1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  * Copyright(c) 2008 - 2010 Realtek Corporation. All rights reserved.
4  * Linux device driver for RTL8192U
5  *
6  * Based on the r8187 driver, which is:
7  * Copyright 2004-2005 Andrea Merello <andrea.merello@gmail.com>, et al.
8  *
9  * Contact Information:
10  * Jerry chuang <wlanfae@realtek.com>
11  */
12 
13 #ifndef CONFIG_FORCE_HARD_FLOAT
14 double __floatsidf(int i)
15 {
16 	return i;
17 }
18 
19 unsigned int __fixunsdfsi(double d)
20 {
21 	return d;
22 }
23 
24 double __adddf3(double a, double b)
25 {
26 	return a + b;
27 }
28 
29 double __addsf3(float a, float b)
30 {
31 	return a + b;
32 }
33 
34 double __subdf3(double a, double b)
35 {
36 	return a - b;
37 }
38 
39 double __extendsfdf2(float a)
40 {
41 	return a;
42 }
43 #endif
44 
45 #define CONFIG_RTL8192_IO_MAP
46 
47 #include <linux/uaccess.h>
48 #include "r8192U_hw.h"
49 #include "r8192U.h"
50 #include "r8190_rtl8256.h" /* RTL8225 Radio frontend */
51 #include "r8180_93cx6.h"   /* Card EEPROM */
52 #include "r8192U_wx.h"
53 #include "r819xU_phy.h"
54 #include "r819xU_phyreg.h"
55 #include "r819xU_cmdpkt.h"
56 #include "r8192U_dm.h"
57 #include <linux/usb.h>
58 #include <linux/slab.h>
59 #include <linux/proc_fs.h>
60 #include <linux/seq_file.h>
61 /* FIXME: check if 2.6.7 is ok */
62 
63 #include "ieee80211/dot11d.h"
64 /* set here to open your trace code. */
65 u32 rt_global_debug_component = COMP_DOWN	|
66 				COMP_SEC	|
67 				COMP_ERR; /* always open err flags on */
68 
69 #define TOTAL_CAM_ENTRY 32
70 #define CAM_CONTENT_COUNT 8
71 
72 static const struct usb_device_id rtl8192_usb_id_tbl[] = {
73 	/* Realtek */
74 	{USB_DEVICE(0x0bda, 0x8709)},
75 	/* Corega */
76 	{USB_DEVICE(0x07aa, 0x0043)},
77 	/* Belkin */
78 	{USB_DEVICE(0x050d, 0x805E)},
79 	/* Sitecom */
80 	{USB_DEVICE(0x0df6, 0x0031)},
81 	/* EnGenius */
82 	{USB_DEVICE(0x1740, 0x9201)},
83 	/* Dlink */
84 	{USB_DEVICE(0x2001, 0x3301)},
85 	/* Zinwell */
86 	{USB_DEVICE(0x5a57, 0x0290)},
87 	/* LG */
88 	{USB_DEVICE(0x043e, 0x7a01)},
89 	{}
90 };
91 
92 MODULE_LICENSE("GPL");
93 MODULE_VERSION("V 1.1");
94 MODULE_DEVICE_TABLE(usb, rtl8192_usb_id_tbl);
95 MODULE_DESCRIPTION("Linux driver for Realtek RTL8192 USB WiFi cards");
96 
97 static char *ifname = "wlan%d";
98 static int hwwep = 1;  /* default use hw. set 0 to use software security */
99 
100 module_param(ifname, charp, 0644);
101 module_param(hwwep, int, 0644);
102 
103 MODULE_PARM_DESC(ifname, " Net interface name, wlan%d=default");
104 MODULE_PARM_DESC(hwwep, " Try to use hardware security support. ");
105 
106 static int rtl8192_usb_probe(struct usb_interface *intf,
107 			     const struct usb_device_id *id);
108 static void rtl8192_usb_disconnect(struct usb_interface *intf);
109 
110 static struct usb_driver rtl8192_usb_driver = {
111 	.name		= RTL819XU_MODULE_NAME,		  /* Driver name   */
112 	.id_table	= rtl8192_usb_id_tbl,		  /* PCI_ID table  */
113 	.probe		= rtl8192_usb_probe,		  /* probe fn      */
114 	.disconnect	= rtl8192_usb_disconnect,	  /* remove fn     */
115 	.suspend	= NULL,				  /* PM suspend fn */
116 	.resume		= NULL,				  /* PM resume fn  */
117 };
118 
119 struct CHANNEL_LIST {
120 	u8	Channel[32];
121 	u8	Len;
122 };
123 
124 static struct CHANNEL_LIST ChannelPlan[] = {
125 	/* FCC */
126 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165}, 24},
127 	/* IC */
128 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}, 11},
129 	/* ETSI */
130 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 36, 40, 44, 48, 52, 56, 60, 64}, 21},
131 	/* Spain. Change to ETSI. */
132 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
133 	/* France. Change to ETSI. */
134 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
135 	/* MKK */
136 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
137 	/* MKK1 */
138 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
139 	/* Israel. */
140 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},
141 	/* For 11a , TELEC */
142 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
143 	/* MIC */
144 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},
145 	/* For Global Domain. 1-11:active scan, 12-14 passive scan. */
146 	{{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14}, 14}
147 };
148 
149 static void rtl819x_set_channel_map(u8 channel_plan, struct r8192_priv *priv)
150 {
151 	int i, max_chan = -1, min_chan = -1;
152 	struct ieee80211_device *ieee = priv->ieee80211;
153 
154 	switch (channel_plan) {
155 	case COUNTRY_CODE_FCC:
156 	case COUNTRY_CODE_IC:
157 	case COUNTRY_CODE_ETSI:
158 	case COUNTRY_CODE_SPAIN:
159 	case COUNTRY_CODE_FRANCE:
160 	case COUNTRY_CODE_MKK:
161 	case COUNTRY_CODE_MKK1:
162 	case COUNTRY_CODE_ISRAEL:
163 	case COUNTRY_CODE_TELEC:
164 	case COUNTRY_CODE_MIC:
165 		rtl8192u_dot11d_init(ieee);
166 		ieee->bGlobalDomain = false;
167 		/* actually 8225 & 8256 rf chips only support B,G,24N mode */
168 		if ((priv->rf_chip == RF_8225) || (priv->rf_chip == RF_8256)) {
169 			min_chan = 1;
170 			max_chan = 14;
171 		} else {
172 			RT_TRACE(COMP_ERR,
173 				 "unknown rf chip, can't set channel map in function:%s()\n",
174 				 __func__);
175 		}
176 		if (ChannelPlan[channel_plan].Len != 0) {
177 			/* Clear old channel map */
178 			memset(GET_DOT11D_INFO(ieee)->channel_map, 0,
179 			       sizeof(GET_DOT11D_INFO(ieee)->channel_map));
180 			/* Set new channel map */
181 			for (i = 0; i < ChannelPlan[channel_plan].Len; i++) {
182 				if (ChannelPlan[channel_plan].Channel[i] < min_chan || ChannelPlan[channel_plan].Channel[i] > max_chan)
183 					break;
184 				GET_DOT11D_INFO(ieee)->channel_map[ChannelPlan[channel_plan].Channel[i]] = 1;
185 			}
186 		}
187 		break;
188 
189 	case COUNTRY_CODE_GLOBAL_DOMAIN:
190 		/* this flag enabled to follow 11d country IE setting,
191 		 * otherwise, it shall follow global domain settings.
192 		 */
193 		GET_DOT11D_INFO(ieee)->dot11d_enabled = 0;
194 		dot11d_reset(ieee);
195 		ieee->bGlobalDomain = true;
196 		break;
197 
198 	default:
199 		break;
200 	}
201 }
202 
203 static void CamResetAllEntry(struct net_device *dev)
204 {
205 	u32 ulcommand = 0;
206 	/* In static WEP, OID_ADD_KEY or OID_ADD_WEP are set before STA
207 	 * associate to AP. However, ResetKey is called on
208 	 * OID_802_11_INFRASTRUCTURE_MODE and MlmeAssociateRequest. In this
209 	 * condition, Cam can not be reset because upper layer will not set
210 	 * this static key again.
211 	 */
212 	ulcommand |= BIT(31) | BIT(30);
213 	write_nic_dword(dev, RWCAM, ulcommand);
214 }
215 
216 int write_nic_byte_E(struct net_device *dev, int indx, u8 data)
217 {
218 	int status;
219 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
220 	struct usb_device *udev = priv->udev;
221 	u8 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
222 
223 	if (!usbdata)
224 		return -ENOMEM;
225 	*usbdata = data;
226 
227 	status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
228 				 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
229 				 indx | 0xfe00, 0, usbdata, 1, 500);
230 	kfree(usbdata);
231 
232 	if (status < 0) {
233 		netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
234 		return status;
235 	}
236 	return 0;
237 }
238 
239 int read_nic_byte_E(struct net_device *dev, int indx, u8 *data)
240 {
241 	int status;
242 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
243 	struct usb_device *udev = priv->udev;
244 	u8 *usbdata = kzalloc(sizeof(u8), GFP_KERNEL);
245 
246 	if (!usbdata)
247 		return -ENOMEM;
248 
249 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
250 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
251 				 indx | 0xfe00, 0, usbdata, 1, 500);
252 	*data = *usbdata;
253 	kfree(usbdata);
254 
255 	if (status < 0) {
256 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
257 		return status;
258 	}
259 
260 	return 0;
261 }
262 
263 /* as 92U has extend page from 4 to 16, so modify functions below. */
264 int write_nic_byte(struct net_device *dev, int indx, u8 data)
265 {
266 	int status;
267 
268 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
269 	struct usb_device *udev = priv->udev;
270 	u8 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
271 
272 	if (!usbdata)
273 		return -ENOMEM;
274 	*usbdata = data;
275 
276 	status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
277 				 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
278 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
279 				 usbdata, 1, 500);
280 	kfree(usbdata);
281 
282 	if (status < 0) {
283 		netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
284 		return status;
285 	}
286 
287 	return 0;
288 }
289 
290 int write_nic_word(struct net_device *dev, int indx, u16 data)
291 {
292 	int status;
293 
294 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
295 	struct usb_device *udev = priv->udev;
296 	u16 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
297 
298 	if (!usbdata)
299 		return -ENOMEM;
300 	*usbdata = data;
301 
302 	status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
303 				 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
304 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
305 				 usbdata, 2, 500);
306 	kfree(usbdata);
307 
308 	if (status < 0) {
309 		netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
310 		return status;
311 	}
312 
313 	return 0;
314 }
315 
316 int write_nic_dword(struct net_device *dev, int indx, u32 data)
317 {
318 	int status;
319 
320 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
321 	struct usb_device *udev = priv->udev;
322 	u32 *usbdata = kzalloc(sizeof(data), GFP_KERNEL);
323 
324 	if (!usbdata)
325 		return -ENOMEM;
326 	*usbdata = data;
327 
328 	status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
329 				 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
330 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
331 				 usbdata, 4, 500);
332 	kfree(usbdata);
333 
334 	if (status < 0) {
335 		netdev_err(dev, "%s TimeOut! status: %d\n", __func__, status);
336 		return status;
337 	}
338 
339 	return 0;
340 }
341 
342 int read_nic_byte(struct net_device *dev, int indx, u8 *data)
343 {
344 	int status;
345 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
346 	struct usb_device *udev = priv->udev;
347 	u8 *usbdata = kzalloc(sizeof(u8), GFP_KERNEL);
348 
349 	if (!usbdata)
350 		return -ENOMEM;
351 
352 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
353 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
354 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
355 				 usbdata, 1, 500);
356 	*data = *usbdata;
357 	kfree(usbdata);
358 
359 	if (status < 0) {
360 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
361 		return status;
362 	}
363 
364 	return 0;
365 }
366 
367 int read_nic_word(struct net_device *dev, int indx, u16 *data)
368 {
369 	int status;
370 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
371 	struct usb_device *udev = priv->udev;
372 	u16 *usbdata = kzalloc(sizeof(u16), GFP_KERNEL);
373 
374 	if (!usbdata)
375 		return -ENOMEM;
376 
377 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
378 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
379 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
380 				 usbdata, 2, 500);
381 	*data = *usbdata;
382 	kfree(usbdata);
383 
384 	if (status < 0) {
385 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
386 		return status;
387 	}
388 
389 	return 0;
390 }
391 
392 static int read_nic_word_E(struct net_device *dev, int indx, u16 *data)
393 {
394 	int status;
395 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
396 	struct usb_device *udev = priv->udev;
397 	u16 *usbdata = kzalloc(sizeof(u16), GFP_KERNEL);
398 
399 	if (!usbdata)
400 		return -ENOMEM;
401 
402 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
403 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
404 				 indx | 0xfe00, 0, usbdata, 2, 500);
405 	*data = *usbdata;
406 	kfree(usbdata);
407 
408 	if (status < 0) {
409 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
410 		return status;
411 	}
412 
413 	return 0;
414 }
415 
416 int read_nic_dword(struct net_device *dev, int indx, u32 *data)
417 {
418 	int status;
419 
420 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
421 	struct usb_device *udev = priv->udev;
422 	u32 *usbdata = kzalloc(sizeof(u32), GFP_KERNEL);
423 
424 	if (!usbdata)
425 		return -ENOMEM;
426 
427 	status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
428 				 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
429 				 (indx & 0xff) | 0xff00, (indx >> 8) & 0x0f,
430 				 usbdata, 4, 500);
431 	*data = *usbdata;
432 	kfree(usbdata);
433 
434 	if (status < 0) {
435 		netdev_err(dev, "%s failure status: %d\n", __func__, status);
436 		return status;
437 	}
438 
439 	return 0;
440 }
441 
442 /* u8 read_phy_cck(struct net_device *dev, u8 adr); */
443 /* u8 read_phy_ofdm(struct net_device *dev, u8 adr); */
444 /* this might still called in what was the PHY rtl8185/rtl8192 common code
445  * plans are to possibility turn it again in one common code...
446  */
447 inline void force_pci_posting(struct net_device *dev)
448 {
449 }
450 
451 static struct net_device_stats *rtl8192_stats(struct net_device *dev);
452 static void rtl8192_restart(struct work_struct *work);
453 static void watch_dog_timer_callback(struct timer_list *t);
454 
455 /****************************************************************************
456  *   -----------------------------PROCFS STUFF-------------------------
457  ****************************************************************************/
458 
459 static struct proc_dir_entry *rtl8192_proc;
460 
461 static int __maybe_unused proc_get_stats_ap(struct seq_file *m, void *v)
462 {
463 	struct net_device *dev = m->private;
464 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
465 	struct ieee80211_device *ieee = priv->ieee80211;
466 	struct ieee80211_network *target;
467 
468 	list_for_each_entry(target, &ieee->network_list, list) {
469 		const char *wpa = "non_WPA";
470 
471 		if (target->wpa_ie_len > 0 || target->rsn_ie_len > 0)
472 			wpa = "WPA";
473 
474 		seq_printf(m, "%s %s\n", target->ssid, wpa);
475 	}
476 
477 	return 0;
478 }
479 
480 static int __maybe_unused proc_get_registers(struct seq_file *m, void *v)
481 {
482 	struct net_device *dev = m->private;
483 	int i, n, max = 0xff;
484 	u8 byte_rd;
485 
486 	seq_puts(m, "\n####################page 0##################\n ");
487 
488 	for (n = 0; n <= max;) {
489 		seq_printf(m, "\nD:  %2x > ", n);
490 
491 		for (i = 0; i < 16 && n <= max; i++, n++) {
492 			read_nic_byte(dev, 0x000 | n, &byte_rd);
493 			seq_printf(m, "%2x ", byte_rd);
494 		}
495 	}
496 
497 	seq_puts(m, "\n####################page 1##################\n ");
498 	for (n = 0; n <= max;) {
499 		seq_printf(m, "\nD:  %2x > ", n);
500 
501 		for (i = 0; i < 16 && n <= max; i++, n++) {
502 			read_nic_byte(dev, 0x100 | n, &byte_rd);
503 			seq_printf(m, "%2x ", byte_rd);
504 		}
505 	}
506 
507 	seq_puts(m, "\n####################page 3##################\n ");
508 	for (n = 0; n <= max;) {
509 		seq_printf(m, "\nD:  %2x > ", n);
510 
511 		for (i = 0; i < 16 && n <= max; i++, n++) {
512 			read_nic_byte(dev, 0x300 | n, &byte_rd);
513 			seq_printf(m, "%2x ", byte_rd);
514 		}
515 	}
516 
517 	seq_putc(m, '\n');
518 	return 0;
519 }
520 
521 static int __maybe_unused proc_get_stats_tx(struct seq_file *m, void *v)
522 {
523 	struct net_device *dev = m->private;
524 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
525 
526 	seq_printf(m,
527 		   "TX VI priority ok int: %lu\n"
528 		   "TX VI priority error int: %lu\n"
529 		   "TX VO priority ok int: %lu\n"
530 		   "TX VO priority error int: %lu\n"
531 		   "TX BE priority ok int: %lu\n"
532 		   "TX BE priority error int: %lu\n"
533 		   "TX BK priority ok int: %lu\n"
534 		   "TX BK priority error int: %lu\n"
535 		   "TX MANAGE priority ok int: %lu\n"
536 		   "TX MANAGE priority error int: %lu\n"
537 		   "TX BEACON priority ok int: %lu\n"
538 		   "TX BEACON priority error int: %lu\n"
539 		   "TX queue resume: %lu\n"
540 		   "TX queue stopped?: %d\n"
541 		   "TX fifo overflow: %lu\n"
542 		   "TX VI queue: %d\n"
543 		   "TX VO queue: %d\n"
544 		   "TX BE queue: %d\n"
545 		   "TX BK queue: %d\n"
546 		   "TX VI dropped: %lu\n"
547 		   "TX VO dropped: %lu\n"
548 		   "TX BE dropped: %lu\n"
549 		   "TX BK dropped: %lu\n"
550 		   "TX total data packets %lu\n",
551 		   priv->stats.txviokint,
552 		   priv->stats.txvierr,
553 		   priv->stats.txvookint,
554 		   priv->stats.txvoerr,
555 		   priv->stats.txbeokint,
556 		   priv->stats.txbeerr,
557 		   priv->stats.txbkokint,
558 		   priv->stats.txbkerr,
559 		   priv->stats.txmanageokint,
560 		   priv->stats.txmanageerr,
561 		   priv->stats.txbeaconokint,
562 		   priv->stats.txbeaconerr,
563 		   priv->stats.txresumed,
564 		   netif_queue_stopped(dev),
565 		   priv->stats.txoverflow,
566 		   atomic_read(&(priv->tx_pending[VI_PRIORITY])),
567 		   atomic_read(&(priv->tx_pending[VO_PRIORITY])),
568 		   atomic_read(&(priv->tx_pending[BE_PRIORITY])),
569 		   atomic_read(&(priv->tx_pending[BK_PRIORITY])),
570 		   priv->stats.txvidrop,
571 		   priv->stats.txvodrop,
572 		   priv->stats.txbedrop,
573 		   priv->stats.txbkdrop,
574 		   priv->stats.txdatapkt
575 		);
576 
577 	return 0;
578 }
579 
580 static int __maybe_unused proc_get_stats_rx(struct seq_file *m, void *v)
581 {
582 	struct net_device *dev = m->private;
583 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
584 
585 	seq_printf(m,
586 		   "RX packets: %lu\n"
587 		   "RX urb status error: %lu\n"
588 		   "RX invalid urb error: %lu\n",
589 		   priv->stats.rxoktotal,
590 		   priv->stats.rxstaterr,
591 		   priv->stats.rxurberr);
592 
593 	return 0;
594 }
595 
596 static void rtl8192_proc_module_init(void)
597 {
598 	RT_TRACE(COMP_INIT, "Initializing proc filesystem");
599 	rtl8192_proc = proc_mkdir(RTL819XU_MODULE_NAME, init_net.proc_net);
600 }
601 
602 static void rtl8192_proc_init_one(struct net_device *dev)
603 {
604 	struct proc_dir_entry *dir;
605 
606 	if (!rtl8192_proc)
607 		return;
608 
609 	dir = proc_mkdir_data(dev->name, 0, rtl8192_proc, dev);
610 	if (!dir)
611 		return;
612 
613 	proc_create_single("stats-rx", S_IFREG | 0444, dir,
614 			   proc_get_stats_rx);
615 	proc_create_single("stats-tx", S_IFREG | 0444, dir,
616 			   proc_get_stats_tx);
617 	proc_create_single("stats-ap", S_IFREG | 0444, dir,
618 			   proc_get_stats_ap);
619 	proc_create_single("registers", S_IFREG | 0444, dir,
620 			   proc_get_registers);
621 }
622 
623 static void rtl8192_proc_remove_one(struct net_device *dev)
624 {
625 	remove_proc_subtree(dev->name, rtl8192_proc);
626 }
627 
628 /****************************************************************************
629  *  -----------------------------MISC STUFF-------------------------
630  *****************************************************************************/
631 
632 short check_nic_enough_desc(struct net_device *dev, int queue_index)
633 {
634 	struct r8192_priv *priv = ieee80211_priv(dev);
635 	int used = atomic_read(&priv->tx_pending[queue_index]);
636 
637 	return (used < MAX_TX_URB);
638 }
639 
640 static void tx_timeout(struct net_device *dev, unsigned int txqueue)
641 {
642 	struct r8192_priv *priv = ieee80211_priv(dev);
643 
644 	schedule_work(&priv->reset_wq);
645 }
646 
647 void rtl8192_update_msr(struct net_device *dev)
648 {
649 	struct r8192_priv *priv = ieee80211_priv(dev);
650 	u8 msr;
651 
652 	read_nic_byte(dev, MSR, &msr);
653 	msr &= ~MSR_LINK_MASK;
654 
655 	/* do not change in link_state != WLAN_LINK_ASSOCIATED.
656 	 * msr must be updated if the state is ASSOCIATING.
657 	 * this is intentional and make sense for ad-hoc and
658 	 * master (see the create BSS/IBSS func)
659 	 */
660 	if (priv->ieee80211->state == IEEE80211_LINKED) {
661 		if (priv->ieee80211->iw_mode == IW_MODE_INFRA)
662 			msr |= (MSR_LINK_MANAGED << MSR_LINK_SHIFT);
663 		else if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
664 			msr |= (MSR_LINK_ADHOC << MSR_LINK_SHIFT);
665 		else if (priv->ieee80211->iw_mode == IW_MODE_MASTER)
666 			msr |= (MSR_LINK_MASTER << MSR_LINK_SHIFT);
667 
668 	} else {
669 		msr |= (MSR_LINK_NONE << MSR_LINK_SHIFT);
670 	}
671 
672 	write_nic_byte(dev, MSR, msr);
673 }
674 
675 void rtl8192_set_chan(struct net_device *dev, short ch)
676 {
677 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
678 
679 	RT_TRACE(COMP_CH, "=====>%s()====ch:%d\n", __func__, ch);
680 	priv->chan = ch;
681 
682 	/* this hack should avoid frame TX during channel setting*/
683 
684 	/* need to implement rf set channel here */
685 
686 	if (priv->rf_set_chan)
687 		priv->rf_set_chan(dev, priv->chan);
688 	mdelay(10);
689 }
690 
691 static void rtl8192_rx_isr(struct urb *urb);
692 
693 static u32 get_rxpacket_shiftbytes_819xusb(struct ieee80211_rx_stats *pstats)
694 {
695 	return (sizeof(struct rx_desc_819x_usb) + pstats->RxDrvInfoSize
696 		+ pstats->RxBufShift);
697 }
698 
699 void rtl8192_rx_enable(struct net_device *dev)
700 {
701 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
702 	struct urb *entry;
703 	struct sk_buff *skb;
704 	struct rtl8192_rx_info *info;
705 
706 	/* nomal packet rx procedure */
707 	while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB) {
708 		skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
709 		if (!skb)
710 			break;
711 		entry = usb_alloc_urb(0, GFP_KERNEL);
712 		if (!entry) {
713 			kfree_skb(skb);
714 			break;
715 		}
716 		usb_fill_bulk_urb(entry, priv->udev,
717 				  usb_rcvbulkpipe(priv->udev, 3),
718 				  skb_tail_pointer(skb),
719 				  RX_URB_SIZE, rtl8192_rx_isr, skb);
720 		info = (struct rtl8192_rx_info *)skb->cb;
721 		info->urb = entry;
722 		info->dev = dev;
723 		info->out_pipe = 3; /* denote rx normal packet queue */
724 		skb_queue_tail(&priv->rx_queue, skb);
725 		usb_submit_urb(entry, GFP_KERNEL);
726 	}
727 
728 	/* command packet rx procedure */
729 	while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB + 3) {
730 		skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
731 		if (!skb)
732 			break;
733 		entry = usb_alloc_urb(0, GFP_KERNEL);
734 		if (!entry) {
735 			kfree_skb(skb);
736 			break;
737 		}
738 		usb_fill_bulk_urb(entry, priv->udev,
739 				  usb_rcvbulkpipe(priv->udev, 9),
740 				  skb_tail_pointer(skb),
741 				  RX_URB_SIZE, rtl8192_rx_isr, skb);
742 		info = (struct rtl8192_rx_info *)skb->cb;
743 		info->urb = entry;
744 		info->dev = dev;
745 		info->out_pipe = 9; /* denote rx cmd packet queue */
746 		skb_queue_tail(&priv->rx_queue, skb);
747 		usb_submit_urb(entry, GFP_KERNEL);
748 	}
749 }
750 
751 void rtl8192_set_rxconf(struct net_device *dev)
752 {
753 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
754 	u32 rxconf;
755 
756 	read_nic_dword(dev, RCR, &rxconf);
757 	rxconf = rxconf & ~MAC_FILTER_MASK;
758 	rxconf = rxconf | RCR_AMF;
759 	rxconf = rxconf | RCR_ADF;
760 	rxconf = rxconf | RCR_AB;
761 	rxconf = rxconf | RCR_AM;
762 
763 	if (dev->flags & IFF_PROMISC)
764 		DMESG("NIC in promisc mode");
765 
766 	if (priv->ieee80211->iw_mode == IW_MODE_MONITOR ||
767 	    dev->flags & IFF_PROMISC) {
768 		rxconf = rxconf | RCR_AAP;
769 	} else {
770 		rxconf = rxconf | RCR_APM;
771 		rxconf = rxconf | RCR_CBSSID;
772 	}
773 
774 	if (priv->ieee80211->iw_mode == IW_MODE_MONITOR) {
775 		rxconf = rxconf | RCR_AICV;
776 		rxconf = rxconf | RCR_APWRMGT;
777 	}
778 
779 	if (priv->crcmon == 1 && priv->ieee80211->iw_mode == IW_MODE_MONITOR)
780 		rxconf = rxconf | RCR_ACRC32;
781 
782 	rxconf = rxconf & ~RX_FIFO_THRESHOLD_MASK;
783 	rxconf = rxconf | (RX_FIFO_THRESHOLD_NONE << RX_FIFO_THRESHOLD_SHIFT);
784 	rxconf = rxconf & ~MAX_RX_DMA_MASK;
785 	rxconf = rxconf | ((u32)7 << RCR_MXDMA_OFFSET);
786 
787 	rxconf = rxconf | RCR_ONLYERLPKT;
788 
789 	write_nic_dword(dev, RCR, rxconf);
790 }
791 
792 void rtl8192_rtx_disable(struct net_device *dev)
793 {
794 	u8 cmd;
795 	struct r8192_priv *priv = ieee80211_priv(dev);
796 	struct sk_buff *skb;
797 	struct rtl8192_rx_info *info;
798 
799 	read_nic_byte(dev, CMDR, &cmd);
800 	write_nic_byte(dev, CMDR, cmd & ~(CR_TE | CR_RE));
801 	force_pci_posting(dev);
802 	mdelay(10);
803 
804 	while ((skb = __skb_dequeue(&priv->rx_queue))) {
805 		info = (struct rtl8192_rx_info *)skb->cb;
806 		if (!info->urb)
807 			continue;
808 
809 		usb_kill_urb(info->urb);
810 		kfree_skb(skb);
811 	}
812 
813 	if (skb_queue_len(&priv->skb_queue))
814 		netdev_warn(dev, "skb_queue not empty\n");
815 
816 	skb_queue_purge(&priv->skb_queue);
817 }
818 
819 /* The prototype of rx_isr has changed since one version of Linux Kernel */
820 static void rtl8192_rx_isr(struct urb *urb)
821 {
822 	struct sk_buff *skb = (struct sk_buff *)urb->context;
823 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
824 	struct net_device *dev = info->dev;
825 	struct r8192_priv *priv = ieee80211_priv(dev);
826 	int out_pipe = info->out_pipe;
827 	int err;
828 
829 	if (!priv->up)
830 		return;
831 
832 	if (unlikely(urb->status)) {
833 		info->urb = NULL;
834 		priv->stats.rxstaterr++;
835 		priv->ieee80211->stats.rx_errors++;
836 		usb_free_urb(urb);
837 		return;
838 	}
839 	skb_unlink(skb, &priv->rx_queue);
840 	skb_put(skb, urb->actual_length);
841 
842 	skb_queue_tail(&priv->skb_queue, skb);
843 	tasklet_schedule(&priv->irq_rx_tasklet);
844 
845 	skb = dev_alloc_skb(RX_URB_SIZE);
846 	if (unlikely(!skb)) {
847 		usb_free_urb(urb);
848 		netdev_err(dev, "%s(): can't alloc skb\n", __func__);
849 		/* TODO check rx queue length and refill *somewhere* */
850 		return;
851 	}
852 
853 	usb_fill_bulk_urb(urb, priv->udev,
854 			  usb_rcvbulkpipe(priv->udev, out_pipe),
855 			  skb_tail_pointer(skb),
856 			  RX_URB_SIZE, rtl8192_rx_isr, skb);
857 
858 	info = (struct rtl8192_rx_info *)skb->cb;
859 	info->urb = urb;
860 	info->dev = dev;
861 	info->out_pipe = out_pipe;
862 
863 	urb->transfer_buffer = skb_tail_pointer(skb);
864 	urb->context = skb;
865 	skb_queue_tail(&priv->rx_queue, skb);
866 	err = usb_submit_urb(urb, GFP_ATOMIC);
867 	if (err && err != -EPERM)
868 		netdev_err(dev,
869 			   "can not submit rxurb, err is %x, URB status is %x\n",
870 			   err, urb->status);
871 }
872 
873 static u32 rtl819xusb_rx_command_packet(struct net_device *dev,
874 					struct ieee80211_rx_stats *pstats)
875 {
876 	u32	status;
877 
878 	status = cmpk_message_handle_rx(dev, pstats);
879 	if (status)
880 		DMESG("rxcommandpackethandle819xusb: It is a command packet\n");
881 
882 	return status;
883 }
884 
885 static void rtl8192_data_hard_stop(struct net_device *dev)
886 {
887 	/* FIXME !! */
888 }
889 
890 static void rtl8192_data_hard_resume(struct net_device *dev)
891 {
892 	/* FIXME !! */
893 }
894 
895 /* this function TX data frames when the ieee80211 stack requires this.
