[RT2x00]: add driver for Ralink wireless hardware
authorIvo van Doorn <IvDoorn@gmail.com>
Wed, 26 Sep 2007 00:57:13 +0000 (17:57 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Wed, 10 Oct 2007 23:51:39 +0000 (16:51 -0700)
Signed-off-by: Ivo van Doorn <IvDoorn@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
31 files changed:
CREDITS
MAINTAINERS
drivers/net/wireless/Kconfig
drivers/net/wireless/Makefile
drivers/net/wireless/rt2x00/Kconfig [new file with mode: 0644]
drivers/net/wireless/rt2x00/Makefile [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2400pci.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2400pci.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2500pci.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2500pci.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2500usb.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2500usb.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00config.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00debug.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00debug.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00dev.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00firmware.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00lib.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00mac.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00pci.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00pci.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00reg.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00rfkill.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00ring.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00usb.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt2x00usb.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt61pci.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt61pci.h [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt73usb.c [new file with mode: 0644]
drivers/net/wireless/rt2x00/rt73usb.h [new file with mode: 0644]

diff --git a/CREDITS b/CREDITS
index 832436e..550bb2b 100644 (file)
--- a/CREDITS
+++ b/CREDITS
@@ -665,6 +665,11 @@ D: Minor updates to SCSI types, added /proc/pid/maps protection
 S: (ask for current address)
 S: USA
 
+N: Robin Cornelius
+E: robincornelius@users.sourceforge.net
+D: Ralink rt2x00 WLAN driver
+S: Cornwall, U.K.
+
 N: Mark Corner
 E: mcorner@umich.edu
 W: http://www.eecs.umich.edu/~mcorner/
@@ -679,6 +684,11 @@ D: Kernel module SMART utilities
 S: Santa Cruz, California
 S: USA
 
+N: Luis Correia
+E: lfcorreia@users.sf.net
+D: Ralink rt2x00 WLAN driver
+S: Belas, Portugal
+
 N: Alan Cox
 W: http://www.linux.org.uk/diary/
 D: Linux Networking (0.99.10->2.0.29)
@@ -833,6 +843,12 @@ S: Lancs
 S: PR4 6AX
 S: United Kingdom
 
+N: Ivo van Doorn
+E: IvDoorn@gmail.com
+W: http://www.mendiosus.nl
+D: Ralink rt2x00 WLAN driver
+S: Haarlem, The Netherlands
+
 N: John G Dorsey
 E: john+@cs.cmu.edu
 D: ARM Linux ports to Assabet/Neponset, Spot
@@ -3517,6 +3533,12 @@ S: Maastrichterweg 63
 S: 5554 GG Valkenswaard
 S: The Netherlands
 
+N: Mark Wallis
+E: mwallis@serialmonkey.com
+W: http://mark.serialmonkey.com
+D: Ralink rt2x00 WLAN driver
+S: Newcastle, Australia
+
 N: Peter Shaobo Wang
 E: pwang@mmdcorp.com
 W: http://www.mmdcorp.com/pw/linux
@@ -3651,6 +3673,15 @@ S: Alte Regensburger Str. 11a
 S: 93149 Nittenau
 S: Germany
 
+N: Gertjan van Wingerde
+E: gwingerde@home.nl
+D: Ralink rt2x00 WLAN driver
+D: Minix V2 file-system
+D: Misc fixes
+S: Geessinkweg 177
+S: 7544 TX Enschede
+S: The Netherlands
+
 N: Lars Wirzenius
 E: liw@iki.fi
 D: Linux System Administrator's Guide, author, former maintainer
index 934afd3..6ae2b99 100644 (file)
@@ -3147,6 +3147,14 @@ M:       corey@world.std.com
 L:     linux-wireless@vger.kernel.org
 S:     Maintained
 
+RALINK RT2X00 WLAN DRIVER
+P:     rt2x00 project
+L:     linux-wireless@vger.kernel.org
+L:     rt2400-devel@lists.sourceforge.net
+W:     http://rt2x00.serialmonkey.com/
+S:     Maintained
+F:     drivers/net/wireless/rt2x00/
+
 RANDOM NUMBER DRIVER
 P:     Matt Mackall
 M:     mpm@selenic.com
index 085ba13..f481c75 100644 (file)
@@ -583,5 +583,6 @@ source "drivers/net/wireless/bcm43xx/Kconfig"
 source "drivers/net/wireless/b43/Kconfig"
 source "drivers/net/wireless/b43legacy/Kconfig"
 source "drivers/net/wireless/zd1211rw/Kconfig"
+source "drivers/net/wireless/rt2x00/Kconfig"
 
 endmenu
index 351024f..a7a15e3 100644 (file)
@@ -53,3 +53,4 @@ obj-$(CONFIG_RTL8187) += rtl8187.o
 obj-$(CONFIG_ADM8211)  += adm8211.o
 
 obj-$(CONFIG_IWLWIFI)  += iwlwifi/
+obj-$(CONFIG_RT2X00)   += rt2x00/
diff --git a/drivers/net/wireless/rt2x00/Kconfig b/drivers/net/wireless/rt2x00/Kconfig
new file mode 100644 (file)
index 0000000..da05b1f
--- /dev/null
@@ -0,0 +1,130 @@
+config RT2X00
+       tristate "Ralink driver support"
+       depends on MAC80211 && WLAN_80211 && EXPERIMENTAL
+       ---help---
+         This will enable the experimental support for the Ralink drivers,
+         developed in the rt2x00 project <http://rt2x00.serialmonkey.com>.
+
+         These drivers will make use of the Devicescape ieee80211 stack.
+
+         When building one of the individual drivers, the rt2x00 library
+         will also be created. That library (when the driver is built as
+         a module) will be called "rt2x00lib.ko".
+
+config RT2X00_LIB
+       tristate
+       depends on RT2X00
+
+config RT2X00_LIB_PCI
+       tristate
+       depends on RT2X00
+       select RT2X00_LIB
+
+config RT2X00_LIB_USB
+       tristate
+       depends on RT2X00
+       select RT2X00_LIB
+
+config RT2X00_LIB_FIRMWARE
+       boolean
+       depends on RT2X00_LIB
+       select CRC_ITU_T
+       select FW_LOADER
+
+config RT2X00_LIB_RFKILL
+       boolean
+       depends on RT2X00_LIB
+       select RFKILL
+       select INPUT_POLLDEV
+
+config RT2400PCI
+       tristate "Ralink rt2400 pci/pcmcia support"
+       depends on RT2X00 && PCI
+       select RT2X00_LIB_PCI
+       select EEPROM_93CX6
+       ---help---
+         This is an experimental driver for the Ralink rt2400 wireless chip.
+
+         When compiled as a module, this driver will be called "rt2400pci.ko".
+
+config RT2400PCI_RFKILL
+       bool "RT2400 rfkill support"
+       depends on RT2400PCI
+       select RT2X00_LIB_RFKILL
+       ---help---
+         This adds support for integrated rt2400 devices that feature a
+         hardware button to control the radio state.
+         This feature depends on the RF switch subsystem rfkill.
+
+config RT2500PCI
+       tristate "Ralink rt2500 pci/pcmcia support"
+       depends on RT2X00 && PCI
+       select RT2X00_LIB_PCI
+       select EEPROM_93CX6
+       ---help---
+         This is an experimental driver for the Ralink rt2500 wireless chip.
+
+         When compiled as a module, this driver will be called "rt2500pci.ko".
+
+config RT2500PCI_RFKILL
+       bool "RT2500 rfkill support"
+       depends on RT2500PCI
+       select RT2X00_LIB_RFKILL
+       ---help---
+         This adds support for integrated rt2500 devices that feature a
+         hardware button to control the radio state.
+         This feature depends on the RF switch subsystem rfkill.
+
+config RT61PCI
+       tristate "Ralink rt61 pci/pcmcia support"
+       depends on RT2X00 && PCI
+       select RT2X00_LIB_PCI
+       select RT2X00_LIB_FIRMWARE
+       select EEPROM_93CX6
+       ---help---
+         This is an experimental driver for the Ralink rt61 wireless chip.
+
+         When compiled as a module, this driver will be called "rt61pci.ko".
+
+config RT61PCI_RFKILL
+       bool "RT61 rfkill support"
+       depends on RT61PCI
+       select RT2X00_LIB_RFKILL
+       ---help---
+         This adds support for integrated rt61 devices that feature a
+         hardware button to control the radio state.
+         This feature depends on the RF switch subsystem rfkill.
+
+config RT2500USB
+       tristate "Ralink rt2500 usb support"
+       depends on RT2X00 && USB
+       select RT2X00_LIB_USB
+       ---help---
+         This is an experimental driver for the Ralink rt2500 wireless chip.
+
+         When compiled as a module, this driver will be called "rt2500usb.ko".
+
+config RT73USB
+       tristate "Ralink rt73 usb support"
+       depends on RT2X00 && USB
+       select RT2X00_LIB_USB
+       select RT2X00_LIB_FIRMWARE
+       ---help---
+         This is an experimental driver for the Ralink rt73 wireless chip.
+
+         When compiled as a module, this driver will be called "rt73usb.ko".
+
+config RT2X00_LIB_DEBUGFS
+       bool "Ralink debugfs support"
+       depends on RT2X00_LIB && MAC80211_DEBUGFS
+       ---help---
+         Enable creation of debugfs files for the rt2x00 drivers.
+         These debugfs files support both reading and writing of the
+         most important register types of the rt2x00 devices.
+
+config RT2X00_DEBUG
+       bool "Ralink debug output"
+       depends on RT2X00_LIB
+       ---help---
+         Enable debugging output for all rt2x00 modules
+
diff --git a/drivers/net/wireless/rt2x00/Makefile b/drivers/net/wireless/rt2x00/Makefile
new file mode 100644 (file)
index 0000000..30d654a
--- /dev/null
@@ -0,0 +1,22 @@
+rt2x00lib-objs := rt2x00dev.o rt2x00mac.o rt2x00config.o
+
+ifeq ($(CONFIG_RT2X00_LIB_DEBUGFS),y)
+       rt2x00lib-objs += rt2x00debug.o
+endif
+
+ifeq ($(CONFIG_RT2X00_LIB_RFKILL),y)
+       rt2x00lib-objs += rt2x00rfkill.o
+endif
+
+ifeq ($(CONFIG_RT2X00_LIB_FIRMWARE),y)
+       rt2x00lib-objs += rt2x00firmware.o
+endif
+
+obj-$(CONFIG_RT2X00_LIB)       += rt2x00lib.o
+obj-$(CONFIG_RT2X00_LIB_PCI)   += rt2x00pci.o
+obj-$(CONFIG_RT2X00_LIB_USB)   += rt2x00usb.o
+obj-$(CONFIG_RT2400PCI)                += rt2400pci.o
+obj-$(CONFIG_RT2500PCI)                += rt2500pci.o
+obj-$(CONFIG_RT61PCI)          += rt61pci.o
+obj-$(CONFIG_RT2500USB)                += rt2500usb.o
+obj-$(CONFIG_RT73USB)          += rt73usb.o
diff --git a/drivers/net/wireless/rt2x00/rt2400pci.c b/drivers/net/wireless/rt2x00/rt2400pci.c
new file mode 100644 (file)
index 0000000..38e2188
--- /dev/null
@@ -0,0 +1,1689 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2400pci
+       Abstract: rt2400pci device specific routines.
+       Supported chipsets: RT2460.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2400pci"
+
+#include <linux/delay.h>
+#include <linux/etherdevice.h>
+#include <linux/init.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/pci.h>
+#include <linux/eeprom_93cx6.h>
+
+#include "rt2x00.h"
+#include "rt2x00pci.h"
+#include "rt2400pci.h"
+
+/*
+ * Register access.
+ * All access to the CSR registers will go through the methods
+ * rt2x00pci_register_read and rt2x00pci_register_write.
+ * BBP and RF register require indirect register access,
+ * and use the CSR registers BBPCSR and RFCSR to achieve this.
+ * These indirect registers work with busy bits,
+ * and we will try maximal REGISTER_BUSY_COUNT times to access
+ * the register while taking a REGISTER_BUSY_DELAY us delay
+ * between each attampt. When the busy bit is still set at that time,
+ * the access attempt is considered to have failed,
+ * and we will print an error.
+ */
+static u32 rt2400pci_bbp_check(const struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, BBPCSR, &reg);
+               if (!rt2x00_get_field32(reg, BBPCSR_BUSY))
+                       break;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       return reg;
+}
+
+static void rt2400pci_bbp_write(const struct rt2x00_dev *rt2x00dev,
+                               const unsigned int word, const u8 value)
+{
+       u32 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt2400pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Write failed.\n");
+               return;
+       }
+
+       /*
+        * Write the data into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, BBPCSR_VALUE, value);
+       rt2x00_set_field32(&reg, BBPCSR_REGNUM, word);
+       rt2x00_set_field32(&reg, BBPCSR_BUSY, 1);
+       rt2x00_set_field32(&reg, BBPCSR_WRITE_CONTROL, 1);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR, reg);
+}
+
+static void rt2400pci_bbp_read(const struct rt2x00_dev *rt2x00dev,
+                              const unsigned int word, u8 *value)
+{
+       u32 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt2400pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Read failed.\n");
+               return;
+       }
+
+       /*
+        * Write the request into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, BBPCSR_REGNUM, word);
+       rt2x00_set_field32(&reg, BBPCSR_BUSY, 1);
+       rt2x00_set_field32(&reg, BBPCSR_WRITE_CONTROL, 0);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR, reg);
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt2400pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Read failed.\n");
+               *value = 0xff;
+               return;
+       }
+
+       *value = rt2x00_get_field32(reg, BBPCSR_VALUE);
+}
+
+static void rt2400pci_rf_write(const struct rt2x00_dev *rt2x00dev,
+                              const unsigned int word, const u32 value)
+{
+       u32 reg;
+       unsigned int i;
+
+       if (!word)
+               return;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, RFCSR, &reg);
+               if (!rt2x00_get_field32(reg, RFCSR_BUSY))
+                       goto rf_write;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "RFCSR register busy. Write failed.\n");
+       return;
+
+rf_write:
+       reg = 0;
+       rt2x00_set_field32(&reg, RFCSR_VALUE, value);
+       rt2x00_set_field32(&reg, RFCSR_NUMBER_OF_BITS, 20);
+       rt2x00_set_field32(&reg, RFCSR_IF_SELECT, 0);
+       rt2x00_set_field32(&reg, RFCSR_BUSY, 1);
+
+       rt2x00pci_register_write(rt2x00dev, RFCSR, reg);
+       rt2x00_rf_write(rt2x00dev, word, value);
+}
+
+static void rt2400pci_eepromregister_read(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR21, &reg);
+
+       eeprom->reg_data_in = !!rt2x00_get_field32(reg, CSR21_EEPROM_DATA_IN);
+       eeprom->reg_data_out = !!rt2x00_get_field32(reg, CSR21_EEPROM_DATA_OUT);
+       eeprom->reg_data_clock =
+           !!rt2x00_get_field32(reg, CSR21_EEPROM_DATA_CLOCK);
+       eeprom->reg_chip_select =
+           !!rt2x00_get_field32(reg, CSR21_EEPROM_CHIP_SELECT);
+}
+
+static void rt2400pci_eepromregister_write(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg = 0;
+
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_IN, !!eeprom->reg_data_in);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_OUT, !!eeprom->reg_data_out);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_CLOCK,
+                          !!eeprom->reg_data_clock);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_CHIP_SELECT,
+                          !!eeprom->reg_chip_select);
+
+       rt2x00pci_register_write(rt2x00dev, CSR21, reg);
+}
+
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+#define CSR_OFFSET(__word)     ( CSR_REG_BASE + ((__word) * sizeof(u32)) )
+
+static void rt2400pci_read_csr(const struct rt2x00_dev *rt2x00dev,
+                              const unsigned int word, u32 *data)
+{
+       rt2x00pci_register_read(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static void rt2400pci_write_csr(const struct rt2x00_dev *rt2x00dev,
+                               const unsigned int word, u32 data)
+{
+       rt2x00pci_register_write(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static const struct rt2x00debug rt2400pci_rt2x00debug = {
+       .owner  = THIS_MODULE,
+       .csr    = {
+               .read           = rt2400pci_read_csr,
+               .write          = rt2400pci_write_csr,
+               .word_size      = sizeof(u32),
+               .word_count     = CSR_REG_SIZE / sizeof(u32),
+       },
+       .eeprom = {
+               .read           = rt2x00_eeprom_read,
+               .write          = rt2x00_eeprom_write,
+               .word_size      = sizeof(u16),
+               .word_count     = EEPROM_SIZE / sizeof(u16),
+       },
+       .bbp    = {
+               .read           = rt2400pci_bbp_read,
+               .write          = rt2400pci_bbp_write,
+               .word_size      = sizeof(u8),
+               .word_count     = BBP_SIZE / sizeof(u8),
+       },
+       .rf     = {
+               .read           = rt2x00_rf_read,
+               .write          = rt2400pci_rf_write,
+               .word_size      = sizeof(u32),
+               .word_count     = RF_SIZE / sizeof(u32),
+       },
+};
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+#ifdef CONFIG_RT2400PCI_RFKILL
+static int rt2400pci_rfkill_poll(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, GPIOCSR, &reg);
+       return rt2x00_get_field32(reg, GPIOCSR_BIT0);
+}
+#endif /* CONFIG_RT2400PCI_RFKILL */
+
+/*
+ * Configuration handlers.
+ */
+static void rt2400pci_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *addr)
+{
+       __le32 reg[2];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, addr, ETH_ALEN);
+
+       /*
+        * The MAC address is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, CSR3, &reg, sizeof(reg));
+}
+
+static void rt2400pci_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid)
+{
+       __le32 reg[2];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, bssid, ETH_ALEN);
+
+       /*
+        * The BSSID is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, CSR5, &reg, sizeof(reg));
+}
+
+static void rt2400pci_config_packet_filter(struct rt2x00_dev *rt2x00dev,
+                                          const unsigned int filter)
+{
+       int promisc = !!(filter & IFF_PROMISC);
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+       rt2x00_set_field32(&reg, RXCSR0_DROP_NOT_TO_ME, !promisc);
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+}
+
+static void rt2400pci_config_type(struct rt2x00_dev *rt2x00dev, int type)
+{
+       u32 reg;
+
+       rt2x00pci_register_write(rt2x00dev, CSR14, 0);
+
+       /*
+        * Apply hardware packet filter.
+        */
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+
+       if (!is_monitor_present(&rt2x00dev->interface) &&
+           (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_STA))
+               rt2x00_set_field32(&reg, RXCSR0_DROP_TODS, 1);
+       else
+               rt2x00_set_field32(&reg, RXCSR0_DROP_TODS, 0);
+
+       /*
+        * If there is a non-monitor interface present
+        * the packet should be strict (even if a monitor interface is present!).
+        * When there is only 1 interface present which is in monitor mode
+        * we should start accepting _all_ frames.
+        */
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CRC, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_PHYSICAL, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CONTROL, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_VERSION_ERROR, 1);
+       } else if (is_monitor_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CRC, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_PHYSICAL, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CONTROL, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_VERSION_ERROR, 0);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+
+       /*
+        * Enable beacon config
+        */
+       rt2x00pci_register_read(rt2x00dev, BCNCSR1, &reg);
+       rt2x00_set_field32(&reg, BCNCSR1_PRELOAD,
+                          PREAMBLE + get_duration(IEEE80211_HEADER, 2));
+       rt2x00pci_register_write(rt2x00dev, BCNCSR1, reg);
+
+       /*
+        * Enable synchronisation.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR14, &reg);
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, CSR14_TSF_COUNT, 1);
+               rt2x00_set_field32(&reg, CSR14_TBCN, 1);
+       }
+
+       rt2x00_set_field32(&reg, CSR14_BEACON_GEN, 0);
+       if (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_AP)
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 2);
+       else if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 1);
+       else if (is_monitor_present(&rt2x00dev->interface) &&
+                !is_interface_present(&rt2x00dev->interface))
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 0);
+
+       rt2x00pci_register_write(rt2x00dev, CSR14, reg);
+}
+
+static void rt2400pci_config_rate(struct rt2x00_dev *rt2x00dev, const int rate)
+{
+       struct ieee80211_conf *conf = &rt2x00dev->hw->conf;
+       u32 reg;
+       u32 preamble;
+       u16 value;
+
+       if (DEVICE_GET_RATE_FIELD(rate, PREAMBLE))
+               preamble = SHORT_PREAMBLE;
+       else
+               preamble = PREAMBLE;
+
+       reg = DEVICE_GET_RATE_FIELD(rate, RATEMASK) & DEV_BASIC_RATEMASK;
+       rt2x00pci_register_write(rt2x00dev, ARCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR1, &reg);
+       value = ((conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME) ?
+                SHORT_DIFS : DIFS) +
+           PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXCSR1_ACK_TIMEOUT, value);
+       value = SIFS + PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXCSR1_ACK_CONSUME_TIME, value);
+       rt2x00pci_register_write(rt2x00dev, TXCSR1, reg);
+
+       preamble = DEVICE_GET_RATE_FIELD(rate, PREAMBLE) ? 0x08 : 0x00;
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR2, &reg);
+       rt2x00_set_field32(&reg, ARCSR2_SIGNAL, 0x00 | preamble);
+       rt2x00_set_field32(&reg, ARCSR2_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 10));
+       rt2x00pci_register_write(rt2x00dev, ARCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR3, &reg);
+       rt2x00_set_field32(&reg, ARCSR3_SIGNAL, 0x01 | preamble);
+       rt2x00_set_field32(&reg, ARCSR3_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 20));
+       rt2x00pci_register_write(rt2x00dev, ARCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR4, &reg);
+       rt2x00_set_field32(&reg, ARCSR4_SIGNAL, 0x02 | preamble);
+       rt2x00_set_field32(&reg, ARCSR4_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 55));
+       rt2x00pci_register_write(rt2x00dev, ARCSR4, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR5, &reg);
+       rt2x00_set_field32(&reg, ARCSR5_SIGNAL, 0x03 | preamble);
+       rt2x00_set_field32(&reg, ARCSR5_SERVICE, 0x84);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 110));
+       rt2x00pci_register_write(rt2x00dev, ARCSR5, reg);
+}
+
+static void rt2400pci_config_phymode(struct rt2x00_dev *rt2x00dev,
+                                    const int phymode)
+{
+       struct ieee80211_hw_mode *mode;
+       struct ieee80211_rate *rate;
+
+       rt2x00dev->curr_hwmode = HWMODE_B;
+
+       mode = &rt2x00dev->hwmodes[rt2x00dev->curr_hwmode];
+       rate = &mode->rates[mode->num_rates - 1];
+
+       rt2400pci_config_rate(rt2x00dev, rate->val2);
+}
+
+static void rt2400pci_config_channel(struct rt2x00_dev *rt2x00dev,
+                                    const int index, const int channel)
+{
+       struct rf_channel reg;
+
+       /*
+        * Fill rf_reg structure.
+        */
+       memcpy(&reg, &rt2x00dev->spec.channels[index], sizeof(reg));
+
+       /*
+        * Switch on tuning bits.
+        */
+       rt2x00_set_field32(&reg.rf1, RF1_TUNER, 1);
+       rt2x00_set_field32(&reg.rf3, RF3_TUNER, 1);
+
+       rt2400pci_rf_write(rt2x00dev, 1, reg.rf1);
+       rt2400pci_rf_write(rt2x00dev, 2, reg.rf2);
+       rt2400pci_rf_write(rt2x00dev, 3, reg.rf3);
+
+       /*
+        * RF2420 chipset don't need any additional actions.
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2420))
+               return;
+
+       /*
+        * For the RT2421 chipsets we need to write an invalid
+        * reference clock rate to activate auto_tune.
+        * After that we set the value back to the correct channel.
+        */
+       rt2400pci_rf_write(rt2x00dev, 1, reg.rf1);
+       rt2400pci_rf_write(rt2x00dev, 2, 0x000c2a32);
+       rt2400pci_rf_write(rt2x00dev, 3, reg.rf3);
+
+       msleep(1);
+
+       rt2400pci_rf_write(rt2x00dev, 1, reg.rf1);
+       rt2400pci_rf_write(rt2x00dev, 2, reg.rf2);
+       rt2400pci_rf_write(rt2x00dev, 3, reg.rf3);
+
+       msleep(1);
+
+       /*
+        * Switch off tuning bits.
+        */
+       rt2x00_set_field32(&reg.rf1, RF1_TUNER, 0);
+       rt2x00_set_field32(&reg.rf3, RF3_TUNER, 0);
+
+       rt2400pci_rf_write(rt2x00dev, 1, reg.rf1);
+       rt2400pci_rf_write(rt2x00dev, 3, reg.rf3);
+
+       /*
+        * Clear false CRC during channel switch.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg.rf1);
+}
+
+static void rt2400pci_config_txpower(struct rt2x00_dev *rt2x00dev, int txpower)
+{
+       rt2400pci_bbp_write(rt2x00dev, 3, TXPOWER_TO_DEV(txpower));
+}
+
+static void rt2400pci_config_antenna(struct rt2x00_dev *rt2x00dev,
+                                    int antenna_tx, int antenna_rx)
+{
+       u8 r1;
+       u8 r4;
+
+       rt2400pci_bbp_read(rt2x00dev, 4, &r4);
+       rt2400pci_bbp_read(rt2x00dev, 1, &r1);
+
+       /*
+        * Configure the TX antenna.
+        */
+       switch (antenna_tx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r1, BBP_R1_TX_ANTENNA, 1);
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r1, BBP_R1_TX_ANTENNA, 0);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r1, BBP_R1_TX_ANTENNA, 2);
+               break;
+       }
+
+       /*
+        * Configure the RX antenna.
+        */
+       switch (antenna_rx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 0);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 2);
+               break;
+       }
+
+       rt2400pci_bbp_write(rt2x00dev, 4, r4);
+       rt2400pci_bbp_write(rt2x00dev, 1, r1);
+}
+
+static void rt2400pci_config_duration(struct rt2x00_dev *rt2x00dev,
+                                     int short_slot_time, int beacon_int)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_SLOT_TIME,
+                          short_slot_time ? SHORT_SLOT_TIME : SLOT_TIME);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR18, &reg);
+       rt2x00_set_field32(&reg, CSR18_SIFS, SIFS);
+       rt2x00_set_field32(&reg, CSR18_PIFS,
+                          short_slot_time ? SHORT_PIFS : PIFS);
+       rt2x00pci_register_write(rt2x00dev, CSR18, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR19, &reg);
+       rt2x00_set_field32(&reg, CSR19_DIFS,
+                          short_slot_time ? SHORT_DIFS : DIFS);
+       rt2x00_set_field32(&reg, CSR19_EIFS, EIFS);
+       rt2x00pci_register_write(rt2x00dev, CSR19, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR1, &reg);
+       rt2x00_set_field32(&reg, TXCSR1_TSF_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&reg, TXCSR1_AUTORESPONDER, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR12, &reg);
+       rt2x00_set_field32(&reg, CSR12_BEACON_INTERVAL, beacon_int * 16);
+       rt2x00_set_field32(&reg, CSR12_CFP_MAX_DURATION, beacon_int * 16);
+       rt2x00pci_register_write(rt2x00dev, CSR12, reg);
+}
+
+static void rt2400pci_config(struct rt2x00_dev *rt2x00dev,
+                            const unsigned int flags,
+                            struct ieee80211_conf *conf)
+{
+       int short_slot_time = conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME;
+
+       if (flags & CONFIG_UPDATE_PHYMODE)
+               rt2400pci_config_phymode(rt2x00dev, conf->phymode);
+       if (flags & CONFIG_UPDATE_CHANNEL)
+               rt2400pci_config_channel(rt2x00dev, conf->channel_val,
+                                        conf->channel);
+       if (flags & CONFIG_UPDATE_TXPOWER)
+               rt2400pci_config_txpower(rt2x00dev, conf->power_level);
+       if (flags & CONFIG_UPDATE_ANTENNA)
+               rt2400pci_config_antenna(rt2x00dev, conf->antenna_sel_tx,
+                                        conf->antenna_sel_rx);
+       if (flags & (CONFIG_UPDATE_SLOT_TIME | CONFIG_UPDATE_BEACON_INT))
+               rt2400pci_config_duration(rt2x00dev, short_slot_time,
+                                         conf->beacon_int);
+}
+
+static void rt2400pci_config_cw(struct rt2x00_dev *rt2x00dev,
+                               struct ieee80211_tx_queue_params *params)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_CWMIN, params->cw_min);
+       rt2x00_set_field32(&reg, CSR11_CWMAX, params->cw_max);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+}
+
+/*
+ * LED functions.
+ */
+static void rt2400pci_enable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, LEDCSR, &reg);
+
+       rt2x00_set_field32(&reg, LEDCSR_ON_PERIOD, 70);
+       rt2x00_set_field32(&reg, LEDCSR_OFF_PERIOD, 30);
+
+       if (rt2x00dev->led_mode == LED_MODE_TXRX_ACTIVITY) {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 1);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 0);
+       } else if (rt2x00dev->led_mode == LED_MODE_ASUS) {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 0);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 1);
+       } else {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 1);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 1);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, LEDCSR, reg);
+}
+
+static void rt2400pci_disable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, LEDCSR, &reg);
+       rt2x00_set_field32(&reg, LEDCSR_LINK, 0);
+       rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 0);
+       rt2x00pci_register_write(rt2x00dev, LEDCSR, reg);
+}
+
+/*
+ * Link tuning
+ */
+static void rt2400pci_link_stats(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       u8 bbp;
+
+       /*
+        * Update FCS error count from register.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg);
+       rt2x00dev->link.rx_failed = rt2x00_get_field32(reg, CNT0_FCS_ERROR);
+
+       /*
+        * Update False CCA count from register.
+        */
+       rt2400pci_bbp_read(rt2x00dev, 39, &bbp);
+       rt2x00dev->link.false_cca = bbp;
+}
+
+static void rt2400pci_reset_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       rt2400pci_bbp_write(rt2x00dev, 13, 0x08);
+       rt2x00dev->link.vgc_level = 0x08;
+}
+
+static void rt2400pci_link_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       u8 reg;
+
+       /*
+        * The link tuner should not run longer then 60 seconds,
+        * and should run once every 2 seconds.
+        */
+       if (rt2x00dev->link.count > 60 || !(rt2x00dev->link.count & 1))
+               return;
+
+       /*
+        * Base r13 link tuning on the false cca count.
+        */
+       rt2400pci_bbp_read(rt2x00dev, 13, &reg);
+
+       if (rt2x00dev->link.false_cca > 512 && reg < 0x20) {
+               rt2400pci_bbp_write(rt2x00dev, 13, ++reg);
+               rt2x00dev->link.vgc_level = reg;
+       } else if (rt2x00dev->link.false_cca < 100 && reg > 0x08) {
+               rt2400pci_bbp_write(rt2x00dev, 13, --reg);
+               rt2x00dev->link.vgc_level = reg;
+       }
+}
+
+/*
+ * Initialization functions.
+ */
+static void rt2400pci_init_rxring(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring = rt2x00dev->rx;
+       struct data_desc *rxd;
+       unsigned int i;
+       u32 word;
+
+       memset(ring->data_addr, 0x00, rt2x00_get_ring_size(ring));
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               rxd = ring->entry[i].priv;
+
+               rt2x00_desc_read(rxd, 2, &word);
+               rt2x00_set_field32(&word, RXD_W2_BUFFER_LENGTH,
+                                  ring->data_size);
+               rt2x00_desc_write(rxd, 2, word);
+
+               rt2x00_desc_read(rxd, 1, &word);
+               rt2x00_set_field32(&word, RXD_W1_BUFFER_ADDRESS,
+                                  ring->entry[i].data_dma);
+               rt2x00_desc_write(rxd, 1, word);
+
+               rt2x00_desc_read(rxd, 0, &word);
+               rt2x00_set_field32(&word, RXD_W0_OWNER_NIC, 1);
+               rt2x00_desc_write(rxd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(rt2x00dev->rx);
+}
+
+static void rt2400pci_init_txring(struct rt2x00_dev *rt2x00dev, const int queue)
+{
+       struct data_ring *ring = rt2x00lib_get_ring(rt2x00dev, queue);
+       struct data_desc *txd;
+       unsigned int i;
+       u32 word;
+
+       memset(ring->data_addr, 0x00, rt2x00_get_ring_size(ring));
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               txd = ring->entry[i].priv;
+
+               rt2x00_desc_read(txd, 1, &word);
+               rt2x00_set_field32(&word, TXD_W1_BUFFER_ADDRESS,
+                                  ring->entry[i].data_dma);
+               rt2x00_desc_write(txd, 1, word);
+
+               rt2x00_desc_read(txd, 2, &word);
+               rt2x00_set_field32(&word, TXD_W2_BUFFER_LENGTH,
+                                  ring->data_size);
+               rt2x00_desc_write(txd, 2, word);
+
+               rt2x00_desc_read(txd, 0, &word);
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 0);
+               rt2x00_desc_write(txd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(ring);
+}
+
+static int rt2400pci_init_rings(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Initialize rings.
+        */
+       rt2400pci_init_rxring(rt2x00dev);
+       rt2400pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+       rt2400pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+       rt2400pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_AFTER_BEACON);
+       rt2400pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       /*
+        * Initialize registers.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXCSR2, &reg);
+       rt2x00_set_field32(&reg, TXCSR2_TXD_SIZE,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].desc_size);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_TXD,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].stats.limit);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_ATIM,
+                          rt2x00dev->bcn[1].stats.limit);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_PRIO,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].stats.limit);
+       rt2x00pci_register_write(rt2x00dev, TXCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR3, &reg);
+       rt2x00_set_field32(&reg, TXCSR3_TX_RING_REGISTER,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR5, &reg);
+       rt2x00_set_field32(&reg, TXCSR5_PRIO_RING_REGISTER,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR5, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR4, &reg);
+       rt2x00_set_field32(&reg, TXCSR4_ATIM_RING_REGISTER,
+                          rt2x00dev->bcn[1].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR4, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR6, &reg);
+       rt2x00_set_field32(&reg, TXCSR6_BEACON_RING_REGISTER,
+                          rt2x00dev->bcn[0].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR6, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR1, &reg);
+       rt2x00_set_field32(&reg, RXCSR1_RXD_SIZE, rt2x00dev->rx->desc_size);
+       rt2x00_set_field32(&reg, RXCSR1_NUM_RXD, rt2x00dev->rx->stats.limit);
+       rt2x00pci_register_write(rt2x00dev, RXCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR2, &reg);
+       rt2x00_set_field32(&reg, RXCSR2_RX_RING_REGISTER,
+                          rt2x00dev->rx->data_dma);
+       rt2x00pci_register_write(rt2x00dev, RXCSR2, reg);
+
+       return 0;
+}
+
+static int rt2400pci_init_registers(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_write(rt2x00dev, PSCSR0, 0x00020002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR1, 0x00000002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR2, 0x00023f20);
+       rt2x00pci_register_write(rt2x00dev, PSCSR3, 0x00000002);
+
+       rt2x00pci_register_read(rt2x00dev, TIMECSR, &reg);
+       rt2x00_set_field32(&reg, TIMECSR_US_COUNT, 33);
+       rt2x00_set_field32(&reg, TIMECSR_US_64_COUNT, 63);
+       rt2x00_set_field32(&reg, TIMECSR_BEACON_EXPECT, 0);
+       rt2x00pci_register_write(rt2x00dev, TIMECSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR9, &reg);
+       rt2x00_set_field32(&reg, CSR9_MAX_FRAME_UNIT,
+                          (rt2x00dev->rx->data_size / 128));
+       rt2x00pci_register_write(rt2x00dev, CSR9, reg);
+
+       rt2x00pci_register_write(rt2x00dev, CNT3, 0x3f080000);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR0, &reg);
+       rt2x00_set_field32(&reg, ARCSR0_AR_BBP_DATA0, 133);
+       rt2x00_set_field32(&reg, ARCSR0_AR_BBP_ID0, 134);
+       rt2x00_set_field32(&reg, ARCSR0_AR_BBP_DATA1, 136);
+       rt2x00_set_field32(&reg, ARCSR0_AR_BBP_ID1, 135);
+       rt2x00pci_register_write(rt2x00dev, ARCSR0, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR3, &reg);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID0, 3); /* Tx power.*/
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID0_VALID, 1);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID1, 32); /* Signal */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID1_VALID, 1);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID2, 36); /* Rssi */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID2_VALID, 1);
+       rt2x00pci_register_write(rt2x00dev, RXCSR3, reg);
+
+       rt2x00pci_register_write(rt2x00dev, PWRCSR0, 0x3f3b3100);
+
+       if (rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_AWAKE))
+               return -EBUSY;
+
+       rt2x00pci_register_write(rt2x00dev, MACCSR0, 0x00217223);
+       rt2x00pci_register_write(rt2x00dev, MACCSR1, 0x00235518);
+
+       rt2x00pci_register_read(rt2x00dev, MACCSR2, &reg);
+       rt2x00_set_field32(&reg, MACCSR2_DELAY, 64);
+       rt2x00pci_register_write(rt2x00dev, MACCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RALINKCSR, &reg);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_DATA0, 17);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_ID0, 154);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_DATA1, 0);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_ID1, 154);
+       rt2x00pci_register_write(rt2x00dev, RALINKCSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR1, &reg);
+       rt2x00_set_field32(&reg, CSR1_SOFT_RESET, 1);
+       rt2x00_set_field32(&reg, CSR1_BBP_RESET, 0);
+       rt2x00_set_field32(&reg, CSR1_HOST_READY, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR1, &reg);
+       rt2x00_set_field32(&reg, CSR1_SOFT_RESET, 0);
+       rt2x00_set_field32(&reg, CSR1_HOST_READY, 1);
+       rt2x00pci_register_write(rt2x00dev, CSR1, reg);
+
+       /*
+        * We must clear the FCS and FIFO error count.
+        * These registers are cleared on read,
+        * so we may pass a useless variable to store the value.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg);
+       rt2x00pci_register_read(rt2x00dev, CNT4, &reg);
+
+       return 0;
+}
+
+static int rt2400pci_init_bbp(struct rt2x00_dev *rt2x00dev)
+{
+       unsigned int i;
+       u16 eeprom;
+       u8 reg_id;
+       u8 value;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2400pci_bbp_read(rt2x00dev, 0, &value);
+               if ((value != 0xff) && (value != 0x00))
+                       goto continue_csr_init;
+               NOTICE(rt2x00dev, "Waiting for BBP register.\n");
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "BBP register access failed, aborting.\n");
+       return -EACCES;
+
+continue_csr_init:
+       rt2400pci_bbp_write(rt2x00dev, 1, 0x00);
+       rt2400pci_bbp_write(rt2x00dev, 3, 0x27);
+       rt2400pci_bbp_write(rt2x00dev, 4, 0x08);
+       rt2400pci_bbp_write(rt2x00dev, 10, 0x0f);
+       rt2400pci_bbp_write(rt2x00dev, 15, 0x72);
+       rt2400pci_bbp_write(rt2x00dev, 16, 0x74);
+       rt2400pci_bbp_write(rt2x00dev, 17, 0x20);
+       rt2400pci_bbp_write(rt2x00dev, 18, 0x72);
+       rt2400pci_bbp_write(rt2x00dev, 19, 0x0b);
+       rt2400pci_bbp_write(rt2x00dev, 20, 0x00);
+       rt2400pci_bbp_write(rt2x00dev, 28, 0x11);
+       rt2400pci_bbp_write(rt2x00dev, 29, 0x04);
+       rt2400pci_bbp_write(rt2x00dev, 30, 0x21);
+       rt2400pci_bbp_write(rt2x00dev, 31, 0x00);
+
+       DEBUG(rt2x00dev, "Start initialization from EEPROM...\n");
+       for (i = 0; i < EEPROM_BBP_SIZE; i++) {
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_BBP_START + i, &eeprom);
+
+               if (eeprom != 0xffff && eeprom != 0x0000) {
+                       reg_id = rt2x00_get_field16(eeprom, EEPROM_BBP_REG_ID);
+                       value = rt2x00_get_field16(eeprom, EEPROM_BBP_VALUE);
+                       DEBUG(rt2x00dev, "BBP: 0x%02x, value: 0x%02x.\n",
+                             reg_id, value);
+                       rt2400pci_bbp_write(rt2x00dev, reg_id, value);
+               }
+       }
+       DEBUG(rt2x00dev, "...End initialization from EEPROM.\n");
+
+       return 0;
+}
+
+/*
+ * Device state switch handlers.
+ */
+static void rt2400pci_toggle_rx(struct rt2x00_dev *rt2x00dev,
+                               enum dev_state state)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+       rt2x00_set_field32(&reg, RXCSR0_DISABLE_RX,
+                          state == STATE_RADIO_RX_OFF);
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+}
+
+static void rt2400pci_toggle_irq(struct rt2x00_dev *rt2x00dev,
+                                enum dev_state state)
+{
+       int mask = (state == STATE_RADIO_IRQ_OFF);
+       u32 reg;
+
+       /*
+        * When interrupts are being enabled, the interrupt registers
+        * should clear the register to assure a clean state.
+        */
+       if (state == STATE_RADIO_IRQ_ON) {
+               rt2x00pci_register_read(rt2x00dev, CSR7, &reg);
+               rt2x00pci_register_write(rt2x00dev, CSR7, reg);
+       }
+
+       /*
+        * Only toggle the interrupts bits we are going to use.
+        * Non-checked interrupt bits are disabled by default.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR8, &reg);
+       rt2x00_set_field32(&reg, CSR8_TBCN_EXPIRE, mask);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_TXRING, mask);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_ATIMRING, mask);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_PRIORING, mask);
+       rt2x00_set_field32(&reg, CSR8_RXDONE, mask);
+       rt2x00pci_register_write(rt2x00dev, CSR8, reg);
+}
+
+static int rt2400pci_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Initialize all registers.
+        */
+       if (rt2400pci_init_rings(rt2x00dev) ||
+           rt2400pci_init_registers(rt2x00dev) ||
+           rt2400pci_init_bbp(rt2x00dev)) {
+               ERROR(rt2x00dev, "Register initialization failed.\n");
+               return -EIO;
+       }
+
+       /*
+        * Enable interrupts.
+        */
+       rt2400pci_toggle_irq(rt2x00dev, STATE_RADIO_IRQ_ON);
+
+       /*
+        * Enable LED
+        */
+       rt2400pci_enable_led(rt2x00dev);
+
+       return 0;
+}
+
+static void rt2400pci_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Disable LED
+        */
+       rt2400pci_disable_led(rt2x00dev);
+
+       rt2x00pci_register_write(rt2x00dev, PWRCSR0, 0);
+
+       /*
+        * Disable synchronisation.
+        */
+       rt2x00pci_register_write(rt2x00dev, CSR14, 0);
+
+       /*
+        * Cancel RX and TX.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXCSR0, &reg);
+       rt2x00_set_field32(&reg, TXCSR0_ABORT, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR0, reg);
+
+       /*
+        * Disable interrupts.
+        */
+       rt2400pci_toggle_irq(rt2x00dev, STATE_RADIO_IRQ_OFF);
+}
+
+static int rt2400pci_set_state(struct rt2x00_dev *rt2x00dev,
+                              enum dev_state state)
+{
+       u32 reg;
+       unsigned int i;
+       char put_to_sleep;
+       char bbp_state;
+       char rf_state;
+
+       put_to_sleep = (state != STATE_AWAKE);
+
+       rt2x00pci_register_read(rt2x00dev, PWRCSR1, &reg);
+       rt2x00_set_field32(&reg, PWRCSR1_SET_STATE, 1);
+       rt2x00_set_field32(&reg, PWRCSR1_BBP_DESIRE_STATE, state);
+       rt2x00_set_field32(&reg, PWRCSR1_RF_DESIRE_STATE, state);
+       rt2x00_set_field32(&reg, PWRCSR1_PUT_TO_SLEEP, put_to_sleep);
+       rt2x00pci_register_write(rt2x00dev, PWRCSR1, reg);
+
+       /*
+        * Device is not guaranteed to be in the requested state yet.
+        * We must wait until the register indicates that the
+        * device has entered the correct state.
+        */
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, PWRCSR1, &reg);
+               bbp_state = rt2x00_get_field32(reg, PWRCSR1_BBP_CURR_STATE);
+               rf_state = rt2x00_get_field32(reg, PWRCSR1_RF_CURR_STATE);
+               if (bbp_state == state && rf_state == state)
+                       return 0;
+               msleep(10);
+       }
+
+       NOTICE(rt2x00dev, "Device failed to enter state %d, "
+              "current device state: bbp %d and rf %d.\n",
+              state, bbp_state, rf_state);
+
+       return -EBUSY;
+}
+
+static int rt2400pci_set_device_state(struct rt2x00_dev *rt2x00dev,
+                                     enum dev_state state)
+{
+       int retval = 0;
+
+       switch (state) {
+       case STATE_RADIO_ON:
+               retval = rt2400pci_enable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_OFF:
+               rt2400pci_disable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_RX_ON:
+       case STATE_RADIO_RX_OFF:
+               rt2400pci_toggle_rx(rt2x00dev, state);
+               break;
+       case STATE_DEEP_SLEEP:
+       case STATE_SLEEP:
+       case STATE_STANDBY:
+       case STATE_AWAKE:
+               retval = rt2400pci_set_state(rt2x00dev, state);
+               break;
+       default:
+               retval = -ENOTSUPP;
+               break;
+       }
+
+       return retval;
+}
+
+/*
+ * TX descriptor initialization
+ */
+static void rt2400pci_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+                                   struct data_desc *txd,
+                                   struct data_entry_desc *desc,
+                                   struct ieee80211_hdr *ieee80211hdr,
+                                   unsigned int length,
+                                   struct ieee80211_tx_control *control)
+{
+       u32 word;
+       u32 signal = 0;
+       u32 service = 0;
+       u32 length_high = 0;
+       u32 length_low = 0;
+
+       /*
+        * The PLCP values should be treated as if they
+        * were BBP values.
+        */
+       rt2x00_set_field32(&signal, BBPCSR_VALUE, desc->signal);
+       rt2x00_set_field32(&signal, BBPCSR_REGNUM, 5);
+       rt2x00_set_field32(&signal, BBPCSR_BUSY, 1);
+
+       rt2x00_set_field32(&service, BBPCSR_VALUE, desc->service);
+       rt2x00_set_field32(&service, BBPCSR_REGNUM, 6);
+       rt2x00_set_field32(&service, BBPCSR_BUSY, 1);
+
+       rt2x00_set_field32(&length_high, BBPCSR_VALUE, desc->length_high);
+       rt2x00_set_field32(&length_high, BBPCSR_REGNUM, 7);
+       rt2x00_set_field32(&length_high, BBPCSR_BUSY, 1);
+
+       rt2x00_set_field32(&length_low, BBPCSR_VALUE, desc->length_low);
+       rt2x00_set_field32(&length_low, BBPCSR_REGNUM, 8);
+       rt2x00_set_field32(&length_low, BBPCSR_BUSY, 1);
+
+       /*
+        * Start writing the descriptor words.
+        */
+       rt2x00_desc_read(txd, 2, &word);
+       rt2x00_set_field32(&word, TXD_W2_DATABYTE_COUNT, length);
+       rt2x00_desc_write(txd, 2, word);
+
+       rt2x00_desc_read(txd, 3, &word);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_SIGNAL, signal);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_SERVICE, service);
+       rt2x00_desc_write(txd, 3, word);
+
+       rt2x00_desc_read(txd, 4, &word);
+       rt2x00_set_field32(&word, TXD_W4_PLCP_LENGTH_LOW, length_low);
+       rt2x00_set_field32(&word, TXD_W4_PLCP_LENGTH_HIGH, length_high);
+       rt2x00_desc_write(txd, 4, word);
+
+       rt2x00_desc_read(txd, 0, &word);
+       rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 1);
+       rt2x00_set_field32(&word, TXD_W0_VALID, 1);
+       rt2x00_set_field32(&word, TXD_W0_MORE_FRAG,
+                          test_bit(ENTRY_TXD_MORE_FRAG, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_ACK,
+                          !(control->flags & IEEE80211_TXCTL_NO_ACK));
+       rt2x00_set_field32(&word, TXD_W0_TIMESTAMP,
+                          test_bit(ENTRY_TXD_REQ_TIMESTAMP, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_RTS,
+                          test_bit(ENTRY_TXD_RTS_FRAME, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_IFS, desc->ifs);
+       rt2x00_set_field32(&word, TXD_W0_RETRY_MODE,
+                          !!(control->flags &
+                             IEEE80211_TXCTL_LONG_RETRY_LIMIT));
+       rt2x00_desc_write(txd, 0, word);
+}
+
+/*
+ * TX data initialization
+ */
+static void rt2400pci_kick_tx_queue(struct rt2x00_dev *rt2x00dev,
+                                   unsigned int queue)
+{
+       u32 reg;
+
+       if (queue == IEEE80211_TX_QUEUE_BEACON) {
+               rt2x00pci_register_read(rt2x00dev, CSR14, &reg);
+               if (!rt2x00_get_field32(reg, CSR14_BEACON_GEN)) {
+                       rt2x00_set_field32(&reg, CSR14_BEACON_GEN, 1);
+                       rt2x00pci_register_write(rt2x00dev, CSR14, reg);
+               }
+               return;
+       }
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR0, &reg);
+       if (queue == IEEE80211_TX_QUEUE_DATA0)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_PRIO, 1);
+       else if (queue == IEEE80211_TX_QUEUE_DATA1)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_TX, 1);
+       else if (queue == IEEE80211_TX_QUEUE_AFTER_BEACON)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_ATIM, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR0, reg);
+}
+
+/*
+ * RX control handlers
+ */
+static int rt2400pci_fill_rxdone(struct data_entry *entry,
+                                int *signal, int *rssi, int *ofdm, int *size)
+{
+       struct data_desc *rxd = entry->priv;
+       u32 word0;
+       u32 word2;
+
+       rt2x00_desc_read(rxd, 0, &word0);
+       rt2x00_desc_read(rxd, 2, &word2);
+
+       if (rt2x00_get_field32(word0, RXD_W0_CRC_ERROR) ||
+           rt2x00_get_field32(word0, RXD_W0_PHYSICAL_ERROR))
+               return -EINVAL;
+
+       /*
+        * Obtain the status about this packet.
+        */
+       *signal = rt2x00_get_field32(word2, RXD_W2_SIGNAL);
+       *rssi = rt2x00_get_field32(word2, RXD_W2_RSSI) -
+           entry->ring->rt2x00dev->rssi_offset;
+       *ofdm = 0;
+       *size = rt2x00_get_field32(word0, RXD_W0_DATABYTE_COUNT);
+
+       return 0;
+}
+
+/*
+ * Interrupt functions.
+ */
+static void rt2400pci_txdone(struct rt2x00_dev *rt2x00dev, const int queue)
+{
+       struct data_ring *ring = rt2x00lib_get_ring(rt2x00dev, queue);
+       struct data_entry *entry;
+       struct data_desc *txd;
+       u32 word;
+       int tx_status;
+       int retry;
+
+       while (!rt2x00_ring_empty(ring)) {
+               entry = rt2x00_get_data_entry_done(ring);
+               txd = entry->priv;
+               rt2x00_desc_read(txd, 0, &word);
+
+               if (rt2x00_get_field32(word, TXD_W0_OWNER_NIC) ||
+                   !rt2x00_get_field32(word, TXD_W0_VALID))
+                       break;
+
+               /*
+                * Obtain the status about this packet.
+                */
+               tx_status = rt2x00_get_field32(word, TXD_W0_RESULT);
+               retry = rt2x00_get_field32(word, TXD_W0_RETRY_COUNT);
+
+               rt2x00lib_txdone(entry, tx_status, retry);
+
+               /*
+                * Make this entry available for reuse.
+                */
+               entry->flags = 0;
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_desc_write(txd, 0, word);
+               rt2x00_ring_index_done_inc(ring);
+       }
+
+       /*
+        * If the data ring was full before the txdone handler
+        * we must make sure the packet queue in the mac80211 stack
+        * is reenabled when the txdone handler has finished.
+        */
+       entry = ring->entry;
+       if (!rt2x00_ring_full(ring))
+               ieee80211_wake_queue(rt2x00dev->hw,
+                                    entry->tx_status.control.queue);
+}
+
+static irqreturn_t rt2400pci_interrupt(int irq, void *dev_instance)
+{
+       struct rt2x00_dev *rt2x00dev = dev_instance;
+       u32 reg;
+
+       /*
+        * Get the interrupt sources & saved to local variable.
+        * Write register value back to clear pending interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR7, &reg);
+       rt2x00pci_register_write(rt2x00dev, CSR7, reg);
+
+       if (!reg)
+               return IRQ_NONE;
+
+       if (!test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags))
+               return IRQ_HANDLED;
+
+       /*
+        * Handle interrupts, walk through all bits
+        * and run the tasks, the bits are checked in order of
+        * priority.
+        */
+
+       /*
+        * 1 - Beacon timer expired interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TBCN_EXPIRE))
+               rt2x00lib_beacondone(rt2x00dev);
+
+       /*
+        * 2 - Rx ring done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_RXDONE))
+               rt2x00pci_rxdone(rt2x00dev);
+
+       /*
+        * 3 - Atim ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_ATIMRING))
+               rt2400pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_AFTER_BEACON);
+
+       /*
+        * 4 - Priority ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_PRIORING))
+               rt2400pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+
+       /*
+        * 5 - Tx ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_TXRING))
+               rt2400pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+
+       return IRQ_HANDLED;
+}
+
+/*
+ * Device probe functions.
+ */
+static int rt2400pci_validate_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       struct eeprom_93cx6 eeprom;
+       u32 reg;
+       u16 word;
+       u8 *mac;
+
+       rt2x00pci_register_read(rt2x00dev, CSR21, &reg);
+
+       eeprom.data = rt2x00dev;
+       eeprom.register_read = rt2400pci_eepromregister_read;
+       eeprom.register_write = rt2400pci_eepromregister_write;
+       eeprom.width = rt2x00_get_field32(reg, CSR21_TYPE_93C46) ?
+           PCI_EEPROM_WIDTH_93C46 : PCI_EEPROM_WIDTH_93C66;
+       eeprom.reg_data_in = 0;
+       eeprom.reg_data_out = 0;
+       eeprom.reg_data_clock = 0;
+       eeprom.reg_chip_select = 0;
+
+       eeprom_93cx6_multiread(&eeprom, EEPROM_BASE, rt2x00dev->eeprom,
+                              EEPROM_SIZE / sizeof(u16));
+
+       /*
+        * Start validation of the data that has been read.
+        */
+       mac = rt2x00_eeprom_addr(rt2x00dev, EEPROM_MAC_ADDR_0);
+       if (!is_valid_ether_addr(mac)) {
+               random_ether_addr(mac);
+               EEPROM(rt2x00dev, "MAC: " MAC_FMT "\n", MAC_ARG(mac));
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &word);
+       if (word == 0xffff) {
+               ERROR(rt2x00dev, "Invalid EEPROM data detected.\n");
+               return -EINVAL;
+       }
+
+       return 0;
+}
+
+static int rt2400pci_init_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       u16 value;
+       u16 eeprom;
+
+       /*
+        * Read EEPROM word for configuration.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &eeprom);
+
+       /*
+        * Identify RF chipset.
+        */
+       value = rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RF_TYPE);
+       rt2x00pci_register_read(rt2x00dev, CSR0, &reg);
+       rt2x00_set_chip(rt2x00dev, RT2460, value, reg);
+
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2420) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2421)) {
+               ERROR(rt2x00dev, "Invalid RF chipset detected.\n");
+               return -ENODEV;
+       }
+
+       /*
+        * Identify default antenna configuration.
+        */
+       rt2x00dev->hw->conf.antenna_sel_tx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_TX_DEFAULT);
+       rt2x00dev->hw->conf.antenna_sel_rx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RX_DEFAULT);
+
+       /*
+        * Store led mode, for correct led behaviour.
+        */
+       rt2x00dev->led_mode =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_LED_MODE);
+
+       /*
+        * Detect if this device has an hardware controlled radio.
+        */
+       if (rt2x00_get_field16(eeprom, EEPROM_ANTENNA_HARDWARE_RADIO))
+               __set_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags);
+
+       /*
+        * Check if the BBP tuning should be enabled.
+        */
+       if (!rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RX_AGCVGC_TUNING))
+               __set_bit(CONFIG_DISABLE_LINK_TUNING, &rt2x00dev->flags);
+
+       return 0;
+}
+
+/*
+ * RF value list for RF2420 & RF2421
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg[] = {
+       { 1,  0x00022058, 0x000c1fda, 0x00000101, 0 },
+       { 2,  0x00022058, 0x000c1fee, 0x00000101, 0 },
+       { 3,  0x00022058, 0x000c2002, 0x00000101, 0 },
+       { 4,  0x00022058, 0x000c2016, 0x00000101, 0 },
+       { 5,  0x00022058, 0x000c202a, 0x00000101, 0 },
+       { 6,  0x00022058, 0x000c203e, 0x00000101, 0 },
+       { 7,  0x00022058, 0x000c2052, 0x00000101, 0 },
+       { 8,  0x00022058, 0x000c2066, 0x00000101, 0 },
+       { 9,  0x00022058, 0x000c207a, 0x00000101, 0 },
+       { 10, 0x00022058, 0x000c208e, 0x00000101, 0 },
+       { 11, 0x00022058, 0x000c20a2, 0x00000101, 0 },
+       { 12, 0x00022058, 0x000c20b6, 0x00000101, 0 },
+       { 13, 0x00022058, 0x000c20ca, 0x00000101, 0 },
+       { 14, 0x00022058, 0x000c20fa, 0x00000101, 0 },
+};
+
+static void rt2400pci_probe_hw_mode(struct rt2x00_dev *rt2x00dev)
+{
+       struct hw_mode_spec *spec = &rt2x00dev->spec;
+       u8 *txpower;
+       unsigned int i;
+
+       /*
+        * Initialize all hw fields.
+        */
+       rt2x00dev->hw->flags =
+           IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING |
+           IEEE80211_HW_MONITOR_DURING_OPER |
+           IEEE80211_HW_NO_PROBE_FILTERING;
+       rt2x00dev->hw->extra_tx_headroom = 0;
+       rt2x00dev->hw->max_signal = MAX_SIGNAL;
+       rt2x00dev->hw->max_rssi = MAX_RX_SSI;
+       rt2x00dev->hw->queues = 2;
+
+       SET_IEEE80211_DEV(rt2x00dev->hw, &rt2x00dev_pci(rt2x00dev)->dev);
+       SET_IEEE80211_PERM_ADDR(rt2x00dev->hw,
+                               rt2x00_eeprom_addr(rt2x00dev,
+                                                  EEPROM_MAC_ADDR_0));
+
+       /*
+        * Convert tx_power array in eeprom.
+        */
+       txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_START);
+       for (i = 0; i < 14; i++)
+               txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+       /*
+        * Initialize hw_mode information.
+        */
+       spec->num_modes = 1;
+       spec->num_rates = 4;
+       spec->tx_power_a = NULL;
+       spec->tx_power_bg = txpower;
+       spec->tx_power_default = DEFAULT_TXPOWER;
+
+       spec->num_channels = ARRAY_SIZE(rf_vals_bg);
+       spec->channels = rf_vals_bg;
+}
+
+static int rt2400pci_probe_hw(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       /*
+        * Allocate eeprom data.
+        */
+       retval = rt2400pci_validate_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt2400pci_init_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       /*
+        * Initialize hw specifications.
+        */
+       rt2400pci_probe_hw_mode(rt2x00dev);
+
+       /*
+        * This device requires the beacon ring
+        */
+       __set_bit(REQUIRE_BEACON_RING, &rt2x00dev->flags);
+
+       /*
+        * Set the rssi offset.
+        */
+       rt2x00dev->rssi_offset = DEFAULT_RSSI_OFFSET;
+
+       return 0;
+}
+
+/*
+ * IEEE80211 stack callback functions.
+ */
+static int rt2400pci_set_retry_limit(struct ieee80211_hw *hw,
+                                    u32 short_retry, u32 long_retry)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_LONG_RETRY, long_retry);
+       rt2x00_set_field32(&reg, CSR11_SHORT_RETRY, short_retry);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       return 0;
+}
+
+static int rt2400pci_conf_tx(struct ieee80211_hw *hw,
+                            int queue,
+                            const struct ieee80211_tx_queue_params *params)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       /*
+        * We don't support variating cw_min and cw_max variables
+        * per queue. So by default we only configure the TX queue,
+        * and ignore all other configurations.
+        */
+       if (queue != IEEE80211_TX_QUEUE_DATA0)
+               return -EINVAL;
+
+       if (rt2x00mac_conf_tx(hw, queue, params))
+               return -EINVAL;
+
+       /*
+        * Write configuration to register.
+        */
+       rt2400pci_config_cw(rt2x00dev, &rt2x00dev->tx->tx_params);
+
+       return 0;
+}
+
+static u64 rt2400pci_get_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u64 tsf;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR17, &reg);
+       tsf = (u64) rt2x00_get_field32(reg, CSR17_HIGH_TSFTIMER) << 32;
+       rt2x00pci_register_read(rt2x00dev, CSR16, &reg);
+       tsf |= rt2x00_get_field32(reg, CSR16_LOW_TSFTIMER);
+
+       return tsf;
+}
+
+static void rt2400pci_reset_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       rt2x00pci_register_write(rt2x00dev, CSR16, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR17, 0);
+}
+
+static int rt2400pci_tx_last_beacon(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR15, &reg);
+       return rt2x00_get_field32(reg, CSR15_BEACON_SENT);
+}
+
+static const struct ieee80211_ops rt2400pci_mac80211_ops = {
+       .tx                     = rt2x00mac_tx,
+       .add_interface          = rt2x00mac_add_interface,
+       .remove_interface       = rt2x00mac_remove_interface,
+       .config                 = rt2x00mac_config,
+       .config_interface       = rt2x00mac_config_interface,
+       .set_multicast_list     = rt2x00mac_set_multicast_list,
+       .get_stats              = rt2x00mac_get_stats,
+       .set_retry_limit        = rt2400pci_set_retry_limit,
+       .conf_tx                = rt2400pci_conf_tx,
+       .get_tx_stats           = rt2x00mac_get_tx_stats,
+       .get_tsf                = rt2400pci_get_tsf,
+       .reset_tsf              = rt2400pci_reset_tsf,
+       .beacon_update          = rt2x00pci_beacon_update,
+       .tx_last_beacon         = rt2400pci_tx_last_beacon,
+};
+
+static const struct rt2x00lib_ops rt2400pci_rt2x00_ops = {
+       .irq_handler            = rt2400pci_interrupt,
+       .probe_hw               = rt2400pci_probe_hw,
+       .initialize             = rt2x00pci_initialize,
+       .uninitialize           = rt2x00pci_uninitialize,
+       .set_device_state       = rt2400pci_set_device_state,
+#ifdef CONFIG_RT2400PCI_RFKILL
+       .rfkill_poll            = rt2400pci_rfkill_poll,
+#endif /* CONFIG_RT2400PCI_RFKILL */
+       .link_stats             = rt2400pci_link_stats,
+       .reset_tuner            = rt2400pci_reset_tuner,
+       .link_tuner             = rt2400pci_link_tuner,
+       .write_tx_desc          = rt2400pci_write_tx_desc,
+       .write_tx_data          = rt2x00pci_write_tx_data,
+       .kick_tx_queue          = rt2400pci_kick_tx_queue,
+       .fill_rxdone            = rt2400pci_fill_rxdone,
+       .config_mac_addr        = rt2400pci_config_mac_addr,
+       .config_bssid           = rt2400pci_config_bssid,
+       .config_packet_filter   = rt2400pci_config_packet_filter,
+       .config_type            = rt2400pci_config_type,
+       .config                 = rt2400pci_config,
+};
+
+static const struct rt2x00_ops rt2400pci_ops = {
+       .name           = DRV_NAME,
+       .rxd_size       = RXD_DESC_SIZE,
+       .txd_size       = TXD_DESC_SIZE,
+       .eeprom_size    = EEPROM_SIZE,
+       .rf_size        = RF_SIZE,
+       .lib            = &rt2400pci_rt2x00_ops,
+       .hw             = &rt2400pci_mac80211_ops,
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       .debugfs        = &rt2400pci_rt2x00debug,
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * RT2400pci module information.
+ */
+static struct pci_device_id rt2400pci_device_table[] = {
+       { PCI_DEVICE(0x1814, 0x0101), PCI_DEVICE_DATA(&rt2400pci_ops) },
+       { 0, }
+};
+
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("Ralink RT2400 PCI & PCMCIA Wireless LAN driver.");
+MODULE_SUPPORTED_DEVICE("Ralink RT2460 PCI & PCMCIA chipset based cards");
+MODULE_DEVICE_TABLE(pci, rt2400pci_device_table);
+MODULE_LICENSE("GPL");
+
+static struct pci_driver rt2400pci_driver = {
+       .name           = DRV_NAME,
+       .id_table       = rt2400pci_device_table,
+       .probe          = rt2x00pci_probe,
+       .remove         = __devexit_p(rt2x00pci_remove),
+       .suspend        = rt2x00pci_suspend,
+       .resume         = rt2x00pci_resume,
+};
+
+static int __init rt2400pci_init(void)
+{
+       return pci_register_driver(&rt2400pci_driver);
+}
+
+static void __exit rt2400pci_exit(void)
+{
+       pci_unregister_driver(&rt2400pci_driver);
+}
+
+module_init(rt2400pci_init);
+module_exit(rt2400pci_exit);
diff --git a/drivers/net/wireless/rt2x00/rt2400pci.h b/drivers/net/wireless/rt2x00/rt2400pci.h
new file mode 100644 (file)
index 0000000..ae22501
--- /dev/null
@@ -0,0 +1,943 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2400pci
+       Abstract: Data structures and registers for the rt2400pci module.
+       Supported chipsets: RT2460.
+ */
+
+#ifndef RT2400PCI_H
+#define RT2400PCI_H
+
+/*
+ * RF chip defines.
+ */
+#define RF2420                         0x0000
+#define RF2421                         0x0001
+
+/*
+ * Signal information.
+ * Defaul offset is required for RSSI <-> dBm conversion.
+ */
+#define MAX_SIGNAL                     100
+#define MAX_RX_SSI                     -1
+#define DEFAULT_RSSI_OFFSET            100
+
+/*
+ * Register layout information.
+ */
+#define CSR_REG_BASE                   0x0000
+#define CSR_REG_SIZE                   0x014c
+#define EEPROM_BASE                    0x0000
+#define EEPROM_SIZE                    0x0100
+#define BBP_SIZE                       0x0020
+#define RF_SIZE                                0x0010
+
+/*
+ * Control/Status Registers(CSR).
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * CSR0: ASIC revision number.
+ */
+#define CSR0                           0x0000
+
+/*
+ * CSR1: System control register.
+ * SOFT_RESET: Software reset, 1: reset, 0: normal.
+ * BBP_RESET: Hardware reset, 1: reset, 0, release.
+ * HOST_READY: Host ready after initialization.
+ */
+#define CSR1                           0x0004
+#define CSR1_SOFT_RESET                        FIELD32(0x00000001)
+#define CSR1_BBP_RESET                 FIELD32(0x00000002)
+#define CSR1_HOST_READY                        FIELD32(0x00000004)
+
+/*
+ * CSR2: System admin status register (invalid).
+ */
+#define CSR2                           0x0008
+
+/*
+ * CSR3: STA MAC address register 0.
+ */
+#define CSR3                           0x000c
+#define CSR3_BYTE0                     FIELD32(0x000000ff)
+#define CSR3_BYTE1                     FIELD32(0x0000ff00)
+#define CSR3_BYTE2                     FIELD32(0x00ff0000)
+#define CSR3_BYTE3                     FIELD32(0xff000000)
+
+/*
+ * CSR4: STA MAC address register 1.
+ */
+#define CSR4                           0x0010
+#define CSR4_BYTE4                     FIELD32(0x000000ff)
+#define CSR4_BYTE5                     FIELD32(0x0000ff00)
+
+/*
+ * CSR5: BSSID register 0.
+ */
+#define CSR5                           0x0014
+#define CSR5_BYTE0                     FIELD32(0x000000ff)
+#define CSR5_BYTE1                     FIELD32(0x0000ff00)
+#define CSR5_BYTE2                     FIELD32(0x00ff0000)
+#define CSR5_BYTE3                     FIELD32(0xff000000)
+
+/*
+ * CSR6: BSSID register 1.
+ */
+#define CSR6                           0x0018
+#define CSR6_BYTE4                     FIELD32(0x000000ff)
+#define CSR6_BYTE5                     FIELD32(0x0000ff00)
+
+/*
+ * CSR7: Interrupt source register.
+ * Write 1 to clear interrupt.
+ * TBCN_EXPIRE: Beacon timer expired interrupt.
+ * TWAKE_EXPIRE: Wakeup timer expired interrupt.
+ * TATIMW_EXPIRE: Timer of atim window expired interrupt.
+ * TXDONE_TXRING: Tx ring transmit done interrupt.
+ * TXDONE_ATIMRING: Atim ring transmit done interrupt.
+ * TXDONE_PRIORING: Priority ring transmit done interrupt.
+ * RXDONE: Receive done interrupt.
+ */
+#define CSR7                           0x001c
+#define CSR7_TBCN_EXPIRE               FIELD32(0x00000001)
+#define CSR7_TWAKE_EXPIRE              FIELD32(0x00000002)
+#define CSR7_TATIMW_EXPIRE             FIELD32(0x00000004)
+#define CSR7_TXDONE_TXRING             FIELD32(0x00000008)
+#define CSR7_TXDONE_ATIMRING           FIELD32(0x00000010)
+#define CSR7_TXDONE_PRIORING           FIELD32(0x00000020)
+#define CSR7_RXDONE                    FIELD32(0x00000040)
+
+/*
+ * CSR8: Interrupt mask register.
+ * Write 1 to mask interrupt.
+ * TBCN_EXPIRE: Beacon timer expired interrupt.
+ * TWAKE_EXPIRE: Wakeup timer expired interrupt.
+ * TATIMW_EXPIRE: Timer of atim window expired interrupt.
+ * TXDONE_TXRING: Tx ring transmit done interrupt.
+ * TXDONE_ATIMRING: Atim ring transmit done interrupt.
+ * TXDONE_PRIORING: Priority ring transmit done interrupt.
+ * RXDONE: Receive done interrupt.
+ */
+#define CSR8                           0x0020
+#define CSR8_TBCN_EXPIRE               FIELD32(0x00000001)
+#define CSR8_TWAKE_EXPIRE              FIELD32(0x00000002)
+#define CSR8_TATIMW_EXPIRE             FIELD32(0x00000004)
+#define CSR8_TXDONE_TXRING             FIELD32(0x00000008)
+#define CSR8_TXDONE_ATIMRING           FIELD32(0x00000010)
+#define CSR8_TXDONE_PRIORING           FIELD32(0x00000020)
+#define CSR8_RXDONE                    FIELD32(0x00000040)
+
+/*
+ * CSR9: Maximum frame length register.
+ * MAX_FRAME_UNIT: Maximum frame length in 128b unit, default: 12.
+ */
+#define CSR9                           0x0024
+#define CSR9_MAX_FRAME_UNIT            FIELD32(0x00000f80)
+
+/*
+ * CSR11: Back-off control register.
+ * CWMIN: CWmin. Default cwmin is 31 (2^5 - 1).
+ * CWMAX: CWmax. Default cwmax is 1023 (2^10 - 1).
+ * SLOT_TIME: Slot time, default is 20us for 802.11b.
+ * LONG_RETRY: Long retry count.
+ * SHORT_RETRY: Short retry count.
+ */
+#define CSR11                          0x002c
+#define CSR11_CWMIN                    FIELD32(0x0000000f)
+#define CSR11_CWMAX                    FIELD32(0x000000f0)
+#define CSR11_SLOT_TIME                        FIELD32(0x00001f00)
+#define CSR11_LONG_RETRY               FIELD32(0x00ff0000)
+#define CSR11_SHORT_RETRY              FIELD32(0xff000000)
+
+/*
+ * CSR12: Synchronization configuration register 0.
+ * All units in 1/16 TU.
+ * BEACON_INTERVAL: Beacon interval, default is 100 TU.
+ * CFPMAX_DURATION: Cfp maximum duration, default is 100 TU.
+ */
+#define CSR12                          0x0030
+#define CSR12_BEACON_INTERVAL          FIELD32(0x0000ffff)
+#define CSR12_CFP_MAX_DURATION         FIELD32(0xffff0000)
+
+/*
+ * CSR13: Synchronization configuration register 1.
+ * All units in 1/16 TU.
+ * ATIMW_DURATION: Atim window duration.
+ * CFP_PERIOD: Cfp period, default is 0 TU.
+ */
+#define CSR13                          0x0034
+#define CSR13_ATIMW_DURATION           FIELD32(0x0000ffff)
+#define CSR13_CFP_PERIOD               FIELD32(0x00ff0000)
+
+/*
+ * CSR14: Synchronization control register.
+ * TSF_COUNT: Enable tsf auto counting.
+ * TSF_SYNC: Tsf sync, 0: disable, 1: infra, 2: ad-hoc/master mode.
+ * TBCN: Enable tbcn with reload value.
+ * TCFP: Enable tcfp & cfp / cp switching.
+ * TATIMW: Enable tatimw & atim window switching.
+ * BEACON_GEN: Enable beacon generator.
+ * CFP_COUNT_PRELOAD: Cfp count preload value.
+ * TBCM_PRELOAD: Tbcn preload value in units of 64us.
+ */
+#define CSR14                          0x0038
+#define CSR14_TSF_COUNT                        FIELD32(0x00000001)
+#define CSR14_TSF_SYNC                 FIELD32(0x00000006)
+#define CSR14_TBCN                     FIELD32(0x00000008)
+#define CSR14_TCFP                     FIELD32(0x00000010)
+#define CSR14_TATIMW                   FIELD32(0x00000020)
+#define CSR14_BEACON_GEN               FIELD32(0x00000040)
+#define CSR14_CFP_COUNT_PRELOAD                FIELD32(0x0000ff00)
+#define CSR14_TBCM_PRELOAD             FIELD32(0xffff0000)
+
+/*
+ * CSR15: Synchronization status register.
+ * CFP: ASIC is in contention-free period.
+ * ATIMW: ASIC is in ATIM window.
+ * BEACON_SENT: Beacon is send.
+ */
+#define CSR15                          0x003c
+#define CSR15_CFP                      FIELD32(0x00000001)
+#define CSR15_ATIMW                    FIELD32(0x00000002)
+#define CSR15_BEACON_SENT              FIELD32(0x00000004)
+
+/*
+ * CSR16: TSF timer register 0.
+ */
+#define CSR16                          0x0040
+#define CSR16_LOW_TSFTIMER             FIELD32(0xffffffff)
+
+/*
+ * CSR17: TSF timer register 1.
+ */
+#define CSR17                          0x0044
+#define CSR17_HIGH_TSFTIMER            FIELD32(0xffffffff)
+
+/*
+ * CSR18: IFS timer register 0.
+ * SIFS: Sifs, default is 10 us.
+ * PIFS: Pifs, default is 30 us.
+ */
+#define CSR18                          0x0048
+#define CSR18_SIFS                     FIELD32(0x0000ffff)
+#define CSR18_PIFS                     FIELD32(0xffff0000)
+
+/*
+ * CSR19: IFS timer register 1.
+ * DIFS: Difs, default is 50 us.
+ * EIFS: Eifs, default is 364 us.
+ */
+#define CSR19                          0x004c
+#define CSR19_DIFS                     FIELD32(0x0000ffff)
+#define CSR19_EIFS                     FIELD32(0xffff0000)
+
+/*
+ * CSR20: Wakeup timer register.
+ * DELAY_AFTER_TBCN: Delay after tbcn expired in units of 1/16 TU.
+ * TBCN_BEFORE_WAKEUP: Number of beacon before wakeup.
+ * AUTOWAKE: Enable auto wakeup / sleep mechanism.
+ */
+#define CSR20                          0x0050
+#define CSR20_DELAY_AFTER_TBCN         FIELD32(0x0000ffff)
+#define CSR20_TBCN_BEFORE_WAKEUP       FIELD32(0x00ff0000)
+#define CSR20_AUTOWAKE                 FIELD32(0x01000000)
+
+/*
+ * CSR21: EEPROM control register.
