_value &= ~(RATE_ALL_OFDM_2SS);
2778 	write_nic_dword(dev, RATR0, ratr_value);
2779 	write_nic_byte(dev, UFWP, 1);
2780 	read_nic_byte(dev, 0x313, &regTmp);
2781 	regRRSR = ((regTmp) << 24) | (regRRSR & 0x00ffffff);
2782 	write_nic_dword(dev, RRSR, regRRSR);
2783 
2784 	/* Set Retry Limit here */
2785 	write_nic_word(dev, RETRY_LIMIT,
2786 		       priv->ShortRetryLimit << RETRY_LIMIT_SHORT_SHIFT |
2787 		       priv->LongRetryLimit << RETRY_LIMIT_LONG_SHIFT);
2788 	/* Set Contention Window here */
2789 
2790 	/* Set Tx AGC */
2791 
2792 	/* Set Tx Antenna including Feedback control */
2793 
2794 	/* Set Auto Rate fallback control */
2795 }
2796 
2797 
2798 /* InitializeAdapter and PhyCfg */
2799 static bool rtl8192_adapter_start(struct net_device *dev)
2800 {
2801 	struct r8192_priv *priv = ieee80211_priv(dev);
2802 	u32 dwRegRead = 0;
2803 	bool init_status = true;
2804 	u8 SECR_value = 0x0;
2805 	u8 tmp;
2806 
2807 	RT_TRACE(COMP_INIT, "====>%s()\n", __func__);
2808 	priv->Rf_Mode = RF_OP_By_SW_3wire;
2809 	/* for ASIC power on sequence */
2810 	write_nic_byte_E(dev, 0x5f, 0x80);
2811 	mdelay(50);
2812 	write_nic_byte_E(dev, 0x5f, 0xf0);
2813 	write_nic_byte_E(dev, 0x5d, 0x00);
2814 	write_nic_byte_E(dev, 0x5e, 0x80);
2815 	write_nic_byte(dev, 0x17, 0x37);
2816 	mdelay(10);
2817 	priv->pFirmware->firmware_status = FW_STATUS_0_INIT;
2818 	/* config CPUReset Register */
2819 	/* Firmware Reset or not? */
2820 	read_nic_dword(dev, CPU_GEN, &dwRegRead);
2821 	if (priv->pFirmware->firmware_status == FW_STATUS_0_INIT)
2822 		dwRegRead |= CPU_GEN_SYSTEM_RESET; /* do nothing here? */
2823 	else if (priv->pFirmware->firmware_status == FW_STATUS_5_READY)
2824 		dwRegRead |= CPU_GEN_FIRMWARE_RESET;
2825 	else
2826 		RT_TRACE(COMP_ERR,
2827 			 "ERROR in %s(): undefined firmware state(%d)\n",
2828 			 __func__,   priv->pFirmware->firmware_status);
2829 
2830 	write_nic_dword(dev, CPU_GEN, dwRegRead);
2831 	/* config BB. */
2832 	rtl8192_BBConfig(dev);
2833 
2834 	/* Loopback mode or not */
2835 	priv->LoopbackMode = RTL819xU_NO_LOOPBACK;
2836 
2837 	read_nic_dword(dev, CPU_GEN, &dwRegRead);
2838 	if (priv->LoopbackMode == RTL819xU_NO_LOOPBACK)
2839 		dwRegRead = (dwRegRead & CPU_GEN_NO_LOOPBACK_MSK) |
2840 			    CPU_GEN_NO_LOOPBACK_SET;
2841 	else if (priv->LoopbackMode == RTL819xU_MAC_LOOPBACK)
2842 		dwRegRead |= CPU_CCK_LOOPBACK;
2843 	else
2844 		RT_TRACE(COMP_ERR,
2845 			 "Serious error in %s(): wrong loopback mode setting(%d)\n",
2846 			 __func__,  priv->LoopbackMode);
2847 
2848 	write_nic_dword(dev, CPU_GEN, dwRegRead);
2849 
2850 	/* after reset cpu, we need wait for a seconds to write in register. */
2851 	udelay(500);
2852 
2853 	/* add for new bitfile:usb suspend reset pin set to 1. Do we need? */
2854 	read_nic_byte_E(dev, 0x5f, &tmp);
2855 	write_nic_byte_E(dev, 0x5f, tmp | 0x20);
2856 
2857 	/* Set Hardware */
2858 	rtl8192_hwconfig(dev);
2859 
2860 	/* turn on Tx/Rx */
2861 	write_nic_byte(dev, CMDR, CR_RE | CR_TE);
2862 
2863 	/* set IDR0 here */
2864 	write_nic_dword(dev, MAC0, ((u32 *)dev->dev_addr)[0]);
2865 	write_nic_word(dev, MAC4, ((u16 *)(dev->dev_addr + 4))[0]);
2866 
2867 	/* set RCR */
2868 	write_nic_dword(dev, RCR, priv->ReceiveConfig);
2869 
2870 	/* Initialize Number of Reserved Pages in Firmware Queue */
2871 	write_nic_dword(dev, RQPN1,
2872 		NUM_OF_PAGE_IN_FW_QUEUE_BK << RSVD_FW_QUEUE_PAGE_BK_SHIFT |
2873 		NUM_OF_PAGE_IN_FW_QUEUE_BE << RSVD_FW_QUEUE_PAGE_BE_SHIFT |
2874 		NUM_OF_PAGE_IN_FW_QUEUE_VI << RSVD_FW_QUEUE_PAGE_VI_SHIFT |
2875 		NUM_OF_PAGE_IN_FW_QUEUE_VO << RSVD_FW_QUEUE_PAGE_VO_SHIFT);
2876 	write_nic_dword(dev, RQPN2,
2877 		NUM_OF_PAGE_IN_FW_QUEUE_MGNT << RSVD_FW_QUEUE_PAGE_MGNT_SHIFT |
2878 		NUM_OF_PAGE_IN_FW_QUEUE_CMD << RSVD_FW_QUEUE_PAGE_CMD_SHIFT);
2879 	write_nic_dword(dev, RQPN3,
2880 		APPLIED_RESERVED_QUEUE_IN_FW |
2881 		NUM_OF_PAGE_IN_FW_QUEUE_BCN << RSVD_FW_QUEUE_PAGE_BCN_SHIFT);
2882 	write_nic_dword(dev, RATR0 + 4 * 7, (RATE_ALL_OFDM_AG | RATE_ALL_CCK));
2883 
2884 	/* Set AckTimeout */
2885 	/* TODO: (it value is only for FPGA version). need to be changed!! */
2886 	write_nic_byte(dev, ACK_TIMEOUT, 0x30);
2887 
2888 	if (priv->ResetProgress == RESET_TYPE_NORESET)
2889 		rtl8192_SetWirelessMode(dev, priv->ieee80211->mode);
2890 	if (priv->ResetProgress == RESET_TYPE_NORESET) {
2891 		CamResetAllEntry(dev);
2892 		SECR_value |= SCR_TxEncEnable;
2893 		SECR_value |= SCR_RxDecEnable;
2894 		SECR_value |= SCR_NoSKMC;
2895 		write_nic_byte(dev, SECR, SECR_value);
2896 	}
2897 
2898 	/* Beacon related */
2899 	write_nic_word(dev, ATIMWND, 2);
2900 	write_nic_word(dev, BCN_INTERVAL, 100);
2901 
2902 #define DEFAULT_EDCA 0x005e4332
2903 	{
2904 		int i;
2905 
2906 		for (i = 0; i < QOS_QUEUE_NUM; i++)
2907 			write_nic_dword(dev, WDCAPARA_ADD[i], DEFAULT_EDCA);
2908 	}
2909 
2910 	rtl8192_phy_configmac(dev);
2911 
2912 	if (priv->card_8192_version == (u8)VERSION_819xU_A) {
2913 		rtl8192_phy_getTxPower(dev);
2914 		rtl8192_phy_setTxPower(dev, priv->chan);
2915 	}
2916 
2917 	/* Firmware download */
2918 	init_status = init_firmware(dev);
2919 	if (!init_status) {
2920 		RT_TRACE(COMP_ERR, "ERR!!! %s(): Firmware download is failed\n",
2921 			 __func__);
2922 		return init_status;
2923 	}
2924 	RT_TRACE(COMP_INIT, "%s():after firmware download\n", __func__);
2925 
2926 #ifdef TO_DO_LIST
2927 	if (Adapter->ResetProgress == RESET_TYPE_NORESET) {
2928 		if (pMgntInfo->RegRfOff) { /* User disable RF via registry. */
2929 			RT_TRACE((COMP_INIT | COMP_RF), DBG_LOUD,
2930 				 ("InitializeAdapter819xUsb(): Turn off RF for RegRfOff ----------\n"));
2931 			MgntActSet_RF_State(Adapter, eRfOff, RF_CHANGE_BY_SW);
2932 			/* Those actions will be discard in MgntActSet_RF_State
2933 			 * because of the same state
2934 			 */
2935 			for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++)
2936 				PHY_SetRFReg(Adapter,
2937 					     (RF90_RADIO_PATH_E)eRFPath,
2938 					     0x4, 0xC00, 0x0);
2939 		} else if (pMgntInfo->RfOffReason > RF_CHANGE_BY_PS) {
2940 			/* H/W or S/W RF OFF before sleep. */
2941 			RT_TRACE((COMP_INIT | COMP_RF), DBG_LOUD,
2942 				 ("InitializeAdapter819xUsb(): Turn off RF for RfOffReason(%d) ----------\n",
2943 				  pMgntInfo->RfOffReason));
2944 			MgntActSet_RF_State(Adapter,
2945 					    eRfOff,
2946 					    pMgntInfo->RfOffReason);
2947 		} else {
2948 			pHalData->eRFPowerState = eRfOn;
2949 			pMgntInfo->RfOffReason = 0;
2950 			RT_TRACE((COMP_INIT | COMP_RF), DBG_LOUD,
2951 				 ("InitializeAdapter819xUsb(): RF is on ----------\n"));
2952 		}
2953 	} else {
2954 		if (pHalData->eRFPowerState == eRfOff) {
2955 			MgntActSet_RF_State(Adapter,
2956 					    eRfOff,
2957 					    pMgntInfo->RfOffReason);
2958 			/* Those actions will be discard in MgntActSet_RF_State
2959 			 * because of the same state
2960 			 */
2961 			for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++)
2962 				PHY_SetRFReg(Adapter,
2963 					     (RF90_RADIO_PATH_E)eRFPath,
2964 					     0x4, 0xC00, 0x0);
2965 		}
2966 	}
2967 #endif
2968 	/* config RF. */
2969 	if (priv->ResetProgress == RESET_TYPE_NORESET) {
2970 		rtl8192_phy_RFConfig(dev);
2971 		RT_TRACE(COMP_INIT, "%s():after phy RF config\n", __func__);
2972 	}
2973 
2974 
2975 	if (priv->ieee80211->FwRWRF)
2976 		/* We can force firmware to do RF-R/W */
2977 		priv->Rf_Mode = RF_OP_By_FW;
2978 	else
2979 		priv->Rf_Mode = RF_OP_By_SW_3wire;
2980 
2981 
2982 	rtl8192_phy_updateInitGain(dev);
2983 	/*--set CCK and OFDM Block "ON"--*/
2984 	rtl8192_setBBreg(dev, rFPGA0_RFMOD, bCCKEn, 0x1);
2985 	rtl8192_setBBreg(dev, rFPGA0_RFMOD, bOFDMEn, 0x1);
2986 
2987 	if (priv->ResetProgress == RESET_TYPE_NORESET) {
2988 		/* if D or C cut */
2989 		u8 tmpvalue;
2990 
2991 		read_nic_byte(dev, 0x301, &tmpvalue);
2992 		if (tmpvalue == 0x03) {
2993 			priv->bDcut = true;
2994 			RT_TRACE(COMP_POWER_TRACKING, "D-cut\n");
2995 		} else {
2996 			priv->bDcut = false;
2997 			RT_TRACE(COMP_POWER_TRACKING, "C-cut\n");
2998 		}
2999 		dm_initialize_txpower_tracking(dev);
3000 
3001 		if (priv->bDcut) {
3002 			u32 i, TempCCk;
3003 			u32 tmpRegA = rtl8192_QueryBBReg(dev,
3004 							 rOFDM0_XATxIQImbalance,
3005 							 bMaskDWord);
3006 
3007 			for (i = 0; i < TxBBGainTableLength; i++) {
3008 				if (tmpRegA == priv->txbbgain_table[i].txbbgain_value) {
3009 					priv->rfa_txpowertrackingindex = (u8)i;
3010 					priv->rfa_txpowertrackingindex_real =
3011 						(u8)i;
3012 					priv->rfa_txpowertracking_default =
3013 						priv->rfa_txpowertrackingindex;
3014 					break;
3015 				}
3016 			}
3017 
3018 			TempCCk = rtl8192_QueryBBReg(dev,
3019 						     rCCK0_TxFilter1,
3020 						     bMaskByte2);
3021 
3022 			for (i = 0; i < CCKTxBBGainTableLength; i++) {
3023 				if (TempCCk == priv->cck_txbbgain_table[i].ccktxbb_valuearray[0]) {
3024 					priv->cck_present_attenuation_20Mdefault = (u8)i;
3025 					break;
3026 				}
3027 			}
3028 			priv->cck_present_attenuation_40Mdefault = 0;
3029 			priv->cck_present_attenuation_difference = 0;
3030 			priv->cck_present_attenuation =
3031 				priv->cck_present_attenuation_20Mdefault;
3032 		}
3033 	}
3034 	write_nic_byte(dev, 0x87, 0x0);
3035 
3036 
3037 	return init_status;
3038 }
3039 
3040 /* this configures registers for beacon tx and enables it via
3041  * rtl8192_beacon_tx_enable(). rtl8192_beacon_tx_disable() might
3042  * be used to stop beacon transmission
3043  */
3044 /***************************************************************************
3045  *   -------------------------------NET STUFF---------------------------
3046  ***************************************************************************/
3047 
3048 static struct net_device_stats *rtl8192_stats(struct net_device *dev)
3049 {
3050 	struct r8192_priv *priv = ieee80211_priv(dev);
3051 
3052 	return &priv->ieee80211->stats;
3053 }
3054 
3055 static bool HalTxCheckStuck819xUsb(struct net_device *dev)
3056 {
3057 	struct r8192_priv *priv = ieee80211_priv(dev);
3058 	u16		RegTxCounter;
3059 	bool		bStuck = false;
3060 
3061 	read_nic_word(dev, 0x128, &RegTxCounter);
3062 	RT_TRACE(COMP_RESET,
3063 		 "%s():RegTxCounter is %d,TxCounter is %d\n", __func__,
3064 		 RegTxCounter, priv->TxCounter);
3065 	if (priv->TxCounter == RegTxCounter)
3066 		bStuck = true;
3067 
3068 	priv->TxCounter = RegTxCounter;
3069 
3070 	return bStuck;
3071 }
3072 
3073 /*
3074  *	<Assumption: RT_TX_SPINLOCK is acquired.>
3075  *	First added: 2006.11.19 by emily
3076  */
3077 static RESET_TYPE TxCheckStuck(struct net_device *dev)
3078 {
3079 	struct r8192_priv *priv = ieee80211_priv(dev);
3080 	u8			QueueID;
3081 	bool			bCheckFwTxCnt = false;
3082 
3083 	/* Decide such threshold according to current power save mode */
3084 
3085 	for (QueueID = 0; QueueID <= BEACON_QUEUE; QueueID++) {
3086 		if (QueueID == TXCMD_QUEUE)
3087 			continue;
3088 		if ((skb_queue_len(&priv->ieee80211->skb_waitQ[QueueID]) == 0)  && (skb_queue_len(&priv->ieee80211->skb_aggQ[QueueID]) == 0))
3089 			continue;
3090 
3091 		bCheckFwTxCnt = true;
3092 	}
3093 	if (bCheckFwTxCnt) {
3094 		if (HalTxCheckStuck819xUsb(dev)) {
3095 			RT_TRACE(COMP_RESET,
3096 				 "%s: Fw indicates no Tx condition!\n",
3097 				 __func__);
3098 			return RESET_TYPE_SILENT;
3099 		}
3100 	}
3101 	return RESET_TYPE_NORESET;
3102 }
3103 
3104 static bool HalRxCheckStuck819xUsb(struct net_device *dev)
3105 {
3106 	u16	RegRxCounter;
3107 	struct r8192_priv *priv = ieee80211_priv(dev);
3108 	bool bStuck = false;
3109 	static u8	rx_chk_cnt;
3110 
3111 	read_nic_word(dev, 0x130, &RegRxCounter);
3112 	RT_TRACE(COMP_RESET,
3113 		 "%s(): RegRxCounter is %d,RxCounter is %d\n", __func__,
3114 		 RegRxCounter, priv->RxCounter);
3115 	/* If rssi is small, we should check rx for long time because of bad rx.