896  * It checks also if we need to stop the ieee tx queue, eventually do it
897  */
898 static void rtl8192_hard_data_xmit(struct sk_buff *skb, struct net_device *dev,
899 				   int rate)
900 {
901 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
902 	unsigned long flags;
903 	struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
904 	u8 queue_index = tcb_desc->queue_index;
905 
906 	/* shall not be referred by command packet */
907 	RTL8192U_ASSERT(queue_index != TXCMD_QUEUE);
908 
909 	spin_lock_irqsave(&priv->tx_lock, flags);
910 
911 	*(struct net_device **)(skb->cb) = dev;
912 	tcb_desc->bTxEnableFwCalcDur = 1;
913 	skb_push(skb, priv->ieee80211->tx_headroom);
914 	rtl8192_tx(dev, skb);
915 
916 	spin_unlock_irqrestore(&priv->tx_lock, flags);
917 }
918 
919 /* This is a rough attempt to TX a frame
920  * This is called by the ieee 80211 stack to TX management frames.
921  * If the ring is full packet are dropped (for data frame the queue
922  * is stopped before this can happen).
923  */
924 static int rtl8192_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
925 {
926 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
927 	int ret;
928 	unsigned long flags;
929 	struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
930 	u8 queue_index = tcb_desc->queue_index;
931 
932 	spin_lock_irqsave(&priv->tx_lock, flags);
933 
934 	memcpy((unsigned char *)(skb->cb), &dev, sizeof(dev));
935 	if (queue_index == TXCMD_QUEUE) {
936 		skb_push(skb, USB_HWDESC_HEADER_LEN);
937 		rtl819xU_tx_cmd(dev, skb);
938 		ret = 1;
939 	} else {
940 		skb_push(skb, priv->ieee80211->tx_headroom);
941 		ret = rtl8192_tx(dev, skb);
942 	}
943 
944 	spin_unlock_irqrestore(&priv->tx_lock, flags);
945 
946 	return ret;
947 }
948 
949 static void rtl8192_tx_isr(struct urb *tx_urb)
950 {
951 	struct sk_buff *skb = (struct sk_buff *)tx_urb->context;
952 	struct net_device *dev;
953 	struct r8192_priv *priv = NULL;
954 	struct cb_desc *tcb_desc;
955 	u8  queue_index;
956 
957 	if (!skb)
958 		return;
959 
960 	dev = *(struct net_device **)(skb->cb);
961 	tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
962 	queue_index = tcb_desc->queue_index;
963 
964 	priv = ieee80211_priv(dev);
965 
966 	if (tcb_desc->queue_index != TXCMD_QUEUE) {
967 		if (tx_urb->status == 0) {
968 			netif_trans_update(dev);
969 			priv->stats.txoktotal++;
970 			priv->ieee80211->LinkDetectInfo.NumTxOkInPeriod++;
971 			priv->stats.txbytesunicast +=
972 				(skb->len - priv->ieee80211->tx_headroom);
973 		} else {
974 			priv->ieee80211->stats.tx_errors++;
975 			/* TODO */
976 		}
977 	}
978 
979 	/* free skb and tx_urb */
980 	dev_kfree_skb_any(skb);
981 	usb_free_urb(tx_urb);
982 	atomic_dec(&priv->tx_pending[queue_index]);
983 
984 	/*
985 	 * Handle HW Beacon:
986 	 * We had transfer our beacon frame to host controller at this moment.
987 	 *
988 	 *
989 	 * Caution:
990 	 * Handling the wait queue of command packets.
991 	 * For Tx command packets, we must not do TCB fragment because it is
992 	 * not handled right now. We must cut the packets to match the size of
993 	 * TX_CMD_PKT before we send it.
994 	 */
995 
996 	/* Handle MPDU in wait queue. */
997 	if (queue_index != BEACON_QUEUE) {
998 		/* Don't send data frame during scanning.*/
999 		if ((skb_queue_len(&priv->ieee80211->skb_waitQ[queue_index]) != 0) &&
1000 		    (!(priv->ieee80211->queue_stop))) {
1001 			skb = skb_dequeue(&(priv->ieee80211->skb_waitQ[queue_index]));
1002 			if (skb)
1003 				priv->ieee80211->softmac_hard_start_xmit(skb,
1004 									 dev);
1005 
1006 			return; /* avoid further processing AMSDU */
1007 		}
1008 	}
1009 }
1010 
1011 static void rtl8192_config_rate(struct net_device *dev, u16 *rate_config)
1012 {
1013 	struct r8192_priv *priv = ieee80211_priv(dev);
1014 	struct ieee80211_network *net;
1015 	u8 i = 0, basic_rate = 0;
1016 
1017 	net = &priv->ieee80211->current_network;
1018 
1019 	for (i = 0; i < net->rates_len; i++) {
1020 		basic_rate = net->rates[i] & 0x7f;
1021 		switch (basic_rate) {
1022 		case MGN_1M:
1023 			*rate_config |= RRSR_1M;
1024 			break;
1025 		case MGN_2M:
1026 			*rate_config |= RRSR_2M;
1027 			break;
1028 		case MGN_5_5M:
1029 			*rate_config |= RRSR_5_5M;
1030 			break;
1031 		case MGN_11M:
1032 			*rate_config |= RRSR_11M;
1033 			break;
1034 		case MGN_6M:
1035 			*rate_config |= RRSR_6M;
1036 			break;
1037 		case MGN_9M:
1038 			*rate_config |= RRSR_9M;
1039 			break;
1040 		case MGN_12M:
1041 			*rate_config |= RRSR_12M;
1042 			break;
1043 		case MGN_18M:
1044 			*rate_config |= RRSR_18M;
1045 			break;
1046 		case MGN_24M:
1047 			*rate_config |= RRSR_24M;
1048 			break;
1049 		case MGN_36M:
1050 			*rate_config |= RRSR_36M;
1051 			break;
1052 		case MGN_48M:
1053 			*rate_config |= RRSR_48M;
1054 			break;
1055 		case MGN_54M:
1056 			*rate_config |= RRSR_54M;
1057 			break;
1058 		}
1059 	}
1060 	for (i = 0; i < net->rates_ex_len; i++) {
1061 		basic_rate = net->rates_ex[i] & 0x7f;
1062 		switch (basic_rate) {
1063 		case MGN_1M:
1064 			*rate_config |= RRSR_1M;
1065 			break;
1066 		case MGN_2M:
1067 			*rate_config |= RRSR_2M;
1068 			break;
1069 		case MGN_5_5M:
1070 			*rate_config |= RRSR_5_5M;
1071 			break;
1072 		case MGN_11M:
1073 			*rate_config |= RRSR_11M;
1074 			break;
1075 		case MGN_6M:
1076 			*rate_config |= RRSR_6M;
1077 			break;
1078 		case MGN_9M:
1079 			*rate_config |= RRSR_9M;
1080 			break;
1081 		case MGN_12M:
1082 			*rate_config |= RRSR_12M;
1083 			break;
1084 		case MGN_18M:
1085 			*rate_config |= RRSR_18M;
1086 			break;
1087 		case MGN_24M:
1088 			*rate_config |= RRSR_24M;
1089 			break;
1090 		case MGN_36M:
1091 			*rate_config |= RRSR_36M;
1092 			break;
1093 		case MGN_48M:
1094 			*rate_config |= RRSR_48M;
1095 			break;
1096 		case MGN_54M:
1097 			*rate_config |= RRSR_54M;
1098 			break;
1099 		}
1100 	}
1101 }
1102 
1103 #define SHORT_SLOT_TIME 9
1104 #define NON_SHORT_SLOT_TIME 20
1105 
1106 static void rtl8192_update_cap(struct net_device *dev, u16 cap)
1107 {
1108 	u32 tmp = 0;
1109 	struct r8192_priv *priv = ieee80211_priv(dev);
1110 	struct ieee80211_network *net = &priv->ieee80211->current_network;
1111 
1112 	priv->short_preamble = cap & WLAN_CAPABILITY_SHORT_PREAMBLE;
1113 	tmp = priv->basic_rate;
1114 	if (priv->short_preamble)
1115 		tmp |= BRSR_AckShortPmb;
1116 	write_nic_dword(dev, RRSR, tmp);
1117 
1118 	if (net->mode & (IEEE_G | IEEE_N_24G)) {
1119 		u8 slot_time = 0;
1120 
1121 		if ((cap & WLAN_CAPABILITY_SHORT_SLOT) &&
1122 		    (!priv->ieee80211->pHTInfo->bCurrentRT2RTLongSlotTime))
1123 			/* short slot time */
1124 			slot_time = SHORT_SLOT_TIME;
1125 		else	/* long slot time */
1126 			slot_time = NON_SHORT_SLOT_TIME;
1127 		priv->slot_time = slot_time;
1128 		write_nic_byte(dev, SLOT_TIME, slot_time);
1129 	}
1130 }
1131 
1132 static void rtl8192_net_update(struct net_device *dev)
1133 {
1134 	struct r8192_priv *priv = ieee80211_priv(dev);
1135 	struct ieee80211_network *net;
1136 	u16 BcnTimeCfg = 0, BcnCW = 6, BcnIFS = 0xf;
1137 	u16 rate_config = 0;
1138 
1139 	net = &priv->ieee80211->current_network;
1140 
1141 	rtl8192_config_rate(dev, &rate_config);
1142 	priv->basic_rate = rate_config & 0x15f;
1143 
1144 	write_nic_dword(dev, BSSIDR, ((u32 *)net->bssid)[0]);
1145 	write_nic_word(dev, BSSIDR + 4, ((u16 *)net->bssid)[2]);
1146 
1147 	rtl8192_update_msr(dev);
1148 	if (priv->ieee80211->iw_mode == IW_MODE_ADHOC) {
1149 		write_nic_word(dev, ATIMWND, 2);
1150 		write_nic_word(dev, BCN_DMATIME, 1023);
1151 		write_nic_word(dev, BCN_INTERVAL, net->beacon_interval);
1152 		write_nic_word(dev, BCN_DRV_EARLY_INT, 1);
1153 		write_nic_byte(dev, BCN_ERR_THRESH, 100);
1154 		BcnTimeCfg |= (BcnCW << BCN_TCFG_CW_SHIFT);
1155 		/* TODO: BcnIFS may required to be changed on ASIC */
1156 		BcnTimeCfg |= BcnIFS << BCN_TCFG_IFS;
1157 
1158 		write_nic_word(dev, BCN_TCFG, BcnTimeCfg);
1159 	}
1160 }
1161 
1162 /* temporary hw beacon is not used any more.
1163  * open it when necessary
1164  */
1165 void rtl819xusb_beacon_tx(struct net_device *dev, u16  tx_rate)
1166 {
1167 }
1168 
1169 short rtl819xU_tx_cmd(struct net_device *dev, struct sk_buff *skb)
1170 {
1171 	struct r8192_priv *priv = ieee80211_priv(dev);
1172 	int			status;
1173 	struct urb		*tx_urb;
1174 	unsigned int		idx_pipe;
1175 	struct tx_desc_cmd_819x_usb *pdesc = (struct tx_desc_cmd_819x_usb *)skb->data;
1176 	struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1177 	u8 queue_index = tcb_desc->queue_index;
1178 
1179 	atomic_inc(&priv->tx_pending[queue_index]);
1180 	tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
1181 	if (!tx_urb) {
1182 		dev_kfree_skb(skb);
1183 		return -ENOMEM;
1184 	}
1185 
1186 	memset(pdesc, 0, USB_HWDESC_HEADER_LEN);
1187 	/* Tx descriptor ought to be set according to the skb->cb */
1188 	pdesc->FirstSeg = 1;
1189 	pdesc->LastSeg = 1;
1190 	pdesc->CmdInit = tcb_desc->bCmdOrInit;
1191 	pdesc->TxBufferSize = tcb_desc->txbuf_size;
1192 	pdesc->OWN = 1;
1193 	pdesc->LINIP = tcb_desc->bLastIniPkt;
1194 
1195 	/*---------------------------------------------------------------------
1196 	 * Fill up USB_OUT_CONTEXT.
1197 	 *---------------------------------------------------------------------
1198 	 */
1199 	idx_pipe = 0x04;
1200 	usb_fill_bulk_urb(tx_urb, priv->udev,
1201 			  usb_sndbulkpipe(priv->udev, idx_pipe),
1202 			  skb->data, skb->len, rtl8192_tx_isr, skb);
1203 
1204 	status = usb_submit_urb(tx_urb, GFP_ATOMIC);
1205 
1206 	if (!status)
1207 		return 0;
1208 
1209 	DMESGE("Error TX CMD URB, error %d", status);
1210 	dev_kfree_skb(skb);
1211 	usb_free_urb(tx_urb);
1212 	return -1;
1213 }
1214 
1215 /*
1216  * Mapping Software/Hardware descriptor queue id to "Queue Select Field"
1217  * in TxFwInfo data structure
1218  * 2006.10.30 by Emily
1219  *
1220  * \param QUEUEID       Software Queue
1221  */
1222 static u8 MapHwQueueToFirmwareQueue(u8 QueueID)
1223 {
1224 	u8 QueueSelect = 0x0;       /* default set to */
1225 
1226 	switch (QueueID) {
1227 	case BE_QUEUE:
1228 		QueueSelect = QSLT_BE;
1229 		break;
1230 
1231 	case BK_QUEUE:
1232 		QueueSelect = QSLT_BK;
1233 		break;
1234 
1235 	case VO_QUEUE:
1236 		QueueSelect = QSLT_VO;
1237 		break;
1238 
1239 	case VI_QUEUE:
1240 		QueueSelect = QSLT_VI;
1241 		break;
1242 	case MGNT_QUEUE:
1243 		QueueSelect = QSLT_MGNT;
1244 		break;
1245 
1246 	case BEACON_QUEUE:
1247 		QueueSelect = QSLT_BEACON;
1248 		break;
1249 
1250 		/* TODO: mark other queue selection until we verify it is OK */
1251 		/* TODO: Remove Assertions */
1252 	case TXCMD_QUEUE:
1253 		QueueSelect = QSLT_CMD;
1254 		break;
1255 	case HIGH_QUEUE:
1256 		QueueSelect = QSLT_HIGH;
1257 		break;
1258 
1259 	default:
1260 		RT_TRACE(COMP_ERR,
1261 			 "TransmitTCB(): Impossible Queue Selection: %d\n",
1262 			 QueueID);
1263 		break;
1264 	}
1265 	return QueueSelect;
1266 }
1267 
1268 static u8 MRateToHwRate8190Pci(u8 rate)
1269 {
1270 	u8  ret = DESC90_RATE1M;
1271 
1272 	switch (rate) {
1273 	case MGN_1M:
1274 		ret = DESC90_RATE1M;
1275 		break;
1276 	case MGN_2M:
1277 		ret = DESC90_RATE2M;
1278 		break;
1279 	case MGN_5_5M:
1280 		ret = DESC90_RATE5_5M;
1281 		break;
1282 	case MGN_11M:
1283 		ret = DESC90_RATE11M;
1284 		break;
1285 	case MGN_6M:
1286 		ret = DESC90_RATE6M;
1287 		break;
1288 	case MGN_9M:
1289 		ret = DESC90_RATE9M;
1290 		break;
1291 	case MGN_12M:
1292 		ret = DESC90_RATE12M;
1293 		break;
1294 	case MGN_18M:
1295 		ret = DESC90_RATE18M;
1296 		break;
1297 	case MGN_24M:
1298 		ret = DESC90_RATE24M;
1299 		break;
1300 	case MGN_36M:
1301 		ret = DESC90_RATE36M;
1302 		break;
1303 	case MGN_48M:
1304 		ret = DESC90_RATE48M;
1305 		break;
1306 	case MGN_54M:
1307 		ret = DESC90_RATE54M;
1308 		break;
1309 
1310 	/* HT rate since here */
1311 	case MGN_MCS0:
1312 		ret = DESC90_RATEMCS0;
1313 		break;
1314 	case MGN_MCS1:
1315 		ret = DESC90_RATEMCS1;
1316 		break;
1317 	case MGN_MCS2:
1318 		ret = DESC90_RATEMCS2;
1319 		break;
1320 	case MGN_MCS3:
1321 		ret = DESC90_RATEMCS3;
1322 		break;
1323 	case MGN_MCS4:
1324 		ret = DESC90_RATEMCS4;
1325 		break;
1326 	case MGN_MCS5:
1327 		ret = DESC90_RATEMCS5;
1328 		break;
1329 	case MGN_MCS6:
1330 		ret = DESC90_RATEMCS6;
1331 		break;
1332 	case MGN_MCS7:
1333 		ret = DESC90_RATEMCS7;
1334 		break;
1335 	case MGN_MCS8:
1336 		ret = DESC90_RATEMCS8;
1337 		break;
1338 	case MGN_MCS9:
1339 		ret = DESC90_RATEMCS9;
1340 		break;
1341 	case MGN_MCS10:
1342 		ret = DESC90_RATEMCS10;
1343 		break;
1344 	case MGN_MCS11:
1345 		ret = DESC90_RATEMCS11;
1346 		break;
1347 	case MGN_MCS12:
1348 		ret = DESC90_RATEMCS12;
1349 		break;
1350 	case MGN_MCS13:
1351 		ret = DESC90_RATEMCS13;
1352 		break;
1353 	case MGN_MCS14:
1354 		ret = DESC90_RATEMCS14;
1355 		break;
1356 	case MGN_MCS15:
1357 		ret = DESC90_RATEMCS15;
1358 		break;
1359 	case (0x80 | 0x20):
1360 		ret = DESC90_RATEMCS32;
1361 		break;
1362 
1363 	default:
1364 		break;
1365 	}
1366 	return ret;
1367 }
1368 
1369 static u8 QueryIsShort(u8 TxHT, u8 TxRate, struct cb_desc *tcb_desc)
1370 {
1371 	u8   tmp_Short;
1372 
1373 	tmp_Short = (TxHT == 1) ?
1374 			((tcb_desc->bUseShortGI) ? 1 : 0) :
1375 			((tcb_desc->bUseShortPreamble) ? 1 : 0);
1376 
1377 	if (TxHT == 1 && TxRate != DESC90_RATEMCS15)
1378 		tmp_Short = 0;
1379 
1380 	return tmp_Short;
1381 }
1382 
1383 static void tx_zero_isr(struct urb *tx_urb)
1384 {
1385 }
1386 
1387 /*
1388  * The tx procedure is just as following,
1389  * skb->cb will contain all the following information,
1390  * priority, morefrag, rate, &dev.