+ * RELOAD: Write 1 to reload eeprom content.
+ * TYPE_93C46: 1: 93c46, 0:93c66.
+ */
+#define CSR21                          0x0054
+#define CSR21_RELOAD                   FIELD32(0x00000001)
+#define CSR21_EEPROM_DATA_CLOCK                FIELD32(0x00000002)
+#define CSR21_EEPROM_CHIP_SELECT       FIELD32(0x00000004)
+#define CSR21_EEPROM_DATA_IN           FIELD32(0x00000008)
+#define CSR21_EEPROM_DATA_OUT          FIELD32(0x00000010)
+#define CSR21_TYPE_93C46               FIELD32(0x00000020)
+
+/*
+ * CSR22: CFP control register.
+ * CFP_DURATION_REMAIN: Cfp duration remain, in units of TU.
+ * RELOAD_CFP_DURATION: Write 1 to reload cfp duration remain.
+ */
+#define CSR22                          0x0058
+#define CSR22_CFP_DURATION_REMAIN      FIELD32(0x0000ffff)
+#define CSR22_RELOAD_CFP_DURATION      FIELD32(0x00010000)
+
+/*
+ * Transmit related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * TXCSR0: TX Control Register.
+ * KICK_TX: Kick tx ring.
+ * KICK_ATIM: Kick atim ring.
+ * KICK_PRIO: Kick priority ring.
+ * ABORT: Abort all transmit related ring operation.
+ */
+#define TXCSR0                         0x0060
+#define TXCSR0_KICK_TX                 FIELD32(0x00000001)
+#define TXCSR0_KICK_ATIM               FIELD32(0x00000002)
+#define TXCSR0_KICK_PRIO               FIELD32(0x00000004)
+#define TXCSR0_ABORT                   FIELD32(0x00000008)
+
+/*
+ * TXCSR1: TX Configuration Register.
+ * ACK_TIMEOUT: Ack timeout, default = sifs + 2*slottime + acktime @ 1mbps.
+ * ACK_CONSUME_TIME: Ack consume time, default = sifs + acktime @ 1mbps.
+ * TSF_OFFSET: Insert tsf offset.
+ * AUTORESPONDER: Enable auto responder which include ack & cts.
+ */
+#define TXCSR1                         0x0064
+#define TXCSR1_ACK_TIMEOUT             FIELD32(0x000001ff)
+#define TXCSR1_ACK_CONSUME_TIME                FIELD32(0x0003fe00)
+#define TXCSR1_TSF_OFFSET              FIELD32(0x00fc0000)
+#define TXCSR1_AUTORESPONDER           FIELD32(0x01000000)
+
+/*
+ * TXCSR2: Tx descriptor configuration register.
+ * TXD_SIZE: Tx descriptor size, default is 48.
+ * NUM_TXD: Number of tx entries in ring.
+ * NUM_ATIM: Number of atim entries in ring.
+ * NUM_PRIO: Number of priority entries in ring.
+ */
+#define TXCSR2                         0x0068
+#define TXCSR2_TXD_SIZE                        FIELD32(0x000000ff)
+#define TXCSR2_NUM_TXD                 FIELD32(0x0000ff00)
+#define TXCSR2_NUM_ATIM                        FIELD32(0x00ff0000)
+#define TXCSR2_NUM_PRIO                        FIELD32(0xff000000)
+
+/*
+ * TXCSR3: TX Ring Base address register.
+ */
+#define TXCSR3                         0x006c
+#define TXCSR3_TX_RING_REGISTER                FIELD32(0xffffffff)
+
+/*
+ * TXCSR4: TX Atim Ring Base address register.
+ */
+#define TXCSR4                         0x0070
+#define TXCSR4_ATIM_RING_REGISTER      FIELD32(0xffffffff)
+
+/*
+ * TXCSR5: TX Prio Ring Base address register.
+ */
+#define TXCSR5                         0x0074
+#define TXCSR5_PRIO_RING_REGISTER      FIELD32(0xffffffff)
+
+/*
+ * TXCSR6: Beacon Base address register.
+ */
+#define TXCSR6                         0x0078
+#define TXCSR6_BEACON_RING_REGISTER    FIELD32(0xffffffff)
+
+/*
+ * TXCSR7: Auto responder control register.
+ * AR_POWERMANAGEMENT: Auto responder power management bit.
+ */
+#define TXCSR7                         0x007c
+#define TXCSR7_AR_POWERMANAGEMENT      FIELD32(0x00000001)
+
+/*
+ * Receive related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * RXCSR0: RX Control Register.
+ * DISABLE_RX: Disable rx engine.
+ * DROP_CRC: Drop crc error.
+ * DROP_PHYSICAL: Drop physical error.
+ * DROP_CONTROL: Drop control frame.
+ * DROP_NOT_TO_ME: Drop not to me unicast frame.
+ * DROP_TODS: Drop frame tods bit is true.
+ * DROP_VERSION_ERROR: Drop version error frame.
+ * PASS_CRC: Pass all packets with crc attached.
+ */
+#define RXCSR0                         0x0080
+#define RXCSR0_DISABLE_RX              FIELD32(0x00000001)
+#define RXCSR0_DROP_CRC                        FIELD32(0x00000002)
+#define RXCSR0_DROP_PHYSICAL           FIELD32(0x00000004)
+#define RXCSR0_DROP_CONTROL            FIELD32(0x00000008)
+#define RXCSR0_DROP_NOT_TO_ME          FIELD32(0x00000010)
+#define RXCSR0_DROP_TODS               FIELD32(0x00000020)
+#define RXCSR0_DROP_VERSION_ERROR      FIELD32(0x00000040)
+#define RXCSR0_PASS_CRC                        FIELD32(0x00000080)
+
+/*
+ * RXCSR1: RX descriptor configuration register.
+ * RXD_SIZE: Rx descriptor size, default is 32b.
+ * NUM_RXD: Number of rx entries in ring.
+ */
+#define RXCSR1                         0x0084
+#define RXCSR1_RXD_SIZE                        FIELD32(0x000000ff)
+#define RXCSR1_NUM_RXD                 FIELD32(0x0000ff00)
+
+/*
+ * RXCSR2: RX Ring base address register.
+ */
+#define RXCSR2                         0x0088
+#define RXCSR2_RX_RING_REGISTER                FIELD32(0xffffffff)
+
+/*
+ * RXCSR3: BBP ID register for Rx operation.
+ * BBP_ID#: BBP register # id.
+ * BBP_ID#_VALID: BBP register # id is valid or not.
+ */
+#define RXCSR3                         0x0090
+#define RXCSR3_BBP_ID0                 FIELD32(0x0000007f)
+#define RXCSR3_BBP_ID0_VALID           FIELD32(0x00000080)
+#define RXCSR3_BBP_ID1                 FIELD32(0x00007f00)
+#define RXCSR3_BBP_ID1_VALID           FIELD32(0x00008000)
+#define RXCSR3_BBP_ID2                 FIELD32(0x007f0000)
+#define RXCSR3_BBP_ID2_VALID           FIELD32(0x00800000)
+#define RXCSR3_BBP_ID3                 FIELD32(0x7f000000)
+#define RXCSR3_BBP_ID3_VALID           FIELD32(0x80000000)
+
+/*
+ * RXCSR4: BBP ID register for Rx operation.
+ * BBP_ID#: BBP register # id.
+ * BBP_ID#_VALID: BBP register # id is valid or not.
+ */
+#define RXCSR4                         0x0094
+#define RXCSR4_BBP_ID4                 FIELD32(0x0000007f)
+#define RXCSR4_BBP_ID4_VALID           FIELD32(0x00000080)
+#define RXCSR4_BBP_ID5                 FIELD32(0x00007f00)
+#define RXCSR4_BBP_ID5_VALID           FIELD32(0x00008000)
+
+/*
+ * ARCSR0: Auto Responder PLCP config register 0.
+ * ARCSR0_AR_BBP_DATA#: Auto responder BBP register # data.
+ * ARCSR0_AR_BBP_ID#: Auto responder BBP register # Id.
+ */
+#define ARCSR0                         0x0098
+#define ARCSR0_AR_BBP_DATA0            FIELD32(0x000000ff)
+#define ARCSR0_AR_BBP_ID0              FIELD32(0x0000ff00)
+#define ARCSR0_AR_BBP_DATA1            FIELD32(0x00ff0000)
+#define ARCSR0_AR_BBP_ID1              FIELD32(0xff000000)
+
+/*
+ * ARCSR1: Auto Responder PLCP config register 1.
+ * ARCSR0_AR_BBP_DATA#: Auto responder BBP register # data.
+ * ARCSR0_AR_BBP_ID#: Auto responder BBP register # Id.
+ */
+#define ARCSR1                         0x009c
+#define ARCSR1_AR_BBP_DATA2            FIELD32(0x000000ff)
+#define ARCSR1_AR_BBP_ID2              FIELD32(0x0000ff00)
+#define ARCSR1_AR_BBP_DATA3            FIELD32(0x00ff0000)
+#define ARCSR1_AR_BBP_ID3              FIELD32(0xff000000)
+
+/*
+ * Miscellaneous Registers.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * PCICSR: PCI control register.
+ * BIG_ENDIAN: 1: big endian, 0: little endian.
+ * RX_TRESHOLD: Rx threshold in dw to start pci access
+ * 0: 16dw (default), 1: 8dw, 2: 4dw, 3: 32dw.
+ * TX_TRESHOLD: Tx threshold in dw to start pci access
+ * 0: 0dw (default), 1: 1dw, 2: 4dw, 3: forward.
+ * BURST_LENTH: Pci burst length 0: 4dw (default, 1: 8dw, 2: 16dw, 3:32dw.
+ * ENABLE_CLK: Enable clk_run, pci clock can't going down to non-operational.
+ */
+#define PCICSR                         0x008c
+#define PCICSR_BIG_ENDIAN              FIELD32(0x00000001)
+#define PCICSR_RX_TRESHOLD             FIELD32(0x00000006)
+#define PCICSR_TX_TRESHOLD             FIELD32(0x00000018)
+#define PCICSR_BURST_LENTH             FIELD32(0x00000060)
+#define PCICSR_ENABLE_CLK              FIELD32(0x00000080)
+
+/*
+ * CNT0: FCS error count.
+ * FCS_ERROR: FCS error count, cleared when read.
+ */
+#define CNT0                           0x00a0
+#define CNT0_FCS_ERROR                 FIELD32(0x0000ffff)
+
+/*
+ * Statistic Register.
+ * CNT1: PLCP error count.
+ * CNT2: Long error count.
+ * CNT3: CCA false alarm count.
+ * CNT4: Rx FIFO overflow count.
+ * CNT5: Tx FIFO underrun count.
+ */
+#define TIMECSR2                       0x00a8
+#define CNT1                           0x00ac
+#define CNT2                           0x00b0
+#define TIMECSR3                       0x00b4
+#define CNT3                           0x00b8
+#define CNT4                           0x00bc
+#define CNT5                           0x00c0
+
+/*
+ * Baseband Control Register.
+ */
+
+/*
+ * PWRCSR0: Power mode configuration register.
+ */
+#define PWRCSR0                                0x00c4
+
+/*
+ * Power state transition time registers.
+ */
+#define PSCSR0                         0x00c8
+#define PSCSR1                         0x00cc
+#define PSCSR2                         0x00d0
+#define PSCSR3                         0x00d4
+
+/*
+ * PWRCSR1: Manual power control / status register.
+ * Allowed state: 0 deep_sleep, 1: sleep, 2: standby, 3: awake.
+ * SET_STATE: Set state. Write 1 to trigger, self cleared.
+ * BBP_DESIRE_STATE: BBP desired state.
+ * RF_DESIRE_STATE: RF desired state.
+ * BBP_CURR_STATE: BBP current state.
+ * RF_CURR_STATE: RF current state.
+ * PUT_TO_SLEEP: Put to sleep. Write 1 to trigger, self cleared.
+ */
+#define PWRCSR1                                0x00d8
+#define PWRCSR1_SET_STATE              FIELD32(0x00000001)
+#define PWRCSR1_BBP_DESIRE_STATE       FIELD32(0x00000006)
+#define PWRCSR1_RF_DESIRE_STATE                FIELD32(0x00000018)
+#define PWRCSR1_BBP_CURR_STATE         FIELD32(0x00000060)
+#define PWRCSR1_RF_CURR_STATE          FIELD32(0x00000180)
+#define PWRCSR1_PUT_TO_SLEEP           FIELD32(0x00000200)
+
+/*
+ * TIMECSR: Timer control register.
+ * US_COUNT: 1 us timer count in units of clock cycles.
+ * US_64_COUNT: 64 us timer count in units of 1 us timer.
+ * BEACON_EXPECT: Beacon expect window.
+ */
+#define TIMECSR                                0x00dc
+#define TIMECSR_US_COUNT               FIELD32(0x000000ff)
+#define TIMECSR_US_64_COUNT            FIELD32(0x0000ff00)
+#define TIMECSR_BEACON_EXPECT          FIELD32(0x00070000)
+
+/*
+ * MACCSR0: MAC configuration register 0.
+ */
+#define MACCSR0                                0x00e0
+
+/*
+ * MACCSR1: MAC configuration register 1.
+ * KICK_RX: Kick one-shot rx in one-shot rx mode.
+ * ONESHOT_RXMODE: Enable one-shot rx mode for debugging.
+ * BBPRX_RESET_MODE: Ralink bbp rx reset mode.
+ * AUTO_TXBBP: Auto tx logic access bbp control register.
+ * AUTO_RXBBP: Auto rx logic access bbp control register.
+ * LOOPBACK: Loopback mode. 0: normal, 1: internal, 2: external, 3:rsvd.
+ * INTERSIL_IF: Intersil if calibration pin.
+ */
+#define MACCSR1                                0x00e4
+#define MACCSR1_KICK_RX                        FIELD32(0x00000001)
+#define MACCSR1_ONESHOT_RXMODE         FIELD32(0x00000002)
+#define MACCSR1_BBPRX_RESET_MODE       FIELD32(0x00000004)
+#define MACCSR1_AUTO_TXBBP             FIELD32(0x00000008)
+#define MACCSR1_AUTO_RXBBP             FIELD32(0x00000010)
+#define MACCSR1_LOOPBACK               FIELD32(0x00000060)
+#define MACCSR1_INTERSIL_IF            FIELD32(0x00000080)
+
+/*
+ * RALINKCSR: Ralink Rx auto-reset BBCR.
+ * AR_BBP_DATA#: Auto reset BBP register # data.
+ * AR_BBP_ID#: Auto reset BBP register # id.
+ */
+#define RALINKCSR                      0x00e8
+#define RALINKCSR_AR_BBP_DATA0         FIELD32(0x000000ff)
+#define RALINKCSR_AR_BBP_ID0           FIELD32(0x0000ff00)
+#define RALINKCSR_AR_BBP_DATA1         FIELD32(0x00ff0000)
+#define RALINKCSR_AR_BBP_ID1           FIELD32(0xff000000)
+
+/*
+ * BCNCSR: Beacon interval control register.
+ * CHANGE: Write one to change beacon interval.
+ * DELTATIME: The delta time value.
+ * NUM_BEACON: Number of beacon according to mode.
+ * MODE: Please refer to asic specs.
+ * PLUS: Plus or minus delta time value.
+ */
+#define BCNCSR                         0x00ec
+#define BCNCSR_CHANGE                  FIELD32(0x00000001)
+#define BCNCSR_DELTATIME               FIELD32(0x0000001e)
+#define BCNCSR_NUM_BEACON              FIELD32(0x00001fe0)
+#define BCNCSR_MODE                    FIELD32(0x00006000)
+#define BCNCSR_PLUS                    FIELD32(0x00008000)
+
+/*
+ * BBP / RF / IF Control Register.
+ */
+
+/*
+ * BBPCSR: BBP serial control register.
+ * VALUE: Register value to program into BBP.
+ * REGNUM: Selected BBP register.
+ * BUSY: 1: asic is busy execute BBP programming.
+ * WRITE_CONTROL: 1: write BBP, 0: read BBP.
+ */
+#define BBPCSR                         0x00f0
+#define BBPCSR_VALUE                   FIELD32(0x000000ff)
+#define BBPCSR_REGNUM                  FIELD32(0x00007f00)
+#define BBPCSR_BUSY                    FIELD32(0x00008000)
+#define BBPCSR_WRITE_CONTROL           FIELD32(0x00010000)
+
+/*
+ * RFCSR: RF serial control register.
+ * VALUE: Register value + id to program into rf/if.
+ * NUMBER_OF_BITS: Number of bits used in value (i:20, rfmd:22).
+ * IF_SELECT: Chip to program: 0: rf, 1: if.
+ * PLL_LD: Rf pll_ld status.
+ * BUSY: 1: asic is busy execute rf programming.
+ */
+#define RFCSR                          0x00f4
+#define RFCSR_VALUE                    FIELD32(0x00ffffff)
+#define RFCSR_NUMBER_OF_BITS           FIELD32(0x1f000000)
+#define RFCSR_IF_SELECT                        FIELD32(0x20000000)
+#define RFCSR_PLL_LD                   FIELD32(0x40000000)
+#define RFCSR_BUSY                     FIELD32(0x80000000)
+
+/*
+ * LEDCSR: LED control register.
+ * ON_PERIOD: On period, default 70ms.
+ * OFF_PERIOD: Off period, default 30ms.
+ * LINK: 0: linkoff, 1: linkup.
+ * ACTIVITY: 0: idle, 1: active.
+ */
+#define LEDCSR                         0x00f8
+#define LEDCSR_ON_PERIOD               FIELD32(0x000000ff)
+#define LEDCSR_OFF_PERIOD              FIELD32(0x0000ff00)
+#define LEDCSR_LINK                    FIELD32(0x00010000)
+#define LEDCSR_ACTIVITY                        FIELD32(0x00020000)
+
+/*
+ * ASIC pointer information.
+ * RXPTR: Current RX ring address.
+ * TXPTR: Current Tx ring address.
+ * PRIPTR: Current Priority ring address.
+ * ATIMPTR: Current ATIM ring address.
+ */
+#define RXPTR                          0x0100
+#define TXPTR                          0x0104
+#define PRIPTR                         0x0108
+#define ATIMPTR                                0x010c
+
+/*
+ * GPIO and others.
+ */
+
+/*
+ * GPIOCSR: GPIO control register.
+ */
+#define GPIOCSR                                0x0120
+#define GPIOCSR_BIT0                   FIELD32(0x00000001)
+#define GPIOCSR_BIT1                   FIELD32(0x00000002)
+#define GPIOCSR_BIT2                   FIELD32(0x00000004)
+#define GPIOCSR_BIT3                   FIELD32(0x00000008)
+#define GPIOCSR_BIT4                   FIELD32(0x00000010)
+#define GPIOCSR_BIT5                   FIELD32(0x00000020)
+#define GPIOCSR_BIT6                   FIELD32(0x00000040)
+#define GPIOCSR_BIT7                   FIELD32(0x00000080)
+
+/*
+ * BBPPCSR: BBP Pin control register.
+ */
+#define BBPPCSR                                0x0124
+
+/*
+ * BCNCSR1: Tx BEACON offset time control register.
+ * PRELOAD: Beacon timer offset in units of usec.
+ */
+#define BCNCSR1                                0x0130
+#define BCNCSR1_PRELOAD                        FIELD32(0x0000ffff)
+
+/*
+ * MACCSR2: TX_PE to RX_PE turn-around time control register
+ * DELAY: RX_PE low width, in units of pci clock cycle.
+ */
+#define MACCSR2                                0x0134
+#define MACCSR2_DELAY                  FIELD32(0x000000ff)
+
+/*
+ * ARCSR2: 1 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR2                         0x013c
+#define ARCSR2_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR2_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR2_LENGTH_LOW              FIELD32(0x00ff0000)
+#define ARCSR2_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR3: 2 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR3                         0x0140
+#define ARCSR3_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR3_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR3_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR4: 5.5 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR4                         0x0144
+#define ARCSR4_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR4_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR4_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR5: 11 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR5                         0x0148
+#define ARCSR5_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR5_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR5_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * BBP registers.
+ * The wordsize of the BBP is 8 bits.
+ */
+
+/*
+ * R1: TX antenna control
+ */
+#define BBP_R1_TX_ANTENNA              FIELD8(0x03)
+
+/*
+ * R4: RX antenna control
+ */
+#define BBP_R4_RX_ANTENNA              FIELD8(0x06)
+
+/*
+ * RF registers
+ */
+
+/*
+ * RF 1
+ */
+#define RF1_TUNER                      FIELD32(0x00020000)
+
+/*
+ * RF 3
+ */
+#define RF3_TUNER                      FIELD32(0x00000100)
+#define RF3_TXPOWER                    FIELD32(0x00003e00)
+
+/*
+ * EEPROM content.
+ * The wordsize of the EEPROM is 16 bits.
+ */
+
+/*
+ * HW MAC address.
+ */
+#define EEPROM_MAC_ADDR_0              0x0002
+#define EEPROM_MAC_ADDR_BYTE0          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE1          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR1               0x0003
+#define EEPROM_MAC_ADDR_BYTE2          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE3          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR_2              0x0004
+#define EEPROM_MAC_ADDR_BYTE4          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE5          FIELD16(0xff00)
+
+/*
+ * EEPROM antenna.
+ * ANTENNA_NUM: Number of antenna's.
+ * TX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RF_TYPE: Rf_type of this adapter.
+ * LED_MODE: 0: default, 1: TX/RX activity,2: Single (ignore link), 3: rsvd.
+ * RX_AGCVGC: 0: disable, 1:enable BBP R13 tuning.
+ * HARDWARE_RADIO: 1: Hardware controlled radio. Read GPIO0.
+ */
+#define EEPROM_ANTENNA                 0x0b
+#define EEPROM_ANTENNA_NUM             FIELD16(0x0003)
+#define EEPROM_ANTENNA_TX_DEFAULT      FIELD16(0x000c)
+#define EEPROM_ANTENNA_RX_DEFAULT      FIELD16(0x0030)
+#define EEPROM_ANTENNA_RF_TYPE         FIELD16(0x0040)
+#define EEPROM_ANTENNA_LED_MODE                FIELD16(0x0180)
+#define EEPROM_ANTENNA_RX_AGCVGC_TUNING        FIELD16(0x0200)
+#define EEPROM_ANTENNA_HARDWARE_RADIO  FIELD16(0x0400)
+
+/*
+ * EEPROM BBP.
+ */
+#define EEPROM_BBP_START               0x0c
+#define EEPROM_BBP_SIZE                        7
+#define EEPROM_BBP_VALUE               FIELD16(0x00ff)
+#define EEPROM_BBP_REG_ID              FIELD16(0xff00)
+
+/*
+ * EEPROM TXPOWER
+ */
+#define EEPROM_TXPOWER_START           0x13
+#define EEPROM_TXPOWER_SIZE            7
+#define EEPROM_TXPOWER_1               FIELD16(0x00ff)
+#define EEPROM_TXPOWER_2               FIELD16(0xff00)
+
+/*
+ * DMA descriptor defines.
+ */
+#define TXD_DESC_SIZE                  ( 8 * sizeof(struct data_desc) )
+#define RXD_DESC_SIZE                  ( 8 * sizeof(struct data_desc) )
+
+/*
+ * TX descriptor format for TX, PRIO, ATIM and Beacon Ring.
+ */
+
+/*
+ * Word0
+ */
+#define TXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define TXD_W0_VALID                   FIELD32(0x00000002)
+#define TXD_W0_RESULT                  FIELD32(0x0000001c)
+#define TXD_W0_RETRY_COUNT             FIELD32(0x000000e0)
+#define TXD_W0_MORE_FRAG               FIELD32(0x00000100)
+#define TXD_W0_ACK                     FIELD32(0x00000200)
+#define TXD_W0_TIMESTAMP               FIELD32(0x00000400)
+#define TXD_W0_RTS                     FIELD32(0x00000800)
+#define TXD_W0_IFS                     FIELD32(0x00006000)
+#define TXD_W0_RETRY_MODE              FIELD32(0x00008000)
+#define TXD_W0_AGC                     FIELD32(0x00ff0000)
+#define TXD_W0_R2                      FIELD32(0xff000000)
+
+/*
+ * Word1
+ */
+#define TXD_W1_BUFFER_ADDRESS          FIELD32(0xffffffff)
+
+/*
+ * Word2
+ */
+#define TXD_W2_BUFFER_LENGTH           FIELD32(0x0000ffff)
+#define TXD_W2_DATABYTE_COUNT          FIELD32(0xffff0000)
+
+/*
+ * Word3 & 4: PLCP information
+ */
+#define TXD_W3_PLCP_SIGNAL             FIELD32(0x0000ffff)
+#define TXD_W3_PLCP_SERVICE            FIELD32(0xffff0000)
+#define TXD_W4_PLCP_LENGTH_LOW         FIELD32(0x0000ffff)
+#define TXD_W4_PLCP_LENGTH_HIGH                FIELD32(0xffff0000)
+
+/*
+ * Word5
+ */
+#define TXD_W5_BBCR4                   FIELD32(0x0000ffff)
+#define TXD_W5_AGC_REG                 FIELD32(0x007f0000)
+#define TXD_W5_AGC_REG_VALID           FIELD32(0x00800000)
+#define TXD_W5_XXX_REG                 FIELD32(0x7f000000)
+#define TXD_W5_XXX_REG_VALID           FIELD32(0x80000000)
+
+/*
+ * Word6
+ */
+#define TXD_W6_SK_BUFF                 FIELD32(0xffffffff)
+
+/*
+ * Word7
+ */
+#define TXD_W7_RESERVED                        FIELD32(0xffffffff)
+
+/*
+ * RX descriptor format for RX Ring.
+ */
+
+/*
+ * Word0
+ */
+#define RXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define RXD_W0_UNICAST_TO_ME           FIELD32(0x00000002)
+#define RXD_W0_MULTICAST               FIELD32(0x00000004)
+#define RXD_W0_BROADCAST               FIELD32(0x00000008)
+#define RXD_W0_MY_BSS                  FIELD32(0x00000010)
+#define RXD_W0_CRC_ERROR               FIELD32(0x00000020)
+#define RXD_W0_PHYSICAL_ERROR          FIELD32(0x00000080)
+#define RXD_W0_DATABYTE_COUNT          FIELD32(0xffff0000)
+
+/*
+ * Word1
+ */
+#define RXD_W1_BUFFER_ADDRESS          FIELD32(0xffffffff)
+
+/*
+ * Word2
+ */
+#define RXD_W2_BUFFER_LENGTH           FIELD32(0x0000ffff)
+#define RXD_W2_SIGNAL                  FIELD32(0x00ff0000)
+#define RXD_W2_RSSI                    FIELD32(0xff000000)
+
+/*
+ * Word3
+ */
+#define RXD_W3_BBR2                    FIELD32(0x000000ff)
+#define RXD_W3_BBR3                    FIELD32(0x0000ff00)
+#define RXD_W3_BBR4                    FIELD32(0x00ff0000)
+#define RXD_W3_BBR5                    FIELD32(0xff000000)
+
+/*
+ * Word4
+ */
+#define RXD_W4_RX_END_TIME             FIELD32(0xffffffff)
+
+/*
+ * Word5 & 6 & 7: Reserved
+ */
+#define RXD_W5_RESERVED                        FIELD32(0xffffffff)
+#define RXD_W6_RESERVED                        FIELD32(0xffffffff)
+#define RXD_W7_RESERVED                        FIELD32(0xffffffff)
+
+/*
+ * Macro's for converting txpower from EEPROM to dscape value
+ * and from dscape value to register value.
+ * NOTE: Logics in rt2400pci for txpower are reversed
+ * compared to the other rt2x00 drivers. A higher txpower
+ * value means that the txpower must be lowered. This is
+ * important when converting the value coming from the
+ * dscape stack to the rt2400 acceptable value.
+ */
+#define MIN_TXPOWER    31
+#define MAX_TXPOWER    62
+#define DEFAULT_TXPOWER        39
+
+#define TXPOWER_FROM_DEV(__txpower)                                    \
+({                                                                     \
+       ((__txpower) > MAX_TXPOWER) ? DEFAULT_TXPOWER - MIN_TXPOWER :   \
+       ((__txpower) < MIN_TXPOWER) ? DEFAULT_TXPOWER - MIN_TXPOWER :   \
+       (((__txpower) - MAX_TXPOWER) + MIN_TXPOWER);                    \
+})
+
+#define TXPOWER_TO_DEV(__txpower)                      \
+({                                                     \
+       (__txpower) += MIN_TXPOWER;                     \
+       ((__txpower) <= MIN_TXPOWER) ? MAX_TXPOWER :    \
+       (((__txpower) >= MAX_TXPOWER) ? MIN_TXPOWER :   \
+       (MAX_TXPOWER - ((__txpower) - MIN_TXPOWER)));   \
+})
+
+#endif /* RT2400PCI_H */
diff --git a/drivers/net/wireless/rt2x00/rt2500pci.c b/drivers/net/wireless/rt2x00/rt2500pci.c
new file mode 100644 (file)
index 0000000..f6115c6
--- /dev/null
@@ -0,0 +1,2000 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2500pci
+       Abstract: rt2500pci device specific routines.
+       Supported chipsets: RT2560.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2500pci"
+
+#include <linux/delay.h>
+#include <linux/etherdevice.h>
+#include <linux/init.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/pci.h>
+#include <linux/eeprom_93cx6.h>
+
+#include "rt2x00.h"
+#include "rt2x00pci.h"
+#include "rt2500pci.h"
+
+/*
+ * Register access.
+ * All access to the CSR registers will go through the methods
+ * rt2x00pci_register_read and rt2x00pci_register_write.
+ * BBP and RF register require indirect register access,
+ * and use the CSR registers BBPCSR and RFCSR to achieve this.
+ * These indirect registers work with busy bits,
+ * and we will try maximal REGISTER_BUSY_COUNT times to access
+ * the register while taking a REGISTER_BUSY_DELAY us delay
+ * between each attampt. When the busy bit is still set at that time,
+ * the access attempt is considered to have failed,
+ * and we will print an error.
+ */
+static u32 rt2500pci_bbp_check(const struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, BBPCSR, &reg);
+               if (!rt2x00_get_field32(reg, BBPCSR_BUSY))
+                       break;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       return reg;
+}
+
+static void rt2500pci_bbp_write(const struct rt2x00_dev *rt2x00dev,
+                               const unsigned int word, const u8 value)
+{
+       u32 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt2500pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Write failed.\n");
+               return;
+       }
+
+       /*
+        * Write the data into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, BBPCSR_VALUE, value);
+       rt2x00_set_field32(&reg, BBPCSR_REGNUM, word);
+       rt2x00_set_field32(&reg, BBPCSR_BUSY, 1);
+       rt2x00_set_field32(&reg, BBPCSR_WRITE_CONTROL, 1);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR, reg);
+}
+
+static void rt2500pci_bbp_read(const struct rt2x00_dev *rt2x00dev,
+                              const unsigned int word, u8 *value)
+{
+       u32 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt2500pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Read failed.\n");
+               return;
+       }
+
+       /*
+        * Write the request into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, BBPCSR_REGNUM, word);
+       rt2x00_set_field32(&reg, BBPCSR_BUSY, 1);
+       rt2x00_set_field32(&reg, BBPCSR_WRITE_CONTROL, 0);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR, reg);
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt2500pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Read failed.\n");
+               *value = 0xff;
+               return;
+       }
+
+       *value = rt2x00_get_field32(reg, BBPCSR_VALUE);
+}
+
+static void rt2500pci_rf_write(const struct rt2x00_dev *rt2x00dev,
+                              const unsigned int word, const u32 value)
+{
+       u32 reg;
+       unsigned int i;
+
+       if (!word)
+               return;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, RFCSR, &reg);
+               if (!rt2x00_get_field32(reg, RFCSR_BUSY))
+                       goto rf_write;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "RFCSR register busy. Write failed.\n");
+       return;
+
+rf_write:
+       reg = 0;
+       rt2x00_set_field32(&reg, RFCSR_VALUE, value);
+       rt2x00_set_field32(&reg, RFCSR_NUMBER_OF_BITS, 20);
+       rt2x00_set_field32(&reg, RFCSR_IF_SELECT, 0);
+       rt2x00_set_field32(&reg, RFCSR_BUSY, 1);
+
+       rt2x00pci_register_write(rt2x00dev, RFCSR, reg);
+       rt2x00_rf_write(rt2x00dev, word, value);
+}
+
+static void rt2500pci_eepromregister_read(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR21, &reg);
+
+       eeprom->reg_data_in = !!rt2x00_get_field32(reg, CSR21_EEPROM_DATA_IN);
+       eeprom->reg_data_out = !!rt2x00_get_field32(reg, CSR21_EEPROM_DATA_OUT);
+       eeprom->reg_data_clock =
+           !!rt2x00_get_field32(reg, CSR21_EEPROM_DATA_CLOCK);
+       eeprom->reg_chip_select =
+           !!rt2x00_get_field32(reg, CSR21_EEPROM_CHIP_SELECT);
+}
+
+static void rt2500pci_eepromregister_write(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg = 0;
+
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_IN, !!eeprom->reg_data_in);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_OUT, !!eeprom->reg_data_out);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_CLOCK,
+                          !!eeprom->reg_data_clock);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_CHIP_SELECT,
+                          !!eeprom->reg_chip_select);
+
+       rt2x00pci_register_write(rt2x00dev, CSR21, reg);
+}
+
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+#define CSR_OFFSET(__word)     ( CSR_REG_BASE + ((__word) * sizeof(u32)) )
+
+static void rt2500pci_read_csr(const struct rt2x00_dev *rt2x00dev,
+                              const unsigned int word, u32 *data)
+{
+       rt2x00pci_register_read(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static void rt2500pci_write_csr(const struct rt2x00_dev *rt2x00dev,
+                               const unsigned int word, u32 data)
+{
+       rt2x00pci_register_write(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static const struct rt2x00debug rt2500pci_rt2x00debug = {
+       .owner  = THIS_MODULE,
+       .csr    = {
+               .read           = rt2500pci_read_csr,
+               .write          = rt2500pci_write_csr,
+               .word_size      = sizeof(u32),
+               .word_count     = CSR_REG_SIZE / sizeof(u32),
+       },
+       .eeprom = {
+               .read           = rt2x00_eeprom_read,
+               .write          = rt2x00_eeprom_write,
+               .word_size      = sizeof(u16),
+               .word_count     = EEPROM_SIZE / sizeof(u16),
+       },
+       .bbp    = {
+               .read           = rt2500pci_bbp_read,
+               .write          = rt2500pci_bbp_write,
+               .word_size      = sizeof(u8),
+               .word_count     = BBP_SIZE / sizeof(u8),
+       },
+       .rf     = {
+               .read           = rt2x00_rf_read,
+               .write          = rt2500pci_rf_write,
+               .word_size      = sizeof(u32),
+               .word_count     = RF_SIZE / sizeof(u32),
+       },
+};
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+#ifdef CONFIG_RT2500PCI_RFKILL
+static int rt2500pci_rfkill_poll(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, GPIOCSR, &reg);
+       return rt2x00_get_field32(reg, GPIOCSR_BIT0);
+}
+#endif /* CONFIG_RT2400PCI_RFKILL */
+
+/*
+ * Configuration handlers.
+ */
+static void rt2500pci_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *addr)
+{
+       __le32 reg[2];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, addr, ETH_ALEN);
+
+       /*
+        * The MAC address is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, CSR3, &reg, sizeof(reg));
+}
+
+static void rt2500pci_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid)
+{
+       __le32 reg[2];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, bssid, ETH_ALEN);
+
+       /*
+        * The BSSID is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, CSR5, &reg, sizeof(reg));
+}
+
+static void rt2500pci_config_packet_filter(struct rt2x00_dev *rt2x00dev,
+                                          const unsigned int filter)
+{
+       int promisc = !!(filter & IFF_PROMISC);
+       int multicast = !!(filter & IFF_MULTICAST);
+       int broadcast = !!(filter & IFF_BROADCAST);
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+       rt2x00_set_field32(&reg, RXCSR0_DROP_NOT_TO_ME, !promisc);
+       rt2x00_set_field32(&reg, RXCSR0_DROP_MCAST, !multicast);
+       rt2x00_set_field32(&reg, RXCSR0_DROP_BCAST, !broadcast);
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+}
+
+static void rt2500pci_config_type(struct rt2x00_dev *rt2x00dev, const int type)
+{
+       u32 reg;
+
+       rt2x00pci_register_write(rt2x00dev, CSR14, 0);
+
+       /*
+        * Apply hardware packet filter.
+        */
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+
+       if (!is_monitor_present(&rt2x00dev->interface) &&
+           (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_STA))
+               rt2x00_set_field32(&reg, RXCSR0_DROP_TODS, 1);
+       else
+               rt2x00_set_field32(&reg, RXCSR0_DROP_TODS, 0);
+
+       /*
+        * If there is a non-monitor interface present
+        * the packet should be strict (even if a monitor interface is present!).
+        * When there is only 1 interface present which is in monitor mode
+        * we should start accepting _all_ frames.
+        */
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CRC, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_PHYSICAL, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CONTROL, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_VERSION_ERROR, 1);
+       } else if (is_monitor_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CRC, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_PHYSICAL, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CONTROL, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_VERSION_ERROR, 0);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+
+       /*
+        * Enable beacon config
+        */
+       rt2x00pci_register_read(rt2x00dev, BCNCSR1, &reg);
+       rt2x00_set_field32(&reg, BCNCSR1_PRELOAD,
+                          PREAMBLE + get_duration(IEEE80211_HEADER, 2));
+       rt2x00_set_field32(&reg, BCNCSR1_BEACON_CWMIN,
+                          rt2x00lib_get_ring(rt2x00dev,
+                                             IEEE80211_TX_QUEUE_BEACON)
+                          ->tx_params.cw_min);
+       rt2x00pci_register_write(rt2x00dev, BCNCSR1, reg);
+
+       /*
+        * Enable synchronisation.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR14, &reg);
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, CSR14_TSF_COUNT, 1);
+               rt2x00_set_field32(&reg, CSR14_TBCN, 1);
+       }
+
+       rt2x00_set_field32(&reg, CSR14_BEACON_GEN, 0);
+       if (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_AP)
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 2);
+       else if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 1);
+       else if (is_monitor_present(&rt2x00dev->interface) &&
+                !is_interface_present(&rt2x00dev->interface))
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 0);
+
+       rt2x00pci_register_write(rt2x00dev, CSR14, reg);
+}
+
+static void rt2500pci_config_rate(struct rt2x00_dev *rt2x00dev, const int rate)
+{
+       struct ieee80211_conf *conf = &rt2x00dev->hw->conf;
+       u32 reg;
+       u32 preamble;
+       u16 value;
+
+       if (DEVICE_GET_RATE_FIELD(rate, PREAMBLE))
+               preamble = SHORT_PREAMBLE;
+       else
+               preamble = PREAMBLE;
+
+       reg = DEVICE_GET_RATE_FIELD(rate, RATEMASK) & DEV_BASIC_RATEMASK;
+       rt2x00pci_register_write(rt2x00dev, ARCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR1, &reg);
+       value = ((conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME) ?
+                SHORT_DIFS : DIFS) +
+           PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXCSR1_ACK_TIMEOUT, value);
+       value = SIFS + PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXCSR1_ACK_CONSUME_TIME, value);
+       rt2x00pci_register_write(rt2x00dev, TXCSR1, reg);
+
+       preamble = DEVICE_GET_RATE_FIELD(rate, PREAMBLE) ? 0x08 : 0x00;
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR2, &reg);
+       rt2x00_set_field32(&reg, ARCSR2_SIGNAL, 0x00 | preamble);
+       rt2x00_set_field32(&reg, ARCSR2_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 10));
+       rt2x00pci_register_write(rt2x00dev, ARCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR3, &reg);
+       rt2x00_set_field32(&reg, ARCSR3_SIGNAL, 0x01 | preamble);
+       rt2x00_set_field32(&reg, ARCSR3_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 20));
+       rt2x00pci_register_write(rt2x00dev, ARCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR4, &reg);
+       rt2x00_set_field32(&reg, ARCSR4_SIGNAL, 0x02 | preamble);
+       rt2x00_set_field32(&reg, ARCSR4_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 55));
+       rt2x00pci_register_write(rt2x00dev, ARCSR4, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR5, &reg);
+       rt2x00_set_field32(&reg, ARCSR5_SIGNAL, 0x03 | preamble);
+       rt2x00_set_field32(&reg, ARCSR5_SERVICE, 0x84);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 110));
+       rt2x00pci_register_write(rt2x00dev, ARCSR5, reg);
+}
+
+static void rt2500pci_config_phymode(struct rt2x00_dev *rt2x00dev,
+                                    const int phymode)
+{
+       struct ieee80211_hw_mode *mode;
+       struct ieee80211_rate *rate;
+
+       if (phymode == MODE_IEEE80211A)
+               rt2x00dev->curr_hwmode = HWMODE_A;
+       else if (phymode == MODE_IEEE80211B)
+               rt2x00dev->curr_hwmode = HWMODE_B;
+       else
+               rt2x00dev->curr_hwmode = HWMODE_G;
+
+       mode = &rt2x00dev->hwmodes[rt2x00dev->curr_hwmode];
+       rate = &mode->rates[mode->num_rates - 1];
+
+       rt2500pci_config_rate(rt2x00dev, rate->val2);
+}
+
+static void rt2500pci_config_channel(struct rt2x00_dev *rt2x00dev,
+                                    const int index, const int channel,
+                                    const int txpower)
+{
+       struct rf_channel reg;
+       u8 r70;
+
+       /*
+        * Fill rf_reg structure.
+        */
+       memcpy(&reg, &rt2x00dev->spec.channels[index], sizeof(reg));
+
+       /*
+        * Set TXpower.
+        */
+       rt2x00_set_field32(&reg.rf3, RF3_TXPOWER, TXPOWER_TO_DEV(txpower));
+
+       /*
+        * Switch on tuning bits.
+        * For RT2523 devices we do not need to update the R1 register.
+        */
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2523))
+               rt2x00_set_field32(&reg.rf1, RF1_TUNER, 1);
+       rt2x00_set_field32(&reg.rf3, RF3_TUNER, 1);
+
+       /*
+        * For RT2525 we should first set the channel to half band higher.
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525)) {
+               static const u32 vals[] = {
+                       0x00080cbe, 0x00080d02, 0x00080d06, 0x00080d0a,
+                       0x00080d0e, 0x00080d12, 0x00080d16, 0x00080d1a,
+                       0x00080d1e, 0x00080d22, 0x00080d26, 0x00080d2a,
+                       0x00080d2e, 0x00080d3a
+               };
+
+               rt2500pci_rf_write(rt2x00dev, 1, reg.rf1);
+               rt2500pci_rf_write(rt2x00dev, 2, vals[channel - 1]);
+               rt2500pci_rf_write(rt2x00dev, 3, reg.rf3);
+               if (reg.rf4)
+                       rt2500pci_rf_write(rt2x00dev, 4, reg.rf4);
+       }
+
+       rt2500pci_rf_write(rt2x00dev, 1, reg.rf1);
+       rt2500pci_rf_write(rt2x00dev, 2, reg.rf2);
+       rt2500pci_rf_write(rt2x00dev, 3, reg.rf3);
+       if (reg.rf4)
+               rt2500pci_rf_write(rt2x00dev, 4, reg.rf4);
+
+       /*
+        * Channel 14 requires the Japan filter bit to be set.
+        */
+       r70 = 0x46;
+       rt2x00_set_field8(&r70, BBP_R70_JAPAN_FILTER, channel == 14);
+       rt2500pci_bbp_write(rt2x00dev, 70, r70);
+
+       msleep(1);
+
+       /*
+        * Switch off tuning bits.
+        * For RT2523 devices we do not need to update the R1 register.
+        */
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2523)) {
+               rt2x00_set_field32(&reg.rf1, RF1_TUNER, 0);
+               rt2500pci_rf_write(rt2x00dev, 1, reg.rf1);
+       }
+
+       rt2x00_set_field32(&reg.rf3, RF3_TUNER, 0);
+       rt2500pci_rf_write(rt2x00dev, 3, reg.rf3);
+
+       /*
+        * Clear false CRC during channel switch.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg.rf1);
+}
+
+static void rt2500pci_config_txpower(struct rt2x00_dev *rt2x00dev,
+                                    const int txpower)
+{
+       u32 rf3;
+
+       rt2x00_rf_read(rt2x00dev, 3, &rf3);
+       rt2x00_set_field32(&rf3, RF3_TXPOWER, TXPOWER_TO_DEV(txpower));
+       rt2500pci_rf_write(rt2x00dev, 3, rf3);
+}
+
+static void rt2500pci_config_antenna(struct rt2x00_dev *rt2x00dev,
+                                    const int antenna_tx, const int antenna_rx)
+{
+       u32 reg;
+       u8 r14;
+       u8 r2;
+
+       rt2x00pci_register_read(rt2x00dev, BBPCSR1, &reg);
+       rt2500pci_bbp_read(rt2x00dev, 14, &r14);
+       rt2500pci_bbp_read(rt2x00dev, 2, &r2);
+
+       /*
+        * Configure the TX antenna.
+        */
+       switch (antenna_tx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 2);
+               rt2x00_set_field32(&reg, BBPCSR1_CCK, 2);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM, 2);
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 0);
+               rt2x00_set_field32(&reg, BBPCSR1_CCK, 0);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM, 0);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 2);
+               rt2x00_set_field32(&reg, BBPCSR1_CCK, 2);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM, 2);
+               break;
+       }
+
+       /*
+        * Configure the RX antenna.
+        */
+       switch (antenna_rx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 2);
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 0);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 2);
+               break;
+       }
+
+       /*
+        * RT2525E and RT5222 need to flip TX I/Q
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525E) ||
+           rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_IQ_FLIP, 1);
+               rt2x00_set_field32(&reg, BBPCSR1_CCK_FLIP, 1);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM_FLIP, 1);
+
+               /*
+                * RT2525E does not need RX I/Q Flip.
+                */
+               if (rt2x00_rf(&rt2x00dev->chip, RF2525E))
+                       rt2x00_set_field8(&r14, BBP_R14_RX_IQ_FLIP, 0);
+       } else {
+               rt2x00_set_field32(&reg, BBPCSR1_CCK_FLIP, 0);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM_FLIP, 0);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR1, reg);
+       rt2500pci_bbp_write(rt2x00dev, 14, r14);
+       rt2500pci_bbp_write(rt2x00dev, 2, r2);
+}
+
+static void rt2500pci_config_duration(struct rt2x00_dev *rt2x00dev,
+                                     const int short_slot_time,
+                                     const int beacon_int)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_SLOT_TIME,
+                          short_slot_time ? SHORT_SLOT_TIME : SLOT_TIME);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR18, &reg);
+       rt2x00_set_field32(&reg, CSR18_SIFS, SIFS);
+       rt2x00_set_field32(&reg, CSR18_PIFS,
+                          short_slot_time ? SHORT_PIFS : PIFS);
+       rt2x00pci_register_write(rt2x00dev, CSR18, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR19, &reg);
+       rt2x00_set_field32(&reg, CSR19_DIFS,
+                          short_slot_time ? SHORT_DIFS : DIFS);
+       rt2x00_set_field32(&reg, CSR19_EIFS, EIFS);
+       rt2x00pci_register_write(rt2x00dev, CSR19, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR1, &reg);
+       rt2x00_set_field32(&reg, TXCSR1_TSF_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&reg, TXCSR1_AUTORESPONDER, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR12, &reg);
+       rt2x00_set_field32(&reg, CSR12_BEACON_INTERVAL, beacon_int * 16);
+       rt2x00_set_field32(&reg, CSR12_CFP_MAX_DURATION, beacon_int * 16);
+       rt2x00pci_register_write(rt2x00dev, CSR12, reg);
+}
+
+static void rt2500pci_config(struct rt2x00_dev *rt2x00dev,
+                            const unsigned int flags,
+                            struct ieee80211_conf *conf)
+{
+       int short_slot_time = conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME;
+
+       if (flags & CONFIG_UPDATE_PHYMODE)
+               rt2500pci_config_phymode(rt2x00dev, conf->phymode);
+       if (flags & CONFIG_UPDATE_CHANNEL)
+               rt2500pci_config_channel(rt2x00dev, conf->channel_val,
+                                        conf->channel, conf->power_level);
+       if ((flags & CONFIG_UPDATE_TXPOWER) && !(flags & CONFIG_UPDATE_CHANNEL))
+               rt2500pci_config_txpower(rt2x00dev, conf->power_level);
+       if (flags & CONFIG_UPDATE_ANTENNA)
+               rt2500pci_config_antenna(rt2x00dev, conf->antenna_sel_tx,
+                                        conf->antenna_sel_rx);
+       if (flags & (CONFIG_UPDATE_SLOT_TIME | CONFIG_UPDATE_BEACON_INT))
+               rt2500pci_config_duration(rt2x00dev, short_slot_time,
+                                         conf->beacon_int);
+}
+
+/*
+ * LED functions.
+ */
+static void rt2500pci_enable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, LEDCSR, &reg);
+
+       rt2x00_set_field32(&reg, LEDCSR_ON_PERIOD, 70);
+       rt2x00_set_field32(&reg, LEDCSR_OFF_PERIOD, 30);
+
+       if (rt2x00dev->led_mode == LED_MODE_TXRX_ACTIVITY) {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 1);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 0);
+       } else if (rt2x00dev->led_mode == LED_MODE_ASUS) {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 0);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 1);
+       } else {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 1);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 1);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, LEDCSR, reg);
+}
+
+static void rt2500pci_disable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, LEDCSR, &reg);
+       rt2x00_set_field32(&reg, LEDCSR_LINK, 0);
+       rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 0);
+       rt2x00pci_register_write(rt2x00dev, LEDCSR, reg);
+}
+
+/*
+ * Link tuning
+ */
+static void rt2500pci_link_stats(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Update FCS error count from register.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg);
+       rt2x00dev->link.rx_failed = rt2x00_get_field32(reg, CNT0_FCS_ERROR);
+
+       /*
+        * Update False CCA count from register.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT3, &reg);
+       rt2x00dev->link.false_cca = rt2x00_get_field32(reg, CNT3_FALSE_CCA);
+}
+
+static void rt2500pci_reset_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       rt2500pci_bbp_write(rt2x00dev, 17, 0x48);
+       rt2x00dev->link.vgc_level = 0x48;
+}
+
+static void rt2500pci_link_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       int rssi = rt2x00_get_link_rssi(&rt2x00dev->link);
+       u8 r17;
+
+       /*
+        * To prevent collisions with MAC ASIC on chipsets
+        * up to version C the link tuning should halt after 20
+        * seconds.
+        */
+       if (rt2x00_get_rev(&rt2x00dev->chip) < RT2560_VERSION_D &&
+           rt2x00dev->link.count > 20)
+               return;
+
+       rt2500pci_bbp_read(rt2x00dev, 17, &r17);
+
+       /*
+        * Chipset versions C and lower should directly continue
+        * to the dynamic CCA tuning.
+        */
+       if (rt2x00_get_rev(&rt2x00dev->chip) < RT2560_VERSION_D)
+               goto dynamic_cca_tune;
+
+       /*
+        * A too low RSSI will cause too much false CCA which will
+        * then corrupt the R17 tuning. To remidy this the tuning should
+        * be stopped (While making sure the R17 value will not exceed limits)
+        */
+       if (rssi < -80 && rt2x00dev->link.count > 20) {
+               if (r17 >= 0x41) {
+                       r17 = rt2x00dev->link.vgc_level;
+                       rt2500pci_bbp_write(rt2x00dev, 17, r17);
+               }
+               return;
+       }
+
+       /*
+        * Special big-R17 for short distance
+        */
+       if (rssi >= -58) {
+               if (r17 != 0x50)
+                       rt2500pci_bbp_write(rt2x00dev, 17, 0x50);
+               return;
+       }
+
+       /*
+        * Special mid-R17 for middle distance
+        */
+       if (rssi >= -74) {
+               if (r17 != 0x41)
+                       rt2500pci_bbp_write(rt2x00dev, 17, 0x41);
+               return;
+       }
+
+       /*
+        * Leave short or middle distance condition, restore r17
+        * to the dynamic tuning range.
+        */
+       if (r17 >= 0x41) {
+               rt2500pci_bbp_write(rt2x00dev, 17, rt2x00dev->link.vgc_level);
+               return;
+       }
+
+dynamic_cca_tune:
+
+       /*
+        * R17 is inside the dynamic tuning range,
+        * start tuning the link based on the false cca counter.
+        */
+       if (rt2x00dev->link.false_cca > 512 && r17 < 0x40) {
+               rt2500pci_bbp_write(rt2x00dev, 17, ++r17);
+               rt2x00dev->link.vgc_level = r17;
+       } else if (rt2x00dev->link.false_cca < 100 && r17 > 0x32) {
+               rt2500pci_bbp_write(rt2x00dev, 17, --r17);
+               rt2x00dev->link.vgc_level = r17;
+       }
+}
+
+/*
+ * Initialization functions.
+ */
+static void rt2500pci_init_rxring(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring = rt2x00dev->rx;
+       struct data_desc *rxd;
+       unsigned int i;
+       u32 word;
+
+       memset(ring->data_addr, 0x00, rt2x00_get_ring_size(ring));
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               rxd = ring->entry[i].priv;
+
+               rt2x00_desc_read(rxd, 1, &word);
+               rt2x00_set_field32(&word, RXD_W1_BUFFER_ADDRESS,
+                                  ring->entry[i].data_dma);
+               rt2x00_desc_write(rxd, 1, word);
+
+               rt2x00_desc_read(rxd, 0, &word);
+               rt2x00_set_field32(&word, RXD_W0_OWNER_NIC, 1);
+               rt2x00_desc_write(rxd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(rt2x00dev->rx);
+}
+
+static void rt2500pci_init_txring(struct rt2x00_dev *rt2x00dev, const int queue)
+{
+       struct data_ring *ring = rt2x00lib_get_ring(rt2x00dev, queue);
+       struct data_desc *txd;
+       unsigned int i;
+       u32 word;
+
+       memset(ring->data_addr, 0x00, rt2x00_get_ring_size(ring));
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               txd = ring->entry[i].priv;
+
+               rt2x00_desc_read(txd, 1, &word);
+               rt2x00_set_field32(&word, TXD_W1_BUFFER_ADDRESS,
+                                  ring->entry[i].data_dma);
+               rt2x00_desc_write(txd, 1, word);
+
+               rt2x00_desc_read(txd, 0, &word);
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 0);
+               rt2x00_desc_write(txd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(ring);
+}
+
+static int rt2500pci_init_rings(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Initialize rings.
+        */
+       rt2500pci_init_rxring(rt2x00dev);
+       rt2500pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+       rt2500pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+       rt2500pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_AFTER_BEACON);
+       rt2500pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       /*
+        * Initialize registers.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXCSR2, &reg);
+       rt2x00_set_field32(&reg, TXCSR2_TXD_SIZE,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].desc_size);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_TXD,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].stats.limit);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_ATIM,
+                          rt2x00dev->bcn[1].stats.limit);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_PRIO,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].stats.limit);
+       rt2x00pci_register_write(rt2x00dev, TXCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR3, &reg);
+       rt2x00_set_field32(&reg, TXCSR3_TX_RING_REGISTER,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR5, &reg);
+       rt2x00_set_field32(&reg, TXCSR5_PRIO_RING_REGISTER,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR5, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR4, &reg);
+       rt2x00_set_field32(&reg, TXCSR4_ATIM_RING_REGISTER,
+                          rt2x00dev->bcn[1].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR4, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR6, &reg);
+       rt2x00_set_field32(&reg, TXCSR6_BEACON_RING_REGISTER,
+                          rt2x00dev->bcn[0].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR6, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR1, &reg);
+       rt2x00_set_field32(&reg, RXCSR1_RXD_SIZE, rt2x00dev->rx->desc_size);
+       rt2x00_set_field32(&reg, RXCSR1_NUM_RXD, rt2x00dev->rx->stats.limit);
+       rt2x00pci_register_write(rt2x00dev, RXCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR2, &reg);
+       rt2x00_set_field32(&reg, RXCSR2_RX_RING_REGISTER,
+                          rt2x00dev->rx->data_dma);
+       rt2x00pci_register_write(rt2x00dev, RXCSR2, reg);
+
+       return 0;
+}
+
+static int rt2500pci_init_registers(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_write(rt2x00dev, PSCSR0, 0x00020002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR1, 0x00000002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR2, 0x00020002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR3, 0x00000002);
+
+       rt2x00pci_register_read(rt2x00dev, TIMECSR, &reg);
+       rt2x00_set_field32(&reg, TIMECSR_US_COUNT, 33);
+       rt2x00_set_field32(&reg, TIMECSR_US_64_COUNT, 63);
+       rt2x00_set_field32(&reg, TIMECSR_BEACON_EXPECT, 0);
+       rt2x00pci_register_write(rt2x00dev, TIMECSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR9, &reg);
+       rt2x00_set_field32(&reg, CSR9_MAX_FRAME_UNIT,
+                          rt2x00dev->rx->data_size / 128);
+       rt2x00pci_register_write(rt2x00dev, CSR9, reg);
+
+       /*
+        * Always use CWmin and CWmax set in descriptor.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_CW_SELECT, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       rt2x00pci_register_write(rt2x00dev, CNT3, 0);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR8, &reg);
+       rt2x00_set_field32(&reg, TXCSR8_BBP_ID0, 10);
+       rt2x00_set_field32(&reg, TXCSR8_BBP_ID0_VALID, 1);
+       rt2x00_set_field32(&reg, TXCSR8_BBP_ID1, 11);
+       rt2x00_set_field32(&reg, TXCSR8_BBP_ID1_VALID, 1);
+       rt2x00_set_field32(&reg, TXCSR8_BBP_ID2, 13);
+       rt2x00_set_field32(&reg, TXCSR8_BBP_ID2_VALID, 1);
+       rt2x00_set_field32(&reg, TXCSR8_BBP_ID3, 12);
+       rt2x00_set_field32(&reg, TXCSR8_BBP_ID3_VALID, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR8, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARTCSR0, &reg);
+       rt2x00_set_field32(&reg, ARTCSR0_ACK_CTS_1MBS, 112);
+       rt2x00_set_field32(&reg, ARTCSR0_ACK_CTS_2MBS, 56);
+       rt2x00_set_field32(&reg, ARTCSR0_ACK_CTS_5_5MBS, 20);
+       rt2x00_set_field32(&reg, ARTCSR0_ACK_CTS_11MBS, 10);
+       rt2x00pci_register_write(rt2x00dev, ARTCSR0, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARTCSR1, &reg);
+       rt2x00_set_field32(&reg, ARTCSR1_ACK_CTS_6MBS, 45);
+       rt2x00_set_field32(&reg, ARTCSR1_ACK_CTS_9MBS, 37);
+       rt2x00_set_field32(&reg, ARTCSR1_ACK_CTS_12MBS, 33);
+       rt2x00_set_field32(&reg, ARTCSR1_ACK_CTS_18MBS, 29);
+       rt2x00pci_register_write(rt2x00dev, ARTCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARTCSR2, &reg);
+       rt2x00_set_field32(&reg, ARTCSR2_ACK_CTS_24MBS, 29);
+       rt2x00_set_field32(&reg, ARTCSR2_ACK_CTS_36MBS, 25);
+       rt2x00_set_field32(&reg, ARTCSR2_ACK_CTS_48MBS, 25);
+       rt2x00_set_field32(&reg, ARTCSR2_ACK_CTS_54MBS, 25);
+       rt2x00pci_register_write(rt2x00dev, ARTCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR3, &reg);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID0, 47); /* CCK Signal */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID0_VALID, 1);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID1, 51); /* Rssi */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID1_VALID, 1);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID2, 42); /* OFDM Rate */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID2_VALID, 1);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID3, 51); /* RSSI */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID3_VALID, 1);
+       rt2x00pci_register_write(rt2x00dev, RXCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, PCICSR, &reg);
+       rt2x00_set_field32(&reg, PCICSR_BIG_ENDIAN, 0);
+       rt2x00_set_field32(&reg, PCICSR_RX_TRESHOLD, 0);
+       rt2x00_set_field32(&reg, PCICSR_TX_TRESHOLD, 3);
+       rt2x00_set_field32(&reg, PCICSR_BURST_LENTH, 1);
+       rt2x00_set_field32(&reg, PCICSR_ENABLE_CLK, 1);
+       rt2x00_set_field32(&reg, PCICSR_READ_MULTIPLE, 1);
+       rt2x00_set_field32(&reg, PCICSR_WRITE_INVALID, 1);
+       rt2x00pci_register_write(rt2x00dev, PCICSR, reg);
+
+       rt2x00pci_register_write(rt2x00dev, PWRCSR0, 0x3f3b3100);
+
+       rt2x00pci_register_write(rt2x00dev, GPIOCSR, 0x0000ff00);
+       rt2x00pci_register_write(rt2x00dev, TESTCSR, 0x000000f0);
+
+       if (rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_AWAKE))
+               return -EBUSY;
+
+       rt2x00pci_register_write(rt2x00dev, MACCSR0, 0x00213223);
+       rt2x00pci_register_write(rt2x00dev, MACCSR1, 0x00235518);
+
+       rt2x00pci_register_read(rt2x00dev, MACCSR2, &reg);
+       rt2x00_set_field32(&reg, MACCSR2_DELAY, 64);
+       rt2x00pci_register_write(rt2x00dev, MACCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RALINKCSR, &reg);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_DATA0, 17);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_ID0, 26);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_VALID0, 1);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_DATA1, 0);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_ID1, 26);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_VALID1, 1);
+       rt2x00pci_register_write(rt2x00dev, RALINKCSR, reg);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR1, 0x82188200);
+
+       rt2x00pci_register_write(rt2x00dev, TXACKCSR0, 0x00000020);
+
+       rt2x00pci_register_read(rt2x00dev, CSR1, &reg);
+       rt2x00_set_field32(&reg, CSR1_SOFT_RESET, 1);
+       rt2x00_set_field32(&reg, CSR1_BBP_RESET, 0);
+       rt2x00_set_field32(&reg, CSR1_HOST_READY, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR1, &reg);
+       rt2x00_set_field32(&reg, CSR1_SOFT_RESET, 0);
+       rt2x00_set_field32(&reg, CSR1_HOST_READY, 1);
+       rt2x00pci_register_write(rt2x00dev, CSR1, reg);
+
+       /*
+        * We must clear the FCS and FIFO error count.
+        * These registers are cleared on read,
+        * so we may pass a useless variable to store the value.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg);
+       rt2x00pci_register_read(rt2x00dev, CNT4, &reg);
+
+       return 0;
+}
+
+static int rt2500pci_init_bbp(struct rt2x00_dev *rt2x00dev)
+{
+       unsigned int i;
+       u16 eeprom;
+       u8 reg_id;
+       u8 value;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500pci_bbp_read(rt2x00dev, 0, &value);
+               if ((value != 0xff) && (value != 0x00))
+                       goto continue_csr_init;
+               NOTICE(rt2x00dev, "Waiting for BBP register.\n");
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "BBP register access failed, aborting.\n");
+       return -EACCES;
+
+continue_csr_init:
+       rt2500pci_bbp_write(rt2x00dev, 3, 0x02);
+       rt2500pci_bbp_write(rt2x00dev, 4, 0x19);
+       rt2500pci_bbp_write(rt2x00dev, 14, 0x1c);
+       rt2500pci_bbp_write(rt2x00dev, 15, 0x30);
+       rt2500pci_bbp_write(rt2x00dev, 16, 0xac);
+       rt2500pci_bbp_write(rt2x00dev, 18, 0x18);
+       rt2500pci_bbp_write(rt2x00dev, 19, 0xff);
+       rt2500pci_bbp_write(rt2x00dev, 20, 0x1e);
+       rt2500pci_bbp_write(rt2x00dev, 21, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 22, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 23, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 24, 0x70);
+       rt2500pci_bbp_write(rt2x00dev, 25, 0x40);
+       rt2500pci_bbp_write(rt2x00dev, 26, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 27, 0x23);
+       rt2500pci_bbp_write(rt2x00dev, 30, 0x10);
+       rt2500pci_bbp_write(rt2x00dev, 31, 0x2b);
+       rt2500pci_bbp_write(rt2x00dev, 32, 0xb9);
+       rt2500pci_bbp_write(rt2x00dev, 34, 0x12);
+       rt2500pci_bbp_write(rt2x00dev, 35, 0x50);
+       rt2500pci_bbp_write(rt2x00dev, 39, 0xc4);
+       rt2500pci_bbp_write(rt2x00dev, 40, 0x02);
+       rt2500pci_bbp_write(rt2x00dev, 41, 0x60);
+       rt2500pci_bbp_write(rt2x00dev, 53, 0x10);
+       rt2500pci_bbp_write(rt2x00dev, 54, 0x18);
+       rt2500pci_bbp_write(rt2x00dev, 56, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 57, 0x10);
+       rt2500pci_bbp_write(rt2x00dev, 58, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 61, 0x6d);
+       rt2500pci_bbp_write(rt2x00dev, 62, 0x10);
+
+       DEBUG(rt2x00dev, "Start initialization from EEPROM...\n");
+       for (i = 0; i < EEPROM_BBP_SIZE; i++) {
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_BBP_START + i, &eeprom);
+
+               if (eeprom != 0xffff && eeprom != 0x0000) {
+                       reg_id = rt2x00_get_field16(eeprom, EEPROM_BBP_REG_ID);
+                       value = rt2x00_get_field16(eeprom, EEPROM_BBP_VALUE);
+                       DEBUG(rt2x00dev, "BBP: 0x%02x, value: 0x%02x.\n",
+                             reg_id, value);
+                       rt2500pci_bbp_write(rt2x00dev, reg_id, value);
+               }
+       }
+       DEBUG(rt2x00dev, "...End initialization from EEPROM.\n");
+
+       return 0;
+}
+
+/*
+ * Device state switch handlers.
+ */
+static void rt2500pci_toggle_rx(struct rt2x00_dev *rt2x00dev,
+                               enum dev_state state)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+       rt2x00_set_field32(&reg, RXCSR0_DISABLE_RX,
+                          state == STATE_RADIO_RX_OFF);
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+}
+
+static void rt2500pci_toggle_irq(struct rt2x00_dev *rt2x00dev,
+                                enum dev_state state)
+{
+       int mask = (state == STATE_RADIO_IRQ_OFF);
+       u32 reg;
+
+       /*
+        * When interrupts are being enabled, the interrupt registers
+        * should clear the register to assure a clean state.
+        */
+       if (state == STATE_RADIO_IRQ_ON) {
+               rt2x00pci_register_read(rt2x00dev, CSR7, &reg);
+               rt2x00pci_register_write(rt2x00dev, CSR7, reg);
+       }
+
+       /*
+        * Only toggle the interrupts bits we are going to use.
+        * Non-checked interrupt bits are disabled by default.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR8, &reg);
+       rt2x00_set_field32(&reg, CSR8_TBCN_EXPIRE, mask);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_TXRING, mask);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_ATIMRING, mask);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_PRIORING, mask);
+       rt2x00_set_field32(&reg, CSR8_RXDONE, mask);
+       rt2x00pci_register_write(rt2x00dev, CSR8, reg);
+}
+
+static int rt2500pci_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Initialize all registers.
+        */
+       if (rt2500pci_init_rings(rt2x00dev) ||
+           rt2500pci_init_registers(rt2x00dev) ||
+           rt2500pci_init_bbp(rt2x00dev)) {
+               ERROR(rt2x00dev, "Register initialization failed.\n");
+               return -EIO;
+       }
+
+       /*
+        * Enable interrupts.
+        */
+       rt2500pci_toggle_irq(rt2x00dev, STATE_RADIO_IRQ_ON);
+
+       /*
+        * Enable LED
+        */
+       rt2500pci_enable_led(rt2x00dev);
+
+       return 0;
+}
+
+static void rt2500pci_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Disable LED
+        */
+       rt2500pci_disable_led(rt2x00dev);
+
+       rt2x00pci_register_write(rt2x00dev, PWRCSR0, 0);
+
+       /*
+        * Disable synchronisation.
+        */
+       rt2x00pci_register_write(rt2x00dev, CSR14, 0);
+
+       /*
+        * Cancel RX and TX.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXCSR0, &reg);
+       rt2x00_set_field32(&reg, TXCSR0_ABORT, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR0, reg);
+
+       /*
+        * Disable interrupts.
+        */
+       rt2500pci_toggle_irq(rt2x00dev, STATE_RADIO_IRQ_OFF);
+}
+
+static int rt2500pci_set_state(struct rt2x00_dev *rt2x00dev,
+                              enum dev_state state)
+{
+       u32 reg;
+       unsigned int i;
+       char put_to_sleep;
+       char bbp_state;
+       char rf_state;
+
+       put_to_sleep = (state != STATE_AWAKE);
+
+       rt2x00pci_register_read(rt2x00dev, PWRCSR1, &reg);
+       rt2x00_set_field32(&reg, PWRCSR1_SET_STATE, 1);
+       rt2x00_set_field32(&reg, PWRCSR1_BBP_DESIRE_STATE, state);
+       rt2x00_set_field32(&reg, PWRCSR1_RF_DESIRE_STATE, state);
+       rt2x00_set_field32(&reg, PWRCSR1_PUT_TO_SLEEP, put_to_sleep);
+       rt2x00pci_register_write(rt2x00dev, PWRCSR1, reg);
+
+       /*
+        * Device is not guaranteed to be in the requested state yet.
+        * We must wait until the register indicates that the
+        * device has entered the correct state.
+        */
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, PWRCSR1, &reg);
+               bbp_state = rt2x00_get_field32(reg, PWRCSR1_BBP_CURR_STATE);
+               rf_state = rt2x00_get_field32(reg, PWRCSR1_RF_CURR_STATE);
+               if (bbp_state == state && rf_state == state)
+                       return 0;
+               msleep(10);
+       }
+
+       NOTICE(rt2x00dev, "Device failed to enter state %d, "
+              "current device state: bbp %d and rf %d.\n",
+              state, bbp_state, rf_state);
+
+       return -EBUSY;
+}
+
+static int rt2500pci_set_device_state(struct rt2x00_dev *rt2x00dev,
+                                     enum dev_state state)
+{
+       int retval = 0;
+
+       switch (state) {
+       case STATE_RADIO_ON:
+               retval = rt2500pci_enable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_OFF:
+               rt2500pci_disable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_RX_ON:
+       case STATE_RADIO_RX_OFF:
+               rt2500pci_toggle_rx(rt2x00dev, state);
+               break;
+       case STATE_DEEP_SLEEP:
+       case STATE_SLEEP:
+       case STATE_STANDBY:
+       case STATE_AWAKE:
+               retval = rt2500pci_set_state(rt2x00dev, state);
+               break;
+       default:
+               retval = -ENOTSUPP;
+               break;
+       }
+
+       return retval;
+}
+
+/*
+ * TX descriptor initialization
+ */
+static void rt2500pci_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+                                   struct data_desc *txd,
+                                   struct data_entry_desc *desc,
+                                   struct ieee80211_hdr *ieee80211hdr,
+                                   unsigned int length,
+                                   struct ieee80211_tx_control *control)
+{
+       u32 word;
+
+       /*
+        * Start writing the descriptor words.
+        */
+       rt2x00_desc_read(txd, 2, &word);
+       rt2x00_set_field32(&word, TXD_W2_IV_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&word, TXD_W2_AIFS, desc->aifs);
+       rt2x00_set_field32(&word, TXD_W2_CWMIN, desc->cw_min);
+       rt2x00_set_field32(&word, TXD_W2_CWMAX, desc->cw_max);
+       rt2x00_desc_write(txd, 2, word);
+
+       rt2x00_desc_read(txd, 3, &word);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_SIGNAL, desc->signal);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_SERVICE, desc->service);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_LENGTH_LOW, desc->length_low);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_LENGTH_HIGH, desc->length_high);
+       rt2x00_desc_write(txd, 3, word);
+
+       rt2x00_desc_read(txd, 10, &word);
+       rt2x00_set_field32(&word, TXD_W10_RTS,
+                          test_bit(ENTRY_TXD_RTS_FRAME, &desc->flags));
+       rt2x00_desc_write(txd, 10, word);
+
+       rt2x00_desc_read(txd, 0, &word);
+       rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 1);
+       rt2x00_set_field32(&word, TXD_W0_VALID, 1);
+       rt2x00_set_field32(&word, TXD_W0_MORE_FRAG,
+                          test_bit(ENTRY_TXD_MORE_FRAG, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_ACK,
+                          !(control->flags & IEEE80211_TXCTL_NO_ACK));
+       rt2x00_set_field32(&word, TXD_W0_TIMESTAMP,
+                          test_bit(ENTRY_TXD_REQ_TIMESTAMP, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_OFDM,
+                          test_bit(ENTRY_TXD_OFDM_RATE, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_CIPHER_OWNER, 1);
+       rt2x00_set_field32(&word, TXD_W0_IFS, desc->ifs);
+       rt2x00_set_field32(&word, TXD_W0_RETRY_MODE,
+                          !!(control->flags &
+                             IEEE80211_TXCTL_LONG_RETRY_LIMIT));
+       rt2x00_set_field32(&word, TXD_W0_DATABYTE_COUNT, length);
+       rt2x00_set_field32(&word, TXD_W0_CIPHER_ALG, CIPHER_NONE);
+       rt2x00_desc_write(txd, 0, word);
+}
+
+/*
+ * TX data initialization
+ */
+static void rt2500pci_kick_tx_queue(struct rt2x00_dev *rt2x00dev,
+                                   unsigned int queue)
+{
+       u32 reg;
+
+       if (queue == IEEE80211_TX_QUEUE_BEACON) {
+               rt2x00pci_register_read(rt2x00dev, CSR14, &reg);
+               if (!rt2x00_get_field32(reg, CSR14_BEACON_GEN)) {
+                       rt2x00_set_field32(&reg, CSR14_BEACON_GEN, 1);
+                       rt2x00pci_register_write(rt2x00dev, CSR14, reg);
+               }
+               return;
+       }
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR0, &reg);
+       if (queue == IEEE80211_TX_QUEUE_DATA0)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_PRIO, 1);
+       else if (queue == IEEE80211_TX_QUEUE_DATA1)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_TX, 1);
+       else if (queue == IEEE80211_TX_QUEUE_AFTER_BEACON)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_ATIM, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR0, reg);
+}
+
+/*
+ * RX control handlers
+ */
+static int rt2500pci_fill_rxdone(struct data_entry *entry,
+                                int *signal, int *rssi, int *ofdm, int *size)
+{
+       struct data_desc *rxd = entry->priv;
+       u32 word0;
+       u32 word2;
+
+       rt2x00_desc_read(rxd, 0, &word0);
+       rt2x00_desc_read(rxd, 2, &word2);
+
+       if (rt2x00_get_field32(word0, RXD_W0_CRC_ERROR) ||
+           rt2x00_get_field32(word0, RXD_W0_PHYSICAL_ERROR) ||
+           rt2x00_get_field32(word0, RXD_W0_ICV_ERROR))
+               return -EINVAL;
+
+       *signal = rt2x00_get_field32(word2, RXD_W2_SIGNAL);
+       *rssi = rt2x00_get_field32(word2, RXD_W2_RSSI) -
+           entry->ring->rt2x00dev->rssi_offset;
+       *ofdm = rt2x00_get_field32(word0, RXD_W0_OFDM);
+       *size = rt2x00_get_field32(word0, RXD_W0_DATABYTE_COUNT);
+
+       return 0;
+}
+
+/*
+ * Interrupt functions.
+ */
+static void rt2500pci_txdone(struct rt2x00_dev *rt2x00dev, const int queue)
+{
+       struct data_ring *ring = rt2x00lib_get_ring(rt2x00dev, queue);
+       struct data_entry *entry;
+       struct data_desc *txd;
+       u32 word;
+       int tx_status;
+       int retry;
+
+       while (!rt2x00_ring_empty(ring)) {
+               entry = rt2x00_get_data_entry_done(ring);
+               txd = entry->priv;
+               rt2x00_desc_read(txd, 0, &word);
+
+               if (rt2x00_get_field32(word, TXD_W0_OWNER_NIC) ||
+                   !rt2x00_get_field32(word, TXD_W0_VALID))
+                       break;
+
+               /*
+                * Obtain the status about this packet.