3116 	 * or maybe it will continuous silent reset every 2 seconds.
3117 	 */
3118 	rx_chk_cnt++;
3119 	if (priv->undecorated_smoothed_pwdb >= (RateAdaptiveTH_High + 5)) {
3120 		rx_chk_cnt = 0;	/* high rssi, check rx stuck right now. */
3121 	} else if (priv->undecorated_smoothed_pwdb < (RateAdaptiveTH_High + 5) &&
3122 		   ((priv->CurrentChannelBW != HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb >= RateAdaptiveTH_Low_40M) ||
3123 		    (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb >= RateAdaptiveTH_Low_20M))) {
3124 		if (rx_chk_cnt < 2)
3125 			return bStuck;
3126 
3127 		rx_chk_cnt = 0;
3128 	} else if (((priv->CurrentChannelBW != HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb < RateAdaptiveTH_Low_40M) ||
3129 		    (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb < RateAdaptiveTH_Low_20M)) &&
3130 		     priv->undecorated_smoothed_pwdb >= VeryLowRSSI) {
3131 		if (rx_chk_cnt < 4)
3132 			return bStuck;
3133 
3134 		rx_chk_cnt = 0;
3135 	} else {
3136 		if (rx_chk_cnt < 8)
3137 			return bStuck;
3138 
3139 		rx_chk_cnt = 0;
3140 	}
3141 
3142 	if (priv->RxCounter == RegRxCounter)
3143 		bStuck = true;
3144 
3145 	priv->RxCounter = RegRxCounter;
3146 
3147 	return bStuck;
3148 }
3149 
3150 static RESET_TYPE RxCheckStuck(struct net_device *dev)
3151 {
3152 	struct r8192_priv *priv = ieee80211_priv(dev);
3153 	bool        bRxCheck = false;
3154 
3155 	if (priv->IrpPendingCount > 1)
3156 		bRxCheck = true;
3157 
3158 	if (bRxCheck) {
3159 		if (HalRxCheckStuck819xUsb(dev)) {
3160 			RT_TRACE(COMP_RESET, "RxStuck Condition\n");
3161 			return RESET_TYPE_SILENT;
3162 		}
3163 	}
3164 	return RESET_TYPE_NORESET;
3165 }
3166 
3167 
3168 /**
3169  * This function is called by Checkforhang to check whether we should
3170  * ask OS to reset driver
3171  *
3172  * \param pAdapter	The adapter context for this miniport
3173  *
3174  * Note:NIC with USB interface sholud not call this function because we
3175  * cannot scan descriptor to judge whether there is tx stuck.
3176  * Note: This function may be required to be rewrite for Vista OS.
3177  * <<<Assumption: Tx spinlock has been acquired >>>
3178  *
3179  * 8185 and 8185b does not implement this function.
3180  */
3181 static RESET_TYPE rtl819x_ifcheck_resetornot(struct net_device *dev)
3182 {
3183 	struct r8192_priv *priv = ieee80211_priv(dev);
3184 	RESET_TYPE	TxResetType = RESET_TYPE_NORESET;
3185 	RESET_TYPE	RxResetType = RESET_TYPE_NORESET;
3186 	RT_RF_POWER_STATE	rfState;
3187 
3188 	rfState = priv->ieee80211->eRFPowerState;
3189 
3190 	TxResetType = TxCheckStuck(dev);
3191 	if (rfState != eRfOff ||
3192 	    (priv->ieee80211->iw_mode != IW_MODE_ADHOC)) {
3193 		/* If driver is in the status of firmware download failure,
3194 		 * driver skips RF initialization and RF is in turned off
3195 		 * state. Driver should check whether Rx stuck and do silent
3196 		 * reset. And if driver is in firmware download failure status,
3197 		 * driver should initialize RF in the following silent reset
3198 		 * procedure
3199 		 *
3200 		 * Driver should not check RX stuck in IBSS mode because it is
3201 		 * required to set Check BSSID in order to send beacon,
3202 		 * however, if check BSSID is set, STA cannot hear any packet
3203 		 * at all.
3204 		 */
3205 		RxResetType = RxCheckStuck(dev);
3206 	}
3207 	if (TxResetType == RESET_TYPE_NORMAL ||
3208 	    RxResetType == RESET_TYPE_NORMAL) {
3209 		return RESET_TYPE_NORMAL;
3210 	} else if (TxResetType == RESET_TYPE_SILENT ||
3211 		   RxResetType == RESET_TYPE_SILENT) {
3212 		RT_TRACE(COMP_RESET, "%s():silent reset\n", __func__);
3213 		return RESET_TYPE_SILENT;
3214 	} else {
3215 		return RESET_TYPE_NORESET;
3216 	}
3217 }
3218 
3219 static void rtl8192_cancel_deferred_work(struct r8192_priv *priv);
3220 static int _rtl8192_up(struct net_device *dev);
3221 static int rtl8192_close(struct net_device *dev);
3222 
3223 
3224 
3225 static void CamRestoreAllEntry(struct net_device *dev)
3226 {
3227 	u8 EntryId = 0;
3228 	struct r8192_priv *priv = ieee80211_priv(dev);
3229 	u8	*MacAddr = priv->ieee80211->current_network.bssid;
3230 
3231 	static u8	CAM_CONST_ADDR[4][6] = {
3232 		{0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
3233 		{0x00, 0x00, 0x00, 0x00, 0x00, 0x01},
3234 		{0x00, 0x00, 0x00, 0x00, 0x00, 0x02},
3235 		{0x00, 0x00, 0x00, 0x00, 0x00, 0x03} };
3236 	static u8	CAM_CONST_BROAD[] = {
3237 		0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
3238 
3239 	RT_TRACE(COMP_SEC, "%s:\n", __func__);
3240 
3241 
3242 	if ((priv->ieee80211->pairwise_key_type == KEY_TYPE_WEP40) ||
3243 	    (priv->ieee80211->pairwise_key_type == KEY_TYPE_WEP104)) {
3244 		for (EntryId = 0; EntryId < 4; EntryId++) {
3245 			MacAddr = CAM_CONST_ADDR[EntryId];
3246 			setKey(dev, EntryId, EntryId,
3247 			       priv->ieee80211->pairwise_key_type,
3248 			       MacAddr, 0, NULL);
3249 		}
3250 
3251 	} else if (priv->ieee80211->pairwise_key_type == KEY_TYPE_TKIP) {
3252 		if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
3253 			setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
3254 			       (u8 *)dev->dev_addr, 0, NULL);
3255 		else
3256 			setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
3257 			       MacAddr, 0, NULL);
3258 	} else if (priv->ieee80211->pairwise_key_type == KEY_TYPE_CCMP) {
3259 		if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
3260 			setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
3261 			       (u8 *)dev->dev_addr, 0, NULL);
3262 		else
3263 			setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
3264 			       MacAddr, 0, NULL);
3265 	}
3266 
3267 
3268 
3269 	if (priv->ieee80211->group_key_type == KEY_TYPE_TKIP) {
3270 		MacAddr = CAM_CONST_BROAD;
3271 		for (EntryId = 1; EntryId < 4; EntryId++) {
3272 			setKey(dev, EntryId, EntryId,
3273 			       priv->ieee80211->group_key_type,
3274 			       MacAddr, 0, NULL);
3275 		}
3276 		if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
3277 			setKey(dev, 0, 0, priv->ieee80211->group_key_type,
3278 			       CAM_CONST_ADDR[0], 0, NULL);
3279 	} else if (priv->ieee80211->group_key_type == KEY_TYPE_CCMP) {
3280 		MacAddr = CAM_CONST_BROAD;
3281 		for (EntryId = 1; EntryId < 4; EntryId++) {
3282 			setKey(dev, EntryId, EntryId,
3283 			       priv->ieee80211->group_key_type,
3284 			       MacAddr, 0, NULL);
3285 		}
3286 
3287 		if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
3288 			setKey(dev, 0, 0, priv->ieee80211->group_key_type,
3289 			       CAM_CONST_ADDR[0], 0, NULL);
3290 	}
3291 }
3292 
3293 /* This function is used to fix Tx/Rx stop bug temporarily.
3294  * This function will do "system reset" to NIC when Tx or Rx is stuck.
3295  * The method checking Tx/Rx stuck of this function is supported by FW,
3296  * which reports Tx and Rx counter to register 0x128 and 0x130.