1391  */
1392 short rtl8192_tx(struct net_device *dev, struct sk_buff *skb)
1393 {
1394 	struct r8192_priv *priv = ieee80211_priv(dev);
1395 	struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
1396 	struct tx_desc_819x_usb *tx_desc = (struct tx_desc_819x_usb *)skb->data;
1397 	struct tx_fwinfo_819x_usb *tx_fwinfo =
1398 		(struct tx_fwinfo_819x_usb *)(skb->data + USB_HWDESC_HEADER_LEN);
1399 	struct usb_device *udev = priv->udev;
1400 	int pend;
1401 	int status, rt = -1;
1402 	struct urb *tx_urb = NULL, *tx_urb_zero = NULL;
1403 	unsigned int idx_pipe;
1404 
1405 	pend = atomic_read(&priv->tx_pending[tcb_desc->queue_index]);
1406 	/* we are locked here so the two atomic_read and inc are executed
1407 	 * without interleaves
1408 	 * !!! For debug purpose
1409 	 */
1410 	if (pend > MAX_TX_URB) {
1411 		netdev_dbg(dev, "To discard skb packet!\n");
1412 		dev_kfree_skb_any(skb);
1413 		return -1;
1414 	}
1415 
1416 	tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
1417 	if (!tx_urb) {
1418 		dev_kfree_skb_any(skb);
1419 		return -ENOMEM;
1420 	}
1421 
1422 	/* Fill Tx firmware info */
1423 	memset(tx_fwinfo, 0, sizeof(struct tx_fwinfo_819x_usb));
1424 	/* DWORD 0 */
1425 	tx_fwinfo->TxHT = (tcb_desc->data_rate & 0x80) ? 1 : 0;
1426 	tx_fwinfo->TxRate = MRateToHwRate8190Pci(tcb_desc->data_rate);
1427 	tx_fwinfo->EnableCPUDur = tcb_desc->bTxEnableFwCalcDur;
1428 	tx_fwinfo->Short = QueryIsShort(tx_fwinfo->TxHT, tx_fwinfo->TxRate,
1429 					tcb_desc);
1430 	if (tcb_desc->bAMPDUEnable) { /* AMPDU enabled */
1431 		tx_fwinfo->AllowAggregation = 1;
1432 		/* DWORD 1 */
1433 		tx_fwinfo->RxMF = tcb_desc->ampdu_factor;
1434 		tx_fwinfo->RxAMD = tcb_desc->ampdu_density & 0x07;
1435 	} else {
1436 		tx_fwinfo->AllowAggregation = 0;
1437 		/* DWORD 1 */
1438 		tx_fwinfo->RxMF = 0;
1439 		tx_fwinfo->RxAMD = 0;
1440 	}
1441 
1442 	/* Protection mode related */
1443 	tx_fwinfo->RtsEnable = (tcb_desc->bRTSEnable) ? 1 : 0;
1444 	tx_fwinfo->CtsEnable = (tcb_desc->bCTSEnable) ? 1 : 0;
1445 	tx_fwinfo->RtsSTBC = (tcb_desc->bRTSSTBC) ? 1 : 0;
1446 	tx_fwinfo->RtsHT = (tcb_desc->rts_rate & 0x80) ? 1 : 0;
1447 	tx_fwinfo->RtsRate =  MRateToHwRate8190Pci((u8)tcb_desc->rts_rate);
1448 	tx_fwinfo->RtsSubcarrier = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->RTSSC) : 0;
1449 	tx_fwinfo->RtsBandwidth = (tx_fwinfo->RtsHT == 1) ? ((tcb_desc->bRTSBW) ? 1 : 0) : 0;
1450 	tx_fwinfo->RtsShort = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->bRTSUseShortPreamble ? 1 : 0) :
1451 			      (tcb_desc->bRTSUseShortGI ? 1 : 0);
1452 
1453 	/* Set Bandwidth and sub-channel settings. */
1454 	if (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20_40) {
1455 		if (tcb_desc->bPacketBW) {
1456 			tx_fwinfo->TxBandwidth = 1;
1457 			/* use duplicated mode */
1458 			tx_fwinfo->TxSubCarrier = 0;
1459 		} else {
1460 			tx_fwinfo->TxBandwidth = 0;
1461 			tx_fwinfo->TxSubCarrier = priv->nCur40MhzPrimeSC;
1462 		}
1463 	} else {
1464 		tx_fwinfo->TxBandwidth = 0;
1465 		tx_fwinfo->TxSubCarrier = 0;
1466 	}
1467 
1468 	/* Fill Tx descriptor */
1469 	memset(tx_desc, 0, sizeof(struct tx_desc_819x_usb));
1470 	/* DWORD 0 */
1471 	tx_desc->LINIP = 0;
1472 	tx_desc->CmdInit = 1;
1473 	tx_desc->Offset =  sizeof(struct tx_fwinfo_819x_usb) + 8;
1474 	tx_desc->PktSize = (skb->len - TX_PACKET_SHIFT_BYTES) & 0xffff;
1475 
1476 	/*DWORD 1*/
1477 	tx_desc->SecCAMID = 0;
1478 	tx_desc->RATid = tcb_desc->RATRIndex;
1479 	tx_desc->NoEnc = 1;
1480 	tx_desc->SecType = 0x0;
1481 	if (tcb_desc->bHwSec) {
1482 		switch (priv->ieee80211->pairwise_key_type) {
1483 		case KEY_TYPE_WEP40:
1484 		case KEY_TYPE_WEP104:
1485 			tx_desc->SecType = 0x1;
1486 			tx_desc->NoEnc = 0;
1487 			break;
1488 		case KEY_TYPE_TKIP:
1489 			tx_desc->SecType = 0x2;
1490 			tx_desc->NoEnc = 0;
1491 			break;
1492 		case KEY_TYPE_CCMP:
1493 			tx_desc->SecType = 0x3;
1494 			tx_desc->NoEnc = 0;
1495 			break;
1496 		case KEY_TYPE_NA:
1497 			tx_desc->SecType = 0x0;
1498 			tx_desc->NoEnc = 1;
1499 			break;
1500 		}
1501 	}
1502 
1503 	tx_desc->QueueSelect = MapHwQueueToFirmwareQueue(tcb_desc->queue_index);
1504 	tx_desc->TxFWInfoSize =  sizeof(struct tx_fwinfo_819x_usb);
1505 
1506 	tx_desc->DISFB = tcb_desc->bTxDisableRateFallBack;
1507 	tx_desc->USERATE = tcb_desc->bTxUseDriverAssingedRate;
1508 
1509 	/* Fill fields that are required to be initialized in
1510 	 * all of the descriptors
1511 	 */
1512 	/* DWORD 0 */
1513 	tx_desc->FirstSeg = 1;
1514 	tx_desc->LastSeg = 1;
1515 	tx_desc->OWN = 1;
1516 
1517 	/* DWORD 2 */
1518 	tx_desc->TxBufferSize = (u32)(skb->len - USB_HWDESC_HEADER_LEN);
1519 	idx_pipe = 0x5;
1520 
1521 	/* To submit bulk urb */
1522 	usb_fill_bulk_urb(tx_urb, udev,
1523 			  usb_sndbulkpipe(udev, idx_pipe), skb->data,
1524 			  skb->len, rtl8192_tx_isr, skb);
1525 
1526 	status = usb_submit_urb(tx_urb, GFP_ATOMIC);
1527 	if (!status) {
1528 		/* We need to send 0 byte packet whenever
1529 		 * 512N bytes/64N(HIGN SPEED/NORMAL SPEED) bytes packet has
1530 		 * been transmitted. Otherwise, it will be halt to wait for
1531 		 * another packet.
1532 		 */
1533 		bool bSend0Byte = false;
1534 		u8 zero = 0;
1535 
1536 		if (udev->speed == USB_SPEED_HIGH) {
1537 			if (skb->len > 0 && skb->len % 512 == 0)
1538 				bSend0Byte = true;
1539 		} else {
1540 			if (skb->len > 0 && skb->len % 64 == 0)
1541 				bSend0Byte = true;
1542 		}
1543 		if (bSend0Byte) {
1544 			tx_urb_zero = usb_alloc_urb(0, GFP_ATOMIC);
1545 			if (!tx_urb_zero) {
1546 				rt = -ENOMEM;
1547 				goto error;
1548 			}
1549 			usb_fill_bulk_urb(tx_urb_zero, udev,
1550 					  usb_sndbulkpipe(udev, idx_pipe),
1551 					  &zero, 0, tx_zero_isr, dev);
1552 			status = usb_submit_urb(tx_urb_zero, GFP_ATOMIC);
1553 			if (status) {
1554 				RT_TRACE(COMP_ERR,
1555 					 "Error TX URB for zero byte %d, error %d",
1556 					 atomic_read(&priv->tx_pending[tcb_desc->queue_index]),
1557 					 status);
1558 				goto error;
1559 			}
1560 		}
1561 		netif_trans_update(dev);
1562 		atomic_inc(&priv->tx_pending[tcb_desc->queue_index]);
1563 		return 0;
1564 	}
1565 
1566 	RT_TRACE(COMP_ERR, "Error TX URB %d, error %d",
1567 		 atomic_read(&priv->tx_pending[tcb_desc->queue_index]),
1568 		 status);
1569 
1570 error:
1571 	dev_kfree_skb_any(skb);
1572 	usb_free_urb(tx_urb);
1573 	usb_free_urb(tx_urb_zero);
1574 	return rt;
1575 }
1576 
1577 static short rtl8192_usb_initendpoints(struct net_device *dev)
1578 {
1579 	struct r8192_priv *priv = ieee80211_priv(dev);
1580 
1581 	priv->rx_urb = kmalloc_array(MAX_RX_URB + 1, sizeof(struct urb *),
1582 				     GFP_KERNEL);
1583 	if (!priv->rx_urb)
1584 		return -ENOMEM;
1585 
1586 #ifndef JACKSON_NEW_RX
1587 	for (i = 0; i < (MAX_RX_URB + 1); i++) {
1588 		priv->rx_urb[i] = usb_alloc_urb(0, GFP_KERNEL);
1589 		if (!priv->rx_urb[i])
1590 			return -ENOMEM;
1591 
1592 		priv->rx_urb[i]->transfer_buffer =
1593 			kmalloc(RX_URB_SIZE, GFP_KERNEL);
1594 		if (!priv->rx_urb[i]->transfer_buffer)
1595 			return -ENOMEM;
1596 
1597 		priv->rx_urb[i]->transfer_buffer_length = RX_URB_SIZE;
1598 	}
1599 #endif
1600 
1601 #ifdef THOMAS_BEACON
1602 	{
1603 		long align = 0;
1604 		void *oldaddr, *newaddr;
1605 
1606 		priv->rx_urb[16] = usb_alloc_urb(0, GFP_KERNEL);
1607 		if (!priv->rx_urb[16])
1608 			return -ENOMEM;
1609 		priv->oldaddr = kmalloc(16, GFP_KERNEL);
1610 		if (!priv->oldaddr)
1611 			return -ENOMEM;
1612 		oldaddr = priv->oldaddr;
1613 		align = ((long)oldaddr) & 3;
1614 		if (align) {
1615 			newaddr = oldaddr + 4 - align;
1616 			priv->rx_urb[16]->transfer_buffer_length = 16 - 4 + align;
1617 		} else {
1618 			newaddr = oldaddr;
1619 			priv->rx_urb[16]->transfer_buffer_length = 16;
1620 		}
1621 		priv->rx_urb[16]->transfer_buffer = newaddr;
1622 	}
1623 #endif
1624 
1625 	memset(priv->rx_urb, 0, sizeof(struct urb *) * MAX_RX_URB);
1626 	priv->pp_rxskb = kcalloc(MAX_RX_URB, sizeof(struct sk_buff *),
1627 				 GFP_KERNEL);
1628 	if (!priv->pp_rxskb) {
1629 		kfree(priv->rx_urb);
1630 
1631 		priv->pp_rxskb = NULL;
1632 		priv->rx_urb = NULL;
1633 
1634 		DMESGE("Endpoint Alloc Failure");
1635 		return -ENOMEM;
1636 	}
1637 
1638 	netdev_dbg(dev, "End of initendpoints\n");
1639 	return 0;
1640 }
1641 
1642 #ifdef THOMAS_BEACON
1643 static void rtl8192_usb_deleteendpoints(struct net_device *dev)
1644 {
1645 	int i;
1646 	struct r8192_priv *priv = ieee80211_priv(dev);
1647 
1648 	if (priv->rx_urb) {
1649 		for (i = 0; i < (MAX_RX_URB + 1); i++) {
1650 			usb_kill_urb(priv->rx_urb[i]);
1651 			usb_free_urb(priv->rx_urb[i]);
1652 		}
1653 		kfree(priv->rx_urb);
1654 		priv->rx_urb = NULL;
1655 	}
1656 	kfree(priv->oldaddr);
1657 	priv->oldaddr = NULL;
1658 
1659 	kfree(priv->pp_rxskb);
1660 	priv->pp_rxskb = NULL;
1661 }
1662 #else
1663 void rtl8192_usb_deleteendpoints(struct net_device *dev)
1664 {
1665 	int i;
1666 	struct r8192_priv *priv = ieee80211_priv(dev);
1667 
1668 #ifndef JACKSON_NEW_RX
1669 
1670 	if (priv->rx_urb) {
1671 		for (i = 0; i < (MAX_RX_URB + 1); i++) {
1672 			usb_kill_urb(priv->rx_urb[i]);
1673 			kfree(priv->rx_urb[i]->transfer_buffer);
1674 			usb_free_urb(priv->rx_urb[i]);
1675 		}
1676 		kfree(priv->rx_urb);
1677 		priv->rx_urb = NULL;
1678 	}
1679 #else
1680 	kfree(priv->rx_urb);
1681 	priv->rx_urb = NULL;
1682 	kfree(priv->oldaddr);
1683 	priv->oldaddr = NULL;
1684 
1685 	kfree(priv->pp_rxskb);
1686 	priv->pp_rxskb = 0;
1687 
1688 #endif
1689 }
1690 #endif
1691 
1692 static void rtl8192_update_ratr_table(struct net_device *dev);
1693 static void rtl8192_link_change(struct net_device *dev)
1694 {
1695 	struct r8192_priv *priv = ieee80211_priv(dev);
1696 	struct ieee80211_device *ieee = priv->ieee80211;
1697 
1698 	if (ieee->state == IEEE80211_LINKED) {
1699 		rtl8192_net_update(dev);
1700 		rtl8192_update_ratr_table(dev);
1701 		/* Add this as in pure N mode, wep encryption will use software
1702 		 * way, but there is no chance to set this as wep will not set
1703 		 * group key in wext.
1704 		 */
1705 		if (ieee->pairwise_key_type == KEY_TYPE_WEP40 ||
1706 		    ieee->pairwise_key_type == KEY_TYPE_WEP104)
1707 			EnableHWSecurityConfig8192(dev);
1708 	}
1709 	/*update timing params*/
1710 	if (ieee->iw_mode == IW_MODE_INFRA || ieee->iw_mode == IW_MODE_ADHOC) {
1711 		u32 reg = 0;
1712 
1713 		read_nic_dword(dev, RCR, &reg);
1714 		if (priv->ieee80211->state == IEEE80211_LINKED)
1715 			priv->ReceiveConfig = reg |= RCR_CBSSID;
1716 		else
1717 			priv->ReceiveConfig = reg &= ~RCR_CBSSID;
1718 		write_nic_dword(dev, RCR, reg);
1719 	}
1720 }
1721 
1722 static const struct ieee80211_qos_parameters def_qos_parameters = {
1723 	{cpu_to_le16(3), cpu_to_le16(3), cpu_to_le16(3), cpu_to_le16(3)},
1724 	{cpu_to_le16(7), cpu_to_le16(7), cpu_to_le16(7), cpu_to_le16(7)},
1725 	{2, 2, 2, 2},/* aifs */
1726 	{0, 0, 0, 0},/* flags */
1727 	{0, 0, 0, 0} /* tx_op_limit */
1728 };
1729 
1730 static void rtl8192_update_beacon(struct work_struct *work)
1731 {
1732 	struct r8192_priv *priv = container_of(work, struct r8192_priv,
1733 					       update_beacon_wq.work);
1734 	struct net_device *dev = priv->ieee80211->dev;
1735 	struct ieee80211_device *ieee = priv->ieee80211;
1736 	struct ieee80211_network *net = &ieee->current_network;
1737 
1738 	if (ieee->pHTInfo->bCurrentHTSupport)
1739 		HTUpdateSelfAndPeerSetting(ieee, net);
1740 	ieee->pHTInfo->bCurrentRT2RTLongSlotTime =
1741 		net->bssht.bdRT2RTLongSlotTime;
1742 	rtl8192_update_cap(dev, net->capability);
1743 }
1744 
1745 /*
1746  * background support to run QoS activate functionality
1747  */
1748 static int WDCAPARA_ADD[] = {EDCAPARA_BE, EDCAPARA_BK,
1749 			     EDCAPARA_VI, EDCAPARA_VO};
1750 static void rtl8192_qos_activate(struct work_struct *work)
1751 {
1752 	struct r8192_priv *priv = container_of(work, struct r8192_priv,
1753 					       qos_activate);
1754 	struct net_device *dev = priv->ieee80211->dev;
1755 	struct ieee80211_qos_parameters *qos_parameters =
1756 		&priv->ieee80211->current_network.qos_data.parameters;
1757 	u8 mode = priv->ieee80211->current_network.mode;
1758 	u32  u1bAIFS;
1759 	u32 u4bAcParam;
1760 	u32 op_limit;
1761 	u32 cw_max;
1762 	u32 cw_min;
1763 	int i;
1764 
1765 	mutex_lock(&priv->mutex);
1766 	if (priv->ieee80211->state != IEEE80211_LINKED)
1767 		goto success;
1768 	RT_TRACE(COMP_QOS,
1769 		 "qos active process with associate response received\n");
1770 	/* It better set slot time at first
1771 	 *
1772 	 * For we just support b/g mode at present, let the slot time at
1773 	 * 9/20 selection
1774 	 *
1775 	 * update the ac parameter to related registers
1776 	 */
1777 	for (i = 0; i <  QOS_QUEUE_NUM; i++) {
1778 		/* Mode G/A: slotTimeTimer = 9; Mode B: 20 */
1779 		u1bAIFS = qos_parameters->aifs[i] * ((mode & (IEEE_G | IEEE_N_24G)) ? 9 : 20) + aSifsTime;
1780 		u1bAIFS <<= AC_PARAM_AIFS_OFFSET;
1781 		op_limit = (u32)le16_to_cpu(qos_parameters->tx_op_limit[i]);
1782 		op_limit <<= AC_PARAM_TXOP_LIMIT_OFFSET;
1783 		cw_max = (u32)le16_to_cpu(qos_parameters->cw_max[i]);
1784 		cw_max <<= AC_PARAM_ECW_MAX_OFFSET;
1785 		cw_min = (u32)le16_to_cpu(qos_parameters->cw_min[i]);
1786 		cw_min <<= AC_PARAM_ECW_MIN_OFFSET;
1787 		u4bAcParam = op_limit | cw_max | cw_min | u1bAIFS;
1788 		write_nic_dword(dev, WDCAPARA_ADD[i], u4bAcParam);
1789 	}
1790 
1791 success:
1792 	mutex_unlock(&priv->mutex);
1793 }
1794 
1795 static int rtl8192_qos_handle_probe_response(struct r8192_priv *priv,
1796 					     int active_network,
1797 					     struct ieee80211_network *network)
1798 {
1799 	int ret = 0;
1800 	u32 size = sizeof(struct ieee80211_qos_parameters);
1801 
1802 	if (priv->ieee80211->state != IEEE80211_LINKED)
1803 		return ret;
1804 
1805 	if (priv->ieee80211->iw_mode != IW_MODE_INFRA)
1806 		return ret;
1807 
1808 	if (network->flags & NETWORK_HAS_QOS_MASK) {
1809 		if (active_network &&
1810 		    (network->flags & NETWORK_HAS_QOS_PARAMETERS))
1811 			network->qos_data.active = network->qos_data.supported;
1812 
1813 		if ((network->qos_data.active == 1) && (active_network == 1) &&
1814 		    (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
1815 		    (network->qos_data.old_param_count !=
1816 		     network->qos_data.param_count)) {
1817 			network->qos_data.old_param_count =
1818 				network->qos_data.param_count;
1819 			schedule_work(&priv->qos_activate);
1820 			RT_TRACE(COMP_QOS,
1821 				 "QoS parameters change call qos_activate\n");
1822 		}
1823 	} else {
1824 		memcpy(&priv->ieee80211->current_network.qos_data.parameters,
1825 		       &def_qos_parameters, size);
1826 
1827 		if ((network->qos_data.active == 1) && (active_network == 1)) {
1828 			schedule_work(&priv->qos_activate);
1829 			RT_TRACE(COMP_QOS,
1830 				 "QoS was disabled call qos_activate\n");
1831 		}
1832 		network->qos_data.active = 0;
1833 		network->qos_data.supported = 0;
1834 	}
1835 
1836 	return 0;
1837 }
1838 
1839 /* handle and manage frame from beacon and probe response */
1840 static int rtl8192_handle_beacon(struct net_device *dev,
1841 				 struct ieee80211_beacon *beacon,
1842 				 struct ieee80211_network *network)
1843 {
1844 	struct r8192_priv *priv = ieee80211_priv(dev);
1845 
1846 	rtl8192_qos_handle_probe_response(priv, 1, network);
1847 	schedule_delayed_work(&priv->update_beacon_wq, 0);
1848 	return 0;
1849 }
1850 
1851 /*
1852  * handling the beaconing responses. if we get different QoS setting
1853  * off the network from the associated setting, adjust the QoS
1854  * setting
1855  */
1856 static int rtl8192_qos_association_resp(struct r8192_priv *priv,
1857 					struct ieee80211_network *network)
1858 {
1859 	unsigned long flags;
1860 	u32 size = sizeof(struct ieee80211_qos_parameters);
1861 	int set_qos_param = 0;
1862 
1863 	if (!priv || !network)
1864 		return 0;
1865 
1866 	if (priv->ieee80211->state != IEEE80211_LINKED)
1867 		return 0;
1868 
1869 	if (priv->ieee80211->iw_mode != IW_MODE_INFRA)
1870 		return 0;
1871 
1872 	spin_lock_irqsave(&priv->ieee80211->lock, flags);
1873 	if (network->flags & NETWORK_HAS_QOS_PARAMETERS) {
1874 		memcpy(&priv->ieee80211->current_network.qos_data.parameters,
1875 		       &network->qos_data.parameters,
1876 		       sizeof(struct ieee80211_qos_parameters));
1877 		priv->ieee80211->current_network.qos_data.active = 1;
1878 		set_qos_param = 1;
1879 		/* update qos parameter for current network */
1880 		priv->ieee80211->current_network.qos_data.old_param_count =
1881 			priv->ieee80211->current_network.qos_data.param_count;
1882 		priv->ieee80211->current_network.qos_data.param_count =
1883 			network->qos_data.param_count;
1884 	} else {
1885 		memcpy(&priv->ieee80211->current_network.qos_data.parameters,
1886 		       &def_qos_parameters, size);
1887 		priv->ieee80211->current_network.qos_data.active = 0;
1888 		priv->ieee80211->current_network.qos_data.supported = 0;
1889 		set_qos_param = 1;
1890 	}
1891 
1892 	spin_unlock_irqrestore(&priv->ieee80211->lock, flags);
1893 
1894 	RT_TRACE(COMP_QOS, "%s: network->flags = %d,%d\n", __func__,
1895 		 network->flags,
1896 		 priv->ieee80211->current_network.qos_data.active);
1897 	if (set_qos_param == 1)
1898 		schedule_work(&priv->qos_activate);
1899 
1900 	return 0;
1901 }
1902 
1903 static int rtl8192_handle_assoc_response(struct net_device *dev,
1904 					 struct ieee80211_assoc_response_frame *resp,
1905 					 struct ieee80211_network *network)
1906 {
1907 	struct r8192_priv *priv = ieee80211_priv(dev);
1908 
1909 	rtl8192_qos_association_resp(priv, network);
1910 	return 0;
1911 }
1912 
1913 static void rtl8192_update_ratr_table(struct net_device *dev)
1914 {
1915 	struct r8192_priv *priv = ieee80211_priv(dev);
1916 	struct ieee80211_device *ieee = priv->ieee80211;
1917 	u8 *pMcsRate = ieee->dot11HTOperationalRateSet;
1918 	u32 ratr_value = 0;
1919 	u8 rate_index = 0;
1920 
1921 	rtl8192_config_rate(dev, (u16 *)(&ratr_value));
1922 	ratr_value |= (*(u16 *)(pMcsRate)) << 12;
1923 	switch (ieee->mode) {
1924 	case IEEE_A:
1925 		ratr_value &= 0x00000FF0;
1926 		break;
1927 	case IEEE_B:
1928 		ratr_value &= 0x0000000F;
1929 		break;
1930 	case IEEE_G:
1931 		ratr_value &= 0x00000FF7;
1932 		break;
1933 	case IEEE_N_24G:
1934 	case IEEE_N_5G:
1935 		if (ieee->pHTInfo->PeerMimoPs == MIMO_PS_STATIC) {
1936 			ratr_value &= 0x0007F007;
1937 		} else {
1938 			if (priv->rf_type == RF_1T2R)
1939 				ratr_value &= 0x000FF007;
1940 			else
1941 				ratr_value &= 0x0F81F007;
1942 		}
1943 		break;
1944 	default:
1945 		break;
1946 	}
1947 	ratr_value &= 0x0FFFFFFF;
1948 	if (ieee->pHTInfo->bCurTxBW40MHz && ieee->pHTInfo->bCurShortGI40MHz)
1949 		ratr_value |= 0x80000000;
1950 	else if (!ieee->pHTInfo->bCurTxBW40MHz &&
1951 		 ieee->pHTInfo->bCurShortGI20MHz)
1952 		ratr_value |= 0x80000000;
1953 	write_nic_dword(dev, RATR0 + rate_index * 4, ratr_value);
1954 	write_nic_byte(dev, UFWP, 1);
1955 }
1956 
1957 static u8 ccmp_ie[4] = {0x00, 0x50, 0xf2, 0x04};
1958 static u8 ccmp_rsn_ie[4] = {0x00, 0x0f, 0xac, 0x04};
1959 static bool GetNmodeSupportBySecCfg8192(struct net_device *dev)
1960 {
1961 	struct r8192_priv *priv = ieee80211_priv(dev);
1962 	struct ieee80211_device *ieee = priv->ieee80211;
1963 	struct ieee80211_network *network = &ieee->current_network;
1964 	int wpa_ie_len = ieee->wpa_ie_len;
1965 	struct ieee80211_crypt_data *crypt;
1966 	int encrypt;
1967 
1968 	crypt = ieee->crypt[ieee->tx_keyidx];
1969 	/* we use connecting AP's capability instead of only security config
1970 	 * on our driver to distinguish whether it should use N mode or G mode
1971 	 */
1972 	encrypt = (network->capability & WLAN_CAPABILITY_PRIVACY) ||
1973 		  (ieee->host_encrypt && crypt && crypt->ops &&
1974 		   (strcmp(crypt->ops->name, "WEP") == 0));
1975 
1976 	/* simply judge  */
1977 	if (encrypt && (wpa_ie_len == 0)) {
1978 		/* wep encryption, no N mode setting */
1979 		return false;
1980 	} else if ((wpa_ie_len != 0)) {
1981 		/* parse pairwise key type */
1982 		if (((ieee->wpa_ie[0] == 0xdd) && (!memcmp(&(ieee->wpa_ie[14]), ccmp_ie, 4))) || ((ieee->wpa_ie[0] == 0x30) && (!memcmp(&ieee->wpa_ie[10], ccmp_rsn_ie, 4))))
1983 			return true;
1984 		else
1985 			return false;
1986 	} else {
1987 		return true;
1988 	}
1989 
1990 	return true;
1991 }
1992 
1993 static bool GetHalfNmodeSupportByAPs819xUsb(struct net_device *dev)
1994 {
1995 	struct r8192_priv *priv = ieee80211_priv(dev);
1996 
1997 	return priv->ieee80211->bHalfWirelessN24GMode;
1998 }
1999 
2000 static void rtl8192_refresh_supportrate(struct r8192_priv *priv)
2001 {
2002 	struct ieee80211_device *ieee = priv->ieee80211;
2003 	/* We do not consider set support rate for ABG mode, only
2004 	 * HT MCS rate is set here.