+                */
+               tx_status = rt2x00_get_field32(word, TXD_W0_RESULT);
+               retry = rt2x00_get_field32(word, TXD_W0_RETRY_COUNT);
+
+               rt2x00lib_txdone(entry, tx_status, retry);
+
+               /*
+                * Make this entry available for reuse.
+                */
+               entry->flags = 0;
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_desc_write(txd, 0, word);
+               rt2x00_ring_index_done_inc(ring);
+       }
+
+       /*
+        * If the data ring was full before the txdone handler
+        * we must make sure the packet queue in the mac80211 stack
+        * is reenabled when the txdone handler has finished.
+        */
+       entry = ring->entry;
+       if (!rt2x00_ring_full(ring))
+               ieee80211_wake_queue(rt2x00dev->hw,
+                                    entry->tx_status.control.queue);
+}
+
+static irqreturn_t rt2500pci_interrupt(int irq, void *dev_instance)
+{
+       struct rt2x00_dev *rt2x00dev = dev_instance;
+       u32 reg;
+
+       /*
+        * Get the interrupt sources & saved to local variable.
+        * Write register value back to clear pending interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR7, &reg);
+       rt2x00pci_register_write(rt2x00dev, CSR7, reg);
+
+       if (!reg)
+               return IRQ_NONE;
+
+       if (!test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags))
+               return IRQ_HANDLED;
+
+       /*
+        * Handle interrupts, walk through all bits
+        * and run the tasks, the bits are checked in order of
+        * priority.
+        */
+
+       /*
+        * 1 - Beacon timer expired interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TBCN_EXPIRE))
+               rt2x00lib_beacondone(rt2x00dev);
+
+       /*
+        * 2 - Rx ring done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_RXDONE))
+               rt2x00pci_rxdone(rt2x00dev);
+
+       /*
+        * 3 - Atim ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_ATIMRING))
+               rt2500pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_AFTER_BEACON);
+
+       /*
+        * 4 - Priority ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_PRIORING))
+               rt2500pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+
+       /*
+        * 5 - Tx ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_TXRING))
+               rt2500pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+
+       return IRQ_HANDLED;
+}
+
+/*
+ * Device probe functions.
+ */
+static int rt2500pci_validate_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       struct eeprom_93cx6 eeprom;
+       u32 reg;
+       u16 word;
+       u8 *mac;
+
+       rt2x00pci_register_read(rt2x00dev, CSR21, &reg);
+
+       eeprom.data = rt2x00dev;
+       eeprom.register_read = rt2500pci_eepromregister_read;
+       eeprom.register_write = rt2500pci_eepromregister_write;
+       eeprom.width = rt2x00_get_field32(reg, CSR21_TYPE_93C46) ?
+           PCI_EEPROM_WIDTH_93C46 : PCI_EEPROM_WIDTH_93C66;
+       eeprom.reg_data_in = 0;
+       eeprom.reg_data_out = 0;
+       eeprom.reg_data_clock = 0;
+       eeprom.reg_chip_select = 0;
+
+       eeprom_93cx6_multiread(&eeprom, EEPROM_BASE, rt2x00dev->eeprom,
+                              EEPROM_SIZE / sizeof(u16));
+
+       /*
+        * Start validation of the data that has been read.
+        */
+       mac = rt2x00_eeprom_addr(rt2x00dev, EEPROM_MAC_ADDR_0);
+       if (!is_valid_ether_addr(mac)) {
+               random_ether_addr(mac);
+               EEPROM(rt2x00dev, "MAC: " MAC_FMT "\n", MAC_ARG(mac));
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_NUM, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_TX_DEFAULT, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RX_DEFAULT, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_LED_MODE, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_DYN_TXAGC, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_HARDWARE_RADIO, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RF_TYPE, RF2522);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_ANTENNA, word);
+               EEPROM(rt2x00dev, "Antenna: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_NIC_CARDBUS_ACCEL, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_DYN_BBP_TUNE, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_CCK_TX_POWER, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_NIC, word);
+               EEPROM(rt2x00dev, "NIC: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_CALIBRATE_OFFSET, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_CALIBRATE_OFFSET_RSSI,
+                                  DEFAULT_RSSI_OFFSET);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_CALIBRATE_OFFSET, word);
+               EEPROM(rt2x00dev, "Calibrate offset: 0x%04x\n", word);
+       }
+
+       return 0;
+}
+
+static int rt2500pci_init_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       u16 value;
+       u16 eeprom;
+
+       /*
+        * Read EEPROM word for configuration.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &eeprom);
+
+       /*
+        * Identify RF chipset.
+        */
+       value = rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RF_TYPE);
+       rt2x00pci_register_read(rt2x00dev, CSR0, &reg);
+       rt2x00_set_chip(rt2x00dev, RT2560, value, reg);
+
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2522) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2523) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2524) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2525) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2525E) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               ERROR(rt2x00dev, "Invalid RF chipset detected.\n");
+               return -ENODEV;
+       }
+
+       /*
+        * Identify default antenna configuration.
+        */
+       rt2x00dev->hw->conf.antenna_sel_tx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_TX_DEFAULT);
+       rt2x00dev->hw->conf.antenna_sel_rx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RX_DEFAULT);
+
+       /*
+        * Store led mode, for correct led behaviour.
+        */
+       rt2x00dev->led_mode =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_LED_MODE);
+
+       /*
+        * Detect if this device has an hardware controlled radio.
+        */
+       if (rt2x00_get_field16(eeprom, EEPROM_ANTENNA_HARDWARE_RADIO))
+               __set_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags);
+
+       /*
+        * Check if the BBP tuning should be enabled.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &eeprom);
+
+       if (rt2x00_get_field16(eeprom, EEPROM_NIC_DYN_BBP_TUNE))
+               __set_bit(CONFIG_DISABLE_LINK_TUNING, &rt2x00dev->flags);
+
+       /*
+        * Read the RSSI <-> dBm offset information.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_CALIBRATE_OFFSET, &eeprom);
+       rt2x00dev->rssi_offset =
+           rt2x00_get_field16(eeprom, EEPROM_CALIBRATE_OFFSET_RSSI);
+
+       return 0;
+}
+
+/*
+ * RF value list for RF2522
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2522[] = {
+       { 1,  0x00002050, 0x000c1fda, 0x00000101, 0 },
+       { 2,  0x00002050, 0x000c1fee, 0x00000101, 0 },
+       { 3,  0x00002050, 0x000c2002, 0x00000101, 0 },
+       { 4,  0x00002050, 0x000c2016, 0x00000101, 0 },
+       { 5,  0x00002050, 0x000c202a, 0x00000101, 0 },
+       { 6,  0x00002050, 0x000c203e, 0x00000101, 0 },
+       { 7,  0x00002050, 0x000c2052, 0x00000101, 0 },
+       { 8,  0x00002050, 0x000c2066, 0x00000101, 0 },
+       { 9,  0x00002050, 0x000c207a, 0x00000101, 0 },
+       { 10, 0x00002050, 0x000c208e, 0x00000101, 0 },
+       { 11, 0x00002050, 0x000c20a2, 0x00000101, 0 },
+       { 12, 0x00002050, 0x000c20b6, 0x00000101, 0 },
+       { 13, 0x00002050, 0x000c20ca, 0x00000101, 0 },
+       { 14, 0x00002050, 0x000c20fa, 0x00000101, 0 },
+};
+
+/*
+ * RF value list for RF2523
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2523[] = {
+       { 1,  0x00022010, 0x00000c9e, 0x000e0111, 0x00000a1b },
+       { 2,  0x00022010, 0x00000ca2, 0x000e0111, 0x00000a1b },
+       { 3,  0x00022010, 0x00000ca6, 0x000e0111, 0x00000a1b },
+       { 4,  0x00022010, 0x00000caa, 0x000e0111, 0x00000a1b },
+       { 5,  0x00022010, 0x00000cae, 0x000e0111, 0x00000a1b },
+       { 6,  0x00022010, 0x00000cb2, 0x000e0111, 0x00000a1b },
+       { 7,  0x00022010, 0x00000cb6, 0x000e0111, 0x00000a1b },
+       { 8,  0x00022010, 0x00000cba, 0x000e0111, 0x00000a1b },
+       { 9,  0x00022010, 0x00000cbe, 0x000e0111, 0x00000a1b },
+       { 10, 0x00022010, 0x00000d02, 0x000e0111, 0x00000a1b },
+       { 11, 0x00022010, 0x00000d06, 0x000e0111, 0x00000a1b },
+       { 12, 0x00022010, 0x00000d0a, 0x000e0111, 0x00000a1b },
+       { 13, 0x00022010, 0x00000d0e, 0x000e0111, 0x00000a1b },
+       { 14, 0x00022010, 0x00000d1a, 0x000e0111, 0x00000a03 },
+};
+
+/*
+ * RF value list for RF2524
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2524[] = {
+       { 1,  0x00032020, 0x00000c9e, 0x00000101, 0x00000a1b },
+       { 2,  0x00032020, 0x00000ca2, 0x00000101, 0x00000a1b },
+       { 3,  0x00032020, 0x00000ca6, 0x00000101, 0x00000a1b },
+       { 4,  0x00032020, 0x00000caa, 0x00000101, 0x00000a1b },
+       { 5,  0x00032020, 0x00000cae, 0x00000101, 0x00000a1b },
+       { 6,  0x00032020, 0x00000cb2, 0x00000101, 0x00000a1b },
+       { 7,  0x00032020, 0x00000cb6, 0x00000101, 0x00000a1b },
+       { 8,  0x00032020, 0x00000cba, 0x00000101, 0x00000a1b },
+       { 9,  0x00032020, 0x00000cbe, 0x00000101, 0x00000a1b },
+       { 10, 0x00032020, 0x00000d02, 0x00000101, 0x00000a1b },
+       { 11, 0x00032020, 0x00000d06, 0x00000101, 0x00000a1b },
+       { 12, 0x00032020, 0x00000d0a, 0x00000101, 0x00000a1b },
+       { 13, 0x00032020, 0x00000d0e, 0x00000101, 0x00000a1b },
+       { 14, 0x00032020, 0x00000d1a, 0x00000101, 0x00000a03 },
+};
+
+/*
+ * RF value list for RF2525
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2525[] = {
+       { 1,  0x00022020, 0x00080c9e, 0x00060111, 0x00000a1b },
+       { 2,  0x00022020, 0x00080ca2, 0x00060111, 0x00000a1b },
+       { 3,  0x00022020, 0x00080ca6, 0x00060111, 0x00000a1b },
+       { 4,  0x00022020, 0x00080caa, 0x00060111, 0x00000a1b },
+       { 5,  0x00022020, 0x00080cae, 0x00060111, 0x00000a1b },
+       { 6,  0x00022020, 0x00080cb2, 0x00060111, 0x00000a1b },
+       { 7,  0x00022020, 0x00080cb6, 0x00060111, 0x00000a1b },
+       { 8,  0x00022020, 0x00080cba, 0x00060111, 0x00000a1b },
+       { 9,  0x00022020, 0x00080cbe, 0x00060111, 0x00000a1b },
+       { 10, 0x00022020, 0x00080d02, 0x00060111, 0x00000a1b },
+       { 11, 0x00022020, 0x00080d06, 0x00060111, 0x00000a1b },
+       { 12, 0x00022020, 0x00080d0a, 0x00060111, 0x00000a1b },
+       { 13, 0x00022020, 0x00080d0e, 0x00060111, 0x00000a1b },
+       { 14, 0x00022020, 0x00080d1a, 0x00060111, 0x00000a03 },
+};
+
+/*
+ * RF value list for RF2525e
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2525e[] = {
+       { 1,  0x00022020, 0x00081136, 0x00060111, 0x00000a0b },
+       { 2,  0x00022020, 0x0008113a, 0x00060111, 0x00000a0b },
+       { 3,  0x00022020, 0x0008113e, 0x00060111, 0x00000a0b },
+       { 4,  0x00022020, 0x00081182, 0x00060111, 0x00000a0b },
+       { 5,  0x00022020, 0x00081186, 0x00060111, 0x00000a0b },
+       { 6,  0x00022020, 0x0008118a, 0x00060111, 0x00000a0b },
+       { 7,  0x00022020, 0x0008118e, 0x00060111, 0x00000a0b },
+       { 8,  0x00022020, 0x00081192, 0x00060111, 0x00000a0b },
+       { 9,  0x00022020, 0x00081196, 0x00060111, 0x00000a0b },
+       { 10, 0x00022020, 0x0008119a, 0x00060111, 0x00000a0b },
+       { 11, 0x00022020, 0x0008119e, 0x00060111, 0x00000a0b },
+       { 12, 0x00022020, 0x000811a2, 0x00060111, 0x00000a0b },
+       { 13, 0x00022020, 0x000811a6, 0x00060111, 0x00000a0b },
+       { 14, 0x00022020, 0x000811ae, 0x00060111, 0x00000a1b },
+};
+
+/*
+ * RF value list for RF5222
+ * Supports: 2.4 GHz & 5.2 GHz
+ */
+static const struct rf_channel rf_vals_5222[] = {
+       { 1,  0x00022020, 0x00001136, 0x00000101, 0x00000a0b },
+       { 2,  0x00022020, 0x0000113a, 0x00000101, 0x00000a0b },
+       { 3,  0x00022020, 0x0000113e, 0x00000101, 0x00000a0b },
+       { 4,  0x00022020, 0x00001182, 0x00000101, 0x00000a0b },
+       { 5,  0x00022020, 0x00001186, 0x00000101, 0x00000a0b },
+       { 6,  0x00022020, 0x0000118a, 0x00000101, 0x00000a0b },
+       { 7,  0x00022020, 0x0000118e, 0x00000101, 0x00000a0b },
+       { 8,  0x00022020, 0x00001192, 0x00000101, 0x00000a0b },
+       { 9,  0x00022020, 0x00001196, 0x00000101, 0x00000a0b },
+       { 10, 0x00022020, 0x0000119a, 0x00000101, 0x00000a0b },
+       { 11, 0x00022020, 0x0000119e, 0x00000101, 0x00000a0b },
+       { 12, 0x00022020, 0x000011a2, 0x00000101, 0x00000a0b },
+       { 13, 0x00022020, 0x000011a6, 0x00000101, 0x00000a0b },
+       { 14, 0x00022020, 0x000011ae, 0x00000101, 0x00000a1b },
+
+       /* 802.11 UNI / HyperLan 2 */
+       { 36, 0x00022010, 0x00018896, 0x00000101, 0x00000a1f },
+       { 40, 0x00022010, 0x0001889a, 0x00000101, 0x00000a1f },
+       { 44, 0x00022010, 0x0001889e, 0x00000101, 0x00000a1f },
+       { 48, 0x00022010, 0x000188a2, 0x00000101, 0x00000a1f },
+       { 52, 0x00022010, 0x000188a6, 0x00000101, 0x00000a1f },
+       { 66, 0x00022010, 0x000188aa, 0x00000101, 0x00000a1f },
+       { 60, 0x00022010, 0x000188ae, 0x00000101, 0x00000a1f },
+       { 64, 0x00022010, 0x000188b2, 0x00000101, 0x00000a1f },
+
+       /* 802.11 HyperLan 2 */
+       { 100, 0x00022010, 0x00008802, 0x00000101, 0x00000a0f },
+       { 104, 0x00022010, 0x00008806, 0x00000101, 0x00000a0f },
+       { 108, 0x00022010, 0x0000880a, 0x00000101, 0x00000a0f },
+       { 112, 0x00022010, 0x0000880e, 0x00000101, 0x00000a0f },
+       { 116, 0x00022010, 0x00008812, 0x00000101, 0x00000a0f },
+       { 120, 0x00022010, 0x00008816, 0x00000101, 0x00000a0f },
+       { 124, 0x00022010, 0x0000881a, 0x00000101, 0x00000a0f },
+       { 128, 0x00022010, 0x0000881e, 0x00000101, 0x00000a0f },
+       { 132, 0x00022010, 0x00008822, 0x00000101, 0x00000a0f },
+       { 136, 0x00022010, 0x00008826, 0x00000101, 0x00000a0f },
+
+       /* 802.11 UNII */
+       { 140, 0x00022010, 0x0000882a, 0x00000101, 0x00000a0f },
+       { 149, 0x00022020, 0x000090a6, 0x00000101, 0x00000a07 },
+       { 153, 0x00022020, 0x000090ae, 0x00000101, 0x00000a07 },
+       { 157, 0x00022020, 0x000090b6, 0x00000101, 0x00000a07 },
+       { 161, 0x00022020, 0x000090be, 0x00000101, 0x00000a07 },
+};
+
+static void rt2500pci_probe_hw_mode(struct rt2x00_dev *rt2x00dev)
+{
+       struct hw_mode_spec *spec = &rt2x00dev->spec;
+       u8 *txpower;
+       unsigned int i;
+
+       /*
+        * Initialize all hw fields.
+        */
+       rt2x00dev->hw->flags =
+           IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING |
+           IEEE80211_HW_MONITOR_DURING_OPER |
+           IEEE80211_HW_NO_PROBE_FILTERING;
+       rt2x00dev->hw->extra_tx_headroom = 0;
+       rt2x00dev->hw->max_signal = MAX_SIGNAL;
+       rt2x00dev->hw->max_rssi = MAX_RX_SSI;
+       rt2x00dev->hw->queues = 2;
+
+       SET_IEEE80211_DEV(rt2x00dev->hw, &rt2x00dev_pci(rt2x00dev)->dev);
+       SET_IEEE80211_PERM_ADDR(rt2x00dev->hw,
+                               rt2x00_eeprom_addr(rt2x00dev,
+                                                  EEPROM_MAC_ADDR_0));
+
+       /*
+        * Convert tx_power array in eeprom.
+        */
+       txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_START);
+       for (i = 0; i < 14; i++)
+               txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+       /*
+        * Initialize hw_mode information.
+        */
+       spec->num_modes = 2;
+       spec->num_rates = 12;
+       spec->tx_power_a = NULL;
+       spec->tx_power_bg = txpower;
+       spec->tx_power_default = DEFAULT_TXPOWER;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF2522)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2522);
+               spec->channels = rf_vals_bg_2522;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF2523)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2523);
+               spec->channels = rf_vals_bg_2523;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF2524)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2524);
+               spec->channels = rf_vals_bg_2524;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF2525)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2525);
+               spec->channels = rf_vals_bg_2525;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF2525E)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2525e);
+               spec->channels = rf_vals_bg_2525e;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_5222);
+               spec->channels = rf_vals_5222;
+               spec->num_modes = 3;
+       }
+}
+
+static int rt2500pci_probe_hw(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       /*
+        * Allocate eeprom data.
+        */
+       retval = rt2500pci_validate_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt2500pci_init_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       /*
+        * Initialize hw specifications.
+        */
+       rt2500pci_probe_hw_mode(rt2x00dev);
+
+       /*
+        * This device requires the beacon ring
+        */
+       __set_bit(REQUIRE_BEACON_RING, &rt2x00dev->flags);
+
+       /*
+        * Set the rssi offset.
+        */
+       rt2x00dev->rssi_offset = DEFAULT_RSSI_OFFSET;
+
+       return 0;
+}
+
+/*
+ * IEEE80211 stack callback functions.
+ */
+static int rt2500pci_set_retry_limit(struct ieee80211_hw *hw,
+                                    u32 short_retry, u32 long_retry)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_LONG_RETRY, long_retry);
+       rt2x00_set_field32(&reg, CSR11_SHORT_RETRY, short_retry);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       return 0;
+}
+
+static u64 rt2500pci_get_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u64 tsf;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR17, &reg);
+       tsf = (u64) rt2x00_get_field32(reg, CSR17_HIGH_TSFTIMER) << 32;
+       rt2x00pci_register_read(rt2x00dev, CSR16, &reg);
+       tsf |= rt2x00_get_field32(reg, CSR16_LOW_TSFTIMER);
+
+       return tsf;
+}
+
+static void rt2500pci_reset_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       rt2x00pci_register_write(rt2x00dev, CSR16, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR17, 0);
+}
+
+static int rt2500pci_tx_last_beacon(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR15, &reg);
+       return rt2x00_get_field32(reg, CSR15_BEACON_SENT);
+}
+
+static const struct ieee80211_ops rt2500pci_mac80211_ops = {
+       .tx                     = rt2x00mac_tx,
+       .add_interface          = rt2x00mac_add_interface,
+       .remove_interface       = rt2x00mac_remove_interface,
+       .config                 = rt2x00mac_config,
+       .config_interface       = rt2x00mac_config_interface,
+       .set_multicast_list     = rt2x00mac_set_multicast_list,
+       .get_stats              = rt2x00mac_get_stats,
+       .set_retry_limit        = rt2500pci_set_retry_limit,
+       .conf_tx                = rt2x00mac_conf_tx,
+       .get_tx_stats           = rt2x00mac_get_tx_stats,
+       .get_tsf                = rt2500pci_get_tsf,
+       .reset_tsf              = rt2500pci_reset_tsf,
+       .beacon_update          = rt2x00pci_beacon_update,
+       .tx_last_beacon         = rt2500pci_tx_last_beacon,
+};
+
+static const struct rt2x00lib_ops rt2500pci_rt2x00_ops = {
+       .irq_handler            = rt2500pci_interrupt,
+       .probe_hw               = rt2500pci_probe_hw,
+       .initialize             = rt2x00pci_initialize,
+       .uninitialize           = rt2x00pci_uninitialize,
+       .set_device_state       = rt2500pci_set_device_state,
+#ifdef CONFIG_RT2500PCI_RFKILL
+       .rfkill_poll            = rt2500pci_rfkill_poll,
+#endif /* CONFIG_RT2500PCI_RFKILL */
+       .link_stats             = rt2500pci_link_stats,
+       .reset_tuner            = rt2500pci_reset_tuner,
+       .link_tuner             = rt2500pci_link_tuner,
+       .write_tx_desc          = rt2500pci_write_tx_desc,
+       .write_tx_data          = rt2x00pci_write_tx_data,
+       .kick_tx_queue          = rt2500pci_kick_tx_queue,
+       .fill_rxdone            = rt2500pci_fill_rxdone,
+       .config_mac_addr        = rt2500pci_config_mac_addr,
+       .config_bssid           = rt2500pci_config_bssid,
+       .config_packet_filter   = rt2500pci_config_packet_filter,
+       .config_type            = rt2500pci_config_type,
+       .config                 = rt2500pci_config,
+};
+
+static const struct rt2x00_ops rt2500pci_ops = {
+       .name           = DRV_NAME,
+       .rxd_size       = RXD_DESC_SIZE,
+       .txd_size       = TXD_DESC_SIZE,
+       .eeprom_size    = EEPROM_SIZE,
+       .rf_size        = RF_SIZE,
+       .lib            = &rt2500pci_rt2x00_ops,
+       .hw             = &rt2500pci_mac80211_ops,
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       .debugfs        = &rt2500pci_rt2x00debug,
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * RT2500pci module information.
+ */
+static struct pci_device_id rt2500pci_device_table[] = {
+       { PCI_DEVICE(0x1814, 0x0201), PCI_DEVICE_DATA(&rt2500pci_ops) },
+       { 0, }
+};
+
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("Ralink RT2500 PCI & PCMCIA Wireless LAN driver.");
+MODULE_SUPPORTED_DEVICE("Ralink RT2560 PCI & PCMCIA chipset based cards");
+MODULE_DEVICE_TABLE(pci, rt2500pci_device_table);
+MODULE_LICENSE("GPL");
+
+static struct pci_driver rt2500pci_driver = {
+       .name           = DRV_NAME,
+       .id_table       = rt2500pci_device_table,
+       .probe          = rt2x00pci_probe,
+       .remove         = __devexit_p(rt2x00pci_remove),
+       .suspend        = rt2x00pci_suspend,
+       .resume         = rt2x00pci_resume,
+};
+
+static int __init rt2500pci_init(void)
+{
+       return pci_register_driver(&rt2500pci_driver);
+}
+
+static void __exit rt2500pci_exit(void)
+{
+       pci_unregister_driver(&rt2500pci_driver);
+}
+
+module_init(rt2500pci_init);
+module_exit(rt2500pci_exit);
diff --git a/drivers/net/wireless/rt2x00/rt2500pci.h b/drivers/net/wireless/rt2x00/rt2500pci.h
new file mode 100644 (file)
index 0000000..d92aa56
--- /dev/null
@@ -0,0 +1,1236 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2500pci
+       Abstract: Data structures and registers for the rt2500pci module.
+       Supported chipsets: RT2560.
+ */
+
+#ifndef RT2500PCI_H
+#define RT2500PCI_H
+
+/*
+ * RF chip defines.
+ */
+#define RF2522                         0x0000
+#define RF2523                         0x0001
+#define RF2524                         0x0002
+#define RF2525                         0x0003
+#define RF2525E                                0x0004
+#define RF5222                         0x0010
+
+/*
+ * RT2560 version
+ */
+#define RT2560_VERSION_B               2
+#define RT2560_VERSION_C               3
+#define RT2560_VERSION_D               4
+
+/*
+ * Signal information.
+ * Defaul offset is required for RSSI <-> dBm conversion.
+ */
+#define MAX_SIGNAL                     100
+#define MAX_RX_SSI                     -1
+#define DEFAULT_RSSI_OFFSET            121
+
+/*
+ * Register layout information.
+ */
+#define CSR_REG_BASE                   0x0000
+#define CSR_REG_SIZE                   0x0174
+#define EEPROM_BASE                    0x0000
+#define EEPROM_SIZE                    0x0200
+#define BBP_SIZE                       0x0040
+#define RF_SIZE                                0x0014
+
+/*
+ * Control/Status Registers(CSR).
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * CSR0: ASIC revision number.
+ */
+#define CSR0                           0x0000
+
+/*
+ * CSR1: System control register.
+ * SOFT_RESET: Software reset, 1: reset, 0: normal.
+ * BBP_RESET: Hardware reset, 1: reset, 0, release.
+ * HOST_READY: Host ready after initialization.
+ */
+#define CSR1                           0x0004
+#define CSR1_SOFT_RESET                        FIELD32(0x00000001)
+#define CSR1_BBP_RESET                 FIELD32(0x00000002)
+#define CSR1_HOST_READY                        FIELD32(0x00000004)
+
+/*
+ * CSR2: System admin status register (invalid).
+ */
+#define CSR2                           0x0008
+
+/*
+ * CSR3: STA MAC address register 0.
+ */
+#define CSR3                           0x000c
+#define CSR3_BYTE0                     FIELD32(0x000000ff)
+#define CSR3_BYTE1                     FIELD32(0x0000ff00)
+#define CSR3_BYTE2                     FIELD32(0x00ff0000)
+#define CSR3_BYTE3                     FIELD32(0xff000000)
+
+/*
+ * CSR4: STA MAC address register 1.
+ */
+#define CSR4                           0x0010
+#define CSR4_BYTE4                     FIELD32(0x000000ff)
+#define CSR4_BYTE5                     FIELD32(0x0000ff00)
+
+/*
+ * CSR5: BSSID register 0.
+ */
+#define CSR5                           0x0014
+#define CSR5_BYTE0                     FIELD32(0x000000ff)
+#define CSR5_BYTE1                     FIELD32(0x0000ff00)
+#define CSR5_BYTE2                     FIELD32(0x00ff0000)
+#define CSR5_BYTE3                     FIELD32(0xff000000)
+
+/*
+ * CSR6: BSSID register 1.
+ */
+#define CSR6                           0x0018
+#define CSR6_BYTE4                     FIELD32(0x000000ff)
+#define CSR6_BYTE5                     FIELD32(0x0000ff00)
+
+/*
+ * CSR7: Interrupt source register.
+ * Write 1 to clear.
+ * TBCN_EXPIRE: Beacon timer expired interrupt.
+ * TWAKE_EXPIRE: Wakeup timer expired interrupt.
+ * TATIMW_EXPIRE: Timer of atim window expired interrupt.
+ * TXDONE_TXRING: Tx ring transmit done interrupt.
+ * TXDONE_ATIMRING: Atim ring transmit done interrupt.
+ * TXDONE_PRIORING: Priority ring transmit done interrupt.
+ * RXDONE: Receive done interrupt.
+ * DECRYPTION_DONE: Decryption done interrupt.
+ * ENCRYPTION_DONE: Encryption done interrupt.
+ * UART1_TX_TRESHOLD: UART1 TX reaches threshold.
+ * UART1_RX_TRESHOLD: UART1 RX reaches threshold.
+ * UART1_IDLE_TRESHOLD: UART1 IDLE over threshold.
+ * UART1_TX_BUFF_ERROR: UART1 TX buffer error.
+ * UART1_RX_BUFF_ERROR: UART1 RX buffer error.
+ * UART2_TX_TRESHOLD: UART2 TX reaches threshold.
+ * UART2_RX_TRESHOLD: UART2 RX reaches threshold.
+ * UART2_IDLE_TRESHOLD: UART2 IDLE over threshold.
+ * UART2_TX_BUFF_ERROR: UART2 TX buffer error.
+ * UART2_RX_BUFF_ERROR: UART2 RX buffer error.
+ * TIMER_CSR3_EXPIRE: TIMECSR3 timer expired (802.1H quiet period).
+
+ */
+#define CSR7                           0x001c
+#define CSR7_TBCN_EXPIRE               FIELD32(0x00000001)
+#define CSR7_TWAKE_EXPIRE              FIELD32(0x00000002)
+#define CSR7_TATIMW_EXPIRE             FIELD32(0x00000004)
+#define CSR7_TXDONE_TXRING             FIELD32(0x00000008)
+#define CSR7_TXDONE_ATIMRING           FIELD32(0x00000010)
+#define CSR7_TXDONE_PRIORING           FIELD32(0x00000020)
+#define CSR7_RXDONE                    FIELD32(0x00000040)
+#define CSR7_DECRYPTION_DONE           FIELD32(0x00000080)
+#define CSR7_ENCRYPTION_DONE           FIELD32(0x00000100)
+#define CSR7_UART1_TX_TRESHOLD         FIELD32(0x00000200)
+#define CSR7_UART1_RX_TRESHOLD         FIELD32(0x00000400)
+#define CSR7_UART1_IDLE_TRESHOLD       FIELD32(0x00000800)
+#define CSR7_UART1_TX_BUFF_ERROR       FIELD32(0x00001000)
+#define CSR7_UART1_RX_BUFF_ERROR       FIELD32(0x00002000)
+#define CSR7_UART2_TX_TRESHOLD         FIELD32(0x00004000)
+#define CSR7_UART2_RX_TRESHOLD         FIELD32(0x00008000)
+#define CSR7_UART2_IDLE_TRESHOLD       FIELD32(0x00010000)
+#define CSR7_UART2_TX_BUFF_ERROR       FIELD32(0x00020000)
+#define CSR7_UART2_RX_BUFF_ERROR       FIELD32(0x00040000)
+#define CSR7_TIMER_CSR3_EXPIRE         FIELD32(0x00080000)
+
+/*
+ * CSR8: Interrupt mask register.
+ * Write 1 to mask interrupt.
+ * TBCN_EXPIRE: Beacon timer expired interrupt.
+ * TWAKE_EXPIRE: Wakeup timer expired interrupt.
+ * TATIMW_EXPIRE: Timer of atim window expired interrupt.
+ * TXDONE_TXRING: Tx ring transmit done interrupt.
+ * TXDONE_ATIMRING: Atim ring transmit done interrupt.
+ * TXDONE_PRIORING: Priority ring transmit done interrupt.
+ * RXDONE: Receive done interrupt.
+ * DECRYPTION_DONE: Decryption done interrupt.
+ * ENCRYPTION_DONE: Encryption done interrupt.
+ * UART1_TX_TRESHOLD: UART1 TX reaches threshold.
+ * UART1_RX_TRESHOLD: UART1 RX reaches threshold.
+ * UART1_IDLE_TRESHOLD: UART1 IDLE over threshold.
+ * UART1_TX_BUFF_ERROR: UART1 TX buffer error.
+ * UART1_RX_BUFF_ERROR: UART1 RX buffer error.
+ * UART2_TX_TRESHOLD: UART2 TX reaches threshold.
+ * UART2_RX_TRESHOLD: UART2 RX reaches threshold.
+ * UART2_IDLE_TRESHOLD: UART2 IDLE over threshold.
+ * UART2_TX_BUFF_ERROR: UART2 TX buffer error.
+ * UART2_RX_BUFF_ERROR: UART2 RX buffer error.
+ * TIMER_CSR3_EXPIRE: TIMECSR3 timer expired (802.1H quiet period).
+ */
+#define CSR8                           0x0020
+#define CSR8_TBCN_EXPIRE               FIELD32(0x00000001)
+#define CSR8_TWAKE_EXPIRE              FIELD32(0x00000002)
+#define CSR8_TATIMW_EXPIRE             FIELD32(0x00000004)
+#define CSR8_TXDONE_TXRING             FIELD32(0x00000008)
+#define CSR8_TXDONE_ATIMRING           FIELD32(0x00000010)
+#define CSR8_TXDONE_PRIORING           FIELD32(0x00000020)
+#define CSR8_RXDONE                    FIELD32(0x00000040)
+#define CSR8_DECRYPTION_DONE           FIELD32(0x00000080)
+#define CSR8_ENCRYPTION_DONE           FIELD32(0x00000100)
+#define CSR8_UART1_TX_TRESHOLD         FIELD32(0x00000200)
+#define CSR8_UART1_RX_TRESHOLD         FIELD32(0x00000400)
+#define CSR8_UART1_IDLE_TRESHOLD       FIELD32(0x00000800)
+#define CSR8_UART1_TX_BUFF_ERROR       FIELD32(0x00001000)
+#define CSR8_UART1_RX_BUFF_ERROR       FIELD32(0x00002000)
+#define CSR8_UART2_TX_TRESHOLD         FIELD32(0x00004000)
+#define CSR8_UART2_RX_TRESHOLD         FIELD32(0x00008000)
+#define CSR8_UART2_IDLE_TRESHOLD       FIELD32(0x00010000)
+#define CSR8_UART2_TX_BUFF_ERROR       FIELD32(0x00020000)
+#define CSR8_UART2_RX_BUFF_ERROR       FIELD32(0x00040000)
+#define CSR8_TIMER_CSR3_EXPIRE         FIELD32(0x00080000)
+
+/*
+ * CSR9: Maximum frame length register.
+ * MAX_FRAME_UNIT: Maximum frame length in 128b unit, default: 12.
+ */
+#define CSR9                           0x0024
+#define CSR9_MAX_FRAME_UNIT            FIELD32(0x00000f80)
+
+/*
+ * SECCSR0: WEP control register.
+ * KICK_DECRYPT: Kick decryption engine, self-clear.
+ * ONE_SHOT: 0: ring mode, 1: One shot only mode.
+ * DESC_ADDRESS: Descriptor physical address of frame.
+ */
+#define SECCSR0                                0x0028
+#define SECCSR0_KICK_DECRYPT           FIELD32(0x00000001)
+#define SECCSR0_ONE_SHOT               FIELD32(0x00000002)
+#define SECCSR0_DESC_ADDRESS           FIELD32(0xfffffffc)
+
+/*
+ * CSR11: Back-off control register.
+ * CWMIN: CWmin. Default cwmin is 31 (2^5 - 1).
+ * CWMAX: CWmax. Default cwmax is 1023 (2^10 - 1).
+ * SLOT_TIME: Slot time, default is 20us for 802.11b
+ * CW_SELECT: CWmin/CWmax selection, 1: Register, 0: TXD.
+ * LONG_RETRY: Long retry count.
+ * SHORT_RETRY: Short retry count.
+ */
+#define CSR11                          0x002c
+#define CSR11_CWMIN                    FIELD32(0x0000000f)
+#define CSR11_CWMAX                    FIELD32(0x000000f0)
+#define CSR11_SLOT_TIME                        FIELD32(0x00001f00)
+#define CSR11_CW_SELECT                        FIELD32(0x00002000)
+#define CSR11_LONG_RETRY               FIELD32(0x00ff0000)
+#define CSR11_SHORT_RETRY              FIELD32(0xff000000)
+
+/*
+ * CSR12: Synchronization configuration register 0.
+ * All units in 1/16 TU.
+ * BEACON_INTERVAL: Beacon interval, default is 100 TU.
+ * CFP_MAX_DURATION: Cfp maximum duration, default is 100 TU.
+ */
+#define CSR12                          0x0030
+#define CSR12_BEACON_INTERVAL          FIELD32(0x0000ffff)
+#define CSR12_CFP_MAX_DURATION         FIELD32(0xffff0000)
+
+/*
+ * CSR13: Synchronization configuration register 1.
+ * All units in 1/16 TU.
+ * ATIMW_DURATION: Atim window duration.
+ * CFP_PERIOD: Cfp period, default is 0 TU.
+ */
+#define CSR13                          0x0034
+#define CSR13_ATIMW_DURATION           FIELD32(0x0000ffff)
+#define CSR13_CFP_PERIOD               FIELD32(0x00ff0000)
+
+/*
+ * CSR14: Synchronization control register.
+ * TSF_COUNT: Enable tsf auto counting.
+ * TSF_SYNC: Tsf sync, 0: disable, 1: infra, 2: ad-hoc/master mode.
+ * TBCN: Enable tbcn with reload value.
+ * TCFP: Enable tcfp & cfp / cp switching.
+ * TATIMW: Enable tatimw & atim window switching.
+ * BEACON_GEN: Enable beacon generator.
+ * CFP_COUNT_PRELOAD: Cfp count preload value.
+ * TBCM_PRELOAD: Tbcn preload value in units of 64us.
+ */
+#define CSR14                          0x0038
+#define CSR14_TSF_COUNT                        FIELD32(0x00000001)
+#define CSR14_TSF_SYNC                 FIELD32(0x00000006)
+#define CSR14_TBCN                     FIELD32(0x00000008)
+#define CSR14_TCFP                     FIELD32(0x00000010)
+#define CSR14_TATIMW                   FIELD32(0x00000020)
+#define CSR14_BEACON_GEN               FIELD32(0x00000040)
+#define CSR14_CFP_COUNT_PRELOAD                FIELD32(0x0000ff00)
+#define CSR14_TBCM_PRELOAD             FIELD32(0xffff0000)
+
+/*
+ * CSR15: Synchronization status register.
+ * CFP: ASIC is in contention-free period.
+ * ATIMW: ASIC is in ATIM window.
+ * BEACON_SENT: Beacon is send.
+ */
+#define CSR15                          0x003c
+#define CSR15_CFP                      FIELD32(0x00000001)
+#define CSR15_ATIMW                    FIELD32(0x00000002)
+#define CSR15_BEACON_SENT              FIELD32(0x00000004)
+
+/*
+ * CSR16: TSF timer register 0.
+ */
+#define CSR16                          0x0040
+#define CSR16_LOW_TSFTIMER             FIELD32(0xffffffff)
+
+/*
+ * CSR17: TSF timer register 1.
+ */
+#define CSR17                          0x0044
+#define CSR17_HIGH_TSFTIMER            FIELD32(0xffffffff)
+
+/*
+ * CSR18: IFS timer register 0.
+ * SIFS: Sifs, default is 10 us.
+ * PIFS: Pifs, default is 30 us.
+ */
+#define CSR18                          0x0048
+#define CSR18_SIFS                     FIELD32(0x000001ff)
+#define CSR18_PIFS                     FIELD32(0x001f0000)
+
+/*
+ * CSR19: IFS timer register 1.
+ * DIFS: Difs, default is 50 us.
+ * EIFS: Eifs, default is 364 us.
+ */
+#define CSR19                          0x004c
+#define CSR19_DIFS                     FIELD32(0x0000ffff)
+#define CSR19_EIFS                     FIELD32(0xffff0000)
+
+/*
+ * CSR20: Wakeup timer register.
+ * DELAY_AFTER_TBCN: Delay after tbcn expired in units of 1/16 TU.
+ * TBCN_BEFORE_WAKEUP: Number of beacon before wakeup.
+ * AUTOWAKE: Enable auto wakeup / sleep mechanism.
+ */
+#define CSR20                          0x0050
+#define CSR20_DELAY_AFTER_TBCN         FIELD32(0x0000ffff)
+#define CSR20_TBCN_BEFORE_WAKEUP       FIELD32(0x00ff0000)
+#define CSR20_AUTOWAKE                 FIELD32(0x01000000)
+
+/*
+ * CSR21: EEPROM control register.
+ * RELOAD: Write 1 to reload eeprom content.
+ * TYPE_93C46: 1: 93c46, 0:93c66.
+ */
+#define CSR21                          0x0054
+#define CSR21_RELOAD                   FIELD32(0x00000001)
+#define CSR21_EEPROM_DATA_CLOCK                FIELD32(0x00000002)
+#define CSR21_EEPROM_CHIP_SELECT       FIELD32(0x00000004)
+#define CSR21_EEPROM_DATA_IN           FIELD32(0x00000008)
+#define CSR21_EEPROM_DATA_OUT          FIELD32(0x00000010)
+#define CSR21_TYPE_93C46               FIELD32(0x00000020)
+
+/*
+ * CSR22: CFP control register.
+ * CFP_DURATION_REMAIN: Cfp duration remain, in units of TU.
+ * RELOAD_CFP_DURATION: Write 1 to reload cfp duration remain.
+ */
+#define CSR22                          0x0058
+#define CSR22_CFP_DURATION_REMAIN      FIELD32(0x0000ffff)
+#define CSR22_RELOAD_CFP_DURATION      FIELD32(0x00010000)
+
+/*
+ * Transmit related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * TXCSR0: TX Control Register.
+ * KICK_TX: Kick tx ring.
+ * KICK_ATIM: Kick atim ring.
+ * KICK_PRIO: Kick priority ring.
+ * ABORT: Abort all transmit related ring operation.
+ */
+#define TXCSR0                         0x0060
+#define TXCSR0_KICK_TX                 FIELD32(0x00000001)
+#define TXCSR0_KICK_ATIM               FIELD32(0x00000002)
+#define TXCSR0_KICK_PRIO               FIELD32(0x00000004)
+#define TXCSR0_ABORT                   FIELD32(0x00000008)
+
+/*
+ * TXCSR1: TX Configuration Register.
+ * ACK_TIMEOUT: Ack timeout, default = sifs + 2*slottime + acktime @ 1mbps.
+ * ACK_CONSUME_TIME: Ack consume time, default = sifs + acktime @ 1mbps.
+ * TSF_OFFSET: Insert tsf offset.
+ * AUTORESPONDER: Enable auto responder which include ack & cts.
+ */
+#define TXCSR1                         0x0064
+#define TXCSR1_ACK_TIMEOUT             FIELD32(0x000001ff)
+#define TXCSR1_ACK_CONSUME_TIME                FIELD32(0x0003fe00)
+#define TXCSR1_TSF_OFFSET              FIELD32(0x00fc0000)
+#define TXCSR1_AUTORESPONDER           FIELD32(0x01000000)
+
+/*
+ * TXCSR2: Tx descriptor configuration register.
+ * TXD_SIZE: Tx descriptor size, default is 48.
+ * NUM_TXD: Number of tx entries in ring.
+ * NUM_ATIM: Number of atim entries in ring.
+ * NUM_PRIO: Number of priority entries in ring.
+ */
+#define TXCSR2                         0x0068
+#define TXCSR2_TXD_SIZE                        FIELD32(0x000000ff)
+#define TXCSR2_NUM_TXD                 FIELD32(0x0000ff00)
+#define TXCSR2_NUM_ATIM                        FIELD32(0x00ff0000)
+#define TXCSR2_NUM_PRIO                        FIELD32(0xff000000)
+
+/*
+ * TXCSR3: TX Ring Base address register.
+ */
+#define TXCSR3                         0x006c
+#define TXCSR3_TX_RING_REGISTER                FIELD32(0xffffffff)
+
+/*
+ * TXCSR4: TX Atim Ring Base address register.
+ */
+#define TXCSR4                         0x0070
+#define TXCSR4_ATIM_RING_REGISTER      FIELD32(0xffffffff)
+
+/*
+ * TXCSR5: TX Prio Ring Base address register.
+ */
+#define TXCSR5                         0x0074
+#define TXCSR5_PRIO_RING_REGISTER      FIELD32(0xffffffff)
+
+/*
+ * TXCSR6: Beacon Base address register.
+ */
+#define TXCSR6                         0x0078
+#define TXCSR6_BEACON_RING_REGISTER    FIELD32(0xffffffff)
+
+/*
+ * TXCSR7: Auto responder control register.
+ * AR_POWERMANAGEMENT: Auto responder power management bit.
+ */
+#define TXCSR7                         0x007c
+#define TXCSR7_AR_POWERMANAGEMENT      FIELD32(0x00000001)
+
+/*
+ * TXCSR8: CCK Tx BBP register.
+ */
+#define TXCSR8                         0x0098
+#define TXCSR8_BBP_ID0                 FIELD32(0x0000007f)
+#define TXCSR8_BBP_ID0_VALID           FIELD32(0x00000080)
+#define TXCSR8_BBP_ID1                 FIELD32(0x00007f00)
+#define TXCSR8_BBP_ID1_VALID           FIELD32(0x00008000)
+#define TXCSR8_BBP_ID2                 FIELD32(0x007f0000)
+#define TXCSR8_BBP_ID2_VALID           FIELD32(0x00800000)
+#define TXCSR8_BBP_ID3                 FIELD32(0x7f000000)
+#define TXCSR8_BBP_ID3_VALID           FIELD32(0x80000000)
+
+/*
+ * TXCSR9: OFDM TX BBP registers
+ * OFDM_SIGNAL: BBP rate field address for OFDM.
+ * OFDM_SERVICE: BBP service field address for OFDM.
+ * OFDM_LENGTH_LOW: BBP length low byte address for OFDM.
+ * OFDM_LENGTH_HIGH: BBP length high byte address for OFDM.
+ */
+#define TXCSR9                         0x0094
+#define TXCSR9_OFDM_RATE               FIELD32(0x000000ff)
+#define TXCSR9_OFDM_SERVICE            FIELD32(0x0000ff00)
+#define TXCSR9_OFDM_LENGTH_LOW         FIELD32(0x00ff0000)
+#define TXCSR9_OFDM_LENGTH_HIGH                FIELD32(0xff000000)
+
+/*
+ * Receive related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * RXCSR0: RX Control Register.
+ * DISABLE_RX: Disable rx engine.
+ * DROP_CRC: Drop crc error.
+ * DROP_PHYSICAL: Drop physical error.
+ * DROP_CONTROL: Drop control frame.
+ * DROP_NOT_TO_ME: Drop not to me unicast frame.
+ * DROP_TODS: Drop frame tods bit is true.
+ * DROP_VERSION_ERROR: Drop version error frame.
+ * PASS_CRC: Pass all packets with crc attached.
+ * PASS_CRC: Pass all packets with crc attached.
+ * PASS_PLCP: Pass all packets with 4 bytes PLCP attached.
+ * DROP_MCAST: Drop multicast frames.
+ * DROP_BCAST: Drop broadcast frames.
+ * ENABLE_QOS: Accept QOS data frame and parse QOS field.
+ */
+#define RXCSR0                         0x0080
+#define RXCSR0_DISABLE_RX              FIELD32(0x00000001)
+#define RXCSR0_DROP_CRC                        FIELD32(0x00000002)
+#define RXCSR0_DROP_PHYSICAL           FIELD32(0x00000004)
+#define RXCSR0_DROP_CONTROL            FIELD32(0x00000008)
+#define RXCSR0_DROP_NOT_TO_ME          FIELD32(0x00000010)
+#define RXCSR0_DROP_TODS               FIELD32(0x00000020)
+#define RXCSR0_DROP_VERSION_ERROR      FIELD32(0x00000040)
+#define RXCSR0_PASS_CRC                        FIELD32(0x00000080)
+#define RXCSR0_PASS_PLCP               FIELD32(0x00000100)
+#define RXCSR0_DROP_MCAST              FIELD32(0x00000200)
+#define RXCSR0_DROP_BCAST              FIELD32(0x00000400)
+#define RXCSR0_ENABLE_QOS              FIELD32(0x00000800)
+
+/*
+ * RXCSR1: RX descriptor configuration register.
+ * RXD_SIZE: Rx descriptor size, default is 32b.
+ * NUM_RXD: Number of rx entries in ring.
+ */
+#define RXCSR1                         0x0084
+#define RXCSR1_RXD_SIZE                        FIELD32(0x000000ff)
+#define RXCSR1_NUM_RXD                 FIELD32(0x0000ff00)
+
+/*
+ * RXCSR2: RX Ring base address register.
+ */
+#define RXCSR2                         0x0088
+#define RXCSR2_RX_RING_REGISTER                FIELD32(0xffffffff)
+
+/*
+ * RXCSR3: BBP ID register for Rx operation.
+ * BBP_ID#: BBP register # id.
+ * BBP_ID#_VALID: BBP register # id is valid or not.
+ */
+#define RXCSR3                         0x0090
+#define RXCSR3_BBP_ID0                 FIELD32(0x0000007f)
+#define RXCSR3_BBP_ID0_VALID           FIELD32(0x00000080)
+#define RXCSR3_BBP_ID1                 FIELD32(0x00007f00)
+#define RXCSR3_BBP_ID1_VALID           FIELD32(0x00008000)
+#define RXCSR3_BBP_ID2                 FIELD32(0x007f0000)
+#define RXCSR3_BBP_ID2_VALID           FIELD32(0x00800000)
+#define RXCSR3_BBP_ID3                 FIELD32(0x7f000000)
+#define RXCSR3_BBP_ID3_VALID           FIELD32(0x80000000)
+
+/*
+ * ARCSR1: Auto Responder PLCP config register 1.
+ * AR_BBP_DATA#: Auto responder BBP register # data.
+ * AR_BBP_ID#: Auto responder BBP register # Id.
+ */
+#define ARCSR1                         0x009c
+#define ARCSR1_AR_BBP_DATA2            FIELD32(0x000000ff)
+#define ARCSR1_AR_BBP_ID2              FIELD32(0x0000ff00)
+#define ARCSR1_AR_BBP_DATA3            FIELD32(0x00ff0000)
+#define ARCSR1_AR_BBP_ID3              FIELD32(0xff000000)
+
+/*
+ * Miscellaneous Registers.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+
+ */
+
+/*
+ * PCICSR: PCI control register.
+ * BIG_ENDIAN: 1: big endian, 0: little endian.
+ * RX_TRESHOLD: Rx threshold in dw to start pci access
+ * 0: 16dw (default), 1: 8dw, 2: 4dw, 3: 32dw.
+ * TX_TRESHOLD: Tx threshold in dw to start pci access
+ * 0: 0dw (default), 1: 1dw, 2: 4dw, 3: forward.
+ * BURST_LENTH: Pci burst length 0: 4dw (default, 1: 8dw, 2: 16dw, 3:32dw.
+ * ENABLE_CLK: Enable clk_run, pci clock can't going down to non-operational.
+ * READ_MULTIPLE: Enable memory read multiple.
+ * WRITE_INVALID: Enable memory write & invalid.
+ */
+#define PCICSR                         0x008c
+#define PCICSR_BIG_ENDIAN              FIELD32(0x00000001)
+#define PCICSR_RX_TRESHOLD             FIELD32(0x00000006)
+#define PCICSR_TX_TRESHOLD             FIELD32(0x00000018)
+#define PCICSR_BURST_LENTH             FIELD32(0x00000060)
+#define PCICSR_ENABLE_CLK              FIELD32(0x00000080)
+#define PCICSR_READ_MULTIPLE           FIELD32(0x00000100)
+#define PCICSR_WRITE_INVALID           FIELD32(0x00000200)
+
+/*
+ * CNT0: FCS error count.
+ * FCS_ERROR: FCS error count, cleared when read.
+ */
+#define CNT0                           0x00a0
+#define CNT0_FCS_ERROR                 FIELD32(0x0000ffff)
+
+/*
+ * Statistic Register.
+ * CNT1: PLCP error count.
+ * CNT2: Long error count.
+ */
+#define TIMECSR2                       0x00a8
+#define CNT1                           0x00ac
+#define CNT2                           0x00b0
+#define TIMECSR3                       0x00b4
+
+/*
+ * CNT3: CCA false alarm count.
+ */
+#define CNT3                           0x00b8
+#define CNT3_FALSE_CCA                 FIELD32(0x0000ffff)
+
+/*
+ * Statistic Register.
+ * CNT4: Rx FIFO overflow count.
+ * CNT5: Tx FIFO underrun count.
+ */
+#define CNT4                           0x00bc
+#define CNT5                           0x00c0
+
+/*
+ * Baseband Control Register.
+ */
+
+/*
+ * PWRCSR0: Power mode configuration register.
+ */
+#define PWRCSR0                                0x00c4
+
+/*
+ * Power state transition time registers.
+ */
+#define PSCSR0                         0x00c8
+#define PSCSR1                         0x00cc
+#define PSCSR2                         0x00d0
+#define PSCSR3                         0x00d4
+
+/*
+ * PWRCSR1: Manual power control / status register.
+ * Allowed state: 0 deep_sleep, 1: sleep, 2: standby, 3: awake.
+ * SET_STATE: Set state. Write 1 to trigger, self cleared.
+ * BBP_DESIRE_STATE: BBP desired state.
+ * RF_DESIRE_STATE: RF desired state.
+ * BBP_CURR_STATE: BBP current state.
+ * RF_CURR_STATE: RF current state.
+ * PUT_TO_SLEEP: Put to sleep. Write 1 to trigger, self cleared.
+ */
+#define PWRCSR1                                0x00d8
+#define PWRCSR1_SET_STATE              FIELD32(0x00000001)
+#define PWRCSR1_BBP_DESIRE_STATE       FIELD32(0x00000006)
+#define PWRCSR1_RF_DESIRE_STATE                FIELD32(0x00000018)
+#define PWRCSR1_BBP_CURR_STATE         FIELD32(0x00000060)
+#define PWRCSR1_RF_CURR_STATE          FIELD32(0x00000180)
+#define PWRCSR1_PUT_TO_SLEEP           FIELD32(0x00000200)
+
+/*
+ * TIMECSR: Timer control register.
+ * US_COUNT: 1 us timer count in units of clock cycles.
+ * US_64_COUNT: 64 us timer count in units of 1 us timer.
+ * BEACON_EXPECT: Beacon expect window.
+ */
+#define TIMECSR                                0x00dc
+#define TIMECSR_US_COUNT               FIELD32(0x000000ff)
+#define TIMECSR_US_64_COUNT            FIELD32(0x0000ff00)
+#define TIMECSR_BEACON_EXPECT          FIELD32(0x00070000)
+
+/*
+ * MACCSR0: MAC configuration register 0.
+ */
+#define MACCSR0                                0x00e0
+
+/*
+ * MACCSR1: MAC configuration register 1.
+ * KICK_RX: Kick one-shot rx in one-shot rx mode.
+ * ONESHOT_RXMODE: Enable one-shot rx mode for debugging.
+ * BBPRX_RESET_MODE: Ralink bbp rx reset mode.
+ * AUTO_TXBBP: Auto tx logic access bbp control register.
+ * AUTO_RXBBP: Auto rx logic access bbp control register.
+ * LOOPBACK: Loopback mode. 0: normal, 1: internal, 2: external, 3:rsvd.
+ * INTERSIL_IF: Intersil if calibration pin.
+ */
+#define MACCSR1                                0x00e4
+#define MACCSR1_KICK_RX                        FIELD32(0x00000001)
+#define MACCSR1_ONESHOT_RXMODE         FIELD32(0x00000002)
+#define MACCSR1_BBPRX_RESET_MODE       FIELD32(0x00000004)
+#define MACCSR1_AUTO_TXBBP             FIELD32(0x00000008)
+#define MACCSR1_AUTO_RXBBP             FIELD32(0x00000010)
+#define MACCSR1_LOOPBACK               FIELD32(0x00000060)
+#define MACCSR1_INTERSIL_IF            FIELD32(0x00000080)
+
+/*
+ * RALINKCSR: Ralink Rx auto-reset BBCR.
+ * AR_BBP_DATA#: Auto reset BBP register # data.
+ * AR_BBP_ID#: Auto reset BBP register # id.
+ */
+#define RALINKCSR                      0x00e8
+#define RALINKCSR_AR_BBP_DATA0         FIELD32(0x000000ff)
+#define RALINKCSR_AR_BBP_ID0           FIELD32(0x00007f00)
+#define RALINKCSR_AR_BBP_VALID0                FIELD32(0x00008000)
+#define RALINKCSR_AR_BBP_DATA1         FIELD32(0x00ff0000)
+#define RALINKCSR_AR_BBP_ID1           FIELD32(0x7f000000)
+#define RALINKCSR_AR_BBP_VALID1                FIELD32(0x80000000)
+
+/*
+ * BCNCSR: Beacon interval control register.
+ * CHANGE: Write one to change beacon interval.
+ * DELTATIME: The delta time value.
+ * NUM_BEACON: Number of beacon according to mode.
+ * MODE: Please refer to asic specs.
+ * PLUS: Plus or minus delta time value.
+ */
+#define BCNCSR                         0x00ec
+#define BCNCSR_CHANGE                  FIELD32(0x00000001)
+#define BCNCSR_DELTATIME               FIELD32(0x0000001e)
+#define BCNCSR_NUM_BEACON              FIELD32(0x00001fe0)
+#define BCNCSR_MODE                    FIELD32(0x00006000)
+#define BCNCSR_PLUS                    FIELD32(0x00008000)
+
+/*
+ * BBP / RF / IF Control Register.
+ */
+
+/*
+ * BBPCSR: BBP serial control register.
+ * VALUE: Register value to program into BBP.
+ * REGNUM: Selected BBP register.
+ * BUSY: 1: asic is busy execute BBP programming.
+ * WRITE_CONTROL: 1: write BBP, 0: read BBP.
+ */
+#define BBPCSR                         0x00f0
+#define BBPCSR_VALUE                   FIELD32(0x000000ff)
+#define BBPCSR_REGNUM                  FIELD32(0x00007f00)
+#define BBPCSR_BUSY                    FIELD32(0x00008000)
+#define BBPCSR_WRITE_CONTROL           FIELD32(0x00010000)
+
+/*
+ * RFCSR: RF serial control register.
+ * VALUE: Register value + id to program into rf/if.
+ * NUMBER_OF_BITS: Number of bits used in value (i:20, rfmd:22).
+ * IF_SELECT: Chip to program: 0: rf, 1: if.
+ * PLL_LD: Rf pll_ld status.
+ * BUSY: 1: asic is busy execute rf programming.
+ */
+#define RFCSR                          0x00f4
+#define RFCSR_VALUE                    FIELD32(0x00ffffff)
+#define RFCSR_NUMBER_OF_BITS           FIELD32(0x1f000000)
+#define RFCSR_IF_SELECT                        FIELD32(0x20000000)
+#define RFCSR_PLL_LD                   FIELD32(0x40000000)
+#define RFCSR_BUSY                     FIELD32(0x80000000)
+
+/*
+ * LEDCSR: LED control register.
+ * ON_PERIOD: On period, default 70ms.
+ * OFF_PERIOD: Off period, default 30ms.
+ * LINK: 0: linkoff, 1: linkup.
+ * ACTIVITY: 0: idle, 1: active.
+ * LINK_POLARITY: 0: active low, 1: active high.
+ * ACTIVITY_POLARITY: 0: active low, 1: active high.
+ * LED_DEFAULT: LED state for "enable" 0: ON, 1: OFF.
+ */
+#define LEDCSR                         0x00f8
+#define LEDCSR_ON_PERIOD               FIELD32(0x000000ff)
+#define LEDCSR_OFF_PERIOD              FIELD32(0x0000ff00)
+#define LEDCSR_LINK                    FIELD32(0x00010000)
+#define LEDCSR_ACTIVITY                        FIELD32(0x00020000)
+#define LEDCSR_LINK_POLARITY           FIELD32(0x00040000)
+#define LEDCSR_ACTIVITY_POLARITY       FIELD32(0x00080000)
+#define LEDCSR_LED_DEFAULT             FIELD32(0x00100000)
+
+/*
+ * AES control register.
+ */
+#define SECCSR3                                0x00fc
+
+/*
+ * ASIC pointer information.
+ * RXPTR: Current RX ring address.
+ * TXPTR: Current Tx ring address.
+ * PRIPTR: Current Priority ring address.
+ * ATIMPTR: Current ATIM ring address.
+ */
+#define RXPTR                          0x0100
+#define TXPTR                          0x0104
+#define PRIPTR                         0x0108
+#define ATIMPTR                                0x010c
+
+/*
+ * TXACKCSR0: TX ACK timeout.
+ */
+#define TXACKCSR0                      0x0110
+
+/*
+ * ACK timeout count registers.
+ * ACKCNT0: TX ACK timeout count.
+ * ACKCNT1: RX ACK timeout count.
+ */
+#define ACKCNT0                                0x0114
+#define ACKCNT1                                0x0118
+
+/*
+ * GPIO and others.
+ */
+
+/*
+ * GPIOCSR: GPIO control register.
+ */
+#define GPIOCSR                                0x0120
+#define GPIOCSR_BIT0                   FIELD32(0x00000001)
+#define GPIOCSR_BIT1                   FIELD32(0x00000002)
+#define GPIOCSR_BIT2                   FIELD32(0x00000004)
+#define GPIOCSR_BIT3                   FIELD32(0x00000008)
+#define GPIOCSR_BIT4                   FIELD32(0x00000010)
+#define GPIOCSR_BIT5                   FIELD32(0x00000020)
+#define GPIOCSR_BIT6                   FIELD32(0x00000040)
+#define GPIOCSR_BIT7                   FIELD32(0x00000080)
+#define GPIOCSR_DIR0                   FIELD32(0x00000100)
+#define GPIOCSR_DIR1                   FIELD32(0x00000200)
+#define GPIOCSR_DIR2                   FIELD32(0x00000400)
+#define GPIOCSR_DIR3                   FIELD32(0x00000800)
+#define GPIOCSR_DIR4                   FIELD32(0x00001000)
+#define GPIOCSR_DIR5                   FIELD32(0x00002000)
+#define GPIOCSR_DIR6                   FIELD32(0x00004000)
+#define GPIOCSR_DIR7                   FIELD32(0x00008000)
+
+/*
+ * FIFO pointer registers.
+ * FIFOCSR0: TX FIFO pointer.
+ * FIFOCSR1: RX FIFO pointer.
+ */
+#define FIFOCSR0                       0x0128
+#define FIFOCSR1                       0x012c
+
+/*
+ * BCNCSR1: Tx BEACON offset time control register.
+ * PRELOAD: Beacon timer offset in units of usec.
+ * BEACON_CWMIN: 2^CwMin.
+ */
+#define BCNCSR1                                0x0130
+#define BCNCSR1_PRELOAD                        FIELD32(0x0000ffff)
+#define BCNCSR1_BEACON_CWMIN           FIELD32(0x000f0000)
+
+/*
+ * MACCSR2: TX_PE to RX_PE turn-around time control register
+ * DELAY: RX_PE low width, in units of pci clock cycle.
+ */
+#define MACCSR2                                0x0134
+#define MACCSR2_DELAY                  FIELD32(0x000000ff)
+
+/*
+ * TESTCSR: TEST mode selection register.
+ */
+#define TESTCSR                                0x0138
+
+/*
+ * ARCSR2: 1 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR2                         0x013c
+#define ARCSR2_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR2_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR2_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR3: 2 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR3                         0x0140
+#define ARCSR3_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR3_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR3_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR4: 5.5 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR4                         0x0144
+#define ARCSR4_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR4_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR4_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR5: 11 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR5                         0x0148
+#define ARCSR5_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR5_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR5_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARTCSR0: CCK ACK/CTS payload consumed time for 1/2/5.5/11 mbps.
+ */
+#define ARTCSR0                                0x014c
+#define ARTCSR0_ACK_CTS_11MBS          FIELD32(0x000000ff)
+#define ARTCSR0_ACK_CTS_5_5MBS         FIELD32(0x0000ff00)
+#define ARTCSR0_ACK_CTS_2MBS           FIELD32(0x00ff0000)
+#define ARTCSR0_ACK_CTS_1MBS           FIELD32(0xff000000)
+
+
+/*
+ * ARTCSR1: OFDM ACK/CTS payload consumed time for 6/9/12/18 mbps.
+ */
+#define ARTCSR1                                0x0150
+#define ARTCSR1_ACK_CTS_6MBS           FIELD32(0x000000ff)
+#define ARTCSR1_ACK_CTS_9MBS           FIELD32(0x0000ff00)
+#define ARTCSR1_ACK_CTS_12MBS          FIELD32(0x00ff0000)
+#define ARTCSR1_ACK_CTS_18MBS          FIELD32(0xff000000)
+
+/*
+ * ARTCSR2: OFDM ACK/CTS payload consumed time for 24/36/48/54 mbps.
+ */
+#define ARTCSR2                                0x0154
+#define ARTCSR2_ACK_CTS_24MBS          FIELD32(0x000000ff)
+#define ARTCSR2_ACK_CTS_36MBS          FIELD32(0x0000ff00)
+#define ARTCSR2_ACK_CTS_48MBS          FIELD32(0x00ff0000)
+#define ARTCSR2_ACK_CTS_54MBS          FIELD32(0xff000000)
+
+/*
+ * SECCSR1_RT2509: WEP control register.
+ * KICK_ENCRYPT: Kick encryption engine, self-clear.
+ * ONE_SHOT: 0: ring mode, 1: One shot only mode.
+ * DESC_ADDRESS: Descriptor physical address of frame.
+ */
+#define SECCSR1                                0x0158
+#define SECCSR1_KICK_ENCRYPT           FIELD32(0x00000001)
+#define SECCSR1_ONE_SHOT               FIELD32(0x00000002)
+#define SECCSR1_DESC_ADDRESS           FIELD32(0xfffffffc)
+
+/*
+ * BBPCSR1: BBP TX configuration.
+ */
+#define BBPCSR1                                0x015c
+#define BBPCSR1_CCK                    FIELD32(0x00000003)
+#define BBPCSR1_CCK_FLIP               FIELD32(0x00000004)
+#define BBPCSR1_OFDM                   FIELD32(0x00030000)
+#define BBPCSR1_OFDM_FLIP              FIELD32(0x00040000)
+
+/*
+ * Dual band configuration registers.
+ * DBANDCSR0: Dual band configuration register 0.
+ * DBANDCSR1: Dual band configuration register 1.
+ */
+#define DBANDCSR0                      0x0160
+#define DBANDCSR1                      0x0164
+
+/*
+ * BBPPCSR: BBP Pin control register.
+ */
+#define BBPPCSR                                0x0168
+
+/*
+ * MAC special debug mode selection registers.
+ * DBGSEL0: MAC special debug mode selection register 0.
+ * DBGSEL1: MAC special debug mode selection register 1.
+ */
+#define DBGSEL0                                0x016c
+#define DBGSEL1                                0x0170
+
+/*
+ * BISTCSR: BBP BIST register.
+ */
+#define BISTCSR                                0x0174
+
+/*
+ * Multicast filter registers.
+ * MCAST0: Multicast filter register 0.
+ * MCAST1: Multicast filter register 1.
+ */
+#define MCAST0                         0x0178
+#define MCAST1                         0x017c
+
+/*
+ * UART registers.
+ * UARTCSR0: UART1 TX register.
+ * UARTCSR1: UART1 RX register.
+ * UARTCSR3: UART1 frame control register.
+ * UARTCSR4: UART1 buffer control register.
+ * UART2CSR0: UART2 TX register.
+ * UART2CSR1: UART2 RX register.
+ * UART2CSR3: UART2 frame control register.
+ * UART2CSR4: UART2 buffer control register.
+ */
+#define UARTCSR0                       0x0180
+#define UARTCSR1                       0x0184
+#define UARTCSR3                       0x0188
+#define UARTCSR4                       0x018c
+#define UART2CSR0                      0x0190
+#define UART2CSR1                      0x0194
+#define UART2CSR3                      0x0198
+#define UART2CSR4                      0x019c
+
+/*
+ * BBP registers.
+ * The wordsize of the BBP is 8 bits.
+ */
+
+/*
+ * R2: TX antenna control
+ */
+#define BBP_R2_TX_ANTENNA              FIELD8(0x03)
+#define BBP_R2_TX_IQ_FLIP              FIELD8(0x04)
+
+/*
+ * R14: RX antenna control
+ */
+#define BBP_R14_RX_ANTENNA             FIELD8(0x03)
+#define BBP_R14_RX_IQ_FLIP             FIELD8(0x04)
+
+/*
+ * BBP_R70
+ */
+#define BBP_R70_JAPAN_FILTER           FIELD8(0x08)
+
+/*
+ * RF registers
+ */
+
+/*
+ * RF 1
+ */
+#define RF1_TUNER                      FIELD32(0x00020000)
+
+/*
+ * RF 3
+ */
+#define RF3_TUNER                      FIELD32(0x00000100)
+#define RF3_TXPOWER                    FIELD32(0x00003e00)
+
+/*
+ * EEPROM content.
+ * The wordsize of the EEPROM is 16 bits.
+ */
+
+/*
+ * HW MAC address.
+ */
+#define EEPROM_MAC_ADDR_0              0x0002
+#define EEPROM_MAC_ADDR_BYTE0          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE1          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR1               0x0003
+#define EEPROM_MAC_ADDR_BYTE2          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE3          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR_2              0x0004
+#define EEPROM_MAC_ADDR_BYTE4          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE5          FIELD16(0xff00)
+
+/*
+ * EEPROM antenna.
+ * ANTENNA_NUM: Number of antenna's.
+ * TX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * LED_MODE: 0: default, 1: TX/RX activity,2: Single (ignore link), 3: rsvd.
+ * DYN_TXAGC: Dynamic TX AGC control.
+ * HARDWARE_RADIO: 1: Hardware controlled radio. Read GPIO0.
+ * RF_TYPE: Rf_type of this adapter.
+ */
+#define EEPROM_ANTENNA                 0x10
+#define EEPROM_ANTENNA_NUM             FIELD16(0x0003)
+#define EEPROM_ANTENNA_TX_DEFAULT      FIELD16(0x000c)
+#define EEPROM_ANTENNA_RX_DEFAULT      FIELD16(0x0030)
+#define EEPROM_ANTENNA_LED_MODE                FIELD16(0x01c0)
+#define EEPROM_ANTENNA_DYN_TXAGC       FIELD16(0x0200)
+#define EEPROM_ANTENNA_HARDWARE_RADIO  FIELD16(0x0400)
+#define EEPROM_ANTENNA_RF_TYPE         FIELD16(0xf800)
+
+/*
+ * EEPROM NIC config.
+ * CARDBUS_ACCEL: 0: enable, 1: disable.
+ * DYN_BBP_TUNE: 0: enable, 1: disable.
+ * CCK_TX_POWER: CCK TX power compensation.
+ */
+#define EEPROM_NIC                     0x11
+#define EEPROM_NIC_CARDBUS_ACCEL       FIELD16(0x0001)
+#define EEPROM_NIC_DYN_BBP_TUNE                FIELD16(0x0002)
+#define EEPROM_NIC_CCK_TX_POWER                FIELD16(0x000c)
+
+/*
+ * EEPROM geography.
+ * GEO: Default geography setting for device.
+ */
+#define EEPROM_GEOGRAPHY               0x12
+#define EEPROM_GEOGRAPHY_GEO           FIELD16(0x0f00)
+
+/*
+ * EEPROM BBP.
+ */
+#define EEPROM_BBP_START               0x13
+#define EEPROM_BBP_SIZE                        16
+#define EEPROM_BBP_VALUE               FIELD16(0x00ff)
+#define EEPROM_BBP_REG_ID              FIELD16(0xff00)
+
+/*
+ * EEPROM TXPOWER
+ */
+#define EEPROM_TXPOWER_START           0x23
+#define EEPROM_TXPOWER_SIZE            7
+#define EEPROM_TXPOWER_1               FIELD16(0x00ff)
+#define EEPROM_TXPOWER_2               FIELD16(0xff00)
+
+/*
+ * RSSI <-> dBm offset calibration
+ */
+#define EEPROM_CALIBRATE_OFFSET                0x3e
+#define EEPROM_CALIBRATE_OFFSET_RSSI   FIELD16(0x00ff)
+
+/*
+ * DMA descriptor defines.
+ */
+#define TXD_DESC_SIZE                  ( 11 * sizeof(struct data_desc) )
+#define RXD_DESC_SIZE                  ( 11 * sizeof(struct data_desc) )
+
+/*
+ * TX descriptor format for TX, PRIO, ATIM and Beacon Ring.
+ */
+
+/*
+ * Word0
+ */
+#define TXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define TXD_W0_VALID                   FIELD32(0x00000002)
+#define TXD_W0_RESULT                  FIELD32(0x0000001c)
+#define TXD_W0_RETRY_COUNT             FIELD32(0x000000e0)
+#define TXD_W0_MORE_FRAG               FIELD32(0x00000100)
+#define TXD_W0_ACK                     FIELD32(0x00000200)
+#define TXD_W0_TIMESTAMP               FIELD32(0x00000400)
+#define TXD_W0_OFDM                    FIELD32(0x00000800)
+#define TXD_W0_CIPHER_OWNER            FIELD32(0x00001000)
+#define TXD_W0_IFS                     FIELD32(0x00006000)
+#define TXD_W0_RETRY_MODE              FIELD32(0x00008000)
+#define TXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define TXD_W0_CIPHER_ALG              FIELD32(0xe0000000)
+
+/*
+ * Word1
+ */
+#define TXD_W1_BUFFER_ADDRESS          FIELD32(0xffffffff)
+
+/*
+ * Word2
+ */
+#define TXD_W2_IV_OFFSET               FIELD32(0x0000003f)
+#define TXD_W2_AIFS                    FIELD32(0x000000c0)
+#define TXD_W2_CWMIN                   FIELD32(0x00000f00)
+#define TXD_W2_CWMAX                   FIELD32(0x0000f000)
+
+/*
+ * Word3: PLCP information
+ */
+#define TXD_W3_PLCP_SIGNAL             FIELD32(0x000000ff)
+#define TXD_W3_PLCP_SERVICE            FIELD32(0x0000ff00)
+#define TXD_W3_PLCP_LENGTH_LOW         FIELD32(0x00ff0000)
+#define TXD_W3_PLCP_LENGTH_HIGH                FIELD32(0xff000000)
+
+/*
+ * Word4
+ */
+#define TXD_W4_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word5
+ */
+#define TXD_W5_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Word6-9: Key
+ */
+#define TXD_W6_KEY                     FIELD32(0xffffffff)
+#define TXD_W7_KEY                     FIELD32(0xffffffff)
+#define TXD_W8_KEY                     FIELD32(0xffffffff)
+#define TXD_W9_KEY                     FIELD32(0xffffffff)
+
+/*
+ * Word10
+ */
+#define TXD_W10_RTS                    FIELD32(0x00000001)
+#define TXD_W10_TX_RATE                        FIELD32(0x000000fe)
+
+/*
+ * RX descriptor format for RX Ring.
+ */
+
+/*
+ * Word0
+ */
+#define RXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define RXD_W0_UNICAST_TO_ME           FIELD32(0x00000002)
+#define RXD_W0_MULTICAST               FIELD32(0x00000004)
+#define RXD_W0_BROADCAST               FIELD32(0x00000008)
+#define RXD_W0_MY_BSS                  FIELD32(0x00000010)
+#define RXD_W0_CRC_ERROR               FIELD32(0x00000020)
+#define RXD_W0_OFDM                    FIELD32(0x00000040)
+#define RXD_W0_PHYSICAL_ERROR          FIELD32(0x00000080)
+#define RXD_W0_CIPHER_OWNER            FIELD32(0x00000100)
+#define RXD_W0_ICV_ERROR               FIELD32(0x00000200)
+#define RXD_W0_IV_OFFSET               FIELD32(0x0000fc00)
+#define RXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define RXD_W0_CIPHER_ALG              FIELD32(0xe0000000)
+
+/*
+ * Word1
+ */
+#define RXD_W1_BUFFER_ADDRESS          FIELD32(0xffffffff)
+
+/*
+ * Word2
+ */
+#define RXD_W2_SIGNAL                  FIELD32(0x000000ff)
+#define RXD_W2_RSSI                    FIELD32(0x0000ff00)
+#define RXD_W2_TA                      FIELD32(0xffff0000)
+
+/*
+ * Word3
+ */
+#define RXD_W3_TA                      FIELD32(0xffffffff)
+
+/*
+ * Word4
+ */
+#define RXD_W4_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word5
+ */
+#define RXD_W5_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Word6-9: Key
+ */
+#define RXD_W6_KEY                     FIELD32(0xffffffff)
+#define RXD_W7_KEY                     FIELD32(0xffffffff)
+#define RXD_W8_KEY                     FIELD32(0xffffffff)
+#define RXD_W9_KEY                     FIELD32(0xffffffff)
+
+/*
+ * Word10
+ */
+#define RXD_W10_DROP                   FIELD32(0x00000001)
+
+/*
+ * Macro's for converting txpower from EEPROM to dscape value
+ * and from dscape value to register value.