3297  */
3298 static void rtl819x_ifsilentreset(struct net_device *dev)
3299 {
3300 	struct r8192_priv *priv = ieee80211_priv(dev);
3301 	u8	reset_times = 0;
3302 	int reset_status = 0;
3303 	struct ieee80211_device *ieee = priv->ieee80211;
3304 
3305 
3306 	/* If we need to check CCK stop, please uncomment this line. */
3307 	/* bStuck = Adapter->HalFunc.CheckHWStopHandler(Adapter); */
3308 
3309 	if (priv->ResetProgress == RESET_TYPE_NORESET) {
3310 RESET_START:
3311 
3312 		RT_TRACE(COMP_RESET, "=========>Reset progress!!\n");
3313 
3314 		/* Set the variable for reset. */
3315 		priv->ResetProgress = RESET_TYPE_SILENT;
3316 		mutex_lock(&priv->wx_mutex);
3317 		if (priv->up == 0) {
3318 			RT_TRACE(COMP_ERR,
3319 				 "%s():the driver is not up! return\n",
3320 				 __func__);
3321 			mutex_unlock(&priv->wx_mutex);
3322 			return;
3323 		}
3324 		priv->up = 0;
3325 		RT_TRACE(COMP_RESET,
3326 			 "%s():======>start to down the driver\n",
3327 			 __func__);
3328 
3329 		rtl8192_rtx_disable(dev);
3330 		rtl8192_cancel_deferred_work(priv);
3331 		deinit_hal_dm(dev);
3332 		del_timer_sync(&priv->watch_dog_timer);
3333 
3334 		ieee->sync_scan_hurryup = 1;
3335 		if (ieee->state == IEEE80211_LINKED) {
3336 			mutex_lock(&ieee->wx_mutex);
3337 			netdev_dbg(dev, "ieee->state is IEEE80211_LINKED\n");
3338 			ieee80211_stop_send_beacons(priv->ieee80211);
3339 			del_timer_sync(&ieee->associate_timer);
3340 			cancel_delayed_work(&ieee->associate_retry_wq);
3341 			ieee80211_stop_scan(ieee);
3342 			netif_carrier_off(dev);
3343 			mutex_unlock(&ieee->wx_mutex);
3344 		} else {
3345 			netdev_dbg(dev, "ieee->state is NOT LINKED\n");
3346 			ieee80211_softmac_stop_protocol(priv->ieee80211);
3347 		}
3348 		mutex_unlock(&priv->wx_mutex);
3349 		RT_TRACE(COMP_RESET,
3350 			 "%s():<==========down process is finished\n",
3351 			 __func__);
3352 		RT_TRACE(COMP_RESET,
3353 			 "%s():===========>start up the driver\n",
3354 			 __func__);
3355 		reset_status = _rtl8192_up(dev);
3356 
3357 		RT_TRACE(COMP_RESET,
3358 			 "%s():<===========up process is finished\n",
3359 			 __func__);
3360 		if (reset_status == -EAGAIN) {
3361 			if (reset_times < 3) {
3362 				reset_times++;
3363 				goto RESET_START;
3364 			} else {
3365 				RT_TRACE(COMP_ERR,
3366 					 " ERR!!! %s():  Reset Failed!!\n",
3367 					 __func__);
3368 			}
3369 		}
3370 		ieee->is_silent_reset = 1;
3371 		EnableHWSecurityConfig8192(dev);
3372 		if (ieee->state == IEEE80211_LINKED &&
3373 		    ieee->iw_mode == IW_MODE_INFRA) {
3374 			ieee->set_chan(ieee->dev,
3375 				       ieee->current_network.channel);
3376 
3377 			queue_work(ieee->wq, &ieee->associate_complete_wq);
3378 
3379 		} else if (ieee->state == IEEE80211_LINKED &&
3380 			   ieee->iw_mode == IW_MODE_ADHOC) {
3381 			ieee->set_chan(ieee->dev,
3382 				       ieee->current_network.channel);
3383 			ieee->link_change(ieee->dev);
3384 
3385 			ieee80211_start_send_beacons(ieee);
3386 
3387 			if (ieee->data_hard_resume)
3388 				ieee->data_hard_resume(ieee->dev);
3389 			netif_carrier_on(ieee->dev);
3390 		}
3391 
3392 		CamRestoreAllEntry(dev);
3393 
3394 		priv->ResetProgress = RESET_TYPE_NORESET;
3395 		priv->reset_count++;
3396 
3397 		priv->bForcedSilentReset = false;
3398 		priv->bResetInProgress = false;
3399 
3400 		/* For test --> force write UFWP. */
3401 		write_nic_byte(dev, UFWP, 1);
3402 		RT_TRACE(COMP_RESET,
3403 			 "Reset finished!! ====>[%d]\n",
3404 			 priv->reset_count);
3405 	}
3406 }
3407 
3408 static void rtl819x_update_rxcounts(struct r8192_priv *priv, u32 *TotalRxBcnNum,
3409 			     u32 *TotalRxDataNum)
3410 {
3411 	u16			SlotIndex;
3412 	u8			i;
3413 
3414 	*TotalRxBcnNum = 0;
3415 	*TotalRxDataNum = 0;
3416 
3417 	SlotIndex = (priv->ieee80211->LinkDetectInfo.SlotIndex++) %
3418 		    (priv->ieee80211->LinkDetectInfo.SlotNum);
3419 	priv->ieee80211->LinkDetectInfo.RxBcnNum[SlotIndex] =
3420 		priv->ieee80211->LinkDetectInfo.NumRecvBcnInPeriod;
3421 	priv->ieee80211->LinkDetectInfo.RxDataNum[SlotIndex] =
3422 		priv->ieee80211->LinkDetectInfo.NumRecvDataInPeriod;
3423 	for (i = 0; i < priv->ieee80211->LinkDetectInfo.SlotNum; i++) {
3424 		*TotalRxBcnNum += priv->ieee80211->LinkDetectInfo.RxBcnNum[i];
3425 		*TotalRxDataNum += priv->ieee80211->LinkDetectInfo.RxDataNum[i];
3426 	}
3427 }
3428 
3429 
3430 static void rtl819x_watchdog_wqcallback(struct work_struct *work)
3431 {
3432 	struct delayed_work *dwork = to_delayed_work(work);
3433 	struct r8192_priv *priv = container_of(dwork,
3434 					       struct r8192_priv, watch_dog_wq);
3435 	struct net_device *dev = priv->ieee80211->dev;
3436 	struct ieee80211_device *ieee = priv->ieee80211;
3437 	RESET_TYPE	ResetType = RESET_TYPE_NORESET;
3438 	static u8	check_reset_cnt;
3439 	bool bBusyTraffic = false;
3440 	u32	TotalRxBcnNum = 0;
3441 	u32	TotalRxDataNum = 0;
3442 
3443 	if (!priv->up)
3444 		return;
3445 	hal_dm_watchdog(dev);
3446 
3447 	/* to get busy traffic condition */
3448 	if (ieee->state == IEEE80211_LINKED) {
3449 		if (ieee->LinkDetectInfo.NumRxOkInPeriod > 666 ||
3450 		    ieee->LinkDetectInfo.NumTxOkInPeriod > 666) {
3451 			bBusyTraffic = true;
3452 		}
3453 		ieee->LinkDetectInfo.NumRxOkInPeriod = 0;
3454 		ieee->LinkDetectInfo.NumTxOkInPeriod = 0;
3455 		ieee->LinkDetectInfo.bBusyTraffic = bBusyTraffic;
3456 	}
3457 	/* for AP roaming */
3458 	if (priv->ieee80211->state == IEEE80211_LINKED &&
3459 	    priv->ieee80211->iw_mode == IW_MODE_INFRA) {
3460 		rtl819x_update_rxcounts(priv, &TotalRxBcnNum, &TotalRxDataNum);
3461 		if ((TotalRxBcnNum + TotalRxDataNum) == 0) {
3462 #ifdef TODO
3463 			if (rfState == eRfOff)
3464 				RT_TRACE(COMP_ERR, "========>%s()\n", __func__);
3465 #endif
3466 			netdev_dbg(dev,
3467 				   "===>%s(): AP is power off, connect another one\n",
3468 				   __func__);
3469 			priv->ieee80211->state = IEEE80211_ASSOCIATING;
3470 			notify_wx_assoc_event(priv->ieee80211);
3471 			RemovePeerTS(priv->ieee80211,
3472 				     priv->ieee80211->current_network.bssid);
3473 			priv->ieee80211->link_change(dev);
3474 			queue_work(priv->ieee80211->wq,
3475 				   &priv->ieee80211->associate_procedure_wq);
3476 		}
3477 	}
3478 	priv->ieee80211->LinkDetectInfo.NumRecvBcnInPeriod = 0;
3479 	priv->ieee80211->LinkDetectInfo.NumRecvDataInPeriod = 0;
3480 	/* check if reset the driver */
3481 	if (check_reset_cnt++ >= 3) {
3482 		ResetType = rtl819x_ifcheck_resetornot(dev);
3483 		check_reset_cnt = 3;
3484 	}
3485 	/* This is control by OID set in Pomelo */
3486 	if ((priv->force_reset) || (priv->ResetProgress == RESET_TYPE_NORESET &&
3487 	    (priv->bForcedSilentReset ||
3488 	    (!priv->bDisableNormalResetCheck && ResetType == RESET_TYPE_SILENT)))) {
3489 		RT_TRACE(COMP_RESET,
3490 			 "%s():priv->force_reset is %d,priv->ResetProgress is %d, priv->bForcedSilentReset is %d,priv->bDisableNormalResetCheck is %d,ResetType is %d\n",
3491 			 __func__, priv->force_reset, priv->ResetProgress,
3492 			 priv->bForcedSilentReset,
3493 			 priv->bDisableNormalResetCheck, ResetType);
3494 		rtl819x_ifsilentreset(dev);
3495 	}
3496 	priv->force_reset = false;
3497 	priv->bForcedSilentReset = false;
3498 	priv->bResetInProgress = false;
3499 	RT_TRACE(COMP_TRACE, " <==RtUsbCheckForHangWorkItemCallback()\n");
3500 }
3501 
3502 static void watch_dog_timer_callback(struct timer_list *t)
3503 {
3504 	struct r8192_priv *priv = from_timer(priv, t, watch_dog_timer);
3505 
3506 	schedule_delayed_work(&priv->watch_dog_wq, 0);
3507 	mod_timer(&priv->watch_dog_timer,
3508 		  jiffies + msecs_to_jiffies(IEEE80211_WATCH_DOG_TIME));
3509 }
3510 
3511 static int _rtl8192_up(struct net_device *dev)
3512 {
3513 	struct r8192_priv *priv = ieee80211_priv(dev);
3514 	int init_status = 0;
3515 
3516 	priv->up = 1;
3517 	priv->ieee80211->ieee_up = 1;
3518 	RT_TRACE(COMP_INIT, "Bringing up iface");
3519 	init_status = rtl8192_adapter_start(dev);
3520 	if (!init_status) {
3521 		RT_TRACE(COMP_ERR, "ERR!!! %s(): initialization failed!\n",
3522 			 __func__);
3523 		priv->up = priv->ieee80211->ieee_up = 0;
3524 		return -EAGAIN;
3525 	}
3526 	RT_TRACE(COMP_INIT, "start adapter finished\n");
3527 	rtl8192_rx_enable(dev);
3528 	if (priv->ieee80211->state != IEEE80211_LINKED)
3529 		ieee80211_softmac_start_protocol(priv->ieee80211);
3530 	ieee80211_reset_queue(priv->ieee80211);
3531 	watch_dog_timer_callback(&priv->watch_dog_timer);
3532 	if (!netif_queue_stopped(dev))
3533 		netif_start_queue(dev);
3534 	else
3535 		netif_wake_queue(dev);
3536 
3537 	return 0;
3538 }
3539 
3540 
3541 static int rtl8192_open(struct net_device *dev)
3542 {
3543 	struct r8192_priv *priv = ieee80211_priv(dev);
3544 	int ret;
3545 
3546 	mutex_lock(&priv->wx_mutex);
3547 	ret = rtl8192_up(dev);
3548 	mutex_unlock(&priv->wx_mutex);
3549 	return ret;
3550 }
3551 
3552 
3553 int rtl8192_up(struct net_device *dev)
3554 {
3555 	struct r8192_priv *priv = ieee80211_priv(dev);
3556 
3557 	if (priv->up == 1)
3558 		return -1;
3559 
3560 	return _rtl8192_up(dev);
3561 }
3562 
3563 
3564 static int rtl8192_close(struct net_device *dev)
3565 {
3566 	struct r8192_priv *priv = ieee80211_priv(dev);
3567 	int ret;
3568 
3569 	mutex_lock(&priv->wx_mutex);
3570 
3571 	ret = rtl8192_down(dev);
3572 
3573 	mutex_unlock(&priv->wx_mutex);
3574 
3575 	return ret;
3576 }
3577 
3578 int rtl8192_down(struct net_device *dev)
3579 {
3580 	struct r8192_priv *priv = ieee80211_priv(dev);
3581 	int i;
3582 
3583 	if (priv->up == 0)
3584 		return -1;
3585 
3586 	priv->up = 0;
3587 	priv->ieee80211->ieee_up = 0;
3588 	RT_TRACE(COMP_DOWN, "==========>%s()\n", __func__);
3589 	/* FIXME */
3590 	if (!netif_queue_stopped(dev))
3591 		netif_stop_queue(dev);
3592 
3593 	rtl8192_rtx_disable(dev);
3594 
3595 	/* Tx related queue release */
3596 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
3597 		skb_queue_purge(&priv->ieee80211->skb_waitQ[i]);
3598 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
3599 		skb_queue_purge(&priv->ieee80211->skb_aggQ[i]);
3600 
3601 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
3602 		skb_queue_purge(&priv->ieee80211->skb_drv_aggQ[i]);
3603 
3604 	/* as cancel_delayed_work will del work->timer, so if work is not
3605 	 * defined as struct delayed_work, it will corrupt
3606 	 */
3607 	rtl8192_cancel_deferred_work(priv);
3608 	deinit_hal_dm(dev);
3609 	del_timer_sync(&priv->watch_dog_timer);
3610 
3611 
3612 	ieee80211_softmac_stop_protocol(priv->ieee80211);
3613 	memset(&priv->ieee80211->current_network, 0,
3614 	       offsetof(struct ieee80211_network, list));
3615 	RT_TRACE(COMP_DOWN, "<==========%s()\n", __func__);
3616 
3617 	return 0;
3618 }
3619 
3620 
3621 void rtl8192_commit(struct net_device *dev)
3622 {
3623 	struct r8192_priv *priv = ieee80211_priv(dev);
3624 	int reset_status = 0;
3625 
3626 	if (priv->up == 0)
3627 		return;
3628 	priv->up = 0;
3629 
3630 	rtl8192_cancel_deferred_work(priv);
3631 	del_timer_sync(&priv->watch_dog_timer);
3632 
3633 	ieee80211_softmac_stop_protocol(priv->ieee80211);
3634 
3635 	rtl8192_rtx_disable(dev);
3636 	reset_status = _rtl8192_up(dev);
3637 }
3638 
3639 static void rtl8192_restart(struct work_struct *work)
3640 {
3641 	struct r8192_priv *priv = container_of(work, struct r8192_priv,
3642 					       reset_wq);
3643 	struct net_device *dev = priv->ieee80211->dev;
3644 
3645 	mutex_lock(&priv->wx_mutex);
3646 
3647 	rtl8192_commit(dev);
3648 
3649 	mutex_unlock(&priv->wx_mutex);
3650 }
3651 
3652 static void r8192_set_multicast(struct net_device *dev)
3653 {
3654 	struct r8192_priv *priv = ieee80211_priv(dev);
3655 	short promisc;
3656 
3657 	/* FIXME FIXME */
3658 
3659 	promisc = (dev->flags & IFF_PROMISC) ? 1 : 0;
3660 
3661 	if (promisc != priv->promisc)
3662 
3663 		priv->promisc = promisc;
3664 }
3665 
3666 
3667 static int r8192_set_mac_adr(struct net_device *dev, void *mac)
3668 {
3669 	struct r8192_priv *priv = ieee80211_priv(dev);
3670 	struct sockaddr *addr = mac;
3671 
3672 	mutex_lock(&priv->wx_mutex);
3673 
3674 	ether_addr_copy(dev->dev_addr, addr->sa_data);
3675 
3676 	schedule_work(&priv->reset_wq);
3677 	mutex_unlock(&priv->wx_mutex);
3678 
3679 	return 0;
3680 }
3681 
3682 /* based on ipw2200 driver */
3683 static int rtl8192_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
3684 {
3685 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
3686 	struct iwreq *wrq = (struct iwreq *)rq;
3687 	int ret = -1;
3688 	struct ieee80211_device *ieee = priv->ieee80211;
3689 	u32 key[4];
3690 	u8 broadcast_addr[6] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
3691 	struct iw_point *p = &wrq->u.data;
3692 	struct ieee_param *ipw = NULL;
3693 
3694 	mutex_lock(&priv->wx_mutex);
3695 
3696 
3697 	if (p->length < sizeof(struct ieee_param) || !p->pointer) {
3698 		ret = -EINVAL;
3699 		goto out;
3700 	}
3701 
3702 	ipw = memdup_user(p->pointer, p->length);
3703 	if (IS_ERR(ipw)) {
3704 		ret = PTR_ERR(ipw);
3705 		goto out;
3706 	}
3707 
3708 	switch (cmd) {
3709 	case RTL_IOCTL_WPA_SUPPLICANT:
3710 		/* parse here for HW security */
3711 		if (ipw->cmd == IEEE_CMD_SET_ENCRYPTION) {
3712 			if (ipw->u.crypt.set_tx) {
3713 				if (strcmp(ipw->u.crypt.alg, "CCMP") == 0) {
3714 					ieee->pairwise_key_type = KEY_TYPE_CCMP;
3715 				} else if (strcmp(ipw->u.crypt.alg, "TKIP") == 0) {
3716 					ieee->pairwise_key_type = KEY_TYPE_TKIP;
3717 				} else if (strcmp(ipw->u.crypt.alg, "WEP") == 0) {
3718 					if (ipw->u.crypt.key_len == 13)
3719 						ieee->pairwise_key_type = KEY_TYPE_WEP104;
3720 					else if (ipw->u.crypt.key_len == 5)
3721 						ieee->pairwise_key_type = KEY_TYPE_WEP40;
3722 				} else {
3723 					ieee->pairwise_key_type = KEY_TYPE_NA;
3724 				}
3725 
3726 				if (ieee->pairwise_key_type) {
3727 					memcpy((u8 *)key, ipw->u.crypt.key, 16);
3728 					EnableHWSecurityConfig8192(dev);
3729 					/* We fill both index entry and 4th
3730 					 * entry for pairwise key as in IPW
3731 					 * interface, adhoc will only get here,
3732 					 * so we need index entry for its
3733 					 * default key serching!