2005 	 */
2006 	if (ieee->mode == WIRELESS_MODE_N_24G ||
2007 	    ieee->mode == WIRELESS_MODE_N_5G)
2008 		memcpy(ieee->Regdot11HTOperationalRateSet,
2009 		       ieee->RegHTSuppRateSet, 16);
2010 	else
2011 		memset(ieee->Regdot11HTOperationalRateSet, 0, 16);
2012 }
2013 
2014 static u8 rtl8192_getSupportedWireleeMode(struct net_device *dev)
2015 {
2016 	struct r8192_priv *priv = ieee80211_priv(dev);
2017 	u8 ret = 0;
2018 
2019 	switch (priv->rf_chip) {
2020 	case RF_8225:
2021 	case RF_8256:
2022 	case RF_PSEUDO_11N:
2023 		ret = WIRELESS_MODE_N_24G | WIRELESS_MODE_G | WIRELESS_MODE_B;
2024 		break;
2025 	case RF_8258:
2026 		ret = WIRELESS_MODE_A | WIRELESS_MODE_N_5G;
2027 		break;
2028 	default:
2029 		ret = WIRELESS_MODE_B;
2030 		break;
2031 	}
2032 	return ret;
2033 }
2034 
2035 static void rtl8192_SetWirelessMode(struct net_device *dev, u8 wireless_mode)
2036 {
2037 	struct r8192_priv *priv = ieee80211_priv(dev);
2038 	u8 bSupportMode = rtl8192_getSupportedWireleeMode(dev);
2039 
2040 	if (wireless_mode == WIRELESS_MODE_AUTO ||
2041 	    (wireless_mode & bSupportMode) == 0) {
2042 		if (bSupportMode & WIRELESS_MODE_N_24G) {
2043 			wireless_mode = WIRELESS_MODE_N_24G;
2044 		} else if (bSupportMode & WIRELESS_MODE_N_5G) {
2045 			wireless_mode = WIRELESS_MODE_N_5G;
2046 		} else if ((bSupportMode & WIRELESS_MODE_A)) {
2047 			wireless_mode = WIRELESS_MODE_A;
2048 		} else if ((bSupportMode & WIRELESS_MODE_G)) {
2049 			wireless_mode = WIRELESS_MODE_G;
2050 		} else if ((bSupportMode & WIRELESS_MODE_B)) {
2051 			wireless_mode = WIRELESS_MODE_B;
2052 		} else {
2053 			RT_TRACE(COMP_ERR,
2054 				 "%s(), No valid wireless mode supported, SupportedWirelessMode(%x)!!!\n",
2055 				 __func__, bSupportMode);
2056 			wireless_mode = WIRELESS_MODE_B;
2057 		}
2058 	}
2059 	priv->ieee80211->mode = wireless_mode;
2060 
2061 	if (wireless_mode == WIRELESS_MODE_N_24G ||
2062 	    wireless_mode == WIRELESS_MODE_N_5G)
2063 		priv->ieee80211->pHTInfo->bEnableHT = 1;
2064 	else
2065 		priv->ieee80211->pHTInfo->bEnableHT = 0;
2066 	RT_TRACE(COMP_INIT, "Current Wireless Mode is %x\n", wireless_mode);
2067 	rtl8192_refresh_supportrate(priv);
2068 }
2069 
2070 /* init priv variables here. only non_zero value should be initialized here. */
2071 static int rtl8192_init_priv_variable(struct net_device *dev)
2072 {
2073 	struct r8192_priv *priv = ieee80211_priv(dev);
2074 	u8 i;
2075 
2076 	priv->card_8192 = NIC_8192U;
2077 	priv->chan = 1; /* set to channel 1 */
2078 	priv->ieee80211->mode = WIRELESS_MODE_AUTO; /* SET AUTO */
2079 	priv->ieee80211->iw_mode = IW_MODE_INFRA;
2080 	priv->ieee80211->ieee_up = 0;
2081 	priv->retry_rts = DEFAULT_RETRY_RTS;
2082 	priv->retry_data = DEFAULT_RETRY_DATA;
2083 	priv->ieee80211->rts = DEFAULT_RTS_THRESHOLD;
2084 	priv->ieee80211->rate = 110; /* 11 mbps */
2085 	priv->ieee80211->short_slot = 1;
2086 	priv->promisc = (dev->flags & IFF_PROMISC) ? 1 : 0;
2087 	priv->CckPwEnl = 6;
2088 	/* for silent reset */
2089 	priv->IrpPendingCount = 1;
2090 	priv->ResetProgress = RESET_TYPE_NORESET;
2091 	priv->bForcedSilentReset = false;
2092 	priv->bDisableNormalResetCheck = false;
2093 	priv->force_reset = false;
2094 
2095 	/* we don't use FW read/write RF until stable firmware is available. */
2096 	priv->ieee80211->FwRWRF = 0;
2097 	priv->ieee80211->current_network.beacon_interval =
2098 		DEFAULT_BEACONINTERVAL;
2099 	priv->ieee80211->softmac_features  = IEEE_SOFTMAC_SCAN |
2100 		IEEE_SOFTMAC_ASSOCIATE | IEEE_SOFTMAC_PROBERQ |
2101 		IEEE_SOFTMAC_PROBERS | IEEE_SOFTMAC_TX_QUEUE |
2102 		IEEE_SOFTMAC_BEACONS;
2103 
2104 	priv->ieee80211->active_scan = 1;
2105 	priv->ieee80211->modulation =
2106 		IEEE80211_CCK_MODULATION | IEEE80211_OFDM_MODULATION;
2107 	priv->ieee80211->host_encrypt = 1;
2108 	priv->ieee80211->host_decrypt = 1;
2109 	priv->ieee80211->start_send_beacons = NULL;
2110 	priv->ieee80211->stop_send_beacons = NULL;
2111 	priv->ieee80211->softmac_hard_start_xmit = rtl8192_hard_start_xmit;
2112 	priv->ieee80211->set_chan = rtl8192_set_chan;
2113 	priv->ieee80211->link_change = rtl8192_link_change;
2114 	priv->ieee80211->softmac_data_hard_start_xmit = rtl8192_hard_data_xmit;
2115 	priv->ieee80211->data_hard_stop = rtl8192_data_hard_stop;
2116 	priv->ieee80211->data_hard_resume = rtl8192_data_hard_resume;
2117 	priv->ieee80211->init_wmmparam_flag = 0;
2118 	priv->ieee80211->fts = DEFAULT_FRAG_THRESHOLD;
2119 	priv->ieee80211->check_nic_enough_desc = check_nic_enough_desc;
2120 	priv->ieee80211->tx_headroom = TX_PACKET_SHIFT_BYTES;
2121 	priv->ieee80211->qos_support = 1;
2122 
2123 	priv->ieee80211->SetBWModeHandler = rtl8192_SetBWMode;
2124 	priv->ieee80211->handle_assoc_response = rtl8192_handle_assoc_response;
2125 	priv->ieee80211->handle_beacon = rtl8192_handle_beacon;
2126 
2127 	priv->ieee80211->GetNmodeSupportBySecCfg = GetNmodeSupportBySecCfg8192;
2128 	priv->ieee80211->GetHalfNmodeSupportByAPsHandler =
2129 		GetHalfNmodeSupportByAPs819xUsb;
2130 	priv->ieee80211->SetWirelessMode = rtl8192_SetWirelessMode;
2131 
2132 	priv->ieee80211->InitialGainHandler = InitialGain819xUsb;
2133 	priv->card_type = USB;
2134 	priv->ShortRetryLimit = 0x30;
2135 	priv->LongRetryLimit = 0x30;
2136 	priv->EarlyRxThreshold = 7;
2137 	priv->enable_gpio0 = 0;
2138 	priv->TransmitConfig =
2139 		/* Max DMA Burst Size per Tx DMA Burst, 7: reserved. */
2140 		(TCR_MXDMA_2048 << TCR_MXDMA_OFFSET)	  |
2141 		/* Short retry limit */
2142 		(priv->ShortRetryLimit << TCR_SRL_OFFSET) |
2143 		/* Long retry limit */
2144 		(priv->LongRetryLimit << TCR_LRL_OFFSET)  |
2145 		/* FALSE: HW provides PLCP length and LENGEXT
2146 		 * TRUE: SW provides them
2147 		 */
2148 		(false ? TCR_SAT : 0);
2149 	priv->ReceiveConfig	=
2150 		/* accept management/data */
2151 		RCR_AMF | RCR_ADF |
2152 		/* accept control frame for SW AP needs PS-poll */
2153 		RCR_ACF |
2154 		/* accept BC/MC/UC */
2155 		RCR_AB | RCR_AM | RCR_APM |
2156 		/* Max DMA Burst Size per Rx DMA Burst, 7: unlimited. */
2157 		((u32)7 << RCR_MXDMA_OFFSET) |
2158 		/* Rx FIFO Threshold, 7: No Rx threshold. */
2159 		(priv->EarlyRxThreshold << RX_FIFO_THRESHOLD_SHIFT) |
2160 		(priv->EarlyRxThreshold == 7 ? RCR_ONLYERLPKT : 0);
2161 
2162 	priv->AcmControl = 0;
2163 	priv->pFirmware = kzalloc(sizeof(rt_firmware), GFP_KERNEL);
2164 	if (!priv->pFirmware)
2165 		return -ENOMEM;
2166 
2167 	/* rx related queue */
2168 	skb_queue_head_init(&priv->rx_queue);
2169 	skb_queue_head_init(&priv->skb_queue);
2170 
2171 	/* Tx related queue */
2172 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
2173 		skb_queue_head_init(&priv->ieee80211->skb_waitQ[i]);
2174 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
2175 		skb_queue_head_init(&priv->ieee80211->skb_aggQ[i]);
2176 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
2177 		skb_queue_head_init(&priv->ieee80211->skb_drv_aggQ[i]);
2178 	priv->rf_set_chan = rtl8192_phy_SwChnl;
2179 
2180 	return 0;
2181 }
2182 
2183 /* init lock here */
2184 static void rtl8192_init_priv_lock(struct r8192_priv *priv)
2185 {
2186 	spin_lock_init(&priv->tx_lock);
2187 	spin_lock_init(&priv->irq_lock);
2188 	mutex_init(&priv->wx_mutex);
2189 	mutex_init(&priv->mutex);
2190 }
2191 
2192 static void rtl819x_watchdog_wqcallback(struct work_struct *work);
2193 
2194 static void rtl8192_irq_rx_tasklet(struct tasklet_struct *t);
2195 /* init tasklet and wait_queue here. only 2.6 above kernel is considered */
2196 #define DRV_NAME "wlan0"
2197 static void rtl8192_init_priv_task(struct net_device *dev)
2198 {
2199 	struct r8192_priv *priv = ieee80211_priv(dev);
2200 
2201 	INIT_WORK(&priv->reset_wq, rtl8192_restart);
2202 
2203 	INIT_DELAYED_WORK(&priv->watch_dog_wq,
2204 			  rtl819x_watchdog_wqcallback);
2205 	INIT_DELAYED_WORK(&priv->txpower_tracking_wq,
2206 			  dm_txpower_trackingcallback);
2207 	INIT_DELAYED_WORK(&priv->rfpath_check_wq,
2208 			  dm_rf_pathcheck_workitemcallback);
2209 	INIT_DELAYED_WORK(&priv->update_beacon_wq,
2210 			  rtl8192_update_beacon);
2211 	INIT_DELAYED_WORK(&priv->initialgain_operate_wq,
2212 			  InitialGainOperateWorkItemCallBack);
2213 	INIT_WORK(&priv->qos_activate, rtl8192_qos_activate);
2214 
2215 	tasklet_setup(&priv->irq_rx_tasklet, rtl8192_irq_rx_tasklet);
2216 }
2217 
2218 static void rtl8192_get_eeprom_size(struct net_device *dev)
2219 {
2220 	u16 curCR = 0;
2221 	struct r8192_priv *priv = ieee80211_priv(dev);
2222 
2223 	RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
2224 	read_nic_word_E(dev, EPROM_CMD, &curCR);
2225 	RT_TRACE(COMP_EPROM,
2226 		 "read from Reg EPROM_CMD(%x):%x\n", EPROM_CMD, curCR);
2227 	/* whether need I consider BIT(5?) */
2228 	priv->epromtype =
2229 		(curCR & Cmd9346CR_9356SEL) ? EPROM_93c56 : EPROM_93c46;
2230 	RT_TRACE(COMP_EPROM,
2231 		 "<===========%s(), epromtype:%d\n", __func__, priv->epromtype);
2232 }
2233 
2234 /* used to swap endian. as ntohl & htonl are not necessary
2235  * to swap endian, so use this instead.
2236  */
2237 static inline u16 endian_swap(u16 *data)
2238 {
2239 	u16 tmp = *data;
2240 	*data = (tmp >> 8) | (tmp << 8);
2241 	return *data;
2242 }
2243 
2244 static int rtl8192_read_eeprom_info(struct net_device *dev)
2245 {
2246 	u16 wEPROM_ID = 0;
2247 	u8 bMac_Tmp_Addr[6] = {0x00, 0xe0, 0x4c, 0x00, 0x00, 0x02};
2248 	u8 bLoad_From_EEPOM = false;
2249 	struct r8192_priv *priv = ieee80211_priv(dev);
2250 	u16 tmpValue = 0;
2251 	int i;
2252 	int ret;
2253 
2254 	RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
2255 	ret = eprom_read(dev, 0); /* first read EEPROM ID out; */
2256 	if (ret < 0)
2257 		return ret;
2258 	wEPROM_ID = (u16)ret;
2259 	RT_TRACE(COMP_EPROM, "EEPROM ID is 0x%x\n", wEPROM_ID);
2260 
2261 	if (wEPROM_ID != RTL8190_EEPROM_ID)
2262 		RT_TRACE(COMP_ERR,
2263 			 "EEPROM ID is invalid(is 0x%x(should be 0x%x)\n",
2264 			 wEPROM_ID, RTL8190_EEPROM_ID);
2265 	else
2266 		bLoad_From_EEPOM = true;
2267 
2268 	if (bLoad_From_EEPOM) {
2269 		tmpValue = eprom_read(dev, EEPROM_VID >> 1);
2270 		ret = eprom_read(dev, EEPROM_VID >> 1);
2271 		if (ret < 0)
2272 			return ret;
2273 		tmpValue = (u16)ret;
2274 		priv->eeprom_vid = endian_swap(&tmpValue);
2275 		ret = eprom_read(dev, EEPROM_PID >> 1);
2276 		if (ret < 0)
2277 			return ret;
2278 		priv->eeprom_pid = (u16)ret;
2279 		ret = eprom_read(dev, EEPROM_CHANNEL_PLAN >> 1);
2280 		if (ret < 0)
2281 			return ret;
2282 		tmpValue = (u16)ret;
2283 		priv->eeprom_ChannelPlan = (tmpValue & 0xff00) >> 8;
2284 		priv->btxpowerdata_readfromEEPORM = true;
2285 		ret = eprom_read(dev, (EEPROM_CUSTOMER_ID >> 1)) >> 8;
2286 		if (ret < 0)
2287 			return ret;
2288 		priv->eeprom_CustomerID = (u16)ret;
2289 	} else {
2290 		priv->eeprom_vid = 0;
2291 		priv->eeprom_pid = 0;
2292 		priv->card_8192_version = VERSION_819XU_B;
2293 		priv->eeprom_ChannelPlan = 0;
2294 		priv->eeprom_CustomerID = 0;
2295 	}
2296 	RT_TRACE(COMP_EPROM,
2297 		 "vid:0x%4x, pid:0x%4x, CustomID:0x%2x, ChanPlan:0x%x\n",
2298 		 priv->eeprom_vid, priv->eeprom_pid, priv->eeprom_CustomerID,
2299 		 priv->eeprom_ChannelPlan);
2300 	/* set channelplan from eeprom */
2301 	priv->ChannelPlan = priv->eeprom_ChannelPlan;
2302 	if (bLoad_From_EEPOM) {
2303 		u8 addr[ETH_ALEN];
2304 
2305 		for (i = 0; i < 6; i += 2) {
2306 			ret = eprom_read(dev, (u16)((EEPROM_NODE_ADDRESS_BYTE_0 + i) >> 1));
2307 			if (ret < 0)
2308 				return ret;
2309 			*(u16 *)(&addr[i]) = (u16)ret;
2310 		}
2311 		eth_hw_addr_set(dev, addr);
2312 	} else {
2313 		eth_hw_addr_set(dev, bMac_Tmp_Addr);
2314 		/* should I set IDR0 here? */
2315 	}
2316 	RT_TRACE(COMP_EPROM, "MAC addr:%pM\n", dev->dev_addr);
2317 	priv->rf_type = RTL819X_DEFAULT_RF_TYPE; /* default 1T2R */
2318 	priv->rf_chip = RF_8256;
2319 
2320 	if (priv->card_8192_version == VERSION_819XU_A) {
2321 		/* read Tx power gain offset of legacy OFDM to HT rate */
2322 		if (bLoad_From_EEPOM) {
2323 			ret = eprom_read(dev, (EEPROM_TX_POWER_DIFF >> 1));
2324 			if (ret < 0)
2325 				return ret;
2326 			priv->EEPROMTxPowerDiff = ((u16)ret & 0xff00) >> 8;
2327 		} else
2328 			priv->EEPROMTxPowerDiff = EEPROM_DEFAULT_TX_POWER;
2329 		RT_TRACE(COMP_EPROM, "TxPowerDiff:%d\n", priv->EEPROMTxPowerDiff);
2330 		/* read ThermalMeter from EEPROM */
2331 		if (bLoad_From_EEPOM) {
2332 			ret = eprom_read(dev, (EEPROM_THERMAL_METER >> 1));
2333 			if (ret < 0)
2334 				return ret;
2335 			priv->EEPROMThermalMeter = (u8)((u16)ret & 0x00ff);
2336 		} else
2337 			priv->EEPROMThermalMeter = EEPROM_DEFAULT_THERNAL_METER;
2338 		RT_TRACE(COMP_EPROM, "ThermalMeter:%d\n", priv->EEPROMThermalMeter);
2339 		/* for tx power track */
2340 		priv->TSSI_13dBm = priv->EEPROMThermalMeter * 100;
2341 		/* read antenna tx power offset of B/C/D to A from EEPROM */
2342 		if (bLoad_From_EEPOM) {
2343 			ret = eprom_read(dev, (EEPROM_PW_DIFF >> 1));
2344 			if (ret < 0)
2345 				return ret;
2346 			priv->EEPROMPwDiff = ((u16)ret & 0x0f00) >> 8;
2347 		} else
2348 			priv->EEPROMPwDiff = EEPROM_DEFAULT_PW_DIFF;
2349 		RT_TRACE(COMP_EPROM, "TxPwDiff:%d\n", priv->EEPROMPwDiff);
2350 		/* Read CrystalCap from EEPROM */
2351 		if (bLoad_From_EEPOM) {
2352 			ret = eprom_read(dev, (EEPROM_CRYSTAL_CAP >> 1));
2353 			if (ret < 0)
2354 				return ret;
2355 			priv->EEPROMCrystalCap = (u16)ret & 0x0f;
2356 		} else
2357 			priv->EEPROMCrystalCap = EEPROM_DEFAULT_CRYSTAL_CAP;
2358 		RT_TRACE(COMP_EPROM, "CrystalCap = %d\n", priv->EEPROMCrystalCap);
2359 		/* get per-channel Tx power level */
2360 		if (bLoad_From_EEPOM) {
2361 			ret = eprom_read(dev, (EEPROM_TX_PW_INDEX_VER >> 1));
2362 			if (ret < 0)
2363 				return ret;
2364 			priv->EEPROM_Def_Ver = ((u16)ret & 0xff00) >> 8;
2365 		} else
2366 			priv->EEPROM_Def_Ver = 1;
2367 		RT_TRACE(COMP_EPROM, "EEPROM_DEF_VER:%d\n", priv->EEPROM_Def_Ver);
2368 		if (priv->EEPROM_Def_Ver == 0) { /* old eeprom definition */
2369 			if (bLoad_From_EEPOM) {
2370 				ret = eprom_read(dev, (EEPROM_TX_PW_INDEX_CCK >> 1));
2371 				if (ret < 0)
2372 					return ret;
2373 				priv->EEPROMTxPowerLevelCCK = ((u16)ret & 0xff00) >> 8;
2374 			} else
2375 				priv->EEPROMTxPowerLevelCCK = 0x10;
2376 			RT_TRACE(COMP_EPROM, "CCK Tx Power Levl: 0x%02x\n", priv->EEPROMTxPowerLevelCCK);
2377 			for (i = 0; i < 3; i++) {
2378 				if (bLoad_From_EEPOM) {
2379 					ret = eprom_read(dev, (EEPROM_TX_PW_INDEX_OFDM_24G + i) >> 1);
2380 					if (ret < 0)
2381 						return ret;
2382 					if (((EEPROM_TX_PW_INDEX_OFDM_24G + i) % 2) == 0)
2383 						tmpValue = (u16)ret & 0x00ff;
2384 					else
2385 						tmpValue = ((u16)ret & 0xff00) >> 8;
2386 				} else {
2387 					tmpValue = 0x10;
2388 				}
2389 				priv->EEPROMTxPowerLevelOFDM24G[i] = (u8)tmpValue;
2390 				RT_TRACE(COMP_EPROM, "OFDM 2.4G Tx Power Level, Index %d = 0x%02x\n", i, priv->EEPROMTxPowerLevelCCK);
2391 			}
2392 		} else if (priv->EEPROM_Def_Ver == 1) {
2393 			if (bLoad_From_EEPOM) {
2394 				ret = eprom_read(dev, EEPROM_TX_PW_INDEX_CCK_V1 >> 1);
2395 				if (ret < 0)
2396 					return ret;
2397 				tmpValue = ((u16)ret & 0xff00) >> 8;
2398 			} else {
2399 				tmpValue = 0x10;
2400 			}
2401 			priv->EEPROMTxPowerLevelCCK_V1[0] = (u8)tmpValue;
2402 
2403 			if (bLoad_From_EEPOM) {
2404 				ret = eprom_read(dev, (EEPROM_TX_PW_INDEX_CCK_V1 + 2) >> 1);
2405 				if (ret < 0)
2406 					return ret;
2407 				tmpValue = (u16)ret;
2408 			} else
2409 				tmpValue = 0x1010;
2410 			*((u16 *)(&priv->EEPROMTxPowerLevelCCK_V1[1])) = tmpValue;
2411 			if (bLoad_From_EEPOM)
2412 				tmpValue = eprom_read(dev,
2413 					EEPROM_TX_PW_INDEX_OFDM_24G_V1 >> 1);
2414 			else
2415 				tmpValue = 0x1010;
2416 			*((u16 *)(&priv->EEPROMTxPowerLevelOFDM24G[0])) = tmpValue;
2417 			if (bLoad_From_EEPOM)
2418 				tmpValue = eprom_read(dev, (EEPROM_TX_PW_INDEX_OFDM_24G_V1 + 2) >> 1);
2419 			else
2420 				tmpValue = 0x10;
2421 			priv->EEPROMTxPowerLevelOFDM24G[2] = (u8)tmpValue;
2422 		} /* endif EEPROM_Def_Ver == 1 */
2423 
2424 		/* update HAL variables */
2425 		for (i = 0; i < 14; i++) {
2426 			if (i <= 3)
2427 				priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[0];
2428 			else if (i >= 4 && i <= 9)
2429 				priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[1];
2430 			else
2431 				priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[2];
2432 		}
2433 
2434 		for (i = 0; i < 14; i++) {
2435 			if (priv->EEPROM_Def_Ver == 0) {
2436 				if (i <= 3)
2437 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[0] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
2438 				else if (i >= 4 && i <= 9)
2439 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK;
2440 				else
2441 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[2] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
2442 			} else if (priv->EEPROM_Def_Ver == 1) {
2443 				if (i <= 3)
2444 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[0];
2445 				else if (i >= 4 && i <= 9)
2446 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[1];
2447 				else
2448 					priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[2];
2449 			}
2450 		}
2451 		priv->TxPowerDiff = priv->EEPROMPwDiff;
2452 		/* Antenna B gain offset to antenna A, bit0~3 */
2453 		priv->AntennaTxPwDiff[0] = (priv->EEPROMTxPowerDiff & 0xf);
2454 		/* Antenna C gain offset to antenna A, bit4~7 */
2455 		priv->AntennaTxPwDiff[1] =
2456 			(priv->EEPROMTxPowerDiff & 0xf0) >> 4;
2457 		/* CrystalCap, bit12~15 */
2458 		priv->CrystalCap = priv->EEPROMCrystalCap;
2459 		/* ThermalMeter, bit0~3 for RFIC1, bit4~7 for RFIC2
2460 		 * 92U does not enable TX power tracking.
2461 		 */
2462 		priv->ThermalMeter[0] = priv->EEPROMThermalMeter;
2463 	} /* end if VersionID == VERSION_819XU_A */
2464 
2465 	/* for dlink led */
2466 	switch (priv->eeprom_CustomerID) {
2467 	case EEPROM_CID_RUNTOP:
2468 		priv->CustomerID = RT_CID_819x_RUNTOP;
2469 		break;
2470 
2471 	case EEPROM_CID_DLINK:
2472 		priv->CustomerID = RT_CID_DLINK;
2473 		break;
2474 
2475 	default:
2476 		priv->CustomerID = RT_CID_DEFAULT;
2477 		break;
2478 	}
2479 
2480 	switch (priv->CustomerID) {
2481 	case RT_CID_819x_RUNTOP:
2482 		priv->LedStrategy = SW_LED_MODE2;
2483 		break;
2484 
2485 	case RT_CID_DLINK:
2486 		priv->LedStrategy = SW_LED_MODE4;
2487 		break;
2488 
2489 	default:
2490 		priv->LedStrategy = SW_LED_MODE0;
2491 		break;
2492 	}
2493 
2494 	if (priv->rf_type == RF_1T2R)
2495 		RT_TRACE(COMP_EPROM, "\n1T2R config\n");
2496 	else
2497 		RT_TRACE(COMP_EPROM, "\n2T4R config\n");
2498 
2499 	/* We can only know RF type in the function. So we have to init
2500 	 * DIG RATR table again.