+ */
+#define MIN_TXPOWER    0
+#define MAX_TXPOWER    31
+#define DEFAULT_TXPOWER        24
+
+#define TXPOWER_FROM_DEV(__txpower)            \
+({                                             \
+       ((__txpower) > MAX_TXPOWER) ?           \
+               DEFAULT_TXPOWER : (__txpower);  \
+})
+
+#define TXPOWER_TO_DEV(__txpower)                      \
+({                                                     \
+       ((__txpower) <= MIN_TXPOWER) ? MIN_TXPOWER :    \
+       (((__txpower) >= MAX_TXPOWER) ? MAX_TXPOWER :   \
+       (__txpower));                                   \
+})
+
+#endif /* RT2500PCI_H */
diff --git a/drivers/net/wireless/rt2x00/rt2500usb.c b/drivers/net/wireless/rt2x00/rt2500usb.c
new file mode 100644 (file)
index 0000000..847bd7f
--- /dev/null
@@ -0,0 +1,1837 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2500usb
+       Abstract: rt2500usb device specific routines.
+       Supported chipsets: RT2570.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2500usb"
+
+#include <linux/delay.h>
+#include <linux/etherdevice.h>
+#include <linux/init.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/usb.h>
+
+#include "rt2x00.h"
+#include "rt2x00usb.h"
+#include "rt2500usb.h"
+
+/*
+ * Register access.
+ * All access to the CSR registers will go through the methods
+ * rt2500usb_register_read and rt2500usb_register_write.
+ * BBP and RF register require indirect register access,
+ * and use the CSR registers BBPCSR and RFCSR to achieve this.
+ * These indirect registers work with busy bits,
+ * and we will try maximal REGISTER_BUSY_COUNT times to access
+ * the register while taking a REGISTER_BUSY_DELAY us delay
+ * between each attampt. When the busy bit is still set at that time,
+ * the access attempt is considered to have failed,
+ * and we will print an error.
+ */
+static inline void rt2500usb_register_read(const struct rt2x00_dev *rt2x00dev,
+                                          const unsigned int offset,
+                                          u16 *value)
+{
+       __le16 reg;
+       rt2x00usb_vendor_request_buff(rt2x00dev, USB_MULTI_READ,
+                                     USB_VENDOR_REQUEST_IN, offset,
+                                     &reg, sizeof(u16), REGISTER_TIMEOUT);
+       *value = le16_to_cpu(reg);
+}
+
+static inline void rt2500usb_register_multiread(const struct rt2x00_dev
+                                               *rt2x00dev,
+                                               const unsigned int offset,
+                                               void *value, const u16 length)
+{
+       int timeout = REGISTER_TIMEOUT * (length / sizeof(u16));
+       rt2x00usb_vendor_request_buff(rt2x00dev, USB_MULTI_READ,
+                                     USB_VENDOR_REQUEST_IN, offset,
+                                     value, length, timeout);
+}
+
+static inline void rt2500usb_register_write(const struct rt2x00_dev *rt2x00dev,
+                                           const unsigned int offset,
+                                           u16 value)
+{
+       __le16 reg = cpu_to_le16(value);
+       rt2x00usb_vendor_request_buff(rt2x00dev, USB_MULTI_WRITE,
+                                     USB_VENDOR_REQUEST_OUT, offset,
+                                     &reg, sizeof(u16), REGISTER_TIMEOUT);
+}
+
+static inline void rt2500usb_register_multiwrite(const struct rt2x00_dev
+                                                *rt2x00dev,
+                                                const unsigned int offset,
+                                                void *value, const u16 length)
+{
+       int timeout = REGISTER_TIMEOUT * (length / sizeof(u16));
+       rt2x00usb_vendor_request_buff(rt2x00dev, USB_MULTI_WRITE,
+                                     USB_VENDOR_REQUEST_OUT, offset,
+                                     value, length, timeout);
+}
+
+static u16 rt2500usb_bbp_check(const struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500usb_register_read(rt2x00dev, PHY_CSR8, &reg);
+               if (!rt2x00_get_field16(reg, PHY_CSR8_BUSY))
+                       break;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       return reg;
+}
+
+static void rt2500usb_bbp_write(const struct rt2x00_dev *rt2x00dev,
+                               const unsigned int word, const u8 value)
+{
+       u16 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt2500usb_bbp_check(rt2x00dev);
+       if (rt2x00_get_field16(reg, PHY_CSR8_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR8 register busy. Write failed.\n");
+               return;
+       }
+
+       /*
+        * Write the data into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field16(&reg, PHY_CSR7_DATA, value);
+       rt2x00_set_field16(&reg, PHY_CSR7_REG_ID, word);
+       rt2x00_set_field16(&reg, PHY_CSR7_READ_CONTROL, 0);
+
+       rt2500usb_register_write(rt2x00dev, PHY_CSR7, reg);
+}
+
+static void rt2500usb_bbp_read(const struct rt2x00_dev *rt2x00dev,
+                              const unsigned int word, u8 *value)
+{
+       u16 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt2500usb_bbp_check(rt2x00dev);
+       if (rt2x00_get_field16(reg, PHY_CSR8_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR8 register busy. Read failed.\n");
+               return;
+       }
+
+       /*
+        * Write the request into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field16(&reg, PHY_CSR7_REG_ID, word);
+       rt2x00_set_field16(&reg, PHY_CSR7_READ_CONTROL, 1);
+
+       rt2500usb_register_write(rt2x00dev, PHY_CSR7, reg);
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt2500usb_bbp_check(rt2x00dev);
+       if (rt2x00_get_field16(reg, PHY_CSR8_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR8 register busy. Read failed.\n");
+               *value = 0xff;
+               return;
+       }
+
+       rt2500usb_register_read(rt2x00dev, PHY_CSR7, &reg);
+       *value = rt2x00_get_field16(reg, PHY_CSR7_DATA);
+}
+
+static void rt2500usb_rf_write(const struct rt2x00_dev *rt2x00dev,
+                              const unsigned int word, const u32 value)
+{
+       u16 reg;
+       unsigned int i;
+
+       if (!word)
+               return;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500usb_register_read(rt2x00dev, PHY_CSR10, &reg);
+               if (!rt2x00_get_field16(reg, PHY_CSR10_RF_BUSY))
+                       goto rf_write;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "PHY_CSR10 register busy. Write failed.\n");
+       return;
+
+rf_write:
+       reg = 0;
+       rt2x00_set_field16(&reg, PHY_CSR9_RF_VALUE, value);
+       rt2500usb_register_write(rt2x00dev, PHY_CSR9, reg);
+
+       reg = 0;
+       rt2x00_set_field16(&reg, PHY_CSR10_RF_VALUE, value >> 16);
+       rt2x00_set_field16(&reg, PHY_CSR10_RF_NUMBER_OF_BITS, 20);
+       rt2x00_set_field16(&reg, PHY_CSR10_RF_IF_SELECT, 0);
+       rt2x00_set_field16(&reg, PHY_CSR10_RF_BUSY, 1);
+
+       rt2500usb_register_write(rt2x00dev, PHY_CSR10, reg);
+       rt2x00_rf_write(rt2x00dev, word, value);
+}
+
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+#define CSR_OFFSET(__word)     ( CSR_REG_BASE + ((__word) * sizeof(u16)) )
+
+static void rt2500usb_read_csr(const struct rt2x00_dev *rt2x00dev,
+                              const unsigned int word, u32 *data)
+{
+       rt2500usb_register_read(rt2x00dev, CSR_OFFSET(word), (u16 *) data);
+}
+
+static void rt2500usb_write_csr(const struct rt2x00_dev *rt2x00dev,
+                               const unsigned int word, u32 data)
+{
+       rt2500usb_register_write(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static const struct rt2x00debug rt2500usb_rt2x00debug = {
+       .owner  = THIS_MODULE,
+       .csr    = {
+               .read           = rt2500usb_read_csr,
+               .write          = rt2500usb_write_csr,
+               .word_size      = sizeof(u16),
+               .word_count     = CSR_REG_SIZE / sizeof(u16),
+       },
+       .eeprom = {
+               .read           = rt2x00_eeprom_read,
+               .write          = rt2x00_eeprom_write,
+               .word_size      = sizeof(u16),
+               .word_count     = EEPROM_SIZE / sizeof(u16),
+       },
+       .bbp    = {
+               .read           = rt2500usb_bbp_read,
+               .write          = rt2500usb_bbp_write,
+               .word_size      = sizeof(u8),
+               .word_count     = BBP_SIZE / sizeof(u8),
+       },
+       .rf     = {
+               .read           = rt2x00_rf_read,
+               .write          = rt2500usb_rf_write,
+               .word_size      = sizeof(u32),
+               .word_count     = RF_SIZE / sizeof(u32),
+       },
+};
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+/*
+ * Configuration handlers.
+ */
+static void rt2500usb_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *addr)
+{
+       __le16 reg[3];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, addr, ETH_ALEN);
+
+       /*
+        * The MAC address is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2500usb_register_multiwrite(rt2x00dev, MAC_CSR2, &reg, sizeof(reg));
+}
+
+static void rt2500usb_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid)
+{
+       __le16 reg[3];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, bssid, ETH_ALEN);
+
+       /*
+        * The BSSID is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2500usb_register_multiwrite(rt2x00dev, MAC_CSR5, &reg, sizeof(reg));
+}
+
+static void rt2500usb_config_packet_filter(struct rt2x00_dev *rt2x00dev,
+                                          const unsigned int filter)
+{
+       int promisc = !!(filter & IFF_PROMISC);
+       int multicast = !!(filter & IFF_MULTICAST);
+       int broadcast = !!(filter & IFF_BROADCAST);
+       u16 reg;
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR2, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR2_DROP_NOT_TO_ME, !promisc);
+       rt2x00_set_field16(&reg, TXRX_CSR2_DROP_MULTICAST, !multicast);
+       rt2x00_set_field16(&reg, TXRX_CSR2_DROP_BROADCAST, !broadcast);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR2, reg);
+}
+
+static void rt2500usb_config_type(struct rt2x00_dev *rt2x00dev, const int type)
+{
+       u16 reg;
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR19, 0);
+
+       /*
+        * Apply hardware packet filter.
+        */
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR2, &reg);
+
+       if (!is_monitor_present(&rt2x00dev->interface) &&
+           (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_STA))
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_TODS, 1);
+       else
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_TODS, 0);
+
+       /*
+        * If there is a non-monitor interface present
+        * the packet should be strict (even if a monitor interface is present!).
+        * When there is only 1 interface present which is in monitor mode
+        * we should start accepting _all_ frames.
+        */
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_CRC, 1);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_PHYSICAL, 1);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_CONTROL, 1);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_VERSION_ERROR, 1);
+       } else if (is_monitor_present(&rt2x00dev->interface)) {
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_CRC, 0);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_PHYSICAL, 0);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_CONTROL, 0);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_VERSION_ERROR, 0);
+       }
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR2, reg);
+
+       /*
+        * Enable beacon config
+        */
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR20, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR20_OFFSET,
+                          (PREAMBLE + get_duration(IEEE80211_HEADER, 2)) >> 6);
+       if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field16(&reg, TXRX_CSR20_BCN_EXPECT_WINDOW, 0);
+       else
+               rt2x00_set_field16(&reg, TXRX_CSR20_BCN_EXPECT_WINDOW, 2);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR20, reg);
+
+       /*
+        * Enable synchronisation.
+        */
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR18, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR18_OFFSET, 0);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR18, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR19, &reg);
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field16(&reg, TXRX_CSR19_TSF_COUNT, 1);
+               rt2x00_set_field16(&reg, TXRX_CSR19_TBCN, 1);
+       }
+
+       rt2x00_set_field16(&reg, TXRX_CSR19_BEACON_GEN, 0);
+       if (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_AP)
+               rt2x00_set_field16(&reg, TXRX_CSR19_TSF_SYNC, 2);
+       else if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field16(&reg, TXRX_CSR19_TSF_SYNC, 1);
+       else if (is_monitor_present(&rt2x00dev->interface) &&
+                !is_interface_present(&rt2x00dev->interface))
+               rt2x00_set_field16(&reg, TXRX_CSR19_TSF_SYNC, 0);
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR19, reg);
+}
+
+static void rt2500usb_config_rate(struct rt2x00_dev *rt2x00dev, const int rate)
+{
+       struct ieee80211_conf *conf = &rt2x00dev->hw->conf;
+       u16 reg;
+       u16 value;
+       u16 preamble;
+
+       if (DEVICE_GET_RATE_FIELD(rate, PREAMBLE))
+               preamble = SHORT_PREAMBLE;
+       else
+               preamble = PREAMBLE;
+
+       reg = DEVICE_GET_RATE_FIELD(rate, RATEMASK) & DEV_BASIC_RATEMASK;
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR11, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR1, &reg);
+       value = ((conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME) ?
+                SHORT_DIFS : DIFS) +
+           PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field16(&reg, TXRX_CSR1_ACK_TIMEOUT, value);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR1, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR10, &reg);
+       if (preamble == SHORT_PREAMBLE)
+               rt2x00_set_field16(&reg, TXRX_CSR10_AUTORESPOND_PREAMBLE, 1);
+       else
+               rt2x00_set_field16(&reg, TXRX_CSR10_AUTORESPOND_PREAMBLE, 0);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR10, reg);
+}
+
+static void rt2500usb_config_phymode(struct rt2x00_dev *rt2x00dev,
+                                    const int phymode)
+{
+       struct ieee80211_hw_mode *mode;
+       struct ieee80211_rate *rate;
+
+       if (phymode == MODE_IEEE80211A)
+               rt2x00dev->curr_hwmode = HWMODE_A;
+       else if (phymode == MODE_IEEE80211B)
+               rt2x00dev->curr_hwmode = HWMODE_B;
+       else
+               rt2x00dev->curr_hwmode = HWMODE_G;
+
+       mode = &rt2x00dev->hwmodes[rt2x00dev->curr_hwmode];
+       rate = &mode->rates[mode->num_rates - 1];
+
+       rt2500usb_config_rate(rt2x00dev, rate->val2);
+
+       if (phymode == MODE_IEEE80211B) {
+               rt2500usb_register_write(rt2x00dev, MAC_CSR11, 0x000b);
+               rt2500usb_register_write(rt2x00dev, MAC_CSR12, 0x0040);
+       } else {
+               rt2500usb_register_write(rt2x00dev, MAC_CSR11, 0x0005);
+               rt2500usb_register_write(rt2x00dev, MAC_CSR12, 0x016c);
+       }
+}
+
+static void rt2500usb_config_channel(struct rt2x00_dev *rt2x00dev,
+                                    const int index, const int channel,
+                                    const int txpower)
+{
+       struct rf_channel reg;
+
+       /*
+        * Fill rf_reg structure.
+        */
+       memcpy(&reg, &rt2x00dev->spec.channels[index], sizeof(reg));
+
+       /*
+        * Set TXpower.
+        */
+       rt2x00_set_field32(&reg.rf3, RF3_TXPOWER, TXPOWER_TO_DEV(txpower));
+
+       /*
+        * For RT2525E we should first set the channel to half band higher.
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525E)) {
+               static const u32 vals[] = {
+                       0x000008aa, 0x000008ae, 0x000008ae, 0x000008b2,
+                       0x000008b2, 0x000008b6, 0x000008b6, 0x000008ba,
+                       0x000008ba, 0x000008be, 0x000008b7, 0x00000902,
+                       0x00000902, 0x00000906
+               };
+
+               rt2500usb_rf_write(rt2x00dev, 2, vals[channel - 1]);
+               if (reg.rf4)
+                       rt2500usb_rf_write(rt2x00dev, 4, reg.rf4);
+       }
+
+       rt2500usb_rf_write(rt2x00dev, 1, reg.rf1);
+       rt2500usb_rf_write(rt2x00dev, 2, reg.rf2);
+       rt2500usb_rf_write(rt2x00dev, 3, reg.rf3);
+       if (reg.rf4)
+               rt2500usb_rf_write(rt2x00dev, 4, reg.rf4);
+}
+
+static void rt2500usb_config_txpower(struct rt2x00_dev *rt2x00dev,
+                                    const int txpower)
+{
+       u32 rf3;
+
+       rt2x00_rf_read(rt2x00dev, 3, &rf3);
+       rt2x00_set_field32(&rf3, RF3_TXPOWER, TXPOWER_TO_DEV(txpower));
+       rt2500usb_rf_write(rt2x00dev, 3, rf3);
+}
+
+static void rt2500usb_config_antenna(struct rt2x00_dev *rt2x00dev,
+                                    const int antenna_tx, const int antenna_rx)
+{
+       u8 r2;
+       u8 r14;
+       u16 csr5;
+       u16 csr6;
+
+       rt2500usb_bbp_read(rt2x00dev, 2, &r2);
+       rt2500usb_bbp_read(rt2x00dev, 14, &r14);
+       rt2500usb_register_read(rt2x00dev, PHY_CSR5, &csr5);
+       rt2500usb_register_read(rt2x00dev, PHY_CSR6, &csr6);
+
+       /*
+        * Configure the TX antenna.
+        */
+       switch (antenna_tx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 1);
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK, 1);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM, 1);
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 0);
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK, 0);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM, 0);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 2);
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK, 2);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM, 2);
+               break;
+       }
+
+       /*
+        * Configure the RX antenna.
+        */
+       switch (antenna_rx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 1);
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 0);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 2);
+               break;
+       }
+
+       /*
+        * RT2525E and RT5222 need to flip TX I/Q
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525E) ||
+           rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_IQ_FLIP, 1);
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK_FLIP, 1);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM_FLIP, 1);
+
+               /*
+                * RT2525E does not need RX I/Q Flip.
+                */
+               if (rt2x00_rf(&rt2x00dev->chip, RF2525E))
+                       rt2x00_set_field8(&r14, BBP_R14_RX_IQ_FLIP, 0);
+       } else {
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK_FLIP, 0);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM_FLIP, 0);
+       }
+
+       rt2500usb_bbp_write(rt2x00dev, 2, r2);
+       rt2500usb_bbp_write(rt2x00dev, 14, r14);
+       rt2500usb_register_write(rt2x00dev, PHY_CSR5, csr5);
+       rt2500usb_register_write(rt2x00dev, PHY_CSR6, csr6);
+}
+
+static void rt2500usb_config_duration(struct rt2x00_dev *rt2x00dev,
+                                     const int short_slot_time,
+                                     const int beacon_int)
+{
+       u16 reg;
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR10,
+                                short_slot_time ? SHORT_SLOT_TIME : SLOT_TIME);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR18, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR18_INTERVAL, beacon_int * 4);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR18, reg);
+}
+
+static void rt2500usb_config(struct rt2x00_dev *rt2x00dev,
+                            const unsigned int flags,
+                            struct ieee80211_conf *conf)
+{
+       int short_slot_time = conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME;
+
+       if (flags & CONFIG_UPDATE_PHYMODE)
+               rt2500usb_config_phymode(rt2x00dev, conf->phymode);
+       if (flags & CONFIG_UPDATE_CHANNEL)
+               rt2500usb_config_channel(rt2x00dev, conf->channel_val,
+                                        conf->channel, conf->power_level);
+       if ((flags & CONFIG_UPDATE_TXPOWER) && !(flags & CONFIG_UPDATE_CHANNEL))
+               rt2500usb_config_txpower(rt2x00dev, conf->power_level);
+       if (flags & CONFIG_UPDATE_ANTENNA)
+               rt2500usb_config_antenna(rt2x00dev, conf->antenna_sel_tx,
+                                        conf->antenna_sel_rx);
+       if (flags & (CONFIG_UPDATE_SLOT_TIME | CONFIG_UPDATE_BEACON_INT))
+               rt2500usb_config_duration(rt2x00dev, short_slot_time,
+                                         conf->beacon_int);
+}
+
+/*
+ * LED functions.
+ */
+static void rt2500usb_enable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR21, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR21_ON_PERIOD, 70);
+       rt2x00_set_field16(&reg, MAC_CSR21_OFF_PERIOD, 30);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR21, reg);
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR20, &reg);
+
+       if (rt2x00dev->led_mode == LED_MODE_TXRX_ACTIVITY) {
+               rt2x00_set_field16(&reg, MAC_CSR20_LINK, 1);
+               rt2x00_set_field16(&reg, MAC_CSR20_ACTIVITY, 0);
+       } else if (rt2x00dev->led_mode == LED_MODE_ASUS) {
+               rt2x00_set_field16(&reg, MAC_CSR20_LINK, 0);
+               rt2x00_set_field16(&reg, MAC_CSR20_ACTIVITY, 1);
+       } else {
+               rt2x00_set_field16(&reg, MAC_CSR20_LINK, 1);
+               rt2x00_set_field16(&reg, MAC_CSR20_ACTIVITY, 1);
+       }
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR20, reg);
+}
+
+static void rt2500usb_disable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR20, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR20_LINK, 0);
+       rt2x00_set_field16(&reg, MAC_CSR20_ACTIVITY, 0);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR20, reg);
+}
+
+/*
+ * Link tuning
+ */
+static void rt2500usb_link_stats(struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+
+       /*
+        * Update FCS error count from register.
+        */
+       rt2500usb_register_read(rt2x00dev, STA_CSR0, &reg);
+       rt2x00dev->link.rx_failed = rt2x00_get_field16(reg, STA_CSR0_FCS_ERROR);
+
+       /*
+        * Update False CCA count from register.
+        */
+       rt2500usb_register_read(rt2x00dev, STA_CSR3, &reg);
+       rt2x00dev->link.false_cca =
+           rt2x00_get_field16(reg, STA_CSR3_FALSE_CCA_ERROR);
+}
+
+static void rt2500usb_reset_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       u16 eeprom;
+       u16 value;
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R24, &eeprom);
+       value = rt2x00_get_field16(eeprom, EEPROM_BBPTUNE_R24_LOW);
+       rt2500usb_bbp_write(rt2x00dev, 24, value);
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R25, &eeprom);
+       value = rt2x00_get_field16(eeprom, EEPROM_BBPTUNE_R25_LOW);
+       rt2500usb_bbp_write(rt2x00dev, 25, value);
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R61, &eeprom);
+       value = rt2x00_get_field16(eeprom, EEPROM_BBPTUNE_R61_LOW);
+       rt2500usb_bbp_write(rt2x00dev, 61, value);
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_VGC, &eeprom);
+       value = rt2x00_get_field16(eeprom, EEPROM_BBPTUNE_VGCUPPER);
+       rt2500usb_bbp_write(rt2x00dev, 17, value);
+
+       rt2x00dev->link.vgc_level = value;
+}
+
+static void rt2500usb_link_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       int rssi = rt2x00_get_link_rssi(&rt2x00dev->link);
+       u16 bbp_thresh;
+       u16 vgc_bound;
+       u16 sens;
+       u16 r24;
+       u16 r25;
+       u16 r61;
+       u16 r17_sens;
+       u8 r17;
+       u8 up_bound;
+       u8 low_bound;
+
+       /*
+        * Determine the BBP tuning threshold and correctly
+        * set BBP 24, 25 and 61.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE, &bbp_thresh);
+       bbp_thresh = rt2x00_get_field16(bbp_thresh, EEPROM_BBPTUNE_THRESHOLD);
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R24, &r24);
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R25, &r25);
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R61, &r61);
+
+       if ((rssi + bbp_thresh) > 0) {
+               r24 = rt2x00_get_field16(r24, EEPROM_BBPTUNE_R24_HIGH);
+               r25 = rt2x00_get_field16(r25, EEPROM_BBPTUNE_R25_HIGH);
+               r61 = rt2x00_get_field16(r61, EEPROM_BBPTUNE_R61_HIGH);
+       } else {
+               r24 = rt2x00_get_field16(r24, EEPROM_BBPTUNE_R24_LOW);
+               r25 = rt2x00_get_field16(r25, EEPROM_BBPTUNE_R25_LOW);
+               r61 = rt2x00_get_field16(r61, EEPROM_BBPTUNE_R61_LOW);
+       }
+
+       rt2500usb_bbp_write(rt2x00dev, 24, r24);
+       rt2500usb_bbp_write(rt2x00dev, 25, r25);
+       rt2500usb_bbp_write(rt2x00dev, 61, r61);
+
+       /*
+        * Read current r17 value, as well as the sensitivity values
+        * for the r17 register.
+        */
+       rt2500usb_bbp_read(rt2x00dev, 17, &r17);
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R17, &r17_sens);
+
+       /*
+        * A too low RSSI will cause too much false CCA which will
+        * then corrupt the R17 tuning. To remidy this the tuning should
+        * be stopped (While making sure the R17 value will not exceed limits)
+        */
+       if (rssi >= -40) {
+               if (r17 != 0x60)
+                       rt2500usb_bbp_write(rt2x00dev, 17, 0x60);
+               return;
+       }
+
+       /*
+        * Special big-R17 for short distance
+        */
+       if (rssi >= -58) {
+               sens = rt2x00_get_field16(r17_sens, EEPROM_BBPTUNE_R17_LOW);
+               if (r17 != sens)
+                       rt2500usb_bbp_write(rt2x00dev, 17, sens);
+               return;
+       }
+
+       /*
+        * Special mid-R17 for middle distance
+        */
+       if (rssi >= -74) {
+               sens = rt2x00_get_field16(r17_sens, EEPROM_BBPTUNE_R17_HIGH);
+               if (r17 != sens)
+                       rt2500usb_bbp_write(rt2x00dev, 17, sens);
+               return;
+       }
+
+       /*
+        * Leave short or middle distance condition, restore r17
+        * to the dynamic tuning range.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_VGC, &vgc_bound);
+       vgc_bound = rt2x00_get_field16(vgc_bound, EEPROM_BBPTUNE_VGCUPPER);
+
+       low_bound = 0x32;
+       if (rssi >= -77)
+               up_bound = vgc_bound;
+       else
+               up_bound = vgc_bound - (-77 - rssi);
+
+       if (up_bound < low_bound)
+               up_bound = low_bound;
+
+       if (r17 > up_bound) {
+               rt2500usb_bbp_write(rt2x00dev, 17, up_bound);
+               rt2x00dev->link.vgc_level = up_bound;
+       } else if (rt2x00dev->link.false_cca > 512 && r17 < up_bound) {
+               rt2500usb_bbp_write(rt2x00dev, 17, ++r17);
+               rt2x00dev->link.vgc_level = r17;
+       } else if (rt2x00dev->link.false_cca < 100 && r17 > low_bound) {
+               rt2500usb_bbp_write(rt2x00dev, 17, --r17);
+               rt2x00dev->link.vgc_level = r17;
+       }
+}
+
+/*
+ * Initialization functions.
+ */
+static int rt2500usb_init_registers(struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+
+       rt2x00usb_vendor_request_sw(rt2x00dev, USB_DEVICE_MODE, 0x0001,
+                                   USB_MODE_TEST, REGISTER_TIMEOUT);
+       rt2x00usb_vendor_request_sw(rt2x00dev, USB_SINGLE_WRITE, 0x0308,
+                                   0x00f0, REGISTER_TIMEOUT);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR2, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR2_DISABLE_RX, 1);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR2, reg);
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR13, 0x1111);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR14, 0x1e11);
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR1_SOFT_RESET, 1);
+       rt2x00_set_field16(&reg, MAC_CSR1_BBP_RESET, 1);
+       rt2x00_set_field16(&reg, MAC_CSR1_HOST_READY, 0);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR1_SOFT_RESET, 0);
+       rt2x00_set_field16(&reg, MAC_CSR1_BBP_RESET, 0);
+       rt2x00_set_field16(&reg, MAC_CSR1_HOST_READY, 0);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR5, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR5_BBP_ID0, 13);
+       rt2x00_set_field16(&reg, TXRX_CSR5_BBP_ID0_VALID, 1);
+       rt2x00_set_field16(&reg, TXRX_CSR5_BBP_ID1, 12);
+       rt2x00_set_field16(&reg, TXRX_CSR5_BBP_ID1_VALID, 1);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR5, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR6, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR6_BBP_ID0, 10);
+       rt2x00_set_field16(&reg, TXRX_CSR6_BBP_ID0_VALID, 1);
+       rt2x00_set_field16(&reg, TXRX_CSR6_BBP_ID1, 11);
+       rt2x00_set_field16(&reg, TXRX_CSR6_BBP_ID1_VALID, 1);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR6, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR7, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR7_BBP_ID0, 7);
+       rt2x00_set_field16(&reg, TXRX_CSR7_BBP_ID0_VALID, 1);
+       rt2x00_set_field16(&reg, TXRX_CSR7_BBP_ID1, 6);
+       rt2x00_set_field16(&reg, TXRX_CSR7_BBP_ID1_VALID, 1);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR7, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR8, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR8_BBP_ID0, 5);
+       rt2x00_set_field16(&reg, TXRX_CSR8_BBP_ID0_VALID, 1);
+       rt2x00_set_field16(&reg, TXRX_CSR8_BBP_ID1, 0);
+       rt2x00_set_field16(&reg, TXRX_CSR8_BBP_ID1_VALID, 0);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR8, reg);
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR21, 0xe78f);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR9, 0xff1d);
+
+       if (rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_AWAKE))
+               return -EBUSY;
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR1_SOFT_RESET, 0);
+       rt2x00_set_field16(&reg, MAC_CSR1_BBP_RESET, 0);
+       rt2x00_set_field16(&reg, MAC_CSR1_HOST_READY, 1);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       if (rt2x00_get_rev(&rt2x00dev->chip) >= RT2570_VERSION_C) {
+               rt2500usb_register_read(rt2x00dev, PHY_CSR2, &reg);
+               reg &= ~0x0002;
+       } else {
+               reg = 0x3002;
+       }
+       rt2500usb_register_write(rt2x00dev, PHY_CSR2, reg);
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR11, 0x0002);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR22, 0x0053);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR15, 0x01ee);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR16, 0x0000);
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR8, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR8_MAX_FRAME_UNIT,
+                          rt2x00dev->rx->data_size);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR8, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR0_IV_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field16(&reg, TXRX_CSR0_KEY_ID, 0xff);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR18, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR18_DELAY_AFTER_BEACON, 90);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR18, reg);
+
+       rt2500usb_register_read(rt2x00dev, PHY_CSR4, &reg);
+       rt2x00_set_field16(&reg, PHY_CSR4_LOW_RF_LE, 1);
+       rt2500usb_register_write(rt2x00dev, PHY_CSR4, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR1, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR1_AUTO_SEQUENCE, 1);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR1, reg);
+
+       return 0;
+}
+
+static int rt2500usb_init_bbp(struct rt2x00_dev *rt2x00dev)
+{
+       unsigned int i;
+       u16 eeprom;
+       u8 value;
+       u8 reg_id;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500usb_bbp_read(rt2x00dev, 0, &value);
+               if ((value != 0xff) && (value != 0x00))
+                       goto continue_csr_init;
+               NOTICE(rt2x00dev, "Waiting for BBP register.\n");
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "BBP register access failed, aborting.\n");
+       return -EACCES;
+
+continue_csr_init:
+       rt2500usb_bbp_write(rt2x00dev, 3, 0x02);
+       rt2500usb_bbp_write(rt2x00dev, 4, 0x19);
+       rt2500usb_bbp_write(rt2x00dev, 14, 0x1c);
+       rt2500usb_bbp_write(rt2x00dev, 15, 0x30);
+       rt2500usb_bbp_write(rt2x00dev, 16, 0xac);
+       rt2500usb_bbp_write(rt2x00dev, 18, 0x18);
+       rt2500usb_bbp_write(rt2x00dev, 19, 0xff);
+       rt2500usb_bbp_write(rt2x00dev, 20, 0x1e);
+       rt2500usb_bbp_write(rt2x00dev, 21, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 22, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 23, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 24, 0x80);
+       rt2500usb_bbp_write(rt2x00dev, 25, 0x50);
+       rt2500usb_bbp_write(rt2x00dev, 26, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 27, 0x23);
+       rt2500usb_bbp_write(rt2x00dev, 30, 0x10);
+       rt2500usb_bbp_write(rt2x00dev, 31, 0x2b);
+       rt2500usb_bbp_write(rt2x00dev, 32, 0xb9);
+       rt2500usb_bbp_write(rt2x00dev, 34, 0x12);
+       rt2500usb_bbp_write(rt2x00dev, 35, 0x50);
+       rt2500usb_bbp_write(rt2x00dev, 39, 0xc4);
+       rt2500usb_bbp_write(rt2x00dev, 40, 0x02);
+       rt2500usb_bbp_write(rt2x00dev, 41, 0x60);
+       rt2500usb_bbp_write(rt2x00dev, 53, 0x10);
+       rt2500usb_bbp_write(rt2x00dev, 54, 0x18);
+       rt2500usb_bbp_write(rt2x00dev, 56, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 57, 0x10);
+       rt2500usb_bbp_write(rt2x00dev, 58, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 61, 0x60);
+       rt2500usb_bbp_write(rt2x00dev, 62, 0x10);
+       rt2500usb_bbp_write(rt2x00dev, 75, 0xff);
+
+       DEBUG(rt2x00dev, "Start initialization from EEPROM...\n");
+       for (i = 0; i < EEPROM_BBP_SIZE; i++) {
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_BBP_START + i, &eeprom);
+
+               if (eeprom != 0xffff && eeprom != 0x0000) {
+                       reg_id = rt2x00_get_field16(eeprom, EEPROM_BBP_REG_ID);
+                       value = rt2x00_get_field16(eeprom, EEPROM_BBP_VALUE);
+                       DEBUG(rt2x00dev, "BBP: 0x%02x, value: 0x%02x.\n",
+                             reg_id, value);
+                       rt2500usb_bbp_write(rt2x00dev, reg_id, value);
+               }
+       }
+       DEBUG(rt2x00dev, "...End initialization from EEPROM.\n");
+
+       return 0;
+}
+
+/*
+ * Device state switch handlers.
+ */
+static void rt2500usb_toggle_rx(struct rt2x00_dev *rt2x00dev,
+                               enum dev_state state)
+{
+       u16 reg;
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR2, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR2_DISABLE_RX,
+                          state == STATE_RADIO_RX_OFF);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR2, reg);
+}
+
+static int rt2500usb_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Initialize all registers.
+        */
+       if (rt2500usb_init_registers(rt2x00dev) ||
+           rt2500usb_init_bbp(rt2x00dev)) {
+               ERROR(rt2x00dev, "Register initialization failed.\n");
+               return -EIO;
+       }
+
+       rt2x00usb_enable_radio(rt2x00dev);
+
+       /*
+        * Enable LED
+        */
+       rt2500usb_enable_led(rt2x00dev);
+
+       return 0;
+}
+
+static void rt2500usb_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Disable LED
+        */
+       rt2500usb_disable_led(rt2x00dev);
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR13, 0x2121);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR14, 0x2121);
+
+       /*
+        * Disable synchronisation.
+        */
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR19, 0);
+
+       rt2x00usb_disable_radio(rt2x00dev);
+}
+
+static int rt2500usb_set_state(struct rt2x00_dev *rt2x00dev,
+                              enum dev_state state)
+{
+       u16 reg;
+       u16 reg2;
+       unsigned int i;
+       char put_to_sleep;
+       char bbp_state;
+       char rf_state;
+
+       put_to_sleep = (state != STATE_AWAKE);
+
+       reg = 0;
+       rt2x00_set_field16(&reg, MAC_CSR17_BBP_DESIRE_STATE, state);
+       rt2x00_set_field16(&reg, MAC_CSR17_RF_DESIRE_STATE, state);
+       rt2x00_set_field16(&reg, MAC_CSR17_PUT_TO_SLEEP, put_to_sleep);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR17, reg);
+       rt2x00_set_field16(&reg, MAC_CSR17_SET_STATE, 1);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR17, reg);
+
+       /*
+        * Device is not guaranteed to be in the requested state yet.
+        * We must wait until the register indicates that the
+        * device has entered the correct state.
+        */
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500usb_register_read(rt2x00dev, MAC_CSR17, &reg2);
+               bbp_state = rt2x00_get_field16(reg2, MAC_CSR17_BBP_CURR_STATE);
+               rf_state = rt2x00_get_field16(reg2, MAC_CSR17_RF_CURR_STATE);
+               if (bbp_state == state && rf_state == state)
+                       return 0;
+               rt2500usb_register_write(rt2x00dev, MAC_CSR17, reg);
+               msleep(30);
+       }
+
+       NOTICE(rt2x00dev, "Device failed to enter state %d, "
+              "current device state: bbp %d and rf %d.\n",
+              state, bbp_state, rf_state);
+
+       return -EBUSY;
+}
+
+static int rt2500usb_set_device_state(struct rt2x00_dev *rt2x00dev,
+                                     enum dev_state state)
+{
+       int retval = 0;
+
+       switch (state) {
+       case STATE_RADIO_ON:
+               retval = rt2500usb_enable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_OFF:
+               rt2500usb_disable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_RX_ON:
+       case STATE_RADIO_RX_OFF:
+               rt2500usb_toggle_rx(rt2x00dev, state);
+               break;
+       case STATE_DEEP_SLEEP:
+       case STATE_SLEEP:
+       case STATE_STANDBY:
+       case STATE_AWAKE:
+               retval = rt2500usb_set_state(rt2x00dev, state);
+               break;
+       default:
+               retval = -ENOTSUPP;
+               break;
+       }
+
+       return retval;
+}
+
+/*
+ * TX descriptor initialization
+ */
+static void rt2500usb_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+                                   struct data_desc *txd,
+                                   struct data_entry_desc *desc,
+                                   struct ieee80211_hdr *ieee80211hdr,
+                                   unsigned int length,
+                                   struct ieee80211_tx_control *control)
+{
+       u32 word;
+
+       /*
+        * Start writing the descriptor words.
+        */
+       rt2x00_desc_read(txd, 1, &word);
+       rt2x00_set_field32(&word, TXD_W1_IV_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&word, TXD_W1_AIFS, desc->aifs);
+       rt2x00_set_field32(&word, TXD_W1_CWMIN, desc->cw_min);
+       rt2x00_set_field32(&word, TXD_W1_CWMAX, desc->cw_max);
+       rt2x00_desc_write(txd, 1, word);
+
+       rt2x00_desc_read(txd, 2, &word);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_SIGNAL, desc->signal);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_SERVICE, desc->service);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_LENGTH_LOW, desc->length_low);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_LENGTH_HIGH, desc->length_high);
+       rt2x00_desc_write(txd, 2, word);
+
+       rt2x00_desc_read(txd, 0, &word);
+       rt2x00_set_field32(&word, TXD_W0_RETRY_LIMIT, control->retry_limit);
+       rt2x00_set_field32(&word, TXD_W0_MORE_FRAG,
+                          test_bit(ENTRY_TXD_MORE_FRAG, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_ACK,
+                          !(control->flags & IEEE80211_TXCTL_NO_ACK));
+       rt2x00_set_field32(&word, TXD_W0_TIMESTAMP,
+                          test_bit(ENTRY_TXD_REQ_TIMESTAMP, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_OFDM,
+                          test_bit(ENTRY_TXD_OFDM_RATE, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_NEW_SEQ,
+                          !!(control->flags & IEEE80211_TXCTL_FIRST_FRAGMENT));
+       rt2x00_set_field32(&word, TXD_W0_IFS, desc->ifs);
+       rt2x00_set_field32(&word, TXD_W0_DATABYTE_COUNT, length);
+       rt2x00_set_field32(&word, TXD_W0_CIPHER, CIPHER_NONE);
+       rt2x00_desc_write(txd, 0, word);
+}
+
+/*
+ * TX data initialization
+ */
+static void rt2500usb_kick_tx_queue(struct rt2x00_dev *rt2x00dev,
+                                   unsigned int queue)
+{
+       u16 reg;
+
+       if (queue != IEEE80211_TX_QUEUE_BEACON)
+               return;
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR19, &reg);
+       if (!rt2x00_get_field16(reg, TXRX_CSR19_BEACON_GEN)) {
+               rt2x00_set_field16(&reg, TXRX_CSR19_BEACON_GEN, 1);
+               /*
+                * Beacon generation will fail initially.
+                * To prevent this we need to register the TXRX_CSR19
+                * register several times.
+                */
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, reg);
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, 0);
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, reg);
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, 0);
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, reg);
+       }
+}
+
+/*
+ * RX control handlers
+ */
+static int rt2500usb_fill_rxdone(struct data_entry *entry,
+                                int *signal, int *rssi, int *ofdm, int *size)
+{
+       struct urb *urb = entry->priv;
+       struct data_desc *rxd = (struct data_desc *)(entry->skb->data +
+                                                    (urb->actual_length -
+                                                     entry->ring->desc_size));
+       u32 word0;
+       u32 word1;
+
+       rt2x00_desc_read(rxd, 0, &word0);
+       rt2x00_desc_read(rxd, 1, &word1);
+
+       if (rt2x00_get_field32(word0, RXD_W0_CRC_ERROR) ||
+           rt2x00_get_field32(word0, RXD_W0_PHYSICAL_ERROR) ||
+           rt2x00_get_field32(word0, RXD_W0_CIPHER_ERROR))
+               return -EINVAL;
+
+       /*
+        * Obtain the status about this packet.
+        */
+       *signal = rt2x00_get_field32(word1, RXD_W1_SIGNAL);
+       *rssi = rt2x00_get_field32(word1, RXD_W1_RSSI) -
+           entry->ring->rt2x00dev->rssi_offset;
+       *ofdm = rt2x00_get_field32(word0, RXD_W0_OFDM);
+       *size = rt2x00_get_field32(word0, RXD_W0_DATABYTE_COUNT);
+
+       return 0;
+}
+
+/*
+ * Interrupt functions.
+ */
+static void rt2500usb_beacondone(struct urb *urb)
+{
+       struct data_entry *entry = (struct data_entry *)urb->context;
+       struct data_ring *ring = entry->ring;
+
+       if (!test_bit(DEVICE_ENABLED_RADIO, &ring->rt2x00dev->flags))
+               return;
+
+       /*
+        * Check if this was the guardian beacon,
+        * if that was the case we need to send the real beacon now.
+        * Otherwise we should free the sk_buffer, the device
+        * should be doing the rest of the work now.
+        */
+       if (ring->index == 1) {
+               rt2x00_ring_index_done_inc(ring);
+               entry = rt2x00_get_data_entry(ring);
+               usb_submit_urb(entry->priv, GFP_ATOMIC);
+               rt2x00_ring_index_inc(ring);
+       } else if (ring->index_done == 1) {
+               entry = rt2x00_get_data_entry_done(ring);
+               if (entry->skb) {
+                       dev_kfree_skb(entry->skb);
+                       entry->skb = NULL;
+               }
+               rt2x00_ring_index_done_inc(ring);
+       }
+}
+
+/*
+ * Device probe functions.
+ */
+static int rt2500usb_validate_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u16 word;
+       u8 *mac;
+
+       rt2x00usb_eeprom_read(rt2x00dev, rt2x00dev->eeprom, EEPROM_SIZE);
+
+       /*
+        * Start validation of the data that has been read.
+        */
+       mac = rt2x00_eeprom_addr(rt2x00dev, EEPROM_MAC_ADDR_0);
+       if (!is_valid_ether_addr(mac)) {
+               random_ether_addr(mac);
+               EEPROM(rt2x00dev, "MAC: " MAC_FMT "\n", MAC_ARG(mac));
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_NUM, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_TX_DEFAULT, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RX_DEFAULT, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_LED_MODE, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_DYN_TXAGC, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_HARDWARE_RADIO, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RF_TYPE, RF2522);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_ANTENNA, word);
+               EEPROM(rt2x00dev, "Antenna: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_NIC_CARDBUS_ACCEL, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_DYN_BBP_TUNE, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_CCK_TX_POWER, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_NIC, word);
+               EEPROM(rt2x00dev, "NIC: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_CALIBRATE_OFFSET, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_CALIBRATE_OFFSET_RSSI,
+                                  DEFAULT_RSSI_OFFSET);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_CALIBRATE_OFFSET, word);
+               EEPROM(rt2x00dev, "Calibrate offset: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_THRESHOLD, 45);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE, word);
+               EEPROM(rt2x00dev, "BBPtune: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_VGC, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_VGCUPPER, 0x40);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_VGC, word);
+               EEPROM(rt2x00dev, "BBPtune vgc: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R17, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R17_LOW, 0x48);
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R17_HIGH, 0x41);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_R17, word);
+               EEPROM(rt2x00dev, "BBPtune r17: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R24, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R24_LOW, 0x40);
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R24_HIGH, 0x80);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_R24, word);
+               EEPROM(rt2x00dev, "BBPtune r24: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R25, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R25_LOW, 0x40);
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R25_HIGH, 0x50);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_R25, word);
+               EEPROM(rt2x00dev, "BBPtune r25: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R61, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R61_LOW, 0x60);
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R61_HIGH, 0x6d);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_R61, word);
+               EEPROM(rt2x00dev, "BBPtune r61: 0x%04x\n", word);
+       }
+
+       return 0;
+}
+
+static int rt2500usb_init_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+       u16 value;
+       u16 eeprom;
+
+       /*
+        * Read EEPROM word for configuration.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &eeprom);
+
+       /*
+        * Identify RF chipset.
+        */
+       value = rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RF_TYPE);
+       rt2500usb_register_read(rt2x00dev, MAC_CSR0, &reg);
+       rt2x00_set_chip(rt2x00dev, RT2570, value, reg);
+
+       if (rt2x00_rev(&rt2x00dev->chip, 0xffff0)) {
+               ERROR(rt2x00dev, "Invalid RT chipset detected.\n");
+               return -ENODEV;
+       }
+
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2522) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2523) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2524) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2525) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2525E) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               ERROR(rt2x00dev, "Invalid RF chipset detected.\n");
+               return -ENODEV;
+       }
+
+       /*
+        * Identify default antenna configuration.
+        */
+       rt2x00dev->hw->conf.antenna_sel_tx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_TX_DEFAULT);
+       rt2x00dev->hw->conf.antenna_sel_rx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RX_DEFAULT);
+
+       /*
+        * Store led mode, for correct led behaviour.
+        */
+       rt2x00dev->led_mode =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_LED_MODE);
+
+       /*
+        * Check if the BBP tuning should be disabled.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &eeprom);
+       if (rt2x00_get_field16(eeprom, EEPROM_NIC_DYN_BBP_TUNE))
+               __set_bit(CONFIG_DISABLE_LINK_TUNING, &rt2x00dev->flags);
+
+       /*
+        * Read the RSSI <-> dBm offset information.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_CALIBRATE_OFFSET, &eeprom);
+       rt2x00dev->rssi_offset =
+           rt2x00_get_field16(eeprom, EEPROM_CALIBRATE_OFFSET_RSSI);
+
+       return 0;
+}
+
+/*
+ * RF value list for RF2522
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2522[] = {
+       { 1,  0x00002050, 0x000c1fda, 0x00000101, 0 },
+       { 2,  0x00002050, 0x000c1fee, 0x00000101, 0 },
+       { 3,  0x00002050, 0x000c2002, 0x00000101, 0 },
+       { 4,  0x00002050, 0x000c2016, 0x00000101, 0 },
+       { 5,  0x00002050, 0x000c202a, 0x00000101, 0 },
+       { 6,  0x00002050, 0x000c203e, 0x00000101, 0 },
+       { 7,  0x00002050, 0x000c2052, 0x00000101, 0 },
+       { 8,  0x00002050, 0x000c2066, 0x00000101, 0 },
+       { 9,  0x00002050, 0x000c207a, 0x00000101, 0 },
+       { 10, 0x00002050, 0x000c208e, 0x00000101, 0 },
+       { 11, 0x00002050, 0x000c20a2, 0x00000101, 0 },
+       { 12, 0x00002050, 0x000c20b6, 0x00000101, 0 },
+       { 13, 0x00002050, 0x000c20ca, 0x00000101, 0 },
+       { 14, 0x00002050, 0x000c20fa, 0x00000101, 0 },
+};
+
+/*
+ * RF value list for RF2523
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2523[] = {
+       { 1,  0x00022010, 0x00000c9e, 0x000e0111, 0x00000a1b },
+       { 2,  0x00022010, 0x00000ca2, 0x000e0111, 0x00000a1b },
+       { 3,  0x00022010, 0x00000ca6, 0x000e0111, 0x00000a1b },
+       { 4,  0x00022010, 0x00000caa, 0x000e0111, 0x00000a1b },
+       { 5,  0x00022010, 0x00000cae, 0x000e0111, 0x00000a1b },
+       { 6,  0x00022010, 0x00000cb2, 0x000e0111, 0x00000a1b },
+       { 7,  0x00022010, 0x00000cb6, 0x000e0111, 0x00000a1b },
+       { 8,  0x00022010, 0x00000cba, 0x000e0111, 0x00000a1b },
+       { 9,  0x00022010, 0x00000cbe, 0x000e0111, 0x00000a1b },
+       { 10, 0x00022010, 0x00000d02, 0x000e0111, 0x00000a1b },
+       { 11, 0x00022010, 0x00000d06, 0x000e0111, 0x00000a1b },
+       { 12, 0x00022010, 0x00000d0a, 0x000e0111, 0x00000a1b },
+       { 13, 0x00022010, 0x00000d0e, 0x000e0111, 0x00000a1b },
+       { 14, 0x00022010, 0x00000d1a, 0x000e0111, 0x00000a03 },
+};
+
+/*
+ * RF value list for RF2524
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2524[] = {
+       { 1,  0x00032020, 0x00000c9e, 0x00000101, 0x00000a1b },
+       { 2,  0x00032020, 0x00000ca2, 0x00000101, 0x00000a1b },
+       { 3,  0x00032020, 0x00000ca6, 0x00000101, 0x00000a1b },
+       { 4,  0x00032020, 0x00000caa, 0x00000101, 0x00000a1b },
+       { 5,  0x00032020, 0x00000cae, 0x00000101, 0x00000a1b },
+       { 6,  0x00032020, 0x00000cb2, 0x00000101, 0x00000a1b },
+       { 7,  0x00032020, 0x00000cb6, 0x00000101, 0x00000a1b },
+       { 8,  0x00032020, 0x00000cba, 0x00000101, 0x00000a1b },
+       { 9,  0x00032020, 0x00000cbe, 0x00000101, 0x00000a1b },
+       { 10, 0x00032020, 0x00000d02, 0x00000101, 0x00000a1b },
+       { 11, 0x00032020, 0x00000d06, 0x00000101, 0x00000a1b },
+       { 12, 0x00032020, 0x00000d0a, 0x00000101, 0x00000a1b },
+       { 13, 0x00032020, 0x00000d0e, 0x00000101, 0x00000a1b },
+       { 14, 0x00032020, 0x00000d1a, 0x00000101, 0x00000a03 },
+};
+
+/*
+ * RF value list for RF2525
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2525[] = {
+       { 1,  0x00022020, 0x00080c9e, 0x00060111, 0x00000a1b },
+       { 2,  0x00022020, 0x00080ca2, 0x00060111, 0x00000a1b },
+       { 3,  0x00022020, 0x00080ca6, 0x00060111, 0x00000a1b },
+       { 4,  0x00022020, 0x00080caa, 0x00060111, 0x00000a1b },
+       { 5,  0x00022020, 0x00080cae, 0x00060111, 0x00000a1b },
+       { 6,  0x00022020, 0x00080cb2, 0x00060111, 0x00000a1b },
+       { 7,  0x00022020, 0x00080cb6, 0x00060111, 0x00000a1b },
+       { 8,  0x00022020, 0x00080cba, 0x00060111, 0x00000a1b },
+       { 9,  0x00022020, 0x00080cbe, 0x00060111, 0x00000a1b },
+       { 10, 0x00022020, 0x00080d02, 0x00060111, 0x00000a1b },
+       { 11, 0x00022020, 0x00080d06, 0x00060111, 0x00000a1b },
+       { 12, 0x00022020, 0x00080d0a, 0x00060111, 0x00000a1b },
+       { 13, 0x00022020, 0x00080d0e, 0x00060111, 0x00000a1b },
+       { 14, 0x00022020, 0x00080d1a, 0x00060111, 0x00000a03 },
+};
+
+/*
+ * RF value list for RF2525e
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2525e[] = {
+       { 1,  0x00022010, 0x0000089a, 0x00060111, 0x00000e1b },
+       { 2,  0x00022010, 0x0000089e, 0x00060111, 0x00000e07 },
+       { 3,  0x00022010, 0x0000089e, 0x00060111, 0x00000e1b },
+       { 4,  0x00022010, 0x000008a2, 0x00060111, 0x00000e07 },
+       { 5,  0x00022010, 0x000008a2, 0x00060111, 0x00000e1b },
+       { 6,  0x00022010, 0x000008a6, 0x00060111, 0x00000e07 },
+       { 7,  0x00022010, 0x000008a6, 0x00060111, 0x00000e1b },
+       { 8,  0x00022010, 0x000008aa, 0x00060111, 0x00000e07 },
+       { 9,  0x00022010, 0x000008aa, 0x00060111, 0x00000e1b },
+       { 10, 0x00022010, 0x000008ae, 0x00060111, 0x00000e07 },
+       { 11, 0x00022010, 0x000008ae, 0x00060111, 0x00000e1b },
+       { 12, 0x00022010, 0x000008b2, 0x00060111, 0x00000e07 },
+       { 13, 0x00022010, 0x000008b2, 0x00060111, 0x00000e1b },
+       { 14, 0x00022010, 0x000008b6, 0x00060111, 0x00000e23 },
+};
+
+/*
+ * RF value list for RF5222
+ * Supports: 2.4 GHz & 5.2 GHz
+ */
+static const struct rf_channel rf_vals_5222[] = {
+       { 1,  0x00022020, 0x00001136, 0x00000101, 0x00000a0b },
+       { 2,  0x00022020, 0x0000113a, 0x00000101, 0x00000a0b },
+       { 3,  0x00022020, 0x0000113e, 0x00000101, 0x00000a0b },
+       { 4,  0x00022020, 0x00001182, 0x00000101, 0x00000a0b },
+       { 5,  0x00022020, 0x00001186, 0x00000101, 0x00000a0b },
+       { 6,  0x00022020, 0x0000118a, 0x00000101, 0x00000a0b },
+       { 7,  0x00022020, 0x0000118e, 0x00000101, 0x00000a0b },
+       { 8,  0x00022020, 0x00001192, 0x00000101, 0x00000a0b },
+       { 9,  0x00022020, 0x00001196, 0x00000101, 0x00000a0b },
+       { 10, 0x00022020, 0x0000119a, 0x00000101, 0x00000a0b },
+       { 11, 0x00022020, 0x0000119e, 0x00000101, 0x00000a0b },
+       { 12, 0x00022020, 0x000011a2, 0x00000101, 0x00000a0b },
+       { 13, 0x00022020, 0x000011a6, 0x00000101, 0x00000a0b },
+       { 14, 0x00022020, 0x000011ae, 0x00000101, 0x00000a1b },
+
+       /* 802.11 UNI / HyperLan 2 */
+       { 36, 0x00022010, 0x00018896, 0x00000101, 0x00000a1f },
+       { 40, 0x00022010, 0x0001889a, 0x00000101, 0x00000a1f },
+       { 44, 0x00022010, 0x0001889e, 0x00000101, 0x00000a1f },
+       { 48, 0x00022010, 0x000188a2, 0x00000101, 0x00000a1f },
+       { 52, 0x00022010, 0x000188a6, 0x00000101, 0x00000a1f },
+       { 66, 0x00022010, 0x000188aa, 0x00000101, 0x00000a1f },
+       { 60, 0x00022010, 0x000188ae, 0x00000101, 0x00000a1f },
+       { 64, 0x00022010, 0x000188b2, 0x00000101, 0x00000a1f },
+
+       /* 802.11 HyperLan 2 */
+       { 100, 0x00022010, 0x00008802, 0x00000101, 0x00000a0f },
+       { 104, 0x00022010, 0x00008806, 0x00000101, 0x00000a0f },
+       { 108, 0x00022010, 0x0000880a, 0x00000101, 0x00000a0f },
+       { 112, 0x00022010, 0x0000880e, 0x00000101, 0x00000a0f },
+       { 116, 0x00022010, 0x00008812, 0x00000101, 0x00000a0f },
+       { 120, 0x00022010, 0x00008816, 0x00000101, 0x00000a0f },
+       { 124, 0x00022010, 0x0000881a, 0x00000101, 0x00000a0f },
+       { 128, 0x00022010, 0x0000881e, 0x00000101, 0x00000a0f },
+       { 132, 0x00022010, 0x00008822, 0x00000101, 0x00000a0f },
+       { 136, 0x00022010, 0x00008826, 0x00000101, 0x00000a0f },
+
+       /* 802.11 UNII */
+       { 140, 0x00022010, 0x0000882a, 0x00000101, 0x00000a0f },
+       { 149, 0x00022020, 0x000090a6, 0x00000101, 0x00000a07 },
+       { 153, 0x00022020, 0x000090ae, 0x00000101, 0x00000a07 },
+       { 157, 0x00022020, 0x000090b6, 0x00000101, 0x00000a07 },
+       { 161, 0x00022020, 0x000090be, 0x00000101, 0x00000a07 },
+};
+
+static void rt2500usb_probe_hw_mode(struct rt2x00_dev *rt2x00dev)
+{
+       struct hw_mode_spec *spec = &rt2x00dev->spec;
+       u8 *txpower;
+       unsigned int i;
+
+       /*
+        * Initialize all hw fields.
+        */
+       rt2x00dev->hw->flags =
+           IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE |
+           IEEE80211_HW_RX_INCLUDES_FCS |
+           IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING |
+           IEEE80211_HW_MONITOR_DURING_OPER |
+           IEEE80211_HW_NO_PROBE_FILTERING;
+       rt2x00dev->hw->extra_tx_headroom = TXD_DESC_SIZE;
+       rt2x00dev->hw->max_signal = MAX_SIGNAL;
+       rt2x00dev->hw->max_rssi = MAX_RX_SSI;
+       rt2x00dev->hw->queues = 2;
+
+       SET_IEEE80211_DEV(rt2x00dev->hw, &rt2x00dev_usb(rt2x00dev)->dev);
+       SET_IEEE80211_PERM_ADDR(rt2x00dev->hw,
+                               rt2x00_eeprom_addr(rt2x00dev,
+                                                  EEPROM_MAC_ADDR_0));
+
+       /*
+        * Convert tx_power array in eeprom.
+        */
+       txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_START);
+       for (i = 0; i < 14; i++)
+               txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+       /*
+        * Initialize hw_mode information.
+        */
+       spec->num_modes = 2;
+       spec->num_rates = 12;
+       spec->tx_power_a = NULL;
+       spec->tx_power_bg = txpower;
+       spec->tx_power_default = DEFAULT_TXPOWER;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF2522)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2522);
+               spec->channels = rf_vals_bg_2522;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF2523)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2523);
+               spec->channels = rf_vals_bg_2523;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF2524)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2524);
+               spec->channels = rf_vals_bg_2524;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF2525)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2525);
+               spec->channels = rf_vals_bg_2525;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF2525E)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2525e);
+               spec->channels = rf_vals_bg_2525e;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_5222);
+               spec->channels = rf_vals_5222;
+               spec->num_modes = 3;
+       }
+}
+
+static int rt2500usb_probe_hw(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       /*
+        * Allocate eeprom data.
+        */
+       retval = rt2500usb_validate_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt2500usb_init_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       /*
+        * Initialize hw specifications.
+        */
+       rt2500usb_probe_hw_mode(rt2x00dev);
+
+       /*
+        * USB devices require scheduled packet filter toggling
+        *This device requires the beacon ring
+        */
+       __set_bit(PACKET_FILTER_SCHEDULED, &rt2x00dev->flags);
+       __set_bit(REQUIRE_BEACON_RING, &rt2x00dev->flags);
+
+       /*
+        * Set the rssi offset.
+        */
+       rt2x00dev->rssi_offset = DEFAULT_RSSI_OFFSET;
+
+       return 0;
+}
+
+/*
+ * IEEE80211 stack callback functions.
+ */
+static int rt2500usb_beacon_update(struct ieee80211_hw *hw,
+                                  struct sk_buff *skb,
+                                  struct ieee80211_tx_control *control)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       struct usb_device *usb_dev =
+           interface_to_usbdev(rt2x00dev_usb(rt2x00dev));
+       struct data_ring *ring =
+           rt2x00lib_get_ring(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+       struct data_entry *beacon;
+       struct data_entry *guardian;
+       int length;
+
+       /*
+        * Just in case the ieee80211 doesn't set this,
+        * but we need this queue set for the descriptor
+        * initialization.
+        */
+       control->queue = IEEE80211_TX_QUEUE_BEACON;
+
+       /*
+        * Obtain 2 entries, one for the guardian byte,
+        * the second for the actual beacon.
+        */
+       guardian = rt2x00_get_data_entry(ring);
+       rt2x00_ring_index_inc(ring);
+       beacon = rt2x00_get_data_entry(ring);
+
+       /*
+        * First we create the beacon.
+        */
+       skb_push(skb, ring->desc_size);
+       rt2x00lib_write_tx_desc(rt2x00dev, (struct data_desc *)skb->data,
+                               (struct ieee80211_hdr *)(skb->data +
+                                                        ring->desc_size),
+                               skb->len - ring->desc_size, control);
+
+       /*
+        * Length passed to usb_fill_urb cannot be an odd number,
+        * so add 1 byte to make it even.
+        */
+       length = skb->len;
+       if (length % 2)
+               length++;
+
+       usb_fill_bulk_urb(beacon->priv, usb_dev,
+                         usb_sndbulkpipe(usb_dev, 1),
+                         skb->data, length, rt2500usb_beacondone, beacon);
+
+       beacon->skb = skb;
+
+       /*
+        * Second we need to create the guardian byte.
+        * We only need a single byte, so lets recycle
+        * the 'flags' field we are not using for beacons.
+        */
+       guardian->flags = 0;
+       usb_fill_bulk_urb(guardian->priv, usb_dev,
+                         usb_sndbulkpipe(usb_dev, 1),
+                         &guardian->flags, 1, rt2500usb_beacondone, guardian);
+
+       /*
+        * Send out the guardian byte.
+        */
+       usb_submit_urb(guardian->priv, GFP_ATOMIC);
+
+       /*
+        * Enable beacon generation.
+        */
+       rt2500usb_kick_tx_queue(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       return 0;
+}
+
+static const struct ieee80211_ops rt2500usb_mac80211_ops = {
+       .tx                     = rt2x00mac_tx,
+       .add_interface          = rt2x00mac_add_interface,
+       .remove_interface       = rt2x00mac_remove_interface,
+       .config                 = rt2x00mac_config,
+       .config_interface       = rt2x00mac_config_interface,
+       .set_multicast_list     = rt2x00mac_set_multicast_list,
+       .get_stats              = rt2x00mac_get_stats,
+       .conf_tx                = rt2x00mac_conf_tx,
+       .get_tx_stats           = rt2x00mac_get_tx_stats,
+       .beacon_update          = rt2500usb_beacon_update,
+};
+
+static const struct rt2x00lib_ops rt2500usb_rt2x00_ops = {
+       .probe_hw               = rt2500usb_probe_hw,
+       .initialize             = rt2x00usb_initialize,
+       .uninitialize           = rt2x00usb_uninitialize,
+       .set_device_state       = rt2500usb_set_device_state,
+       .link_stats             = rt2500usb_link_stats,
+       .reset_tuner            = rt2500usb_reset_tuner,
+       .link_tuner             = rt2500usb_link_tuner,
+       .write_tx_desc          = rt2500usb_write_tx_desc,
+       .write_tx_data          = rt2x00usb_write_tx_data,
+       .kick_tx_queue          = rt2500usb_kick_tx_queue,
+       .fill_rxdone            = rt2500usb_fill_rxdone,
+       .config_mac_addr        = rt2500usb_config_mac_addr,
+       .config_bssid           = rt2500usb_config_bssid,
+       .config_packet_filter   = rt2500usb_config_packet_filter,
+       .config_type            = rt2500usb_config_type,
+       .config                 = rt2500usb_config,
+};
+
+static const struct rt2x00_ops rt2500usb_ops = {
+       .name           = DRV_NAME,
+       .rxd_size       = RXD_DESC_SIZE,
+       .txd_size       = TXD_DESC_SIZE,
+       .eeprom_size    = EEPROM_SIZE,
+       .rf_size        = RF_SIZE,
+       .lib            = &rt2500usb_rt2x00_ops,
+       .hw             = &rt2500usb_mac80211_ops,
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       .debugfs        = &rt2500usb_rt2x00debug,
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * rt2500usb module information.
+ */
+static struct usb_device_id rt2500usb_device_table[] = {
+       /* ASUS */
+       { USB_DEVICE(0x0b05, 0x1706), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0b05, 0x1707), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Belkin */
+       { USB_DEVICE(0x050d, 0x7050), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x050d, 0x7051), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x050d, 0x705a), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Cisco Systems */
+       { USB_DEVICE(0x13b1, 0x000d), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x13b1, 0x0011), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x13b1, 0x001a), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Conceptronic */
+       { USB_DEVICE(0x14b2, 0x3c02), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* D-LINK */
+       { USB_DEVICE(0x2001, 0x3c00), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Gigabyte */
+       { USB_DEVICE(0x1044, 0x8001), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x1044, 0x8007), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Hercules */
+       { USB_DEVICE(0x06f8, 0xe000), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Melco */
+       { USB_DEVICE(0x0411, 0x0066), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0411, 0x0067), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0411, 0x008b), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0411, 0x0097), USB_DEVICE_DATA(&rt2500usb_ops) },
+
+       /* MSI */
+       { USB_DEVICE(0x0db0, 0x6861), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0db0, 0x6865), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0db0, 0x6869), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Ralink */
+       { USB_DEVICE(0x148f, 0x1706), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x148f, 0x2570), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x148f, 0x2573), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x148f, 0x9020), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Siemens */
+       { USB_DEVICE(0x0681, 0x3c06), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* SMC */
+       { USB_DEVICE(0x0707, 0xee13), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Spairon */
+       { USB_DEVICE(0x114b, 0x0110), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Trust */
+       { USB_DEVICE(0x0eb0, 0x9020), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Zinwell */
+       { USB_DEVICE(0x5a57, 0x0260), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { 0, }
+};
+
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("Ralink RT2500 USB Wireless LAN driver.");
+MODULE_SUPPORTED_DEVICE("Ralink RT2570 USB chipset based cards");
+MODULE_DEVICE_TABLE(usb, rt2500usb_device_table);
+MODULE_LICENSE("GPL");
+
+static struct usb_driver rt2500usb_driver = {
+       .name           = DRV_NAME,
+       .id_table       = rt2500usb_device_table,
+       .probe          = rt2x00usb_probe,
+       .disconnect     = rt2x00usb_disconnect,
+       .suspend        = rt2x00usb_suspend,
+       .resume         = rt2x00usb_resume,
+};
+
+static int __init rt2500usb_init(void)
+{
+       return usb_register(&rt2500usb_driver);
+}
+
+static void __exit rt2500usb_exit(void)
+{
+       usb_deregister(&rt2500usb_driver);
+}
+
+module_init(rt2500usb_init);
+module_exit(rt2500usb_exit);
diff --git a/drivers/net/wireless/rt2x00/rt2500usb.h b/drivers/net/wireless/rt2x00/rt2500usb.h
new file mode 100644 (file)
index 0000000..b18d56e
--- /dev/null
@@ -0,0 +1,798 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2500usb
+       Abstract: Data structures and registers for the rt2500usb module.
+       Supported chipsets: RT2570.
+ */
+
+#ifndef RT2500USB_H
+#define RT2500USB_H
+
+/*
+ * RF chip defines.
+ */
+#define RF2522                         0x0000
+#define RF2523                         0x0001
+#define RF2524                         0x0002
+#define RF2525                         0x0003
+#define RF2525E                                0x0005
+#define RF5222                         0x0010
+
+/*
+ * RT2570 version
+ */
+#define RT2570_VERSION_B               2
+#define RT2570_VERSION_C               3
+#define RT2570_VERSION_D               4
+
+/*
+ * Signal information.
+ * Defaul offset is required for RSSI <-> dBm conversion.
+ */
+#define MAX_SIGNAL                     100
+#define MAX_RX_SSI                     -1
+#define DEFAULT_RSSI_OFFSET            120
+
+/*
+ * Register layout information.
+ */
+#define CSR_REG_BASE                   0x0400
+#define CSR_REG_SIZE                   0x0100
+#define EEPROM_BASE                    0x0000
+#define EEPROM_SIZE                    0x006a
+#define BBP_SIZE                       0x0060
+#define RF_SIZE                                0x0014
+
+/*
+ * Control/Status Registers(CSR).
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * MAC_CSR0: ASIC revision number.
+ */
+#define MAC_CSR0                       0x0400
+
+/*
+ * MAC_CSR1: System control.
+ * SOFT_RESET: Software reset, 1: reset, 0: normal.
+ * BBP_RESET: Hardware reset, 1: reset, 0, release.
+ * HOST_READY: Host ready after initialization.
+ */
+#define MAC_CSR1                       0x0402
+#define MAC_CSR1_SOFT_RESET            FIELD16(0x00000001)
+#define MAC_CSR1_BBP_RESET             FIELD16(0x00000002)
+#define MAC_CSR1_HOST_READY            FIELD16(0x00000004)
+
+/*
+ * MAC_CSR2: STA MAC register 0.
+ */
+#define MAC_CSR2                       0x0404
+#define MAC_CSR2_BYTE0                 FIELD16(0x00ff)
+#define MAC_CSR2_BYTE1                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR3: STA MAC register 1.
+ */
+#define MAC_CSR3                       0x0406
+#define MAC_CSR3_BYTE2                 FIELD16(0x00ff)
+#define MAC_CSR3_BYTE3                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR4: STA MAC register 2.
+ */
+#define MAC_CSR4                       0X0408
+#define MAC_CSR4_BYTE4                 FIELD16(0x00ff)
+#define MAC_CSR4_BYTE5                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR5: BSSID register 0.
+ */
+#define MAC_CSR5                       0x040a
+#define MAC_CSR5_BYTE0                 FIELD16(0x00ff)
+#define MAC_CSR5_BYTE1                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR6: BSSID register 1.
+ */
+#define MAC_CSR6                       0x040c
+#define MAC_CSR6_BYTE2                 FIELD16(0x00ff)
+#define MAC_CSR6_BYTE3                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR7: BSSID register 2.
+ */
+#define MAC_CSR7                       0x040e
+#define MAC_CSR7_BYTE4                 FIELD16(0x00ff)
+#define MAC_CSR7_BYTE5                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR8: Max frame length.
+ */
+#define MAC_CSR8                       0x0410
+#define MAC_CSR8_MAX_FRAME_UNIT                FIELD16(0x0fff)
+
+/*
+ * Misc MAC_CSR registers.
+ * MAC_CSR9: Timer control.
+ * MAC_CSR10: Slot time.
+ * MAC_CSR11: IFS.
+ * MAC_CSR12: EIFS.
+ * MAC_CSR13: Power mode0.
+ * MAC_CSR14: Power mode1.
+ * MAC_CSR15: Power saving transition0
+ * MAC_CSR16: Power saving transition1
+ */
+#define MAC_CSR9                       0x0412
+#define MAC_CSR10                      0x0414
+#define MAC_CSR11                      0x0416
+#define MAC_CSR12                      0x0418
+#define MAC_CSR13                      0x041a
+#define MAC_CSR14                      0x041c
+#define MAC_CSR15                      0x041e
+#define MAC_CSR16                      0x0420
+
+/*
+ * MAC_CSR17: Manual power control / status register.
+ * Allowed state: 0 deep_sleep, 1: sleep, 2: standby, 3: awake.
+ * SET_STATE: Set state. Write 1 to trigger, self cleared.
+ * BBP_DESIRE_STATE: BBP desired state.
+ * RF_DESIRE_STATE: RF desired state.
+ * BBP_CURRENT_STATE: BBP current state.
+ * RF_CURRENT_STATE: RF current state.
+ * PUT_TO_SLEEP: Put to sleep. Write 1 to trigger, self cleared.
+ */
+#define MAC_CSR17                      0x0422
+#define MAC_CSR17_SET_STATE            FIELD16(0x0001)
+#define MAC_CSR17_BBP_DESIRE_STATE     FIELD16(0x0006)
+#define MAC_CSR17_RF_DESIRE_STATE      FIELD16(0x0018)
+#define MAC_CSR17_BBP_CURR_STATE       FIELD16(0x0060)
+#define MAC_CSR17_RF_CURR_STATE                FIELD16(0x0180)
+#define MAC_CSR17_PUT_TO_SLEEP         FIELD16(0x0200)
+
+/*
+ * MAC_CSR18: Wakeup timer register.
+ * DELAY_AFTER_BEACON: Delay after Tbcn expired in units of 1/16 TU.
+ * BEACONS_BEFORE_WAKEUP: Number of beacon before wakeup.
+ * AUTO_WAKE: Enable auto wakeup / sleep mechanism.
+ */
+#define MAC_CSR18                      0x0424
+#define MAC_CSR18_DELAY_AFTER_BEACON   FIELD16(0x00ff)
+#define MAC_CSR18_BEACONS_BEFORE_WAKEUP        FIELD16(0x7f00)
+#define MAC_CSR18_AUTO_WAKE            FIELD16(0x8000)
+
+/*
+ * MAC_CSR19: GPIO control register.
+ */
+#define MAC_CSR19                      0x0426
+
+/*
+ * MAC_CSR20: LED control register.
+ * ACTIVITY: 0: idle, 1: active.
+ * LINK: 0: linkoff, 1: linkup.
+ * ACTIVITY_POLARITY: 0: active low, 1: active high.
+ */
+#define MAC_CSR20                      0x0428
+#define MAC_CSR20_ACTIVITY             FIELD16(0x0001)
+#define MAC_CSR20_LINK                 FIELD16(0x0002)
+#define MAC_CSR20_ACTIVITY_POLARITY    FIELD16(0x0004)
+
+/*
+ * MAC_CSR21: LED control register.
+ * ON_PERIOD: On period, default 70ms.
+ * OFF_PERIOD: Off period, default 30ms.
+ */
+#define MAC_CSR21                      0x042a
+#define MAC_CSR21_ON_PERIOD            FIELD16(0x00ff)
+#define MAC_CSR21_OFF_PERIOD           FIELD16(0xff00)
+
+/*
+ * Collision window control register.
+ */
+#define MAC_CSR22                      0x042c
+
+/*
+ * Transmit related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * TXRX_CSR0: Security control register.
+ */
+#define TXRX_CSR0                      0x0440
+#define TXRX_CSR0_ALGORITHM            FIELD16(0x0007)
+#define TXRX_CSR0_IV_OFFSET            FIELD16(0x01f8)
+#define TXRX_CSR0_KEY_ID               FIELD16(0x1e00)
+
+/*
+ * TXRX_CSR1: TX configuration.
+ * ACK_TIMEOUT: ACK Timeout in unit of 1-us.
+ * TSF_OFFSET: TSF offset in MAC header.
+ * AUTO_SEQUENCE: Let ASIC control frame sequence number.
+ */
+#define TXRX_CSR1                      0x0442
+#define TXRX_CSR1_ACK_TIMEOUT          FIELD16(0x00ff)
+#define TXRX_CSR1_TSF_OFFSET           FIELD16(0x7f00)
+#define TXRX_CSR1_AUTO_SEQUENCE                FIELD16(0x8000)
+
+/*
+ * TXRX_CSR2: RX control.
+ * DISABLE_RX: Disable rx engine.
+ * DROP_CRC: Drop crc error.
+ * DROP_PHYSICAL: Drop physical error.
+ * DROP_CONTROL: Drop control frame.