3734 					 */
3735 					setKey(dev, 4, ipw->u.crypt.idx,
3736 					       ieee->pairwise_key_type,
3737 					       (u8 *)ieee->ap_mac_addr,
3738 					       0, key);
3739 					if (ieee->auth_mode != 2)
3740 						setKey(dev, ipw->u.crypt.idx,
3741 						       ipw->u.crypt.idx,
3742 						       ieee->pairwise_key_type,
3743 						       (u8 *)ieee->ap_mac_addr,
3744 						       0, key);
3745 				}
3746 			} else {
3747 				memcpy((u8 *)key, ipw->u.crypt.key, 16);
3748 				if (strcmp(ipw->u.crypt.alg, "CCMP") == 0) {
3749 					ieee->group_key_type = KEY_TYPE_CCMP;
3750 				} else if (strcmp(ipw->u.crypt.alg, "TKIP") == 0) {
3751 					ieee->group_key_type = KEY_TYPE_TKIP;
3752 				} else if (strcmp(ipw->u.crypt.alg, "WEP") == 0) {
3753 					if (ipw->u.crypt.key_len == 13)
3754 						ieee->group_key_type = KEY_TYPE_WEP104;
3755 					else if (ipw->u.crypt.key_len == 5)
3756 						ieee->group_key_type = KEY_TYPE_WEP40;
3757 				} else {
3758 					ieee->group_key_type = KEY_TYPE_NA;
3759 				}
3760 
3761 				if (ieee->group_key_type) {
3762 					setKey(dev, ipw->u.crypt.idx,
3763 					       /* KeyIndex */
3764 					       ipw->u.crypt.idx,
3765 					       /* KeyType */
3766 					       ieee->group_key_type,
3767 					       /* MacAddr */
3768 					       broadcast_addr,
3769 					       /* DefaultKey */
3770 					       0,
3771 					       /* KeyContent */
3772 					       key);
3773 				}
3774 			}
3775 		}
3776 		ret = ieee80211_wpa_supplicant_ioctl(priv->ieee80211,
3777 						     &wrq->u.data);
3778 		break;
3779 
3780 	default:
3781 		ret = -EOPNOTSUPP;
3782 		break;
3783 	}
3784 	kfree(ipw);
3785 	ipw = NULL;
3786 out:
3787 	mutex_unlock(&priv->wx_mutex);
3788 	return ret;
3789 }
3790 
3791 static u8 HwRateToMRate90(bool bIsHT, u8 rate)
3792 {
3793 	u8  ret_rate = 0xff;
3794 
3795 	if (!bIsHT) {
3796 		switch (rate) {
3797 		case DESC90_RATE1M:
3798 			ret_rate = MGN_1M;
3799 			break;
3800 		case DESC90_RATE2M:
3801 			ret_rate = MGN_2M;
3802 			break;
3803 		case DESC90_RATE5_5M:
3804 			ret_rate = MGN_5_5M;
3805 			break;
3806 		case DESC90_RATE11M:
3807 			ret_rate = MGN_11M;
3808 			break;
3809 		case DESC90_RATE6M:
3810 			ret_rate = MGN_6M;
3811 			break;
3812 		case DESC90_RATE9M:
3813 			ret_rate = MGN_9M;
3814 			break;
3815 		case DESC90_RATE12M:
3816 			ret_rate = MGN_12M;
3817 			break;
3818 		case DESC90_RATE18M:
3819 			ret_rate = MGN_18M;
3820 			break;
3821 		case DESC90_RATE24M:
3822 			ret_rate = MGN_24M;
3823 			break;
3824 		case DESC90_RATE36M:
3825 			ret_rate = MGN_36M;
3826 			break;
3827 		case DESC90_RATE48M:
3828 			ret_rate = MGN_48M;
3829 			break;
3830 		case DESC90_RATE54M:
3831 			ret_rate = MGN_54M;
3832 			break;
3833 
3834 		default:
3835 			ret_rate = 0xff;
3836 			RT_TRACE(COMP_RECV,
3837 				 "%s: Non supported Rate [%x], bIsHT = %d!!!\n",
3838 				 __func__, rate, bIsHT);
3839 			break;
3840 		}
3841 
3842 	} else {
3843 		switch (rate) {
3844 		case DESC90_RATEMCS0:
3845 			ret_rate = MGN_MCS0;
3846 			break;
3847 		case DESC90_RATEMCS1:
3848 			ret_rate = MGN_MCS1;
3849 			break;
3850 		case DESC90_RATEMCS2:
3851 			ret_rate = MGN_MCS2;
3852 			break;
3853 		case DESC90_RATEMCS3:
3854 			ret_rate = MGN_MCS3;
3855 			break;
3856 		case DESC90_RATEMCS4:
3857 			ret_rate = MGN_MCS4;
3858 			break;
3859 		case DESC90_RATEMCS5:
3860 			ret_rate = MGN_MCS5;
3861 			break;
3862 		case DESC90_RATEMCS6:
3863 			ret_rate = MGN_MCS6;
3864 			break;
3865 		case DESC90_RATEMCS7:
3866 			ret_rate = MGN_MCS7;
3867 			break;
3868 		case DESC90_RATEMCS8:
3869 			ret_rate = MGN_MCS8;
3870 			break;
3871 		case DESC90_RATEMCS9:
3872 			ret_rate = MGN_MCS9;
3873 			break;
3874 		case DESC90_RATEMCS10:
3875 			ret_rate = MGN_MCS10;
3876 			break;
3877 		case DESC90_RATEMCS11:
3878 			ret_rate = MGN_MCS11;
3879 			break;
3880 		case DESC90_RATEMCS12:
3881 			ret_rate = MGN_MCS12;
3882 			break;
3883 		case DESC90_RATEMCS13:
3884 			ret_rate = MGN_MCS13;
3885 			break;
3886 		case DESC90_RATEMCS14:
3887 			ret_rate = MGN_MCS14;
3888 			break;
3889 		case DESC90_RATEMCS15:
3890 			ret_rate = MGN_MCS15;
3891 			break;
3892 		case DESC90_RATEMCS32:
3893 			ret_rate = 0x80 | 0x20;
3894 			break;
3895 
3896 		default:
3897 			ret_rate = 0xff;
3898 			RT_TRACE(COMP_RECV,
3899 				 "%s: Non supported Rate [%x], bIsHT = %d!!!\n",
3900 				 __func__, rate, bIsHT);
3901 			break;
3902 		}
3903 	}
3904 
3905 	return ret_rate;
3906 }
3907 
3908 /**
3909  * Function:     UpdateRxPktTimeStamp
3910  * Overview:     Record the TSF time stamp when receiving a packet
3911  *
3912  * Input:
3913  *       PADAPTER        Adapter
3914  *       PRT_RFD         pRfd,
3915  *
3916  * Output:
3917  *       PRT_RFD         pRfd
3918  *                               (pRfd->Status.TimeStampHigh is updated)
3919  *                               (pRfd->Status.TimeStampLow is updated)
3920  * Return:
3921  *               None
3922  */
3923 static void UpdateRxPktTimeStamp8190(struct net_device *dev,
3924 				     struct ieee80211_rx_stats *stats)
3925 {
3926 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
3927 
3928 	if (stats->bIsAMPDU && !stats->bFirstMPDU) {
3929 		stats->mac_time[0] = priv->LastRxDescTSFLow;
3930 		stats->mac_time[1] = priv->LastRxDescTSFHigh;
3931 	} else {
3932 		priv->LastRxDescTSFLow = stats->mac_time[0];
3933 		priv->LastRxDescTSFHigh = stats->mac_time[1];
3934 	}
3935 }
3936 
3937 /* 0-100 index. */
3938 static long rtl819x_translate_todbm(u8 signal_strength_index)
3939 {
3940 	long	signal_power; /* in dBm. */
3941 
3942 	/* Translate to dBm (x=0.5y-95). */
3943 	signal_power = (long)((signal_strength_index + 1) >> 1);
3944 	signal_power -= 95;
3945 
3946 	return signal_power;
3947 }
3948 
3949 
3950 /* We can not declare RSSI/EVM total value of sliding window to
3951  * be a local static. Otherwise, it may increase when we return from S3/S4. The
3952  * value will be kept in memory or disk. Declare the value in the adaptor
3953  * and it will be reinitialized when returned from S3/S4.