2501 	 */
2502 	init_rate_adaptive(dev);
2503 
2504 	RT_TRACE(COMP_EPROM, "<===========%s()\n", __func__);
2505 
2506 	return 0;
2507 }
2508 
2509 static short rtl8192_get_channel_map(struct net_device *dev)
2510 {
2511 	struct r8192_priv *priv = ieee80211_priv(dev);
2512 
2513 	if (priv->ChannelPlan > COUNTRY_CODE_GLOBAL_DOMAIN) {
2514 		netdev_err(dev,
2515 			   "rtl8180_init: Error channel plan! Set to default.\n");
2516 		priv->ChannelPlan = 0;
2517 	}
2518 	RT_TRACE(COMP_INIT, "Channel plan is %d\n", priv->ChannelPlan);
2519 
2520 	rtl819x_set_channel_map(priv->ChannelPlan, priv);
2521 	return 0;
2522 }
2523 
2524 static short rtl8192_init(struct net_device *dev)
2525 {
2526 	struct r8192_priv *priv = ieee80211_priv(dev);
2527 	int err;
2528 
2529 	memset(&(priv->stats), 0, sizeof(struct Stats));
2530 	memset(priv->txqueue_to_outpipemap, 0, 9);
2531 #ifdef PIPE12
2532 	{
2533 		int i = 0;
2534 		static const u8 queuetopipe[] = {3, 2, 1, 0, 4, 8, 7, 6, 5};
2535 
2536 		memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
2537 	}
2538 #else
2539 	{
2540 		const u8 queuetopipe[] = {3, 2, 1, 0, 4, 4, 0, 4, 4};
2541 
2542 		memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
2543 	}
2544 #endif
2545 	err = rtl8192_init_priv_variable(dev);
2546 	if (err)
2547 		return err;
2548 
2549 	rtl8192_init_priv_lock(priv);
2550 	rtl8192_init_priv_task(dev);
2551 	rtl8192_get_eeprom_size(dev);
2552 	err = rtl8192_read_eeprom_info(dev);
2553 	if (err) {
2554 		DMESG("Reading EEPROM info failed");
2555 		return err;
2556 	}
2557 	rtl8192_get_channel_map(dev);
2558 	init_hal_dm(dev);
2559 	timer_setup(&priv->watch_dog_timer, watch_dog_timer_callback, 0);
2560 	if (rtl8192_usb_initendpoints(dev) != 0) {
2561 		DMESG("Endopoints initialization failed");
2562 		return -ENOMEM;
2563 	}
2564 
2565 	return 0;
2566 }
2567 
2568 /******************************************************************************
2569  *function:  This function actually only set RRSR, RATR and BW_OPMODE registers
2570  *	     not to do all the hw config as its name says
2571  *   input:  net_device dev
2572  *  output:  none
2573  *  return:  none
2574  *  notice:  This part need to modified according to the rate set we filtered
2575  * ****************************************************************************/
2576 static void rtl8192_hwconfig(struct net_device *dev)
2577 {
2578 	u32 regRATR = 0, regRRSR = 0;
2579 	u8 regBwOpMode = 0, regTmp = 0;
2580 	struct r8192_priv *priv = ieee80211_priv(dev);
2581 	u32 ratr_value = 0;
2582 
2583 	/* Set RRSR, RATR, and BW_OPMODE registers */
2584 	switch (priv->ieee80211->mode) {
2585 	case WIRELESS_MODE_B:
2586 		regBwOpMode = BW_OPMODE_20MHZ;
2587 		regRATR = RATE_ALL_CCK;
2588 		regRRSR = RATE_ALL_CCK;
2589 		break;
2590 	case WIRELESS_MODE_A:
2591 		regBwOpMode = BW_OPMODE_5G | BW_OPMODE_20MHZ;
2592 		regRATR = RATE_ALL_OFDM_AG;
2593 		regRRSR = RATE_ALL_OFDM_AG;
2594 		break;
2595 	case WIRELESS_MODE_G:
2596 		regBwOpMode = BW_OPMODE_20MHZ;
2597 		regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2598 		regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2599 		break;
2600 	case WIRELESS_MODE_AUTO:
2601 		regBwOpMode = BW_OPMODE_20MHZ;
2602 		regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG |
2603 			  RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
2604 		regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2605 		break;
2606 	case WIRELESS_MODE_N_24G:
2607 		/* It support CCK rate by default. CCK rate will be filtered
2608 		 * out only when associated AP does not support it.
2609 		 */
2610 		regBwOpMode = BW_OPMODE_20MHZ;
2611 		regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG |
2612 			  RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
2613 		regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
2614 		break;
2615 	case WIRELESS_MODE_N_5G:
2616 		regBwOpMode = BW_OPMODE_5G;
2617 		regRATR = RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS |
2618 			  RATE_ALL_OFDM_2SS;
2619 		regRRSR = RATE_ALL_OFDM_AG;
2620 		break;
2621 	}
2622 
2623 	write_nic_byte(dev, BW_OPMODE, regBwOpMode);
2624 	ratr_value = regRATR;
2625 	if (priv->rf_type == RF_1T2R)
2626 		ratr_value &= ~(RATE_ALL_OFDM_2SS);
2627 	write_nic_dword(dev, RATR0, ratr_value);
2628 	write_nic_byte(dev, UFWP, 1);
2629 	read_nic_byte(dev, 0x313, &regTmp);
2630 	regRRSR = ((regTmp) << 24) | (regRRSR & 0x00ffffff);
2631 	write_nic_dword(dev, RRSR, regRRSR);
2632 
2633 	/* Set Retry Limit here */
2634 	write_nic_word(dev, RETRY_LIMIT,
2635 		       priv->ShortRetryLimit << RETRY_LIMIT_SHORT_SHIFT |
2636 		       priv->LongRetryLimit << RETRY_LIMIT_LONG_SHIFT);
2637 	/* Set Contention Window here */
2638 
2639 	/* Set Tx AGC */
2640 
2641 	/* Set Tx Antenna including Feedback control */
2642 
2643 	/* Set Auto Rate fallback control */
2644 }
2645 
2646 /* InitializeAdapter and PhyCfg */
2647 static bool rtl8192_adapter_start(struct net_device *dev)
2648 {
2649 	struct r8192_priv *priv = ieee80211_priv(dev);
2650 	u32 dwRegRead = 0;
2651 	bool init_status = true;
2652 	u8 SECR_value = 0x0;
2653 	u8 tmp;
2654 
2655 	RT_TRACE(COMP_INIT, "====>%s()\n", __func__);
2656 	priv->Rf_Mode = RF_OP_By_SW_3wire;
2657 	/* for ASIC power on sequence */
2658 	write_nic_byte_E(dev, 0x5f, 0x80);
2659 	mdelay(50);
2660 	write_nic_byte_E(dev, 0x5f, 0xf0);
2661 	write_nic_byte_E(dev, 0x5d, 0x00);
2662 	write_nic_byte_E(dev, 0x5e, 0x80);
2663 	write_nic_byte(dev, 0x17, 0x37);
2664 	mdelay(10);
2665 	priv->pFirmware->firmware_status = FW_STATUS_0_INIT;
2666 	/* config CPUReset Register */
2667 	/* Firmware Reset or not? */
2668 	read_nic_dword(dev, CPU_GEN, &dwRegRead);
2669 	dwRegRead |= CPU_GEN_SYSTEM_RESET; /* do nothing here? */
2670 
2671 	write_nic_dword(dev, CPU_GEN, dwRegRead);
2672 	/* config BB. */
2673 	rtl8192_BBConfig(dev);
2674 
2675 	/* Loopback mode or not */
2676 	priv->LoopbackMode = RTL819xU_NO_LOOPBACK;
2677 
2678 	read_nic_dword(dev, CPU_GEN, &dwRegRead);
2679 	if (priv->LoopbackMode == RTL819xU_NO_LOOPBACK)
2680 		dwRegRead = (dwRegRead & CPU_GEN_NO_LOOPBACK_MSK) |
2681 			    CPU_GEN_NO_LOOPBACK_SET;
2682 	else if (priv->LoopbackMode == RTL819xU_MAC_LOOPBACK)
2683 		dwRegRead |= CPU_CCK_LOOPBACK;
2684 	else
2685 		RT_TRACE(COMP_ERR,
2686 			 "Serious error in %s(): wrong loopback mode setting(%d)\n",
2687 			 __func__,  priv->LoopbackMode);
2688 
2689 	write_nic_dword(dev, CPU_GEN, dwRegRead);
2690 
2691 	/* after reset cpu, we need wait for a seconds to write in register. */
2692 	udelay(500);
2693 
2694 	/* add for new bitfile:usb suspend reset pin set to 1. Do we need? */
2695 	read_nic_byte_E(dev, 0x5f, &tmp);
2696 	write_nic_byte_E(dev, 0x5f, tmp | 0x20);
2697 
2698 	/* Set Hardware */
2699 	rtl8192_hwconfig(dev);
2700 
2701 	/* turn on Tx/Rx */
2702 	write_nic_byte(dev, CMDR, CR_RE | CR_TE);
2703 
2704 	/* set IDR0 here */
2705 	write_nic_dword(dev, MAC0, ((u32 *)dev->dev_addr)[0]);
2706 	write_nic_word(dev, MAC4, ((u16 *)(dev->dev_addr + 4))[0]);
2707 
2708 	/* set RCR */
2709 	write_nic_dword(dev, RCR, priv->ReceiveConfig);
2710 
2711 	/* Initialize Number of Reserved Pages in Firmware Queue */
2712 	write_nic_dword(dev, RQPN1,
2713 		NUM_OF_PAGE_IN_FW_QUEUE_BK << RSVD_FW_QUEUE_PAGE_BK_SHIFT |
2714 		NUM_OF_PAGE_IN_FW_QUEUE_BE << RSVD_FW_QUEUE_PAGE_BE_SHIFT |
2715 		NUM_OF_PAGE_IN_FW_QUEUE_VI << RSVD_FW_QUEUE_PAGE_VI_SHIFT |
2716 		NUM_OF_PAGE_IN_FW_QUEUE_VO << RSVD_FW_QUEUE_PAGE_VO_SHIFT);
2717 	write_nic_dword(dev, RQPN2,
2718 		NUM_OF_PAGE_IN_FW_QUEUE_MGNT << RSVD_FW_QUEUE_PAGE_MGNT_SHIFT |
2719 		NUM_OF_PAGE_IN_FW_QUEUE_CMD << RSVD_FW_QUEUE_PAGE_CMD_SHIFT);
2720 	write_nic_dword(dev, RQPN3,
2721 		APPLIED_RESERVED_QUEUE_IN_FW |
2722 		NUM_OF_PAGE_IN_FW_QUEUE_BCN << RSVD_FW_QUEUE_PAGE_BCN_SHIFT);
2723 	write_nic_dword(dev, RATR0 + 4 * 7, (RATE_ALL_OFDM_AG | RATE_ALL_CCK));
2724 
2725 	/* Set AckTimeout */
2726 	/* TODO: (it value is only for FPGA version). need to be changed!! */
2727 	write_nic_byte(dev, ACK_TIMEOUT, 0x30);
2728 
2729 	if (priv->ResetProgress == RESET_TYPE_NORESET)
2730 		rtl8192_SetWirelessMode(dev, priv->ieee80211->mode);
2731 	if (priv->ResetProgress == RESET_TYPE_NORESET) {
2732 		CamResetAllEntry(dev);
2733 		SECR_value |= SCR_TxEncEnable;
2734 		SECR_value |= SCR_RxDecEnable;
2735 		SECR_value |= SCR_NoSKMC;
2736 		write_nic_byte(dev, SECR, SECR_value);
2737 	}
2738 
2739 	/* Beacon related */
2740 	write_nic_word(dev, ATIMWND, 2);
2741 	write_nic_word(dev, BCN_INTERVAL, 100);
2742 
2743 #define DEFAULT_EDCA 0x005e4332
2744 	{
2745 		int i;
2746 
2747 		for (i = 0; i < QOS_QUEUE_NUM; i++)
2748 			write_nic_dword(dev, WDCAPARA_ADD[i], DEFAULT_EDCA);
2749 	}
2750 
2751 	rtl8192_phy_configmac(dev);
2752 
2753 	if (priv->card_8192_version == VERSION_819XU_A) {
2754 		rtl8192_phy_getTxPower(dev);
2755 		rtl8192_phy_setTxPower(dev, priv->chan);
2756 	}
2757 
2758 	/* Firmware download */
2759 	init_status = init_firmware(dev);
2760 	if (!init_status) {
2761 		RT_TRACE(COMP_ERR, "ERR!!! %s(): Firmware download is failed\n",
2762 			 __func__);
2763 		return init_status;
2764 	}
2765 	RT_TRACE(COMP_INIT, "%s():after firmware download\n", __func__);
2766 
2767 	/* config RF. */
2768 	if (priv->ResetProgress == RESET_TYPE_NORESET) {
2769 		rtl8192_phy_RFConfig(dev);
2770 		RT_TRACE(COMP_INIT, "%s():after phy RF config\n", __func__);
2771 	}
2772 
2773 	if (priv->ieee80211->FwRWRF)
2774 		/* We can force firmware to do RF-R/W */
2775 		priv->Rf_Mode = RF_OP_By_FW;
2776 	else
2777 		priv->Rf_Mode = RF_OP_By_SW_3wire;
2778 
2779 	rtl8192_phy_updateInitGain(dev);
2780 	/*--set CCK and OFDM Block "ON"--*/
2781 	rtl8192_setBBreg(dev, rFPGA0_RFMOD, bCCKEn, 0x1);
2782 	rtl8192_setBBreg(dev, rFPGA0_RFMOD, bOFDMEn, 0x1);
2783 
2784 	if (priv->ResetProgress == RESET_TYPE_NORESET) {
2785 		/* if D or C cut */
2786 		u8 tmpvalue;
2787 
2788 		read_nic_byte(dev, 0x301, &tmpvalue);
2789 		if (tmpvalue == 0x03) {
2790 			priv->bDcut = true;
2791 			RT_TRACE(COMP_POWER_TRACKING, "D-cut\n");
2792 		} else {
2793 			priv->bDcut = false;
2794 			RT_TRACE(COMP_POWER_TRACKING, "C-cut\n");
2795 		}
2796 		dm_initialize_txpower_tracking(dev);
2797 
2798 		if (priv->bDcut) {
2799 			u32 i, TempCCk;
2800 			u32 tmpRegA = rtl8192_QueryBBReg(dev,
2801 							 rOFDM0_XATxIQImbalance,
2802 							 bMaskDWord);
2803 
2804 			for (i = 0; i < TxBBGainTableLength; i++) {
2805 				if (tmpRegA == priv->txbbgain_table[i].txbbgain_value) {
2806 					priv->rfa_txpowertrackingindex = (u8)i;
2807 					priv->rfa_txpowertrackingindex_real =
2808 						(u8)i;
2809 					priv->rfa_txpowertracking_default =
2810 						priv->rfa_txpowertrackingindex;
2811 					break;
2812 				}
2813 			}
2814 
2815 			TempCCk = rtl8192_QueryBBReg(dev,
2816 						     rCCK0_TxFilter1,
2817 						     bMaskByte2);
2818 
2819 			for (i = 0; i < CCKTxBBGainTableLength; i++) {
2820 				if (TempCCk == priv->cck_txbbgain_table[i].ccktxbb_valuearray[0]) {
2821 					priv->cck_present_attenuation_20Mdefault = (u8)i;
2822 					break;
2823 				}
2824 			}
2825 			priv->cck_present_attenuation_40Mdefault = 0;
2826 			priv->cck_present_attenuation_difference = 0;
2827 			priv->cck_present_attenuation =
2828 				priv->cck_present_attenuation_20Mdefault;
2829 		}
2830 	}
2831 	write_nic_byte(dev, 0x87, 0x0);
2832 
2833 	return init_status;
2834 }
2835 
2836 /* this configures registers for beacon tx and enables it via
2837  * rtl8192_beacon_tx_enable(). rtl8192_beacon_tx_disable() might
2838  * be used to stop beacon transmission
2839  */
2840 /***************************************************************************
2841  *   -------------------------------NET STUFF---------------------------
2842  ***************************************************************************/
2843 
2844 static struct net_device_stats *rtl8192_stats(struct net_device *dev)
2845 {
2846 	struct r8192_priv *priv = ieee80211_priv(dev);
2847 
2848 	return &priv->ieee80211->stats;
2849 }
2850 
2851 static bool HalTxCheckStuck819xUsb(struct net_device *dev)
2852 {
2853 	struct r8192_priv *priv = ieee80211_priv(dev);
2854 	u16		RegTxCounter;
2855 	bool		bStuck = false;
2856 
2857 	read_nic_word(dev, 0x128, &RegTxCounter);
2858 	RT_TRACE(COMP_RESET,
2859 		 "%s():RegTxCounter is %d,TxCounter is %d\n", __func__,
2860 		 RegTxCounter, priv->TxCounter);
2861 	if (priv->TxCounter == RegTxCounter)
2862 		bStuck = true;
2863 
2864 	priv->TxCounter = RegTxCounter;
2865 
2866 	return bStuck;
2867 }
2868 
2869 /*
2870  *	<Assumption: RT_TX_SPINLOCK is acquired.>
2871  *	First added: 2006.11.19 by emily
2872  */
2873 static RESET_TYPE TxCheckStuck(struct net_device *dev)
2874 {
2875 	struct r8192_priv *priv = ieee80211_priv(dev);
2876 	u8			QueueID;
2877 	bool			bCheckFwTxCnt = false;
2878 
2879 	/* Decide such threshold according to current power save mode */
2880 
2881 	for (QueueID = 0; QueueID <= BEACON_QUEUE; QueueID++) {
2882 		if (QueueID == TXCMD_QUEUE)
2883 			continue;
2884 		if ((skb_queue_len(&priv->ieee80211->skb_waitQ[QueueID]) == 0)  && (skb_queue_len(&priv->ieee80211->skb_aggQ[QueueID]) == 0))
2885 			continue;
2886 
2887 		bCheckFwTxCnt = true;
2888 	}
2889 	if (bCheckFwTxCnt) {
2890 		if (HalTxCheckStuck819xUsb(dev)) {
2891 			RT_TRACE(COMP_RESET,
2892 				 "%s: Fw indicates no Tx condition!\n",
2893 				 __func__);
2894 			return RESET_TYPE_SILENT;
2895 		}
2896 	}
2897 	return RESET_TYPE_NORESET;
2898 }
2899 
2900 static bool HalRxCheckStuck819xUsb(struct net_device *dev)
2901 {
2902 	u16	RegRxCounter;
2903 	struct r8192_priv *priv = ieee80211_priv(dev);
2904 	bool bStuck = false;
2905 	static u8	rx_chk_cnt;
2906 
2907 	read_nic_word(dev, 0x130, &RegRxCounter);
2908 	RT_TRACE(COMP_RESET,
2909 		 "%s(): RegRxCounter is %d,RxCounter is %d\n", __func__,
2910 		 RegRxCounter, priv->RxCounter);
2911 	/* If rssi is small, we should check rx for long time because of bad rx.
2912 	 * or maybe it will continuous silent reset every 2 seconds.
2913 	 */
2914 	rx_chk_cnt++;
2915 	if (priv->undecorated_smoothed_pwdb >= (RATE_ADAPTIVE_TH_HIGH + 5)) {
2916 		rx_chk_cnt = 0;	/* high rssi, check rx stuck right now. */
2917 	} else if (priv->undecorated_smoothed_pwdb < (RATE_ADAPTIVE_TH_HIGH + 5) &&
2918 		   ((priv->CurrentChannelBW != HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb >= RATE_ADAPTIVE_TH_LOW_40M) ||
2919 		    (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb >= RATE_ADAPTIVE_TH_LOW_20M))) {
2920 		if (rx_chk_cnt < 2)
2921 			return bStuck;
2922 
2923 		rx_chk_cnt = 0;
2924 	} else if (((priv->CurrentChannelBW != HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb < RATE_ADAPTIVE_TH_LOW_40M) ||
2925 		    (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb < RATE_ADAPTIVE_TH_LOW_20M)) &&
2926 		     priv->undecorated_smoothed_pwdb >= VERY_LOW_RSSI) {
2927 		if (rx_chk_cnt < 4)
2928 			return bStuck;
2929 
2930 		rx_chk_cnt = 0;
2931 	} else {
2932 		if (rx_chk_cnt < 8)
2933 			return bStuck;
2934 
2935 		rx_chk_cnt = 0;
2936 	}
2937 
2938 	if (priv->RxCounter == RegRxCounter)
2939 		bStuck = true;
2940 
2941 	priv->RxCounter = RegRxCounter;
2942 
2943 	return bStuck;
2944 }
2945 
2946 static RESET_TYPE RxCheckStuck(struct net_device *dev)
2947 {
2948 	struct r8192_priv *priv = ieee80211_priv(dev);
2949 	bool        bRxCheck = false;
2950 
2951 	if (priv->IrpPendingCount > 1)
2952 		bRxCheck = true;
2953 
2954 	if (bRxCheck) {
2955 		if (HalRxCheckStuck819xUsb(dev)) {
2956 			RT_TRACE(COMP_RESET, "RxStuck Condition\n");
2957 			return RESET_TYPE_SILENT;
2958 		}
2959 	}
2960 	return RESET_TYPE_NORESET;
2961 }
2962 
2963 /*
2964  * This function is called by Checkforhang to check whether we should
2965  * ask OS to reset driver
2966  *
2967  * Note:NIC with USB interface sholud not call this function because we
2968  * cannot scan descriptor to judge whether there is tx stuck.
2969  * Note: This function may be required to be rewrite for Vista OS.
2970  * <<<Assumption: Tx spinlock has been acquired >>>
2971  *
2972  * 8185 and 8185b does not implement this function.
2973  */
2974 static RESET_TYPE rtl819x_ifcheck_resetornot(struct net_device *dev)
2975 {
2976 	struct r8192_priv *priv = ieee80211_priv(dev);
2977 	RESET_TYPE	TxResetType = RESET_TYPE_NORESET;
2978 	RESET_TYPE	RxResetType = RESET_TYPE_NORESET;
2979 	RT_RF_POWER_STATE	rfState;
2980 
2981 	rfState = priv->ieee80211->eRFPowerState;
2982 
2983 	TxResetType = TxCheckStuck(dev);
2984 	if (rfState != eRfOff ||
2985 	    (priv->ieee80211->iw_mode != IW_MODE_ADHOC)) {
2986 		/* If driver is in the status of firmware download failure,
2987 		 * driver skips RF initialization and RF is in turned off
2988 		 * state. Driver should check whether Rx stuck and do silent
2989 		 * reset. And if driver is in firmware download failure status,
2990 		 * driver should initialize RF in the following silent reset
2991 		 * procedure
2992 		 *
2993 		 * Driver should not check RX stuck in IBSS mode because it is
2994 		 * required to set Check BSSID in order to send beacon,
2995 		 * however, if check BSSID is set, STA cannot hear any packet
2996 		 * at all.
2997 		 */
2998 		RxResetType = RxCheckStuck(dev);
2999 	}
3000 	if (TxResetType == RESET_TYPE_NORMAL ||
3001 	    RxResetType == RESET_TYPE_NORMAL) {
3002 		return RESET_TYPE_NORMAL;
3003 	} else if (TxResetType == RESET_TYPE_SILENT ||
3004 		   RxResetType == RESET_TYPE_SILENT) {
3005 		RT_TRACE(COMP_RESET, "%s():silent reset\n", __func__);
3006 		return RESET_TYPE_SILENT;
3007 	} else {
3008 		return RESET_TYPE_NORESET;
3009 	}
3010 }
3011 
3012 static void rtl8192_cancel_deferred_work(struct r8192_priv *priv);
3013 static int _rtl8192_up(struct net_device *dev);
3014 static int rtl8192_close(struct net_device *dev);
3015 
3016 static void CamRestoreAllEntry(struct net_device *dev)
3017 {
3018 	u8 EntryId = 0;
3019 	struct r8192_priv *priv = ieee80211_priv(dev);
3020 	u8	*MacAddr = priv->ieee80211->current_network.bssid;
3021 
3022 	static u8	CAM_CONST_ADDR[4][6] = {
3023 		{0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
3024 		{0x00, 0x00, 0x00, 0x00, 0x00, 0x01},
3025 		{0x00, 0x00, 0x00, 0x00, 0x00, 0x02},
3026 		{0x00, 0x00, 0x00, 0x00, 0x00, 0x03} };
3027 	static u8	CAM_CONST_BROAD[] = {
3028 		0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
3029 
3030 	RT_TRACE(COMP_SEC, "%s:\n", __func__);
3031 
3032 	if ((priv->ieee80211->pairwise_key_type == KEY_TYPE_WEP40) ||
3033 	    (priv->ieee80211->pairwise_key_type == KEY_TYPE_WEP104)) {
3034 		for (EntryId = 0; EntryId < 4; EntryId++) {
3035 			MacAddr = CAM_CONST_ADDR[EntryId];
3036 			setKey(dev, EntryId, EntryId,
3037 			       priv->ieee80211->pairwise_key_type,
3038 			       MacAddr, 0, NULL);
3039 		}
3040 
3041 	} else if (priv->ieee80211->pairwise_key_type == KEY_TYPE_TKIP) {
3042 		if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
3043 			setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
3044 			       (const u8 *)dev->dev_addr, 0, NULL);
3045 		else
3046 			setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
3047 			       MacAddr, 0, NULL);
3048 	} else if (priv->ieee80211->pairwise_key_type == KEY_TYPE_CCMP) {
3049 		if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
3050 			setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
3051 			       (const u8 *)dev->dev_addr, 0, NULL);
3052 		else
3053 			setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
3054 			       MacAddr, 0, NULL);
3055 	}
3056 
3057 	if (priv->ieee80211->group_key_type == KEY_TYPE_TKIP) {
3058 		MacAddr = CAM_CONST_BROAD;
3059 		for (EntryId = 1; EntryId < 4; EntryId++) {
3060 			setKey(dev, EntryId, EntryId,
3061 			       priv->ieee80211->group_key_type,
3062 			       MacAddr, 0, NULL);
3063 		}
3064 		if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
3065 			setKey(dev, 0, 0, priv->ieee80211->group_key_type,
3066 			       CAM_CONST_ADDR[0], 0, NULL);
3067 	} else if (priv->ieee80211->group_key_type == KEY_TYPE_CCMP) {
3068 		MacAddr = CAM_CONST_BROAD;
3069 		for (EntryId = 1; EntryId < 4; EntryId++) {
3070 			setKey(dev, EntryId, EntryId,
3071 			       priv->ieee80211->group_key_type,
3072 			       MacAddr, 0, NULL);
3073 		}
3074 
3075 		if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
3076 			setKey(dev, 0, 0, priv->ieee80211->group_key_type,
3077 			       CAM_CONST_ADDR[0], 0, NULL);
3078 	}
3079 }
3080 
3081 /* This function is used to fix Tx/Rx stop bug temporarily.
3082  * This function will do "system reset" to NIC when Tx or Rx is stuck.
3083  * The method checking Tx/Rx stuck of this function is supported by FW,
3084  * which reports Tx and Rx counter to register 0x128 and 0x130.