+ * DROP_NOT_TO_ME: Drop not to me unicast frame.
+ * DROP_TODS: Drop frame tods bit is true.
+ * DROP_VERSION_ERROR: Drop version error frame.
+ * DROP_MCAST: Drop multicast frames.
+ * DROP_BCAST: Drop broadcast frames.
+ */
+#define TXRX_CSR2                      0x0444
+#define        TXRX_CSR2_DISABLE_RX            FIELD16(0x0001)
+#define TXRX_CSR2_DROP_CRC             FIELD16(0x0002)
+#define TXRX_CSR2_DROP_PHYSICAL                FIELD16(0x0004)
+#define TXRX_CSR2_DROP_CONTROL         FIELD16(0x0008)
+#define TXRX_CSR2_DROP_NOT_TO_ME       FIELD16(0x0010)
+#define TXRX_CSR2_DROP_TODS            FIELD16(0x0020)
+#define TXRX_CSR2_DROP_VERSION_ERROR   FIELD16(0x0040)
+#define TXRX_CSR2_DROP_MULTICAST       FIELD16(0x0200)
+#define TXRX_CSR2_DROP_BROADCAST       FIELD16(0x0400)
+
+/*
+ * RX BBP ID registers
+ * TXRX_CSR3: CCK RX BBP ID.
+ * TXRX_CSR4: OFDM RX BBP ID.
+ */
+#define TXRX_CSR3                      0x0446
+#define TXRX_CSR4                      0x0448
+
+/*
+ * TXRX_CSR5: CCK TX BBP ID0.
+ */
+#define TXRX_CSR5                      0x044a
+#define TXRX_CSR5_BBP_ID0              FIELD16(0x007f)
+#define TXRX_CSR5_BBP_ID0_VALID                FIELD16(0x0080)
+#define TXRX_CSR5_BBP_ID1              FIELD16(0x7f00)
+#define TXRX_CSR5_BBP_ID1_VALID                FIELD16(0x8000)
+
+/*
+ * TXRX_CSR6: CCK TX BBP ID1.
+ */
+#define TXRX_CSR6                      0x044c
+#define TXRX_CSR6_BBP_ID0              FIELD16(0x007f)
+#define TXRX_CSR6_BBP_ID0_VALID                FIELD16(0x0080)
+#define TXRX_CSR6_BBP_ID1              FIELD16(0x7f00)
+#define TXRX_CSR6_BBP_ID1_VALID                FIELD16(0x8000)
+
+/*
+ * TXRX_CSR7: OFDM TX BBP ID0.
+ */
+#define TXRX_CSR7                      0x044e
+#define TXRX_CSR7_BBP_ID0              FIELD16(0x007f)
+#define TXRX_CSR7_BBP_ID0_VALID                FIELD16(0x0080)
+#define TXRX_CSR7_BBP_ID1              FIELD16(0x7f00)
+#define TXRX_CSR7_BBP_ID1_VALID                FIELD16(0x8000)
+
+/*
+ * TXRX_CSR5: OFDM TX BBP ID1.
+ */
+#define TXRX_CSR8                      0x0450
+#define TXRX_CSR8_BBP_ID0              FIELD16(0x007f)
+#define TXRX_CSR8_BBP_ID0_VALID                FIELD16(0x0080)
+#define TXRX_CSR8_BBP_ID1              FIELD16(0x7f00)
+#define TXRX_CSR8_BBP_ID1_VALID                FIELD16(0x8000)
+
+/*
+ * TXRX_CSR9: TX ACK time-out.
+ */
+#define TXRX_CSR9                      0x0452
+
+/*
+ * TXRX_CSR10: Auto responder control.
+ */
+#define TXRX_CSR10                     0x0454
+#define TXRX_CSR10_AUTORESPOND_PREAMBLE FIELD16(0x0004)
+
+/*
+ * TXRX_CSR11: Auto responder basic rate.
+ */
+#define TXRX_CSR11                     0x0456
+
+/*
+ * ACK/CTS time registers.
+ */
+#define TXRX_CSR12                     0x0458
+#define TXRX_CSR13                     0x045a
+#define TXRX_CSR14                     0x045c
+#define TXRX_CSR15                     0x045e
+#define TXRX_CSR16                     0x0460
+#define TXRX_CSR17                     0x0462
+
+/*
+ * TXRX_CSR18: Synchronization control register.
+ */
+#define TXRX_CSR18                     0x0464
+#define TXRX_CSR18_OFFSET              FIELD16(0x000f)
+#define TXRX_CSR18_INTERVAL            FIELD16(0xfff0)
+
+/*
+ * TXRX_CSR19: Synchronization control register.
+ * TSF_COUNT: Enable TSF auto counting.
+ * TSF_SYNC: Tsf sync, 0: disable, 1: infra, 2: ad-hoc/master mode.
+ * TBCN: Enable Tbcn with reload value.
+ * BEACON_GEN: Enable beacon generator.
+ */
+#define TXRX_CSR19                     0x0466
+#define TXRX_CSR19_TSF_COUNT           FIELD16(0x0001)
+#define TXRX_CSR19_TSF_SYNC            FIELD16(0x0006)
+#define TXRX_CSR19_TBCN                        FIELD16(0x0008)
+#define TXRX_CSR19_BEACON_GEN          FIELD16(0x0010)
+
+/*
+ * TXRX_CSR20: Tx BEACON offset time control register.
+ * OFFSET: In units of usec.
+ * BCN_EXPECT_WINDOW: Default: 2^CWmin
+ */
+#define TXRX_CSR20                     0x0468
+#define TXRX_CSR20_OFFSET              FIELD16(0x1fff)
+#define TXRX_CSR20_BCN_EXPECT_WINDOW   FIELD16(0xe000)
+
+/*
+ * TXRX_CSR21
+ */
+#define TXRX_CSR21                     0x046a
+
+/*
+ * Encryption related CSRs.
+ *
+ */
+
+/*
+ * SEC_CSR0-SEC_CSR7: Shared key 0, word 0-7
+ */
+#define SEC_CSR0                       0x0480
+#define SEC_CSR1                       0x0482
+#define SEC_CSR2                       0x0484
+#define SEC_CSR3                       0x0486
+#define SEC_CSR4                       0x0488
+#define SEC_CSR5                       0x048a
+#define SEC_CSR6                       0x048c
+#define SEC_CSR7                       0x048e
+
+/*
+ * SEC_CSR8-SEC_CSR15: Shared key 1, word 0-7
+ */
+#define SEC_CSR8                       0x0490
+#define SEC_CSR9                       0x0492
+#define SEC_CSR10                      0x0494
+#define SEC_CSR11                      0x0496
+#define SEC_CSR12                      0x0498
+#define SEC_CSR13                      0x049a
+#define SEC_CSR14                      0x049c
+#define SEC_CSR15                      0x049e
+
+/*
+ * SEC_CSR16-SEC_CSR23: Shared key 2, word 0-7
+ */
+#define SEC_CSR16                      0x04a0
+#define SEC_CSR17                      0x04a2
+#define SEC_CSR18                      0X04A4
+#define SEC_CSR19                      0x04a6
+#define SEC_CSR20                      0x04a8
+#define SEC_CSR21                      0x04aa
+#define SEC_CSR22                      0x04ac
+#define SEC_CSR23                      0x04ae
+
+/*
+ * SEC_CSR24-SEC_CSR31: Shared key 3, word 0-7
+ */
+#define SEC_CSR24                      0x04b0
+#define SEC_CSR25                      0x04b2
+#define SEC_CSR26                      0x04b4
+#define SEC_CSR27                      0x04b6
+#define SEC_CSR28                      0x04b8
+#define SEC_CSR29                      0x04ba
+#define SEC_CSR30                      0x04bc
+#define SEC_CSR31                      0x04be
+
+/*
+ * PHY control registers.
+ */
+
+/*
+ * PHY_CSR0: RF switching timing control.
+ */
+#define PHY_CSR0                       0x04c0
+
+/*
+ * PHY_CSR1: TX PA configuration.
+ */
+#define PHY_CSR1                       0x04c2
+
+/*
+ * MAC configuration registers.
+ * PHY_CSR2: TX MAC configuration.
+ * PHY_CSR3: RX MAC configuration.
+ */
+#define PHY_CSR2                       0x04c4
+#define PHY_CSR3                       0x04c6
+
+/*
+ * PHY_CSR4: Interface configuration.
+ */
+#define PHY_CSR4                       0x04c8
+#define PHY_CSR4_LOW_RF_LE             FIELD16(0x0001)
+
+/*
+ * BBP pre-TX registers.
+ * PHY_CSR5: BBP pre-TX CCK.
+ */
+#define PHY_CSR5                       0x04ca
+#define PHY_CSR5_CCK                   FIELD16(0x0003)
+#define PHY_CSR5_CCK_FLIP              FIELD16(0x0004)
+
+/*
+ * BBP pre-TX registers.
+ * PHY_CSR6: BBP pre-TX OFDM.
+ */
+#define PHY_CSR6                       0x04cc
+#define PHY_CSR6_OFDM                  FIELD16(0x0003)
+#define PHY_CSR6_OFDM_FLIP             FIELD16(0x0004)
+
+/*
+ * PHY_CSR7: BBP access register 0.
+ * BBP_DATA: BBP data.
+ * BBP_REG_ID: BBP register ID.
+ * BBP_READ_CONTROL: 0: write, 1: read.
+ */
+#define PHY_CSR7                       0x04ce
+#define PHY_CSR7_DATA                  FIELD16(0x00ff)
+#define PHY_CSR7_REG_ID                        FIELD16(0x7f00)
+#define PHY_CSR7_READ_CONTROL          FIELD16(0x8000)
+
+/*
+ * PHY_CSR8: BBP access register 1.
+ * BBP_BUSY: ASIC is busy execute BBP programming.
+ */
+#define PHY_CSR8                       0x04d0
+#define PHY_CSR8_BUSY                  FIELD16(0x0001)
+
+/*
+ * PHY_CSR9: RF access register.
+ * RF_VALUE: Register value + id to program into rf/if.
+ */
+#define PHY_CSR9                       0x04d2
+#define PHY_CSR9_RF_VALUE              FIELD16(0xffff)
+
+/*
+ * PHY_CSR10: RF access register.
+ * RF_VALUE: Register value + id to program into rf/if.
+ * RF_NUMBER_OF_BITS: Number of bits used in value (i:20, rfmd:22).
+ * RF_IF_SELECT: Chip to program: 0: rf, 1: if.
+ * RF_PLL_LD: Rf pll_ld status.
+ * RF_BUSY: 1: asic is busy execute rf programming.
+ */
+#define PHY_CSR10                      0x04d4
+#define PHY_CSR10_RF_VALUE             FIELD16(0x00ff)
+#define PHY_CSR10_RF_NUMBER_OF_BITS    FIELD16(0x1f00)
+#define PHY_CSR10_RF_IF_SELECT         FIELD16(0x2000)
+#define PHY_CSR10_RF_PLL_LD            FIELD16(0x4000)
+#define PHY_CSR10_RF_BUSY              FIELD16(0x8000)
+
+/*
+ * STA_CSR0: FCS error count.
+ * FCS_ERROR: FCS error count, cleared when read.
+ */
+#define STA_CSR0                       0x04e0
+#define STA_CSR0_FCS_ERROR             FIELD16(0xffff)
+
+/*
+ * STA_CSR1: PLCP error count.
+ */
+#define STA_CSR1                       0x04e2
+
+/*
+ * STA_CSR2: LONG error count.
+ */
+#define STA_CSR2                       0x04e4
+
+/*
+ * STA_CSR3: CCA false alarm.
+ * FALSE_CCA_ERROR: False CCA error count, cleared when read.
+ */
+#define STA_CSR3                       0x04e6
+#define STA_CSR3_FALSE_CCA_ERROR       FIELD16(0xffff)
+
+/*
+ * STA_CSR4: RX FIFO overflow.
+ */
+#define STA_CSR4                       0x04e8
+
+/*
+ * STA_CSR5: Beacon sent counter.
+ */
+#define STA_CSR5                       0x04ea
+
+/*
+ *  Statistics registers
+ */
+#define STA_CSR6                       0x04ec
+#define STA_CSR7                       0x04ee
+#define STA_CSR8                       0x04f0
+#define STA_CSR9                       0x04f2
+#define STA_CSR10                      0x04f4
+
+/*
+ * BBP registers.
+ * The wordsize of the BBP is 8 bits.
+ */
+
+/*
+ * R2: TX antenna control
+ */
+#define BBP_R2_TX_ANTENNA              FIELD8(0x03)
+#define BBP_R2_TX_IQ_FLIP              FIELD8(0x04)
+
+/*
+ * R14: RX antenna control
+ */
+#define BBP_R14_RX_ANTENNA             FIELD8(0x03)
+#define BBP_R14_RX_IQ_FLIP             FIELD8(0x04)
+
+/*
+ * RF registers.
+ */
+
+/*
+ * RF 1
+ */
+#define RF1_TUNER                      FIELD32(0x00020000)
+
+/*
+ * RF 3
+ */
+#define RF3_TUNER                      FIELD32(0x00000100)
+#define RF3_TXPOWER                    FIELD32(0x00003e00)
+
+/*
+ * EEPROM contents.
+ */
+
+/*
+ * HW MAC address.
+ */
+#define EEPROM_MAC_ADDR_0              0x0002
+#define EEPROM_MAC_ADDR_BYTE0          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE1          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR1               0x0003
+#define EEPROM_MAC_ADDR_BYTE2          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE3          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR_2              0x0004
+#define EEPROM_MAC_ADDR_BYTE4          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE5          FIELD16(0xff00)
+
+/*
+ * EEPROM antenna.
+ * ANTENNA_NUM: Number of antenna's.
+ * TX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * LED_MODE: 0: default, 1: TX/RX activity, 2: Single (ignore link), 3: rsvd.
+ * DYN_TXAGC: Dynamic TX AGC control.
+ * HARDWARE_RADIO: 1: Hardware controlled radio. Read GPIO0.
+ * RF_TYPE: Rf_type of this adapter.
+ */
+#define EEPROM_ANTENNA                 0x000b
+#define EEPROM_ANTENNA_NUM             FIELD16(0x0003)
+#define EEPROM_ANTENNA_TX_DEFAULT      FIELD16(0x000c)
+#define EEPROM_ANTENNA_RX_DEFAULT      FIELD16(0x0030)
+#define EEPROM_ANTENNA_LED_MODE                FIELD16(0x01c0)
+#define EEPROM_ANTENNA_DYN_TXAGC       FIELD16(0x0200)
+#define EEPROM_ANTENNA_HARDWARE_RADIO  FIELD16(0x0400)
+#define EEPROM_ANTENNA_RF_TYPE         FIELD16(0xf800)
+
+/*
+ * EEPROM NIC config.
+ * CARDBUS_ACCEL: 0: enable, 1: disable.
+ * DYN_BBP_TUNE: 0: enable, 1: disable.
+ * CCK_TX_POWER: CCK TX power compensation.
+ */
+#define EEPROM_NIC                     0x000c
+#define EEPROM_NIC_CARDBUS_ACCEL       FIELD16(0x0001)
+#define EEPROM_NIC_DYN_BBP_TUNE                FIELD16(0x0002)
+#define EEPROM_NIC_CCK_TX_POWER                FIELD16(0x000c)
+
+/*
+ * EEPROM geography.
+ * GEO: Default geography setting for device.
+ */
+#define EEPROM_GEOGRAPHY               0x000d
+#define EEPROM_GEOGRAPHY_GEO           FIELD16(0x0f00)
+
+/*
+ * EEPROM BBP.
+ */
+#define EEPROM_BBP_START               0x000e
+#define EEPROM_BBP_SIZE                        16
+#define EEPROM_BBP_VALUE               FIELD16(0x00ff)
+#define EEPROM_BBP_REG_ID              FIELD16(0xff00)
+
+/*
+ * EEPROM TXPOWER
+ */
+#define EEPROM_TXPOWER_START           0x001e
+#define EEPROM_TXPOWER_SIZE            7
+#define EEPROM_TXPOWER_1               FIELD16(0x00ff)
+#define EEPROM_TXPOWER_2               FIELD16(0xff00)
+
+/*
+ * EEPROM Tuning threshold
+ */
+#define EEPROM_BBPTUNE                 0x0030
+#define EEPROM_BBPTUNE_THRESHOLD       FIELD16(0x00ff)
+
+/*
+ * EEPROM BBP R24 Tuning.
+ */
+#define EEPROM_BBPTUNE_R24             0x0031
+#define EEPROM_BBPTUNE_R24_LOW         FIELD16(0x00ff)
+#define EEPROM_BBPTUNE_R24_HIGH                FIELD16(0xff00)
+
+/*
+ * EEPROM BBP R25 Tuning.
+ */
+#define EEPROM_BBPTUNE_R25             0x0032
+#define EEPROM_BBPTUNE_R25_LOW         FIELD16(0x00ff)
+#define EEPROM_BBPTUNE_R25_HIGH                FIELD16(0xff00)
+
+/*
+ * EEPROM BBP R24 Tuning.
+ */
+#define EEPROM_BBPTUNE_R61             0x0033
+#define EEPROM_BBPTUNE_R61_LOW         FIELD16(0x00ff)
+#define EEPROM_BBPTUNE_R61_HIGH                FIELD16(0xff00)
+
+/*
+ * EEPROM BBP VGC Tuning.
+ */
+#define EEPROM_BBPTUNE_VGC             0x0034
+#define EEPROM_BBPTUNE_VGCUPPER                FIELD16(0x00ff)
+
+/*
+ * EEPROM BBP R17 Tuning.
+ */
+#define EEPROM_BBPTUNE_R17             0x0035
+#define EEPROM_BBPTUNE_R17_LOW         FIELD16(0x00ff)
+#define EEPROM_BBPTUNE_R17_HIGH                FIELD16(0xff00)
+
+/*
+ * RSSI <-> dBm offset calibration
+ */
+#define EEPROM_CALIBRATE_OFFSET                0x0036
+#define EEPROM_CALIBRATE_OFFSET_RSSI   FIELD16(0x00ff)
+
+/*
+ * DMA descriptor defines.
+ */
+#define TXD_DESC_SIZE                  ( 5 * sizeof(struct data_desc) )
+#define RXD_DESC_SIZE                  ( 4 * sizeof(struct data_desc) )
+
+/*
+ * TX descriptor format for TX, PRIO, ATIM and Beacon Ring.
+ */
+
+/*
+ * Word0
+ */
+#define TXD_W0_PACKET_ID               FIELD32(0x0000000f)
+#define TXD_W0_RETRY_LIMIT             FIELD32(0x000000f0)
+#define TXD_W0_MORE_FRAG               FIELD32(0x00000100)
+#define TXD_W0_ACK                     FIELD32(0x00000200)
+#define TXD_W0_TIMESTAMP               FIELD32(0x00000400)
+#define TXD_W0_OFDM                    FIELD32(0x00000800)
+#define TXD_W0_NEW_SEQ                 FIELD32(0x00001000)
+#define TXD_W0_IFS                     FIELD32(0x00006000)
+#define TXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define TXD_W0_CIPHER                  FIELD32(0x20000000)
+#define TXD_W0_KEY_ID                  FIELD32(0xc0000000)
+
+/*
+ * Word1
+ */
+#define TXD_W1_IV_OFFSET               FIELD32(0x0000003f)
+#define TXD_W1_AIFS                    FIELD32(0x000000c0)
+#define TXD_W1_CWMIN                   FIELD32(0x00000f00)
+#define TXD_W1_CWMAX                   FIELD32(0x0000f000)
+
+/*
+ * Word2: PLCP information
+ */
+#define TXD_W2_PLCP_SIGNAL             FIELD32(0x000000ff)
+#define TXD_W2_PLCP_SERVICE            FIELD32(0x0000ff00)
+#define TXD_W2_PLCP_LENGTH_LOW         FIELD32(0x00ff0000)
+#define TXD_W2_PLCP_LENGTH_HIGH                FIELD32(0xff000000)
+
+/*
+ * Word3
+ */
+#define TXD_W3_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word4
+ */
+#define TXD_W4_EIV                     FIELD32(0xffffffff)
+
+/*
+ * RX descriptor format for RX Ring.
+ */
+
+/*
+ * Word0
+ */
+#define RXD_W0_UNICAST_TO_ME           FIELD32(0x00000002)
+#define RXD_W0_MULTICAST               FIELD32(0x00000004)
+#define RXD_W0_BROADCAST               FIELD32(0x00000008)
+#define RXD_W0_MY_BSS                  FIELD32(0x00000010)
+#define RXD_W0_CRC_ERROR               FIELD32(0x00000020)
+#define RXD_W0_OFDM                    FIELD32(0x00000040)
+#define RXD_W0_PHYSICAL_ERROR          FIELD32(0x00000080)
+#define RXD_W0_CIPHER                  FIELD32(0x00000100)
+#define RXD_W0_CIPHER_ERROR            FIELD32(0x00000200)
+#define RXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+
+/*
+ * Word1
+ */
+#define RXD_W1_RSSI                    FIELD32(0x000000ff)
+#define RXD_W1_SIGNAL                  FIELD32(0x0000ff00)
+
+/*
+ * Word2
+ */
+#define RXD_W2_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word3
+ */
+#define RXD_W3_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Macro's for converting txpower from EEPROM to dscape value
+ * and from dscape value to register value.
+ */
+#define MIN_TXPOWER    0
+#define MAX_TXPOWER    31
+#define DEFAULT_TXPOWER        24
+
+#define TXPOWER_FROM_DEV(__txpower)            \
+({                                             \
+       ((__txpower) > MAX_TXPOWER) ?           \
+               DEFAULT_TXPOWER : (__txpower);  \
+})
+
+#define TXPOWER_TO_DEV(__txpower)                      \
+({                                                     \
+       ((__txpower) <= MIN_TXPOWER) ? MIN_TXPOWER :    \
+       (((__txpower) >= MAX_TXPOWER) ? MAX_TXPOWER :   \
+       (__txpower));                                   \
+})
+
+#endif /* RT2500USB_H */
diff --git a/drivers/net/wireless/rt2x00/rt2x00.h b/drivers/net/wireless/rt2x00/rt2x00.h
new file mode 100644 (file)
index 0000000..80b079d
--- /dev/null
@@ -0,0 +1,807 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00
+       Abstract: rt2x00 global information.
+ */
+
+#ifndef RT2X00_H
+#define RT2X00_H
+
+#include <linux/bitops.h>
+#include <linux/prefetch.h>
+#include <linux/skbuff.h>
+#include <linux/workqueue.h>
+#include <linux/firmware.h>
+
+#include <net/mac80211.h>
+
+#include "rt2x00debug.h"
+#include "rt2x00reg.h"
+#include "rt2x00ring.h"
+
+/*
+ * Module information.
+ * DRV_NAME should be set within the individual module source files.
+ */
+#define DRV_VERSION    "2.0.8"
+#define DRV_PROJECT    "http://rt2x00.serialmonkey.com"
+
+/*
+ * Debug definitions.
+ * Debug output has to be enabled during compile time.
+ */
+#define DEBUG_PRINTK_MSG(__dev, __kernlvl, __lvl, __msg, __args...)    \
+       printk(__kernlvl "%s -> %s: %s - " __msg,                       \
+              wiphy_name((__dev)->hw->wiphy), __FUNCTION__, __lvl, ##__args)
+
+#define DEBUG_PRINTK_PROBE(__kernlvl, __lvl, __msg, __args...) \
+       printk(__kernlvl "%s -> %s: %s - " __msg,               \
+              DRV_NAME, __FUNCTION__, __lvl, ##__args)
+
+#ifdef CONFIG_RT2X00_DEBUG
+#define DEBUG_PRINTK(__dev, __kernlvl, __lvl, __msg, __args...)        \
+       DEBUG_PRINTK_MSG(__dev, __kernlvl, __lvl, __msg, ##__args);
+#else
+#define DEBUG_PRINTK(__dev, __kernlvl, __lvl, __msg, __args...)        \
+       do { } while (0)
+#endif /* CONFIG_RT2X00_DEBUG */
+
+/*
+ * Various debug levels.
+ * The debug levels PANIC and ERROR both indicate serious problems,
+ * for this reason they should never be ignored.
+ * The special ERROR_PROBE message is for messages that are generated
+ * when the rt2x00_dev is not yet initialized.
+ */
+#define PANIC(__dev, __msg, __args...) \
+       DEBUG_PRINTK_MSG(__dev, KERN_CRIT, "Panic", __msg, ##__args)
+#define ERROR(__dev, __msg, __args...) \
+       DEBUG_PRINTK_MSG(__dev, KERN_ERR, "Error", __msg, ##__args)
+#define ERROR_PROBE(__msg, __args...) \
+       DEBUG_PRINTK_PROBE(KERN_ERR, "Error", __msg, ##__args)
+#define WARNING(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_WARNING, "Warning", __msg, ##__args)
+#define NOTICE(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_NOTICE, "Notice", __msg, ##__args)
+#define INFO(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_INFO, "Info", __msg, ##__args)
+#define DEBUG(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_DEBUG, "Debug", __msg, ##__args)
+#define EEPROM(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_DEBUG, "EEPROM recovery", __msg, ##__args)
+
+/*
+ * Ring sizes.
+ * Ralink PCI devices demand the Frame size to be a multiple of 128 bytes.
+ * DATA_FRAME_SIZE is used for TX, RX, ATIM and PRIO rings.
+ * MGMT_FRAME_SIZE is used for the BEACON ring.
+ */
+#define DATA_FRAME_SIZE        2432
+#define MGMT_FRAME_SIZE        256
+
+/*
+ * Number of entries in a packet ring.
+ * PCI devices only need 1 Beacon entry,
+ * but USB devices require a second because they
+ * have to send a Guardian byte first.
+ */
+#define RX_ENTRIES     12
+#define TX_ENTRIES     12
+#define ATIM_ENTRIES   1
+#define BEACON_ENTRIES 2
+
+/*
+ * Standard timing and size defines.
+ * These values should follow the ieee80211 specifications.
+ */
+#define ACK_SIZE               14
+#define IEEE80211_HEADER       24
+#define PLCP                   48
+#define BEACON                 100
+#define PREAMBLE               144
+#define SHORT_PREAMBLE         72
+#define SLOT_TIME              20
+#define SHORT_SLOT_TIME                9
+#define SIFS                   10
+#define PIFS                   ( SIFS + SLOT_TIME )
+#define SHORT_PIFS             ( SIFS + SHORT_SLOT_TIME )
+#define DIFS                   ( PIFS + SLOT_TIME )
+#define SHORT_DIFS             ( SHORT_PIFS + SHORT_SLOT_TIME )
+#define EIFS                   ( SIFS + (8 * (IEEE80211_HEADER + ACK_SIZE)) )
+
+/*
+ * IEEE802.11 header defines
+ */
+static inline int is_rts_frame(u16 fc)
+{
+       return !!(((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_CTL) &&
+                 ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_RTS));
+}
+
+static inline int is_cts_frame(u16 fc)
+{
+       return !!(((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_CTL) &&
+                 ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_CTS));
+}
+
+static inline int is_probe_resp(u16 fc)
+{
+       return !!(((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT) &&
+                 ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_PROBE_RESP));
+}
+
+/*
+ * Chipset identification
+ * The chipset on the device is composed of a RT and RF chip.
+ * The chipset combination is important for determining device capabilities.
+ */
+struct rt2x00_chip {
+       u16 rt;
+#define RT2460         0x0101
+#define RT2560         0x0201
+#define RT2570         0x1201
+#define RT2561         0x0301
+#define RT2561s                0x0302
+#define RT2661         0x0401
+#define RT2571         0x1300
+
+       u16 rf;
+       u32 rev;
+};
+
+/*
+ * RF register values that belong to a particular channel.
+ */
+struct rf_channel {
+       int channel;
+       u32 rf1;
+       u32 rf2;
+       u32 rf3;
+       u32 rf4;
+};
+
+/*
+ * To optimize the quality of the link we need to store
+ * the quality of received frames and periodically
+ * optimize the link.
+ */
+struct link {
+       /*
+        * Link tuner counter
+        * The number of times the link has been tuned
+        * since the radio has been switched on.
+        */
+       u32 count;
+
+       /*
+        * Statistics required for Link tuning.
+        * For the average RSSI value we use the "Walking average" approach.
+        * When adding RSSI to the average value the following calculation
+        * is needed:
+        *
+        *        avg_rssi = ((avg_rssi * 7) + rssi) / 8;
+        *
+        * The advantage of this approach is that we only need 1 variable
+        * to store the average in (No need for a count and a total).
+        * But more importantly, normal average values will over time
+        * move less and less towards newly added values this results
+        * that with link tuning, the device can have a very good RSSI
+        * for a few minutes but when the device is moved away from the AP
+        * the average will not decrease fast enough to compensate.
+        * The walking average compensates this and will move towards
+        * the new values correctly allowing a effective link tuning.
+        */
+       int avg_rssi;
+       int vgc_level;
+       int false_cca;
+
+       /*
+        * Statistics required for Signal quality calculation.
+        * For calculating the Signal quality we have to determine
+        * the total number of success and failed RX and TX frames.
+        * After that we also use the average RSSI value to help
+        * determining the signal quality.
+        * For the calculation we will use the following algorithm:
+        *
+        *         rssi_percentage = (avg_rssi * 100) / rssi_offset
+        *         rx_percentage = (rx_success * 100) / rx_total
+        *         tx_percentage = (tx_success * 100) / tx_total
+        *         avg_signal = ((WEIGHT_RSSI * avg_rssi) +
+        *                       (WEIGHT_TX * tx_percentage) +
+        *                       (WEIGHT_RX * rx_percentage)) / 100
+        *
+        * This value should then be checked to not be greated then 100.
+        */
+       int rx_percentage;
+       int rx_success;
+       int rx_failed;
+       int tx_percentage;
+       int tx_success;
+       int tx_failed;
+#define WEIGHT_RSSI    20
+#define WEIGHT_RX      40
+#define WEIGHT_TX      40
+
+       /*
+        * Work structure for scheduling periodic link tuning.
+        */
+       struct delayed_work work;
+};
+
+/*
+ * Clear all counters inside the link structure.
+ * This can be easiest achieved by memsetting everything
+ * except for the work structure at the end.
+ */
+static inline void rt2x00_clear_link(struct link *link)
+{
+       memset(link, 0x00, sizeof(*link) - sizeof(link->work));
+       link->rx_percentage = 50;
+       link->tx_percentage = 50;
+}
+
+/*
+ * Update the rssi using the walking average approach.
+ */
+static inline void rt2x00_update_link_rssi(struct link *link, int rssi)
+{
+       if (!link->avg_rssi)
+               link->avg_rssi = rssi;
+       else
+               link->avg_rssi = ((link->avg_rssi * 7) + rssi) / 8;
+}
+
+/*
+ * When the avg_rssi is unset or no frames  have been received),
+ * we need to return the default value which needs to be less
+ * than -80 so the device will select the maximum sensitivity.
+ */
+static inline int rt2x00_get_link_rssi(struct link *link)
+{
+       return (link->avg_rssi && link->rx_success) ? link->avg_rssi : -128;
+}
+
+/*
+ * Interface structure
+ * Configuration details about the current interface.
+ */
+struct interface {
+       /*
+        * Interface identification. The value is assigned
+        * to us by the 80211 stack, and is used to request
+        * new beacons.
+        */
+       int id;
+
+       /*
+        * Current working type (IEEE80211_IF_TYPE_*).
+        * This excludes the type IEEE80211_IF_TYPE_MNTR
+        * since that is counted seperately in the monitor_count
+        * field.
+        * When set to INVALID_INTERFACE, no interface is configured.
+        */
+       int type;
+#define INVALID_INTERFACE      IEEE80211_IF_TYPE_MGMT
+
+       /*
+        * MAC of the device.
+        */
+       u8 mac[ETH_ALEN];
+
+       /*
+        * BBSID of the AP to associate with.
+        */
+       u8 bssid[ETH_ALEN];
+
+       /*
+        * Store the packet filter mode for the current interface.
+        * monitor mode always disabled filtering. But in such
+        * cases we still need to store the value here in case
+        * the monitor mode interfaces are removed, while a
+        * non-monitor mode interface remains.
+        */
+       unsigned short filter;
+
+       /*
+        * Monitor mode count, the number of interfaces
+        * in monitor mode that that have been added.
+        */
+       unsigned short monitor_count;
+};
+
+static inline int is_interface_present(struct interface *intf)
+{
+       return !!intf->id;
+}
+
+static inline int is_monitor_present(struct interface *intf)
+{
+       return !!intf->monitor_count;
+}
+
+/*
+ * Details about the supported modes, rates and channels
+ * of a particular chipset. This is used by rt2x00lib
+ * to build the ieee80211_hw_mode array for mac80211.
+ */
+struct hw_mode_spec {
+       /*
+        * Number of modes, rates and channels.
+        */
+       int num_modes;
+       int num_rates;
+       int num_channels;
+
+       /*
+        * txpower values.
+        */
+       const u8 *tx_power_a;
+       const u8 *tx_power_bg;
+       u8 tx_power_default;
+
+       /*
+        * Device/chipset specific value.
+        */
+       const struct rf_channel *channels;
+};
+
+/*
+ * rt2x00lib callback functions.
+ */
+struct rt2x00lib_ops {
+       /*
+        * Interrupt handlers.
+        */
+       irq_handler_t irq_handler;
+
+       /*
+        * Device init handlers.
+        */
+       int (*probe_hw) (struct rt2x00_dev *rt2x00dev);
+       char *(*get_firmware_name) (struct rt2x00_dev *rt2x00dev);
+       int (*load_firmware) (struct rt2x00_dev *rt2x00dev, void *data,
+                             const size_t len);
+
+       /*
+        * Device initialization/deinitialization handlers.
+        */
+       int (*initialize) (struct rt2x00_dev *rt2x00dev);
+       void (*uninitialize) (struct rt2x00_dev *rt2x00dev);
+
+       /*
+        * Radio control handlers.
+        */
+       int (*set_device_state) (struct rt2x00_dev *rt2x00dev,
+                                enum dev_state state);
+       int (*rfkill_poll) (struct rt2x00_dev *rt2x00dev);
+       void (*link_stats) (struct rt2x00_dev *rt2x00dev);
+       void (*reset_tuner) (struct rt2x00_dev *rt2x00dev);
+       void (*link_tuner) (struct rt2x00_dev *rt2x00dev);
+
+       /*
+        * TX control handlers
+        */
+       void (*write_tx_desc) (struct rt2x00_dev *rt2x00dev,
+                              struct data_desc *txd,
+                              struct data_entry_desc *desc,
+                              struct ieee80211_hdr *ieee80211hdr,
+                              unsigned int length,
+                              struct ieee80211_tx_control *control);
+       int (*write_tx_data) (struct rt2x00_dev *rt2x00dev,
+                             struct data_ring *ring, struct sk_buff *skb,
+                             struct ieee80211_tx_control *control);
+       void (*kick_tx_queue) (struct rt2x00_dev *rt2x00dev,
+                              unsigned int queue);
+
+       /*
+        * RX control handlers
+        */
+       int (*fill_rxdone) (struct data_entry *entry,
+                           int *signal, int *rssi, int *ofdm, int *size);
+
+       /*
+        * Configuration handlers.
+        */
+       void (*config_mac_addr) (struct rt2x00_dev *rt2x00dev, u8 *mac);
+       void (*config_bssid) (struct rt2x00_dev *rt2x00dev, u8 *bssid);
+       void (*config_packet_filter) (struct rt2x00_dev *rt2x00dev,
+                                     const unsigned int filter);
+       void (*config_type) (struct rt2x00_dev *rt2x00dev, const int type);
+       void (*config) (struct rt2x00_dev *rt2x00dev, const unsigned int flags,
+                       struct ieee80211_conf *conf);
+#define CONFIG_UPDATE_PHYMODE          ( 1 << 1 )
+#define CONFIG_UPDATE_CHANNEL          ( 1 << 2 )
+#define CONFIG_UPDATE_TXPOWER          ( 1 << 3 )
+#define CONFIG_UPDATE_ANTENNA          ( 1 << 4 )
+#define CONFIG_UPDATE_SLOT_TIME        ( 1 << 5 )
+#define CONFIG_UPDATE_BEACON_INT       ( 1 << 6 )
+#define CONFIG_UPDATE_ALL              0xffff
+};
+
+/*
+ * rt2x00 driver callback operation structure.
+ */
+struct rt2x00_ops {
+       const char *name;
+       const unsigned int rxd_size;
+       const unsigned int txd_size;
+       const unsigned int eeprom_size;
+       const unsigned int rf_size;
+       const struct rt2x00lib_ops *lib;
+       const struct ieee80211_ops *hw;
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       const struct rt2x00debug *debugfs;
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * rt2x00 device structure.
+ */
+struct rt2x00_dev {
+       /*
+        * Device structure.
+        * The structure stored in here depends on the
+        * system bus (PCI or USB).
+        * When accessing this variable, the rt2x00dev_{pci,usb}
+        * macro's should be used for correct typecasting.
+        */
+       void *dev;
+#define rt2x00dev_pci(__dev)   ( (struct pci_dev*)(__dev)->dev )
+#define rt2x00dev_usb(__dev)   ( (struct usb_interface*)(__dev)->dev )
+
+       /*
+        * Callback functions.
+        */
+       const struct rt2x00_ops *ops;
+
+       /*
+        * IEEE80211 control structure.
+        */
+       struct ieee80211_hw *hw;
+       struct ieee80211_hw_mode *hwmodes;
+       unsigned int curr_hwmode;
+#define HWMODE_B       0
+#define HWMODE_G       1
+#define HWMODE_A       2
+
+       /*
+        * rfkill structure for RF state switching support.
+        * This will only be compiled in when required.
+        */
+#ifdef CONFIG_RT2X00_LIB_RFKILL
+       struct rfkill *rfkill;
+       struct input_polled_dev *poll_dev;
+#endif /* CONFIG_RT2X00_LIB_RFKILL */
+
+       /*
+        * If enabled, the debugfs interface structures
+        * required for deregistration of debugfs.
+        */
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       const struct rt2x00debug_intf *debugfs_intf;
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+       /*
+        * Device flags.
+        * In these flags the current status and some
+        * of the device capabilities are stored.
+        */
+       unsigned long flags;
+#define DEVICE_ENABLED_RADIO           1
+#define DEVICE_ENABLED_RADIO_HW                2
+#define DEVICE_INITIALIZED             3
+#define DEVICE_INITIALIZED_HW          4
+#define REQUIRE_FIRMWARE               5
+#define PACKET_FILTER_SCHEDULED                6
+#define PACKET_FILTER_PENDING          7
+#define INTERFACE_RESUME               8
+#define INTERFACE_ENABLED              9
+#define INTERFACE_ENABLED_MONITOR      10
+#define REQUIRE_BEACON_RING            11
+#define DEVICE_SUPPORT_HW_BUTTON       12
+#define CONFIG_FRAME_TYPE              13
+#define CONFIG_RF_SEQUENCE             14
+/* Hole: Add new Flag here */
+#define CONFIG_EXTERNAL_LNA_A          16
+#define CONFIG_EXTERNAL_LNA_BG         17
+#define CONFIG_DOUBLE_ANTENNA          18
+#define CONFIG_DISABLE_LINK_TUNING     19
+
+       /*
+        * Chipset identification.
+        */
+       struct rt2x00_chip chip;
+
+       /*
+        * hw capability specifications.
+        */
+       struct hw_mode_spec spec;
+
+       /*
+        * Register pointers
+        * csr_addr: Base register address. (PCI)
+        * csr_cache: CSR cache for usb_control_msg. (USB)
+        */
+       void __iomem *csr_addr;
+       void *csr_cache;
+
+       /*
+        * Interface configuration.
+        */
+       struct interface interface;
+
+       /*
+        * Link quality
+        */
+       struct link link;
+
+       /*
+        * EEPROM data.
+        */
+       __le16 *eeprom;
+
+       /*
+        * Active RF register values.
+        * These are stored here so we don't need
+        * to read the rf registers and can directly
+        * use this value instead.
+        * This field should be accessed by using
+        * rt2x00_rf_read() and rt2x00_rf_write().
+        */
+       u32 *rf;
+
+       /*
+        * Current TX power value.
+        */
+       u16 tx_power;
+
+       /*
+        * LED register (for rt61pci & rt73usb).
+        */
+       u16 led_reg;
+
+       /*
+        * Led mode (LED_MODE_*)
+        */
+       u8 led_mode;
+
+       /*
+        * Rssi <-> Dbm offset
+        */
+       u8 rssi_offset;
+
+       /*
+        * Frequency offset (for rt61pci & rt73usb).
+        */
+       u8 freq_offset;
+
+       /*
+        * Low level statistics which will have
+        * to be kept up to date while device is running.
+        */
+       struct ieee80211_low_level_stats low_level_stats;
+
+       /*
+        * RX configuration information.
+        */
+       struct ieee80211_rx_status rx_status;
+
+       /*
+        * Beacon scheduled work.
+        */
+       struct work_struct beacon_work;
+
+       /*
+        * Data ring arrays for RX, TX and Beacon.
+        * The Beacon array also contains the Atim ring
+        * if that is supported by the device.
+        */
+       int data_rings;
+       struct data_ring *rx;
+       struct data_ring *tx;
+       struct data_ring *bcn;
+
+       /*
+        * Firmware image.
+        */
+       const struct firmware *fw;
+};
+
+/*
+ * For-each loop for the ring array.
+ * All rings have been allocated as a single array,
+ * this means we can create a very simply loop macro
+ * that is capable of looping through all rings.
+ * ring_end(), txring_end() and ring_loop() are helper macro's which
+ * should not be used directly. Instead the following should be used:
+ * ring_for_each() - Loops through all rings (RX, TX, Beacon & Atim)
+ * txring_for_each() - Loops through TX data rings (TX only)
+ * txringall_for_each() - Loops through all TX rings (TX, Beacon & Atim)
+ */
+#define ring_end(__dev) \
+       &(__dev)->rx[(__dev)->data_rings]
+
+#define txring_end(__dev) \
+       &(__dev)->tx[(__dev)->hw->queues]
+
+#define ring_loop(__entry, __start, __end)                     \
+       for ((__entry) = (__start);                             \
+            prefetch(&(__entry)[1]), (__entry) != (__end);     \
+            (__entry) = &(__entry)[1])
+
+#define ring_for_each(__dev, __entry) \
+       ring_loop(__entry, (__dev)->rx, ring_end(__dev))
+
+#define txring_for_each(__dev, __entry) \
+       ring_loop(__entry, (__dev)->tx, txring_end(__dev))
+
+#define txringall_for_each(__dev, __entry) \
+       ring_loop(__entry, (__dev)->tx, ring_end(__dev))
+
+/*
+ * Generic RF access.
+ * The RF is being accessed by word index.
+ */
+static inline void rt2x00_rf_read(const struct rt2x00_dev *rt2x00dev,
+                                 const unsigned int word, u32 *data)
+{
+       *data = rt2x00dev->rf[word];
+}
+
+static inline void rt2x00_rf_write(const struct rt2x00_dev *rt2x00dev,
+                                  const unsigned int word, u32 data)
+{
+       rt2x00dev->rf[word] = data;
+}
+
+/*
+ *  Generic EEPROM access.
+ * The EEPROM is being accessed by word index.
+ */
+static inline void *rt2x00_eeprom_addr(const struct rt2x00_dev *rt2x00dev,
+                                      const unsigned int word)
+{
+       return (void *)&rt2x00dev->eeprom[word];
+}
+
+static inline void rt2x00_eeprom_read(const struct rt2x00_dev *rt2x00dev,
+                                     const unsigned int word, u16 *data)
+{
+       *data = le16_to_cpu(rt2x00dev->eeprom[word]);
+}
+
+static inline void rt2x00_eeprom_write(const struct rt2x00_dev *rt2x00dev,
+                                      const unsigned int word, u16 data)
+{
+       rt2x00dev->eeprom[word] = cpu_to_le16(data);
+}
+
+/*
+ * Chipset handlers
+ */
+static inline void rt2x00_set_chip(struct rt2x00_dev *rt2x00dev,
+                                  const u16 rt, const u16 rf, const u32 rev)
+{
+       INFO(rt2x00dev,
+            "Chipset detected - rt: %04x, rf: %04x, rev: %08x.\n",
+            rt, rf, rev);
+
+       rt2x00dev->chip.rt = rt;
+       rt2x00dev->chip.rf = rf;
+       rt2x00dev->chip.rev = rev;
+}
+
+static inline char rt2x00_rt(const struct rt2x00_chip *chipset, const u16 chip)
+{
+       return (chipset->rt == chip);
+}
+
+static inline char rt2x00_rf(const struct rt2x00_chip *chipset, const u16 chip)
+{
+       return (chipset->rf == chip);
+}
+
+static inline u16 rt2x00_get_rev(const struct rt2x00_chip *chipset)
+{
+       return chipset->rev;
+}
+
+static inline u16 rt2x00_rev(const struct rt2x00_chip *chipset, const u32 mask)
+{
+       return chipset->rev & mask;
+}
+
+/*
+ * Duration calculations
+ * The rate variable passed is: 100kbs.
+ * To convert from bytes to bits we multiply size with 8,
+ * then the size is multiplied with 10 to make the
+ * real rate -> rate argument correction.
+ */
+static inline u16 get_duration(const unsigned int size, const u8 rate)
+{
+       return ((size * 8 * 10) / rate);
+}
+
+static inline u16 get_duration_res(const unsigned int size, const u8 rate)
+{
+       return ((size * 8 * 10) % rate);
+}
+
+/*
+ * Library functions.
+ */
+struct data_ring *rt2x00lib_get_ring(struct rt2x00_dev *rt2x00dev,
+                                    const unsigned int queue);
+
+/*
+ * Interrupt context handlers.
+ */
+void rt2x00lib_beacondone(struct rt2x00_dev *rt2x00dev);
+void rt2x00lib_txdone(struct data_entry *entry,
+                     const int status, const int retry);
+void rt2x00lib_rxdone(struct data_entry *entry, struct sk_buff *skb,
+                     const int signal, const int rssi, const int ofdm);
+
+/*
+ * TX descriptor initializer
+ */
+void rt2x00lib_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+                            struct data_desc *txd,
+                            struct ieee80211_hdr *ieee80211hdr,
+                            unsigned int length,
+                            struct ieee80211_tx_control *control);
+
+/*
+ * mac80211 handlers.
+ */
+int rt2x00mac_tx(struct ieee80211_hw *hw, struct sk_buff *skb,
+                struct ieee80211_tx_control *control);
+int rt2x00mac_start(struct ieee80211_hw *hw);
+void rt2x00mac_stop(struct ieee80211_hw *hw);
+int rt2x00mac_add_interface(struct ieee80211_hw *hw,
+                           struct ieee80211_if_init_conf *conf);
+void rt2x00mac_remove_interface(struct ieee80211_hw *hw,
+                               struct ieee80211_if_init_conf *conf);
+int rt2x00mac_config(struct ieee80211_hw *hw, struct ieee80211_conf *conf);
+int rt2x00mac_config_interface(struct ieee80211_hw *hw, int if_id,
+                              struct ieee80211_if_conf *conf);
+void rt2x00mac_set_multicast_list(struct ieee80211_hw *hw,
+                                 unsigned short flags, int mc_count);
+int rt2x00mac_get_stats(struct ieee80211_hw *hw,
+                       struct ieee80211_low_level_stats *stats);
+int rt2x00mac_get_tx_stats(struct ieee80211_hw *hw,
+                          struct ieee80211_tx_queue_stats *stats);
+int rt2x00mac_conf_tx(struct ieee80211_hw *hw, int queue,
+                     const struct ieee80211_tx_queue_params *params);
+
+/*
+ * Driver allocation handlers.
+ */
+int rt2x00lib_probe_dev(struct rt2x00_dev *rt2x00dev);
+void rt2x00lib_remove_dev(struct rt2x00_dev *rt2x00dev);
+#ifdef CONFIG_PM
+int rt2x00lib_suspend(struct rt2x00_dev *rt2x00dev, pm_message_t state);
+int rt2x00lib_resume(struct rt2x00_dev *rt2x00dev);
+#endif /* CONFIG_PM */
+
+#endif /* RT2X00_H */
diff --git a/drivers/net/wireless/rt2x00/rt2x00config.c b/drivers/net/wireless/rt2x00/rt2x00config.c
new file mode 100644 (file)
index 0000000..de890a1
--- /dev/null
@@ -0,0 +1,165 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00lib
+       Abstract: rt2x00 generic configuration routines.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2x00lib"
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+
+#include "rt2x00.h"
+#include "rt2x00lib.h"
+
+void rt2x00lib_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *mac)
+{
+       if (mac)
+               rt2x00dev->ops->lib->config_mac_addr(rt2x00dev, mac);
+}
+
+void rt2x00lib_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid)
+{
+       if (bssid)
+               rt2x00dev->ops->lib->config_bssid(rt2x00dev, bssid);
+}
+
+void rt2x00lib_config_packet_filter(struct rt2x00_dev *rt2x00dev, int filter)
+{
+       /*
+        * Only configure the device when something has changed,
+        * or if we are in RESUME state in which case all configuration
+        * will be forced upon the device.
+        */
+       if (!test_bit(INTERFACE_RESUME, &rt2x00dev->flags) &&
+           !test_bit(PACKET_FILTER_PENDING, &rt2x00dev->flags))
+               return;
+
+       /*
+        * Write configuration to device and clear the update flag.
+        */
+       rt2x00dev->ops->lib->config_packet_filter(rt2x00dev, filter);
+       __clear_bit(PACKET_FILTER_PENDING, &rt2x00dev->flags);
+}
+
+void rt2x00lib_config_type(struct rt2x00_dev *rt2x00dev, int type)
+{
+       struct interface *intf = &rt2x00dev->interface;
+
+       /*
+        * Fallback when a invalid interface is attempted to
+        * be configured. If a monitor interface is present,
+        * we are going configure that, otherwise exit.
+        */
+       if (type == INVALID_INTERFACE) {
+               if (is_monitor_present(intf))
+                       type = IEEE80211_IF_TYPE_MNTR;
+               else
+                       return;
+       }
+
+       /*
+        * Only configure the device when something has changed,
+        * or if we are in RESUME state in which case all configuration
+        * will be forced upon the device.
+        */
+       if (!test_bit(INTERFACE_RESUME, &rt2x00dev->flags) &&
+           (!(is_interface_present(intf) ^
+              test_bit(INTERFACE_ENABLED, &rt2x00dev->flags)) &&
+            !(is_monitor_present(intf) ^
+              test_bit(INTERFACE_ENABLED_MONITOR, &rt2x00dev->flags))))
+               return;
+
+       /*
+        * Configure device.
+        */
+       rt2x00dev->ops->lib->config_type(rt2x00dev, type);
+
+       /*
+        * Update the configuration flags.
+        */
+       if (type != IEEE80211_IF_TYPE_MNTR) {
+               if (is_interface_present(intf))
+                       __set_bit(INTERFACE_ENABLED, &rt2x00dev->flags);
+               else
+                       __clear_bit(INTERFACE_ENABLED, &rt2x00dev->flags);
+       } else {
+               if (is_monitor_present(intf))
+                       __set_bit(INTERFACE_ENABLED_MONITOR, &rt2x00dev->flags);
+               else
+                       __clear_bit(INTERFACE_ENABLED_MONITOR,
+                                   &rt2x00dev->flags);
+       }
+}
+
+void rt2x00lib_config(struct rt2x00_dev *rt2x00dev, struct ieee80211_conf *conf)
+{
+       int flags = 0;
+
+       /*
+        * If we are in RESUME state we should
+        * force all configuration options.
+        */
+       if (test_bit(INTERFACE_RESUME, &rt2x00dev->flags)) {
+               flags = CONFIG_UPDATE_ALL;
+               goto config;
+       }
+
+       /*
+        * Check which configuration options have been
+        * updated and should be send to the device.
+        */
+       if (rt2x00dev->rx_status.phymode != conf->phymode)
+               flags |= CONFIG_UPDATE_PHYMODE;
+       if (rt2x00dev->rx_status.channel != conf->channel)
+               flags |= CONFIG_UPDATE_CHANNEL;
+       if (rt2x00dev->tx_power != conf->power_level)
+               flags |= CONFIG_UPDATE_TXPOWER;
+       if (rt2x00dev->rx_status.antenna == conf->antenna_sel_rx)
+               flags |= CONFIG_UPDATE_ANTENNA;
+
+       /*
+        * The following configuration options are never
+        * stored anywhere and will always be updated.
+        */
+       flags |= CONFIG_UPDATE_SLOT_TIME;
+       flags |= CONFIG_UPDATE_BEACON_INT;
+
+config:
+       rt2x00dev->ops->lib->config(rt2x00dev, flags, conf);
+
+       /*
+        * Some configuration changes affect the link quality
+        * which means we need to reset the link tuner.
+        */
+       if (flags & (CONFIG_UPDATE_CHANNEL | CONFIG_UPDATE_ANTENNA))
+               rt2x00lib_reset_link_tuner(rt2x00dev);
+
+       rt2x00dev->rx_status.phymode = conf->phymode;
+       rt2x00dev->rx_status.freq = conf->freq;
+       rt2x00dev->rx_status.channel = conf->channel;
+       rt2x00dev->tx_power = conf->power_level;
+       rt2x00dev->rx_status.antenna = conf->antenna_sel_rx;
+}
diff --git a/drivers/net/wireless/rt2x00/rt2x00debug.c b/drivers/net/wireless/rt2x00/rt2x00debug.c
new file mode 100644 (file)
index 0000000..4d2aaec
--- /dev/null
@@ -0,0 +1,331 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00lib
+       Abstract: rt2x00 debugfs specific routines.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2x00lib"
+
+#include <linux/debugfs.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/uaccess.h>
+
+#include "rt2x00.h"
+#include "rt2x00lib.h"
+
+#define PRINT_LINE_LEN_MAX 32
+
+struct rt2x00debug_intf {
+       /*
+        * Pointer to driver structure where
+        * this debugfs entry belongs to.
+        */
+       struct rt2x00_dev *rt2x00dev;
+
+       /*
+        * Reference to the rt2x00debug structure
+        * which can be used to communicate with
+        * the registers.
+        */
+       const struct rt2x00debug *debug;
+
+       /*
+        * Debugfs entries for:
+        * - driver folder
+        * - driver file
+        * - chipset file
+        * - register offset/value files
+        * - eeprom offset/value files
+        * - bbp offset/value files
+        * - rf offset/value files
+        */
+       struct dentry *driver_folder;
+       struct dentry *driver_entry;
+       struct dentry *chipset_entry;
+       struct dentry *csr_off_entry;
+       struct dentry *csr_val_entry;
+       struct dentry *eeprom_off_entry;
+       struct dentry *eeprom_val_entry;
+       struct dentry *bbp_off_entry;
+       struct dentry *bbp_val_entry;
+       struct dentry *rf_off_entry;
+       struct dentry *rf_val_entry;
+
+       /*
+        * Driver and chipset files will use a data buffer
+        * that has been created in advance. This will simplify
+        * the code since we can use the debugfs functions.
+        */
+       struct debugfs_blob_wrapper driver_blob;
+       struct debugfs_blob_wrapper chipset_blob;
+
+       /*
+        * Requested offset for each register type.
+        */
+       unsigned int offset_csr;
+       unsigned int offset_eeprom;
+       unsigned int offset_bbp;
+       unsigned int offset_rf;
+};
+
+static int rt2x00debug_file_open(struct inode *inode, struct file *file)
+{
+       struct rt2x00debug_intf *intf = inode->i_private;
+
+       file->private_data = inode->i_private;
+
+       if (!try_module_get(intf->debug->owner))
+               return -EBUSY;
+
+       return 0;
+}
+
+static int rt2x00debug_file_release(struct inode *inode, struct file *file)
+{
+       struct rt2x00debug_intf *intf = file->private_data;
+
+       module_put(intf->debug->owner);
+
+       return 0;
+}
+
+#define RT2X00DEBUGFS_OPS_READ(__name, __format, __type)       \
+static ssize_t rt2x00debug_read_##__name(struct file *file,    \
+                                        char __user *buf,      \
+                                        size_t length,         \
+                                        loff_t *offset)        \
+{                                                              \
+       struct rt2x00debug_intf *intf = file->private_data;     \
+       const struct rt2x00debug *debug = intf->debug;          \
+       char line[16];                                          \
+       size_t size;                                            \
+       __type value;                                           \
+                                                               \
+       if (*offset)                                            \
+               return 0;                                       \
+                                                               \
+       if (intf->offset_##__name >= debug->__name.word_count)  \
+               return -EINVAL;                                 \
+                                                               \
+       debug->__name.read(intf->rt2x00dev,                     \
+                          intf->offset_##__name, &value);      \
+                                                               \
+       size = sprintf(line, __format, value);                  \
+                                                               \
+       if (copy_to_user(buf, line, size))                      \
+               return -EFAULT;                                 \
+                                                               \
+       *offset += size;                                        \
+       return size;                                            \
+}
+
+#define RT2X00DEBUGFS_OPS_WRITE(__name, __type)                        \
+static ssize_t rt2x00debug_write_##__name(struct file *file,   \
+                                         const char __user *buf,\
+                                         size_t length,        \
+                                         loff_t *offset)       \
+{                                                              \
+       struct rt2x00debug_intf *intf = file->private_data;     \
+       const struct rt2x00debug *debug = intf->debug;          \
+       char line[16];                                          \
+       size_t size;                                            \
+       __type value;                                           \
+                                                               \
+       if (*offset)                                            \
+               return 0;                                       \
+                                                               \
+       if (!capable(CAP_NET_ADMIN))                            \
+               return -EPERM;                                  \
+                                                               \
+       if (intf->offset_##__name >= debug->__name.word_count)  \
+               return -EINVAL;                                 \
+                                                               \
+       if (copy_from_user(line, buf, length))                  \
+               return -EFAULT;                                 \
+                                                               \
+       size = strlen(line);                                    \
+       value = simple_strtoul(line, NULL, 0);                  \
+                                                               \
+       debug->__name.write(intf->rt2x00dev,                    \
+                           intf->offset_##__name, value);      \
+                                                               \
+       *offset += size;                                        \
+       return size;                                            \
+}
+
+#define RT2X00DEBUGFS_OPS(__name, __format, __type)            \
+RT2X00DEBUGFS_OPS_READ(__name, __format, __type);              \
+RT2X00DEBUGFS_OPS_WRITE(__name, __type);                       \
+                                                               \
+static const struct file_operations rt2x00debug_fop_##__name = {\
+       .owner          = THIS_MODULE,                          \
+       .read           = rt2x00debug_read_##__name,            \
+       .write          = rt2x00debug_write_##__name,           \
+       .open           = rt2x00debug_file_open,                \
+       .release        = rt2x00debug_file_release,             \
+};
+
+RT2X00DEBUGFS_OPS(csr, "0x%.8x\n", u32);
+RT2X00DEBUGFS_OPS(eeprom, "0x%.4x\n", u16);
+RT2X00DEBUGFS_OPS(bbp, "0x%.2x\n", u8);
+RT2X00DEBUGFS_OPS(rf, "0x%.8x\n", u32);
+
+static struct dentry *rt2x00debug_create_file_driver(const char *name,
+                                                    struct rt2x00debug_intf
+                                                    *intf,
+                                                    struct debugfs_blob_wrapper
+                                                    *blob)
+{
+       char *data;
+
+       data = kzalloc(3 * PRINT_LINE_LEN_MAX, GFP_KERNEL);
+       if (!data)
+               return NULL;
+
+       blob->data = data;
+       data += sprintf(data, "driver: %s\n", intf->rt2x00dev->ops->name);
+       data += sprintf(data, "version: %s\n", DRV_VERSION);
+       data += sprintf(data, "compiled: %s %s\n", __DATE__, __TIME__);
+       blob->size = strlen(blob->data);
+
+       return debugfs_create_blob(name, S_IRUGO, intf->driver_folder, blob);
+}
+
+static struct dentry *rt2x00debug_create_file_chipset(const char *name,
+                                                     struct rt2x00debug_intf
+                                                     *intf,
+                                                     struct
+                                                     debugfs_blob_wrapper
+                                                     *blob)
+{
+       const struct rt2x00debug *debug = intf->debug;
+       char *data;
+
+       data = kzalloc(4 * PRINT_LINE_LEN_MAX, GFP_KERNEL);
+       if (!data)
+               return NULL;
+
+       blob->data = data;
+       data += sprintf(data, "csr length: %d\n", debug->csr.word_count);
+       data += sprintf(data, "eeprom length: %d\n", debug->eeprom.word_count);
+       data += sprintf(data, "bbp length: %d\n", debug->bbp.word_count);
+       data += sprintf(data, "rf length: %d\n", debug->rf.word_count);
+       blob->size = strlen(blob->data);
+
+       return debugfs_create_blob(name, S_IRUGO, intf->driver_folder, blob);
+}
+
+void rt2x00debug_register(struct rt2x00_dev *rt2x00dev)
+{
+       const struct rt2x00debug *debug = rt2x00dev->ops->debugfs;
+       struct rt2x00debug_intf *intf;
+
+       intf = kzalloc(sizeof(struct rt2x00debug_intf), GFP_KERNEL);
+       if (!intf) {
+               ERROR(rt2x00dev, "Failed to allocate debug handler.\n");
+               return;
+       }
+
+       intf->debug = debug;
+       intf->rt2x00dev = rt2x00dev;
+       rt2x00dev->debugfs_intf = intf;
+
+       intf->driver_folder =
+           debugfs_create_dir(intf->rt2x00dev->ops->name,
+                              rt2x00dev->hw->wiphy->debugfsdir);
+       if (IS_ERR(intf->driver_folder))
+               goto exit;
+
+       intf->driver_entry =
+           rt2x00debug_create_file_driver("driver", intf, &intf->driver_blob);
+       if (IS_ERR(intf->driver_entry))
+               goto exit;
+
+       intf->chipset_entry =
+           rt2x00debug_create_file_chipset("chipset",
+                                           intf, &intf->chipset_blob);
+       if (IS_ERR(intf->chipset_entry))
+               goto exit;
+
+#define RT2X00DEBUGFS_CREATE_ENTRY(__intf, __name)             \
+({                                                             \
+       (__intf)->__name##_off_entry =                          \
+           debugfs_create_u32(__stringify(__name) "_offset",   \
+                              S_IRUGO | S_IWUSR,               \
+                              (__intf)->driver_folder,         \
+                              &(__intf)->offset_##__name);     \
+       if (IS_ERR((__intf)->__name##_off_entry))               \
+               goto exit;                                      \
+                                                               \
+       (__intf)->__name##_val_entry =                          \
+           debugfs_create_file(__stringify(__name) "_value",   \
+                               S_IRUGO | S_IWUSR,              \
+                               (__intf)->driver_folder,        \
+                               (__intf), &rt2x00debug_fop_##__name);\
+       if (IS_ERR((__intf)->__name##_val_entry))               \
+               goto exit;                                      \
+})
+
+       RT2X00DEBUGFS_CREATE_ENTRY(intf, csr);
+       RT2X00DEBUGFS_CREATE_ENTRY(intf, eeprom);
+       RT2X00DEBUGFS_CREATE_ENTRY(intf, bbp);
+       RT2X00DEBUGFS_CREATE_ENTRY(intf, rf);
+
+#undef RT2X00DEBUGFS_CREATE_ENTRY
+
+       return;
+
+exit:
+       rt2x00debug_deregister(rt2x00dev);
+       ERROR(rt2x00dev, "Failed to register debug handler.\n");
+
+       return;
+}
+
+void rt2x00debug_deregister(struct rt2x00_dev *rt2x00dev)
+{
+       const struct rt2x00debug_intf *intf = rt2x00dev->debugfs_intf;
+
+       if (unlikely(!intf))
+               return;
+
+       debugfs_remove(intf->rf_val_entry);
+       debugfs_remove(intf->rf_off_entry);
+       debugfs_remove(intf->bbp_val_entry);
+       debugfs_remove(intf->bbp_off_entry);
+       debugfs_remove(intf->eeprom_val_entry);
+       debugfs_remove(intf->eeprom_off_entry);
+       debugfs_remove(intf->csr_val_entry);
+       debugfs_remove(intf->csr_off_entry);
+       debugfs_remove(intf->chipset_entry);
+       debugfs_remove(intf->driver_entry);
+       debugfs_remove(intf->driver_folder);
+       kfree(intf->chipset_blob.data);
+       kfree(intf->driver_blob.data);
+       kfree(intf);
+
+       rt2x00dev->debugfs_intf = NULL;
+}
diff --git a/drivers/net/wireless/rt2x00/rt2x00debug.h b/drivers/net/wireless/rt2x00/rt2x00debug.h
new file mode 100644 (file)
index 0000000..860e8fa
--- /dev/null
@@ -0,0 +1,57 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00debug
+       Abstract: Data structures for the rt2x00debug.
+ */
+
+#ifndef RT2X00DEBUG_H
+#define RT2X00DEBUG_H
+
+struct rt2x00_dev;
+
+#define RT2X00DEBUGFS_REGISTER_ENTRY(__name, __type)           \
+struct reg##__name {                                           \
+       void (*read)(const struct rt2x00_dev *rt2x00dev,        \
+                    const unsigned int word, __type *data);    \
+       void (*write)(const struct rt2x00_dev *rt2x00dev,       \
+                     const unsigned int word, __type data);    \
+                                                               \
+       unsigned int word_size;                                 \
+       unsigned int word_count;                                \
+} __name
+
+struct rt2x00debug {
+       /*
+        * Reference to the modules structure.
+        */
+       struct module *owner;
+
+       /*
+        * Register access entries.
+        */
+       RT2X00DEBUGFS_REGISTER_ENTRY(csr, u32);
+       RT2X00DEBUGFS_REGISTER_ENTRY(eeprom, u16);
+       RT2X00DEBUGFS_REGISTER_ENTRY(bbp, u8);
+       RT2X00DEBUGFS_REGISTER_ENTRY(rf, u32);
+};
+
+#endif /* RT2X00DEBUG_H */
diff --git a/drivers/net/wireless/rt2x00/rt2x00dev.c b/drivers/net/wireless/rt2x00/rt2x00dev.c
new file mode 100644 (file)
index 0000000..cd82eef
--- /dev/null
@@ -0,0 +1,1133 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00lib
+       Abstract: rt2x00 generic device routines.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2x00lib"
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+
+#include "rt2x00.h"
+#include "rt2x00lib.h"
+
+/*
+ * Ring handler.
+ */
+struct data_ring *rt2x00lib_get_ring(struct rt2x00_dev *rt2x00dev,
+                                    const unsigned int queue)
+{
+       int beacon = test_bit(REQUIRE_BEACON_RING, &rt2x00dev->flags);
+
+       /*
+        * Check if we are requesting a reqular TX ring,
+        * or if we are requesting a Beacon or Atim ring.
+        * For Atim rings, we should check if it is supported.
+        */
+       if (queue < rt2x00dev->hw->queues && rt2x00dev->tx)
+               return &rt2x00dev->tx[queue];
+
+       if (!rt2x00dev->bcn || !beacon)
+               return NULL;
+
+       if (queue == IEEE80211_TX_QUEUE_BEACON)
+               return &rt2x00dev->bcn[0];
+       else if (queue == IEEE80211_TX_QUEUE_AFTER_BEACON)
+               return &rt2x00dev->bcn[1];
+
+       return NULL;
+}
+EXPORT_SYMBOL_GPL(rt2x00lib_get_ring);
+
+/*
+ * Link tuning handlers
+ */
+static void rt2x00lib_start_link_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       rt2x00_clear_link(&rt2x00dev->link);
+
+       /*
+        * Reset the link tuner.
+        */
+       rt2x00dev->ops->lib->reset_tuner(rt2x00dev);
+
+       queue_delayed_work(rt2x00dev->hw->workqueue,
+                          &rt2x00dev->link.work, LINK_TUNE_INTERVAL);
+}
+
+static void rt2x00lib_stop_link_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       if (delayed_work_pending(&rt2x00dev->link.work))
+               cancel_rearming_delayed_work(&rt2x00dev->link.work);
+}
+
+void rt2x00lib_reset_link_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       rt2x00lib_stop_link_tuner(rt2x00dev);
+       rt2x00lib_start_link_tuner(rt2x00dev);
+}
+
+/*
+ * Radio control handlers.
+ */
+int rt2x00lib_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       int status;
+
+       /*
+        * Don't enable the radio twice.
+        * And check if the hardware button has been disabled.
+        */
+       if (test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags) ||
+           (test_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags) &&
+            !test_bit(DEVICE_ENABLED_RADIO_HW, &rt2x00dev->flags)))
+               return 0;
+
+       /*
+        * Enable radio.
+        */
+       status = rt2x00dev->ops->lib->set_device_state(rt2x00dev,
+                                                      STATE_RADIO_ON);
+       if (status)
+               return status;
+
+       __set_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags);
+
+       /*
+        * Enable RX.
+        */
+       rt2x00lib_toggle_rx(rt2x00dev, 1);
+
+       /*
+        * Start the TX queues.
+        */
+       ieee80211_start_queues(rt2x00dev->hw);
+
+       return 0;
+}
+
+void rt2x00lib_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       if (!__test_and_clear_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags))
+               return;
+
+       /*
+        * Stop beacon generation.
+        */
+       if (work_pending(&rt2x00dev->beacon_work))
+               cancel_work_sync(&rt2x00dev->beacon_work);
+
+       /*
+        * Stop the TX queues.
+        */
+       ieee80211_stop_queues(rt2x00dev->hw);
+
+       /*
+        * Disable RX.
+        */
+       rt2x00lib_toggle_rx(rt2x00dev, 0);
+
+       /*
+        * Disable radio.
+        */
+       rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_RADIO_OFF);
+}
+
+void rt2x00lib_toggle_rx(struct rt2x00_dev *rt2x00dev, int enable)
+{
+       enum dev_state state = enable ? STATE_RADIO_RX_ON : STATE_RADIO_RX_OFF;
+
+       /*
+        * When we are disabling the RX, we should also stop the link tuner.
+        */
+       if (!enable)
+               rt2x00lib_stop_link_tuner(rt2x00dev);
+
+       rt2x00dev->ops->lib->set_device_state(rt2x00dev, state);
+
+       /*
+        * When we are enabling the RX, we should also start the link tuner.
+        */
+       if (enable && is_interface_present(&rt2x00dev->interface))
+               rt2x00lib_start_link_tuner(rt2x00dev);
+}
+
+static void rt2x00lib_precalculate_link_signal(struct link *link)
+{
+       if (link->rx_failed || link->rx_success)
+               link->rx_percentage =
+                   (link->rx_success * 100) /
+                   (link->rx_failed + link->rx_success);
+       else
+               link->rx_percentage = 50;
+
+       if (link->tx_failed || link->tx_success)
+               link->tx_percentage =
+                   (link->tx_success * 100) /
+                   (link->tx_failed + link->tx_success);
+       else
+               link->tx_percentage = 50;
+
+       link->rx_success = 0;
+       link->rx_failed = 0;
+       link->tx_success = 0;
+       link->tx_failed = 0;
+}
+
+static int rt2x00lib_calculate_link_signal(struct rt2x00_dev *rt2x00dev,
+                                          int rssi)
+{
+       int rssi_percentage = 0;
+       int signal;
+
+       /*
+        * We need a positive value for the RSSI.
+        */
+       if (rssi < 0)
+               rssi += rt2x00dev->rssi_offset;
+
+       /*
+        * Calculate the different percentages,
+        * which will be used for the signal.
+        */
+       if (rt2x00dev->rssi_offset)
+               rssi_percentage = (rssi * 100) / rt2x00dev->rssi_offset;
+
+       /*
+        * Add the individual percentages and use the WEIGHT
+        * defines to calculate the current link signal.
+        */
+       signal = ((WEIGHT_RSSI * rssi_percentage) +
+                 (WEIGHT_TX * rt2x00dev->link.tx_percentage) +
+                 (WEIGHT_RX * rt2x00dev->link.rx_percentage)) / 100;
+
+       return (signal > 100) ? 100 : signal;
+}
+
+static void rt2x00lib_link_tuner(struct work_struct *work)
+{
+       struct rt2x00_dev *rt2x00dev =
+           container_of(work, struct rt2x00_dev, link.work.work);
+
+       /*
+        * Update statistics.
+        */
+       rt2x00dev->ops->lib->link_stats(rt2x00dev);
+
+       rt2x00dev->low_level_stats.dot11FCSErrorCount +=
+           rt2x00dev->link.rx_failed;
+
+       rt2x00lib_precalculate_link_signal(&rt2x00dev->link);
+
+       /*
+        * Only perform the link tuning when Link tuning
+        * has been enabled (This could have been disabled from the EEPROM).
+        */
+       if (!test_bit(CONFIG_DISABLE_LINK_TUNING, &rt2x00dev->flags))
+               rt2x00dev->ops->lib->link_tuner(rt2x00dev);
+
+       /*
+        * Increase tuner counter, and reschedule the next link tuner run.
+        */
+       rt2x00dev->link.count++;
+       queue_delayed_work(rt2x00dev->hw->workqueue, &rt2x00dev->link.work,
+                          LINK_TUNE_INTERVAL);
+}
+
+/*
+ * Interrupt context handlers.
+ */
+static void rt2x00lib_beacondone_scheduled(struct work_struct *work)
+{
+       struct rt2x00_dev *rt2x00dev =
+           container_of(work, struct rt2x00_dev, beacon_work);
+       struct data_ring *ring =
+           rt2x00lib_get_ring(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+       struct data_entry *entry = rt2x00_get_data_entry(ring);
+       struct sk_buff *skb;
+
+       skb = ieee80211_beacon_get(rt2x00dev->hw,
+                                  rt2x00dev->interface.id,
+                                  &entry->tx_status.control);
+       if (!skb)
+               return;
+
+       rt2x00dev->ops->hw->beacon_update(rt2x00dev->hw, skb,
+                                         &entry->tx_status.control);
+
+       dev_kfree_skb(skb);
+}
+
+void rt2x00lib_beacondone(struct rt2x00_dev *rt2x00dev)
+{
+       if (!test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags))
+               return;
+
+       queue_work(rt2x00dev->hw->workqueue, &rt2x00dev->beacon_work);
+}
+EXPORT_SYMBOL_GPL(rt2x00lib_beacondone);
+
+void rt2x00lib_txdone(struct data_entry *entry,
+                     const int status, const int retry)
+{
+       struct rt2x00_dev *rt2x00dev = entry->ring->rt2x00dev;
+       struct ieee80211_tx_status *tx_status = &entry->tx_status;
+       struct ieee80211_low_level_stats *stats = &rt2x00dev->low_level_stats;
+       int success = !!(status == TX_SUCCESS || status == TX_SUCCESS_RETRY);
+       int fail = !!(status == TX_FAIL_RETRY || status == TX_FAIL_INVALID ||
+                     status == TX_FAIL_OTHER);
+
+       /*
+        * Update TX statistics.
+        */
+       tx_status->flags = 0;
+       tx_status->ack_signal = 0;
+       tx_status->excessive_retries = (status == TX_FAIL_RETRY);
+       tx_status->retry_count = retry;
+       rt2x00dev->link.tx_success += success;
+       rt2x00dev->link.tx_failed += retry + fail;
+
+       if (!(tx_status->control.flags & IEEE80211_TXCTL_NO_ACK)) {
+               if (success)
+                       tx_status->flags |= IEEE80211_TX_STATUS_ACK;
+               else
+                       stats->dot11ACKFailureCount++;
+       }
+
+       tx_status->queue_length = entry->ring->stats.limit;
+       tx_status->queue_number = tx_status->control.queue;
+
+       if (tx_status->control.flags & IEEE80211_TXCTL_USE_RTS_CTS) {
+               if (success)
+                       stats->dot11RTSSuccessCount++;
+               else
+                       stats->dot11RTSFailureCount++;
+       }
+
+       /*
+        * Send the tx_status to mac80211,
+        * that method also cleans up the skb structure.