3954  */
3955 static void rtl8192_process_phyinfo(struct r8192_priv *priv, u8 *buffer,
3956 				    struct ieee80211_rx_stats *pprevious_stats,
3957 				    struct ieee80211_rx_stats *pcurrent_stats)
3958 {
3959 	bool bcheck = false;
3960 	u8	rfpath;
3961 	u32	nspatial_stream, tmp_val;
3962 	static u32 slide_rssi_index, slide_rssi_statistics;
3963 	static u32 slide_evm_index, slide_evm_statistics;
3964 	static u32 last_rssi, last_evm;
3965 
3966 	static u32 slide_beacon_adc_pwdb_index;
3967 	static u32 slide_beacon_adc_pwdb_statistics;
3968 	static u32 last_beacon_adc_pwdb;
3969 
3970 	struct rtl_80211_hdr_3addr *hdr;
3971 	u16 sc;
3972 	unsigned int frag, seq;
3973 
3974 	hdr = (struct rtl_80211_hdr_3addr *)buffer;
3975 	sc = le16_to_cpu(hdr->seq_ctl);
3976 	frag = WLAN_GET_SEQ_FRAG(sc);
3977 	seq = WLAN_GET_SEQ_SEQ(sc);
3978 	/* to record the sequence number */
3979 	pcurrent_stats->Seq_Num = seq;
3980 
3981 	/* Check whether we should take the previous packet into accounting */
3982 	if (!pprevious_stats->bIsAMPDU) {
3983 		/* if previous packet is not aggregated packet */
3984 		bcheck = true;
3985 	}
3986 
3987 	if (slide_rssi_statistics++ >= PHY_RSSI_SLID_WIN_MAX) {
3988 		slide_rssi_statistics = PHY_RSSI_SLID_WIN_MAX;
3989 		last_rssi = priv->stats.slide_signal_strength[slide_rssi_index];
3990 		priv->stats.slide_rssi_total -= last_rssi;
3991 	}
3992 	priv->stats.slide_rssi_total += pprevious_stats->SignalStrength;
3993 
3994 	priv->stats.slide_signal_strength[slide_rssi_index++] =
3995 		pprevious_stats->SignalStrength;
3996 	if (slide_rssi_index >= PHY_RSSI_SLID_WIN_MAX)
3997 		slide_rssi_index = 0;
3998 
3999 	/* <1> Showed on UI for user, in dbm */
4000 	tmp_val = priv->stats.slide_rssi_total / slide_rssi_statistics;
4001 	priv->stats.signal_strength = rtl819x_translate_todbm((u8)tmp_val);
4002 	pcurrent_stats->rssi = priv->stats.signal_strength;
4003 
4004 	/* If the previous packet does not match the criteria, neglect it */
4005 	if (!pprevious_stats->bPacketMatchBSSID) {
4006 		if (!pprevious_stats->bToSelfBA)
4007 			return;
4008 	}
4009 
4010 	if (!bcheck)
4011 		return;
4012 
4013 
4014 	/* only rtl8190 supported
4015 	 * rtl8190_process_cck_rxpathsel(priv,pprevious_stats);
4016 	 */
4017 
4018 	/* Check RSSI */
4019 	priv->stats.num_process_phyinfo++;
4020 
4021 	/* record the general signal strength to the sliding window. */
4022 
4023 
4024 	/* <2> Showed on UI for engineering
4025 	 * hardware does not provide rssi information for each rf path in CCK
4026 	 */
4027 	if (!pprevious_stats->bIsCCK &&
4028 	    (pprevious_stats->bPacketToSelf || pprevious_stats->bToSelfBA)) {
4029 		for (rfpath = RF90_PATH_A; rfpath < priv->NumTotalRFPath; rfpath++) {
4030 			if (!rtl8192_phy_CheckIsLegalRFPath(
4031 					priv->ieee80211->dev, rfpath))
4032 				continue;
4033 
4034 			if (priv->stats.rx_rssi_percentage[rfpath] == 0)
4035 				priv->stats.rx_rssi_percentage[rfpath] =
4036 					pprevious_stats->RxMIMOSignalStrength[rfpath];
4037 			if (pprevious_stats->RxMIMOSignalStrength[rfpath]  > priv->stats.rx_rssi_percentage[rfpath]) {
4038 				priv->stats.rx_rssi_percentage[rfpath] =
4039 					((priv->stats.rx_rssi_percentage[rfpath] * (Rx_Smooth_Factor - 1)) +
4040 					 (pprevious_stats->RxMIMOSignalStrength[rfpath])) / (Rx_Smooth_Factor);
4041 				priv->stats.rx_rssi_percentage[rfpath] = priv->stats.rx_rssi_percentage[rfpath]  + 1;
4042 			} else {
4043 				priv->stats.rx_rssi_percentage[rfpath] =
4044 					((priv->stats.rx_rssi_percentage[rfpath] * (Rx_Smooth_Factor - 1)) +
4045 					 (pprevious_stats->RxMIMOSignalStrength[rfpath])) / (Rx_Smooth_Factor);
4046 			}
4047 			RT_TRACE(COMP_DBG,
4048 				 "priv->stats.rx_rssi_percentage[rfPath]  = %d\n",
4049 				 priv->stats.rx_rssi_percentage[rfpath]);
4050 		}
4051 	}
4052 
4053 
4054 	/* Check PWDB. */
4055 	RT_TRACE(COMP_RXDESC, "Smooth %s PWDB = %d\n",
4056 		 pprevious_stats->bIsCCK ? "CCK" : "OFDM",
4057 		 pprevious_stats->RxPWDBAll);
4058 
4059 	if (pprevious_stats->bPacketBeacon) {
4060 		/* record the beacon pwdb to the sliding window. */
4061 		if (slide_beacon_adc_pwdb_statistics++ >= PHY_Beacon_RSSI_SLID_WIN_MAX) {
4062 			slide_beacon_adc_pwdb_statistics = PHY_Beacon_RSSI_SLID_WIN_MAX;
4063 			last_beacon_adc_pwdb = priv->stats.Slide_Beacon_pwdb[slide_beacon_adc_pwdb_index];
4064 			priv->stats.Slide_Beacon_Total -= last_beacon_adc_pwdb;
4065 		}
4066 		priv->stats.Slide_Beacon_Total += pprevious_stats->RxPWDBAll;
4067 		priv->stats.Slide_Beacon_pwdb[slide_beacon_adc_pwdb_index] = pprevious_stats->RxPWDBAll;
4068 		slide_beacon_adc_pwdb_index++;
4069 		if (slide_beacon_adc_pwdb_index >= PHY_Beacon_RSSI_SLID_WIN_MAX)
4070 			slide_beacon_adc_pwdb_index = 0;
4071 		pprevious_stats->RxPWDBAll = priv->stats.Slide_Beacon_Total / slide_beacon_adc_pwdb_statistics;
4072 		if (pprevious_stats->RxPWDBAll >= 3)
4073 			pprevious_stats->RxPWDBAll -= 3;
4074 	}
4075 
4076 	RT_TRACE(COMP_RXDESC, "Smooth %s PWDB = %d\n",
4077 		 pprevious_stats->bIsCCK ? "CCK" : "OFDM",
4078 		 pprevious_stats->RxPWDBAll);
4079 
4080 
4081 	if (pprevious_stats->bPacketToSelf ||
4082 	    pprevious_stats->bPacketBeacon ||
4083 	    pprevious_stats->bToSelfBA) {
4084 		if (priv->undecorated_smoothed_pwdb < 0)
4085 			/* initialize */
4086 			priv->undecorated_smoothed_pwdb =
4087 				pprevious_stats->RxPWDBAll;
4088 		if (pprevious_stats->RxPWDBAll > (u32)priv->undecorated_smoothed_pwdb) {
4089 			priv->undecorated_smoothed_pwdb =
4090 				(((priv->undecorated_smoothed_pwdb) * (Rx_Smooth_Factor - 1)) +
4091 				 (pprevious_stats->RxPWDBAll)) / (Rx_Smooth_Factor);
4092 			priv->undecorated_smoothed_pwdb = priv->undecorated_smoothed_pwdb + 1;
4093 		} else {
4094 			priv->undecorated_smoothed_pwdb =
4095 				(((priv->undecorated_smoothed_pwdb) * (Rx_Smooth_Factor - 1)) +
4096 				 (pprevious_stats->RxPWDBAll)) / (Rx_Smooth_Factor);
4097 		}
4098 	}
4099 
4100 	/* Check EVM */
4101 	/* record the general EVM to the sliding window. */
4102 	if (pprevious_stats->SignalQuality) {
4103 		if (pprevious_stats->bPacketToSelf ||
4104 		    pprevious_stats->bPacketBeacon ||
4105 		    pprevious_stats->bToSelfBA) {
4106 			if (slide_evm_statistics++ >= PHY_RSSI_SLID_WIN_MAX) {
4107 				slide_evm_statistics = PHY_RSSI_SLID_WIN_MAX;
4108 				last_evm = priv->stats.slide_evm[slide_evm_index];
4109 				priv->stats.slide_evm_total -= last_evm;
4110 			}
4111 
4112 			priv->stats.slide_evm_total +=
4113 				pprevious_stats->SignalQuality;
4114 
4115 			priv->stats.slide_evm[slide_evm_index++] =
4116 				pprevious_stats->SignalQuality;
4117 			if (slide_evm_index >= PHY_RSSI_SLID_WIN_MAX)
4118 				slide_evm_index = 0;
4119 
4120 			/* <1> Showed on UI for user, in percentage. */
4121 			tmp_val = priv->stats.slide_evm_total /
4122 				  slide_evm_statistics;
4123 			priv->stats.signal_quality = tmp_val;
4124 			/* Showed on UI for user in Windows Vista,
4125 			 * for Link quality.
4126 			 */
4127 			priv->stats.last_signal_strength_inpercent = tmp_val;
4128 		}
4129 
4130 		/* <2> Showed on UI for engineering */
4131 		if (pprevious_stats->bPacketToSelf ||
4132 		    pprevious_stats->bPacketBeacon ||
4133 		    pprevious_stats->bToSelfBA) {
4134 			for (nspatial_stream = 0; nspatial_stream < 2; nspatial_stream++) { /* 2 spatial stream */
4135 				if (pprevious_stats->RxMIMOSignalQuality[nspatial_stream] != -1) {
4136 					if (priv->stats.rx_evm_percentage[nspatial_stream] == 0) /* initialize */
4137 						priv->stats.rx_evm_percentage[nspatial_stream] = pprevious_stats->RxMIMOSignalQuality[nspatial_stream];
4138 					priv->stats.rx_evm_percentage[nspatial_stream] =
4139 						((priv->stats.rx_evm_percentage[nspatial_stream] * (Rx_Smooth_Factor - 1)) +
4140 						 (pprevious_stats->RxMIMOSignalQuality[nspatial_stream] * 1)) / (Rx_Smooth_Factor);
4141 				}
4142 			}
4143 		}
4144 	}
4145 }
4146 
4147 /*-----------------------------------------------------------------------------
4148  * Function:	rtl819x_query_rxpwrpercentage()
4149  *
4150  * Overview:
4151  *
4152  * Input:		char		antpower
4153  *
4154  * Output:		NONE
4155  *
4156  * Return:		0-100 percentage
4157  *---------------------------------------------------------------------------
4158  */
4159 static u8 rtl819x_query_rxpwrpercentage(s8 antpower)
4160 {
4161 	if ((antpower <= -100) || (antpower >= 20))
4162 		return	0;
4163 	else if (antpower >= 0)
4164 		return	100;
4165 	else
4166 		return	100 + antpower;
4167 
4168 }	/* QueryRxPwrPercentage */
4169 
4170 static u8 rtl819x_evm_dbtopercentage(s8 value)
4171 {
4172 	s8 ret_val;
4173 
4174 	ret_val = value;
4175 
4176 	if (ret_val >= 0)
4177 		ret_val = 0;
4178 	if (ret_val <= -33)
4179 		ret_val = -33;
4180 	ret_val = 0 - ret_val;
4181 	ret_val *= 3;
4182 	if (ret_val == 99)
4183 		ret_val = 100;
4184 	return ret_val;
4185 }
4186 
4187 /* We want good-looking for signal strength/quality */
4188 static long rtl819x_signal_scale_mapping(long currsig)
4189 {
4190 	long retsig;
4191 
4192 	/* Step 1. Scale mapping. */
4193 	if (currsig >= 61 && currsig <= 100)
4194 		retsig = 90 + ((currsig - 60) / 4);
4195 	else if (currsig >= 41 && currsig <= 60)