3085  */
3086 static void rtl819x_ifsilentreset(struct net_device *dev)
3087 {
3088 	struct r8192_priv *priv = ieee80211_priv(dev);
3089 	u8	reset_times = 0;
3090 	int reset_status = 0;
3091 	struct ieee80211_device *ieee = priv->ieee80211;
3092 
3093 	/* If we need to check CCK stop, please uncomment this line. */
3094 	/* bStuck = Adapter->HalFunc.CheckHWStopHandler(Adapter); */
3095 
3096 	if (priv->ResetProgress == RESET_TYPE_NORESET) {
3097 RESET_START:
3098 
3099 		RT_TRACE(COMP_RESET, "=========>Reset progress!!\n");
3100 
3101 		/* Set the variable for reset. */
3102 		priv->ResetProgress = RESET_TYPE_SILENT;
3103 		mutex_lock(&priv->wx_mutex);
3104 		if (priv->up == 0) {
3105 			RT_TRACE(COMP_ERR,
3106 				 "%s():the driver is not up! return\n",
3107 				 __func__);
3108 			mutex_unlock(&priv->wx_mutex);
3109 			return;
3110 		}
3111 		priv->up = 0;
3112 		RT_TRACE(COMP_RESET,
3113 			 "%s():======>start to down the driver\n",
3114 			 __func__);
3115 
3116 		rtl8192_rtx_disable(dev);
3117 		rtl8192_cancel_deferred_work(priv);
3118 		deinit_hal_dm(dev);
3119 		del_timer_sync(&priv->watch_dog_timer);
3120 
3121 		ieee->sync_scan_hurryup = 1;
3122 		if (ieee->state == IEEE80211_LINKED) {
3123 			mutex_lock(&ieee->wx_mutex);
3124 			netdev_dbg(dev, "ieee->state is IEEE80211_LINKED\n");
3125 			ieee80211_stop_send_beacons(priv->ieee80211);
3126 			del_timer_sync(&ieee->associate_timer);
3127 			cancel_delayed_work(&ieee->associate_retry_wq);
3128 			ieee80211_stop_scan(ieee);
3129 			netif_carrier_off(dev);
3130 			mutex_unlock(&ieee->wx_mutex);
3131 		} else {
3132 			netdev_dbg(dev, "ieee->state is NOT LINKED\n");
3133 			ieee80211_softmac_stop_protocol(priv->ieee80211);
3134 		}
3135 		mutex_unlock(&priv->wx_mutex);
3136 		RT_TRACE(COMP_RESET,
3137 			 "%s():<==========down process is finished\n",
3138 			 __func__);
3139 		RT_TRACE(COMP_RESET,
3140 			 "%s():===========>start up the driver\n",
3141 			 __func__);
3142 		reset_status = _rtl8192_up(dev);
3143 
3144 		RT_TRACE(COMP_RESET,
3145 			 "%s():<===========up process is finished\n",
3146 			 __func__);
3147 		if (reset_status == -EAGAIN) {
3148 			if (reset_times < 3) {
3149 				reset_times++;
3150 				goto RESET_START;
3151 			} else {
3152 				RT_TRACE(COMP_ERR,
3153 					 " ERR!!! %s():  Reset Failed!!\n",
3154 					 __func__);
3155 			}
3156 		}
3157 		ieee->is_silent_reset = 1;
3158 		EnableHWSecurityConfig8192(dev);
3159 		if (ieee->state == IEEE80211_LINKED &&
3160 		    ieee->iw_mode == IW_MODE_INFRA) {
3161 			ieee->set_chan(ieee->dev,
3162 				       ieee->current_network.channel);
3163 
3164 			queue_work(ieee->wq, &ieee->associate_complete_wq);
3165 
3166 		} else if (ieee->state == IEEE80211_LINKED &&
3167 			   ieee->iw_mode == IW_MODE_ADHOC) {
3168 			ieee->set_chan(ieee->dev,
3169 				       ieee->current_network.channel);
3170 			ieee->link_change(ieee->dev);
3171 
3172 			ieee80211_start_send_beacons(ieee);
3173 
3174 			if (ieee->data_hard_resume)
3175 				ieee->data_hard_resume(ieee->dev);
3176 			netif_carrier_on(ieee->dev);
3177 		}
3178 
3179 		CamRestoreAllEntry(dev);
3180 
3181 		priv->ResetProgress = RESET_TYPE_NORESET;
3182 		priv->reset_count++;
3183 
3184 		priv->bForcedSilentReset = false;
3185 		priv->bResetInProgress = false;
3186 
3187 		/* For test --> force write UFWP. */
3188 		write_nic_byte(dev, UFWP, 1);
3189 		RT_TRACE(COMP_RESET,
3190 			 "Reset finished!! ====>[%d]\n",
3191 			 priv->reset_count);
3192 	}
3193 }
3194 
3195 static void rtl819x_update_rxcounts(struct r8192_priv *priv, u32 *TotalRxBcnNum,
3196 			     u32 *TotalRxDataNum)
3197 {
3198 	u16			SlotIndex;
3199 	u16			i;
3200 
3201 	*TotalRxBcnNum = 0;
3202 	*TotalRxDataNum = 0;
3203 
3204 	SlotIndex = (priv->ieee80211->LinkDetectInfo.SlotIndex++) %
3205 		    (priv->ieee80211->LinkDetectInfo.SlotNum);
3206 	priv->ieee80211->LinkDetectInfo.RxBcnNum[SlotIndex] =
3207 		priv->ieee80211->LinkDetectInfo.NumRecvBcnInPeriod;
3208 	priv->ieee80211->LinkDetectInfo.RxDataNum[SlotIndex] =
3209 		priv->ieee80211->LinkDetectInfo.NumRecvDataInPeriod;
3210 	for (i = 0; i < priv->ieee80211->LinkDetectInfo.SlotNum; i++) {
3211 		*TotalRxBcnNum += priv->ieee80211->LinkDetectInfo.RxBcnNum[i];
3212 		*TotalRxDataNum += priv->ieee80211->LinkDetectInfo.RxDataNum[i];
3213 	}
3214 }
3215 
3216 static void rtl819x_watchdog_wqcallback(struct work_struct *work)
3217 {
3218 	struct delayed_work *dwork = to_delayed_work(work);
3219 	struct r8192_priv *priv = container_of(dwork,
3220 					       struct r8192_priv, watch_dog_wq);
3221 	struct net_device *dev = priv->ieee80211->dev;
3222 	struct ieee80211_device *ieee = priv->ieee80211;
3223 	RESET_TYPE	ResetType = RESET_TYPE_NORESET;
3224 	static u8	check_reset_cnt;
3225 	bool bBusyTraffic = false;
3226 	u32	TotalRxBcnNum = 0;
3227 	u32	TotalRxDataNum = 0;
3228 
3229 	if (!priv->up)
3230 		return;
3231 	hal_dm_watchdog(dev);
3232 
3233 	/* to get busy traffic condition */
3234 	if (ieee->state == IEEE80211_LINKED) {
3235 		if (ieee->LinkDetectInfo.NumRxOkInPeriod > 666 ||
3236 		    ieee->LinkDetectInfo.NumTxOkInPeriod > 666) {
3237 			bBusyTraffic = true;
3238 		}
3239 		ieee->LinkDetectInfo.NumRxOkInPeriod = 0;
3240 		ieee->LinkDetectInfo.NumTxOkInPeriod = 0;
3241 		ieee->LinkDetectInfo.bBusyTraffic = bBusyTraffic;
3242 	}
3243 	/* for AP roaming */
3244 	if (priv->ieee80211->state == IEEE80211_LINKED &&
3245 	    priv->ieee80211->iw_mode == IW_MODE_INFRA) {
3246 		rtl819x_update_rxcounts(priv, &TotalRxBcnNum, &TotalRxDataNum);
3247 		if ((TotalRxBcnNum + TotalRxDataNum) == 0) {
3248 #ifdef TODO
3249 			if (rfState == eRfOff)
3250 				RT_TRACE(COMP_ERR, "========>%s()\n", __func__);
3251 #endif
3252 			netdev_dbg(dev,
3253 				   "===>%s(): AP is power off, connect another one\n",
3254 				   __func__);
3255 			priv->ieee80211->state = IEEE80211_ASSOCIATING;
3256 			notify_wx_assoc_event(priv->ieee80211);
3257 			RemovePeerTS(priv->ieee80211,
3258 				     priv->ieee80211->current_network.bssid);
3259 			priv->ieee80211->link_change(dev);
3260 			queue_work(priv->ieee80211->wq,
3261 				   &priv->ieee80211->associate_procedure_wq);
3262 		}
3263 	}
3264 	priv->ieee80211->LinkDetectInfo.NumRecvBcnInPeriod = 0;
3265 	priv->ieee80211->LinkDetectInfo.NumRecvDataInPeriod = 0;
3266 	/* check if reset the driver */
3267 	if (check_reset_cnt++ >= 3) {
3268 		ResetType = rtl819x_ifcheck_resetornot(dev);
3269 		check_reset_cnt = 3;
3270 	}
3271 	/* This is control by OID set in Pomelo */
3272 	if ((priv->force_reset) || (priv->ResetProgress == RESET_TYPE_NORESET &&
3273 	    (priv->bForcedSilentReset ||
3274 	    (!priv->bDisableNormalResetCheck && ResetType == RESET_TYPE_SILENT)))) {
3275 		RT_TRACE(COMP_RESET,
3276 			 "%s():priv->force_reset is %d,priv->ResetProgress is %d, priv->bForcedSilentReset is %d,priv->bDisableNormalResetCheck is %d,ResetType is %d\n",
3277 			 __func__, priv->force_reset, priv->ResetProgress,
3278 			 priv->bForcedSilentReset,
3279 			 priv->bDisableNormalResetCheck, ResetType);
3280 		rtl819x_ifsilentreset(dev);
3281 	}
3282 	priv->force_reset = false;
3283 	priv->bForcedSilentReset = false;
3284 	priv->bResetInProgress = false;
3285 	RT_TRACE(COMP_TRACE, " <==RtUsbCheckForHangWorkItemCallback()\n");
3286 }
3287 
3288 static void watch_dog_timer_callback(struct timer_list *t)
3289 {
3290 	struct r8192_priv *priv = from_timer(priv, t, watch_dog_timer);
3291 
3292 	schedule_delayed_work(&priv->watch_dog_wq, 0);
3293 	mod_timer(&priv->watch_dog_timer,
3294 		  jiffies + msecs_to_jiffies(IEEE80211_WATCH_DOG_TIME));
3295 }
3296 
3297 static int _rtl8192_up(struct net_device *dev)
3298 {
3299 	struct r8192_priv *priv = ieee80211_priv(dev);
3300 	int init_status = 0;
3301 
3302 	priv->up = 1;
3303 	priv->ieee80211->ieee_up = 1;
3304 	RT_TRACE(COMP_INIT, "Bringing up iface");
3305 	init_status = rtl8192_adapter_start(dev);
3306 	if (!init_status) {
3307 		RT_TRACE(COMP_ERR, "ERR!!! %s(): initialization failed!\n",
3308 			 __func__);
3309 		priv->up = priv->ieee80211->ieee_up = 0;
3310 		return -EAGAIN;
3311 	}
3312 	RT_TRACE(COMP_INIT, "start adapter finished\n");
3313 	rtl8192_rx_enable(dev);
3314 	if (priv->ieee80211->state != IEEE80211_LINKED)
3315 		ieee80211_softmac_start_protocol(priv->ieee80211);
3316 	ieee80211_reset_queue(priv->ieee80211);
3317 	watch_dog_timer_callback(&priv->watch_dog_timer);
3318 	if (!netif_queue_stopped(dev))
3319 		netif_start_queue(dev);
3320 	else
3321 		netif_wake_queue(dev);
3322 
3323 	return 0;
3324 }
3325 
3326 static int rtl8192_open(struct net_device *dev)
3327 {
3328 	struct r8192_priv *priv = ieee80211_priv(dev);
3329 	int ret;
3330 
3331 	mutex_lock(&priv->wx_mutex);
3332 	ret = rtl8192_up(dev);
3333 	mutex_unlock(&priv->wx_mutex);
3334 	return ret;
3335 }
3336 
3337 int rtl8192_up(struct net_device *dev)
3338 {
3339 	struct r8192_priv *priv = ieee80211_priv(dev);
3340 
3341 	if (priv->up == 1)
3342 		return -1;
3343 
3344 	return _rtl8192_up(dev);
3345 }
3346 
3347 static int rtl8192_close(struct net_device *dev)
3348 {
3349 	struct r8192_priv *priv = ieee80211_priv(dev);
3350 	int ret;
3351 
3352 	mutex_lock(&priv->wx_mutex);
3353 
3354 	ret = rtl8192_down(dev);
3355 
3356 	mutex_unlock(&priv->wx_mutex);
3357 
3358 	return ret;
3359 }
3360 
3361 int rtl8192_down(struct net_device *dev)
3362 {
3363 	struct r8192_priv *priv = ieee80211_priv(dev);
3364 	int i;
3365 
3366 	if (priv->up == 0)
3367 		return -1;
3368 
3369 	priv->up = 0;
3370 	priv->ieee80211->ieee_up = 0;
3371 	RT_TRACE(COMP_DOWN, "==========>%s()\n", __func__);
3372 	/* FIXME */
3373 	if (!netif_queue_stopped(dev))
3374 		netif_stop_queue(dev);
3375 
3376 	rtl8192_rtx_disable(dev);
3377 
3378 	/* Tx related queue release */
3379 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
3380 		skb_queue_purge(&priv->ieee80211->skb_waitQ[i]);
3381 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
3382 		skb_queue_purge(&priv->ieee80211->skb_aggQ[i]);
3383 
3384 	for (i = 0; i < MAX_QUEUE_SIZE; i++)
3385 		skb_queue_purge(&priv->ieee80211->skb_drv_aggQ[i]);
3386 
3387 	/* as cancel_delayed_work will del work->timer, so if work is not
3388 	 * defined as struct delayed_work, it will corrupt
3389 	 */
3390 	rtl8192_cancel_deferred_work(priv);
3391 	deinit_hal_dm(dev);
3392 	del_timer_sync(&priv->watch_dog_timer);
3393 
3394 	ieee80211_softmac_stop_protocol(priv->ieee80211);
3395 	memset(&priv->ieee80211->current_network, 0,
3396 	       offsetof(struct ieee80211_network, list));
3397 	RT_TRACE(COMP_DOWN, "<==========%s()\n", __func__);
3398 
3399 	return 0;
3400 }
3401 
3402 void rtl8192_commit(struct net_device *dev)
3403 {
3404 	struct r8192_priv *priv = ieee80211_priv(dev);
3405 
3406 	if (priv->up == 0)
3407 		return;
3408 	priv->up = 0;
3409 
3410 	rtl8192_cancel_deferred_work(priv);
3411 	del_timer_sync(&priv->watch_dog_timer);
3412 
3413 	ieee80211_softmac_stop_protocol(priv->ieee80211);
3414 
3415 	rtl8192_rtx_disable(dev);
3416 	_rtl8192_up(dev);
3417 }
3418 
3419 static void rtl8192_restart(struct work_struct *work)
3420 {
3421 	struct r8192_priv *priv = container_of(work, struct r8192_priv,
3422 					       reset_wq);
3423 	struct net_device *dev = priv->ieee80211->dev;
3424 
3425 	mutex_lock(&priv->wx_mutex);
3426 
3427 	rtl8192_commit(dev);
3428 
3429 	mutex_unlock(&priv->wx_mutex);
3430 }
3431 
3432 static void r8192_set_multicast(struct net_device *dev)
3433 {
3434 	struct r8192_priv *priv = ieee80211_priv(dev);
3435 	short promisc;
3436 
3437 	/* FIXME FIXME */
3438 
3439 	promisc = (dev->flags & IFF_PROMISC) ? 1 : 0;
3440 
3441 	if (promisc != priv->promisc)
3442 
3443 		priv->promisc = promisc;
3444 }
3445 
3446 static int r8192_set_mac_adr(struct net_device *dev, void *mac)
3447 {
3448 	struct r8192_priv *priv = ieee80211_priv(dev);
3449 	struct sockaddr *addr = mac;
3450 
3451 	mutex_lock(&priv->wx_mutex);
3452 
3453 	eth_hw_addr_set(dev, addr->sa_data);
3454 
3455 	schedule_work(&priv->reset_wq);
3456 	mutex_unlock(&priv->wx_mutex);
3457 
3458 	return 0;
3459 }
3460 
3461 /* based on ipw2200 driver */
3462 static int rtl8192_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
3463 {
3464 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
3465 	struct iwreq *wrq = (struct iwreq *)rq;
3466 	int ret = -1;
3467 	struct ieee80211_device *ieee = priv->ieee80211;
3468 	u32 key[4];
3469 	u8 broadcast_addr[6] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
3470 	struct iw_point *p = &wrq->u.data;
3471 	struct ieee_param *ipw = NULL;
3472 
3473 	mutex_lock(&priv->wx_mutex);
3474 
3475 	if (p->length < sizeof(struct ieee_param) || !p->pointer) {
3476 		ret = -EINVAL;
3477 		goto out;
3478 	}
3479 
3480 	ipw = memdup_user(p->pointer, p->length);
3481 	if (IS_ERR(ipw)) {
3482 		ret = PTR_ERR(ipw);
3483 		goto out;
3484 	}
3485 
3486 	switch (cmd) {
3487 	case RTL_IOCTL_WPA_SUPPLICANT:
3488 		/* parse here for HW security */
3489 		if (ipw->cmd == IEEE_CMD_SET_ENCRYPTION) {
3490 			if (ipw->u.crypt.set_tx) {
3491 				if (strcmp(ipw->u.crypt.alg, "CCMP") == 0) {
3492 					ieee->pairwise_key_type = KEY_TYPE_CCMP;
3493 				} else if (strcmp(ipw->u.crypt.alg, "TKIP") == 0) {
3494 					ieee->pairwise_key_type = KEY_TYPE_TKIP;
3495 				} else if (strcmp(ipw->u.crypt.alg, "WEP") == 0) {
3496 					if (ipw->u.crypt.key_len == 13)
3497 						ieee->pairwise_key_type = KEY_TYPE_WEP104;
3498 					else if (ipw->u.crypt.key_len == 5)
3499 						ieee->pairwise_key_type = KEY_TYPE_WEP40;
3500 				} else {
3501 					ieee->pairwise_key_type = KEY_TYPE_NA;
3502 				}
3503 
3504 				if (ieee->pairwise_key_type) {
3505 					memcpy((u8 *)key, ipw->u.crypt.key, 16);
3506 					EnableHWSecurityConfig8192(dev);
3507 					/* We fill both index entry and 4th
3508 					 * entry for pairwise key as in IPW
3509 					 * interface, adhoc will only get here,
3510 					 * so we need index entry for its
3511 					 * default key serching!
3512 					 */
3513 					setKey(dev, 4, ipw->u.crypt.idx,
3514 					       ieee->pairwise_key_type,
3515 					       (u8 *)ieee->ap_mac_addr,
3516 					       0, key);
3517 					if (ieee->auth_mode != 2)
3518 						setKey(dev, ipw->u.crypt.idx,
3519 						       ipw->u.crypt.idx,
3520 						       ieee->pairwise_key_type,
3521 						       (u8 *)ieee->ap_mac_addr,
3522 						       0, key);
3523 				}
3524 			} else {
3525 				memcpy((u8 *)key, ipw->u.crypt.key, 16);
3526 				if (strcmp(ipw->u.crypt.alg, "CCMP") == 0) {
3527 					ieee->group_key_type = KEY_TYPE_CCMP;
3528 				} else if (strcmp(ipw->u.crypt.alg, "TKIP") == 0) {
3529 					ieee->group_key_type = KEY_TYPE_TKIP;
3530 				} else if (strcmp(ipw->u.crypt.alg, "WEP") == 0) {
3531 					if (ipw->u.crypt.key_len == 13)
3532 						ieee->group_key_type = KEY_TYPE_WEP104;
3533 					else if (ipw->u.crypt.key_len == 5)
3534 						ieee->group_key_type = KEY_TYPE_WEP40;
3535 				} else {
3536 					ieee->group_key_type = KEY_TYPE_NA;
3537 				}
3538 
3539 				if (ieee->group_key_type) {
3540 					setKey(dev, ipw->u.crypt.idx,
3541 					       /* KeyIndex */
3542 					       ipw->u.crypt.idx,
3543 					       /* KeyType */
3544 					       ieee->group_key_type,
3545 					       /* MacAddr */
3546 					       broadcast_addr,
3547 					       /* DefaultKey */
3548 					       0,
3549 					       /* KeyContent */
3550 					       key);
3551 				}
3552 			}
3553 		}
3554 		ret = ieee80211_wpa_supplicant_ioctl(priv->ieee80211,
3555 						     &wrq->u.data);
3556 		break;
3557 
3558 	default:
3559 		ret = -EOPNOTSUPP;
3560 		break;
3561 	}
3562 	kfree(ipw);
3563 	ipw = NULL;
3564 out:
3565 	mutex_unlock(&priv->wx_mutex);
3566 	return ret;
3567 }
3568 
3569 static u8 HwRateToMRate90(bool bIsHT, u8 rate)
3570 {
3571 	u8  ret_rate = 0xff;
3572 
3573 	if (!bIsHT) {
3574 		switch (rate) {
3575 		case DESC90_RATE1M:
3576 			ret_rate = MGN_1M;
3577 			break;
3578 		case DESC90_RATE2M:
3579 			ret_rate = MGN_2M;
3580 			break;
3581 		case DESC90_RATE5_5M:
3582 			ret_rate = MGN_5_5M;
3583 			break;
3584 		case DESC90_RATE11M:
3585 			ret_rate = MGN_11M;
3586 			break;
3587 		case DESC90_RATE6M:
3588 			ret_rate = MGN_6M;
3589 			break;
3590 		case DESC90_RATE9M:
3591 			ret_rate = MGN_9M;
3592 			break;
3593 		case DESC90_RATE12M:
3594 			ret_rate = MGN_12M;
3595 			break;
3596 		case DESC90_RATE18M:
3597 			ret_rate = MGN_18M;
3598 			break;
3599 		case DESC90_RATE24M:
3600 			ret_rate = MGN_24M;
3601 			break;
3602 		case DESC90_RATE36M:
3603 			ret_rate = MGN_36M;
3604 			break;
3605 		case DESC90_RATE48M:
3606 			ret_rate = MGN_48M;
3607 			break;
3608 		case DESC90_RATE54M:
3609 			ret_rate = MGN_54M;
3610 			break;
3611 
3612 		default:
3613 			ret_rate = 0xff;
3614 			RT_TRACE(COMP_RECV,
3615 				 "%s: Non supported Rate [%x], bIsHT = %d!!!\n",
3616 				 __func__, rate, bIsHT);
3617 			break;
3618 		}
3619 
3620 	} else {
3621 		switch (rate) {
3622 		case DESC90_RATEMCS0:
3623 			ret_rate = MGN_MCS0;
3624 			break;
3625 		case DESC90_RATEMCS1:
3626 			ret_rate = MGN_MCS1;
3627 			break;
3628 		case DESC90_RATEMCS2:
3629 			ret_rate = MGN_MCS2;
3630 			break;
3631 		case DESC90_RATEMCS3:
3632 			ret_rate = MGN_MCS3;
3633 			break;
3634 		case DESC90_RATEMCS4:
3635 			ret_rate = MGN_MCS4;
3636 			break;
3637 		case DESC90_RATEMCS5:
3638 			ret_rate = MGN_MCS5;
3639 			break;
3640 		case DESC90_RATEMCS6:
3641 			ret_rate = MGN_MCS6;
3642 			break;
3643 		case DESC90_RATEMCS7:
3644 			ret_rate = MGN_MCS7;
3645 			break;
3646 		case DESC90_RATEMCS8:
3647 			ret_rate = MGN_MCS8;
3648 			break;
3649 		case DESC90_RATEMCS9:
3650 			ret_rate = MGN_MCS9;
3651 			break;
3652 		case DESC90_RATEMCS10:
3653 			ret_rate = MGN_MCS10;
3654 			break;
3655 		case DESC90_RATEMCS11:
3656 			ret_rate = MGN_MCS11;
3657 			break;
3658 		case DESC90_RATEMCS12:
3659 			ret_rate = MGN_MCS12;
3660 			break;
3661 		case DESC90_RATEMCS13:
3662 			ret_rate = MGN_MCS13;
3663 			break;
3664 		case DESC90_RATEMCS14:
3665 			ret_rate = MGN_MCS14;
3666 			break;
3667 		case DESC90_RATEMCS15:
3668 			ret_rate = MGN_MCS15;
3669 			break;
3670 		case DESC90_RATEMCS32:
3671 			ret_rate = 0x80 | 0x20;
3672 			break;
3673 
3674 		default:
3675 			ret_rate = 0xff;
3676 			RT_TRACE(COMP_RECV,
3677 				 "%s: Non supported Rate [%x], bIsHT = %d!!!\n",
3678 				 __func__, rate, bIsHT);
3679 			break;
3680 		}
3681 	}
3682 
3683 	return ret_rate;
3684 }
3685 
3686 /*
3687  * Function:     UpdateRxPktTimeStamp
3688  * Overview:     Record the TSF time stamp when receiving a packet
3689  *
3690  * Input:
3691  *       PADAPTER        Adapter
3692  *       PRT_RFD         pRfd,
3693  *
3694  * Output:
3695  *       PRT_RFD         pRfd
3696  *                               (pRfd->Status.TimeStampHigh is updated)
3697  *                               (pRfd->Status.TimeStampLow is updated)
3698  * Return:
3699  *               None
3700  */
3701 static void UpdateRxPktTimeStamp8190(struct net_device *dev,
3702 				     struct ieee80211_rx_stats *stats)
3703 {
3704 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
3705 
3706 	if (stats->bIsAMPDU && !stats->bFirstMPDU) {
3707 		stats->mac_time[0] = priv->LastRxDescTSFLow;
3708 		stats->mac_time[1] = priv->LastRxDescTSFHigh;
3709 	} else {
3710 		priv->LastRxDescTSFLow = stats->mac_time[0];
3711 		priv->LastRxDescTSFHigh = stats->mac_time[1];
3712 	}
3713 }
3714 
3715 /* 0-100 index. */
3716 static long rtl819x_translate_todbm(u8 signal_strength_index)
3717 {
3718 	long	signal_power; /* in dBm. */
3719 
3720 	/* Translate to dBm (x=0.5y-95). */
3721 	signal_power = (long)((signal_strength_index + 1) >> 1);
3722 	signal_power -= 95;
3723 
3724 	return signal_power;
3725 }
3726 
3727 /* We can not declare RSSI/EVM total value of sliding window to
3728  * be a local static. Otherwise, it may increase when we return from S3/S4. The
3729  * value will be kept in memory or disk. Declare the value in the adaptor
3730  * and it will be reinitialized when returned from S3/S4.