+        */
+       ieee80211_tx_status_irqsafe(rt2x00dev->hw, entry->skb, tx_status);
+       entry->skb = NULL;
+}
+EXPORT_SYMBOL_GPL(rt2x00lib_txdone);
+
+void rt2x00lib_rxdone(struct data_entry *entry, struct sk_buff *skb,
+                     const int signal, const int rssi, const int ofdm)
+{
+       struct rt2x00_dev *rt2x00dev = entry->ring->rt2x00dev;
+       struct ieee80211_rx_status *rx_status = &rt2x00dev->rx_status;
+       struct ieee80211_hw_mode *mode;
+       struct ieee80211_rate *rate;
+       unsigned int i;
+       int val = 0;
+
+       /*
+        * Update RX statistics.
+        */
+       mode = &rt2x00dev->hwmodes[rt2x00dev->curr_hwmode];
+       for (i = 0; i < mode->num_rates; i++) {
+               rate = &mode->rates[i];
+
+               /*
+                * When frame was received with an OFDM bitrate,
+                * the signal is the PLCP value. If it was received with
+                * a CCK bitrate the signal is the rate in 0.5kbit/s.
+                */
+               if (!ofdm)
+                       val = DEVICE_GET_RATE_FIELD(rate->val, RATE);
+               else
+                       val = DEVICE_GET_RATE_FIELD(rate->val, PLCP);
+
+               if (val == signal) {
+                       val = rate->val;
+                       break;
+               }
+       }
+
+       rt2x00_update_link_rssi(&rt2x00dev->link, rssi);
+       rt2x00dev->link.rx_success++;
+       rx_status->rate = val;
+       rx_status->signal = rt2x00lib_calculate_link_signal(rt2x00dev, rssi);
+       rx_status->ssi = rssi;
+
+       /*
+        * Send frame to mac80211
+        */
+       ieee80211_rx_irqsafe(rt2x00dev->hw, skb, rx_status);
+}
+EXPORT_SYMBOL_GPL(rt2x00lib_rxdone);
+
+/*
+ * TX descriptor initializer
+ */
+void rt2x00lib_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+                            struct data_desc *txd,
+                            struct ieee80211_hdr *ieee80211hdr,
+                            unsigned int length,
+                            struct ieee80211_tx_control *control)
+{
+       struct data_entry_desc desc;
+       struct data_ring *ring;
+       int tx_rate;
+       int bitrate;
+       int duration;
+       int residual;
+       u16 frame_control;
+       u16 seq_ctrl;
+
+       /*
+        * Make sure the descriptor is properly cleared.
+        */
+       memset(&desc, 0x00, sizeof(desc));
+
+       /*
+        * Get ring pointer, if we fail to obtain the
+        * correct ring, then use the first TX ring.
+        */
+       ring = rt2x00lib_get_ring(rt2x00dev, control->queue);
+       if (!ring)
+               ring = rt2x00lib_get_ring(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+
+       desc.cw_min = ring->tx_params.cw_min;
+       desc.cw_max = ring->tx_params.cw_max;
+       desc.aifs = ring->tx_params.aifs;
+
+       /*
+        * Identify queue
+        */
+       if (control->queue < rt2x00dev->hw->queues)
+               desc.queue = control->queue;
+       else if (control->queue == IEEE80211_TX_QUEUE_BEACON ||
+                control->queue == IEEE80211_TX_QUEUE_AFTER_BEACON)
+               desc.queue = QUEUE_MGMT;
+       else
+               desc.queue = QUEUE_OTHER;
+
+       /*
+        * Read required fields from ieee80211 header.
+        */
+       frame_control = le16_to_cpu(ieee80211hdr->frame_control);
+       seq_ctrl = le16_to_cpu(ieee80211hdr->seq_ctrl);
+
+       tx_rate = control->tx_rate;
+
+       /*
+        * Check if this is a RTS/CTS frame
+        */
+       if (is_rts_frame(frame_control) || is_cts_frame(frame_control)) {
+               __set_bit(ENTRY_TXD_BURST, &desc.flags);
+               if (is_rts_frame(frame_control))
+                       __set_bit(ENTRY_TXD_RTS_FRAME, &desc.flags);
+               if (control->rts_cts_rate)
+                       tx_rate = control->rts_cts_rate;
+       }
+
+       /*
+        * Check for OFDM
+        */
+       if (DEVICE_GET_RATE_FIELD(tx_rate, RATEMASK) & DEV_OFDM_RATEMASK)
+               __set_bit(ENTRY_TXD_OFDM_RATE, &desc.flags);
+
+       /*
+        * Check if more fragments are pending
+        */
+       if (ieee80211_get_morefrag(ieee80211hdr)) {
+               __set_bit(ENTRY_TXD_BURST, &desc.flags);
+               __set_bit(ENTRY_TXD_MORE_FRAG, &desc.flags);
+       }
+
+       /*
+        * Beacons and probe responses require the tsf timestamp
+        * to be inserted into the frame.
+        */
+       if (control->queue == IEEE80211_TX_QUEUE_BEACON ||
+           is_probe_resp(frame_control))
+               __set_bit(ENTRY_TXD_REQ_TIMESTAMP, &desc.flags);
+
+       /*
+        * Determine with what IFS priority this frame should be send.
+        * Set ifs to IFS_SIFS when the this is not the first fragment,
+        * or this fragment came after RTS/CTS.
+        */
+       if ((seq_ctrl & IEEE80211_SCTL_FRAG) > 0 ||
+           test_bit(ENTRY_TXD_RTS_FRAME, &desc.flags))
+               desc.ifs = IFS_SIFS;
+       else
+               desc.ifs = IFS_BACKOFF;
+
+       /*
+        * PLCP setup
+        * Length calculation depends on OFDM/CCK rate.
+        */
+       desc.signal = DEVICE_GET_RATE_FIELD(tx_rate, PLCP);
+       desc.service = 0x04;
+
+       if (test_bit(ENTRY_TXD_OFDM_RATE, &desc.flags)) {
+               desc.length_high = ((length + FCS_LEN) >> 6) & 0x3f;
+               desc.length_low = ((length + FCS_LEN) & 0x3f);
+       } else {
+               bitrate = DEVICE_GET_RATE_FIELD(tx_rate, RATE);
+
+               /*
+                * Convert length to microseconds.
+                */
+               residual = get_duration_res(length + FCS_LEN, bitrate);
+               duration = get_duration(length + FCS_LEN, bitrate);
+
+               if (residual != 0) {
+                       duration++;
+
+                       /*
+                        * Check if we need to set the Length Extension
+                        */
+                       if (bitrate == 110 && residual <= 3)
+                               desc.service |= 0x80;
+               }
+
+               desc.length_high = (duration >> 8) & 0xff;
+               desc.length_low = duration & 0xff;
+
+               /*
+                * When preamble is enabled we should set the
+                * preamble bit for the signal.
+                */
+               if (DEVICE_GET_RATE_FIELD(tx_rate, PREAMBLE))
+                       desc.signal |= 0x08;
+       }
+
+       rt2x00dev->ops->lib->write_tx_desc(rt2x00dev, txd, &desc,
+                                          ieee80211hdr, length, control);
+}
+EXPORT_SYMBOL_GPL(rt2x00lib_write_tx_desc);
+
+/*
+ * Driver initialization handlers.
+ */
+static void rt2x00lib_channel(struct ieee80211_channel *entry,
+                             const int channel, const int tx_power,
+                             const int value)
+{
+       entry->chan = channel;
+       if (channel <= 14)
+               entry->freq = 2407 + (5 * channel);
+       else
+               entry->freq = 5000 + (5 * channel);
+       entry->val = value;
+       entry->flag =
+           IEEE80211_CHAN_W_IBSS |
+           IEEE80211_CHAN_W_ACTIVE_SCAN |
+           IEEE80211_CHAN_W_SCAN;
+       entry->power_level = tx_power;
+       entry->antenna_max = 0xff;
+}
+
+static void rt2x00lib_rate(struct ieee80211_rate *entry,
+                          const int rate, const int mask,
+                          const int plcp, const int flags)
+{
+       entry->rate = rate;
+       entry->val =
+           DEVICE_SET_RATE_FIELD(rate, RATE) |
+           DEVICE_SET_RATE_FIELD(mask, RATEMASK) |
+           DEVICE_SET_RATE_FIELD(plcp, PLCP);
+       entry->flags = flags;
+       entry->val2 = entry->val;
+       if (entry->flags & IEEE80211_RATE_PREAMBLE2)
+               entry->val2 |= DEVICE_SET_RATE_FIELD(1, PREAMBLE);
+       entry->min_rssi_ack = 0;
+       entry->min_rssi_ack_delta = 0;
+}
+
+static int rt2x00lib_probe_hw_modes(struct rt2x00_dev *rt2x00dev,
+                                   struct hw_mode_spec *spec)
+{
+       struct ieee80211_hw *hw = rt2x00dev->hw;
+       struct ieee80211_hw_mode *hwmodes;
+       struct ieee80211_channel *channels;
+       struct ieee80211_rate *rates;
+       unsigned int i;
+       unsigned char tx_power;
+
+       hwmodes = kzalloc(sizeof(*hwmodes) * spec->num_modes, GFP_KERNEL);
+       if (!hwmodes)
+               goto exit;
+
+       channels = kzalloc(sizeof(*channels) * spec->num_channels, GFP_KERNEL);
+       if (!channels)
+               goto exit_free_modes;
+
+       rates = kzalloc(sizeof(*rates) * spec->num_rates, GFP_KERNEL);
+       if (!rates)
+               goto exit_free_channels;
+
+       /*
+        * Initialize Rate list.
+        */
+       rt2x00lib_rate(&rates[0], 10, DEV_RATEMASK_1MB,
+                      0x00, IEEE80211_RATE_CCK);
+       rt2x00lib_rate(&rates[1], 20, DEV_RATEMASK_2MB,
+                      0x01, IEEE80211_RATE_CCK_2);
+       rt2x00lib_rate(&rates[2], 55, DEV_RATEMASK_5_5MB,
+                      0x02, IEEE80211_RATE_CCK_2);
+       rt2x00lib_rate(&rates[3], 110, DEV_RATEMASK_11MB,
+                      0x03, IEEE80211_RATE_CCK_2);
+
+       if (spec->num_rates > 4) {
+               rt2x00lib_rate(&rates[4], 60, DEV_RATEMASK_6MB,
+                              0x0b, IEEE80211_RATE_OFDM);
+               rt2x00lib_rate(&rates[5], 90, DEV_RATEMASK_9MB,
+                              0x0f, IEEE80211_RATE_OFDM);
+               rt2x00lib_rate(&rates[6], 120, DEV_RATEMASK_12MB,
+                              0x0a, IEEE80211_RATE_OFDM);
+               rt2x00lib_rate(&rates[7], 180, DEV_RATEMASK_18MB,
+                              0x0e, IEEE80211_RATE_OFDM);
+               rt2x00lib_rate(&rates[8], 240, DEV_RATEMASK_24MB,
+                              0x09, IEEE80211_RATE_OFDM);
+               rt2x00lib_rate(&rates[9], 360, DEV_RATEMASK_36MB,
+                              0x0d, IEEE80211_RATE_OFDM);
+               rt2x00lib_rate(&rates[10], 480, DEV_RATEMASK_48MB,
+                              0x08, IEEE80211_RATE_OFDM);
+               rt2x00lib_rate(&rates[11], 540, DEV_RATEMASK_54MB,
+                              0x0c, IEEE80211_RATE_OFDM);
+       }
+
+       /*
+        * Initialize Channel list.
+        */
+       for (i = 0; i < spec->num_channels; i++) {
+               if (spec->channels[i].channel <= 14)
+                       tx_power = spec->tx_power_bg[i];
+               else if (spec->tx_power_a)
+                       tx_power = spec->tx_power_a[i];
+               else
+                       tx_power = spec->tx_power_default;
+
+               rt2x00lib_channel(&channels[i],
+                                 spec->channels[i].channel, tx_power, i);
+       }
+
+       /*
+        * Intitialize 802.11b
+        * Rates: CCK.
+        * Channels: OFDM.
+        */
+       if (spec->num_modes > HWMODE_B) {
+               hwmodes[HWMODE_B].mode = MODE_IEEE80211B;
+               hwmodes[HWMODE_B].num_channels = 14;
+               hwmodes[HWMODE_B].num_rates = 4;
+               hwmodes[HWMODE_B].channels = channels;
+               hwmodes[HWMODE_B].rates = rates;
+       }
+
+       /*
+        * Intitialize 802.11g
+        * Rates: CCK, OFDM.
+        * Channels: OFDM.
+        */
+       if (spec->num_modes > HWMODE_G) {
+               hwmodes[HWMODE_G].mode = MODE_IEEE80211G;
+               hwmodes[HWMODE_G].num_channels = 14;
+               hwmodes[HWMODE_G].num_rates = spec->num_rates;
+               hwmodes[HWMODE_G].channels = channels;
+               hwmodes[HWMODE_G].rates = rates;
+       }
+
+       /*
+        * Intitialize 802.11a
+        * Rates: OFDM.
+        * Channels: OFDM, UNII, HiperLAN2.
+        */
+       if (spec->num_modes > HWMODE_A) {
+               hwmodes[HWMODE_A].mode = MODE_IEEE80211A;
+               hwmodes[HWMODE_A].num_channels = spec->num_channels - 14;
+               hwmodes[HWMODE_A].num_rates = spec->num_rates - 4;
+               hwmodes[HWMODE_A].channels = &channels[14];
+               hwmodes[HWMODE_A].rates = &rates[4];
+       }
+
+       if (spec->num_modes > HWMODE_G &&
+           ieee80211_register_hwmode(hw, &hwmodes[HWMODE_G]))
+               goto exit_free_rates;
+
+       if (spec->num_modes > HWMODE_B &&
+           ieee80211_register_hwmode(hw, &hwmodes[HWMODE_B]))
+               goto exit_free_rates;
+
+       if (spec->num_modes > HWMODE_A &&
+           ieee80211_register_hwmode(hw, &hwmodes[HWMODE_A]))
+               goto exit_free_rates;
+
+       rt2x00dev->hwmodes = hwmodes;
+
+       return 0;
+
+exit_free_rates:
+       kfree(rates);
+
+exit_free_channels:
+       kfree(channels);
+
+exit_free_modes:
+       kfree(hwmodes);
+
+exit:
+       ERROR(rt2x00dev, "Allocation ieee80211 modes failed.\n");
+       return -ENOMEM;
+}
+
+static void rt2x00lib_remove_hw(struct rt2x00_dev *rt2x00dev)
+{
+       if (test_bit(DEVICE_INITIALIZED_HW, &rt2x00dev->flags))
+               ieee80211_unregister_hw(rt2x00dev->hw);
+
+       if (likely(rt2x00dev->hwmodes)) {
+               kfree(rt2x00dev->hwmodes->channels);
+               kfree(rt2x00dev->hwmodes->rates);
+               kfree(rt2x00dev->hwmodes);
+               rt2x00dev->hwmodes = NULL;
+       }
+}
+
+static int rt2x00lib_probe_hw(struct rt2x00_dev *rt2x00dev)
+{
+       struct hw_mode_spec *spec = &rt2x00dev->spec;
+       int status;
+
+       /*
+        * Initialize HW modes.
+        */
+       status = rt2x00lib_probe_hw_modes(rt2x00dev, spec);
+       if (status)
+               return status;
+
+       /*
+        * Register HW.
+        */
+       status = ieee80211_register_hw(rt2x00dev->hw);
+       if (status) {
+               rt2x00lib_remove_hw(rt2x00dev);
+               return status;
+       }
+
+       __set_bit(DEVICE_INITIALIZED_HW, &rt2x00dev->flags);
+
+       return 0;
+}
+
+/*
+ * Initialization/uninitialization handlers.
+ */
+static int rt2x00lib_alloc_entries(struct data_ring *ring,
+                                  const u16 max_entries, const u16 data_size,
+                                  const u16 desc_size)
+{
+       struct data_entry *entry;
+       unsigned int i;
+
+       ring->stats.limit = max_entries;
+       ring->data_size = data_size;
+       ring->desc_size = desc_size;
+
+       /*
+        * Allocate all ring entries.
+        */
+       entry = kzalloc(ring->stats.limit * sizeof(*entry), GFP_KERNEL);
+       if (!entry)
+               return -ENOMEM;
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               entry[i].flags = 0;
+               entry[i].ring = ring;
+               entry[i].skb = NULL;
+       }
+
+       ring->entry = entry;
+
+       return 0;
+}
+
+static int rt2x00lib_alloc_ring_entries(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring;
+
+       /*
+        * Allocate the RX ring.
+        */
+       if (rt2x00lib_alloc_entries(rt2x00dev->rx, RX_ENTRIES, DATA_FRAME_SIZE,
+                                   rt2x00dev->ops->rxd_size))
+               return -ENOMEM;
+
+       /*
+        * First allocate the TX rings.
+        */
+       txring_for_each(rt2x00dev, ring) {
+               if (rt2x00lib_alloc_entries(ring, TX_ENTRIES, DATA_FRAME_SIZE,
+                                           rt2x00dev->ops->txd_size))
+                       return -ENOMEM;
+       }
+
+       if (!test_bit(REQUIRE_BEACON_RING, &rt2x00dev->flags))
+               return 0;
+
+       /*
+        * Allocate the BEACON ring.
+        */
+       if (rt2x00lib_alloc_entries(&rt2x00dev->bcn[0], BEACON_ENTRIES,
+                                   MGMT_FRAME_SIZE, rt2x00dev->ops->txd_size))
+               return -ENOMEM;
+
+       /*
+        * Allocate the Atim ring.
+        */
+       if (rt2x00lib_alloc_entries(&rt2x00dev->bcn[1], ATIM_ENTRIES,
+                                   DATA_FRAME_SIZE, rt2x00dev->ops->txd_size))
+               return -ENOMEM;
+
+       return 0;
+}
+
+static void rt2x00lib_free_ring_entries(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring;
+
+       ring_for_each(rt2x00dev, ring) {
+               kfree(ring->entry);
+               ring->entry = NULL;
+       }
+}
+
+void rt2x00lib_uninitialize(struct rt2x00_dev *rt2x00dev)
+{
+       if (!__test_and_clear_bit(DEVICE_INITIALIZED, &rt2x00dev->flags))
+               return;
+
+       /*
+        * Unregister rfkill.
+        */
+       rt2x00rfkill_unregister(rt2x00dev);
+
+       /*
+        * Allow the HW to uninitialize.
+        */
+       rt2x00dev->ops->lib->uninitialize(rt2x00dev);
+
+       /*
+        * Free allocated ring entries.
+        */
+       rt2x00lib_free_ring_entries(rt2x00dev);
+}
+
+int rt2x00lib_initialize(struct rt2x00_dev *rt2x00dev)
+{
+       int status;
+
+       if (test_bit(DEVICE_INITIALIZED, &rt2x00dev->flags))
+               return 0;
+
+       /*
+        * Allocate all ring entries.
+        */
+       status = rt2x00lib_alloc_ring_entries(rt2x00dev);
+       if (status) {
+               ERROR(rt2x00dev, "Ring entries allocation failed.\n");
+               return status;
+       }
+
+       /*
+        * Initialize the device.
+        */
+       status = rt2x00dev->ops->lib->initialize(rt2x00dev);
+       if (status)
+               goto exit;
+
+       __set_bit(DEVICE_INITIALIZED, &rt2x00dev->flags);
+
+       /*
+        * Register the rfkill handler.
+        */
+       status = rt2x00rfkill_register(rt2x00dev);
+       if (status)
+               goto exit_unitialize;
+
+       return 0;
+
+exit_unitialize:
+       rt2x00lib_uninitialize(rt2x00dev);
+
+exit:
+       rt2x00lib_free_ring_entries(rt2x00dev);
+
+       return status;
+}
+
+/*
+ * driver allocation handlers.
+ */
+static int rt2x00lib_alloc_rings(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring;
+
+       /*
+        * We need the following rings:
+        * RX: 1
+        * TX: hw->queues
+        * Beacon: 1 (if required)
+        * Atim: 1 (if required)
+        */
+       rt2x00dev->data_rings = 1 + rt2x00dev->hw->queues +
+           (2 * test_bit(REQUIRE_BEACON_RING, &rt2x00dev->flags));
+
+       ring = kzalloc(rt2x00dev->data_rings * sizeof(*ring), GFP_KERNEL);
+       if (!ring) {
+               ERROR(rt2x00dev, "Ring allocation failed.\n");
+               return -ENOMEM;
+       }
+
+       /*
+        * Initialize pointers
+        */
+       rt2x00dev->rx = ring;
+       rt2x00dev->tx = &rt2x00dev->rx[1];
+       if (test_bit(REQUIRE_BEACON_RING, &rt2x00dev->flags))
+               rt2x00dev->bcn = &rt2x00dev->tx[rt2x00dev->hw->queues];
+
+       /*
+        * Initialize ring parameters.
+        * cw_min: 2^5 = 32.
+        * cw_max: 2^10 = 1024.
+        */
+       ring_for_each(rt2x00dev, ring) {
+               ring->rt2x00dev = rt2x00dev;
+               ring->tx_params.aifs = 2;
+               ring->tx_params.cw_min = 5;
+               ring->tx_params.cw_max = 10;
+       }
+
+       return 0;
+}
+
+static void rt2x00lib_free_rings(struct rt2x00_dev *rt2x00dev)
+{
+       kfree(rt2x00dev->rx);
+       rt2x00dev->rx = NULL;
+       rt2x00dev->tx = NULL;
+       rt2x00dev->bcn = NULL;
+}
+
+int rt2x00lib_probe_dev(struct rt2x00_dev *rt2x00dev)
+{
+       int retval = -ENOMEM;
+
+       /*
+        * Let the driver probe the device to detect the capabilities.
+        */
+       retval = rt2x00dev->ops->lib->probe_hw(rt2x00dev);
+       if (retval) {
+               ERROR(rt2x00dev, "Failed to allocate device.\n");
+               goto exit;
+       }
+
+       /*
+        * Initialize configuration work.
+        */
+       INIT_WORK(&rt2x00dev->beacon_work, rt2x00lib_beacondone_scheduled);
+       INIT_DELAYED_WORK(&rt2x00dev->link.work, rt2x00lib_link_tuner);
+
+       /*
+        * Reset current working type.
+        */
+       rt2x00dev->interface.type = INVALID_INTERFACE;
+
+       /*
+        * Allocate ring array.
+        */
+       retval = rt2x00lib_alloc_rings(rt2x00dev);
+       if (retval)
+               goto exit;
+
+       /*
+        * Initialize ieee80211 structure.
+        */
+       retval = rt2x00lib_probe_hw(rt2x00dev);
+       if (retval) {
+               ERROR(rt2x00dev, "Failed to initialize hw.\n");
+               goto exit;
+       }
+
+       /*
+        * Allocatie rfkill.
+        */
+       retval = rt2x00rfkill_allocate(rt2x00dev);
+       if (retval)
+               goto exit;
+
+       /*
+        * Open the debugfs entry.
+        */
+       rt2x00debug_register(rt2x00dev);
+
+       return 0;
+
+exit:
+       rt2x00lib_remove_dev(rt2x00dev);
+
+       return retval;
+}
+EXPORT_SYMBOL_GPL(rt2x00lib_probe_dev);
+
+void rt2x00lib_remove_dev(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Disable radio.
+        */
+       rt2x00lib_disable_radio(rt2x00dev);
+
+       /*
+        * Uninitialize device.
+        */
+       rt2x00lib_uninitialize(rt2x00dev);
+
+       /*
+        * Close debugfs entry.
+        */
+       rt2x00debug_deregister(rt2x00dev);
+
+       /*
+        * Free rfkill
+        */
+       rt2x00rfkill_free(rt2x00dev);
+
+       /*
+        * Free ieee80211_hw memory.
+        */
+       rt2x00lib_remove_hw(rt2x00dev);
+
+       /*
+        * Free firmware image.
+        */
+       rt2x00lib_free_firmware(rt2x00dev);
+
+       /*
+        * Free ring structures.
+        */
+       rt2x00lib_free_rings(rt2x00dev);
+}
+EXPORT_SYMBOL_GPL(rt2x00lib_remove_dev);
+
+/*
+ * Device state handlers
+ */
+#ifdef CONFIG_PM
+int rt2x00lib_suspend(struct rt2x00_dev *rt2x00dev, pm_message_t state)
+{
+       int retval;
+
+       NOTICE(rt2x00dev, "Going to sleep.\n");
+
+       /*
+        * Disable radio and unitialize all items
+        * that must be recreated on resume.
+        */
+       rt2x00lib_disable_radio(rt2x00dev);
+       rt2x00lib_uninitialize(rt2x00dev);
+       rt2x00debug_deregister(rt2x00dev);
+
+       /*
+        * Set device mode to sleep for power management.
+        */
+       retval = rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_SLEEP);
+       if (retval)
+               return retval;
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00lib_suspend);
+
+int rt2x00lib_resume(struct rt2x00_dev *rt2x00dev)
+{
+       struct interface *intf = &rt2x00dev->interface;
+       int retval;
+
+       NOTICE(rt2x00dev, "Waking up.\n");
+       __set_bit(INTERFACE_RESUME, &rt2x00dev->flags);
+
+       /*
+        * Open the debugfs entry.
+        */
+       rt2x00debug_register(rt2x00dev);
+
+       /*
+        * Reinitialize device and all active interfaces.
+        */
+       retval = rt2x00mac_start(rt2x00dev->hw);
+       if (retval)
+               goto exit;
+
+       /*
+        * Reconfigure device.
+        */
+       retval = rt2x00mac_config(rt2x00dev->hw, &rt2x00dev->hw->conf);
+       if (retval)
+               goto exit;
+
+       rt2x00lib_config_mac_addr(rt2x00dev, intf->mac);
+       rt2x00lib_config_bssid(rt2x00dev, intf->bssid);
+       rt2x00lib_config_type(rt2x00dev, intf->type);
+       rt2x00lib_config_packet_filter(rt2x00dev, intf->filter);
+
+       /*
+        * When in Master or Ad-hoc mode,
+        * restart Beacon transmitting by faking a beacondone event.
+        */
+       if (intf->type == IEEE80211_IF_TYPE_AP ||
+           intf->type == IEEE80211_IF_TYPE_IBSS)
+               rt2x00lib_beacondone(rt2x00dev);
+
+       __clear_bit(INTERFACE_RESUME, &rt2x00dev->flags);
+
+       return 0;
+
+exit:
+       rt2x00lib_disable_radio(rt2x00dev);
+       rt2x00lib_uninitialize(rt2x00dev);
+       rt2x00debug_deregister(rt2x00dev);
+
+       __clear_bit(INTERFACE_RESUME, &rt2x00dev->flags);
+
+       return retval;
+}
+EXPORT_SYMBOL_GPL(rt2x00lib_resume);
+#endif /* CONFIG_PM */
+
+/*
+ * rt2x00lib module information.
+ */
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("rt2x00 library");
+MODULE_LICENSE("GPL");
diff --git a/drivers/net/wireless/rt2x00/rt2x00firmware.c b/drivers/net/wireless/rt2x00/rt2x00firmware.c
new file mode 100644 (file)
index 0000000..236025f
--- /dev/null
@@ -0,0 +1,124 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00lib
+       Abstract: rt2x00 firmware loading routines.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2x00lib"
+
+#include <linux/crc-itu-t.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+
+#include "rt2x00.h"
+#include "rt2x00lib.h"
+
+static int rt2x00lib_request_firmware(struct rt2x00_dev *rt2x00dev)
+{
+       struct device *device = wiphy_dev(rt2x00dev->hw->wiphy);
+       const struct firmware *fw;
+       char *fw_name;
+       int retval;
+       u16 crc;
+       u16 tmp;
+
+       /*
+        * Read correct firmware from harddisk.
+        */
+       fw_name = rt2x00dev->ops->lib->get_firmware_name(rt2x00dev);
+       if (!fw_name) {
+               ERROR(rt2x00dev,
+                     "Invalid firmware filename.\n"
+                     "Please file bug report to %s.\n", DRV_PROJECT);
+               return -EINVAL;
+       }
+
+       INFO(rt2x00dev, "Loading firmware file '%s'.\n", fw_name);
+
+       retval = request_firmware(&fw, fw_name, device);
+       if (retval) {
+               ERROR(rt2x00dev, "Failed to request Firmware.\n");
+               return retval;
+       }
+
+       if (!fw || !fw->size || !fw->data) {
+               ERROR(rt2x00dev, "Failed to read Firmware.\n");
+               return -ENOENT;
+       }
+
+       /*
+        * Validate the firmware using 16 bit CRC.
+        * The last 2 bytes of the firmware are the CRC
+        * so substract those 2 bytes from the CRC checksum,
+        * and set those 2 bytes to 0 when calculating CRC.
+        */
+       tmp = 0;
+       crc = crc_itu_t(0, fw->data, fw->size - 2);
+       crc = crc_itu_t(crc, (u8 *)&tmp, 2);
+
+       if (crc != (fw->data[fw->size - 2] << 8 | fw->data[fw->size - 1])) {
+               ERROR(rt2x00dev, "Firmware CRC error.\n");
+               retval = -ENOENT;
+               goto exit;
+       }
+
+       INFO(rt2x00dev, "Firmware detected - version: %d.%d.\n",
+            fw->data[fw->size - 4], fw->data[fw->size - 3]);
+
+       rt2x00dev->fw = fw;
+
+       return 0;
+
+exit:
+       release_firmware(fw);
+
+       return retval;
+}
+
+int rt2x00lib_load_firmware(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       if (!rt2x00dev->fw) {
+               retval = rt2x00lib_request_firmware(rt2x00dev);
+               if (retval)
+                       return retval;
+       }
+
+       /*
+        * Send firmware to the device.
+        */
+       retval = rt2x00dev->ops->lib->load_firmware(rt2x00dev,
+                                                   rt2x00dev->fw->data,
+                                                   rt2x00dev->fw->size);
+       return retval;
+}
+
+void rt2x00lib_free_firmware(struct rt2x00_dev *rt2x00dev)
+{
+       release_firmware(rt2x00dev->fw);
+       rt2x00dev->fw = NULL;
+}
+
diff --git a/drivers/net/wireless/rt2x00/rt2x00lib.h b/drivers/net/wireless/rt2x00/rt2x00lib.h
new file mode 100644 (file)
index 0000000..3324090
--- /dev/null
@@ -0,0 +1,125 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00lib
+       Abstract: Data structures and definitions for the rt2x00lib module.
+ */
+
+#ifndef RT2X00LIB_H
+#define RT2X00LIB_H
+
+/*
+ * Interval defines
+ */
+#define LINK_TUNE_INTERVAL     ( round_jiffies(HZ) )
+#define RFKILL_POLL_INTERVAL   ( HZ / 4 )
+
+/*
+ * Radio control handlers.
+ */
+int rt2x00lib_enable_radio(struct rt2x00_dev *rt2x00dev);
+void rt2x00lib_disable_radio(struct rt2x00_dev *rt2x00dev);
+void rt2x00lib_toggle_rx(struct rt2x00_dev *rt2x00dev, int enable);
+void rt2x00lib_reset_link_tuner(struct rt2x00_dev *rt2x00dev);
+
+/*
+ * Initialization handlers.
+ */
+int rt2x00lib_initialize(struct rt2x00_dev *rt2x00dev);
+void rt2x00lib_uninitialize(struct rt2x00_dev *rt2x00dev);
+
+/*
+ * Configuration handlers.
+ */
+void rt2x00lib_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *mac);
+void rt2x00lib_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid);
+void rt2x00lib_config_packet_filter(struct rt2x00_dev *rt2x00dev, int filter);
+void rt2x00lib_config_type(struct rt2x00_dev *rt2x00dev, int type);
+void rt2x00lib_config(struct rt2x00_dev *rt2x00dev, struct ieee80211_conf *conf);
+
+/*
+ * Firmware handlers.
+ */
+#ifdef CONFIG_RT2X00_LIB_FIRMWARE
+int rt2x00lib_load_firmware(struct rt2x00_dev *rt2x00dev);
+void rt2x00lib_free_firmware(struct rt2x00_dev *rt2x00dev);
+#else
+static inline int rt2x00lib_load_firmware(struct rt2x00_dev *rt2x00dev)
+{
+       return 0;
+}
+static inline void rt2x00lib_free_firmware(struct rt2x00_dev *rt2x00dev)
+{
+}
+#endif /* CONFIG_RT2X00_LIB_FIRMWARE */
+
+/*
+ * Debugfs handlers.
+ */
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+void rt2x00debug_register(struct rt2x00_dev *rt2x00dev);
+void rt2x00debug_deregister(struct rt2x00_dev *rt2x00dev);
+#else
+static inline void rt2x00debug_register(struct rt2x00_dev *rt2x00dev)
+{
+}
+
+static inline void rt2x00debug_deregister(struct rt2x00_dev *rt2x00dev)
+{
+}
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+/*
+ * RFkill handlers.
+ */
+#ifdef CONFIG_RT2X00_LIB_RFKILL
+int rt2x00rfkill_register(struct rt2x00_dev *rt2x00dev);
+void rt2x00rfkill_unregister(struct rt2x00_dev *rt2x00dev);
+int rt2x00rfkill_allocate(struct rt2x00_dev *rt2x00dev);
+void rt2x00rfkill_free(struct rt2x00_dev *rt2x00dev);
+#else
+static inline int rt2x00rfkill_register(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Force enable this flag, this will assure that
+        * devices with a hardware button but without rfkill support
+        * can still use their hardware.
+        */
+       __set_bit(DEVICE_ENABLED_RADIO_HW, &rt2x00dev->flags);
+
+       return 0;
+}
+
+static inline void rt2x00rfkill_unregister(struct rt2x00_dev *rt2x00dev)
+{
+}
+
+static inline int rt2x00rfkill_allocate(struct rt2x00_dev *rt2x00dev)
+{
+       return 0;
+}
+
+static inline void rt2x00rfkill_free(struct rt2x00_dev *rt2x00dev)
+{
+}
+#endif /* CONFIG_RT2X00_LIB_RFKILL */
+
+#endif /* RT2X00LIB_H */
diff --git a/drivers/net/wireless/rt2x00/rt2x00mac.c b/drivers/net/wireless/rt2x00/rt2x00mac.c
new file mode 100644 (file)
index 0000000..778ed41
--- /dev/null
@@ -0,0 +1,459 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00mac
+       Abstract: rt2x00 generic mac80211 routines.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2x00lib"
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+
+#include "rt2x00.h"
+#include "rt2x00lib.h"
+
+static int rt2x00mac_tx_rts_cts(struct rt2x00_dev *rt2x00dev,
+                               struct data_ring *ring,
+                               struct sk_buff *frag_skb,
+                               struct ieee80211_tx_control *control)
+{
+       struct sk_buff *skb;
+       int size;
+
+       if (control->flags & IEEE80211_TXCTL_USE_CTS_PROTECT)
+               size = sizeof(struct ieee80211_cts);
+       else
+               size = sizeof(struct ieee80211_rts);
+
+       skb = dev_alloc_skb(size + rt2x00dev->hw->extra_tx_headroom);
+       if (!skb) {
+               WARNING(rt2x00dev, "Failed to create RTS/CTS frame.\n");
+               return NETDEV_TX_BUSY;
+       }
+
+       skb_reserve(skb, rt2x00dev->hw->extra_tx_headroom);
+       skb_put(skb, size);
+
+       if (control->flags & IEEE80211_TXCTL_USE_CTS_PROTECT)
+               ieee80211_ctstoself_get(rt2x00dev->hw, rt2x00dev->interface.id,
+                                       frag_skb->data, frag_skb->len, control,
+                                       (struct ieee80211_cts *)(skb->data));
+       else
+               ieee80211_rts_get(rt2x00dev->hw, rt2x00dev->interface.id,
+                                 frag_skb->data, frag_skb->len, control,
+                                 (struct ieee80211_rts *)(skb->data));
+
+       if (rt2x00dev->ops->lib->write_tx_data(rt2x00dev, ring, skb, control)) {
+               WARNING(rt2x00dev, "Failed to send RTS/CTS frame.\n");
+               return NETDEV_TX_BUSY;
+       }
+
+       return NETDEV_TX_OK;
+}
+
+int rt2x00mac_tx(struct ieee80211_hw *hw, struct sk_buff *skb,
+                struct ieee80211_tx_control *control)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       struct ieee80211_hdr *ieee80211hdr = (struct ieee80211_hdr *)skb->data;
+       struct data_ring *ring;
+       u16 frame_control;
+
+       /*
+        * Determine which ring to put packet on.
+        */
+       ring = rt2x00lib_get_ring(rt2x00dev, control->queue);
+       if (unlikely(!ring)) {
+               ERROR(rt2x00dev,
+                     "Attempt to send packet over invalid queue %d.\n"
+                     "Please file bug report to %s.\n",
+                     control->queue, DRV_PROJECT);
+               dev_kfree_skb_any(skb);
+               return NETDEV_TX_OK;
+       }
+
+       /*
+        * If CTS/RTS is required. and this frame is not CTS or RTS,
+        * create and queue that frame first. But make sure we have
+        * at least enough entries available to send this CTS/RTS
+        * frame as well as the data frame.
+        */
+       frame_control = le16_to_cpu(ieee80211hdr->frame_control);
+       if (!is_rts_frame(frame_control) && !is_cts_frame(frame_control) &&
+           (control->flags & (IEEE80211_TXCTL_USE_RTS_CTS |
+                              IEEE80211_TXCTL_USE_CTS_PROTECT))) {
+               if (rt2x00_ring_free(ring) <= 1)
+                       return NETDEV_TX_BUSY;
+
+               if (rt2x00mac_tx_rts_cts(rt2x00dev, ring, skb, control))
+                       return NETDEV_TX_BUSY;
+       }
+
+       if (rt2x00dev->ops->lib->write_tx_data(rt2x00dev, ring, skb, control))
+               return NETDEV_TX_BUSY;
+
+       if (rt2x00dev->ops->lib->kick_tx_queue)
+               rt2x00dev->ops->lib->kick_tx_queue(rt2x00dev, control->queue);
+
+       return NETDEV_TX_OK;
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_tx);
+
+int rt2x00mac_start(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       int status;
+
+       if (test_bit(DEVICE_INITIALIZED, &rt2x00dev->flags))
+               return 0;
+
+       /*
+        * If this is the first interface which is added,
+        * we should load the firmware now.
+        */
+       if (test_bit(REQUIRE_FIRMWARE, &rt2x00dev->flags)) {
+               status = rt2x00lib_load_firmware(rt2x00dev);
+               if (status)
+                       return status;
+       }
+
+       /*
+        * Initialize the device.
+        */
+       status = rt2x00lib_initialize(rt2x00dev);
+       if (status)
+               return status;
+
+       /*
+        * Enable radio.
+        */
+       status = rt2x00lib_enable_radio(rt2x00dev);
+       if (status) {
+               rt2x00lib_uninitialize(rt2x00dev);
+               return status;
+       }
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_start);
+
+void rt2x00mac_stop(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       /*
+        * Perhaps we can add something smarter here,
+        * but for now just disabling the radio should do.
+        */
+       rt2x00lib_disable_radio(rt2x00dev);
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_stop);
+
+int rt2x00mac_add_interface(struct ieee80211_hw *hw,
+                           struct ieee80211_if_init_conf *conf)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       struct interface *intf = &rt2x00dev->interface;
+       int retval;
+
+       /*
+        * We only support 1 non-monitor interface.
+        */
+       if (conf->type != IEEE80211_IF_TYPE_MNTR && is_interface_present(intf))
+               return -ENOBUFS;
+
+       /*
+        * HACK: Placeholder until start/stop handler has been
+        * added to the mac80211 callback functions structure.
+        */
+       retval = rt2x00mac_start(hw);
+       if (retval)
+               return retval;
+
+       /*
+        * We support muliple monitor mode interfaces.
+        * All we need to do is increase the monitor_count.
+        */
+       if (conf->type == IEEE80211_IF_TYPE_MNTR) {
+               intf->monitor_count++;
+       } else {
+               intf->id = conf->if_id;
+               intf->type = conf->type;
+               if (conf->type == IEEE80211_IF_TYPE_AP)
+                       memcpy(&intf->bssid, conf->mac_addr, ETH_ALEN);
+               memcpy(&intf->mac, conf->mac_addr, ETH_ALEN);
+               intf->filter = 0;
+       }
+
+       /*
+        * Configure interface.
+        * The MAC adddress must be configured after the device
+        * has been initialized. Else the device can reset the
+        * MAC registers.
+        */
+       rt2x00lib_config_mac_addr(rt2x00dev, intf->mac);
+       rt2x00lib_config_type(rt2x00dev, conf->type);
+       rt2x00lib_config_packet_filter(rt2x00dev, intf->filter);
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_add_interface);
+
+void rt2x00mac_remove_interface(struct ieee80211_hw *hw,
+                               struct ieee80211_if_init_conf *conf)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       struct interface *intf = &rt2x00dev->interface;
+
+       /*
+        * We only support 1 non-monitor interface.
+        */
+       if (conf->type != IEEE80211_IF_TYPE_MNTR && !is_interface_present(intf))
+               return;
+
+       /*
+        * When removing an monitor interface, decrease monitor_count.
+        * For non-monitor interfaces, all interface data needs to be reset.
+        */
+       if (conf->type == IEEE80211_IF_TYPE_MNTR) {
+               intf->monitor_count--;
+       } else if (intf->type == conf->type) {
+               intf->id = 0;
+               intf->type = INVALID_INTERFACE;
+               memset(&intf->bssid, 0x00, ETH_ALEN);
+               memset(&intf->mac, 0x00, ETH_ALEN);
+               intf->filter = 0;
+       }
+
+       /*
+        * Make sure the bssid and mac address registers
+        * are cleared to prevent false ACKing of frames.
+        */
+       rt2x00lib_config_mac_addr(rt2x00dev, intf->mac);
+       rt2x00lib_config_bssid(rt2x00dev, intf->bssid);
+       rt2x00lib_config_type(rt2x00dev, intf->type);
+
+       /*
+        * HACK: Placeholder untill start/stop handler has been
+        * added to the mac80211 callback functions structure.
+        */
+       rt2x00mac_stop(hw);
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_remove_interface);
+
+int rt2x00mac_config(struct ieee80211_hw *hw, struct ieee80211_conf *conf)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       /*
+        * If the device is not initialized we shouldn't accept
+        * any configuration changes. Mac80211 might be calling
+        * this function while we are trying to remove the device
+        * or perhaps suspending it.
+        */
+       if (!test_bit(DEVICE_INITIALIZED, &rt2x00dev->flags))
+               return 0;
+
+       /*
+        * Check if we need to disable the radio,
+        * if this is not the case, at least the RX must be disabled.
+        */
+       if (test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags)) {
+               if (!conf->radio_enabled)
+                       rt2x00lib_disable_radio(rt2x00dev);
+               else
+                       rt2x00lib_toggle_rx(rt2x00dev, 0);
+       }
+
+       rt2x00lib_config(rt2x00dev, conf);
+
+       /*
+        * If promisc mode cannot be configured in irq context,
+        * then it is now the time to configure it.
+        */
+       if (test_bit(PACKET_FILTER_SCHEDULED, &rt2x00dev->flags))
+               rt2x00lib_config_packet_filter(rt2x00dev,
+                                              rt2x00dev->interface.filter);
+
+       /*
+        * Reenable RX only if the radio should be on.
+        */
+       if (test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags))
+               rt2x00lib_toggle_rx(rt2x00dev, 1);
+       else if (conf->radio_enabled)
+               return rt2x00lib_enable_radio(rt2x00dev);
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_config);
+
+int rt2x00mac_config_interface(struct ieee80211_hw *hw, int if_id,
+                              struct ieee80211_if_conf *conf)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       struct interface *intf = &rt2x00dev->interface;
+       int status;
+
+       /*
+        * If the device is not initialized we shouldn't accept
+        * any configuration changes. Mac80211 might be calling
+        * this function while we are trying to remove the device
+        * or perhaps suspending it.
+        */
+       if (!test_bit(DEVICE_INITIALIZED, &rt2x00dev->flags))
+               return 0;
+
+       /*
+        * Monitor mode does not need configuring.
+        * If the given type does not match the configured type,
+        * there has been a problem.
+        */
+       if (conf->type == IEEE80211_IF_TYPE_MNTR)
+               return 0;
+       else if (conf->type != intf->type)
+               return -EINVAL;
+
+       /*
+        * If the interface does not work in master mode,
+        * then the bssid value in the interface structure
+        * should now be set.
+        */
+       if (conf->type != IEEE80211_IF_TYPE_AP)
+               memcpy(&intf->bssid, conf->bssid, ETH_ALEN);
+       rt2x00lib_config_bssid(rt2x00dev, intf->bssid);
+
+       /*
+        * We only need to initialize the beacon when master mode is enabled.
+        */
+       if (conf->type != IEEE80211_IF_TYPE_AP || !conf->beacon)
+               return 0;
+
+       status = rt2x00dev->ops->hw->beacon_update(rt2x00dev->hw,
+                                                  conf->beacon,
+                                                  conf->beacon_control);
+       if (status)
+               dev_kfree_skb(conf->beacon);
+
+       return status;
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_config_interface);
+
+void rt2x00mac_set_multicast_list(struct ieee80211_hw *hw,
+                                 unsigned short flags, int mc_count)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       /*
+        * Check if the new state is different then the old state.
+        */
+       if (rt2x00dev->interface.filter == flags)
+               return;
+
+       rt2x00dev->interface.filter = flags;
+
+       /*
+        * Raise the pending bit to indicate the
+        * packet filter should be updated.
+        */
+       __set_bit(PACKET_FILTER_PENDING, &rt2x00dev->flags);
+
+       /*
+        * Check if Packet filter actions are allowed in
+        * atomic context. If not, raise the pending flag and
+        * let it be.
+        */
+       if (!test_bit(PACKET_FILTER_SCHEDULED, &rt2x00dev->flags) ||
+           !in_atomic())
+               rt2x00lib_config_packet_filter(rt2x00dev, flags);
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_set_multicast_list);
+
+int rt2x00mac_get_stats(struct ieee80211_hw *hw,
+                       struct ieee80211_low_level_stats *stats)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       /*
+        * The dot11ACKFailureCount, dot11RTSFailureCount and
+        * dot11RTSSuccessCount are updated in interrupt time.
+        * dot11FCSErrorCount is updated in the link tuner.
+        */
+       memcpy(stats, &rt2x00dev->low_level_stats, sizeof(*stats));
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_get_stats);
+
+int rt2x00mac_get_tx_stats(struct ieee80211_hw *hw,
+                          struct ieee80211_tx_queue_stats *stats)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       unsigned int i;
+
+       for (i = 0; i < hw->queues; i++)
+               memcpy(&stats->data[i], &rt2x00dev->tx[i].stats,
+                      sizeof(rt2x00dev->tx[i].stats));
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_get_tx_stats);
+
+int rt2x00mac_conf_tx(struct ieee80211_hw *hw, int queue,
+                     const struct ieee80211_tx_queue_params *params)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       struct data_ring *ring;
+
+       ring = rt2x00lib_get_ring(rt2x00dev, queue);
+       if (unlikely(!ring))
+               return -EINVAL;
+
+       /*
+        * The passed variables are stored as real value ((2^n)-1).
+        * Ralink registers require to know the bit number 'n'.
+        */
+       if (params->cw_min)
+               ring->tx_params.cw_min = fls(params->cw_min);
+       else
+               ring->tx_params.cw_min = 5; /* cw_min: 2^5 = 32. */
+
+       if (params->cw_max)
+               ring->tx_params.cw_max = fls(params->cw_max);
+       else
+               ring->tx_params.cw_max = 10; /* cw_min: 2^10 = 1024. */
+
+       if (params->aifs)
+               ring->tx_params.aifs = params->aifs;
+       else
+               ring->tx_params.aifs = 2;
+
+       INFO(rt2x00dev,
+            "Configured TX ring %d - CWmin: %d, CWmax: %d, Aifs: %d.\n",
+            queue, ring->tx_params.cw_min, ring->tx_params.cw_max,
+            ring->tx_params.aifs);
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00mac_conf_tx);
diff --git a/drivers/net/wireless/rt2x00/rt2x00pci.c b/drivers/net/wireless/rt2x00/rt2x00pci.c
new file mode 100644 (file)
index 0000000..85629f1
--- /dev/null
@@ -0,0 +1,481 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00pci
+       Abstract: rt2x00 generic pci device routines.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2x00pci"
+
+#include <linux/dma-mapping.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/pci.h>
+
+#include "rt2x00.h"
+#include "rt2x00pci.h"
+
+/*
+ * Beacon handlers.
+ */
+int rt2x00pci_beacon_update(struct ieee80211_hw *hw, struct sk_buff *skb,
+                           struct ieee80211_tx_control *control)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       struct data_ring *ring =
+           rt2x00lib_get_ring(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+       struct data_entry *entry = rt2x00_get_data_entry(ring);
+
+       /*
+        * Just in case mac80211 doesn't set this correctly,
+        * but we need this queue set for the descriptor
+        * initialization.
+        */
+       control->queue = IEEE80211_TX_QUEUE_BEACON;
+
+       /*
+        * Update the beacon entry.
+        */
+       memcpy(entry->data_addr, skb->data, skb->len);
+       rt2x00lib_write_tx_desc(rt2x00dev, entry->priv,
+                               (struct ieee80211_hdr *)skb->data,
+                               skb->len, control);
+
+       /*
+        * Enable beacon generation.
+        */
+       rt2x00dev->ops->lib->kick_tx_queue(rt2x00dev, control->queue);
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00pci_beacon_update);
+
+/*
+ * TX data handlers.
+ */
+int rt2x00pci_write_tx_data(struct rt2x00_dev *rt2x00dev,
+                           struct data_ring *ring, struct sk_buff *skb,
+                           struct ieee80211_tx_control *control)
+{
+       struct ieee80211_hdr *ieee80211hdr = (struct ieee80211_hdr *)skb->data;
+       struct data_entry *entry = rt2x00_get_data_entry(ring);
+       struct data_desc *txd = entry->priv;
+       u32 word;
+
+       if (rt2x00_ring_full(ring)) {
+               ieee80211_stop_queue(rt2x00dev->hw, control->queue);
+               return -EINVAL;
+       }
+
+       rt2x00_desc_read(txd, 0, &word);
+
+       if (rt2x00_get_field32(word, TXD_ENTRY_OWNER_NIC) ||
+           rt2x00_get_field32(word, TXD_ENTRY_VALID)) {
+               ERROR(rt2x00dev,
+                     "Arrived at non-free entry in the non-full queue %d.\n"
+                     "Please file bug report to %s.\n",
+                     control->queue, DRV_PROJECT);
+               ieee80211_stop_queue(rt2x00dev->hw, control->queue);
+               return -EINVAL;
+       }
+
+       entry->skb = skb;
+       memcpy(&entry->tx_status.control, control, sizeof(*control));
+       memcpy(entry->data_addr, skb->data, skb->len);
+       rt2x00lib_write_tx_desc(rt2x00dev, txd, ieee80211hdr,
+                               skb->len, control);
+
+       rt2x00_ring_index_inc(ring);
+
+       if (rt2x00_ring_full(ring))
+               ieee80211_stop_queue(rt2x00dev->hw, control->queue);
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00pci_write_tx_data);
+
+/*
+ * RX data handlers.
+ */
+void rt2x00pci_rxdone(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring = rt2x00dev->rx;
+       struct data_entry *entry;
+       struct data_desc *rxd;
+       struct sk_buff *skb;
+       u32 desc;
+       int retval;
+       int signal;
+       int rssi;
+       int ofdm;
+       int size;
+
+       while (1) {
+               entry = rt2x00_get_data_entry(ring);
+               rxd = entry->priv;
+               rt2x00_desc_read(rxd, 0, &desc);
+
+               if (rt2x00_get_field32(desc, RXD_ENTRY_OWNER_NIC))
+                       break;
+
+               retval = rt2x00dev->ops->lib->fill_rxdone(entry, &signal,
+                                                         &rssi, &ofdm, &size);
+               if (retval)
+                       goto skip_entry;
+
+               /*
+                * Allocate the sk_buffer, initialize it and copy
+                * all data into it.
+                */
+               skb = dev_alloc_skb(size + NET_IP_ALIGN);
+               if (!skb)
+                       return;
+
+               skb_reserve(skb, NET_IP_ALIGN);
+               skb_put(skb, size);
+               memcpy(skb->data, entry->data_addr, size);
+
+               /*
+                * Send the frame to rt2x00lib for further processing.
+                */
+               rt2x00lib_rxdone(entry, skb, signal, rssi, ofdm);
+
+skip_entry:
+               if (test_bit(DEVICE_ENABLED_RADIO, &ring->rt2x00dev->flags)) {
+                       rt2x00_set_field32(&desc, RXD_ENTRY_OWNER_NIC, 1);
+                       rt2x00_desc_write(rxd, 0, desc);
+               }
+
+               rt2x00_ring_index_inc(ring);
+       }
+}
+EXPORT_SYMBOL_GPL(rt2x00pci_rxdone);
+
+/*
+ * Device initialization handlers.
+ */
+#define priv_offset(__ring, __i)                               \
+({                                                             \
+       ring->data_addr + (i * ring->desc_size);                \
+})
+
+#define data_addr_offset(__ring, __i)                          \
+({                                                             \
+       (__ring)->data_addr +                                   \
+           ((__ring)->stats.limit * (__ring)->desc_size) +     \
+           ((__i) * (__ring)->data_size);                      \
+})
+
+#define data_dma_offset(__ring, __i)                           \
+({                                                             \
+       (__ring)->data_dma +                                    \
+           ((__ring)->stats.limit * (__ring)->desc_size) +     \
+           ((__i) * (__ring)->data_size);                      \
+})
+
+static int rt2x00pci_alloc_dma(struct rt2x00_dev *rt2x00dev,
+                              struct data_ring *ring)
+{
+       unsigned int i;
+
+       /*
+        * Allocate DMA memory for descriptor and buffer.
+        */
+       ring->data_addr = pci_alloc_consistent(rt2x00dev_pci(rt2x00dev),
+                                              rt2x00_get_ring_size(ring),
+                                              &ring->data_dma);
+       if (!ring->data_addr)
+               return -ENOMEM;
+
+       /*
+        * Initialize all ring entries to contain valid
+        * addresses.
+        */
+       for (i = 0; i < ring->stats.limit; i++) {
+               ring->entry[i].priv = priv_offset(ring, i);
+               ring->entry[i].data_addr = data_addr_offset(ring, i);
+               ring->entry[i].data_dma = data_dma_offset(ring, i);
+       }
+
+       return 0;
+}
+
+static void rt2x00pci_free_dma(struct rt2x00_dev *rt2x00dev,
+                              struct data_ring *ring)
+{
+       if (ring->data_addr)
+               pci_free_consistent(rt2x00dev_pci(rt2x00dev),
+                                   rt2x00_get_ring_size(ring),
+                                   ring->data_addr, ring->data_dma);
+       ring->data_addr = NULL;
+}
+
+int rt2x00pci_initialize(struct rt2x00_dev *rt2x00dev)
+{
+       struct pci_dev *pci_dev = rt2x00dev_pci(rt2x00dev);
+       struct data_ring *ring;
+       int status;
+
+       /*
+        * Allocate DMA
+        */
+       ring_for_each(rt2x00dev, ring) {
+               status = rt2x00pci_alloc_dma(rt2x00dev, ring);
+               if (status)
+                       goto exit;
+       }
+
+       /*
+        * Register interrupt handler.
+        */
+       status = request_irq(pci_dev->irq, rt2x00dev->ops->lib->irq_handler,
+                            IRQF_SHARED, pci_name(pci_dev), rt2x00dev);
+       if (status) {
+               ERROR(rt2x00dev, "IRQ %d allocation failed (error %d).\n",
+                     pci_dev->irq, status);
+               return status;
+       }
+
+       return 0;
+
+exit:
+       rt2x00pci_uninitialize(rt2x00dev);
+
+       return status;
+}
+EXPORT_SYMBOL_GPL(rt2x00pci_initialize);
+
+void rt2x00pci_uninitialize(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring;
+
+       /*
+        * Free irq line.
+        */
+       free_irq(rt2x00dev_pci(rt2x00dev)->irq, rt2x00dev);
+
+       /*
+        * Free DMA
+        */
+       ring_for_each(rt2x00dev, ring)
+               rt2x00pci_free_dma(rt2x00dev, ring);
+}
+EXPORT_SYMBOL_GPL(rt2x00pci_uninitialize);
+
+/*
+ * PCI driver handlers.
+ */
+static void rt2x00pci_free_reg(struct rt2x00_dev *rt2x00dev)
+{
+       kfree(rt2x00dev->rf);
+       rt2x00dev->rf = NULL;
+
+       kfree(rt2x00dev->eeprom);
+       rt2x00dev->eeprom = NULL;
+
+       if (rt2x00dev->csr_addr) {
+               iounmap(rt2x00dev->csr_addr);
+               rt2x00dev->csr_addr = NULL;
+       }
+}
+
+static int rt2x00pci_alloc_reg(struct rt2x00_dev *rt2x00dev)
+{
+       struct pci_dev *pci_dev = rt2x00dev_pci(rt2x00dev);
+
+       rt2x00dev->csr_addr = ioremap(pci_resource_start(pci_dev, 0),
+                                     pci_resource_len(pci_dev, 0));
+       if (!rt2x00dev->csr_addr)
+               goto exit;
+
+       rt2x00dev->eeprom = kzalloc(rt2x00dev->ops->eeprom_size, GFP_KERNEL);
+       if (!rt2x00dev->eeprom)
+               goto exit;
+
+       rt2x00dev->rf = kzalloc(rt2x00dev->ops->rf_size, GFP_KERNEL);
+       if (!rt2x00dev->rf)
+               goto exit;
+
+       return 0;
+
+exit:
+       ERROR_PROBE("Failed to allocate registers.\n");
+
+       rt2x00pci_free_reg(rt2x00dev);
+
+       return -ENOMEM;
+}
+
+int rt2x00pci_probe(struct pci_dev *pci_dev, const struct pci_device_id *id)
+{
+       struct rt2x00_ops *ops = (struct rt2x00_ops *)id->driver_data;
+       struct ieee80211_hw *hw;
+       struct rt2x00_dev *rt2x00dev;
+       int retval;
+
+       retval = pci_request_regions(pci_dev, pci_name(pci_dev));
+       if (retval) {
+               ERROR_PROBE("PCI request regions failed.\n");
+               return retval;
+       }
+
+       retval = pci_enable_device(pci_dev);
+       if (retval) {
+               ERROR_PROBE("Enable device failed.\n");
+               goto exit_release_regions;
+       }
+
+       pci_set_master(pci_dev);
+
+       if (pci_set_mwi(pci_dev))
+               ERROR_PROBE("MWI not available.\n");
+
+       if (pci_set_dma_mask(pci_dev, DMA_64BIT_MASK) &&
+           pci_set_dma_mask(pci_dev, DMA_32BIT_MASK)) {
+               ERROR_PROBE("PCI DMA not supported.\n");
+               retval = -EIO;
+               goto exit_disable_device;
+       }
+
+       hw = ieee80211_alloc_hw(sizeof(struct rt2x00_dev), ops->hw);
+       if (!hw) {
+               ERROR_PROBE("Failed to allocate hardware.\n");
+               retval = -ENOMEM;
+               goto exit_disable_device;
+       }
+
+       pci_set_drvdata(pci_dev, hw);
+
+       rt2x00dev = hw->priv;
+       rt2x00dev->dev = pci_dev;
+       rt2x00dev->ops = ops;
+       rt2x00dev->hw = hw;
+
+       retval = rt2x00pci_alloc_reg(rt2x00dev);
+       if (retval)
+               goto exit_free_device;
+
+       retval = rt2x00lib_probe_dev(rt2x00dev);
+       if (retval)
+               goto exit_free_reg;
+
+       return 0;
+
+exit_free_reg:
+       rt2x00pci_free_reg(rt2x00dev);
+
+exit_free_device:
+       ieee80211_free_hw(hw);
+
+exit_disable_device:
+       if (retval != -EBUSY)
+               pci_disable_device(pci_dev);
+
+exit_release_regions:
+       pci_release_regions(pci_dev);
+
+       pci_set_drvdata(pci_dev, NULL);
+
+       return retval;
+}
+EXPORT_SYMBOL_GPL(rt2x00pci_probe);
+
+void rt2x00pci_remove(struct pci_dev *pci_dev)
+{
+       struct ieee80211_hw *hw = pci_get_drvdata(pci_dev);
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       /*
+        * Free all allocated data.
+        */
+       rt2x00lib_remove_dev(rt2x00dev);
+       rt2x00pci_free_reg(rt2x00dev);
+       ieee80211_free_hw(hw);
+
+       /*
+        * Free the PCI device data.
+        */
+       pci_set_drvdata(pci_dev, NULL);
+       pci_disable_device(pci_dev);
+       pci_release_regions(pci_dev);
+}
+EXPORT_SYMBOL_GPL(rt2x00pci_remove);
+
+#ifdef CONFIG_PM
+int rt2x00pci_suspend(struct pci_dev *pci_dev, pm_message_t state)
+{
+       struct ieee80211_hw *hw = pci_get_drvdata(pci_dev);
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       int retval;
+
+       retval = rt2x00lib_suspend(rt2x00dev, state);
+       if (retval)
+               return retval;
+
+       rt2x00pci_free_reg(rt2x00dev);
+
+       pci_save_state(pci_dev);
+       pci_disable_device(pci_dev);
+       return pci_set_power_state(pci_dev, pci_choose_state(pci_dev, state));
+}
+EXPORT_SYMBOL_GPL(rt2x00pci_suspend);
+
+int rt2x00pci_resume(struct pci_dev *pci_dev)
+{
+       struct ieee80211_hw *hw = pci_get_drvdata(pci_dev);
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       int retval;
+
+       if (pci_set_power_state(pci_dev, PCI_D0) ||
+           pci_enable_device(pci_dev) ||
+           pci_restore_state(pci_dev)) {
+               ERROR(rt2x00dev, "Failed to resume device.\n");
+               return -EIO;
+       }
+
+       retval = rt2x00pci_alloc_reg(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt2x00lib_resume(rt2x00dev);
+       if (retval)
+               goto exit_free_reg;
+
+       return 0;
+
+exit_free_reg:
+       rt2x00pci_free_reg(rt2x00dev);
+
+       return retval;
+}
+EXPORT_SYMBOL_GPL(rt2x00pci_resume);
+#endif /* CONFIG_PM */
+
+/*
+ * rt2x00pci module information.
+ */
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("rt2x00 library");
+MODULE_LICENSE("GPL");
diff --git a/drivers/net/wireless/rt2x00/rt2x00pci.h b/drivers/net/wireless/rt2x00/rt2x00pci.h
new file mode 100644 (file)
index 0000000..82adeac
--- /dev/null
@@ -0,0 +1,127 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00pci
+       Abstract: Data structures for the rt2x00pci module.
+ */
+
+#ifndef RT2X00PCI_H
+#define RT2X00PCI_H
+
+#include <linux/io.h>
+
+/*
+ * This variable should be used with the
+ * pci_driver structure initialization.
+ */
+#define PCI_DEVICE_DATA(__ops) .driver_data = (kernel_ulong_t)(__ops)
+
+/*
+ * Register defines.
+ * Some registers require multiple attempts before success,
+ * in those cases REGISTER_BUSY_COUNT attempts should be
+ * taken with a REGISTER_BUSY_DELAY interval.
+ */
+#define REGISTER_BUSY_COUNT    5
+#define REGISTER_BUSY_DELAY    100
+
+/*
+ * Descriptor availability flags.
+ * All PCI device descriptors have these 2 flags
+ * with the exact same definition.
+ * By storing them here we can use them inside rt2x00pci
+ * for some simple entry availability checking.
+ */
+#define TXD_ENTRY_OWNER_NIC    FIELD32(0x00000001)
+#define TXD_ENTRY_VALID                FIELD32(0x00000002)
+#define RXD_ENTRY_OWNER_NIC    FIELD32(0x00000001)
+
+/*
+ * Register access.
+ */
+static inline void rt2x00pci_register_read(const struct rt2x00_dev *rt2x00dev,
+                                          const unsigned long offset,
+                                          u32 *value)
+{
+       *value = readl(rt2x00dev->csr_addr + offset);
+}
+
+static inline void
+rt2x00pci_register_multiread(const struct rt2x00_dev *rt2x00dev,
+                            const unsigned long offset,
+                            void *value, const u16 length)
+{
+       memcpy_fromio(value, rt2x00dev->csr_addr + offset, length);
+}
+
+static inline void rt2x00pci_register_write(const struct rt2x00_dev *rt2x00dev,
+                                           const unsigned long offset,
+                                           u32 value)
+{
+       writel(value, rt2x00dev->csr_addr + offset);
+}
+
+static inline void
+rt2x00pci_register_multiwrite(const struct rt2x00_dev *rt2x00dev,
+                             const unsigned long offset,
+                             void *value, const u16 length)
+{
+       memcpy_toio(rt2x00dev->csr_addr + offset, value, length);
+}
+
+/*
+ * Beacon handlers.
+ */
+int rt2x00pci_beacon_update(struct ieee80211_hw *hw, struct sk_buff *skb,
+                           struct ieee80211_tx_control *control);
+
+/*
+ * TX data handlers.
+ */
+int rt2x00pci_write_tx_data(struct rt2x00_dev *rt2x00dev,
+                           struct data_ring *ring, struct sk_buff *skb,
+                           struct ieee80211_tx_control *control);
+
+/*
+ * RX data handlers.
+ */
+void rt2x00pci_rxdone(struct rt2x00_dev *rt2x00dev);
+
+/*
+ * Device initialization handlers.
+ */
+int rt2x00pci_initialize(struct rt2x00_dev *rt2x00dev);
+void rt2x00pci_uninitialize(struct rt2x00_dev *rt2x00dev);
+
+/*
+ * PCI driver handlers.
+ */
+int rt2x00pci_probe(struct pci_dev *pci_dev, const struct pci_device_id *id);
+void rt2x00pci_remove(struct pci_dev *pci_dev);
+#ifdef CONFIG_PM
+int rt2x00pci_suspend(struct pci_dev *pci_dev, pm_message_t state);
+int rt2x00pci_resume(struct pci_dev *pci_dev);
+#else
+#define rt2x00pci_suspend      NULL
+#define rt2x00pci_resume       NULL
+#endif /* CONFIG_PM */
+
+#endif /* RT2X00PCI_H */
diff --git a/drivers/net/wireless/rt2x00/rt2x00reg.h b/drivers/net/wireless/rt2x00/rt2x00reg.h
new file mode 100644 (file)
index 0000000..7927d5f
--- /dev/null
@@ -0,0 +1,283 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00
+       Abstract: rt2x00 generic register information.
+ */
+
+#ifndef RT2X00REG_H
+#define RT2X00REG_H
+
+/*
+ * TX result flags.
+ */
+enum TX_STATUS {
+       TX_SUCCESS = 0,
+       TX_SUCCESS_RETRY = 1,
+       TX_FAIL_RETRY = 2,
+       TX_FAIL_INVALID = 3,
+       TX_FAIL_OTHER = 4,
+};
+
+/*
+ * Antenna values
+ */
+enum antenna {
+       ANTENNA_SW_DIVERSITY = 0,
+       ANTENNA_A = 1,
+       ANTENNA_B = 2,
+       ANTENNA_HW_DIVERSITY = 3,
+};
+
+/*
+ * Led mode values.
+ */
+enum led_mode {
+       LED_MODE_DEFAULT = 0,
+       LED_MODE_TXRX_ACTIVITY = 1,
+       LED_MODE_SIGNAL_STRENGTH = 2,
+       LED_MODE_ASUS = 3,
+       LED_MODE_ALPHA = 4,
+};
+
+/*
+ * Device states
+ */
+enum dev_state {
+       STATE_DEEP_SLEEP = 0,
+       STATE_SLEEP = 1,
+       STATE_STANDBY = 2,
+       STATE_AWAKE = 3,
+
+/*
+ * Additional device states, these values are
+ * not strict since they are not directly passed
+ * into the device.
+ */
+       STATE_RADIO_ON,
+       STATE_RADIO_OFF,
+       STATE_RADIO_RX_ON,
+       STATE_RADIO_RX_OFF,
+       STATE_RADIO_IRQ_ON,
+       STATE_RADIO_IRQ_OFF,
+};
+
+/*
+ * IFS backoff values
+ */
+enum ifs {
+       IFS_BACKOFF = 0,
+       IFS_SIFS = 1,
+       IFS_NEW_BACKOFF = 2,
+       IFS_NONE = 3,
+};
+
+/*
+ * Cipher types for hardware encryption
+ */
+enum cipher {
+       CIPHER_NONE = 0,
+       CIPHER_WEP64 = 1,
+       CIPHER_WEP128 = 2,
+       CIPHER_TKIP = 3,
+       CIPHER_AES = 4,
+/*
+ * The following fields were added by rt61pci and rt73usb.
+ */
+       CIPHER_CKIP64 = 5,
+       CIPHER_CKIP128 = 6,
+       CIPHER_TKIP_NO_MIC = 7,
+};
+
+/*
+ * Register handlers.
+ * We store the position of a register field inside a field structure,
+ * This will simplify the process of setting and reading a certain field
+ * inside the register while making sure the process remains byte order safe.
+ */
+struct rt2x00_field8 {
+       u8 bit_offset;
+       u8 bit_mask;
+};
+
+struct rt2x00_field16 {
+       u16 bit_offset;
+       u16 bit_mask;
+};
+
+struct rt2x00_field32 {
+       u32 bit_offset;
+       u32 bit_mask;
+};
+
+/*
+ * Power of two check, this will check
+ * if the mask that has been given contains
+ * and contiguous set of bits.
+ */
+#define is_power_of_two(x)     ( !((x) & ((x)-1)) )
+#define low_bit_mask(x)                ( ((x)-1) & ~(x) )
+#define is_valid_mask(x)       is_power_of_two(1 + (x) + low_bit_mask(x))
+
+#define FIELD8(__mask)                         \
+({                                             \
+       BUILD_BUG_ON(!(__mask) ||               \
+                    !is_valid_mask(__mask) ||  \
+                    (__mask) != (u8)(__mask)); \
+       (struct rt2x00_field8) {                \
+               __ffs(__mask), (__mask)         \
+       };                                      \
+})
+
+#define FIELD16(__mask)                                \
+({                                             \
+       BUILD_BUG_ON(!(__mask) ||               \
+                    !is_valid_mask(__mask) ||  \
+                    (__mask) != (u16)(__mask));\
+       (struct rt2x00_field16) {               \
+               __ffs(__mask), (__mask)         \
+       };                                      \
+})
+
+#define FIELD32(__mask)                                \
+({                                             \
+       BUILD_BUG_ON(!(__mask) ||               \
+                    !is_valid_mask(__mask) ||  \
+                    (__mask) != (u32)(__mask));\
+       (struct rt2x00_field32) {               \
+               __ffs(__mask), (__mask)         \
+       };                                      \
+})
+
+static inline void rt2x00_set_field32(u32 *reg,
+                                     const struct rt2x00_field32 field,
+                                     const u32 value)
+{
+       *reg &= ~(field.bit_mask);
+       *reg |= (value << field.bit_offset) & field.bit_mask;
+}
+
+static inline u32 rt2x00_get_field32(const u32 reg,
+                                    const struct rt2x00_field32 field)
+{
+       return (reg & field.bit_mask) >> field.bit_offset;
+}
+
+static inline void rt2x00_set_field16(u16 *reg,
+                                     const struct rt2x00_field16 field,
+                                     const u16 value)
+{
+       *reg &= ~(field.bit_mask);
+       *reg |= (value << field.bit_offset) & field.bit_mask;
+}
+
+static inline u16 rt2x00_get_field16(const u16 reg,
+                                    const struct rt2x00_field16 field)
+{
+       return (reg & field.bit_mask) >> field.bit_offset;
+}
+
+static inline void rt2x00_set_field8(u8 *reg,
+                                    const struct rt2x00_field8 field,
+                                    const u8 value)
+{
+       *reg &= ~(field.bit_mask);
+       *reg |= (value << field.bit_offset) & field.bit_mask;
+}
+
+static inline u8 rt2x00_get_field8(const u8 reg,
+                                  const struct rt2x00_field8 field)
+{
+       return (reg & field.bit_mask) >> field.bit_offset;
+}
+
+/*
+ * Device specific rate value.
+ * We will have to create the device specific rate value
+ * passed to the ieee80211 kernel. We need to make it a consist of
+ * multiple fields because we want to store more then 1 device specific
+ * values inside the value.
+ *     1 - rate, stored as 100 kbit/s.
+ *     2 - preamble, short_preamble enabled flag.
+ *     3 - MASK_RATE, which rates are enabled in this mode, this mask
+ *     corresponds with the TX register format for the current device.
+ *     4 - plcp, 802.11b rates are device specific,
+ *     802.11g rates are set according to the ieee802.11a-1999 p.14.
+ * The bit to enable preamble is set in a seperate define.
+ */
+#define DEV_RATE       FIELD32(0x000007ff)
+#define DEV_PREAMBLE   FIELD32(0x00000800)
+#define DEV_RATEMASK   FIELD32(0x00fff000)
+#define DEV_PLCP       FIELD32(0xff000000)
+
+/*
+ * Bitfields
+ */
+#define DEV_RATEBIT_1MB                ( 1 << 0 )
+#define DEV_RATEBIT_2MB                ( 1 << 1 )
+#define DEV_RATEBIT_5_5MB      ( 1 << 2 )
+#define DEV_RATEBIT_11MB       ( 1 << 3 )
+#define DEV_RATEBIT_6MB                ( 1 << 4 )
+#define DEV_RATEBIT_9MB                ( 1 << 5 )
+#define DEV_RATEBIT_12MB       ( 1 << 6 )
+#define DEV_RATEBIT_18MB       ( 1 << 7 )
+#define DEV_RATEBIT_24MB       ( 1 << 8 )
+#define DEV_RATEBIT_36MB       ( 1 << 9 )
+#define DEV_RATEBIT_48MB       ( 1 << 10 )
+#define DEV_RATEBIT_54MB       ( 1 << 11 )
+
+/*
+ * Bitmasks for DEV_RATEMASK
+ */
+#define DEV_RATEMASK_1MB       ( (DEV_RATEBIT_1MB << 1) -1 )
+#define DEV_RATEMASK_2MB       ( (DEV_RATEBIT_2MB << 1) -1 )
+#define DEV_RATEMASK_5_5MB     ( (DEV_RATEBIT_5_5MB << 1) -1 )
+#define DEV_RATEMASK_11MB      ( (DEV_RATEBIT_11MB << 1) -1 )
+#define DEV_RATEMASK_6MB       ( (DEV_RATEBIT_6MB << 1) -1 )
+#define DEV_RATEMASK_9MB       ( (DEV_RATEBIT_9MB << 1) -1 )
+#define DEV_RATEMASK_12MB      ( (DEV_RATEBIT_12MB << 1) -1 )
+#define DEV_RATEMASK_18MB      ( (DEV_RATEBIT_18MB << 1) -1 )
+#define DEV_RATEMASK_24MB      ( (DEV_RATEBIT_24MB << 1) -1 )
+#define DEV_RATEMASK_36MB      ( (DEV_RATEBIT_36MB << 1) -1 )
+#define DEV_RATEMASK_48MB      ( (DEV_RATEBIT_48MB << 1) -1 )
+#define DEV_RATEMASK_54MB      ( (DEV_RATEBIT_54MB << 1) -1 )
+
+/*
+ * Bitmask groups of bitrates
+ */
+#define DEV_BASIC_RATEMASK \
+       ( DEV_RATEMASK_11MB | \
+         DEV_RATEBIT_6MB | DEV_RATEBIT_12MB | DEV_RATEBIT_24MB )
+
+#define DEV_CCK_RATEMASK       ( DEV_RATEMASK_11MB )
+#define DEV_OFDM_RATEMASK      ( DEV_RATEMASK_54MB & ~DEV_CCK_RATEMASK )
+
+/*
+ * Macro's to set and get specific fields from the device specific val and val2
+ * fields inside the ieee80211_rate entry.