4196 		retsig = 78 + ((currsig - 40) / 2);
4197 	else if (currsig >= 31 && currsig <= 40)
4198 		retsig = 66 + (currsig - 30);
4199 	else if (currsig >= 21 && currsig <= 30)
4200 		retsig = 54 + (currsig - 20);
4201 	else if (currsig >= 5 && currsig <= 20)
4202 		retsig = 42 + (((currsig - 5) * 2) / 3);
4203 	else if (currsig == 4)
4204 		retsig = 36;
4205 	else if (currsig == 3)
4206 		retsig = 27;
4207 	else if (currsig == 2)
4208 		retsig = 18;
4209 	else if (currsig == 1)
4210 		retsig = 9;
4211 	else
4212 		retsig = currsig;
4213 
4214 	return retsig;
4215 }
4216 
4217 static inline bool rx_hal_is_cck_rate(struct rx_drvinfo_819x_usb *pdrvinfo)
4218 {
4219 	if (pdrvinfo->RxHT)
4220 		return false;
4221 
4222 	switch (pdrvinfo->RxRate) {
4223 	case DESC90_RATE1M:
4224 	case DESC90_RATE2M:
4225 	case DESC90_RATE5_5M:
4226 	case DESC90_RATE11M:
4227 		return true;
4228 	default:
4229 		return false;
4230 	}
4231 }
4232 
4233 static void rtl8192_query_rxphystatus(struct r8192_priv *priv,
4234 				      struct ieee80211_rx_stats *pstats,
4235 				      rx_drvinfo_819x_usb  *pdrvinfo,
4236 				      struct ieee80211_rx_stats *precord_stats,
4237 				      bool bpacket_match_bssid,
4238 				      bool bpacket_toself,
4239 				      bool bPacketBeacon,
4240 				      bool bToSelfBA)
4241 {
4242 	phy_sts_ofdm_819xusb_t *pofdm_buf;
4243 	phy_sts_cck_819xusb_t	*pcck_buf;
4244 	struct phy_ofdm_rx_status_rxsc_sgien_exintfflag *prxsc;
4245 	u8	*prxpkt;
4246 	u8	i, max_spatial_stream, tmp_rxsnr, tmp_rxevm, rxsc_sgien_exflg;
4247 	s8	rx_pwr[4], rx_pwr_all = 0;
4248 	s8	rx_snrX, rx_evmX;
4249 	u8	evm, pwdb_all;
4250 	u32	RSSI, total_rssi = 0;
4251 	u8	is_cck_rate = 0;
4252 	u8	rf_rx_num = 0;
4253 	u8	sq;
4254 
4255 
4256 	priv->stats.numqry_phystatus++;
4257 
4258 	is_cck_rate = rx_hal_is_cck_rate(pdrvinfo);
4259 
4260 	/* Record it for next packet processing */
4261 	memset(precord_stats, 0, sizeof(struct ieee80211_rx_stats));
4262 	pstats->bPacketMatchBSSID =
4263 		precord_stats->bPacketMatchBSSID = bpacket_match_bssid;
4264 	pstats->bPacketToSelf = precord_stats->bPacketToSelf = bpacket_toself;
4265 	pstats->bIsCCK = precord_stats->bIsCCK = is_cck_rate;
4266 	pstats->bPacketBeacon = precord_stats->bPacketBeacon = bPacketBeacon;
4267 	pstats->bToSelfBA = precord_stats->bToSelfBA = bToSelfBA;
4268 
4269 	prxpkt = (u8 *)pdrvinfo;
4270 
4271 	/* Move pointer to the 16th bytes. Phy status start address. */
4272 	prxpkt += sizeof(rx_drvinfo_819x_usb);
4273 
4274 	/* Initial the cck and ofdm buffer pointer */
4275 	pcck_buf = (phy_sts_cck_819xusb_t *)prxpkt;
4276 	pofdm_buf = (phy_sts_ofdm_819xusb_t *)prxpkt;
4277 
4278 	pstats->RxMIMOSignalQuality[0] = -1;
4279 	pstats->RxMIMOSignalQuality[1] = -1;
4280 	precord_stats->RxMIMOSignalQuality[0] = -1;
4281 	precord_stats->RxMIMOSignalQuality[1] = -1;
4282 
4283 	if (is_cck_rate) {
4284 		/* (1)Hardware does not provide RSSI for CCK */
4285 
4286 		/* (2)PWDB, Average PWDB calculated by hardware
4287 		 * (for rate adaptive)
4288 		 */
4289 		u8 report;
4290 
4291 		priv->stats.numqry_phystatusCCK++;
4292 
4293 		if (!priv->bCckHighPower) {
4294 			report = pcck_buf->cck_agc_rpt & 0xc0;
4295 			report >>= 6;
4296 			switch (report) {
4297 			case 0x3:
4298 				rx_pwr_all = -35 - (pcck_buf->cck_agc_rpt & 0x3e);
4299 				break;
4300 			case 0x2:
4301 				rx_pwr_all = -23 - (pcck_buf->cck_agc_rpt & 0x3e);
4302 				break;
4303 			case 0x1:
4304 				rx_pwr_all = -11 - (pcck_buf->cck_agc_rpt & 0x3e);
4305 				break;
4306 			case 0x0:
4307 				rx_pwr_all = 6 - (pcck_buf->cck_agc_rpt & 0x3e);
4308 				break;
4309 			}
4310 		} else {
4311 			report = pcck_buf->cck_agc_rpt & 0x60;
4312 			report >>= 5;
4313 			switch (report) {
4314 			case 0x3:
4315 				rx_pwr_all = -35 - ((pcck_buf->cck_agc_rpt & 0x1f) << 1);
4316 				break;
4317 			case 0x2:
4318 				rx_pwr_all = -23 - ((pcck_buf->cck_agc_rpt & 0x1f) << 1);
4319 				break;
4320 			case 0x1:
4321 				rx_pwr_all = -11 - ((pcck_buf->cck_agc_rpt & 0x1f) << 1);
4322 				break;
4323 			case 0x0:
4324 				rx_pwr_all = 6 - ((pcck_buf->cck_agc_rpt & 0x1f) << 1);
4325 				break;
4326 			}
4327 		}
4328 
4329 		pwdb_all = rtl819x_query_rxpwrpercentage(rx_pwr_all);
4330 		pstats->RxPWDBAll = precord_stats->RxPWDBAll = pwdb_all;
4331 		pstats->RecvSignalPower = pwdb_all;
4332 
4333 		/* (3) Get Signal Quality (EVM) */
4334 
4335 		if (pstats->RxPWDBAll > 40) {
4336 			sq = 100;
4337 		} else {
4338 			sq = pcck_buf->sq_rpt;
4339 
4340 			if (pcck_buf->sq_rpt > 64)
4341 				sq = 0;
4342 			else if (pcck_buf->sq_rpt < 20)
4343 				sq = 100;
4344 			else
4345 				sq = ((64 - sq) * 100) / 44;
4346 		}
4347 		pstats->SignalQuality = precord_stats->SignalQuality = sq;
4348 		pstats->RxMIMOSignalQuality[0] =
4349 			precord_stats->RxMIMOSignalQuality[0] = sq;
4350 		pstats->RxMIMOSignalQuality[1] =
4351 			precord_stats->RxMIMOSignalQuality[1] = -1;
4352 
4353 	} else {
4354 		priv->stats.numqry_phystatusHT++;
4355 
4356 		/* (1)Get RSSI for HT rate */
4357 		for (i = RF90_PATH_A; i < priv->NumTotalRFPath; i++) {
4358 			/* We will judge RF RX path now. */
4359 			if (priv->brfpath_rxenable[i])
4360 				rf_rx_num++;
4361 			else
4362 				continue;
4363 
4364 			if (!rtl8192_phy_CheckIsLegalRFPath(
4365 					priv->ieee80211->dev, i))
4366 				continue;
4367 
4368 			rx_pwr[i] =
4369 				((pofdm_buf->trsw_gain_X[i] & 0x3F) * 2) - 106;
4370 
4371 			/* Get Rx snr value in DB */
4372 			tmp_rxsnr =	pofdm_buf->rxsnr_X[i];
4373 			rx_snrX = (s8)(tmp_rxsnr);
4374 			rx_snrX /= 2;
4375 			priv->stats.rxSNRdB[i] = (long)rx_snrX;
4376 
4377 			/* Translate DBM to percentage. */
4378 			RSSI = rtl819x_query_rxpwrpercentage(rx_pwr[i]);
4379 			total_rssi += RSSI;
4380 
4381 			/* Record Signal Strength for next packet */
4382 			pstats->RxMIMOSignalStrength[i] = (u8)RSSI;
4383 			precord_stats->RxMIMOSignalStrength[i] = (u8)RSSI;
4384 		}
4385 
4386 
4387 		/* (2)PWDB, Average PWDB calculated by hardware
4388 		 * (for rate adaptive)
4389 		 */
4390 		rx_pwr_all = (((pofdm_buf->pwdb_all) >> 1) & 0x7f) - 106;
4391 		pwdb_all = rtl819x_query_rxpwrpercentage(rx_pwr_all);
4392 
4393 		pstats->RxPWDBAll = precord_stats->RxPWDBAll = pwdb_all;
4394 		pstats->RxPower = precord_stats->RxPower =  rx_pwr_all;
4395 
4396 		/* (3)EVM of HT rate */
4397 		if (pdrvinfo->RxHT && pdrvinfo->RxRate >= DESC90_RATEMCS8 &&
4398 		    pdrvinfo->RxRate <= DESC90_RATEMCS15)
4399 			/* both spatial stream make sense */
4400 			max_spatial_stream = 2;
4401 		else
4402 			/* only spatial stream 1 makes sense */
4403 			max_spatial_stream = 1;
4404 
4405 		for (i = 0; i < max_spatial_stream; i++) {
4406 			tmp_rxevm =	pofdm_buf->rxevm_X[i];
4407 			rx_evmX = (s8)(tmp_rxevm);
4408 
4409 			/* Do not use shift operation like "rx_evmX >>= 1"
4410 			 * because the compiler of free build environment will
4411 			 * set the most significant bit to "zero" when doing
4412 			 * shifting operation which may change a negative value
4413 			 * to positive one, then the dbm value (which is
4414 			 * supposed to be negative) is not correct anymore.
4415 			 */
4416 			rx_evmX /= 2;	/* dbm */
4417 
4418 			evm = rtl819x_evm_dbtopercentage(rx_evmX);
4419 			if (i == 0)
4420 				/* Fill value in RFD, Get the first spatial
4421 				 * stream only
4422 				 */
4423 				pstats->SignalQuality =
4424 					precord_stats->SignalQuality =
4425 					evm & 0xff;
4426 			pstats->RxMIMOSignalQuality[i] =
4427 				precord_stats->RxMIMOSignalQuality[i] =
4428 				evm & 0xff;
4429 		}
4430 
4431 
4432 		/* record rx statistics for debug */
4433 		rxsc_sgien_exflg = pofdm_buf->rxsc_sgien_exflg;
4434 		prxsc =	(struct phy_ofdm_rx_status_rxsc_sgien_exintfflag *)
4435 			&rxsc_sgien_exflg;
4436 		if (pdrvinfo->BW)	/* 40M channel */
4437 			priv->stats.received_bwtype[1 + prxsc->rxsc]++;
4438 		else			/* 20M channel */
4439 			priv->stats.received_bwtype[0]++;
4440 	}
4441 
4442 	/* UI BSS List signal strength(in percentage), make it good looking,
4443 	 * from 0~100. It is assigned to the BSS List in
4444 	 * GetValueFromBeaconOrProbeRsp().
4445 	 */
4446 	if (is_cck_rate) {
4447 		pstats->SignalStrength =
4448 			precord_stats->SignalStrength =
4449 			(u8)(rtl819x_signal_scale_mapping((long)pwdb_all));
4450 	} else {
4451 		/* We can judge RX path number now. */
4452 		if (rf_rx_num != 0) {
4453 			pstats->SignalStrength =
4454 				precord_stats->SignalStrength =
4455 				(u8)(rtl819x_signal_scale_mapping((long)(total_rssi /= rf_rx_num)));
4456 		}
4457 	}
4458 }	/* QueryRxPhyStatus8190Pci */
4459 
4460 static void rtl8192_record_rxdesc_forlateruse(
4461 		struct ieee80211_rx_stats *psrc_stats,
4462 		struct ieee80211_rx_stats *ptarget_stats)
4463 {
4464 	ptarget_stats->bIsAMPDU = psrc_stats->bIsAMPDU;
4465 	ptarget_stats->bFirstMPDU = psrc_stats->bFirstMPDU;
4466 	ptarget_stats->Seq_Num = psrc_stats->Seq_Num;
4467 }
4468 
4469 
4470 static void TranslateRxSignalStuff819xUsb(struct sk_buff *skb,
4471 					  struct ieee80211_rx_stats *pstats,
4472 					  rx_drvinfo_819x_usb  *pdrvinfo)
4473 {
4474 	/* TODO: We must only check packet for current MAC address.