3731  */
3732 static void rtl8192_process_phyinfo(struct r8192_priv *priv, u8 *buffer,
3733 				    struct ieee80211_rx_stats *pprevious_stats,
3734 				    struct ieee80211_rx_stats *pcurrent_stats)
3735 {
3736 	bool bcheck = false;
3737 	u8	rfpath;
3738 	u32	nspatial_stream, tmp_val;
3739 	static u32 slide_rssi_index, slide_rssi_statistics;
3740 	static u32 slide_evm_index, slide_evm_statistics;
3741 	static u32 last_rssi, last_evm;
3742 
3743 	static u32 slide_beacon_adc_pwdb_index;
3744 	static u32 slide_beacon_adc_pwdb_statistics;
3745 	static u32 last_beacon_adc_pwdb;
3746 
3747 	struct rtl_80211_hdr_3addr *hdr;
3748 	u16 sc;
3749 	unsigned int seq;
3750 
3751 	hdr = (struct rtl_80211_hdr_3addr *)buffer;
3752 	sc = le16_to_cpu(hdr->seq_ctl);
3753 	seq = WLAN_GET_SEQ_SEQ(sc);
3754 	/* to record the sequence number */
3755 	pcurrent_stats->Seq_Num = seq;
3756 
3757 	/* Check whether we should take the previous packet into accounting */
3758 	if (!pprevious_stats->bIsAMPDU) {
3759 		/* if previous packet is not aggregated packet */
3760 		bcheck = true;
3761 	}
3762 
3763 	if (slide_rssi_statistics++ >= PHY_RSSI_SLID_WIN_MAX) {
3764 		slide_rssi_statistics = PHY_RSSI_SLID_WIN_MAX;
3765 		last_rssi = priv->stats.slide_signal_strength[slide_rssi_index];
3766 		priv->stats.slide_rssi_total -= last_rssi;
3767 	}
3768 	priv->stats.slide_rssi_total += pprevious_stats->SignalStrength;
3769 
3770 	priv->stats.slide_signal_strength[slide_rssi_index++] =
3771 		pprevious_stats->SignalStrength;
3772 	if (slide_rssi_index >= PHY_RSSI_SLID_WIN_MAX)
3773 		slide_rssi_index = 0;
3774 
3775 	/* <1> Showed on UI for user, in dbm */
3776 	tmp_val = priv->stats.slide_rssi_total / slide_rssi_statistics;
3777 	priv->stats.signal_strength = rtl819x_translate_todbm((u8)tmp_val);
3778 	pcurrent_stats->rssi = priv->stats.signal_strength;
3779 
3780 	/* If the previous packet does not match the criteria, neglect it */
3781 	if (!pprevious_stats->bPacketMatchBSSID) {
3782 		if (!pprevious_stats->bToSelfBA)
3783 			return;
3784 	}
3785 
3786 	if (!bcheck)
3787 		return;
3788 
3789 	/* only rtl8190 supported
3790 	 * rtl8190_process_cck_rxpathsel(priv,pprevious_stats);
3791 	 */
3792 
3793 	/* Check RSSI */
3794 	priv->stats.num_process_phyinfo++;
3795 
3796 	/* record the general signal strength to the sliding window. */
3797 
3798 	/* <2> Showed on UI for engineering
3799 	 * hardware does not provide rssi information for each rf path in CCK
3800 	 */
3801 	if (!pprevious_stats->bIsCCK &&
3802 	    (pprevious_stats->bPacketToSelf || pprevious_stats->bToSelfBA)) {
3803 		for (rfpath = RF90_PATH_A; rfpath < priv->NumTotalRFPath; rfpath++) {
3804 			if (!rtl8192_phy_CheckIsLegalRFPath(priv->ieee80211->dev,
3805 							    rfpath))
3806 				continue;
3807 			if (priv->stats.rx_rssi_percentage[rfpath] == 0)
3808 				priv->stats.rx_rssi_percentage[rfpath] =
3809 					pprevious_stats->RxMIMOSignalStrength[rfpath];
3810 			if (pprevious_stats->RxMIMOSignalStrength[rfpath]  > priv->stats.rx_rssi_percentage[rfpath]) {
3811 				priv->stats.rx_rssi_percentage[rfpath] =
3812 					((priv->stats.rx_rssi_percentage[rfpath] * (RX_SMOOTH_FACTOR - 1)) +
3813 					 (pprevious_stats->RxMIMOSignalStrength[rfpath])) / (RX_SMOOTH_FACTOR);
3814 				priv->stats.rx_rssi_percentage[rfpath] = priv->stats.rx_rssi_percentage[rfpath]  + 1;
3815 			} else {
3816 				priv->stats.rx_rssi_percentage[rfpath] =
3817 					((priv->stats.rx_rssi_percentage[rfpath] * (RX_SMOOTH_FACTOR - 1)) +
3818 					 (pprevious_stats->RxMIMOSignalStrength[rfpath])) / (RX_SMOOTH_FACTOR);
3819 			}
3820 			RT_TRACE(COMP_DBG,
3821 				 "priv->stats.rx_rssi_percentage[rfPath]  = %d\n",
3822 				 priv->stats.rx_rssi_percentage[rfpath]);
3823 		}
3824 	}
3825 
3826 	/* Check PWDB. */
3827 	RT_TRACE(COMP_RXDESC, "Smooth %s PWDB = %d\n",
3828 		 pprevious_stats->bIsCCK ? "CCK" : "OFDM",
3829 		 pprevious_stats->RxPWDBAll);
3830 
3831 	if (pprevious_stats->bPacketBeacon) {
3832 		/* record the beacon pwdb to the sliding window. */
3833 		if (slide_beacon_adc_pwdb_statistics++ >= PHY_Beacon_RSSI_SLID_WIN_MAX) {
3834 			slide_beacon_adc_pwdb_statistics = PHY_Beacon_RSSI_SLID_WIN_MAX;
3835 			last_beacon_adc_pwdb = priv->stats.Slide_Beacon_pwdb[slide_beacon_adc_pwdb_index];
3836 			priv->stats.Slide_Beacon_Total -= last_beacon_adc_pwdb;
3837 		}
3838 		priv->stats.Slide_Beacon_Total += pprevious_stats->RxPWDBAll;
3839 		priv->stats.Slide_Beacon_pwdb[slide_beacon_adc_pwdb_index] = pprevious_stats->RxPWDBAll;
3840 		slide_beacon_adc_pwdb_index++;
3841 		if (slide_beacon_adc_pwdb_index >= PHY_Beacon_RSSI_SLID_WIN_MAX)
3842 			slide_beacon_adc_pwdb_index = 0;
3843 		pprevious_stats->RxPWDBAll = priv->stats.Slide_Beacon_Total / slide_beacon_adc_pwdb_statistics;
3844 		if (pprevious_stats->RxPWDBAll >= 3)
3845 			pprevious_stats->RxPWDBAll -= 3;
3846 	}
3847 
3848 	RT_TRACE(COMP_RXDESC, "Smooth %s PWDB = %d\n",
3849 		 pprevious_stats->bIsCCK ? "CCK" : "OFDM",
3850 		 pprevious_stats->RxPWDBAll);
3851 
3852 	if (pprevious_stats->bPacketToSelf ||
3853 	    pprevious_stats->bPacketBeacon ||
3854 	    pprevious_stats->bToSelfBA) {
3855 		if (priv->undecorated_smoothed_pwdb < 0)
3856 			/* initialize */
3857 			priv->undecorated_smoothed_pwdb =
3858 				pprevious_stats->RxPWDBAll;
3859 		if (pprevious_stats->RxPWDBAll > (u32)priv->undecorated_smoothed_pwdb) {
3860 			priv->undecorated_smoothed_pwdb =
3861 				(((priv->undecorated_smoothed_pwdb) * (RX_SMOOTH_FACTOR - 1)) +
3862 				 (pprevious_stats->RxPWDBAll)) / (RX_SMOOTH_FACTOR);
3863 			priv->undecorated_smoothed_pwdb = priv->undecorated_smoothed_pwdb + 1;
3864 		} else {
3865 			priv->undecorated_smoothed_pwdb =
3866 				(((priv->undecorated_smoothed_pwdb) * (RX_SMOOTH_FACTOR - 1)) +
3867 				 (pprevious_stats->RxPWDBAll)) / (RX_SMOOTH_FACTOR);
3868 		}
3869 	}
3870 
3871 	/* Check EVM */
3872 	/* record the general EVM to the sliding window. */
3873 	if (pprevious_stats->SignalQuality) {
3874 		if (pprevious_stats->bPacketToSelf ||
3875 		    pprevious_stats->bPacketBeacon ||
3876 		    pprevious_stats->bToSelfBA) {
3877 			if (slide_evm_statistics++ >= PHY_RSSI_SLID_WIN_MAX) {
3878 				slide_evm_statistics = PHY_RSSI_SLID_WIN_MAX;
3879 				last_evm = priv->stats.slide_evm[slide_evm_index];
3880 				priv->stats.slide_evm_total -= last_evm;
3881 			}
3882 
3883 			priv->stats.slide_evm_total +=
3884 				pprevious_stats->SignalQuality;
3885 
3886 			priv->stats.slide_evm[slide_evm_index++] =
3887 				pprevious_stats->SignalQuality;
3888 			if (slide_evm_index >= PHY_RSSI_SLID_WIN_MAX)
3889 				slide_evm_index = 0;
3890 
3891 			/* <1> Showed on UI for user, in percentage. */
3892 			tmp_val = priv->stats.slide_evm_total /
3893 				  slide_evm_statistics;
3894 			priv->stats.signal_quality = tmp_val;
3895 			/* Showed on UI for user in Windows Vista,
3896 			 * for Link quality.
3897 			 */
3898 			priv->stats.last_signal_strength_inpercent = tmp_val;
3899 		}
3900 
3901 		/* <2> Showed on UI for engineering */
3902 		if (pprevious_stats->bPacketToSelf ||
3903 		    pprevious_stats->bPacketBeacon ||
3904 		    pprevious_stats->bToSelfBA) {
3905 			for (nspatial_stream = 0; nspatial_stream < 2; nspatial_stream++) { /* 2 spatial stream */
3906 				if (pprevious_stats->RxMIMOSignalQuality[nspatial_stream] != -1) {
3907 					if (priv->stats.rx_evm_percentage[nspatial_stream] == 0) /* initialize */
3908 						priv->stats.rx_evm_percentage[nspatial_stream] = pprevious_stats->RxMIMOSignalQuality[nspatial_stream];
3909 					priv->stats.rx_evm_percentage[nspatial_stream] =
3910 						((priv->stats.rx_evm_percentage[nspatial_stream] * (RX_SMOOTH_FACTOR - 1)) +
3911 						 (pprevious_stats->RxMIMOSignalQuality[nspatial_stream] * 1)) / (RX_SMOOTH_FACTOR);
3912 				}
3913 			}
3914 		}
3915 	}
3916 }
3917 
3918 /*-----------------------------------------------------------------------------
3919  * Function:	rtl819x_query_rxpwrpercentage()
3920  *
3921  * Overview:
3922  *
3923  * Input:		char		antpower
3924  *
3925  * Output:		NONE
3926  *
3927  * Return:		0-100 percentage
3928  *---------------------------------------------------------------------------
3929  */
3930 static u8 rtl819x_query_rxpwrpercentage(s8 antpower)
3931 {
3932 	if ((antpower <= -100) || (antpower >= 20))
3933 		return	0;
3934 	else if (antpower >= 0)
3935 		return	100;
3936 	else
3937 		return	100 + antpower;
3938 
3939 }	/* QueryRxPwrPercentage */
3940 
3941 static u8 rtl819x_evm_dbtopercentage(s8 value)
3942 {
3943 	s8 ret_val = clamp(-value, 0, 33) * 3;
3944 
3945 	if (ret_val == 99)
3946 		ret_val = 100;
3947 
3948 	return ret_val;
3949 }
3950 
3951 /* We want good-looking for signal strength/quality */
3952 static long rtl819x_signal_scale_mapping(long currsig)
3953 {
3954 	long retsig;
3955 
3956 	/* Step 1. Scale mapping. */
3957 	if (currsig >= 61 && currsig <= 100)
3958 		retsig = 90 + ((currsig - 60) / 4);
3959 	else if (currsig >= 41 && currsig <= 60)
3960 		retsig = 78 + ((currsig - 40) / 2);
3961 	else if (currsig >= 31 && currsig <= 40)
3962 		retsig = 66 + (currsig - 30);
3963 	else if (currsig >= 21 && currsig <= 30)
3964 		retsig = 54 + (currsig - 20);
3965 	else if (currsig >= 5 && currsig <= 20)
3966 		retsig = 42 + (((currsig - 5) * 2) / 3);
3967 	else if (currsig == 4)
3968 		retsig = 36;
3969 	else if (currsig == 3)
3970 		retsig = 27;
3971 	else if (currsig == 2)
3972 		retsig = 18;
3973 	else if (currsig == 1)
3974 		retsig = 9;
3975 	else
3976 		retsig = currsig;
3977 
3978 	return retsig;
3979 }
3980 
3981 static inline bool rx_hal_is_cck_rate(struct rx_drvinfo_819x_usb *pdrvinfo)
3982 {
3983 	if (pdrvinfo->RxHT)
3984 		return false;
3985 
3986 	switch (pdrvinfo->RxRate) {
3987 	case DESC90_RATE1M:
3988 	case DESC90_RATE2M:
3989 	case DESC90_RATE5_5M:
3990 	case DESC90_RATE11M:
3991 		return true;
3992 	default:
3993 		return false;
3994 	}
3995 }
3996 
3997 static void rtl8192_query_rxphystatus(struct r8192_priv *priv,
3998 				      struct ieee80211_rx_stats *pstats,
3999 				      struct rx_drvinfo_819x_usb  *pdrvinfo,
4000 				      struct ieee80211_rx_stats *precord_stats,
4001 				      bool bpacket_match_bssid,
4002 				      bool bpacket_toself,
4003 				      bool bPacketBeacon,
4004 				      bool bToSelfBA)
4005 {
4006 	phy_sts_ofdm_819xusb_t *pofdm_buf;
4007 	phy_sts_cck_819xusb_t	*pcck_buf;
4008 	struct phy_ofdm_rx_status_rxsc_sgien_exintfflag *prxsc;
4009 	u8	*prxpkt;
4010 	u8	i, max_spatial_stream, tmp_rxsnr, tmp_rxevm, rxsc_sgien_exflg;
4011 	s8	rx_pwr[4], rx_pwr_all = 0;
4012 	s8	rx_snrX, rx_evmX;
4013 	u8	evm, pwdb_all;
4014 	u32	RSSI, total_rssi = 0;
4015 	u8	is_cck_rate = 0;
4016 	u8	rf_rx_num = 0;
4017 	u8	sq;
4018 
4019 	priv->stats.numqry_phystatus++;
4020 
4021 	is_cck_rate = rx_hal_is_cck_rate(pdrvinfo);
4022 
4023 	/* Record it for next packet processing */
4024 	memset(precord_stats, 0, sizeof(struct ieee80211_rx_stats));
4025 	pstats->bPacketMatchBSSID =
4026 		precord_stats->bPacketMatchBSSID = bpacket_match_bssid;
4027 	pstats->bPacketToSelf = precord_stats->bPacketToSelf = bpacket_toself;
4028 	pstats->bIsCCK = precord_stats->bIsCCK = is_cck_rate;
4029 	pstats->bPacketBeacon = precord_stats->bPacketBeacon = bPacketBeacon;
4030 	pstats->bToSelfBA = precord_stats->bToSelfBA = bToSelfBA;
4031 
4032 	prxpkt = (u8 *)pdrvinfo;
4033 
4034 	/* Move pointer to the 16th bytes. Phy status start address. */
4035 	prxpkt += sizeof(struct rx_drvinfo_819x_usb);
4036 
4037 	/* Initial the cck and ofdm buffer pointer */
4038 	pcck_buf = (phy_sts_cck_819xusb_t *)prxpkt;
4039 	pofdm_buf = (phy_sts_ofdm_819xusb_t *)prxpkt;
4040 
4041 	pstats->RxMIMOSignalQuality[0] = -1;
4042 	pstats->RxMIMOSignalQuality[1] = -1;
4043 	precord_stats->RxMIMOSignalQuality[0] = -1;
4044 	precord_stats->RxMIMOSignalQuality[1] = -1;
4045 
4046 	if (is_cck_rate) {
4047 		/* (1)Hardware does not provide RSSI for CCK */
4048 
4049 		/* (2)PWDB, Average PWDB calculated by hardware
4050 		 * (for rate adaptive)
4051 		 */
4052 		u8 report;
4053 
4054 		priv->stats.numqry_phystatusCCK++;
4055 
4056 		if (!priv->bCckHighPower) {
4057 			report = pcck_buf->cck_agc_rpt & 0xc0;
4058 			report >>= 6;
4059 			switch (report) {
4060 			case 0x3:
4061 				rx_pwr_all = -35 - (pcck_buf->cck_agc_rpt & 0x3e);
4062 				break;
4063 			case 0x2:
4064 				rx_pwr_all = -23 - (pcck_buf->cck_agc_rpt & 0x3e);
4065 				break;
4066 			case 0x1:
4067 				rx_pwr_all = -11 - (pcck_buf->cck_agc_rpt & 0x3e);
4068 				break;
4069 			case 0x0:
4070 				rx_pwr_all = 6 - (pcck_buf->cck_agc_rpt & 0x3e);
4071 				break;
4072 			}
4073 		} else {
4074 			report = pcck_buf->cck_agc_rpt & 0x60;
4075 			report >>= 5;
4076 			switch (report) {
4077 			case 0x3:
4078 				rx_pwr_all = -35 - ((pcck_buf->cck_agc_rpt & 0x1f) << 1);
4079 				break;
4080 			case 0x2:
4081 				rx_pwr_all = -23 - ((pcck_buf->cck_agc_rpt & 0x1f) << 1);
4082 				break;
4083 			case 0x1:
4084 				rx_pwr_all = -11 - ((pcck_buf->cck_agc_rpt & 0x1f) << 1);
4085 				break;
4086 			case 0x0:
4087 				rx_pwr_all = 6 - ((pcck_buf->cck_agc_rpt & 0x1f) << 1);
4088 				break;
4089 			}
4090 		}
4091 
4092 		pwdb_all = rtl819x_query_rxpwrpercentage(rx_pwr_all);
4093 		pstats->RxPWDBAll = precord_stats->RxPWDBAll = pwdb_all;
4094 		pstats->RecvSignalPower = pwdb_all;
4095 
4096 		/* (3) Get Signal Quality (EVM) */
4097 
4098 		if (pstats->RxPWDBAll > 40) {
4099 			sq = 100;
4100 		} else {
4101 			sq = pcck_buf->sq_rpt;
4102 
4103 			if (pcck_buf->sq_rpt > 64)
4104 				sq = 0;
4105 			else if (pcck_buf->sq_rpt < 20)
4106 				sq = 100;
4107 			else
4108 				sq = ((64 - sq) * 100) / 44;
4109 		}
4110 		pstats->SignalQuality = precord_stats->SignalQuality = sq;
4111 		pstats->RxMIMOSignalQuality[0] =
4112 			precord_stats->RxMIMOSignalQuality[0] = sq;
4113 		pstats->RxMIMOSignalQuality[1] =
4114 			precord_stats->RxMIMOSignalQuality[1] = -1;
4115 
4116 	} else {
4117 		priv->stats.numqry_phystatusHT++;
4118 
4119 		/* (1)Get RSSI for HT rate */
4120 		for (i = RF90_PATH_A; i < priv->NumTotalRFPath; i++) {
4121 			/* We will judge RF RX path now. */
4122 			if (priv->brfpath_rxenable[i])
4123 				rf_rx_num++;
4124 			else
4125 				continue;
4126 
4127 			if (!rtl8192_phy_CheckIsLegalRFPath(priv->ieee80211->dev, i))
4128 				continue;
4129 
4130 			rx_pwr[i] =
4131 				((pofdm_buf->trsw_gain_X[i] & 0x3F) * 2) - 106;
4132 
4133 			/* Get Rx snr value in DB */
4134 			tmp_rxsnr =	pofdm_buf->rxsnr_X[i];
4135 			rx_snrX = (s8)(tmp_rxsnr);
4136 			rx_snrX /= 2;
4137 			priv->stats.rxSNRdB[i] = (long)rx_snrX;
4138 
4139 			/* Translate DBM to percentage. */
4140 			RSSI = rtl819x_query_rxpwrpercentage(rx_pwr[i]);
4141 			total_rssi += RSSI;
4142 
4143 			/* Record Signal Strength for next packet */
4144 			pstats->RxMIMOSignalStrength[i] = (u8)RSSI;
4145 			precord_stats->RxMIMOSignalStrength[i] = (u8)RSSI;
4146 		}
4147 
4148 		/* (2)PWDB, Average PWDB calculated by hardware
4149 		 * (for rate adaptive)
4150 		 */
4151 		rx_pwr_all = (((pofdm_buf->pwdb_all) >> 1) & 0x7f) - 106;
4152 		pwdb_all = rtl819x_query_rxpwrpercentage(rx_pwr_all);
4153 
4154 		pstats->RxPWDBAll = precord_stats->RxPWDBAll = pwdb_all;
4155 		pstats->RxPower = precord_stats->RxPower =  rx_pwr_all;
4156 
4157 		/* (3)EVM of HT rate */
4158 		if (pdrvinfo->RxHT && pdrvinfo->RxRate >= DESC90_RATEMCS8 &&
4159 		    pdrvinfo->RxRate <= DESC90_RATEMCS15)
4160 			/* both spatial stream make sense */
4161 			max_spatial_stream = 2;
4162 		else
4163 			/* only spatial stream 1 makes sense */
4164 			max_spatial_stream = 1;
4165 
4166 		for (i = 0; i < max_spatial_stream; i++) {
4167 			tmp_rxevm =	pofdm_buf->rxevm_X[i];
4168 			rx_evmX = (s8)(tmp_rxevm);
4169 
4170 			/* Do not use shift operation like "rx_evmX >>= 1"
4171 			 * because the compiler of free build environment will
4172 			 * set the most significant bit to "zero" when doing
4173 			 * shifting operation which may change a negative value
4174 			 * to positive one, then the dbm value (which is
4175 			 * supposed to be negative) is not correct anymore.
4176 			 */
4177 			rx_evmX /= 2;	/* dbm */
4178 
4179 			evm = rtl819x_evm_dbtopercentage(rx_evmX);
4180 			if (i == 0)
4181 				/* Fill value in RFD, Get the first spatial
4182 				 * stream only
4183 				 */
4184 				pstats->SignalQuality =
4185 					precord_stats->SignalQuality =
4186 					evm & 0xff;
4187 			pstats->RxMIMOSignalQuality[i] =
4188 				precord_stats->RxMIMOSignalQuality[i] =
4189 				evm & 0xff;
4190 		}
4191 
4192 		/* record rx statistics for debug */
4193 		rxsc_sgien_exflg = pofdm_buf->rxsc_sgien_exflg;
4194 		prxsc =	(struct phy_ofdm_rx_status_rxsc_sgien_exintfflag *)
4195 			&rxsc_sgien_exflg;
4196 		if (pdrvinfo->BW)	/* 40M channel */
4197 			priv->stats.received_bwtype[1 + prxsc->rxsc]++;
4198 		else			/* 20M channel */
4199 			priv->stats.received_bwtype[0]++;
4200 	}
4201 
4202 	/* UI BSS List signal strength(in percentage), make it good looking,
4203 	 * from 0~100. It is assigned to the BSS List in
4204 	 * GetValueFromBeaconOrProbeRsp().
4205 	 */
4206 	if (is_cck_rate) {
4207 		pstats->SignalStrength =
4208 			precord_stats->SignalStrength =
4209 			(u8)(rtl819x_signal_scale_mapping((long)pwdb_all));
4210 	} else {
4211 		/* We can judge RX path number now. */
4212 		if (rf_rx_num != 0) {
4213 			pstats->SignalStrength =
4214 				precord_stats->SignalStrength =
4215 				(u8)(rtl819x_signal_scale_mapping((long)(total_rssi /= rf_rx_num)));
4216 		}
4217 	}
4218 }	/* QueryRxPhyStatus8190Pci */
4219 
4220 static void rtl8192_record_rxdesc_forlateruse(struct ieee80211_rx_stats *psrc_stats,
4221 					      struct ieee80211_rx_stats *ptarget_stats)
4222 {
4223 	ptarget_stats->bIsAMPDU = psrc_stats->bIsAMPDU;
4224 	ptarget_stats->bFirstMPDU = psrc_stats->bFirstMPDU;
4225 	ptarget_stats->Seq_Num = psrc_stats->Seq_Num;
4226 }
4227 
4228 static void TranslateRxSignalStuff819xUsb(struct sk_buff *skb,
4229 					  struct ieee80211_rx_stats *pstats,
4230 					  struct rx_drvinfo_819x_usb  *pdrvinfo)
4231 {
4232 	/* TODO: We must only check packet for current MAC address.