+ */
+#define DEVICE_SET_RATE_FIELD(__value, __mask) \
+       (int)( ((__value) << DEV_##__mask.bit_offset) & DEV_##__mask.bit_mask )
+
+#define DEVICE_GET_RATE_FIELD(__value, __mask) \
+       (int)( ((__value) & DEV_##__mask.bit_mask) >> DEV_##__mask.bit_offset )
+
+#endif /* RT2X00REG_H */
diff --git a/drivers/net/wireless/rt2x00/rt2x00rfkill.c b/drivers/net/wireless/rt2x00/rt2x00rfkill.c
new file mode 100644 (file)
index 0000000..dc5b696
--- /dev/null
@@ -0,0 +1,148 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00rfkill
+       Abstract: rt2x00 rfkill routines.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2x00lib"
+
+#include <linux/input-polldev.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/rfkill.h>
+
+#include "rt2x00.h"
+#include "rt2x00lib.h"
+
+static int rt2x00rfkill_toggle_radio(void *data, enum rfkill_state state)
+{
+       struct rt2x00_dev *rt2x00dev = data;
+       int retval = 0;
+
+       if (unlikely(!rt2x00dev))
+               return 0;
+
+       /*
+        * Only continue if we have an active interface,
+        * either monitor or non-monitor should be present.
+        */
+       if (!is_interface_present(&rt2x00dev->interface) &&
+           !is_monitor_present(&rt2x00dev->interface))
+               return 0;
+
+       if (state == RFKILL_STATE_ON) {
+               INFO(rt2x00dev, "Hardware button pressed, enabling radio.\n");
+               __set_bit(DEVICE_ENABLED_RADIO_HW, &rt2x00dev->flags);
+               retval = rt2x00lib_enable_radio(rt2x00dev);
+       } else if (state == RFKILL_STATE_OFF) {
+               INFO(rt2x00dev, "Hardware button pressed, disabling radio.\n");
+               __clear_bit(DEVICE_ENABLED_RADIO_HW, &rt2x00dev->flags);
+               rt2x00lib_disable_radio(rt2x00dev);
+       }
+
+       return retval;
+}
+
+static void rt2x00rfkill_poll(struct input_polled_dev *poll_dev)
+{
+       struct rt2x00_dev *rt2x00dev = poll_dev->private;
+       int state = rt2x00dev->ops->lib->rfkill_poll(rt2x00dev);
+
+       if (rt2x00dev->rfkill->state != state)
+               input_report_key(poll_dev->input, KEY_WLAN, 1);
+}
+
+int rt2x00rfkill_register(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       if (!test_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags))
+               return 0;
+
+       retval = rfkill_register(rt2x00dev->rfkill);
+       if (retval) {
+               ERROR(rt2x00dev, "Failed to register rfkill handler.\n");
+               return retval;
+       }
+
+       retval = input_register_polled_device(rt2x00dev->poll_dev);
+       if (retval) {
+               ERROR(rt2x00dev, "Failed to register polled device.\n");
+               rfkill_unregister(rt2x00dev->rfkill);
+               return retval;
+       }
+
+       return 0;
+}
+
+void rt2x00rfkill_unregister(struct rt2x00_dev *rt2x00dev)
+{
+       if (!test_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags))
+               return;
+
+       input_unregister_polled_device(rt2x00dev->poll_dev);
+       rfkill_unregister(rt2x00dev->rfkill);
+}
+
+int rt2x00rfkill_allocate(struct rt2x00_dev *rt2x00dev)
+{
+       struct device *device = wiphy_dev(rt2x00dev->hw->wiphy);
+
+       if (!test_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags))
+               return 0;
+
+       rt2x00dev->rfkill = rfkill_allocate(device, RFKILL_TYPE_WLAN);
+       if (!rt2x00dev->rfkill) {
+               ERROR(rt2x00dev, "Failed to allocate rfkill handler.\n");
+               return -ENOMEM;
+       }
+
+       rt2x00dev->rfkill->name = rt2x00dev->ops->name;
+       rt2x00dev->rfkill->data = rt2x00dev;
+       rt2x00dev->rfkill->state = rt2x00dev->ops->lib->rfkill_poll(rt2x00dev);
+       rt2x00dev->rfkill->toggle_radio = rt2x00rfkill_toggle_radio;
+
+       rt2x00dev->poll_dev = input_allocate_polled_device();
+       if (!rt2x00dev->poll_dev) {
+               ERROR(rt2x00dev, "Failed to allocate polled device.\n");
+               rfkill_free(rt2x00dev->rfkill);
+               return -ENOMEM;
+       }
+
+       rt2x00dev->poll_dev->private = rt2x00dev;
+       rt2x00dev->poll_dev->poll = rt2x00rfkill_poll;
+       rt2x00dev->poll_dev->poll_interval = RFKILL_POLL_INTERVAL;
+
+       return 0;
+}
+
+void rt2x00rfkill_free(struct rt2x00_dev *rt2x00dev)
+{
+       if (!test_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags))
+               return;
+
+       input_free_polled_device(rt2x00dev->poll_dev);
+       rfkill_free(rt2x00dev->rfkill);
+}
diff --git a/drivers/net/wireless/rt2x00/rt2x00ring.h b/drivers/net/wireless/rt2x00/rt2x00ring.h
new file mode 100644 (file)
index 0000000..122c752
--- /dev/null
@@ -0,0 +1,255 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00
+       Abstract: rt2x00 ring datastructures and routines
+ */
+
+#ifndef RT2X00RING_H
+#define RT2X00RING_H
+
+/*
+ * data_desc
+ * Each data entry also contains a descriptor which is used by the
+ * device to determine what should be done with the packet and
+ * what the current status is.
+ * This structure is greatly simplified, but the descriptors
+ * are basically a list of little endian 32 bit values.
+ * Make the array by default 1 word big, this will allow us
+ * to use sizeof() correctly.
+ */
+struct data_desc {
+       __le32 word[1];
+};
+
+/*
+ * data_entry_desc
+ * Summary of information that should be written into the
+ * descriptor for sending a TX frame.
+ */
+struct data_entry_desc {
+       unsigned long flags;
+#define ENTRY_TXDONE           1
+#define ENTRY_TXD_RTS_FRAME    2
+#define ENTRY_TXD_OFDM_RATE    3
+#define ENTRY_TXD_MORE_FRAG    4
+#define ENTRY_TXD_REQ_TIMESTAMP        5
+#define ENTRY_TXD_BURST                6
+
+/*
+ * Queue ID. ID's 0-4 are data TX rings
+ */
+       int queue;
+#define QUEUE_MGMT             13
+#define QUEUE_RX               14
+#define QUEUE_OTHER            15
+
+       /*
+        * PLCP values.
+        */
+       u16 length_high;
+       u16 length_low;
+       u16 signal;
+       u16 service;
+
+       /*
+        * Timing information
+        */
+       int aifs;
+       int ifs;
+       int cw_min;
+       int cw_max;
+};
+
+/*
+ * data_entry
+ * The data ring is a list of data entries.
+ * Each entry holds a reference to the descriptor
+ * and the data buffer. For TX rings the reference to the
+ * sk_buff of the packet being transmitted is also stored here.
+ */
+struct data_entry {
+       /*
+        * Status flags
+        */
+       unsigned long flags;
+#define ENTRY_OWNER_NIC                1
+
+       /*
+        * Ring we belong to.
+        */
+       struct data_ring *ring;
+
+       /*
+        * sk_buff for the packet which is being transmitted
+        * in this entry (Only used with TX related rings).
+        */
+       struct sk_buff *skb;
+
+       /*
+        * Store a ieee80211_tx_status structure in each
+        * ring entry, this will optimize the txdone
+        * handler.
+        */
+       struct ieee80211_tx_status tx_status;
+
+       /*
+        * private pointer specific to driver.
+        */
+       void *priv;
+
+       /*
+        * Data address for this entry.
+        */
+       void *data_addr;
+       dma_addr_t data_dma;
+};
+
+/*
+ * data_ring
+ * Data rings are used by the device to send and receive packets.
+ * The data_addr is the base address of the data memory.
+ * To determine at which point in the ring we are,
+ * have to use the rt2x00_ring_index_*() functions.
+ */
+struct data_ring {
+       /*
+        * Pointer to main rt2x00dev structure where this
+        * ring belongs to.
+        */
+       struct rt2x00_dev *rt2x00dev;
+
+       /*
+        * Base address for the device specific data entries.
+        */
+       struct data_entry *entry;
+
+       /*
+        * TX queue statistic info.
+        */
+       struct ieee80211_tx_queue_stats_data stats;
+
+       /*
+        * TX Queue parameters.
+        */
+       struct ieee80211_tx_queue_params tx_params;
+
+       /*
+        * Base address for data ring.
+        */
+       dma_addr_t data_dma;
+       void *data_addr;
+
+       /*
+        * Index variables.
+        */
+       u16 index;
+       u16 index_done;
+
+       /*
+        * Size of packet and descriptor in bytes.
+        */
+       u16 data_size;
+       u16 desc_size;
+};
+
+/*
+ * Handlers to determine the address of the current device specific
+ * data entry, where either index or index_done points to.
+ */
+static inline struct data_entry *rt2x00_get_data_entry(struct data_ring *ring)
+{
+       return &ring->entry[ring->index];
+}
+
+static inline struct data_entry *rt2x00_get_data_entry_done(struct data_ring
+                                                           *ring)
+{
+       return &ring->entry[ring->index_done];
+}
+
+/*
+ * Total ring memory
+ */
+static inline int rt2x00_get_ring_size(struct data_ring *ring)
+{
+       return ring->stats.limit * (ring->desc_size + ring->data_size);
+}
+
+/*
+ * Ring index manipulation functions.
+ */
+static inline void rt2x00_ring_index_inc(struct data_ring *ring)
+{
+       ring->index++;
+       if (ring->index >= ring->stats.limit)
+               ring->index = 0;
+       ring->stats.len++;
+}
+
+static inline void rt2x00_ring_index_done_inc(struct data_ring *ring)
+{
+       ring->index_done++;
+       if (ring->index_done >= ring->stats.limit)
+               ring->index_done = 0;
+       ring->stats.len--;
+       ring->stats.count++;
+}
+
+static inline void rt2x00_ring_index_clear(struct data_ring *ring)
+{
+       ring->index = 0;
+       ring->index_done = 0;
+       ring->stats.len = 0;
+       ring->stats.count = 0;
+}
+
+static inline int rt2x00_ring_empty(struct data_ring *ring)
+{
+       return ring->stats.len == 0;
+}
+
+static inline int rt2x00_ring_full(struct data_ring *ring)
+{
+       return ring->stats.len == ring->stats.limit;
+}
+
+static inline int rt2x00_ring_free(struct data_ring *ring)
+{
+       return ring->stats.limit - ring->stats.len;
+}
+
+/*
+ * TX/RX Descriptor access functions.
+ */
+static inline void rt2x00_desc_read(struct data_desc *desc,
+                                   const u8 word, u32 *value)
+{
+       *value = le32_to_cpu(desc->word[word]);
+}
+
+static inline void rt2x00_desc_write(struct data_desc *desc,
+                                    const u8 word, const u32 value)
+{
+       desc->word[word] = cpu_to_le32(value);
+}
+
+#endif /* RT2X00RING_H */
diff --git a/drivers/net/wireless/rt2x00/rt2x00usb.c b/drivers/net/wireless/rt2x00/rt2x00usb.c
new file mode 100644 (file)
index 0000000..a0f05ca
--- /dev/null
@@ -0,0 +1,595 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00usb
+       Abstract: rt2x00 generic usb device routines.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2x00usb"
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/usb.h>
+
+#include "rt2x00.h"
+#include "rt2x00usb.h"
+
+/*
+ * Interfacing with the HW.
+ */
+int rt2x00usb_vendor_request(const struct rt2x00_dev *rt2x00dev,
+                            const u8 request, const u8 requesttype,
+                            const u16 offset, const u16 value,
+                            void *buffer, const u16 buffer_length,
+                            u16 timeout)
+{
+       struct usb_device *usb_dev =
+           interface_to_usbdev(rt2x00dev_usb(rt2x00dev));
+       int status;
+       unsigned int i;
+       unsigned int pipe =
+           (requesttype == USB_VENDOR_REQUEST_IN) ?
+           usb_rcvctrlpipe(usb_dev, 0) : usb_sndctrlpipe(usb_dev, 0);
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               status = usb_control_msg(usb_dev, pipe, request, requesttype,
+                                        value, offset, buffer, buffer_length,
+                                        timeout);
+               if (status >= 0)
+                       return 0;
+
+               /*
+                * Check for errors,
+                * -ETIMEDOUT: We need a bit more time to complete.
+                * -ENODEV: Device has disappeared, no point continuing.
+                */
+               if (status == -ETIMEDOUT)
+                       timeout *= 2;
+               else if (status == -ENODEV)
+                       break;
+       }
+
+       ERROR(rt2x00dev,
+             "Vendor Request 0x%02x failed for offset 0x%04x with error %d.\n",
+             request, offset, status);
+
+       return status;
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_vendor_request);
+
+int rt2x00usb_vendor_request_buff(const struct rt2x00_dev *rt2x00dev,
+                                 const u8 request, const u8 requesttype,
+                                 const u16 offset, void *buffer,
+                                 const u16 buffer_length, u16 timeout)
+{
+       int status;
+
+       /*
+        * Check for Cache availability.
+        */
+       if (unlikely(!rt2x00dev->csr_cache || buffer_length > CSR_CACHE_SIZE)) {
+               ERROR(rt2x00dev, "CSR cache not available.\n");
+               return -ENOMEM;
+       }
+
+       if (requesttype == USB_VENDOR_REQUEST_OUT)
+               memcpy(rt2x00dev->csr_cache, buffer, buffer_length);
+
+       status = rt2x00usb_vendor_request(rt2x00dev, request, requesttype,
+                                         offset, 0, rt2x00dev->csr_cache,
+                                         buffer_length, timeout);
+
+       if (!status && requesttype == USB_VENDOR_REQUEST_IN)
+               memcpy(buffer, rt2x00dev->csr_cache, buffer_length);
+
+       return status;
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_vendor_request_buff);
+
+/*
+ * TX data handlers.
+ */
+static void rt2x00usb_interrupt_txdone(struct urb *urb)
+{
+       struct data_entry *entry = (struct data_entry *)urb->context;
+       struct data_ring *ring = entry->ring;
+       struct rt2x00_dev *rt2x00dev = ring->rt2x00dev;
+       struct data_desc *txd = (struct data_desc *)entry->skb->data;
+       u32 word;
+       int tx_status;
+
+       if (!test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags) ||
+           !__test_and_clear_bit(ENTRY_OWNER_NIC, &entry->flags))
+               return;
+
+       rt2x00_desc_read(txd, 0, &word);
+
+       /*
+        * Remove the descriptor data from the buffer.
+        */
+       skb_pull(entry->skb, ring->desc_size);
+
+       /*
+        * Obtain the status about this packet.
+        */
+       tx_status = !urb->status ? TX_SUCCESS : TX_FAIL_RETRY;
+
+       rt2x00lib_txdone(entry, tx_status, 0);
+
+       /*
+        * Make this entry available for reuse.
+        */
+       entry->flags = 0;
+       rt2x00_ring_index_done_inc(entry->ring);
+
+       /*
+        * If the data ring was full before the txdone handler
+        * we must make sure the packet queue in the mac80211 stack
+        * is reenabled when the txdone handler has finished.
+        */
+       if (!rt2x00_ring_full(ring))
+               ieee80211_wake_queue(rt2x00dev->hw,
+                                    entry->tx_status.control.queue);
+}
+
+int rt2x00usb_write_tx_data(struct rt2x00_dev *rt2x00dev,
+                           struct data_ring *ring, struct sk_buff *skb,
+                           struct ieee80211_tx_control *control)
+{
+       struct usb_device *usb_dev =
+           interface_to_usbdev(rt2x00dev_usb(rt2x00dev));
+       struct ieee80211_hdr *ieee80211hdr = (struct ieee80211_hdr *)skb->data;
+       struct data_entry *entry = rt2x00_get_data_entry(ring);
+       u32 length = skb->len;
+
+       if (rt2x00_ring_full(ring)) {
+               ieee80211_stop_queue(rt2x00dev->hw, control->queue);
+               return -EINVAL;
+       }
+
+       if (test_bit(ENTRY_OWNER_NIC, &entry->flags)) {
+               ERROR(rt2x00dev,
+                     "Arrived at non-free entry in the non-full queue %d.\n"
+                     "Please file bug report to %s.\n",
+                     control->queue, DRV_PROJECT);
+               ieee80211_stop_queue(rt2x00dev->hw, control->queue);
+               return -EINVAL;
+       }
+
+       /*
+        * Add the descriptor in front of the skb.
+        */
+       skb_push(skb, rt2x00dev->hw->extra_tx_headroom);
+       memset(skb->data, 0x00, rt2x00dev->hw->extra_tx_headroom);
+
+       rt2x00lib_write_tx_desc(rt2x00dev, (struct data_desc *)skb->data,
+                               ieee80211hdr, length, control);
+       memcpy(&entry->tx_status.control, control, sizeof(*control));
+       entry->skb = skb;
+
+       /*
+        * Length passed to usb_fill_urb cannot be an odd number,
+        * so add 1 byte to make it even.
+        */
+       length += rt2x00dev->hw->extra_tx_headroom;
+       if (length % 2)
+               length++;
+
+       __set_bit(ENTRY_OWNER_NIC, &entry->flags);
+       usb_fill_bulk_urb(entry->priv, usb_dev,
+                         usb_sndbulkpipe(usb_dev, 1),
+                         skb->data, length, rt2x00usb_interrupt_txdone, entry);
+       usb_submit_urb(entry->priv, GFP_ATOMIC);
+
+       rt2x00_ring_index_inc(ring);
+
+       if (rt2x00_ring_full(ring))
+               ieee80211_stop_queue(rt2x00dev->hw, control->queue);
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_write_tx_data);
+
+/*
+ * RX data handlers.
+ */
+static void rt2x00usb_interrupt_rxdone(struct urb *urb)
+{
+       struct data_entry *entry = (struct data_entry *)urb->context;
+       struct data_ring *ring = entry->ring;
+       struct rt2x00_dev *rt2x00dev = ring->rt2x00dev;
+       struct sk_buff *skb;
+       int retval;
+       int signal;
+       int rssi;
+       int ofdm;
+       int size;
+       int frame_size;
+
+       if (!test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags) ||
+           !test_and_clear_bit(ENTRY_OWNER_NIC, &entry->flags))
+               return;
+
+       /*
+        * Check if the received data is simply too small
+        * to be actually valid, or if the urb is signaling
+        * a problem.
+        */
+       if (urb->actual_length < entry->ring->desc_size || urb->status)
+               goto skip_entry;
+
+       retval = rt2x00dev->ops->lib->fill_rxdone(entry, &signal, &rssi,
+                                                 &ofdm, &size);
+       if (retval)
+               goto skip_entry;
+
+       /*
+        * Allocate a new sk buffer to replace the current one.
+        * If allocation fails, we should drop the current frame
+        * so we can recycle the existing sk buffer for the new frame.
+        */
+       frame_size = entry->ring->data_size + entry->ring->desc_size;
+       skb = dev_alloc_skb(frame_size + NET_IP_ALIGN);
+       if (!skb)
+               goto skip_entry;
+
+       skb_reserve(skb, NET_IP_ALIGN);
+       skb_put(skb, frame_size);
+
+       /*
+        * Trim the skb_buffer to only contain the valid
+        * frame data (so ignore the device's descriptor).
+        */
+       skb_trim(entry->skb, size);
+
+       /*
+        * Send the frame to rt2x00lib for further processing.
+        */
+       rt2x00lib_rxdone(entry, entry->skb, signal, rssi, ofdm);
+
+       /*
+        * Replace current entry's skb with the newly allocated one,
+        * and reinitialize the urb.
+        */
+       entry->skb = skb;
+       urb->transfer_buffer = entry->skb->data;
+       urb->transfer_buffer_length = entry->skb->len;
+
+skip_entry:
+       if (test_bit(DEVICE_ENABLED_RADIO, &ring->rt2x00dev->flags)) {
+               __set_bit(ENTRY_OWNER_NIC, &entry->flags);
+               usb_submit_urb(urb, GFP_ATOMIC);
+       }
+
+       rt2x00_ring_index_inc(ring);
+}
+
+/*
+ * Radio handlers
+ */
+void rt2x00usb_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       struct usb_device *usb_dev =
+           interface_to_usbdev(rt2x00dev_usb(rt2x00dev));
+       struct data_ring *ring;
+       struct data_entry *entry;
+       unsigned int i;
+
+       /*
+        * Initialize the TX rings
+        */
+       txringall_for_each(rt2x00dev, ring) {
+               for (i = 0; i < ring->stats.limit; i++)
+                       ring->entry[i].flags = 0;
+
+               rt2x00_ring_index_clear(ring);
+       }
+
+       /*
+        * Initialize and start the RX ring.
+        */
+       rt2x00_ring_index_clear(rt2x00dev->rx);
+
+       for (i = 0; i < rt2x00dev->rx->stats.limit; i++) {
+               entry = &rt2x00dev->rx->entry[i];
+
+               usb_fill_bulk_urb(entry->priv, usb_dev,
+                                 usb_rcvbulkpipe(usb_dev, 1),
+                                 entry->skb->data, entry->skb->len,
+                                 rt2x00usb_interrupt_rxdone, entry);
+
+               __set_bit(ENTRY_OWNER_NIC, &entry->flags);
+               usb_submit_urb(entry->priv, GFP_ATOMIC);
+       }
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_enable_radio);
+
+void rt2x00usb_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring;
+       unsigned int i;
+
+       rt2x00usb_vendor_request_sw(rt2x00dev, USB_RX_CONTROL, 0x0000, 0x0000,
+                                   REGISTER_TIMEOUT);
+
+       /*
+        * Cancel all rings.
+        */
+       ring_for_each(rt2x00dev, ring) {
+               for (i = 0; i < ring->stats.limit; i++)
+                       usb_kill_urb(ring->entry[i].priv);
+       }
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_disable_radio);
+
+/*
+ * Device initialization handlers.
+ */
+static int rt2x00usb_alloc_urb(struct rt2x00_dev *rt2x00dev,
+                              struct data_ring *ring)
+{
+       unsigned int i;
+
+       /*
+        * Allocate the URB's
+        */
+       for (i = 0; i < ring->stats.limit; i++) {
+               ring->entry[i].priv = usb_alloc_urb(0, GFP_KERNEL);
+               if (!ring->entry[i].priv)
+                       return -ENOMEM;
+       }
+
+       return 0;
+}
+
+static void rt2x00usb_free_urb(struct rt2x00_dev *rt2x00dev,
+                              struct data_ring *ring)
+{
+       unsigned int i;
+
+       if (!ring->entry)
+               return;
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               usb_kill_urb(ring->entry[i].priv);
+               usb_free_urb(ring->entry[i].priv);
+               if (ring->entry[i].skb)
+                       kfree_skb(ring->entry[i].skb);
+       }
+}
+
+int rt2x00usb_initialize(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring;
+       struct sk_buff *skb;
+       unsigned int entry_size;
+       unsigned int i;
+       int status;
+
+       /*
+        * Allocate DMA
+        */
+       ring_for_each(rt2x00dev, ring) {
+               status = rt2x00usb_alloc_urb(rt2x00dev, ring);
+               if (status)
+                       goto exit;
+       }
+
+       /*
+        * For the RX ring, skb's should be allocated.
+        */
+       entry_size = rt2x00dev->rx->data_size + rt2x00dev->rx->desc_size;
+       for (i = 0; i < rt2x00dev->rx->stats.limit; i++) {
+               skb = dev_alloc_skb(NET_IP_ALIGN + entry_size);
+               if (!skb)
+                       goto exit;
+
+               skb_reserve(skb, NET_IP_ALIGN);
+               skb_put(skb, entry_size);
+
+               rt2x00dev->rx->entry[i].skb = skb;
+       }
+
+       return 0;
+
+exit:
+       rt2x00usb_uninitialize(rt2x00dev);
+
+       return status;
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_initialize);
+
+void rt2x00usb_uninitialize(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring;
+
+       ring_for_each(rt2x00dev, ring)
+               rt2x00usb_free_urb(rt2x00dev, ring);
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_uninitialize);
+
+/*
+ * USB driver handlers.
+ */
+static void rt2x00usb_free_reg(struct rt2x00_dev *rt2x00dev)
+{
+       kfree(rt2x00dev->rf);
+       rt2x00dev->rf = NULL;
+
+       kfree(rt2x00dev->eeprom);
+       rt2x00dev->eeprom = NULL;
+
+       kfree(rt2x00dev->csr_cache);
+       rt2x00dev->csr_cache = NULL;
+}
+
+static int rt2x00usb_alloc_reg(struct rt2x00_dev *rt2x00dev)
+{
+       rt2x00dev->csr_cache = kzalloc(CSR_CACHE_SIZE, GFP_KERNEL);
+       if (!rt2x00dev->csr_cache)
+               goto exit;
+
+       rt2x00dev->eeprom = kzalloc(rt2x00dev->ops->eeprom_size, GFP_KERNEL);
+       if (!rt2x00dev->eeprom)
+               goto exit;
+
+       rt2x00dev->rf = kzalloc(rt2x00dev->ops->rf_size, GFP_KERNEL);
+       if (!rt2x00dev->rf)
+               goto exit;
+
+       return 0;
+
+exit:
+       ERROR_PROBE("Failed to allocate registers.\n");
+
+       rt2x00usb_free_reg(rt2x00dev);
+
+       return -ENOMEM;
+}
+
+int rt2x00usb_probe(struct usb_interface *usb_intf,
+                   const struct usb_device_id *id)
+{
+       struct usb_device *usb_dev = interface_to_usbdev(usb_intf);
+       struct rt2x00_ops *ops = (struct rt2x00_ops *)id->driver_info;
+       struct ieee80211_hw *hw;
+       struct rt2x00_dev *rt2x00dev;
+       int retval;
+
+       usb_dev = usb_get_dev(usb_dev);
+
+       hw = ieee80211_alloc_hw(sizeof(struct rt2x00_dev), ops->hw);
+       if (!hw) {
+               ERROR_PROBE("Failed to allocate hardware.\n");
+               retval = -ENOMEM;
+               goto exit_put_device;
+       }
+
+       usb_set_intfdata(usb_intf, hw);
+
+       rt2x00dev = hw->priv;
+       rt2x00dev->dev = usb_intf;
+       rt2x00dev->ops = ops;
+       rt2x00dev->hw = hw;
+
+       retval = rt2x00usb_alloc_reg(rt2x00dev);
+       if (retval)
+               goto exit_free_device;
+
+       retval = rt2x00lib_probe_dev(rt2x00dev);
+       if (retval)
+               goto exit_free_reg;
+
+       return 0;
+
+exit_free_reg:
+       rt2x00usb_free_reg(rt2x00dev);
+
+exit_free_device:
+       ieee80211_free_hw(hw);
+
+exit_put_device:
+       usb_put_dev(usb_dev);
+
+       usb_set_intfdata(usb_intf, NULL);
+
+       return retval;
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_probe);
+
+void rt2x00usb_disconnect(struct usb_interface *usb_intf)
+{
+       struct ieee80211_hw *hw = usb_get_intfdata(usb_intf);
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       /*
+        * Free all allocated data.
+        */
+       rt2x00lib_remove_dev(rt2x00dev);
+       rt2x00usb_free_reg(rt2x00dev);
+       ieee80211_free_hw(hw);
+
+       /*
+        * Free the USB device data.
+        */
+       usb_set_intfdata(usb_intf, NULL);
+       usb_put_dev(interface_to_usbdev(usb_intf));
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_disconnect);
+
+#ifdef CONFIG_PM
+int rt2x00usb_suspend(struct usb_interface *usb_intf, pm_message_t state)
+{
+       struct ieee80211_hw *hw = usb_get_intfdata(usb_intf);
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       int retval;
+
+       retval = rt2x00lib_suspend(rt2x00dev, state);
+       if (retval)
+               return retval;
+
+       rt2x00usb_free_reg(rt2x00dev);
+
+       /*
+        * Decrease usbdev refcount.
+        */
+       usb_put_dev(interface_to_usbdev(usb_intf));
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_suspend);
+
+int rt2x00usb_resume(struct usb_interface *usb_intf)
+{
+       struct ieee80211_hw *hw = usb_get_intfdata(usb_intf);
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       int retval;
+
+       usb_get_dev(interface_to_usbdev(usb_intf));
+
+       retval = rt2x00usb_alloc_reg(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt2x00lib_resume(rt2x00dev);
+       if (retval)
+               goto exit_free_reg;
+
+       return 0;
+
+exit_free_reg:
+       rt2x00usb_free_reg(rt2x00dev);
+
+       return retval;
+}
+EXPORT_SYMBOL_GPL(rt2x00usb_resume);
+#endif /* CONFIG_PM */
+
+/*
+ * rt2x00pci module information.
+ */
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("rt2x00 library");
+MODULE_LICENSE("GPL");
diff --git a/drivers/net/wireless/rt2x00/rt2x00usb.h b/drivers/net/wireless/rt2x00/rt2x00usb.h
new file mode 100644 (file)
index 0000000..d4113e5
--- /dev/null
@@ -0,0 +1,180 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00usb
+       Abstract: Data structures for the rt2x00usb module.
+ */
+
+#ifndef RT2X00USB_H
+#define RT2X00USB_H
+
+/*
+ * This variable should be used with the
+ * usb_driver structure initialization.
+ */
+#define USB_DEVICE_DATA(__ops) .driver_info = (kernel_ulong_t)(__ops)
+
+/*
+ * Register defines.
+ * Some registers require multiple attempts before success,
+ * in those cases REGISTER_BUSY_COUNT attempts should be
+ * taken with a REGISTER_BUSY_DELAY interval.
+ * For USB vendor requests we need to pass a timeout
+ * time in ms, for this we use the REGISTER_TIMEOUT,
+ * however when loading firmware a higher value is
+ * required. In that case we use the REGISTER_TIMEOUT_FIRMWARE.
+ */
+#define REGISTER_BUSY_COUNT            5
+#define REGISTER_BUSY_DELAY            100
+#define REGISTER_TIMEOUT               20
+#define REGISTER_TIMEOUT_FIRMWARE      1000
+
+/*
+ * Cache size
+ */
+#define CSR_CACHE_SIZE                 8
+#define CSR_CACHE_SIZE_FIRMWARE                64
+
+/*
+ * USB request types.
+ */
+#define USB_VENDOR_REQUEST     ( USB_TYPE_VENDOR | USB_RECIP_DEVICE )
+#define USB_VENDOR_REQUEST_IN  ( USB_DIR_IN | USB_VENDOR_REQUEST )
+#define USB_VENDOR_REQUEST_OUT ( USB_DIR_OUT | USB_VENDOR_REQUEST )
+
+/*
+ * USB vendor commands.
+ */
+#define USB_DEVICE_MODE                0x01
+#define USB_SINGLE_WRITE       0x02
+#define USB_SINGLE_READ                0x03
+#define USB_MULTI_WRITE                0x06
+#define USB_MULTI_READ         0x07
+#define USB_EEPROM_WRITE       0x08
+#define USB_EEPROM_READ                0x09
+#define USB_LED_CONTROL                0x0a    /* RT73USB */
+#define USB_RX_CONTROL         0x0c
+
+/*
+ * Device modes offset
+ */
+#define USB_MODE_RESET         0x01
+#define USB_MODE_UNPLUG                0x02
+#define USB_MODE_FUNCTION      0x03
+#define USB_MODE_TEST          0x04
+#define USB_MODE_SLEEP         0x07    /* RT73USB */
+#define USB_MODE_FIRMWARE      0x08    /* RT73USB */
+#define USB_MODE_WAKEUP                0x09    /* RT73USB */
+
+/*
+ * Used to read/write from/to the device.
+ * This is the main function to communicate with the device,
+ * the buffer argument _must_ either be NULL or point to
+ * a buffer allocated by kmalloc. Failure to do so can lead
+ * to unexpected behavior depending on the architecture.
+ */
+int rt2x00usb_vendor_request(const struct rt2x00_dev *rt2x00dev,
+                            const u8 request, const u8 requesttype,
+                            const u16 offset, const u16 value,
+                            void *buffer, const u16 buffer_length,
+                            u16 timeout);
+
+/*
+ * Used to read/write from/to the device.
+ * This function will use a previously with kmalloc allocated cache
+ * to communicate with the device. The contents of the buffer pointer
+ * will be copied to this cache when writing, or read from the cache
+ * when reading.
+ * Buffers send to rt2x00usb_vendor_request _must_ be allocated with
+ * kmalloc. Hence the reason for using a previously allocated cache
+ * which has been allocated properly.
+ */
+int rt2x00usb_vendor_request_buff(const struct rt2x00_dev *rt2x00dev,
+                                 const u8 request, const u8 requesttype,
+                                 const u16 offset, void *buffer,
+                                 const u16 buffer_length, u16 timeout);
+
+/*
+ * Simple wrapper around rt2x00usb_vendor_request to write a single
+ * command to the device. Since we don't use the buffer argument we
+ * don't have to worry about kmalloc here.
+ */
+static inline int rt2x00usb_vendor_request_sw(const struct rt2x00_dev
+                                             *rt2x00dev,
+                                             const u8 request,
+                                             const u16 offset,
+                                             const u16 value,
+                                             int timeout)
+{
+       return rt2x00usb_vendor_request(rt2x00dev, request,
+                                       USB_VENDOR_REQUEST_OUT, offset,
+                                       value, NULL, 0, timeout);
+}
+
+/*
+ * Simple wrapper around rt2x00usb_vendor_request to read the eeprom
+ * from the device. Note that the eeprom argument _must_ be allocated using
+ * kmalloc for correct handling inside the kernel USB layer.
+ */
+static inline int rt2x00usb_eeprom_read(const struct rt2x00_dev *rt2x00dev,
+                                        __le16 *eeprom, const u16 lenght)
+{
+       int timeout = REGISTER_TIMEOUT * (lenght / sizeof(u16));
+
+       return rt2x00usb_vendor_request(rt2x00dev, USB_EEPROM_READ,
+                                       USB_VENDOR_REQUEST_IN, 0x0000,
+                                       0x0000, eeprom, lenght, timeout);
+}
+
+/*
+ * Radio handlers
+ */
+void rt2x00usb_enable_radio(struct rt2x00_dev *rt2x00dev);
+void rt2x00usb_disable_radio(struct rt2x00_dev *rt2x00dev);
+
+/*
+ * TX data handlers.
+ */
+int rt2x00usb_write_tx_data(struct rt2x00_dev *rt2x00dev,
+                           struct data_ring *ring, struct sk_buff *skb,
+                           struct ieee80211_tx_control *control);
+
+/*
+ * Device initialization handlers.
+ */
+int rt2x00usb_initialize(struct rt2x00_dev *rt2x00dev);
+void rt2x00usb_uninitialize(struct rt2x00_dev *rt2x00dev);
+
+/*
+ * USB driver handlers.
+ */
+int rt2x00usb_probe(struct usb_interface *usb_intf,
+                   const struct usb_device_id *id);
+void rt2x00usb_disconnect(struct usb_interface *usb_intf);
+#ifdef CONFIG_PM
+int rt2x00usb_suspend(struct usb_interface *usb_intf, pm_message_t state);
+int rt2x00usb_resume(struct usb_interface *usb_intf);
+#else
+#define rt2x00usb_suspend      NULL
+#define rt2x00usb_resume       NULL
+#endif /* CONFIG_PM */
+
+#endif /* RT2X00USB_H */
diff --git a/drivers/net/wireless/rt2x00/rt61pci.c b/drivers/net/wireless/rt2x00/rt61pci.c
new file mode 100644 (file)
index 0000000..730bed5
--- /dev/null
@@ -0,0 +1,2603 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt61pci
+       Abstract: rt61pci device specific routines.
+       Supported chipsets: RT2561, RT2561s, RT2661.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt61pci"
+
+#include <linux/delay.h>
+#include <linux/etherdevice.h>
+#include <linux/init.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/pci.h>
+#include <linux/eeprom_93cx6.h>
+
+#include "rt2x00.h"
+#include "rt2x00pci.h"
+#include "rt61pci.h"
+
+/*
+ * Register access.
+ * BBP and RF register require indirect register access,
+ * and use the CSR registers PHY_CSR3 and PHY_CSR4 to achieve this.
+ * These indirect registers work with busy bits,
+ * and we will try maximal REGISTER_BUSY_COUNT times to access
+ * the register while taking a REGISTER_BUSY_DELAY us delay
+ * between each attampt. When the busy bit is still set at that time,
+ * the access attempt is considered to have failed,
+ * and we will print an error.
+ */
+static u32 rt61pci_bbp_check(const struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, PHY_CSR3, &reg);
+               if (!rt2x00_get_field32(reg, PHY_CSR3_BUSY))
+                       break;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       return reg;
+}
+
+static void rt61pci_bbp_write(const struct rt2x00_dev *rt2x00dev,
+                             const unsigned int word, const u8 value)
+{
+       u32 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt61pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, PHY_CSR3_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR3 register busy. Write failed.\n");
+               return;
+       }
+
+       /*
+        * Write the data into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, PHY_CSR3_VALUE, value);
+       rt2x00_set_field32(&reg, PHY_CSR3_REGNUM, word);
+       rt2x00_set_field32(&reg, PHY_CSR3_BUSY, 1);
+       rt2x00_set_field32(&reg, PHY_CSR3_READ_CONTROL, 0);
+
+       rt2x00pci_register_write(rt2x00dev, PHY_CSR3, reg);
+}
+
+static void rt61pci_bbp_read(const struct rt2x00_dev *rt2x00dev,
+                            const unsigned int word, u8 *value)
+{
+       u32 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt61pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, PHY_CSR3_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR3 register busy. Read failed.\n");
+               return;
+       }
+
+       /*
+        * Write the request into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, PHY_CSR3_REGNUM, word);
+       rt2x00_set_field32(&reg, PHY_CSR3_BUSY, 1);
+       rt2x00_set_field32(&reg, PHY_CSR3_READ_CONTROL, 1);
+
+       rt2x00pci_register_write(rt2x00dev, PHY_CSR3, reg);
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt61pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, PHY_CSR3_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR3 register busy. Read failed.\n");
+               *value = 0xff;
+               return;
+       }
+
+       *value = rt2x00_get_field32(reg, PHY_CSR3_VALUE);
+}
+
+static void rt61pci_rf_write(const struct rt2x00_dev *rt2x00dev,
+                            const unsigned int word, const u32 value)
+{
+       u32 reg;
+       unsigned int i;
+
+       if (!word)
+               return;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, PHY_CSR4, &reg);
+               if (!rt2x00_get_field32(reg, PHY_CSR4_BUSY))
+                       goto rf_write;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "PHY_CSR4 register busy. Write failed.\n");
+       return;
+
+rf_write:
+       reg = 0;
+       rt2x00_set_field32(&reg, PHY_CSR4_VALUE, value);
+       rt2x00_set_field32(&reg, PHY_CSR4_NUMBER_OF_BITS, 21);
+       rt2x00_set_field32(&reg, PHY_CSR4_IF_SELECT, 0);
+       rt2x00_set_field32(&reg, PHY_CSR4_BUSY, 1);
+
+       rt2x00pci_register_write(rt2x00dev, PHY_CSR4, reg);
+       rt2x00_rf_write(rt2x00dev, word, value);
+}
+
+static void rt61pci_mcu_request(const struct rt2x00_dev *rt2x00dev,
+                               const u8 command, const u8 token,
+                               const u8 arg0, const u8 arg1)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, H2M_MAILBOX_CSR, &reg);
+
+       if (rt2x00_get_field32(reg, H2M_MAILBOX_CSR_OWNER)) {
+               ERROR(rt2x00dev, "mcu request error. "
+                     "Request 0x%02x failed for token 0x%02x.\n",
+                     command, token);
+               return;
+       }
+
+       rt2x00_set_field32(&reg, H2M_MAILBOX_CSR_OWNER, 1);
+       rt2x00_set_field32(&reg, H2M_MAILBOX_CSR_CMD_TOKEN, token);
+       rt2x00_set_field32(&reg, H2M_MAILBOX_CSR_ARG0, arg0);
+       rt2x00_set_field32(&reg, H2M_MAILBOX_CSR_ARG1, arg1);
+       rt2x00pci_register_write(rt2x00dev, H2M_MAILBOX_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, HOST_CMD_CSR, &reg);
+       rt2x00_set_field32(&reg, HOST_CMD_CSR_HOST_COMMAND, command);
+       rt2x00_set_field32(&reg, HOST_CMD_CSR_INTERRUPT_MCU, 1);
+       rt2x00pci_register_write(rt2x00dev, HOST_CMD_CSR, reg);
+}
+
+static void rt61pci_eepromregister_read(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, E2PROM_CSR, &reg);
+
+       eeprom->reg_data_in = !!rt2x00_get_field32(reg, E2PROM_CSR_DATA_IN);
+       eeprom->reg_data_out = !!rt2x00_get_field32(reg, E2PROM_CSR_DATA_OUT);
+       eeprom->reg_data_clock =
+           !!rt2x00_get_field32(reg, E2PROM_CSR_DATA_CLOCK);
+       eeprom->reg_chip_select =
+           !!rt2x00_get_field32(reg, E2PROM_CSR_CHIP_SELECT);
+}
+
+static void rt61pci_eepromregister_write(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg = 0;
+
+       rt2x00_set_field32(&reg, E2PROM_CSR_DATA_IN, !!eeprom->reg_data_in);
+       rt2x00_set_field32(&reg, E2PROM_CSR_DATA_OUT, !!eeprom->reg_data_out);
+       rt2x00_set_field32(&reg, E2PROM_CSR_DATA_CLOCK,
+                          !!eeprom->reg_data_clock);
+       rt2x00_set_field32(&reg, E2PROM_CSR_CHIP_SELECT,
+                          !!eeprom->reg_chip_select);
+
+       rt2x00pci_register_write(rt2x00dev, E2PROM_CSR, reg);
+}
+
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+#define CSR_OFFSET(__word)     ( CSR_REG_BASE + ((__word) * sizeof(u32)) )
+
+static void rt61pci_read_csr(const struct rt2x00_dev *rt2x00dev,
+                            const unsigned int word, u32 *data)
+{
+       rt2x00pci_register_read(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static void rt61pci_write_csr(const struct rt2x00_dev *rt2x00dev,
+                             const unsigned int word, u32 data)
+{
+       rt2x00pci_register_write(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static const struct rt2x00debug rt61pci_rt2x00debug = {
+       .owner  = THIS_MODULE,
+       .csr    = {
+               .read           = rt61pci_read_csr,
+               .write          = rt61pci_write_csr,
+               .word_size      = sizeof(u32),
+               .word_count     = CSR_REG_SIZE / sizeof(u32),
+       },
+       .eeprom = {
+               .read           = rt2x00_eeprom_read,
+               .write          = rt2x00_eeprom_write,
+               .word_size      = sizeof(u16),
+               .word_count     = EEPROM_SIZE / sizeof(u16),
+       },
+       .bbp    = {
+               .read           = rt61pci_bbp_read,
+               .write          = rt61pci_bbp_write,
+               .word_size      = sizeof(u8),
+               .word_count     = BBP_SIZE / sizeof(u8),
+       },
+       .rf     = {
+               .read           = rt2x00_rf_read,
+               .write          = rt61pci_rf_write,
+               .word_size      = sizeof(u32),
+               .word_count     = RF_SIZE / sizeof(u32),
+       },
+};
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+#ifdef CONFIG_RT61PCI_RFKILL
+static int rt61pci_rfkill_poll(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR13, &reg);
+       return rt2x00_get_field32(reg, MAC_CSR13_BIT5);;
+}
+#endif /* CONFIG_RT2400PCI_RFKILL */
+
+/*
+ * Configuration handlers.
+ */
+static void rt61pci_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *addr)
+{
+       __le32 reg[2];
+       u32 tmp;
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, addr, ETH_ALEN);
+
+       tmp = le32_to_cpu(reg[1]);
+       rt2x00_set_field32(&tmp, MAC_CSR3_UNICAST_TO_ME_MASK, 0xff);
+       reg[1] = cpu_to_le32(tmp);
+
+       /*
+        * The MAC address is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, MAC_CSR2, &reg, sizeof(reg));
+}
+
+static void rt61pci_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid)
+{
+       __le32 reg[2];
+       u32 tmp;
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, bssid, ETH_ALEN);
+
+       tmp = le32_to_cpu(reg[1]);
+       rt2x00_set_field32(&tmp, MAC_CSR5_BSS_ID_MASK, 3);
+       reg[1] = cpu_to_le32(tmp);
+
+       /*
+        * The BSSID is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, MAC_CSR4, &reg, sizeof(reg));
+}
+
+static void rt61pci_config_packet_filter(struct rt2x00_dev *rt2x00dev,
+                                        const unsigned int filter)
+{
+       int promisc = !!(filter & IFF_PROMISC);
+       int multicast = !!(filter & IFF_MULTICAST);
+       int broadcast = !!(filter & IFF_BROADCAST);
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DROP_NOT_TO_ME, !promisc);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DROP_MULTICAST, !multicast);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DROP_BORADCAST, !broadcast);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR0, reg);
+}
+
+static void rt61pci_config_type(struct rt2x00_dev *rt2x00dev, const int type)
+{
+       u32 reg;
+
+       /*
+        * Clear current synchronisation setup.
+        * For the Beacon base registers we only need to clear
+        * the first byte since that byte contains the VALID and OWNER
+        * bits which (when set to 0) will invalidate the entire beacon.
+        */
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR9, 0);
+       rt2x00pci_register_write(rt2x00dev, HW_BEACON_BASE0, 0);
+       rt2x00pci_register_write(rt2x00dev, HW_BEACON_BASE1, 0);
+       rt2x00pci_register_write(rt2x00dev, HW_BEACON_BASE2, 0);
+       rt2x00pci_register_write(rt2x00dev, HW_BEACON_BASE3, 0);
+
+       /*
+        * Apply hardware packet filter.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR0, &reg);
+
+       if (!is_monitor_present(&rt2x00dev->interface) &&
+           (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_STA))
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_TO_DS, 1);
+       else
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_TO_DS, 0);
+
+       /*
+        * If there is a non-monitor interface present
+        * the packet should be strict (even if a monitor interface is present!).
+        * When there is only 1 interface present which is in monitor mode
+        * we should start accepting _all_ frames.
+        */
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_CRC, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_PHYSICAL, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_CONTROL, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_VERSION_ERROR, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_ACK_CTS, 1);
+       } else if (is_monitor_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_CRC, 0);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_PHYSICAL, 0);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_CONTROL, 0);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_VERSION_ERROR, 0);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_ACK_CTS, 0);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       /*
+        * Enable synchronisation.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR9, &reg);
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, TXRX_CSR9_TSF_TICKING, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR9_TBTT_ENABLE, 1);
+       }
+
+       rt2x00_set_field32(&reg, TXRX_CSR9_BEACON_GEN, 0);
+       if (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_AP)
+               rt2x00_set_field32(&reg, TXRX_CSR9_TSF_SYNC, 2);
+       else if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field32(&reg, TXRX_CSR9_TSF_SYNC, 1);
+       else if (is_monitor_present(&rt2x00dev->interface) &&
+                !is_interface_present(&rt2x00dev->interface))
+               rt2x00_set_field32(&reg, TXRX_CSR9_TSF_SYNC, 0);
+
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR9, reg);
+}
+
+static void rt61pci_config_rate(struct rt2x00_dev *rt2x00dev, const int rate)
+{
+       struct ieee80211_conf *conf = &rt2x00dev->hw->conf;
+       u32 reg;
+       u32 value;
+       u32 preamble;
+
+       if (DEVICE_GET_RATE_FIELD(rate, PREAMBLE))
+               preamble = SHORT_PREAMBLE;
+       else
+               preamble = PREAMBLE;
+
+       /*
+        * Extract the allowed ratemask from the device specific rate value,
+        * We need to set TXRX_CSR5 to the basic rate mask so we need to mask
+        * off the non-basic rates.
+        */
+       reg = DEVICE_GET_RATE_FIELD(rate, RATEMASK) & DEV_BASIC_RATEMASK;
+
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR5, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       value = ((conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME) ?
+                SHORT_DIFS : DIFS) +
+           PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXRX_CSR0_RX_ACK_TIMEOUT, value);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR4, &reg);
+       if (preamble == SHORT_PREAMBLE)
+               rt2x00_set_field32(&reg, TXRX_CSR4_AUTORESPOND_PREAMBLE, 1);
+       else
+               rt2x00_set_field32(&reg, TXRX_CSR4_AUTORESPOND_PREAMBLE, 0);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR4, reg);
+}
+
+static void rt61pci_config_phymode(struct rt2x00_dev *rt2x00dev,
+                                  const int phymode)
+{
+       struct ieee80211_hw_mode *mode;
+       struct ieee80211_rate *rate;
+
+       if (phymode == MODE_IEEE80211A)
+               rt2x00dev->curr_hwmode = HWMODE_A;
+       else if (phymode == MODE_IEEE80211B)
+               rt2x00dev->curr_hwmode = HWMODE_B;
+       else
+               rt2x00dev->curr_hwmode = HWMODE_G;
+
+       mode = &rt2x00dev->hwmodes[rt2x00dev->curr_hwmode];
+       rate = &mode->rates[mode->num_rates - 1];
+
+       rt61pci_config_rate(rt2x00dev, rate->val2);
+}
+
+static void rt61pci_config_lock_channel(struct rt2x00_dev *rt2x00dev,
+                                       struct rf_channel *rf,
+                                       const int txpower)
+{
+       u8 r3;
+       u8 r94;
+       u8 smart;
+
+       rt2x00_set_field32(&rf->rf3, RF3_TXPOWER, TXPOWER_TO_DEV(txpower));
+       rt2x00_set_field32(&rf->rf4, RF4_FREQ_OFFSET, rt2x00dev->freq_offset);
+
+       smart = !(rt2x00_rf(&rt2x00dev->chip, RF5225) ||
+                 rt2x00_rf(&rt2x00dev->chip, RF2527));
+
+       rt61pci_bbp_read(rt2x00dev, 3, &r3);
+       rt2x00_set_field8(&r3, BBP_R3_SMART_MODE, smart);
+       rt61pci_bbp_write(rt2x00dev, 3, r3);
+
+       r94 = 6;
+       if (txpower > MAX_TXPOWER && txpower <= (MAX_TXPOWER + r94))
+               r94 += txpower - MAX_TXPOWER;
+       else if (txpower < MIN_TXPOWER && txpower >= (MIN_TXPOWER - r94))
+               r94 += txpower;
+       rt61pci_bbp_write(rt2x00dev, 94, r94);
+
+       rt61pci_rf_write(rt2x00dev, 1, rf->rf1);
+       rt61pci_rf_write(rt2x00dev, 2, rf->rf2);
+       rt61pci_rf_write(rt2x00dev, 3, rf->rf3 & ~0x00000004);
+       rt61pci_rf_write(rt2x00dev, 4, rf->rf4);
+
+       udelay(200);
+
+       rt61pci_rf_write(rt2x00dev, 1, rf->rf1);
+       rt61pci_rf_write(rt2x00dev, 2, rf->rf2);
+       rt61pci_rf_write(rt2x00dev, 3, rf->rf3 | 0x00000004);
+       rt61pci_rf_write(rt2x00dev, 4, rf->rf4);
+
+       udelay(200);
+
+       rt61pci_rf_write(rt2x00dev, 1, rf->rf1);
+       rt61pci_rf_write(rt2x00dev, 2, rf->rf2);
+       rt61pci_rf_write(rt2x00dev, 3, rf->rf3 & ~0x00000004);
+       rt61pci_rf_write(rt2x00dev, 4, rf->rf4);
+
+       msleep(1);
+}
+
+static void rt61pci_config_channel(struct rt2x00_dev *rt2x00dev,
+                                  const int index, const int channel,
+                                  const int txpower)
+{
+       struct rf_channel rf;
+
+       /*
+        * Fill rf_reg structure.
+        */
+       memcpy(&rf, &rt2x00dev->spec.channels[index], sizeof(rf));
+
+       rt61pci_config_lock_channel(rt2x00dev, &rf, txpower);
+}
+
+static void rt61pci_config_txpower(struct rt2x00_dev *rt2x00dev,
+                                  const int txpower)
+{
+       struct rf_channel rf;
+
+       rt2x00_rf_read(rt2x00dev, 1, &rf.rf1);
+       rt2x00_rf_read(rt2x00dev, 2, &rf.rf2);
+       rt2x00_rf_read(rt2x00dev, 3, &rf.rf3);
+       rt2x00_rf_read(rt2x00dev, 4, &rf.rf4);
+
+       rt61pci_config_lock_channel(rt2x00dev, &rf, txpower);
+}
+
+static void rt61pci_config_antenna_5x(struct rt2x00_dev *rt2x00dev,
+                                     const int antenna_tx,
+                                     const int antenna_rx)
+{
+       u8 r3;
+       u8 r4;
+       u8 r77;
+
+       rt61pci_bbp_read(rt2x00dev, 3, &r3);
+       rt61pci_bbp_read(rt2x00dev, 4, &r4);
+       rt61pci_bbp_read(rt2x00dev, 77, &r77);
+
+       rt2x00_set_field8(&r3, BBP_R3_SMART_MODE,
+                         !rt2x00_rf(&rt2x00dev->chip, RF5225));
+
+       switch (antenna_rx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 2);
+               rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END,
+                                 !!(rt2x00dev->curr_hwmode != HWMODE_A));
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END, 0);
+
+               if (rt2x00dev->curr_hwmode == HWMODE_A)
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 0);
+               else
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 3);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END, 0);
+
+               if (rt2x00dev->curr_hwmode == HWMODE_A)
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 3);
+               else
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 0);
+               break;
+       }
+
+       rt61pci_bbp_write(rt2x00dev, 77, r77);
+       rt61pci_bbp_write(rt2x00dev, 3, r3);
+       rt61pci_bbp_write(rt2x00dev, 4, r4);
+}
+
+static void rt61pci_config_antenna_2x(struct rt2x00_dev *rt2x00dev,
+                                     const int antenna_tx,
+                                     const int antenna_rx)
+{
+       u8 r3;
+       u8 r4;
+       u8 r77;
+
+       rt61pci_bbp_read(rt2x00dev, 3, &r3);
+       rt61pci_bbp_read(rt2x00dev, 4, &r4);
+       rt61pci_bbp_read(rt2x00dev, 77, &r77);
+
+       rt2x00_set_field8(&r3, BBP_R3_SMART_MODE,
+                         !rt2x00_rf(&rt2x00dev->chip, RF2527));
+       rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END,
+                         !test_bit(CONFIG_FRAME_TYPE, &rt2x00dev->flags));
+
+       switch (antenna_rx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 2);
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt2x00_set_field8(&r77, BBP_R77_PAIR, 3);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt2x00_set_field8(&r77, BBP_R77_PAIR, 0);
+               break;
+       }
+
+       rt61pci_bbp_write(rt2x00dev, 77, r77);
+       rt61pci_bbp_write(rt2x00dev, 3, r3);
+       rt61pci_bbp_write(rt2x00dev, 4, r4);
+}
+
+static void rt61pci_config_antenna_2529_rx(struct rt2x00_dev *rt2x00dev,
+                                          const int p1, const int p2)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR13, &reg);
+
+       if (p1 != 0xff) {
+               rt2x00_set_field32(&reg, MAC_CSR13_BIT4, !!p1);
+               rt2x00_set_field32(&reg, MAC_CSR13_BIT12, 0);
+               rt2x00pci_register_write(rt2x00dev, MAC_CSR13, reg);
+       }
+       if (p2 != 0xff) {
+               rt2x00_set_field32(&reg, MAC_CSR13_BIT3, !p2);
+               rt2x00_set_field32(&reg, MAC_CSR13_BIT11, 0);
+               rt2x00pci_register_write(rt2x00dev, MAC_CSR13, reg);
+       }
+}
+
+static void rt61pci_config_antenna_2529(struct rt2x00_dev *rt2x00dev,
+                                       const int antenna_tx,
+                                       const int antenna_rx)
+{
+       u16 eeprom;
+       u8 r3;
+       u8 r4;
+       u8 r77;
+
+       rt61pci_bbp_read(rt2x00dev, 3, &r3);
+       rt61pci_bbp_read(rt2x00dev, 4, &r4);
+       rt61pci_bbp_read(rt2x00dev, 77, &r77);
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &eeprom);
+
+       rt2x00_set_field8(&r3, BBP_R3_SMART_MODE, 0);
+
+       if (rt2x00_get_field16(eeprom, EEPROM_NIC_ENABLE_DIVERSITY) &&
+           rt2x00_get_field16(eeprom, EEPROM_NIC_TX_DIVERSITY)) {
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 2);
+               rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END, 1);
+               rt61pci_config_antenna_2529_rx(rt2x00dev, 0, 1);
+       } else if (rt2x00_get_field16(eeprom, EEPROM_NIC_ENABLE_DIVERSITY)) {
+               if (rt2x00_get_field16(eeprom, EEPROM_NIC_TX_RX_FIXED) >= 2) {
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 3);
+                       rt61pci_bbp_write(rt2x00dev, 77, r77);
+               }
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt61pci_config_antenna_2529_rx(rt2x00dev, 1, 1);
+       } else if (!rt2x00_get_field16(eeprom, EEPROM_NIC_ENABLE_DIVERSITY) &&
+                  rt2x00_get_field16(eeprom, EEPROM_NIC_TX_DIVERSITY)) {
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 2);
+               rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END, 0);
+
+               switch (rt2x00_get_field16(eeprom, EEPROM_NIC_TX_RX_FIXED)) {
+               case 0:
+                       rt61pci_config_antenna_2529_rx(rt2x00dev, 0, 1);
+                       break;
+               case 1:
+                       rt61pci_config_antenna_2529_rx(rt2x00dev, 1, 0);
+                       break;
+               case 2:
+                       rt61pci_config_antenna_2529_rx(rt2x00dev, 0, 0);
+                       break;
+               case 3:
+                       rt61pci_config_antenna_2529_rx(rt2x00dev, 1, 1);
+                       break;
+               }
+       } else if (!rt2x00_get_field16(eeprom, EEPROM_NIC_ENABLE_DIVERSITY) &&
+                  !rt2x00_get_field16(eeprom, EEPROM_NIC_TX_DIVERSITY)) {
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END, 0);
+
+               switch (rt2x00_get_field16(eeprom, EEPROM_NIC_TX_RX_FIXED)) {
+               case 0:
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 0);
+                       rt61pci_bbp_write(rt2x00dev, 77, r77);
+                       rt61pci_config_antenna_2529_rx(rt2x00dev, 0, 1);
+                       break;
+               case 1:
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 0);
+                       rt61pci_bbp_write(rt2x00dev, 77, r77);
+                       rt61pci_config_antenna_2529_rx(rt2x00dev, 1, 0);
+                       break;
+               case 2:
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 3);
+                       rt61pci_bbp_write(rt2x00dev, 77, r77);
+                       rt61pci_config_antenna_2529_rx(rt2x00dev, 0, 0);
+                       break;
+               case 3:
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 3);
+                       rt61pci_bbp_write(rt2x00dev, 77, r77);
+                       rt61pci_config_antenna_2529_rx(rt2x00dev, 1, 1);
+                       break;
+               }
+       }
+
+       rt61pci_bbp_write(rt2x00dev, 3, r3);
+       rt61pci_bbp_write(rt2x00dev, 4, r4);
+}
+
+struct antenna_sel {
+       u8 word;
+       /*
+        * value[0] -> non-LNA
+        * value[1] -> LNA
+        */
+       u8 value[2];
+};
+
+static const struct antenna_sel antenna_sel_a[] = {
+       { 96,  { 0x58, 0x78 } },
+       { 104, { 0x38, 0x48 } },
+       { 75,  { 0xfe, 0x80 } },
+       { 86,  { 0xfe, 0x80 } },
+       { 88,  { 0xfe, 0x80 } },
+       { 35,  { 0x60, 0x60 } },
+       { 97,  { 0x58, 0x58 } },
+       { 98,  { 0x58, 0x58 } },
+};
+
+static const struct antenna_sel antenna_sel_bg[] = {
+       { 96,  { 0x48, 0x68 } },
+       { 104, { 0x2c, 0x3c } },
+       { 75,  { 0xfe, 0x80 } },
+       { 86,  { 0xfe, 0x80 } },
+       { 88,  { 0xfe, 0x80 } },
+       { 35,  { 0x50, 0x50 } },
+       { 97,  { 0x48, 0x48 } },
+       { 98,  { 0x48, 0x48 } },
+};
+
+static void rt61pci_config_antenna(struct rt2x00_dev *rt2x00dev,
+                                  const int antenna_tx, const int antenna_rx)
+{
+       const struct antenna_sel *sel;
+       unsigned int lna;
+       unsigned int i;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, PHY_CSR0, &reg);
+
+       if (rt2x00dev->curr_hwmode == HWMODE_A) {
+               sel = antenna_sel_a;
+               lna = test_bit(CONFIG_EXTERNAL_LNA_A, &rt2x00dev->flags);
+
+               rt2x00_set_field32(&reg, PHY_CSR0_PA_PE_BG, 0);
+               rt2x00_set_field32(&reg, PHY_CSR0_PA_PE_A, 1);
+       } else {
+               sel = antenna_sel_bg;
+               lna = test_bit(CONFIG_EXTERNAL_LNA_BG, &rt2x00dev->flags);
+
+               rt2x00_set_field32(&reg, PHY_CSR0_PA_PE_BG, 1);
+               rt2x00_set_field32(&reg, PHY_CSR0_PA_PE_A, 0);
+       }
+
+       for (i = 0; i < ARRAY_SIZE(antenna_sel_a); i++)
+               rt61pci_bbp_write(rt2x00dev, sel[i].word, sel[i].value[lna]);
+
+       rt2x00pci_register_write(rt2x00dev, PHY_CSR0, reg);
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF5225) ||
+           rt2x00_rf(&rt2x00dev->chip, RF5325))
+               rt61pci_config_antenna_5x(rt2x00dev, antenna_tx, antenna_rx);
+       else if (rt2x00_rf(&rt2x00dev->chip, RF2527))
+               rt61pci_config_antenna_2x(rt2x00dev, antenna_tx, antenna_rx);
+       else if (rt2x00_rf(&rt2x00dev->chip, RF2529)) {
+               if (test_bit(CONFIG_DOUBLE_ANTENNA, &rt2x00dev->flags))
+                       rt61pci_config_antenna_2x(rt2x00dev, antenna_tx,
+                                                 antenna_rx);
+               else
+                       rt61pci_config_antenna_2529(rt2x00dev, antenna_tx,
+                                                   antenna_rx);
+       }
+}
+
+static void rt61pci_config_duration(struct rt2x00_dev *rt2x00dev,
+                                   const int short_slot_time,
+                                   const int beacon_int)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR9, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR9_SLOT_TIME,
+                          short_slot_time ? SHORT_SLOT_TIME : SLOT_TIME);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR9, reg);
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR8, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR8_SIFS, SIFS);
+       rt2x00_set_field32(&reg, MAC_CSR8_SIFS_AFTER_RX_OFDM, 3);
+       rt2x00_set_field32(&reg, MAC_CSR8_EIFS, EIFS);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR8, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR0_TSF_OFFSET, IEEE80211_HEADER);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR4, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR4_AUTORESPOND_ENABLE, 1);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR4, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR9, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR9_BEACON_INTERVAL, beacon_int * 16);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR9, reg);
+}
+
+static void rt61pci_config(struct rt2x00_dev *rt2x00dev,
+                          const unsigned int flags,
+                          struct ieee80211_conf *conf)
+{
+       int short_slot_time = conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME;
+
+       if (flags & CONFIG_UPDATE_PHYMODE)
+               rt61pci_config_phymode(rt2x00dev, conf->phymode);
+       if (flags & CONFIG_UPDATE_CHANNEL)
+               rt61pci_config_channel(rt2x00dev, conf->channel_val,
+                                      conf->channel, conf->power_level);
+       if ((flags & CONFIG_UPDATE_TXPOWER) && !(flags & CONFIG_UPDATE_CHANNEL))
+               rt61pci_config_txpower(rt2x00dev, conf->power_level);
+       if (flags & CONFIG_UPDATE_ANTENNA)
+               rt61pci_config_antenna(rt2x00dev, conf->antenna_sel_tx,
+                                      conf->antenna_sel_rx);
+       if (flags & (CONFIG_UPDATE_SLOT_TIME | CONFIG_UPDATE_BEACON_INT))
+               rt61pci_config_duration(rt2x00dev, short_slot_time,
+                                       conf->beacon_int);
+}
+
+/*
+ * LED functions.
+ */
+static void rt61pci_enable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       u16 led_reg;
+       u8 arg0;
+       u8 arg1;
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR14, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR14_ON_PERIOD, 70);
+       rt2x00_set_field32(&reg, MAC_CSR14_OFF_PERIOD, 30);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR14, reg);
+
+       led_reg = rt2x00dev->led_reg;
+       rt2x00_set_field16(&led_reg, MCU_LEDCS_RADIO_STATUS, 1);
+       if (rt2x00dev->rx_status.phymode == MODE_IEEE80211A)
+               rt2x00_set_field16(&led_reg, MCU_LEDCS_LINK_A_STATUS, 1);
+       else
+               rt2x00_set_field16(&led_reg, MCU_LEDCS_LINK_BG_STATUS, 1);
+
+       arg0 = led_reg & 0xff;
+       arg1 = (led_reg >> 8) & 0xff;
+
+       rt61pci_mcu_request(rt2x00dev, MCU_LED, 0xff, arg0, arg1);
+}
+
+static void rt61pci_disable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u16 led_reg;
+       u8 arg0;
+       u8 arg1;
+
+       led_reg = rt2x00dev->led_reg;
+       rt2x00_set_field16(&led_reg, MCU_LEDCS_RADIO_STATUS, 0);
+       rt2x00_set_field16(&led_reg, MCU_LEDCS_LINK_BG_STATUS, 0);
+       rt2x00_set_field16(&led_reg, MCU_LEDCS_LINK_A_STATUS, 0);
+
+       arg0 = led_reg & 0xff;
+       arg1 = (led_reg >> 8) & 0xff;
+
+       rt61pci_mcu_request(rt2x00dev, MCU_LED, 0xff, arg0, arg1);
+}
+
+static void rt61pci_activity_led(struct rt2x00_dev *rt2x00dev, int rssi)
+{
+       u8 led;
+
+       if (rt2x00dev->led_mode != LED_MODE_SIGNAL_STRENGTH)
+               return;
+
+       /*
+        * Led handling requires a positive value for the rssi,
+        * to do that correctly we need to add the correction.
+        */
+       rssi += rt2x00dev->rssi_offset;
+
+       if (rssi <= 30)
+               led = 0;
+       else if (rssi <= 39)
+               led = 1;
+       else if (rssi <= 49)
+               led = 2;
+       else if (rssi <= 53)
+               led = 3;
+       else if (rssi <= 63)
+               led = 4;
+       else
+               led = 5;
+
+       rt61pci_mcu_request(rt2x00dev, MCU_LED_STRENGTH, 0xff, led, 0);
+}
+
+/*
+ * Link tuning
+ */
+static void rt61pci_link_stats(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Update FCS error count from register.
+        */
+       rt2x00pci_register_read(rt2x00dev, STA_CSR0, &reg);
+       rt2x00dev->link.rx_failed = rt2x00_get_field32(reg, STA_CSR0_FCS_ERROR);
+
+       /*
+        * Update False CCA count from register.
+        */
+       rt2x00pci_register_read(rt2x00dev, STA_CSR1, &reg);
+       rt2x00dev->link.false_cca =
+           rt2x00_get_field32(reg, STA_CSR1_FALSE_CCA_ERROR);
+}
+
+static void rt61pci_reset_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       rt61pci_bbp_write(rt2x00dev, 17, 0x20);
+       rt2x00dev->link.vgc_level = 0x20;
+}
+
+static void rt61pci_link_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       int rssi = rt2x00_get_link_rssi(&rt2x00dev->link);
+       u8 r17;
+       u8 up_bound;
+       u8 low_bound;
+
+       /*
+        * Update Led strength
+        */
+       rt61pci_activity_led(rt2x00dev, rssi);
+
+       rt61pci_bbp_read(rt2x00dev, 17, &r17);
+
+       /*
+        * Determine r17 bounds.
+        */
+       if (rt2x00dev->rx_status.phymode == MODE_IEEE80211A) {
+               low_bound = 0x28;
+               up_bound = 0x48;
+               if (test_bit(CONFIG_EXTERNAL_LNA_A, &rt2x00dev->flags)) {
+                       low_bound += 0x10;
+                       up_bound += 0x10;
+               }
+       } else {
+               low_bound = 0x20;
+               up_bound = 0x40;
+               if (test_bit(CONFIG_EXTERNAL_LNA_BG, &rt2x00dev->flags)) {
+                       low_bound += 0x10;
+                       up_bound += 0x10;
+               }
+       }
+
+       /*
+        * Special big-R17 for very short distance
+        */
+       if (rssi >= -35) {
+               if (r17 != 0x60)
+                       rt61pci_bbp_write(rt2x00dev, 17, 0x60);
+               return;
+       }
+
+       /*
+        * Special big-R17 for short distance
+        */
+       if (rssi >= -58) {
+               if (r17 != up_bound)
+                       rt61pci_bbp_write(rt2x00dev, 17, up_bound);
+               return;
+       }
+
+       /*
+        * Special big-R17 for middle-short distance
+        */
+       if (rssi >= -66) {
+               low_bound += 0x10;
+               if (r17 != low_bound)
+                       rt61pci_bbp_write(rt2x00dev, 17, low_bound);
+               return;
+       }
+
+       /*
+        * Special mid-R17 for middle distance
+        */
+       if (rssi >= -74) {
+               low_bound += 0x08;
+               if (r17 != low_bound)
+                       rt61pci_bbp_write(rt2x00dev, 17, low_bound);
+               return;
+       }
+
+       /*
+        * Special case: Change up_bound based on the rssi.
+        * Lower up_bound when rssi is weaker then -74 dBm.
+        */
+       up_bound -= 2 * (-74 - rssi);
+       if (low_bound > up_bound)
+               up_bound = low_bound;
+
+       if (r17 > up_bound) {
+               rt61pci_bbp_write(rt2x00dev, 17, up_bound);
+               return;
+       }
+
+       /*
+        * r17 does not yet exceed upper limit, continue and base
+        * the r17 tuning on the false CCA count.
+        */
+       if (rt2x00dev->link.false_cca > 512 && r17 < up_bound) {
+               if (++r17 > up_bound)
+                       r17 = up_bound;
+               rt61pci_bbp_write(rt2x00dev, 17, r17);
+       } else if (rt2x00dev->link.false_cca < 100 && r17 > low_bound) {
+               if (--r17 < low_bound)
+                       r17 = low_bound;
+               rt61pci_bbp_write(rt2x00dev, 17, r17);
+       }
+}
+
+/*
+ * Firmware name function.
+ */
+static char *rt61pci_get_firmware_name(struct rt2x00_dev *rt2x00dev)
+{
+       char *fw_name;
+
+       switch (rt2x00dev->chip.rt) {
+       case RT2561:
+               fw_name = FIRMWARE_RT2561;
+               break;
+       case RT2561s:
+               fw_name = FIRMWARE_RT2561s;
+               break;
+       case RT2661:
+               fw_name = FIRMWARE_RT2661;
+               break;
+       default:
+               fw_name = NULL;
+               break;
+       }
+
+       return fw_name;
+}
+
+/*
+ * Initialization functions.
+ */
+static int rt61pci_load_firmware(struct rt2x00_dev *rt2x00dev, void *data,
+                                const size_t len)
+{
+       int i;
+       u32 reg;
+
+       /*
+        * Wait for stable hardware.
+        */
+       for (i = 0; i < 100; i++) {
+               rt2x00pci_register_read(rt2x00dev, MAC_CSR0, &reg);
+               if (reg)
+                       break;
+               msleep(1);
+       }
+
+       if (!reg) {
+               ERROR(rt2x00dev, "Unstable hardware.\n");
+               return -EBUSY;
+       }
+
+       /*
+        * Prepare MCU and mailbox for firmware loading.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, MCU_CNTL_CSR_RESET, 1);
+       rt2x00pci_register_write(rt2x00dev, MCU_CNTL_CSR, reg);
+       rt2x00pci_register_write(rt2x00dev, M2H_CMD_DONE_CSR, 0xffffffff);
+       rt2x00pci_register_write(rt2x00dev, H2M_MAILBOX_CSR, 0);
+       rt2x00pci_register_write(rt2x00dev, HOST_CMD_CSR, 0);
+
+       /*
+        * Write firmware to device.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, MCU_CNTL_CSR_RESET, 1);
+       rt2x00_set_field32(&reg, MCU_CNTL_CSR_SELECT_BANK, 1);
+       rt2x00pci_register_write(rt2x00dev, MCU_CNTL_CSR, reg);
+
+       rt2x00pci_register_multiwrite(rt2x00dev, FIRMWARE_IMAGE_BASE,
+                                     data, len);
+
+       rt2x00_set_field32(&reg, MCU_CNTL_CSR_SELECT_BANK, 0);
+       rt2x00pci_register_write(rt2x00dev, MCU_CNTL_CSR, reg);
+
+       rt2x00_set_field32(&reg, MCU_CNTL_CSR_RESET, 0);
+       rt2x00pci_register_write(rt2x00dev, MCU_CNTL_CSR, reg);
+
+       for (i = 0; i < 100; i++) {
+               rt2x00pci_register_read(rt2x00dev, MCU_CNTL_CSR, &reg);
+               if (rt2x00_get_field32(reg, MCU_CNTL_CSR_READY))
+                       break;
+               msleep(1);
+       }
+
+       if (i == 100) {
+               ERROR(rt2x00dev, "MCU Control register not ready.\n");
+               return -EBUSY;
+       }
+
+       /*
+        * Reset MAC and BBP registers.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, MAC_CSR1_SOFT_RESET, 1);
+       rt2x00_set_field32(&reg, MAC_CSR1_BBP_RESET, 1);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR1_SOFT_RESET, 0);
+       rt2x00_set_field32(&reg, MAC_CSR1_BBP_RESET, 0);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR1_HOST_READY, 1);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       return 0;
+}
+
+static void rt61pci_init_rxring(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring = rt2x00dev->rx;
+       struct data_desc *rxd;
+       unsigned int i;
+       u32 word;
+
+       memset(ring->data_addr, 0x00, rt2x00_get_ring_size(ring));
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               rxd = ring->entry[i].priv;
+
+               rt2x00_desc_read(rxd, 5, &word);
+               rt2x00_set_field32(&word, RXD_W5_BUFFER_PHYSICAL_ADDRESS,
+                                  ring->entry[i].data_dma);
+               rt2x00_desc_write(rxd, 5, word);
+
+               rt2x00_desc_read(rxd, 0, &word);
+               rt2x00_set_field32(&word, RXD_W0_OWNER_NIC, 1);
+               rt2x00_desc_write(rxd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(rt2x00dev->rx);
+}
+
+static void rt61pci_init_txring(struct rt2x00_dev *rt2x00dev, const int queue)
+{
+       struct data_ring *ring = rt2x00lib_get_ring(rt2x00dev, queue);
+       struct data_desc *txd;
+       unsigned int i;
+       u32 word;
+
+       memset(ring->data_addr, 0x00, rt2x00_get_ring_size(ring));
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               txd = ring->entry[i].priv;
+
+               rt2x00_desc_read(txd, 1, &word);
+               rt2x00_set_field32(&word, TXD_W1_BUFFER_COUNT, 1);
+               rt2x00_desc_write(txd, 1, word);
+
+               rt2x00_desc_read(txd, 5, &word);
+               rt2x00_set_field32(&word, TXD_W5_PID_TYPE, queue);
+               rt2x00_set_field32(&word, TXD_W5_PID_SUBTYPE, i);
+               rt2x00_desc_write(txd, 5, word);
+
+               rt2x00_desc_read(txd, 6, &word);
+               rt2x00_set_field32(&word, TXD_W6_BUFFER_PHYSICAL_ADDRESS,
+                                  ring->entry[i].data_dma);
+               rt2x00_desc_write(txd, 6, word);
+
+               rt2x00_desc_read(txd, 0, &word);
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 0);
+               rt2x00_desc_write(txd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(ring);
+}
+
+static int rt61pci_init_rings(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Initialize rings.
+        */
+       rt61pci_init_rxring(rt2x00dev);
+       rt61pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+       rt61pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+       rt61pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA2);
+       rt61pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA3);
+       rt61pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA4);
+
+       /*
+        * Initialize registers.