4475 	 * Not finish
4476 	 */
4477 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
4478 	struct net_device *dev = info->dev;
4479 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
4480 	bool bpacket_match_bssid, bpacket_toself;
4481 	bool bPacketBeacon = false, bToSelfBA = false;
4482 	static struct ieee80211_rx_stats  previous_stats;
4483 	struct rtl_80211_hdr_3addr *hdr;
4484 	u16 fc, type;
4485 
4486 	/* Get Signal Quality for only RX data queue (but not command queue) */
4487 
4488 	u8 *tmp_buf;
4489 	u8  *praddr;
4490 
4491 	/* Get MAC frame start address. */
4492 	tmp_buf = (u8 *)skb->data;
4493 
4494 	hdr = (struct rtl_80211_hdr_3addr *)tmp_buf;
4495 	fc = le16_to_cpu(hdr->frame_ctl);
4496 	type = WLAN_FC_GET_TYPE(fc);
4497 	praddr = hdr->addr1;
4498 
4499 	/* Check if the received packet is acceptable. */
4500 	bpacket_match_bssid = (type != IEEE80211_FTYPE_CTL) &&
4501 			       (eqMacAddr(priv->ieee80211->current_network.bssid,  (fc & IEEE80211_FCTL_TODS) ? hdr->addr1 : (fc & IEEE80211_FCTL_FROMDS) ? hdr->addr2 : hdr->addr3))
4502 			       && (!pstats->bHwError) && (!pstats->bCRC) && (!pstats->bICV);
4503 	bpacket_toself =  bpacket_match_bssid &
4504 			  (eqMacAddr(praddr, priv->ieee80211->dev->dev_addr));
4505 
4506 	if (WLAN_FC_GET_FRAMETYPE(fc) == IEEE80211_STYPE_BEACON)
4507 		bPacketBeacon = true;
4508 	if (WLAN_FC_GET_FRAMETYPE(fc) == IEEE80211_STYPE_BLOCKACK) {
4509 		if ((eqMacAddr(praddr, dev->dev_addr)))
4510 			bToSelfBA = true;
4511 	}
4512 
4513 
4514 
4515 	if (bpacket_match_bssid)
4516 		priv->stats.numpacket_matchbssid++;
4517 	if (bpacket_toself)
4518 		priv->stats.numpacket_toself++;
4519 	/* Process PHY information for previous packet (RSSI/PWDB/EVM)
4520 	 * Because phy information is contained in the last packet of AMPDU
4521 	 * only, so driver should process phy information of previous packet
4522 	 */
4523 	rtl8192_process_phyinfo(priv, tmp_buf, &previous_stats, pstats);
4524 	rtl8192_query_rxphystatus(priv, pstats, pdrvinfo, &previous_stats,
4525 				  bpacket_match_bssid, bpacket_toself,
4526 				  bPacketBeacon, bToSelfBA);
4527 	rtl8192_record_rxdesc_forlateruse(pstats, &previous_stats);
4528 }
4529 
4530 /**
4531  * Function:	UpdateReceivedRateHistogramStatistics
4532  * Overview:	Record the received data rate
4533  *
4534  * Input:
4535  *	struct net_device *dev
4536  *	struct ieee80211_rx_stats *stats
4537  *
4538  * Output:
4539  *
4540  *			(priv->stats.ReceivedRateHistogram[] is updated)
4541  * Return:
4542  *		None
4543  */
4544 static void
4545 UpdateReceivedRateHistogramStatistics8190(struct net_device *dev,
4546 					  struct ieee80211_rx_stats *stats)
4547 {
4548 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
4549 	/* 0: Total, 1:OK, 2:CRC, 3:ICV */
4550 	u32 rcvType = 1;
4551 	u32 rateIndex;
4552 	/* 1: short preamble/GI, 0: long preamble/GI */
4553 	u32 preamble_guardinterval;
4554 
4555 
4556 	if (stats->bCRC)
4557 		rcvType = 2;
4558 	else if (stats->bICV)
4559 		rcvType = 3;
4560 
4561 	if (stats->bShortPreamble)
4562 		preamble_guardinterval = 1; /* short */
4563 	else
4564 		preamble_guardinterval = 0; /* long */
4565 
4566 	switch (stats->rate) {
4567 	/* CCK rate */
4568 	case MGN_1M:
4569 		rateIndex = 0;
4570 		break;
4571 	case MGN_2M:
4572 		rateIndex = 1;
4573 		break;
4574 	case MGN_5_5M:
4575 		rateIndex = 2;
4576 		break;
4577 	case MGN_11M:
4578 		rateIndex = 3;
4579 		break;
4580 	/* Legacy OFDM rate */
4581 	case MGN_6M:
4582 		rateIndex = 4;
4583 		break;
4584 	case MGN_9M:
4585 		rateIndex = 5;
4586 		break;
4587 	case MGN_12M:
4588 		rateIndex = 6;
4589 		break;
4590 	case MGN_18M:
4591 		rateIndex = 7;
4592 		break;
4593 	case MGN_24M:
4594 		rateIndex = 8;
4595 		break;
4596 	case MGN_36M:
4597 		rateIndex = 9;
4598 		break;
4599 	case MGN_48M:
4600 		rateIndex = 10;
4601 		break;
4602 	case MGN_54M:
4603 		rateIndex = 11;
4604 		break;
4605 	/* 11n High throughput rate */
4606 	case MGN_MCS0:
4607 		rateIndex = 12;
4608 		break;
4609 	case MGN_MCS1:
4610 		rateIndex = 13;
4611 		break;
4612 	case MGN_MCS2:
4613 		rateIndex = 14;
4614 		break;
4615 	case MGN_MCS3:
4616 		rateIndex = 15;
4617 		break;
4618 	case MGN_MCS4:
4619 		rateIndex = 16;
4620 		break;
4621 	case MGN_MCS5:
4622 		rateIndex = 17;
4623 		break;
4624 	case MGN_MCS6:
4625 		rateIndex = 18;
4626 		break;
4627 	case MGN_MCS7:
4628 		rateIndex = 19;
4629 		break;
4630 	case MGN_MCS8:
4631 		rateIndex = 20;
4632 		break;
4633 	case MGN_MCS9:
4634 		rateIndex = 21;
4635 		break;
4636 	case MGN_MCS10:
4637 		rateIndex = 22;
4638 		break;
4639 	case MGN_MCS11:
4640 		rateIndex = 23;
4641 		break;
4642 	case MGN_MCS12:
4643 		rateIndex = 24;
4644 		break;
4645 	case MGN_MCS13:
4646 		rateIndex = 25;
4647 		break;
4648 	case MGN_MCS14:
4649 		rateIndex = 26;
4650 		break;
4651 	case MGN_MCS15:
4652 		rateIndex = 27;
4653 		break;
4654 	default:
4655 		rateIndex = 28;
4656 		break;
4657 	}
4658 	priv->stats.received_preamble_GI[preamble_guardinterval][rateIndex]++;
4659 	priv->stats.received_rate_histogram[0][rateIndex]++; /* total */
4660 	priv->stats.received_rate_histogram[rcvType][rateIndex]++;
4661 }
4662 
4663 
4664 static void query_rxdesc_status(struct sk_buff *skb,
4665 				struct ieee80211_rx_stats *stats,
4666 				bool bIsRxAggrSubframe)
4667 {
4668 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
4669 	struct net_device *dev = info->dev;
4670 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
4671 	rx_drvinfo_819x_usb  *driver_info = NULL;
4672 
4673 	/* Get Rx Descriptor Information */
4674 	rx_desc_819x_usb *desc = (rx_desc_819x_usb *)skb->data;
4675 
4676 	stats->Length = desc->Length;
4677 	stats->RxDrvInfoSize = desc->RxDrvInfoSize;
4678 	stats->RxBufShift = 0;
4679 	stats->bICV = desc->ICV;
4680 	stats->bCRC = desc->CRC32;
4681 	stats->bHwError = stats->bCRC | stats->bICV;
4682 	/* RTL8190 set this bit to indicate that Hw does not decrypt packet */
4683 	stats->Decrypted = !desc->SWDec;
4684 
4685 	if ((priv->ieee80211->pHTInfo->bCurrentHTSupport) &&
4686 	    (priv->ieee80211->pairwise_key_type == KEY_TYPE_CCMP))
4687 		stats->bHwError = false;
4688 	else
4689 		stats->bHwError = stats->bCRC | stats->bICV;
4690 
4691 	if (stats->Length < 24 || stats->Length > MAX_8192U_RX_SIZE)
4692 		stats->bHwError |= 1;
4693 	/* Get Driver Info */
4694 	/* TODO: Need to verify it on FGPA platform
4695 	 * Driver info are written to the RxBuffer following rx desc
4696 	 */
4697 	if (stats->RxDrvInfoSize != 0) {
4698 		driver_info = (rx_drvinfo_819x_usb *)(
4699 				skb->data
4700 				+ sizeof(rx_desc_819x_usb)
4701 				+ stats->RxBufShift
4702 			      );
4703 		/* unit: 0.5M */
4704 		/* TODO */
4705 		if (!stats->bHwError) {
4706 			u8	ret_rate;
4707 
4708 			ret_rate = HwRateToMRate90(driver_info->RxHT,
4709 						   driver_info->RxRate);
4710 			if (ret_rate == 0xff) {
4711 				/* Abnormal Case: Receive CRC OK packet with Rx
4712 				 * descriptor indicating non supported rate.
4713 				 * Special Error Handling here
4714 				 */
4715 
4716 				stats->bHwError = 1;
4717 				/* Set 1M rate by default */
4718 				stats->rate = MGN_1M;
4719 			} else {
4720 				stats->rate = ret_rate;
4721 			}
4722 		} else {
4723 			stats->rate = 0x02;
4724 		}
4725 
4726 		stats->bShortPreamble = driver_info->SPLCP;
4727 
4728 
4729 		UpdateReceivedRateHistogramStatistics8190(dev, stats);
4730 
4731 		stats->bIsAMPDU = (driver_info->PartAggr == 1);
4732 		stats->bFirstMPDU = (driver_info->PartAggr == 1) &&
4733 				    (driver_info->FirstAGGR == 1);
4734 		stats->TimeStampLow = driver_info->TSFL;
4735 
4736 		UpdateRxPktTimeStamp8190(dev, stats);
4737 
4738 		/* Rx A-MPDU */
4739 		if (driver_info->FirstAGGR == 1 || driver_info->PartAggr == 1)
4740 			RT_TRACE(COMP_RXDESC,
4741 				"driver_info->FirstAGGR = %d, driver_info->PartAggr = %d\n",
4742 				 driver_info->FirstAGGR, driver_info->PartAggr);
4743 	}
4744 
4745 	skb_pull(skb, sizeof(rx_desc_819x_usb));
4746 	/* Get Total offset of MPDU Frame Body */
4747 	if ((stats->RxBufShift + stats->RxDrvInfoSize) > 0) {
4748 		stats->bShift = 1;
4749 		skb_pull(skb, stats->RxBufShift + stats->RxDrvInfoSize);
4750 	}
4751 
4752 	if (driver_info) {
4753 		stats->RxIs40MHzPacket = driver_info->BW;
4754 		TranslateRxSignalStuff819xUsb(skb, stats, driver_info);
4755 	}
4756 }
4757 
4758 static void rtl8192_rx_nomal(struct sk_buff *skb)
4759 {
4760 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
4761 	struct net_device *dev = info->dev;
4762 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
4763 	struct ieee80211_rx_stats stats = {
4764 		.signal = 0,
4765 		.noise = 0x100 - 98,
4766 		.rate = 0,
4767 		.freq = IEEE80211_24GHZ_BAND,
4768 	};
4769 	u32 rx_pkt_len = 0;
4770 	struct rtl_80211_hdr_1addr *ieee80211_hdr = NULL;
4771 	bool unicast_packet = false;
4772 
4773 	/* 20 is for ps-poll */
4774 	if ((skb->len >= (20 + sizeof(rx_desc_819x_usb))) && (skb->len < RX_URB_SIZE)) {
4775 		/* first packet should not contain Rx aggregation header */
4776 		query_rxdesc_status(skb, &stats, false);
4777 		/* TODO */
4778 		/* hardware related info */
4779 		/* Process the MPDU received */
4780 		skb_trim(skb, skb->len - 4/*sCrcLng*/);
4781 
4782 		rx_pkt_len = skb->len;
4783 		ieee80211_hdr = (struct rtl_80211_hdr_1addr *)skb->data;
4784 		unicast_packet = false;
4785 		if (is_broadcast_ether_addr(ieee80211_hdr->addr1)) {
4786 			/* TODO */
4787 		} else if (is_multicast_ether_addr(ieee80211_hdr->addr1)) {
4788 			/* TODO */
4789 		} else {
4790 			/* unicast packet */
4791 			unicast_packet = true;
4792 		}
4793 
4794 		if (!ieee80211_rx(priv->ieee80211, skb, &stats)) {
4795 			dev_kfree_skb_any(skb);
4796 		} else {
4797 			priv->stats.rxoktotal++;
4798 			if (unicast_packet)
4799 				priv->stats.rxbytesunicast += rx_pkt_len;
4800 		}
4801 	} else {
4802 		priv->stats.rxurberr++;
4803 		netdev_dbg(dev, "actual_length: %d\n", skb->len);
4804 		dev_kfree_skb_any(skb);
4805 	}
4806 }
4807 
4808 static void rtl819xusb_process_received_packet(
4809 		struct net_device *dev,
4810 		struct ieee80211_rx_stats *pstats)
4811 {
4812 	u8	*frame;
4813 	u16     frame_len = 0;
4814 	struct r8192_priv *priv = ieee80211_priv(dev);
4815 
4816 	/* Get shifted bytes of Starting address of 802.11 header. */
4817 	pstats->virtual_address += get_rxpacket_shiftbytes_819xusb(pstats);
4818 	frame = pstats->virtual_address;
4819 	frame_len = pstats->packetlength;
4820 #ifdef TODO	/* about HCT */
4821 	if (!Adapter->bInHctTest)
4822 		CountRxErrStatistics(Adapter, pRfd);
4823 #endif
4824 #ifdef ENABLE_PS  /* for adding ps function in future */
4825 	RT_RF_POWER_STATE rtState;
4826 	/* When RF is off, we should not count the packet for hw/sw synchronize
4827 	 * reason, ie. there may be a duration while sw switch is changed and
4828 	 * hw switch is being changed.