4233 	 * Not finish
4234 	 */
4235 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
4236 	struct net_device *dev = info->dev;
4237 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
4238 	bool bpacket_match_bssid, bpacket_toself;
4239 	bool bPacketBeacon = false, bToSelfBA = false;
4240 	static struct ieee80211_rx_stats  previous_stats;
4241 	struct rtl_80211_hdr_3addr *hdr;
4242 	u16 fc, type;
4243 
4244 	/* Get Signal Quality for only RX data queue (but not command queue) */
4245 
4246 	u8 *tmp_buf;
4247 	u8  *praddr;
4248 
4249 	/* Get MAC frame start address. */
4250 	tmp_buf = (u8 *)skb->data;
4251 
4252 	hdr = (struct rtl_80211_hdr_3addr *)tmp_buf;
4253 	fc = le16_to_cpu(hdr->frame_ctl);
4254 	type = WLAN_FC_GET_TYPE(fc);
4255 	praddr = hdr->addr1;
4256 
4257 	/* Check if the received packet is acceptable. */
4258 	bpacket_match_bssid = (type != IEEE80211_FTYPE_CTL) &&
4259 			       (ether_addr_equal(priv->ieee80211->current_network.bssid,  (fc & IEEE80211_FCTL_TODS) ? hdr->addr1 : (fc & IEEE80211_FCTL_FROMDS) ? hdr->addr2 : hdr->addr3))
4260 			       && (!pstats->bHwError) && (!pstats->bCRC) && (!pstats->bICV);
4261 	bpacket_toself =  bpacket_match_bssid &&
4262 			  (ether_addr_equal(praddr, priv->ieee80211->dev->dev_addr));
4263 
4264 	if (WLAN_FC_GET_FRAMETYPE(fc) == IEEE80211_STYPE_BEACON)
4265 		bPacketBeacon = true;
4266 	if (WLAN_FC_GET_FRAMETYPE(fc) == IEEE80211_STYPE_BLOCKACK) {
4267 		if ((ether_addr_equal(praddr, dev->dev_addr)))
4268 			bToSelfBA = true;
4269 	}
4270 
4271 	if (bpacket_match_bssid)
4272 		priv->stats.numpacket_matchbssid++;
4273 	if (bpacket_toself)
4274 		priv->stats.numpacket_toself++;
4275 	/* Process PHY information for previous packet (RSSI/PWDB/EVM)
4276 	 * Because phy information is contained in the last packet of AMPDU
4277 	 * only, so driver should process phy information of previous packet
4278 	 */
4279 	rtl8192_process_phyinfo(priv, tmp_buf, &previous_stats, pstats);
4280 	rtl8192_query_rxphystatus(priv, pstats, pdrvinfo, &previous_stats,
4281 				  bpacket_match_bssid, bpacket_toself,
4282 				  bPacketBeacon, bToSelfBA);
4283 	rtl8192_record_rxdesc_forlateruse(pstats, &previous_stats);
4284 }
4285 
4286 /*
4287  * Function:	UpdateReceivedRateHistogramStatistics
4288  * Overview:	Record the received data rate
4289  *
4290  * Input:
4291  *	struct net_device *dev
4292  *	struct ieee80211_rx_stats *stats
4293  *
4294  * Output:
4295  *
4296  *			(priv->stats.ReceivedRateHistogram[] is updated)
4297  * Return:
4298  *		None
4299  */
4300 static void
4301 UpdateReceivedRateHistogramStatistics8190(struct net_device *dev,
4302 					  struct ieee80211_rx_stats *stats)
4303 {
4304 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
4305 	/* 0: Total, 1:OK, 2:CRC, 3:ICV */
4306 	u32 rcvType = 1;
4307 	u32 rateIndex;
4308 	/* 1: short preamble/GI, 0: long preamble/GI */
4309 	u32 preamble_guardinterval;
4310 
4311 	if (stats->bCRC)
4312 		rcvType = 2;
4313 	else if (stats->bICV)
4314 		rcvType = 3;
4315 
4316 	if (stats->bShortPreamble)
4317 		preamble_guardinterval = 1; /* short */
4318 	else
4319 		preamble_guardinterval = 0; /* long */
4320 
4321 	switch (stats->rate) {
4322 	/* CCK rate */
4323 	case MGN_1M:
4324 		rateIndex = 0;
4325 		break;
4326 	case MGN_2M:
4327 		rateIndex = 1;
4328 		break;
4329 	case MGN_5_5M:
4330 		rateIndex = 2;
4331 		break;
4332 	case MGN_11M:
4333 		rateIndex = 3;
4334 		break;
4335 	/* Legacy OFDM rate */
4336 	case MGN_6M:
4337 		rateIndex = 4;
4338 		break;
4339 	case MGN_9M:
4340 		rateIndex = 5;
4341 		break;
4342 	case MGN_12M:
4343 		rateIndex = 6;
4344 		break;
4345 	case MGN_18M:
4346 		rateIndex = 7;
4347 		break;
4348 	case MGN_24M:
4349 		rateIndex = 8;
4350 		break;
4351 	case MGN_36M:
4352 		rateIndex = 9;
4353 		break;
4354 	case MGN_48M:
4355 		rateIndex = 10;
4356 		break;
4357 	case MGN_54M:
4358 		rateIndex = 11;
4359 		break;
4360 	/* 11n High throughput rate */
4361 	case MGN_MCS0:
4362 		rateIndex = 12;
4363 		break;
4364 	case MGN_MCS1:
4365 		rateIndex = 13;
4366 		break;
4367 	case MGN_MCS2:
4368 		rateIndex = 14;
4369 		break;
4370 	case MGN_MCS3:
4371 		rateIndex = 15;
4372 		break;
4373 	case MGN_MCS4:
4374 		rateIndex = 16;
4375 		break;
4376 	case MGN_MCS5:
4377 		rateIndex = 17;
4378 		break;
4379 	case MGN_MCS6:
4380 		rateIndex = 18;
4381 		break;
4382 	case MGN_MCS7:
4383 		rateIndex = 19;
4384 		break;
4385 	case MGN_MCS8:
4386 		rateIndex = 20;
4387 		break;
4388 	case MGN_MCS9:
4389 		rateIndex = 21;
4390 		break;
4391 	case MGN_MCS10:
4392 		rateIndex = 22;
4393 		break;
4394 	case MGN_MCS11:
4395 		rateIndex = 23;
4396 		break;
4397 	case MGN_MCS12:
4398 		rateIndex = 24;
4399 		break;
4400 	case MGN_MCS13:
4401 		rateIndex = 25;
4402 		break;
4403 	case MGN_MCS14:
4404 		rateIndex = 26;
4405 		break;
4406 	case MGN_MCS15:
4407 		rateIndex = 27;
4408 		break;
4409 	default:
4410 		rateIndex = 28;
4411 		break;
4412 	}
4413 	priv->stats.received_preamble_GI[preamble_guardinterval][rateIndex]++;
4414 	priv->stats.received_rate_histogram[0][rateIndex]++; /* total */
4415 	priv->stats.received_rate_histogram[rcvType][rateIndex]++;
4416 }
4417 
4418 static void query_rxdesc_status(struct sk_buff *skb,
4419 				struct ieee80211_rx_stats *stats,
4420 				bool bIsRxAggrSubframe)
4421 {
4422 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
4423 	struct net_device *dev = info->dev;
4424 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
4425 	struct rx_drvinfo_819x_usb  *driver_info = NULL;
4426 
4427 	/* Get Rx Descriptor Information */
4428 	struct rx_desc_819x_usb *desc = (struct rx_desc_819x_usb *)skb->data;
4429 
4430 	stats->Length = desc->Length;
4431 	stats->RxDrvInfoSize = desc->RxDrvInfoSize;
4432 	stats->RxBufShift = 0;
4433 	stats->bICV = desc->ICV;
4434 	stats->bCRC = desc->CRC32;
4435 	stats->bHwError = stats->bCRC | stats->bICV;
4436 	/* RTL8190 set this bit to indicate that Hw does not decrypt packet */
4437 	stats->Decrypted = !desc->SWDec;
4438 
4439 	if ((priv->ieee80211->pHTInfo->bCurrentHTSupport) &&
4440 	    (priv->ieee80211->pairwise_key_type == KEY_TYPE_CCMP))
4441 		stats->bHwError = false;
4442 	else
4443 		stats->bHwError = stats->bCRC | stats->bICV;
4444 
4445 	if (stats->Length < 24 || stats->Length > MAX_8192U_RX_SIZE)
4446 		stats->bHwError |= 1;
4447 	/* Get Driver Info */
4448 	/* TODO: Need to verify it on FGPA platform
4449 	 * Driver info are written to the RxBuffer following rx desc
4450 	 */
4451 	if (stats->RxDrvInfoSize != 0) {
4452 		driver_info = (struct rx_drvinfo_819x_usb *)(skb->data
4453 				+ sizeof(struct rx_desc_819x_usb)
4454 				+ stats->RxBufShift
4455 			      );
4456 		/* unit: 0.5M */
4457 		/* TODO */
4458 		if (!stats->bHwError) {
4459 			u8	ret_rate;
4460 
4461 			ret_rate = HwRateToMRate90(driver_info->RxHT,
4462 						   driver_info->RxRate);
4463 			if (ret_rate == 0xff) {
4464 				/* Abnormal Case: Receive CRC OK packet with Rx
4465 				 * descriptor indicating non supported rate.
4466 				 * Special Error Handling here
4467 				 */
4468 
4469 				stats->bHwError = 1;
4470 				/* Set 1M rate by default */
4471 				stats->rate = MGN_1M;
4472 			} else {
4473 				stats->rate = ret_rate;
4474 			}
4475 		} else {
4476 			stats->rate = 0x02;
4477 		}
4478 
4479 		stats->bShortPreamble = driver_info->SPLCP;
4480 
4481 		UpdateReceivedRateHistogramStatistics8190(dev, stats);
4482 
4483 		stats->bIsAMPDU = (driver_info->PartAggr == 1);
4484 		stats->bFirstMPDU = (driver_info->PartAggr == 1) &&
4485 				    (driver_info->FirstAGGR == 1);
4486 		stats->TimeStampLow = driver_info->TSFL;
4487 
4488 		UpdateRxPktTimeStamp8190(dev, stats);
4489 
4490 		/* Rx A-MPDU */
4491 		if (driver_info->FirstAGGR == 1 || driver_info->PartAggr == 1)
4492 			RT_TRACE(COMP_RXDESC,
4493 				 "driver_info->FirstAGGR = %d, driver_info->PartAggr = %d\n",
4494 				 driver_info->FirstAGGR, driver_info->PartAggr);
4495 	}
4496 
4497 	skb_pull(skb, sizeof(struct rx_desc_819x_usb));
4498 	/* Get Total offset of MPDU Frame Body */
4499 	if ((stats->RxBufShift + stats->RxDrvInfoSize) > 0) {
4500 		stats->bShift = 1;
4501 		skb_pull(skb, stats->RxBufShift + stats->RxDrvInfoSize);
4502 	}
4503 
4504 	if (driver_info) {
4505 		stats->RxIs40MHzPacket = driver_info->BW;
4506 		TranslateRxSignalStuff819xUsb(skb, stats, driver_info);
4507 	}
4508 }
4509 
4510 static void rtl8192_rx_nomal(struct sk_buff *skb)
4511 {
4512 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
4513 	struct net_device *dev = info->dev;
4514 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
4515 	struct ieee80211_rx_stats stats = {
4516 		.signal = 0,
4517 		.noise = 0x100 - 98,
4518 		.rate = 0,
4519 		.freq = IEEE80211_24GHZ_BAND,
4520 	};
4521 	u32 rx_pkt_len = 0;
4522 	struct rtl_80211_hdr_1addr *ieee80211_hdr = NULL;
4523 	bool unicast_packet = false;
4524 
4525 	/* 20 is for ps-poll */
4526 	if ((skb->len >= (20 + sizeof(struct rx_desc_819x_usb))) && (skb->len < RX_URB_SIZE)) {
4527 		/* first packet should not contain Rx aggregation header */
4528 		query_rxdesc_status(skb, &stats, false);
4529 		/* TODO */
4530 		/* hardware related info */
4531 		/* Process the MPDU received */
4532 		skb_trim(skb, skb->len - 4/*sCrcLng*/);
4533 
4534 		rx_pkt_len = skb->len;
4535 		ieee80211_hdr = (struct rtl_80211_hdr_1addr *)skb->data;
4536 		unicast_packet = false;
4537 		if (is_broadcast_ether_addr(ieee80211_hdr->addr1)) {
4538 			/* TODO */
4539 		} else if (is_multicast_ether_addr(ieee80211_hdr->addr1)) {
4540 			/* TODO */
4541 		} else {
4542 			/* unicast packet */
4543 			unicast_packet = true;
4544 		}
4545 
4546 		if (!ieee80211_rx(priv->ieee80211, skb, &stats)) {
4547 			dev_kfree_skb_any(skb);
4548 		} else {
4549 			priv->stats.rxoktotal++;
4550 			if (unicast_packet)
4551 				priv->stats.rxbytesunicast += rx_pkt_len;
4552 		}
4553 	} else {
4554 		priv->stats.rxurberr++;
4555 		netdev_dbg(dev, "actual_length: %d\n", skb->len);
4556 		dev_kfree_skb_any(skb);
4557 	}
4558 }
4559 
4560 static void rtl819xusb_process_received_packet(struct net_device *dev,
4561 					       struct ieee80211_rx_stats *pstats)
4562 {
4563 	struct r8192_priv *priv = ieee80211_priv(dev);
4564 
4565 	/* Get shifted bytes of Starting address of 802.11 header. */
4566 	pstats->virtual_address += get_rxpacket_shiftbytes_819xusb(pstats);
4567 #ifdef TODO	/* about HCT */
4568 	if (!Adapter->bInHctTest)
4569 		CountRxErrStatistics(Adapter, pRfd);
4570 #endif
4571 #ifdef ENABLE_PS  /* for adding ps function in future */
4572 	RT_RF_POWER_STATE rtState;
4573 	/* When RF is off, we should not count the packet for hw/sw synchronize
4574 	 * reason, ie. there may be a duration while sw switch is changed and
4575 	 * hw switch is being changed.
4576 	 */
4577 	Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_RF_STATE,
4578 					 (u8 *)(&rtState));
4579 	if (rtState == eRfOff)
4580 		return;
4581 #endif
4582 	priv->stats.rxframgment++;
4583 
4584 #ifdef TODO
4585 	RmMonitorSignalStrength(Adapter, pRfd);
4586 #endif
4587 	/* We have to release RFD and return if rx pkt is cmd pkt. */
4588 	if (rtl819xusb_rx_command_packet(dev, pstats))
4589 		return;
4590 
4591 #ifdef SW_CRC_CHECK
4592 	SwCrcCheck();
4593 #endif
4594 }
4595 
4596 static void query_rx_cmdpkt_desc_status(struct sk_buff *skb,
4597 					struct ieee80211_rx_stats *stats)
4598 {
4599 	struct rx_desc_819x_usb *desc = (struct rx_desc_819x_usb *)skb->data;
4600 
4601 	/* Get Rx Descriptor Information */
4602 	stats->virtual_address = (u8 *)skb->data;
4603 	stats->Length = desc->Length;
4604 	stats->RxDrvInfoSize = 0;
4605 	stats->RxBufShift = 0;
4606 	stats->packetlength = stats->Length - scrclng;
4607 	stats->fraglength = stats->packetlength;
4608 	stats->fragoffset = 0;
4609 	stats->ntotalfrag = 1;
4610 }
4611 
4612 static void rtl8192_rx_cmd(struct sk_buff *skb)
4613 {
4614 	struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
4615 	struct net_device *dev = info->dev;
4616 	/* TODO */
4617 	struct ieee80211_rx_stats stats = {
4618 		.signal = 0,
4619 		.noise = 0x100 - 98,
4620 		.rate = 0,
4621 		.freq = IEEE80211_24GHZ_BAND,
4622 	};
4623 
4624 	if ((skb->len >= (20 + sizeof(struct rx_desc_819x_usb))) && (skb->len < RX_URB_SIZE)) {
4625 		query_rx_cmdpkt_desc_status(skb, &stats);
4626 		/* prfd->queue_id = 1; */
4627 
4628 		/* Process the command packet received. */
4629 
4630 		rtl819xusb_process_received_packet(dev, &stats);
4631 
4632 		dev_kfree_skb_any(skb);
4633 	}
4634 }
4635 
4636 static void rtl8192_irq_rx_tasklet(struct tasklet_struct *t)
4637 {
4638 	struct r8192_priv *priv = from_tasklet(priv, t, irq_rx_tasklet);
4639 	struct sk_buff *skb;
4640 	struct rtl8192_rx_info *info;
4641 
4642 	while (NULL != (skb = skb_dequeue(&priv->skb_queue))) {
4643 		info = (struct rtl8192_rx_info *)skb->cb;
4644 		switch (info->out_pipe) {
4645 		/* Nomal packet pipe */
4646 		case 3:
4647 			priv->IrpPendingCount--;
4648 			rtl8192_rx_nomal(skb);
4649 			break;
4650 
4651 		/* Command packet pipe */
4652 		case 9:
4653 			RT_TRACE(COMP_RECV, "command in-pipe index(%d)\n",
4654 				 info->out_pipe);
4655 
4656 			rtl8192_rx_cmd(skb);
4657 			break;
4658 
4659 		default: /* should never get here! */
4660 			RT_TRACE(COMP_ERR, "Unknown in-pipe index(%d)\n",
4661 				 info->out_pipe);
4662 			dev_kfree_skb(skb);
4663 			break;
4664 		}
4665 	}
4666 }
4667 
4668 static const struct net_device_ops rtl8192_netdev_ops = {
4669 	.ndo_open               = rtl8192_open,
4670 	.ndo_stop               = rtl8192_close,
4671 	.ndo_get_stats          = rtl8192_stats,
4672 	.ndo_tx_timeout         = tx_timeout,
4673 	.ndo_do_ioctl           = rtl8192_ioctl,
4674 	.ndo_set_rx_mode	= r8192_set_multicast,
4675 	.ndo_set_mac_address    = r8192_set_mac_adr,
4676 	.ndo_validate_addr      = eth_validate_addr,
4677 	.ndo_start_xmit         = ieee80211_xmit,
4678 };
4679 
4680 /****************************************************************************
4681  *    ---------------------------- USB_STUFF---------------------------
4682  *****************************************************************************/
4683 
4684 static int rtl8192_usb_probe(struct usb_interface *intf,
4685 			     const struct usb_device_id *id)
4686 {
4687 	struct net_device *dev = NULL;
4688 	struct r8192_priv *priv = NULL;
4689 	struct usb_device *udev = interface_to_usbdev(intf);
4690 	int ret;
4691 
4692 	RT_TRACE(COMP_INIT, "Oops: i'm coming\n");
4693 
4694 	dev = alloc_ieee80211(sizeof(struct r8192_priv));
4695 	if (!dev)
4696 		return -ENOMEM;
4697 
4698 	usb_set_intfdata(intf, dev);
4699 	SET_NETDEV_DEV(dev, &intf->dev);
4700 	priv = ieee80211_priv(dev);
4701 	priv->ieee80211 = netdev_priv(dev);
4702 	priv->udev = udev;
4703 
4704 	dev->netdev_ops = &rtl8192_netdev_ops;
4705 
4706 	dev->wireless_handlers = &r8192_wx_handlers_def;
4707 
4708 	dev->type = ARPHRD_ETHER;
4709 
4710 	dev->watchdog_timeo = HZ * 3;
4711 
4712 	if (dev_alloc_name(dev, ifname) < 0) {
4713 		RT_TRACE(COMP_INIT,
4714 			 "Oops: devname already taken! Trying wlan%%d...\n");
4715 		ifname = "wlan%d";
4716 		dev_alloc_name(dev, ifname);
4717 	}
4718 
4719 	RT_TRACE(COMP_INIT, "Driver probe completed1\n");
4720 	if (rtl8192_init(dev) != 0) {
4721 		RT_TRACE(COMP_ERR, "Initialization failed");
4722 		ret = -ENODEV;
4723 		goto fail;
4724 	}
4725 	netif_carrier_off(dev);
4726 	netif_stop_queue(dev);
4727 
4728 	ret = register_netdev(dev);
4729 	if (ret)
4730 		goto fail2;
4731 
4732 	RT_TRACE(COMP_INIT, "dev name=======> %s\n", dev->name);
4733 	rtl8192_proc_init_one(dev);
4734 
4735 	RT_TRACE(COMP_INIT, "Driver probe completed\n");
4736 	return 0;
4737 
4738 fail2:
4739 	rtl8192_down(dev);
4740 fail:
4741 	kfree(priv->pFirmware);
4742 	priv->pFirmware = NULL;
4743 	rtl8192_usb_deleteendpoints(dev);
4744 	msleep(10);
4745 	free_ieee80211(dev);
4746 
4747 	RT_TRACE(COMP_ERR, "wlan driver load failed\n");
4748 	return ret;
4749 }
4750 
4751 /* detach all the work and timer structure declared or inititialize
4752  * in r8192U_init function.
4753  */
4754 static void rtl8192_cancel_deferred_work(struct r8192_priv *priv)
4755 {
4756 	cancel_work_sync(&priv->reset_wq);
4757 	cancel_delayed_work(&priv->watch_dog_wq);
4758 	cancel_delayed_work(&priv->update_beacon_wq);
4759 	cancel_work_sync(&priv->qos_activate);
4760 }
4761 
4762 static void rtl8192_usb_disconnect(struct usb_interface *intf)
4763 {
4764 	struct net_device *dev = usb_get_intfdata(intf);
4765 	struct r8192_priv *priv = ieee80211_priv(dev);
4766 
4767 	unregister_netdev(dev);
4768 
4769 	RT_TRACE(COMP_DOWN, "=============>wlan driver to be removed\n");
4770 	rtl8192_proc_remove_one(dev);
4771 
4772 	rtl8192_down(dev);
4773 	kfree(priv->pFirmware);
4774 	priv->pFirmware = NULL;
4775 	rtl8192_usb_deleteendpoints(dev);
4776 	usleep_range(10000, 11000);
4777 	free_ieee80211(dev);
4778 
4779 	RT_TRACE(COMP_DOWN, "wlan driver removed\n");
4780 }
4781 
4782 static int __init rtl8192_usb_module_init(void)
4783 {
4784 	int ret;
4785 
4786 #ifdef CONFIG_IEEE80211_DEBUG
4787 	ret = ieee80211_debug_init();
4788 	if (ret) {
4789 		pr_err("ieee80211_debug_init() failed %d\n", ret);
4790 		return ret;
4791 	}
4792 #endif
4793 	ret = ieee80211_crypto_init();
4794 	if (ret) {
4795 		pr_err("ieee80211_crypto_init() failed %d\n", ret);
4796 		return ret;
4797 	}
4798 
4799 	ret = ieee80211_crypto_tkip_init();
4800 	if (ret) {
4801 		pr_err("ieee80211_crypto_tkip_init() failed %d\n", ret);
4802 		return ret;
4803 	}
4804 
4805 	ret = ieee80211_crypto_ccmp_init();
4806 	if (ret) {
4807 		pr_err("ieee80211_crypto_ccmp_init() failed %d\n", ret);
4808 		return ret;
4809 	}
4810 
4811 	ret = ieee80211_crypto_wep_init();
4812 	if (ret) {
4813 		pr_err("ieee80211_crypto_wep_init() failed %d\n", ret);
4814 		return ret;
4815 	}
4816 
4817 	pr_info("\nLinux kernel driver for RTL8192 based WLAN cards\n");
4818 	pr_info("Copyright (c) 2007-2008, Realsil Wlan\n");
4819 	RT_TRACE(COMP_INIT, "Initializing module");
4820 	RT_TRACE(COMP_INIT, "Wireless extensions version %d", WIRELESS_EXT);
4821 	rtl8192_proc_module_init();
4822 	return usb_register(&rtl8192_usb_driver);
4823 }
4824 
4825 static void __exit rtl8192_usb_module_exit(void)
4826 {
4827 	usb_deregister(&rtl8192_usb_driver);
4828 
4829 	RT_TRACE(COMP_DOWN, "Exiting");
4830 }
4831 
4832 void EnableHWSecurityConfig8192(struct net_device *dev)
4833 {
4834 	u8 SECR_value = 0x0;
4835 	struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
4836 	struct ieee80211_device *ieee = priv->ieee80211;
4837 
4838 	SECR_value = SCR_TxEncEnable | SCR_RxDecEnable;
4839 	if (((ieee->pairwise_key_type == KEY_TYPE_WEP40) || (ieee->pairwise_key_type == KEY_TYPE_WEP104)) && (priv->ieee80211->auth_mode != 2)) {
4840 		SECR_value |= SCR_RxUseDK;
4841 		SECR_value |= SCR_TxUseDK;
4842 	} else if ((ieee->iw_mode == IW_MODE_ADHOC) && (ieee->pairwise_key_type & (KEY_TYPE_CCMP | KEY_TYPE_TKIP))) {
4843 		SECR_value |= SCR_RxUseDK;
4844 		SECR_value |= SCR_TxUseDK;
4845 	}
4846 	/* add HWSec active enable here.
4847 	 * default using hwsec. when peer AP is in N mode only and
4848 	 * pairwise_key_type is none_aes(which HT_IOT_ACT_PURE_N_MODE indicates
4849 	 * it), use software security. when peer AP is in b,g,n mode mixed and
4850 	 * pairwise_key_type is none_aes, use g mode hw security.
4851 	 */
4852 
4853 	ieee->hwsec_active = 1;
4854 
4855 	/* add hwsec_support flag to totol control hw_sec on/off */
4856 	if ((ieee->pHTInfo->IOTAction & HT_IOT_ACT_PURE_N_MODE) || !hwwep) {
4857 		ieee->hwsec_active = 0;
4858 		SECR_value &= ~SCR_RxDecEnable;
4859 	}
4860 	RT_TRACE(COMP_SEC, "%s:, hwsec:%d, pairwise_key:%d, SECR_value:%x\n",
4861 		 __func__, ieee->hwsec_active, ieee->pairwise_key_type,
4862 		 SECR_value);
4863 	write_nic_byte(dev, SECR,  SECR_value);
4864 }
4865 
4866 void setKey(struct net_device *dev, u8 entryno, u8 keyindex, u16 keytype,
4867 	    const u8 *macaddr, u8 defaultkey, u32 *keycontent)
4868 {
4869 	u32 target_command = 0;
4870 	u32 target_content = 0;
4871 	u16 us_config = 0;
4872 	u8 i;
4873 
4874 	if (entryno >= TOTAL_CAM_ENTRY)
4875 		RT_TRACE(COMP_ERR, "cam entry exceeds in %s\n", __func__);
4876 
4877 	RT_TRACE(COMP_SEC,
4878 		 "====>to %s, dev:%p, EntryNo:%d, KeyIndex:%d, KeyType:%d, MacAddr%pM\n",
4879 		 __func__, dev, entryno, keyindex, keytype, macaddr);
4880 
4881 	if (defaultkey)
4882 		us_config |= BIT(15) | (keytype << 2);
4883 	else
4884 		us_config |= BIT(15) | (keytype << 2) | keyindex;
4885 
4886 	for (i = 0; i < CAM_CONTENT_COUNT; i++) {
4887 		target_command  = i + CAM_CONTENT_COUNT * entryno;
4888 		target_command |= BIT(31) | BIT(16);
4889 
4890 		if (i == 0) { /* MAC|Config */
4891 			target_content = (u32)(*(macaddr + 0)) << 16 |
4892 					(u32)(*(macaddr + 1)) << 24 |
4893 					(u32)us_config;
4894 
4895 			write_nic_dword(dev, WCAMI, target_content);
4896 			write_nic_dword(dev, RWCAM, target_command);
4897 		} else if (i == 1) { /* MAC */
4898 			target_content = (u32)(*(macaddr + 2))	 |
4899 					(u32)(*(macaddr + 3)) <<  8 |
4900 					(u32)(*(macaddr + 4)) << 16 |
4901 					(u32)(*(macaddr + 5)) << 24;
4902 			write_nic_dword(dev, WCAMI, target_content);
4903 			write_nic_dword(dev, RWCAM, target_command);
4904 		} else {
4905 			/* Key Material */
4906 			if (keycontent) {
4907 				write_nic_dword(dev, WCAMI,
4908 						*(keycontent + i - 2));
4909 				write_nic_dword(dev, RWCAM, target_command);
4910 			}
4911 		}
4912 	}
4913 }
4914 
4915 /***************************************************************************
4916  *    ------------------- module init / exit stubs ----------------
4917  ****************************************************************************/
4918 module_init(rtl8192_usb_module_init);
4919 module_exit(rtl8192_usb_module_exit);
4920