4829 	 */
4830 	Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_RF_STATE,
4831 					 (u8 *)(&rtState));
4832 	if (rtState == eRfOff)
4833 		return;
4834 #endif
4835 	priv->stats.rxframgment++;
4836 
4837 #ifdef TODO
4838 	RmMonitorSignalStrength(Adapter, pRfd);
4839 #endif
4840 	/* We have to release RFD and return if rx pkt is cmd pkt. */
4841 	if (rtl819xusb_rx_command_packet(dev, pstats))
4842 		return;
4843 
4844 #ifdef SW_CRC_CHECK
4845 	SwCrcCheck();
4846 #endif
4847 
4848 
4849 }
4850 
4851 static void query_rx_cmdpkt_desc_status(struct sk_buff *skb,
4852 					struct ieee80211_rx_stats *stats)
4853 {
4854 	rx_desc_819x_usb *desc = (rx_desc_819x_usb *)skb->data;
4855 
4856 	/* Get Rx Descriptor Information */
4857 	stats->virtual_address = (u8 *)skb->data;
4858 	stats->Length = desc->Length;
4859 	stats->RxDrvInfoSize = 0;
4860 	stats->RxBufShift = 0;
4861 	stats->packetlength = stats->Length - scrclng;
4862 	stats->fraglength = stats->packetlength;
4863 	stats->fragoffset = 0;
4864 	stats->ntotalfrag = 1;
4865 }
4866 
4867 
4868 static void rtl8192_rx_cmd(struct sk_buff *skb)
4869 {
4870 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
4871 	struct net_device *dev = info->dev;
4872 	/* TODO */
4873 	struct ieee80211_rx_stats stats = {
4874 		.signal = 0,
4875 		.noise = 0x100 - 98,
4876 		.rate = 0,
4877 		.freq = IEEE80211_24GHZ_BAND,
4878 	};
4879 
4880 	if ((skb->len >= (20 + sizeof(rx_desc_819x_usb))) && (skb->len < RX_URB_SIZE)) {
4881 		query_rx_cmdpkt_desc_status(skb, &stats);
4882 		/* prfd->queue_id = 1; */
4883 
4884 		/* Process the command packet received. */
4885 
4886 		rtl819xusb_process_received_packet(dev, &stats);
4887 
4888 		dev_kfree_skb_any(skb);
4889 	}
4890 }
4891 
4892 static void rtl8192_irq_rx_tasklet(struct r8192_priv *priv)
4893 {
4894 	struct sk_buff *skb;
4895 	struct rtl8192_rx_info *info;
4896 
4897 	while (NULL != (skb = skb_dequeue(&priv->skb_queue))) {
4898 		info = (struct rtl8192_rx_info *)skb->cb;
4899 		switch (info->out_pipe) {
4900 		/* Nomal packet pipe */
4901 		case 3:
4902 			priv->IrpPendingCount--;
4903 			rtl8192_rx_nomal(skb);
4904 			break;
4905 
4906 		/* Command packet pipe */
4907 		case 9:
4908 			RT_TRACE(COMP_RECV, "command in-pipe index(%d)\n",
4909 				 info->out_pipe);
4910 
4911 			rtl8192_rx_cmd(skb);
4912 			break;
4913 
4914 		default: /* should never get here! */
4915 			RT_TRACE(COMP_ERR, "Unknown in-pipe index(%d)\n",
4916 				 info->out_pipe);
4917 			dev_kfree_skb(skb);
4918 			break;
4919 		}
4920 	}
4921 }
4922 
4923 static const struct net_device_ops rtl8192_netdev_ops = {
4924 	.ndo_open               = rtl8192_open,
4925 	.ndo_stop               = rtl8192_close,
4926 	.ndo_get_stats          = rtl8192_stats,
4927 	.ndo_tx_timeout         = tx_timeout,
4928 	.ndo_do_ioctl           = rtl8192_ioctl,
4929 	.ndo_set_rx_mode	= r8192_set_multicast,
4930 	.ndo_set_mac_address    = r8192_set_mac_adr,
4931 	.ndo_validate_addr      = eth_validate_addr,
4932 	.ndo_start_xmit         = ieee80211_xmit,
4933 };
4934 
4935 
4936 /****************************************************************************
4937  *    ---------------------------- USB_STUFF---------------------------
4938  *****************************************************************************/
4939 
4940 static int rtl8192_usb_probe(struct usb_interface *intf,
4941 			     const struct usb_device_id *id)
4942 {
4943 	struct net_device *dev = NULL;
4944 	struct r8192_priv *priv = NULL;
4945 	struct usb_device *udev = interface_to_usbdev(intf);
4946 	int ret;
4947 
4948 	RT_TRACE(COMP_INIT, "Oops: i'm coming\n");
4949 
4950 	dev = alloc_ieee80211(sizeof(struct r8192_priv));
4951 	if (!dev)
4952 		return -ENOMEM;
4953 
4954 	usb_set_intfdata(intf, dev);
4955 	SET_NETDEV_DEV(dev, &intf->dev);
4956 	priv = ieee80211_priv(dev);
4957 	priv->ieee80211 = netdev_priv(dev);
4958 	priv->udev = udev;
4959 
4960 	dev->netdev_ops = &rtl8192_netdev_ops;
4961 
4962 	dev->wireless_handlers = &r8192_wx_handlers_def;
4963 
4964 	dev->type = ARPHRD_ETHER;
4965 
4966 	dev->watchdog_timeo = HZ * 3;
4967 
4968 	if (dev_alloc_name(dev, ifname) < 0) {
4969 		RT_TRACE(COMP_INIT,
4970 			 "Oops: devname already taken! Trying wlan%%d...\n");
4971 		ifname = "wlan%d";
4972 		dev_alloc_name(dev, ifname);
4973 	}
4974 
4975 	RT_TRACE(COMP_INIT, "Driver probe completed1\n");
4976 	if (rtl8192_init(dev) != 0) {
4977 		RT_TRACE(COMP_ERR, "Initialization failed");
4978 		ret = -ENODEV;
4979 		goto fail;
4980 	}
4981 	netif_carrier_off(dev);
4982 	netif_stop_queue(dev);
4983 
4984 	ret = register_netdev(dev);
4985 	if (ret)
4986 		goto fail2;
4987 
4988 	RT_TRACE(COMP_INIT, "dev name=======> %s\n", dev->name);
4989 	rtl8192_proc_init_one(dev);
4990 
4991 
4992 	RT_TRACE(COMP_INIT, "Driver probe completed\n");
4993 	return 0;
4994 
4995 fail2:
4996 	rtl8192_down(dev);
4997 fail:
4998 	kfree(priv->pFirmware);
4999 	priv->pFirmware = NULL;
5000 	rtl8192_usb_deleteendpoints(dev);
5001 	msleep(10);
5002 	free_ieee80211(dev);
5003 
5004 	RT_TRACE(COMP_ERR, "wlan driver load failed\n");
5005 	return ret;
5006 }
5007 
5008 /* detach all the work and timer structure declared or inititialize
5009  * in r8192U_init function.
5010  */
5011 static void rtl8192_cancel_deferred_work(struct r8192_priv *priv)
5012 {
5013 	cancel_work_sync(&priv->reset_wq);
5014 	cancel_delayed_work(&priv->watch_dog_wq);
5015 	cancel_delayed_work(&priv->update_beacon_wq);
5016 	cancel_work_sync(&priv->qos_activate);
5017 }
5018 
5019 
5020 static void rtl8192_usb_disconnect(struct usb_interface *intf)
5021 {
5022 	struct net_device *dev = usb_get_intfdata(intf);
5023 	struct r8192_priv *priv = ieee80211_priv(dev);
5024 
5025 	if (dev) {
5026 		unregister_netdev(dev);
5027 
5028 		RT_TRACE(COMP_DOWN,
5029 			 "=============>wlan driver to be removed\n");
5030 		rtl8192_proc_remove_one(dev);
5031 
5032 		rtl8192_down(dev);
5033 		kfree(priv->pFirmware);
5034 		priv->pFirmware = NULL;
5035 		rtl8192_usb_deleteendpoints(dev);
5036 		mdelay(10);
5037 	}
5038 	free_ieee80211(dev);
5039 	RT_TRACE(COMP_DOWN, "wlan driver removed\n");
5040 }
5041 
5042 static int __init rtl8192_usb_module_init(void)
5043 {
5044 	int ret;
5045 
5046 #ifdef CONFIG_IEEE80211_DEBUG
5047 	ret = ieee80211_debug_init();
5048 	if (ret) {
5049 		pr_err("ieee80211_debug_init() failed %d\n", ret);
5050 		return ret;
5051 	}
5052 #endif
5053 	ret = ieee80211_crypto_init();
5054 	if (ret) {
5055 		pr_err("ieee80211_crypto_init() failed %d\n", ret);
5056 		return ret;
5057 	}
5058 
5059 	ret = ieee80211_crypto_tkip_init();
5060 	if (ret) {
5061 		pr_err("ieee80211_crypto_tkip_init() failed %d\n", ret);
5062 		return ret;
5063 	}
5064 
5065 	ret = ieee80211_crypto_ccmp_init();
5066 	if (ret) {
5067 		pr_err("ieee80211_crypto_ccmp_init() failed %d\n", ret);
5068 		return ret;
5069 	}
5070 
5071 	ret = ieee80211_crypto_wep_init();
5072 	if (ret) {
5073 		pr_err("ieee80211_crypto_wep_init() failed %d\n", ret);
5074 		return ret;
5075 	}
5076 
5077 	pr_info("\nLinux kernel driver for RTL8192 based WLAN cards\n");
5078 	pr_info("Copyright (c) 2007-2008, Realsil Wlan\n");
5079 	RT_TRACE(COMP_INIT, "Initializing module");
5080 	RT_TRACE(COMP_INIT, "Wireless extensions version %d", WIRELESS_EXT);
5081 	rtl8192_proc_module_init();
5082 	return usb_register(&rtl8192_usb_driver);
5083 }
5084 
5085 
5086 static void __exit rtl8192_usb_module_exit(void)
5087 {
5088 	usb_deregister(&rtl8192_usb_driver);
5089 
5090 	RT_TRACE(COMP_DOWN, "Exiting");
5091 }
5092 
5093 void EnableHWSecurityConfig8192(struct net_device *dev)
5094 {
5095 	u8 SECR_value = 0x0;
5096 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
5097 	struct ieee80211_device *ieee = priv->ieee80211;
5098 
5099 	SECR_value = SCR_TxEncEnable | SCR_RxDecEnable;
5100 	if (((ieee->pairwise_key_type == KEY_TYPE_WEP40) || (ieee->pairwise_key_type == KEY_TYPE_WEP104)) && (priv->ieee80211->auth_mode != 2)) {
5101 		SECR_value |= SCR_RxUseDK;
5102 		SECR_value |= SCR_TxUseDK;
5103 	} else if ((ieee->iw_mode == IW_MODE_ADHOC) && (ieee->pairwise_key_type & (KEY_TYPE_CCMP | KEY_TYPE_TKIP))) {
5104 		SECR_value |= SCR_RxUseDK;
5105 		SECR_value |= SCR_TxUseDK;
5106 	}
5107 	/* add HWSec active enable here.
5108 	 * default using hwsec. when peer AP is in N mode only and
5109 	 * pairwise_key_type is none_aes(which HT_IOT_ACT_PURE_N_MODE indicates
5110 	 * it), use software security. when peer AP is in b,g,n mode mixed and
5111 	 * pairwise_key_type is none_aes, use g mode hw security.
5112 	 */
5113 
5114 	ieee->hwsec_active = 1;
5115 
5116 	/* add hwsec_support flag to totol control hw_sec on/off */
5117 	if ((ieee->pHTInfo->IOTAction & HT_IOT_ACT_PURE_N_MODE) || !hwwep) {
5118 		ieee->hwsec_active = 0;
5119 		SECR_value &= ~SCR_RxDecEnable;
5120 	}
5121 	RT_TRACE(COMP_SEC, "%s:, hwsec:%d, pairwise_key:%d, SECR_value:%x\n",
5122 		 __func__, ieee->hwsec_active, ieee->pairwise_key_type,
5123 		 SECR_value);
5124 	write_nic_byte(dev, SECR,  SECR_value);
5125 }
5126 
5127 
5128 void setKey(struct net_device *dev, u8 EntryNo, u8 KeyIndex, u16 KeyType,
5129 	    u8 *MacAddr, u8 DefaultKey, u32 *KeyContent)
5130 {
5131 	u32 TargetCommand = 0;
5132 	u32 TargetContent = 0;
5133 	u16 usConfig = 0;
5134 	u8 i;
5135 
5136 	if (EntryNo >= TOTAL_CAM_ENTRY)
5137 		RT_TRACE(COMP_ERR, "cam entry exceeds in setKey()\n");
5138 
5139 	RT_TRACE(COMP_SEC,
5140 		 "====>to setKey(), dev:%p, EntryNo:%d, KeyIndex:%d, KeyType:%d, MacAddr%pM\n",
5141 		 dev, EntryNo, KeyIndex, KeyType, MacAddr);
5142 
5143 	if (DefaultKey)
5144 		usConfig |= BIT(15) | (KeyType << 2);
5145 	else
5146 		usConfig |= BIT(15) | (KeyType << 2) | KeyIndex;
5147 
5148 
5149 	for (i = 0; i < CAM_CONTENT_COUNT; i++) {
5150 		TargetCommand  = i + CAM_CONTENT_COUNT * EntryNo;
5151 		TargetCommand |= BIT(31) | BIT(16);
5152 
5153 		if (i == 0) { /* MAC|Config */
5154 			TargetContent = (u32)(*(MacAddr + 0)) << 16 |
5155 					(u32)(*(MacAddr + 1)) << 24 |
5156 					(u32)usConfig;
5157 
5158 			write_nic_dword(dev, WCAMI, TargetContent);
5159 			write_nic_dword(dev, RWCAM, TargetCommand);
5160 		} else if (i == 1) { /* MAC */
5161 			TargetContent = (u32)(*(MacAddr + 2))	 |
5162 					(u32)(*(MacAddr + 3)) <<  8 |
5163 					(u32)(*(MacAddr + 4)) << 16 |
5164 					(u32)(*(MacAddr + 5)) << 24;
5165 			write_nic_dword(dev, WCAMI, TargetContent);
5166 			write_nic_dword(dev, RWCAM, TargetCommand);
5167 		} else {
5168 			/* Key Material */
5169 			if (KeyContent) {
5170 				write_nic_dword(dev, WCAMI,
5171 						*(KeyContent + i - 2));
5172 				write_nic_dword(dev, RWCAM, TargetCommand);
5173 			}
5174 		}
5175 	}
5176 }
5177 
5178 /***************************************************************************
5179  *    ------------------- module init / exit stubs ----------------
5180  ****************************************************************************/
5181 module_init(rtl8192_usb_module_init);
5182 module_exit(rtl8192_usb_module_exit);
5183