+        */
+       rt2x00pci_register_read(rt2x00dev, TX_RING_CSR0, &reg);
+       rt2x00_set_field32(&reg, TX_RING_CSR0_AC0_RING_SIZE,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].stats.limit);
+       rt2x00_set_field32(&reg, TX_RING_CSR0_AC1_RING_SIZE,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].stats.limit);
+       rt2x00_set_field32(&reg, TX_RING_CSR0_AC2_RING_SIZE,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA2].stats.limit);
+       rt2x00_set_field32(&reg, TX_RING_CSR0_AC3_RING_SIZE,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA3].stats.limit);
+       rt2x00pci_register_write(rt2x00dev, TX_RING_CSR0, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TX_RING_CSR1, &reg);
+       rt2x00_set_field32(&reg, TX_RING_CSR1_MGMT_RING_SIZE,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA4].stats.limit);
+       rt2x00_set_field32(&reg, TX_RING_CSR1_TXD_SIZE,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].desc_size /
+                          4);
+       rt2x00pci_register_write(rt2x00dev, TX_RING_CSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, AC0_BASE_CSR, &reg);
+       rt2x00_set_field32(&reg, AC0_BASE_CSR_RING_REGISTER,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].data_dma);
+       rt2x00pci_register_write(rt2x00dev, AC0_BASE_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, AC1_BASE_CSR, &reg);
+       rt2x00_set_field32(&reg, AC1_BASE_CSR_RING_REGISTER,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].data_dma);
+       rt2x00pci_register_write(rt2x00dev, AC1_BASE_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, AC2_BASE_CSR, &reg);
+       rt2x00_set_field32(&reg, AC2_BASE_CSR_RING_REGISTER,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA2].data_dma);
+       rt2x00pci_register_write(rt2x00dev, AC2_BASE_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, AC3_BASE_CSR, &reg);
+       rt2x00_set_field32(&reg, AC3_BASE_CSR_RING_REGISTER,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA3].data_dma);
+       rt2x00pci_register_write(rt2x00dev, AC3_BASE_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, MGMT_BASE_CSR, &reg);
+       rt2x00_set_field32(&reg, MGMT_BASE_CSR_RING_REGISTER,
+                          rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA4].data_dma);
+       rt2x00pci_register_write(rt2x00dev, MGMT_BASE_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RX_RING_CSR, &reg);
+       rt2x00_set_field32(&reg, RX_RING_CSR_RING_SIZE,
+                          rt2x00dev->rx->stats.limit);
+       rt2x00_set_field32(&reg, RX_RING_CSR_RXD_SIZE,
+                          rt2x00dev->rx->desc_size / 4);
+       rt2x00_set_field32(&reg, RX_RING_CSR_RXD_WRITEBACK_SIZE, 4);
+       rt2x00pci_register_write(rt2x00dev, RX_RING_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RX_BASE_CSR, &reg);
+       rt2x00_set_field32(&reg, RX_BASE_CSR_RING_REGISTER,
+                          rt2x00dev->rx->data_dma);
+       rt2x00pci_register_write(rt2x00dev, RX_BASE_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TX_DMA_DST_CSR, &reg);
+       rt2x00_set_field32(&reg, TX_DMA_DST_CSR_DEST_AC0, 2);
+       rt2x00_set_field32(&reg, TX_DMA_DST_CSR_DEST_AC1, 2);
+       rt2x00_set_field32(&reg, TX_DMA_DST_CSR_DEST_AC2, 2);
+       rt2x00_set_field32(&reg, TX_DMA_DST_CSR_DEST_AC3, 2);
+       rt2x00_set_field32(&reg, TX_DMA_DST_CSR_DEST_MGMT, 0);
+       rt2x00pci_register_write(rt2x00dev, TX_DMA_DST_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, LOAD_TX_RING_CSR, &reg);
+       rt2x00_set_field32(&reg, LOAD_TX_RING_CSR_LOAD_TXD_AC0, 1);
+       rt2x00_set_field32(&reg, LOAD_TX_RING_CSR_LOAD_TXD_AC1, 1);
+       rt2x00_set_field32(&reg, LOAD_TX_RING_CSR_LOAD_TXD_AC2, 1);
+       rt2x00_set_field32(&reg, LOAD_TX_RING_CSR_LOAD_TXD_AC3, 1);
+       rt2x00_set_field32(&reg, LOAD_TX_RING_CSR_LOAD_TXD_MGMT, 1);
+       rt2x00pci_register_write(rt2x00dev, LOAD_TX_RING_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RX_CNTL_CSR, &reg);
+       rt2x00_set_field32(&reg, RX_CNTL_CSR_LOAD_RXD, 1);
+       rt2x00pci_register_write(rt2x00dev, RX_CNTL_CSR, reg);
+
+       return 0;
+}
+
+static int rt61pci_init_registers(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR0_AUTO_TX_SEQ, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DISABLE_RX, 0);
+       rt2x00_set_field32(&reg, TXRX_CSR0_TX_WITHOUT_WAITING, 0);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR1, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID0, 47); /* CCK Signal */
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID0_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID1, 30); /* Rssi */
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID1_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID2, 42); /* OFDM Rate */
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID2_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID3, 30); /* Rssi */
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID3_VALID, 1);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR1, reg);
+
+       /*
+        * CCK TXD BBP registers
+        */
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR2, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID0, 13);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID0_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID1, 12);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID1_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID2, 11);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID2_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID3, 10);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID3_VALID, 1);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR2, reg);
+
+       /*
+        * OFDM TXD BBP registers
+        */
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR3, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID0, 7);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID0_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID1, 6);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID1_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID2, 5);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID2_VALID, 1);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR7, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR7_ACK_CTS_6MBS, 59);
+       rt2x00_set_field32(&reg, TXRX_CSR7_ACK_CTS_9MBS, 53);
+       rt2x00_set_field32(&reg, TXRX_CSR7_ACK_CTS_12MBS, 49);
+       rt2x00_set_field32(&reg, TXRX_CSR7_ACK_CTS_18MBS, 46);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR7, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR8, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR8_ACK_CTS_24MBS, 44);
+       rt2x00_set_field32(&reg, TXRX_CSR8_ACK_CTS_36MBS, 42);
+       rt2x00_set_field32(&reg, TXRX_CSR8_ACK_CTS_48MBS, 42);
+       rt2x00_set_field32(&reg, TXRX_CSR8_ACK_CTS_54MBS, 42);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR8, reg);
+
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR15, 0x0000000f);
+
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR6, 0x00000fff);
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR9, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR9_CW_SELECT, 0);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR9, reg);
+
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR10, 0x0000071c);
+
+       if (rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_AWAKE))
+               return -EBUSY;
+
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR13, 0x0000e000);
+
+       /*
+        * Invalidate all Shared Keys (SEC_CSR0),
+        * and clear the Shared key Cipher algorithms (SEC_CSR1 & SEC_CSR5)
+        */
+       rt2x00pci_register_write(rt2x00dev, SEC_CSR0, 0x00000000);
+       rt2x00pci_register_write(rt2x00dev, SEC_CSR1, 0x00000000);
+       rt2x00pci_register_write(rt2x00dev, SEC_CSR5, 0x00000000);
+
+       rt2x00pci_register_write(rt2x00dev, PHY_CSR1, 0x000023b0);
+       rt2x00pci_register_write(rt2x00dev, PHY_CSR5, 0x060a100c);
+       rt2x00pci_register_write(rt2x00dev, PHY_CSR6, 0x00080606);
+       rt2x00pci_register_write(rt2x00dev, PHY_CSR7, 0x00000a08);
+
+       rt2x00pci_register_write(rt2x00dev, PCI_CFG_CSR, 0x28ca4404);
+
+       rt2x00pci_register_write(rt2x00dev, TEST_MODE_CSR, 0x00000200);
+
+       rt2x00pci_register_write(rt2x00dev, M2H_CMD_DONE_CSR, 0xffffffff);
+
+       rt2x00pci_register_read(rt2x00dev, AC_TXOP_CSR0, &reg);
+       rt2x00_set_field32(&reg, AC_TXOP_CSR0_AC0_TX_OP, 0);
+       rt2x00_set_field32(&reg, AC_TXOP_CSR0_AC1_TX_OP, 0);
+       rt2x00pci_register_write(rt2x00dev, AC_TXOP_CSR0, reg);
+
+       rt2x00pci_register_read(rt2x00dev, AC_TXOP_CSR1, &reg);
+       rt2x00_set_field32(&reg, AC_TXOP_CSR1_AC2_TX_OP, 192);
+       rt2x00_set_field32(&reg, AC_TXOP_CSR1_AC3_TX_OP, 48);
+       rt2x00pci_register_write(rt2x00dev, AC_TXOP_CSR1, reg);
+
+       /*
+        * We must clear the error counters.
+        * These registers are cleared on read,
+        * so we may pass a useless variable to store the value.
+        */
+       rt2x00pci_register_read(rt2x00dev, STA_CSR0, &reg);
+       rt2x00pci_register_read(rt2x00dev, STA_CSR1, &reg);
+       rt2x00pci_register_read(rt2x00dev, STA_CSR2, &reg);
+
+       /*
+        * Reset MAC and BBP registers.
+        */
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR1_SOFT_RESET, 1);
+       rt2x00_set_field32(&reg, MAC_CSR1_BBP_RESET, 1);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR1_SOFT_RESET, 0);
+       rt2x00_set_field32(&reg, MAC_CSR1_BBP_RESET, 0);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR1_HOST_READY, 1);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       return 0;
+}
+
+static int rt61pci_init_bbp(struct rt2x00_dev *rt2x00dev)
+{
+       unsigned int i;
+       u16 eeprom;
+       u8 reg_id;
+       u8 value;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt61pci_bbp_read(rt2x00dev, 0, &value);
+               if ((value != 0xff) && (value != 0x00))
+                       goto continue_csr_init;
+               NOTICE(rt2x00dev, "Waiting for BBP register.\n");
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "BBP register access failed, aborting.\n");
+       return -EACCES;
+
+continue_csr_init:
+       rt61pci_bbp_write(rt2x00dev, 3, 0x00);
+       rt61pci_bbp_write(rt2x00dev, 15, 0x30);
+       rt61pci_bbp_write(rt2x00dev, 21, 0xc8);
+       rt61pci_bbp_write(rt2x00dev, 22, 0x38);
+       rt61pci_bbp_write(rt2x00dev, 23, 0x06);
+       rt61pci_bbp_write(rt2x00dev, 24, 0xfe);
+       rt61pci_bbp_write(rt2x00dev, 25, 0x0a);
+       rt61pci_bbp_write(rt2x00dev, 26, 0x0d);
+       rt61pci_bbp_write(rt2x00dev, 34, 0x12);
+       rt61pci_bbp_write(rt2x00dev, 37, 0x07);
+       rt61pci_bbp_write(rt2x00dev, 39, 0xf8);
+       rt61pci_bbp_write(rt2x00dev, 41, 0x60);
+       rt61pci_bbp_write(rt2x00dev, 53, 0x10);
+       rt61pci_bbp_write(rt2x00dev, 54, 0x18);
+       rt61pci_bbp_write(rt2x00dev, 60, 0x10);
+       rt61pci_bbp_write(rt2x00dev, 61, 0x04);
+       rt61pci_bbp_write(rt2x00dev, 62, 0x04);
+       rt61pci_bbp_write(rt2x00dev, 75, 0xfe);
+       rt61pci_bbp_write(rt2x00dev, 86, 0xfe);
+       rt61pci_bbp_write(rt2x00dev, 88, 0xfe);
+       rt61pci_bbp_write(rt2x00dev, 90, 0x0f);
+       rt61pci_bbp_write(rt2x00dev, 99, 0x00);
+       rt61pci_bbp_write(rt2x00dev, 102, 0x16);
+       rt61pci_bbp_write(rt2x00dev, 107, 0x04);
+
+       DEBUG(rt2x00dev, "Start initialization from EEPROM...\n");
+       for (i = 0; i < EEPROM_BBP_SIZE; i++) {
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_BBP_START + i, &eeprom);
+
+               if (eeprom != 0xffff && eeprom != 0x0000) {
+                       reg_id = rt2x00_get_field16(eeprom, EEPROM_BBP_REG_ID);
+                       value = rt2x00_get_field16(eeprom, EEPROM_BBP_VALUE);
+                       DEBUG(rt2x00dev, "BBP: 0x%02x, value: 0x%02x.\n",
+                             reg_id, value);
+                       rt61pci_bbp_write(rt2x00dev, reg_id, value);
+               }
+       }
+       DEBUG(rt2x00dev, "...End initialization from EEPROM.\n");
+
+       return 0;
+}
+
+/*
+ * Device state switch handlers.
+ */
+static void rt61pci_toggle_rx(struct rt2x00_dev *rt2x00dev,
+                             enum dev_state state)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DISABLE_RX,
+                          state == STATE_RADIO_RX_OFF);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR0, reg);
+}
+
+static void rt61pci_toggle_irq(struct rt2x00_dev *rt2x00dev,
+                              enum dev_state state)
+{
+       int mask = (state == STATE_RADIO_IRQ_OFF);
+       u32 reg;
+
+       /*
+        * When interrupts are being enabled, the interrupt registers
+        * should clear the register to assure a clean state.
+        */
+       if (state == STATE_RADIO_IRQ_ON) {
+               rt2x00pci_register_read(rt2x00dev, INT_SOURCE_CSR, &reg);
+               rt2x00pci_register_write(rt2x00dev, INT_SOURCE_CSR, reg);
+
+               rt2x00pci_register_read(rt2x00dev, MCU_INT_SOURCE_CSR, &reg);
+               rt2x00pci_register_write(rt2x00dev, MCU_INT_SOURCE_CSR, reg);
+       }
+
+       /*
+        * Only toggle the interrupts bits we are going to use.
+        * Non-checked interrupt bits are disabled by default.
+        */
+       rt2x00pci_register_read(rt2x00dev, INT_MASK_CSR, &reg);
+       rt2x00_set_field32(&reg, INT_MASK_CSR_TXDONE, mask);
+       rt2x00_set_field32(&reg, INT_MASK_CSR_RXDONE, mask);
+       rt2x00_set_field32(&reg, INT_MASK_CSR_ENABLE_MITIGATION, mask);
+       rt2x00_set_field32(&reg, INT_MASK_CSR_MITIGATION_PERIOD, 0xff);
+       rt2x00pci_register_write(rt2x00dev, INT_MASK_CSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, MCU_INT_MASK_CSR, &reg);
+       rt2x00_set_field32(&reg, MCU_INT_MASK_CSR_0, mask);
+       rt2x00_set_field32(&reg, MCU_INT_MASK_CSR_1, mask);
+       rt2x00_set_field32(&reg, MCU_INT_MASK_CSR_2, mask);
+       rt2x00_set_field32(&reg, MCU_INT_MASK_CSR_3, mask);
+       rt2x00_set_field32(&reg, MCU_INT_MASK_CSR_4, mask);
+       rt2x00_set_field32(&reg, MCU_INT_MASK_CSR_5, mask);
+       rt2x00_set_field32(&reg, MCU_INT_MASK_CSR_6, mask);
+       rt2x00_set_field32(&reg, MCU_INT_MASK_CSR_7, mask);
+       rt2x00pci_register_write(rt2x00dev, MCU_INT_MASK_CSR, reg);
+}
+
+static int rt61pci_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Initialize all registers.
+        */
+       if (rt61pci_init_rings(rt2x00dev) ||
+           rt61pci_init_registers(rt2x00dev) ||
+           rt61pci_init_bbp(rt2x00dev)) {
+               ERROR(rt2x00dev, "Register initialization failed.\n");
+               return -EIO;
+       }
+
+       /*
+        * Enable interrupts.
+        */
+       rt61pci_toggle_irq(rt2x00dev, STATE_RADIO_IRQ_ON);
+
+       /*
+        * Enable RX.
+        */
+       rt2x00pci_register_read(rt2x00dev, RX_CNTL_CSR, &reg);
+       rt2x00_set_field32(&reg, RX_CNTL_CSR_ENABLE_RX_DMA, 1);
+       rt2x00pci_register_write(rt2x00dev, RX_CNTL_CSR, reg);
+
+       /*
+        * Enable LED
+        */
+       rt61pci_enable_led(rt2x00dev);
+
+       return 0;
+}
+
+static void rt61pci_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Disable LED
+        */
+       rt61pci_disable_led(rt2x00dev);
+
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR10, 0x00001818);
+
+       /*
+        * Disable synchronisation.
+        */
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR9, 0);
+
+       /*
+        * Cancel RX and TX.
+        */
+       rt2x00pci_register_read(rt2x00dev, TX_CNTL_CSR, &reg);
+       rt2x00_set_field32(&reg, TX_CNTL_CSR_ABORT_TX_AC0, 1);
+       rt2x00_set_field32(&reg, TX_CNTL_CSR_ABORT_TX_AC1, 1);
+       rt2x00_set_field32(&reg, TX_CNTL_CSR_ABORT_TX_AC2, 1);
+       rt2x00_set_field32(&reg, TX_CNTL_CSR_ABORT_TX_AC3, 1);
+       rt2x00_set_field32(&reg, TX_CNTL_CSR_ABORT_TX_MGMT, 1);
+       rt2x00pci_register_write(rt2x00dev, TX_CNTL_CSR, reg);
+
+       /*
+        * Disable interrupts.
+        */
+       rt61pci_toggle_irq(rt2x00dev, STATE_RADIO_IRQ_OFF);
+}
+
+static int rt61pci_set_state(struct rt2x00_dev *rt2x00dev, enum dev_state state)
+{
+       u32 reg;
+       unsigned int i;
+       char put_to_sleep;
+       char current_state;
+
+       put_to_sleep = (state != STATE_AWAKE);
+
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR12, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR12_FORCE_WAKEUP, !put_to_sleep);
+       rt2x00_set_field32(&reg, MAC_CSR12_PUT_TO_SLEEP, put_to_sleep);
+       rt2x00pci_register_write(rt2x00dev, MAC_CSR12, reg);
+
+       /*
+        * Device is not guaranteed to be in the requested state yet.
+        * We must wait until the register indicates that the
+        * device has entered the correct state.
+        */
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, MAC_CSR12, &reg);
+               current_state =
+                   rt2x00_get_field32(reg, MAC_CSR12_BBP_CURRENT_STATE);
+               if (current_state == !put_to_sleep)
+                       return 0;
+               msleep(10);
+       }
+
+       NOTICE(rt2x00dev, "Device failed to enter state %d, "
+              "current device state %d.\n", !put_to_sleep, current_state);
+
+       return -EBUSY;
+}
+
+static int rt61pci_set_device_state(struct rt2x00_dev *rt2x00dev,
+                                   enum dev_state state)
+{
+       int retval = 0;
+
+       switch (state) {
+       case STATE_RADIO_ON:
+               retval = rt61pci_enable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_OFF:
+               rt61pci_disable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_RX_ON:
+       case STATE_RADIO_RX_OFF:
+               rt61pci_toggle_rx(rt2x00dev, state);
+               break;
+       case STATE_DEEP_SLEEP:
+       case STATE_SLEEP:
+       case STATE_STANDBY:
+       case STATE_AWAKE:
+               retval = rt61pci_set_state(rt2x00dev, state);
+               break;
+       default:
+               retval = -ENOTSUPP;
+               break;
+       }
+
+       return retval;
+}
+
+/*
+ * TX descriptor initialization
+ */
+static void rt61pci_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+                                 struct data_desc *txd,
+                                 struct data_entry_desc *desc,
+                                 struct ieee80211_hdr *ieee80211hdr,
+                                 unsigned int length,
+                                 struct ieee80211_tx_control *control)
+{
+       u32 word;
+
+       /*
+        * Start writing the descriptor words.
+        */
+       rt2x00_desc_read(txd, 1, &word);
+       rt2x00_set_field32(&word, TXD_W1_HOST_Q_ID, desc->queue);
+       rt2x00_set_field32(&word, TXD_W1_AIFSN, desc->aifs);
+       rt2x00_set_field32(&word, TXD_W1_CWMIN, desc->cw_min);
+       rt2x00_set_field32(&word, TXD_W1_CWMAX, desc->cw_max);
+       rt2x00_set_field32(&word, TXD_W1_IV_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&word, TXD_W1_HW_SEQUENCE, 1);
+       rt2x00_desc_write(txd, 1, word);
+
+       rt2x00_desc_read(txd, 2, &word);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_SIGNAL, desc->signal);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_SERVICE, desc->service);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_LENGTH_LOW, desc->length_low);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_LENGTH_HIGH, desc->length_high);
+       rt2x00_desc_write(txd, 2, word);
+
+       rt2x00_desc_read(txd, 5, &word);
+       rt2x00_set_field32(&word, TXD_W5_TX_POWER,
+                          TXPOWER_TO_DEV(control->power_level));
+       rt2x00_set_field32(&word, TXD_W5_WAITING_DMA_DONE_INT, 1);
+       rt2x00_desc_write(txd, 5, word);
+
+       rt2x00_desc_read(txd, 11, &word);
+       rt2x00_set_field32(&word, TXD_W11_BUFFER_LENGTH0, length);
+       rt2x00_desc_write(txd, 11, word);
+
+       rt2x00_desc_read(txd, 0, &word);
+       rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 1);
+       rt2x00_set_field32(&word, TXD_W0_VALID, 1);
+       rt2x00_set_field32(&word, TXD_W0_MORE_FRAG,
+                          test_bit(ENTRY_TXD_MORE_FRAG, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_ACK,
+                          !(control->flags & IEEE80211_TXCTL_NO_ACK));
+       rt2x00_set_field32(&word, TXD_W0_TIMESTAMP,
+                          test_bit(ENTRY_TXD_REQ_TIMESTAMP, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_OFDM,
+                          test_bit(ENTRY_TXD_OFDM_RATE, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_IFS, desc->ifs);
+       rt2x00_set_field32(&word, TXD_W0_RETRY_MODE,
+                          !!(control->flags &
+                             IEEE80211_TXCTL_LONG_RETRY_LIMIT));
+       rt2x00_set_field32(&word, TXD_W0_TKIP_MIC, 0);
+       rt2x00_set_field32(&word, TXD_W0_DATABYTE_COUNT, length);
+       rt2x00_set_field32(&word, TXD_W0_BURST,
+                          test_bit(ENTRY_TXD_BURST, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_CIPHER_ALG, CIPHER_NONE);
+       rt2x00_desc_write(txd, 0, word);
+}
+
+/*
+ * TX data initialization
+ */
+static void rt61pci_kick_tx_queue(struct rt2x00_dev *rt2x00dev,
+                                 unsigned int queue)
+{
+       u32 reg;
+
+       if (queue == IEEE80211_TX_QUEUE_BEACON) {
+               /*
+                * For Wi-Fi faily generated beacons between participating
+                * stations. Set TBTT phase adaptive adjustment step to 8us.
+                */
+               rt2x00pci_register_write(rt2x00dev, TXRX_CSR10, 0x00001008);
+
+               rt2x00pci_register_read(rt2x00dev, TXRX_CSR9, &reg);
+               if (!rt2x00_get_field32(reg, TXRX_CSR9_BEACON_GEN)) {
+                       rt2x00_set_field32(&reg, TXRX_CSR9_BEACON_GEN, 1);
+                       rt2x00pci_register_write(rt2x00dev, TXRX_CSR9, reg);
+               }
+               return;
+       }
+
+       rt2x00pci_register_read(rt2x00dev, TX_CNTL_CSR, &reg);
+       if (queue == IEEE80211_TX_QUEUE_DATA0)
+               rt2x00_set_field32(&reg, TX_CNTL_CSR_KICK_TX_AC0, 1);
+       else if (queue == IEEE80211_TX_QUEUE_DATA1)
+               rt2x00_set_field32(&reg, TX_CNTL_CSR_KICK_TX_AC1, 1);
+       else if (queue == IEEE80211_TX_QUEUE_DATA2)
+               rt2x00_set_field32(&reg, TX_CNTL_CSR_KICK_TX_AC2, 1);
+       else if (queue == IEEE80211_TX_QUEUE_DATA3)
+               rt2x00_set_field32(&reg, TX_CNTL_CSR_KICK_TX_AC3, 1);
+       else if (queue == IEEE80211_TX_QUEUE_DATA4)
+               rt2x00_set_field32(&reg, TX_CNTL_CSR_KICK_TX_MGMT, 1);
+       rt2x00pci_register_write(rt2x00dev, TX_CNTL_CSR, reg);
+}
+
+/*
+ * RX control handlers
+ */
+static int rt61pci_agc_to_rssi(struct rt2x00_dev *rt2x00dev, int rxd_w1)
+{
+       u16 eeprom;
+       u8 offset;
+       u8 lna;
+
+       lna = rt2x00_get_field32(rxd_w1, RXD_W1_RSSI_LNA);
+       switch (lna) {
+       case 3:
+               offset = 90;
+               break;
+       case 2:
+               offset = 74;
+               break;
+       case 1:
+               offset = 64;
+               break;
+       default:
+               return 0;
+       }
+
+       if (rt2x00dev->rx_status.phymode == MODE_IEEE80211A) {
+               if (test_bit(CONFIG_EXTERNAL_LNA_A, &rt2x00dev->flags))
+                       offset += 14;
+
+               if (lna == 3 || lna == 2)
+                       offset += 10;
+
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_RSSI_OFFSET_A, &eeprom);
+               offset -= rt2x00_get_field16(eeprom, EEPROM_RSSI_OFFSET_A_1);
+       } else {
+               if (test_bit(CONFIG_EXTERNAL_LNA_BG, &rt2x00dev->flags))
+                       offset += 14;
+
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_RSSI_OFFSET_BG, &eeprom);
+               offset -= rt2x00_get_field16(eeprom, EEPROM_RSSI_OFFSET_BG_1);
+       }
+
+       return rt2x00_get_field32(rxd_w1, RXD_W1_RSSI_AGC) * 2 - offset;
+}
+
+static int rt61pci_fill_rxdone(struct data_entry *entry,
+                              int *signal, int *rssi, int *ofdm, int *size)
+{
+       struct data_desc *rxd = entry->priv;
+       u32 word0;
+       u32 word1;
+
+       rt2x00_desc_read(rxd, 0, &word0);
+       rt2x00_desc_read(rxd, 1, &word1);
+
+       if (rt2x00_get_field32(word0, RXD_W0_CRC_ERROR) ||
+           rt2x00_get_field32(word0, RXD_W0_CIPHER_ERROR))
+               return -EINVAL;
+
+       /*
+        * Obtain the status about this packet.
+        */
+       *signal = rt2x00_get_field32(word1, RXD_W1_SIGNAL);
+       *rssi = rt61pci_agc_to_rssi(entry->ring->rt2x00dev, word1);
+       *ofdm = rt2x00_get_field32(word0, RXD_W0_OFDM);
+       *size = rt2x00_get_field32(word0, RXD_W0_DATABYTE_COUNT);
+
+       return 0;
+}
+
+/*
+ * Interrupt functions.
+ */
+static void rt61pci_txdone(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring;
+       struct data_entry *entry;
+       struct data_desc *txd;
+       u32 word;
+       u32 reg;
+       u32 old_reg;
+       int type;
+       int index;
+       int tx_status;
+       int retry;
+
+       /*
+        * During each loop we will compare the freshly read
+        * STA_CSR4 register value with the value read from
+        * the previous loop. If the 2 values are equal then
+        * we should stop processing because the chance it
+        * quite big that the device has been unplugged and
+        * we risk going into an endless loop.
+        */
+       old_reg = 0;
+
+       while (1) {
+               rt2x00pci_register_read(rt2x00dev, STA_CSR4, &reg);
+               if (!rt2x00_get_field32(reg, STA_CSR4_VALID))
+                       break;
+
+               if (old_reg == reg)
+                       break;
+               old_reg = reg;
+
+               /*
+                * Skip this entry when it contains an invalid
+                * ring identication number.
+                */
+               type = rt2x00_get_field32(reg, STA_CSR4_PID_TYPE);
+               ring = rt2x00lib_get_ring(rt2x00dev, type);
+               if (unlikely(!ring))
+                       continue;
+
+               /*
+                * Skip this entry when it contains an invalid
+                * index number.
+                */
+               index = rt2x00_get_field32(reg, STA_CSR4_PID_SUBTYPE);
+               if (unlikely(index >= ring->stats.limit))
+                       continue;
+
+               entry = &ring->entry[index];
+               txd = entry->priv;
+               rt2x00_desc_read(txd, 0, &word);
+
+               if (rt2x00_get_field32(word, TXD_W0_OWNER_NIC) ||
+                   !rt2x00_get_field32(word, TXD_W0_VALID))
+                       return;
+
+               /*
+                * Obtain the status about this packet.
+                */
+               tx_status = rt2x00_get_field32(reg, STA_CSR4_TX_RESULT);
+               retry = rt2x00_get_field32(reg, STA_CSR4_RETRY_COUNT);
+
+               rt2x00lib_txdone(entry, tx_status, retry);
+
+               /*
+                * Make this entry available for reuse.
+                */
+               entry->flags = 0;
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_desc_write(txd, 0, word);
+               rt2x00_ring_index_done_inc(entry->ring);
+
+               /*
+                * If the data ring was full before the txdone handler
+                * we must make sure the packet queue in the mac80211 stack
+                * is reenabled when the txdone handler has finished.
+                */
+               if (!rt2x00_ring_full(ring))
+                       ieee80211_wake_queue(rt2x00dev->hw,
+                                            entry->tx_status.control.queue);
+       }
+}
+
+static irqreturn_t rt61pci_interrupt(int irq, void *dev_instance)
+{
+       struct rt2x00_dev *rt2x00dev = dev_instance;
+       u32 reg_mcu;
+       u32 reg;
+
+       /*
+        * Get the interrupt sources & saved to local variable.
+        * Write register value back to clear pending interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, MCU_INT_SOURCE_CSR, &reg_mcu);
+       rt2x00pci_register_write(rt2x00dev, MCU_INT_SOURCE_CSR, reg_mcu);
+
+       rt2x00pci_register_read(rt2x00dev, INT_SOURCE_CSR, &reg);
+       rt2x00pci_register_write(rt2x00dev, INT_SOURCE_CSR, reg);
+
+       if (!reg && !reg_mcu)
+               return IRQ_NONE;
+
+       if (!test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags))
+               return IRQ_HANDLED;
+
+       /*
+        * Handle interrupts, walk through all bits
+        * and run the tasks, the bits are checked in order of
+        * priority.
+        */
+
+       /*
+        * 1 - Rx ring done interrupt.
+        */
+       if (rt2x00_get_field32(reg, INT_SOURCE_CSR_RXDONE))
+               rt2x00pci_rxdone(rt2x00dev);
+
+       /*
+        * 2 - Tx ring done interrupt.
+        */
+       if (rt2x00_get_field32(reg, INT_SOURCE_CSR_TXDONE))
+               rt61pci_txdone(rt2x00dev);
+
+       /*
+        * 3 - Handle MCU command done.
+        */
+       if (reg_mcu)
+               rt2x00pci_register_write(rt2x00dev,
+                                        M2H_CMD_DONE_CSR, 0xffffffff);
+
+       return IRQ_HANDLED;
+}
+
+/*
+ * Device probe functions.
+ */
+static int rt61pci_validate_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       struct eeprom_93cx6 eeprom;
+       u32 reg;
+       u16 word;
+       u8 *mac;
+       s8 value;
+
+       rt2x00pci_register_read(rt2x00dev, E2PROM_CSR, &reg);
+
+       eeprom.data = rt2x00dev;
+       eeprom.register_read = rt61pci_eepromregister_read;
+       eeprom.register_write = rt61pci_eepromregister_write;
+       eeprom.width = rt2x00_get_field32(reg, E2PROM_CSR_TYPE_93C46) ?
+           PCI_EEPROM_WIDTH_93C46 : PCI_EEPROM_WIDTH_93C66;
+       eeprom.reg_data_in = 0;
+       eeprom.reg_data_out = 0;
+       eeprom.reg_data_clock = 0;
+       eeprom.reg_chip_select = 0;
+
+       eeprom_93cx6_multiread(&eeprom, EEPROM_BASE, rt2x00dev->eeprom,
+                              EEPROM_SIZE / sizeof(u16));
+
+       /*
+        * Start validation of the data that has been read.
+        */
+       mac = rt2x00_eeprom_addr(rt2x00dev, EEPROM_MAC_ADDR_0);
+       if (!is_valid_ether_addr(mac)) {
+               random_ether_addr(mac);
+               EEPROM(rt2x00dev, "MAC: " MAC_FMT "\n", MAC_ARG(mac));
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_NUM, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_TX_DEFAULT, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RX_DEFAULT, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_FRAME_TYPE, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_DYN_TXAGC, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_HARDWARE_RADIO, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RF_TYPE, RF5225);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_ANTENNA, word);
+               EEPROM(rt2x00dev, "Antenna: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_NIC_ENABLE_DIVERSITY, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_TX_DIVERSITY, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_TX_RX_FIXED, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_EXTERNAL_LNA_BG, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_CARDBUS_ACCEL, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_EXTERNAL_LNA_A, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_NIC, word);
+               EEPROM(rt2x00dev, "NIC: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_LED, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_LED_LED_MODE,
+                                  LED_MODE_DEFAULT);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_LED, word);
+               EEPROM(rt2x00dev, "Led: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_FREQ, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_FREQ_OFFSET, 0);
+               rt2x00_set_field16(&word, EEPROM_FREQ_SEQ, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_FREQ, word);
+               EEPROM(rt2x00dev, "Freq: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_RSSI_OFFSET_BG, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_BG_1, 0);
+               rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_BG_2, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_RSSI_OFFSET_BG, word);
+               EEPROM(rt2x00dev, "RSSI OFFSET BG: 0x%04x\n", word);
+       } else {
+               value = rt2x00_get_field16(word, EEPROM_RSSI_OFFSET_BG_1);
+               if (value < -10 || value > 10)
+                       rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_BG_1, 0);
+               value = rt2x00_get_field16(word, EEPROM_RSSI_OFFSET_BG_2);
+               if (value < -10 || value > 10)
+                       rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_BG_2, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_RSSI_OFFSET_BG, word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_RSSI_OFFSET_A, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_A_1, 0);
+               rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_A_2, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_RSSI_OFFSET_A, word);
+               EEPROM(rt2x00dev, "RSSI OFFSET BG: 0x%04x\n", word);
+       } else {
+               value = rt2x00_get_field16(word, EEPROM_RSSI_OFFSET_A_1);
+               if (value < -10 || value > 10)
+                       rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_A_1, 0);
+               value = rt2x00_get_field16(word, EEPROM_RSSI_OFFSET_A_2);
+               if (value < -10 || value > 10)
+                       rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_A_2, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_RSSI_OFFSET_A, word);
+       }
+
+       return 0;
+}
+
+static int rt61pci_init_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       u16 value;
+       u16 eeprom;
+       u16 device;
+
+       /*
+        * Read EEPROM word for configuration.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &eeprom);
+
+       /*
+        * Identify RF chipset.
+        * To determine the RT chip we have to read the
+        * PCI header of the device.
+        */
+       pci_read_config_word(rt2x00dev_pci(rt2x00dev),
+                            PCI_CONFIG_HEADER_DEVICE, &device);
+       value = rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RF_TYPE);
+       rt2x00pci_register_read(rt2x00dev, MAC_CSR0, &reg);
+       rt2x00_set_chip(rt2x00dev, device, value, reg);
+
+       if (!rt2x00_rf(&rt2x00dev->chip, RF5225) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF5325) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2527) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2529)) {
+               ERROR(rt2x00dev, "Invalid RF chipset detected.\n");
+               return -ENODEV;
+       }
+
+       /*
+        * Identify default antenna configuration.
+        */
+       rt2x00dev->hw->conf.antenna_sel_tx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_TX_DEFAULT);
+       rt2x00dev->hw->conf.antenna_sel_rx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RX_DEFAULT);
+
+       /*
+        * Read the Frame type.
+        */
+       if (rt2x00_get_field16(eeprom, EEPROM_ANTENNA_FRAME_TYPE))
+               __set_bit(CONFIG_FRAME_TYPE, &rt2x00dev->flags);
+
+       /*
+        * Determine number of antenna's.
+        */
+       if (rt2x00_get_field16(eeprom, EEPROM_ANTENNA_NUM) == 2)
+               __set_bit(CONFIG_DOUBLE_ANTENNA, &rt2x00dev->flags);
+
+       /*
+        * Detect if this device has an hardware controlled radio.
+        */
+       if (rt2x00_get_field16(eeprom, EEPROM_ANTENNA_HARDWARE_RADIO))
+               __set_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags);
+
+       /*
+        * Read frequency offset and RF programming sequence.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_FREQ, &eeprom);
+       if (rt2x00_get_field16(eeprom, EEPROM_FREQ_SEQ))
+               __set_bit(CONFIG_RF_SEQUENCE, &rt2x00dev->flags);
+
+       rt2x00dev->freq_offset = rt2x00_get_field16(eeprom, EEPROM_FREQ_OFFSET);
+
+       /*
+        * Read external LNA informations.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &eeprom);
+
+       if (rt2x00_get_field16(eeprom, EEPROM_NIC_EXTERNAL_LNA_A))
+               __set_bit(CONFIG_EXTERNAL_LNA_A, &rt2x00dev->flags);
+       if (rt2x00_get_field16(eeprom, EEPROM_NIC_EXTERNAL_LNA_BG))
+               __set_bit(CONFIG_EXTERNAL_LNA_BG, &rt2x00dev->flags);
+
+       /*
+        * Store led settings, for correct led behaviour.
+        * If the eeprom value is invalid,
+        * switch to default led mode.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_LED, &eeprom);
+
+       rt2x00dev->led_mode = rt2x00_get_field16(eeprom, EEPROM_LED_LED_MODE);
+
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_LED_MODE,
+                          rt2x00dev->led_mode);
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_0,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_0));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_1,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_1));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_2,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_2));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_3,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_3));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_4,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_4));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_ACT,
+                          rt2x00_get_field16(eeprom, EEPROM_LED_POLARITY_ACT));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_READY_BG,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_RDY_G));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_READY_A,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_RDY_A));
+
+       return 0;
+}
+
+/*
+ * RF value list for RF5225 & RF5325
+ * Supports: 2.4 GHz & 5.2 GHz, rf_sequence disabled
+ */
+static const struct rf_channel rf_vals_noseq[] = {
+       { 1,  0x00002ccc, 0x00004786, 0x00068455, 0x000ffa0b },
+       { 2,  0x00002ccc, 0x00004786, 0x00068455, 0x000ffa1f },
+       { 3,  0x00002ccc, 0x0000478a, 0x00068455, 0x000ffa0b },
+       { 4,  0x00002ccc, 0x0000478a, 0x00068455, 0x000ffa1f },
+       { 5,  0x00002ccc, 0x0000478e, 0x00068455, 0x000ffa0b },
+       { 6,  0x00002ccc, 0x0000478e, 0x00068455, 0x000ffa1f },
+       { 7,  0x00002ccc, 0x00004792, 0x00068455, 0x000ffa0b },
+       { 8,  0x00002ccc, 0x00004792, 0x00068455, 0x000ffa1f },
+       { 9,  0x00002ccc, 0x00004796, 0x00068455, 0x000ffa0b },
+       { 10, 0x00002ccc, 0x00004796, 0x00068455, 0x000ffa1f },
+       { 11, 0x00002ccc, 0x0000479a, 0x00068455, 0x000ffa0b },
+       { 12, 0x00002ccc, 0x0000479a, 0x00068455, 0x000ffa1f },
+       { 13, 0x00002ccc, 0x0000479e, 0x00068455, 0x000ffa0b },
+       { 14, 0x00002ccc, 0x000047a2, 0x00068455, 0x000ffa13 },
+
+       /* 802.11 UNI / HyperLan 2 */
+       { 36, 0x00002ccc, 0x0000499a, 0x0009be55, 0x000ffa23 },
+       { 40, 0x00002ccc, 0x000049a2, 0x0009be55, 0x000ffa03 },
+       { 44, 0x00002ccc, 0x000049a6, 0x0009be55, 0x000ffa0b },
+       { 48, 0x00002ccc, 0x000049aa, 0x0009be55, 0x000ffa13 },
+       { 52, 0x00002ccc, 0x000049ae, 0x0009ae55, 0x000ffa1b },
+       { 56, 0x00002ccc, 0x000049b2, 0x0009ae55, 0x000ffa23 },
+       { 60, 0x00002ccc, 0x000049ba, 0x0009ae55, 0x000ffa03 },
+       { 64, 0x00002ccc, 0x000049be, 0x0009ae55, 0x000ffa0b },
+
+       /* 802.11 HyperLan 2 */
+       { 100, 0x00002ccc, 0x00004a2a, 0x000bae55, 0x000ffa03 },
+       { 104, 0x00002ccc, 0x00004a2e, 0x000bae55, 0x000ffa0b },
+       { 108, 0x00002ccc, 0x00004a32, 0x000bae55, 0x000ffa13 },
+       { 112, 0x00002ccc, 0x00004a36, 0x000bae55, 0x000ffa1b },
+       { 116, 0x00002ccc, 0x00004a3a, 0x000bbe55, 0x000ffa23 },
+       { 120, 0x00002ccc, 0x00004a82, 0x000bbe55, 0x000ffa03 },
+       { 124, 0x00002ccc, 0x00004a86, 0x000bbe55, 0x000ffa0b },
+       { 128, 0x00002ccc, 0x00004a8a, 0x000bbe55, 0x000ffa13 },
+       { 132, 0x00002ccc, 0x00004a8e, 0x000bbe55, 0x000ffa1b },
+       { 136, 0x00002ccc, 0x00004a92, 0x000bbe55, 0x000ffa23 },
+
+       /* 802.11 UNII */
+       { 140, 0x00002ccc, 0x00004a9a, 0x000bbe55, 0x000ffa03 },
+       { 149, 0x00002ccc, 0x00004aa2, 0x000bbe55, 0x000ffa1f },
+       { 153, 0x00002ccc, 0x00004aa6, 0x000bbe55, 0x000ffa27 },
+       { 157, 0x00002ccc, 0x00004aae, 0x000bbe55, 0x000ffa07 },
+       { 161, 0x00002ccc, 0x00004ab2, 0x000bbe55, 0x000ffa0f },
+       { 165, 0x00002ccc, 0x00004ab6, 0x000bbe55, 0x000ffa17 },
+
+       /* MMAC(Japan)J52 ch 34,38,42,46 */
+       { 34, 0x00002ccc, 0x0000499a, 0x0009be55, 0x000ffa0b },
+       { 38, 0x00002ccc, 0x0000499e, 0x0009be55, 0x000ffa13 },
+       { 42, 0x00002ccc, 0x000049a2, 0x0009be55, 0x000ffa1b },
+       { 46, 0x00002ccc, 0x000049a6, 0x0009be55, 0x000ffa23 },
+};
+
+/*
+ * RF value list for RF5225 & RF5325
+ * Supports: 2.4 GHz & 5.2 GHz, rf_sequence enabled
+ */
+static const struct rf_channel rf_vals_seq[] = {
+       { 1,  0x00002ccc, 0x00004786, 0x00068455, 0x000ffa0b },
+       { 2,  0x00002ccc, 0x00004786, 0x00068455, 0x000ffa1f },
+       { 3,  0x00002ccc, 0x0000478a, 0x00068455, 0x000ffa0b },
+       { 4,  0x00002ccc, 0x0000478a, 0x00068455, 0x000ffa1f },
+       { 5,  0x00002ccc, 0x0000478e, 0x00068455, 0x000ffa0b },
+       { 6,  0x00002ccc, 0x0000478e, 0x00068455, 0x000ffa1f },
+       { 7,  0x00002ccc, 0x00004792, 0x00068455, 0x000ffa0b },
+       { 8,  0x00002ccc, 0x00004792, 0x00068455, 0x000ffa1f },
+       { 9,  0x00002ccc, 0x00004796, 0x00068455, 0x000ffa0b },
+       { 10, 0x00002ccc, 0x00004796, 0x00068455, 0x000ffa1f },
+       { 11, 0x00002ccc, 0x0000479a, 0x00068455, 0x000ffa0b },
+       { 12, 0x00002ccc, 0x0000479a, 0x00068455, 0x000ffa1f },
+       { 13, 0x00002ccc, 0x0000479e, 0x00068455, 0x000ffa0b },
+       { 14, 0x00002ccc, 0x000047a2, 0x00068455, 0x000ffa13 },
+
+       /* 802.11 UNI / HyperLan 2 */
+       { 36, 0x00002cd4, 0x0004481a, 0x00098455, 0x000c0a03 },
+       { 40, 0x00002cd0, 0x00044682, 0x00098455, 0x000c0a03 },
+       { 44, 0x00002cd0, 0x00044686, 0x00098455, 0x000c0a1b },
+       { 48, 0x00002cd0, 0x0004468e, 0x00098655, 0x000c0a0b },
+       { 52, 0x00002cd0, 0x00044692, 0x00098855, 0x000c0a23 },
+       { 56, 0x00002cd0, 0x0004469a, 0x00098c55, 0x000c0a13 },
+       { 60, 0x00002cd0, 0x000446a2, 0x00098e55, 0x000c0a03 },
+       { 64, 0x00002cd0, 0x000446a6, 0x00099255, 0x000c0a1b },
+
+       /* 802.11 HyperLan 2 */
+       { 100, 0x00002cd4, 0x0004489a, 0x000b9855, 0x000c0a03 },
+       { 104, 0x00002cd4, 0x000448a2, 0x000b9855, 0x000c0a03 },
+       { 108, 0x00002cd4, 0x000448aa, 0x000b9855, 0x000c0a03 },
+       { 112, 0x00002cd4, 0x000448b2, 0x000b9a55, 0x000c0a03 },
+       { 116, 0x00002cd4, 0x000448ba, 0x000b9a55, 0x000c0a03 },
+       { 120, 0x00002cd0, 0x00044702, 0x000b9a55, 0x000c0a03 },
+       { 124, 0x00002cd0, 0x00044706, 0x000b9a55, 0x000c0a1b },
+       { 128, 0x00002cd0, 0x0004470e, 0x000b9c55, 0x000c0a0b },
+       { 132, 0x00002cd0, 0x00044712, 0x000b9c55, 0x000c0a23 },
+       { 136, 0x00002cd0, 0x0004471a, 0x000b9e55, 0x000c0a13 },
+
+       /* 802.11 UNII */
+       { 140, 0x00002cd0, 0x00044722, 0x000b9e55, 0x000c0a03 },
+       { 149, 0x00002cd0, 0x0004472e, 0x000ba255, 0x000c0a1b },
+       { 153, 0x00002cd0, 0x00044736, 0x000ba255, 0x000c0a0b },
+       { 157, 0x00002cd4, 0x0004490a, 0x000ba255, 0x000c0a17 },
+       { 161, 0x00002cd4, 0x00044912, 0x000ba255, 0x000c0a17 },
+       { 165, 0x00002cd4, 0x0004491a, 0x000ba255, 0x000c0a17 },
+
+       /* MMAC(Japan)J52 ch 34,38,42,46 */
+       { 34, 0x00002ccc, 0x0000499a, 0x0009be55, 0x000c0a0b },
+       { 38, 0x00002ccc, 0x0000499e, 0x0009be55, 0x000c0a13 },
+       { 42, 0x00002ccc, 0x000049a2, 0x0009be55, 0x000c0a1b },
+       { 46, 0x00002ccc, 0x000049a6, 0x0009be55, 0x000c0a23 },
+};
+
+static void rt61pci_probe_hw_mode(struct rt2x00_dev *rt2x00dev)
+{
+       struct hw_mode_spec *spec = &rt2x00dev->spec;
+       u8 *txpower;
+       unsigned int i;
+
+       /*
+        * Initialize all hw fields.
+        */
+       rt2x00dev->hw->flags =
+           IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE |
+           IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING |
+           IEEE80211_HW_MONITOR_DURING_OPER |
+           IEEE80211_HW_NO_PROBE_FILTERING;
+       rt2x00dev->hw->extra_tx_headroom = 0;
+       rt2x00dev->hw->max_signal = MAX_SIGNAL;
+       rt2x00dev->hw->max_rssi = MAX_RX_SSI;
+       rt2x00dev->hw->queues = 5;
+
+       SET_IEEE80211_DEV(rt2x00dev->hw, &rt2x00dev_pci(rt2x00dev)->dev);
+       SET_IEEE80211_PERM_ADDR(rt2x00dev->hw,
+                               rt2x00_eeprom_addr(rt2x00dev,
+                                                  EEPROM_MAC_ADDR_0));
+
+       /*
+        * Convert tx_power array in eeprom.
+        */
+       txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_G_START);
+       for (i = 0; i < 14; i++)
+               txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+       /*
+        * Initialize hw_mode information.
+        */
+       spec->num_modes = 2;
+       spec->num_rates = 12;
+       spec->tx_power_a = NULL;
+       spec->tx_power_bg = txpower;
+       spec->tx_power_default = DEFAULT_TXPOWER;
+
+       if (!test_bit(CONFIG_RF_SEQUENCE, &rt2x00dev->flags)) {
+               spec->num_channels = 14;
+               spec->channels = rf_vals_noseq;
+       } else {
+               spec->num_channels = 14;
+               spec->channels = rf_vals_seq;
+       }
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF5225) ||
+           rt2x00_rf(&rt2x00dev->chip, RF5325)) {
+               spec->num_modes = 3;
+               spec->num_channels = ARRAY_SIZE(rf_vals_seq);
+
+               txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_A_START);
+               for (i = 0; i < 14; i++)
+                       txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+               spec->tx_power_a = txpower;
+       }
+}
+
+static int rt61pci_probe_hw(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       /*
+        * Allocate eeprom data.
+        */
+       retval = rt61pci_validate_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt61pci_init_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       /*
+        * Initialize hw specifications.
+        */
+       rt61pci_probe_hw_mode(rt2x00dev);
+
+       /*
+        * This device requires firmware
+        */
+       __set_bit(REQUIRE_FIRMWARE, &rt2x00dev->flags);
+
+       /*
+        * Set the rssi offset.
+        */
+       rt2x00dev->rssi_offset = DEFAULT_RSSI_OFFSET;
+
+       return 0;
+}
+
+/*
+ * IEEE80211 stack callback functions.
+ */
+static int rt61pci_set_retry_limit(struct ieee80211_hw *hw,
+                                  u32 short_retry, u32 long_retry)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR4, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR4_LONG_RETRY_LIMIT, long_retry);
+       rt2x00_set_field32(&reg, TXRX_CSR4_SHORT_RETRY_LIMIT, short_retry);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR4, reg);
+
+       return 0;
+}
+
+static u64 rt61pci_get_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u64 tsf;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR13, &reg);
+       tsf = (u64) rt2x00_get_field32(reg, TXRX_CSR13_HIGH_TSFTIMER) << 32;
+       rt2x00pci_register_read(rt2x00dev, TXRX_CSR12, &reg);
+       tsf |= rt2x00_get_field32(reg, TXRX_CSR12_LOW_TSFTIMER);
+
+       return tsf;
+}
+
+static void rt61pci_reset_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR12, 0);
+       rt2x00pci_register_write(rt2x00dev, TXRX_CSR13, 0);
+}
+
+int rt61pci_beacon_update(struct ieee80211_hw *hw, struct sk_buff *skb,
+                         struct ieee80211_tx_control *control)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       /*
+        * Just in case the ieee80211 doesn't set this,
+        * but we need this queue set for the descriptor
+        * initialization.
+        */
+       control->queue = IEEE80211_TX_QUEUE_BEACON;
+
+       /*
+        * We need to append the descriptor in front of the
+        * beacon frame.
+        */
+       if (skb_headroom(skb) < TXD_DESC_SIZE) {
+               if (pskb_expand_head(skb, TXD_DESC_SIZE, 0, GFP_ATOMIC)) {
+                       dev_kfree_skb(skb);
+                       return -ENOMEM;
+               }
+       }
+
+       /*
+        * First we create the beacon.
+        */
+       skb_push(skb, TXD_DESC_SIZE);
+       rt2x00lib_write_tx_desc(rt2x00dev, (struct data_desc *)skb->data,
+                               (struct ieee80211_hdr *)(skb->data +
+                                                        TXD_DESC_SIZE),
+                               skb->len - TXD_DESC_SIZE, control);
+
+       /*
+        * Write entire beacon with descriptor to register,
+        * and kick the beacon generator.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, HW_BEACON_BASE0, skb->data, skb->len);
+       rt61pci_kick_tx_queue(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       return 0;
+}
+
+static const struct ieee80211_ops rt61pci_mac80211_ops = {
+       .tx                     = rt2x00mac_tx,
+       .add_interface          = rt2x00mac_add_interface,
+       .remove_interface       = rt2x00mac_remove_interface,
+       .config                 = rt2x00mac_config,
+       .config_interface       = rt2x00mac_config_interface,
+       .set_multicast_list     = rt2x00mac_set_multicast_list,
+       .get_stats              = rt2x00mac_get_stats,
+       .set_retry_limit        = rt61pci_set_retry_limit,
+       .conf_tx                = rt2x00mac_conf_tx,
+       .get_tx_stats           = rt2x00mac_get_tx_stats,
+       .get_tsf                = rt61pci_get_tsf,
+       .reset_tsf              = rt61pci_reset_tsf,
+       .beacon_update          = rt61pci_beacon_update,
+};
+
+static const struct rt2x00lib_ops rt61pci_rt2x00_ops = {
+       .irq_handler            = rt61pci_interrupt,
+       .probe_hw               = rt61pci_probe_hw,
+       .get_firmware_name      = rt61pci_get_firmware_name,
+       .load_firmware          = rt61pci_load_firmware,
+       .initialize             = rt2x00pci_initialize,
+       .uninitialize           = rt2x00pci_uninitialize,
+       .set_device_state       = rt61pci_set_device_state,
+#ifdef CONFIG_RT61PCI_RFKILL
+       .rfkill_poll            = rt61pci_rfkill_poll,
+#endif /* CONFIG_RT61PCI_RFKILL */
+       .link_stats             = rt61pci_link_stats,
+       .reset_tuner            = rt61pci_reset_tuner,
+       .link_tuner             = rt61pci_link_tuner,
+       .write_tx_desc          = rt61pci_write_tx_desc,
+       .write_tx_data          = rt2x00pci_write_tx_data,
+       .kick_tx_queue          = rt61pci_kick_tx_queue,
+       .fill_rxdone            = rt61pci_fill_rxdone,
+       .config_mac_addr        = rt61pci_config_mac_addr,
+       .config_bssid           = rt61pci_config_bssid,
+       .config_packet_filter   = rt61pci_config_packet_filter,
+       .config_type            = rt61pci_config_type,
+       .config                 = rt61pci_config,
+};
+
+static const struct rt2x00_ops rt61pci_ops = {
+       .name           = DRV_NAME,
+       .rxd_size       = RXD_DESC_SIZE,
+       .txd_size       = TXD_DESC_SIZE,
+       .eeprom_size    = EEPROM_SIZE,
+       .rf_size        = RF_SIZE,
+       .lib            = &rt61pci_rt2x00_ops,
+       .hw             = &rt61pci_mac80211_ops,
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       .debugfs        = &rt61pci_rt2x00debug,
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * RT61pci module information.
+ */
+static struct pci_device_id rt61pci_device_table[] = {
+       /* RT2561s */
+       { PCI_DEVICE(0x1814, 0x0301), PCI_DEVICE_DATA(&rt61pci_ops) },
+       /* RT2561 v2 */
+       { PCI_DEVICE(0x1814, 0x0302), PCI_DEVICE_DATA(&rt61pci_ops) },
+       /* RT2661 */
+       { PCI_DEVICE(0x1814, 0x0401), PCI_DEVICE_DATA(&rt61pci_ops) },
+       { 0, }
+};
+
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("Ralink RT61 PCI & PCMCIA Wireless LAN driver.");
+MODULE_SUPPORTED_DEVICE("Ralink RT2561, RT2561s & RT2661 "
+                       "PCI & PCMCIA chipset based cards");
+MODULE_DEVICE_TABLE(pci, rt61pci_device_table);
+MODULE_FIRMWARE(FIRMWARE_RT2561);
+MODULE_FIRMWARE(FIRMWARE_RT2561s);
+MODULE_FIRMWARE(FIRMWARE_RT2661);
+MODULE_LICENSE("GPL");
+
+static struct pci_driver rt61pci_driver = {
+       .name           = DRV_NAME,
+       .id_table       = rt61pci_device_table,
+       .probe          = rt2x00pci_probe,
+       .remove         = __devexit_p(rt2x00pci_remove),
+       .suspend        = rt2x00pci_suspend,
+       .resume         = rt2x00pci_resume,
+};
+
+static int __init rt61pci_init(void)
+{
+       return pci_register_driver(&rt61pci_driver);
+}
+
+static void __exit rt61pci_exit(void)
+{
+       pci_unregister_driver(&rt61pci_driver);
+}
+
+module_init(rt61pci_init);
+module_exit(rt61pci_exit);
diff --git a/drivers/net/wireless/rt2x00/rt61pci.h b/drivers/net/wireless/rt2x00/rt61pci.h
new file mode 100644 (file)
index 0000000..6721d7d
--- /dev/null
@@ -0,0 +1,1457 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt61pci
+       Abstract: Data structures and registers for the rt61pci module.
+       Supported chipsets: RT2561, RT2561s, RT2661.
+ */
+
+#ifndef RT61PCI_H
+#define RT61PCI_H
+
+/*
+ * RF chip defines.
+ */
+#define RF5225                         0x0001
+#define RF5325                         0x0002
+#define RF2527                         0x0003
+#define RF2529                         0x0004
+
+/*
+ * Signal information.
+ * Defaul offset is required for RSSI <-> dBm conversion.
+ */
+#define MAX_SIGNAL                     100
+#define MAX_RX_SSI                     -1
+#define DEFAULT_RSSI_OFFSET            120
+
+/*
+ * Register layout information.
+ */
+#define CSR_REG_BASE                   0x3000
+#define CSR_REG_SIZE                   0x04b0
+#define EEPROM_BASE                    0x0000
+#define EEPROM_SIZE                    0x0100
+#define BBP_SIZE                       0x0080
+#define RF_SIZE                                0x0014
+
+/*
+ * PCI registers.
+ */
+
+/*
+ * PCI Configuration Header
+ */
+#define PCI_CONFIG_HEADER_VENDOR       0x0000
+#define PCI_CONFIG_HEADER_DEVICE       0x0002
+
+/*
+ * HOST_CMD_CSR: For HOST to interrupt embedded processor
+ */
+#define HOST_CMD_CSR                   0x0008
+#define HOST_CMD_CSR_HOST_COMMAND      FIELD32(0x0000007f)
+#define HOST_CMD_CSR_INTERRUPT_MCU     FIELD32(0x00000080)
+
+/*
+ * MCU_CNTL_CSR
+ * SELECT_BANK: Select 8051 program bank.
+ * RESET: Enable 8051 reset state.
+ * READY: Ready state for 8051.
+ */
+#define MCU_CNTL_CSR                   0x000c
+#define MCU_CNTL_CSR_SELECT_BANK       FIELD32(0x00000001)
+#define MCU_CNTL_CSR_RESET             FIELD32(0x00000002)
+#define MCU_CNTL_CSR_READY             FIELD32(0x00000004)
+
+/*
+ * SOFT_RESET_CSR
+ */
+#define SOFT_RESET_CSR                 0x0010
+
+/*
+ * MCU_INT_SOURCE_CSR: MCU interrupt source/mask register.
+ */
+#define MCU_INT_SOURCE_CSR             0x0014
+#define MCU_INT_SOURCE_CSR_0           FIELD32(0x00000001)
+#define MCU_INT_SOURCE_CSR_1           FIELD32(0x00000002)
+#define MCU_INT_SOURCE_CSR_2           FIELD32(0x00000004)
+#define MCU_INT_SOURCE_CSR_3           FIELD32(0x00000008)
+#define MCU_INT_SOURCE_CSR_4           FIELD32(0x00000010)
+#define MCU_INT_SOURCE_CSR_5           FIELD32(0x00000020)
+#define MCU_INT_SOURCE_CSR_6           FIELD32(0x00000040)
+#define MCU_INT_SOURCE_CSR_7           FIELD32(0x00000080)
+#define MCU_INT_SOURCE_CSR_TWAKEUP     FIELD32(0x00000100)
+#define MCU_INT_SOURCE_CSR_TBTT_EXPIRE FIELD32(0x00000200)
+
+/*
+ * MCU_INT_MASK_CSR: MCU interrupt source/mask register.
+ */
+#define MCU_INT_MASK_CSR               0x0018
+#define MCU_INT_MASK_CSR_0             FIELD32(0x00000001)
+#define MCU_INT_MASK_CSR_1             FIELD32(0x00000002)
+#define MCU_INT_MASK_CSR_2             FIELD32(0x00000004)
+#define MCU_INT_MASK_CSR_3             FIELD32(0x00000008)
+#define MCU_INT_MASK_CSR_4             FIELD32(0x00000010)
+#define MCU_INT_MASK_CSR_5             FIELD32(0x00000020)
+#define MCU_INT_MASK_CSR_6             FIELD32(0x00000040)
+#define MCU_INT_MASK_CSR_7             FIELD32(0x00000080)
+#define MCU_INT_MASK_CSR_TWAKEUP       FIELD32(0x00000100)
+#define MCU_INT_MASK_CSR_TBTT_EXPIRE   FIELD32(0x00000200)
+
+/*
+ * PCI_USEC_CSR
+ */
+#define PCI_USEC_CSR                   0x001c
+
+/*
+ * Security key table memory.
+ * 16 entries 32-byte for shared key table
+ * 64 entries 32-byte for pairwise key table
+ * 64 entries 8-byte for pairwise ta key table
+ */
+#define SHARED_KEY_TABLE_BASE          0x1000
+#define PAIRWISE_KEY_TABLE_BASE                0x1200
+#define PAIRWISE_TA_TABLE_BASE         0x1a00
+
+struct hw_key_entry {
+       u8 key[16];
+       u8 tx_mic[8];
+       u8 rx_mic[8];
+} __attribute__ ((packed));
+
+struct hw_pairwise_ta_entry {
+       u8 address[6];
+       u8 reserved[2];
+} __attribute__ ((packed));
+
+/*
+ * Other on-chip shared memory space.
+ */
+#define HW_CIS_BASE                    0x2000
+#define HW_NULL_BASE                   0x2b00
+
+/*
+ * Since NULL frame won't be that long (256 byte),
+ * We steal 16 tail bytes to save debugging settings.
+ */
+#define HW_DEBUG_SETTING_BASE          0x2bf0
+
+/*
+ * On-chip BEACON frame space.
+ */
+#define HW_BEACON_BASE0                        0x2c00
+#define HW_BEACON_BASE1                        0x2d00
+#define HW_BEACON_BASE2                        0x2e00
+#define HW_BEACON_BASE3                        0x2f00
+#define HW_BEACON_OFFSET               0x0100
+
+/*
+ * HOST-MCU shared memory.
+ */
+
+/*
+ * H2M_MAILBOX_CSR: Host-to-MCU Mailbox.
+ */
+#define H2M_MAILBOX_CSR                        0x2100
+#define H2M_MAILBOX_CSR_ARG0           FIELD32(0x000000ff)
+#define H2M_MAILBOX_CSR_ARG1           FIELD32(0x0000ff00)
+#define H2M_MAILBOX_CSR_CMD_TOKEN      FIELD32(0x00ff0000)
+#define H2M_MAILBOX_CSR_OWNER          FIELD32(0xff000000)
+
+/*
+ * MCU_LEDCS: LED control for MCU Mailbox.
+ */
+#define MCU_LEDCS_LED_MODE             FIELD16(0x001f)
+#define MCU_LEDCS_RADIO_STATUS         FIELD16(0x0020)
+#define MCU_LEDCS_LINK_BG_STATUS       FIELD16(0x0040)
+#define MCU_LEDCS_LINK_A_STATUS                FIELD16(0x0080)
+#define MCU_LEDCS_POLARITY_GPIO_0      FIELD16(0x0100)
+#define MCU_LEDCS_POLARITY_GPIO_1      FIELD16(0x0200)
+#define MCU_LEDCS_POLARITY_GPIO_2      FIELD16(0x0400)
+#define MCU_LEDCS_POLARITY_GPIO_3      FIELD16(0x0800)
+#define MCU_LEDCS_POLARITY_GPIO_4      FIELD16(0x1000)
+#define MCU_LEDCS_POLARITY_ACT         FIELD16(0x2000)
+#define MCU_LEDCS_POLARITY_READY_BG    FIELD16(0x4000)
+#define MCU_LEDCS_POLARITY_READY_A     FIELD16(0x8000)
+
+/*
+ * M2H_CMD_DONE_CSR.
+ */
+#define M2H_CMD_DONE_CSR               0x2104
+
+/*
+ * MCU_TXOP_ARRAY_BASE.
+ */
+#define MCU_TXOP_ARRAY_BASE            0x2110
+
+/*
+ * MAC Control/Status Registers(CSR).
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * MAC_CSR0: ASIC revision number.
+ */
+#define MAC_CSR0                       0x3000
+
+/*
+ * MAC_CSR1: System control register.
+ * SOFT_RESET: Software reset bit, 1: reset, 0: normal.
+ * BBP_RESET: Hardware reset BBP.
+ * HOST_READY: Host is ready after initialization, 1: ready.
+ */
+#define MAC_CSR1                       0x3004
+#define MAC_CSR1_SOFT_RESET            FIELD32(0x00000001)
+#define MAC_CSR1_BBP_RESET             FIELD32(0x00000002)
+#define MAC_CSR1_HOST_READY            FIELD32(0x00000004)
+
+/*
+ * MAC_CSR2: STA MAC register 0.
+ */
+#define MAC_CSR2                       0x3008
+#define MAC_CSR2_BYTE0                 FIELD32(0x000000ff)
+#define MAC_CSR2_BYTE1                 FIELD32(0x0000ff00)
+#define MAC_CSR2_BYTE2                 FIELD32(0x00ff0000)
+#define MAC_CSR2_BYTE3                 FIELD32(0xff000000)
+
+/*
+ * MAC_CSR3: STA MAC register 1.
+ */
+#define MAC_CSR3                       0x300c
+#define MAC_CSR3_BYTE4                 FIELD32(0x000000ff)
+#define MAC_CSR3_BYTE5                 FIELD32(0x0000ff00)
+#define MAC_CSR3_UNICAST_TO_ME_MASK    FIELD32(0x00ff0000)
+
+/*
+ * MAC_CSR4: BSSID register 0.
+ */
+#define MAC_CSR4                       0x3010
+#define MAC_CSR4_BYTE0                 FIELD32(0x000000ff)
+#define MAC_CSR4_BYTE1                 FIELD32(0x0000ff00)
+#define MAC_CSR4_BYTE2                 FIELD32(0x00ff0000)
+#define MAC_CSR4_BYTE3                 FIELD32(0xff000000)
+
+/*
+ * MAC_CSR5: BSSID register 1.
+ * BSS_ID_MASK: 3: one BSSID, 0: 4 BSSID, 2 or 1: 2 BSSID.
+ */
+#define MAC_CSR5                       0x3014
+#define MAC_CSR5_BYTE4                 FIELD32(0x000000ff)
+#define MAC_CSR5_BYTE5                 FIELD32(0x0000ff00)
+#define MAC_CSR5_BSS_ID_MASK           FIELD32(0x00ff0000)
+
+/*
+ * MAC_CSR6: Maximum frame length register.
+ */
+#define MAC_CSR6                       0x3018
+#define MAC_CSR6_MAX_FRAME_UNIT                FIELD32(0x00000fff)
+
+/*
+ * MAC_CSR7: Reserved
+ */
+#define MAC_CSR7                       0x301c
+
+/*
+ * MAC_CSR8: SIFS/EIFS register.
+ * All units are in US.
+ */
+#define MAC_CSR8                       0x3020
+#define MAC_CSR8_SIFS                  FIELD32(0x000000ff)
+#define MAC_CSR8_SIFS_AFTER_RX_OFDM    FIELD32(0x0000ff00)
+#define MAC_CSR8_EIFS                  FIELD32(0xffff0000)
+
+/*
+ * MAC_CSR9: Back-Off control register.
+ * SLOT_TIME: Slot time, default is 20us for 802.11BG.
+ * CWMIN: Bit for Cwmin. default Cwmin is 31 (2^5 - 1).
+ * CWMAX: Bit for Cwmax, default Cwmax is 1023 (2^10 - 1).
+ * CW_SELECT: 1: CWmin/Cwmax select from register, 0:select from TxD.
+ */
+#define MAC_CSR9                       0x3024
+#define MAC_CSR9_SLOT_TIME             FIELD32(0x000000ff)
+#define MAC_CSR9_CWMIN                 FIELD32(0x00000f00)
+#define MAC_CSR9_CWMAX                 FIELD32(0x0000f000)
+#define MAC_CSR9_CW_SELECT             FIELD32(0x00010000)
+
+/*
+ * MAC_CSR10: Power state configuration.
+ */
+#define MAC_CSR10                      0x3028
+
+/*
+ * MAC_CSR11: Power saving transition time register.
+ * DELAY_AFTER_TBCN: Delay after Tbcn expired in units of TU.
+ * TBCN_BEFORE_WAKEUP: Number of beacon before wakeup.
+ * WAKEUP_LATENCY: In unit of TU.
+ */
+#define MAC_CSR11                      0x302c
+#define MAC_CSR11_DELAY_AFTER_TBCN     FIELD32(0x000000ff)
+#define MAC_CSR11_TBCN_BEFORE_WAKEUP   FIELD32(0x00007f00)
+#define MAC_CSR11_AUTOWAKE             FIELD32(0x00008000)
+#define MAC_CSR11_WAKEUP_LATENCY       FIELD32(0x000f0000)
+
+/*
+ * MAC_CSR12: Manual power control / status register (merge CSR20 & PWRCSR1).
+ * CURRENT_STATE: 0:sleep, 1:awake.
+ * FORCE_WAKEUP: This has higher priority than PUT_TO_SLEEP.
+ * BBP_CURRENT_STATE: 0: BBP sleep, 1: BBP awake.
+ */
+#define MAC_CSR12                      0x3030
+#define MAC_CSR12_CURRENT_STATE                FIELD32(0x00000001)
+#define MAC_CSR12_PUT_TO_SLEEP         FIELD32(0x00000002)
+#define MAC_CSR12_FORCE_WAKEUP         FIELD32(0x00000004)
+#define MAC_CSR12_BBP_CURRENT_STATE    FIELD32(0x00000008)
+
+/*
+ * MAC_CSR13: GPIO.
+ */
+#define MAC_CSR13                      0x3034
+#define MAC_CSR13_BIT0                 FIELD32(0x00000001)
+#define MAC_CSR13_BIT1                 FIELD32(0x00000002)
+#define MAC_CSR13_BIT2                 FIELD32(0x00000004)
+#define MAC_CSR13_BIT3                 FIELD32(0x00000008)
+#define MAC_CSR13_BIT4                 FIELD32(0x00000010)
+#define MAC_CSR13_BIT5                 FIELD32(0x00000020)
+#define MAC_CSR13_BIT6                 FIELD32(0x00000040)
+#define MAC_CSR13_BIT7                 FIELD32(0x00000080)
+#define MAC_CSR13_BIT8                 FIELD32(0x00000100)
+#define MAC_CSR13_BIT9                 FIELD32(0x00000200)
+#define MAC_CSR13_BIT10                        FIELD32(0x00000400)
+#define MAC_CSR13_BIT11                        FIELD32(0x00000800)
+#define MAC_CSR13_BIT12                        FIELD32(0x00001000)
+
+/*
+ * MAC_CSR14: LED control register.
+ * ON_PERIOD: On period, default 70ms.
+ * OFF_PERIOD: Off period, default 30ms.
+ * HW_LED: HW TX activity, 1: normal OFF, 0: normal ON.
+ * SW_LED: s/w LED, 1: ON, 0: OFF.
+ * HW_LED_POLARITY: 0: active low, 1: active high.
+ */
+#define MAC_CSR14                      0x3038
+#define MAC_CSR14_ON_PERIOD            FIELD32(0x000000ff)
+#define MAC_CSR14_OFF_PERIOD           FIELD32(0x0000ff00)
+#define MAC_CSR14_HW_LED               FIELD32(0x00010000)
+#define MAC_CSR14_SW_LED               FIELD32(0x00020000)
+#define MAC_CSR14_HW_LED_POLARITY      FIELD32(0x00040000)
+#define MAC_CSR14_SW_LED2              FIELD32(0x00080000)
+
+/*
+ * MAC_CSR15: NAV control.
+ */
+#define MAC_CSR15                      0x303c
+
+/*
+ * TXRX control registers.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * TXRX_CSR0: TX/RX configuration register.
+ * TSF_OFFSET: Default is 24.
+ * AUTO_TX_SEQ: 1: ASIC auto replace sequence nr in outgoing frame.
+ * DISABLE_RX: Disable Rx engine.
+ * DROP_CRC: Drop CRC error.
+ * DROP_PHYSICAL: Drop physical error.
+ * DROP_CONTROL: Drop control frame.
+ * DROP_NOT_TO_ME: Drop not to me unicast frame.
+ * DROP_TO_DS: Drop fram ToDs bit is true.
+ * DROP_VERSION_ERROR: Drop version error frame.
+ * DROP_MULTICAST: Drop multicast frames.
+ * DROP_BORADCAST: Drop broadcast frames.
+ * ROP_ACK_CTS: Drop received ACK and CTS.
+ */
+#define TXRX_CSR0                      0x3040
+#define TXRX_CSR0_RX_ACK_TIMEOUT       FIELD32(0x000001ff)
+#define TXRX_CSR0_TSF_OFFSET           FIELD32(0x00007e00)
+#define TXRX_CSR0_AUTO_TX_SEQ          FIELD32(0x00008000)
+#define TXRX_CSR0_DISABLE_RX           FIELD32(0x00010000)
+#define TXRX_CSR0_DROP_CRC             FIELD32(0x00020000)
+#define TXRX_CSR0_DROP_PHYSICAL                FIELD32(0x00040000)
+#define TXRX_CSR0_DROP_CONTROL         FIELD32(0x00080000)
+#define TXRX_CSR0_DROP_NOT_TO_ME       FIELD32(0x00100000)
+#define TXRX_CSR0_DROP_TO_DS           FIELD32(0x00200000)
+#define TXRX_CSR0_DROP_VERSION_ERROR   FIELD32(0x00400000)
+#define TXRX_CSR0_DROP_MULTICAST       FIELD32(0x00800000)
+#define TXRX_CSR0_DROP_BORADCAST       FIELD32(0x01000000)
+#define TXRX_CSR0_DROP_ACK_CTS         FIELD32(0x02000000)
+#define TXRX_CSR0_TX_WITHOUT_WAITING   FIELD32(0x04000000)
+
+/*
+ * TXRX_CSR1
+ */
+#define TXRX_CSR1                      0x3044
+#define TXRX_CSR1_BBP_ID0              FIELD32(0x0000007f)
+#define TXRX_CSR1_BBP_ID0_VALID                FIELD32(0x00000080)
+#define TXRX_CSR1_BBP_ID1              FIELD32(0x00007f00)
+#define TXRX_CSR1_BBP_ID1_VALID                FIELD32(0x00008000)
+#define TXRX_CSR1_BBP_ID2              FIELD32(0x007f0000)
+#define TXRX_CSR1_BBP_ID2_VALID                FIELD32(0x00800000)
+#define TXRX_CSR1_BBP_ID3              FIELD32(0x7f000000)
+#define TXRX_CSR1_BBP_ID3_VALID                FIELD32(0x80000000)
+
+/*
+ * TXRX_CSR2
+ */
+#define TXRX_CSR2                      0x3048
+#define TXRX_CSR2_BBP_ID0              FIELD32(0x0000007f)
+#define TXRX_CSR2_BBP_ID0_VALID                FIELD32(0x00000080)
+#define TXRX_CSR2_BBP_ID1              FIELD32(0x00007f00)
+#define TXRX_CSR2_BBP_ID1_VALID                FIELD32(0x00008000)
+#define TXRX_CSR2_BBP_ID2              FIELD32(0x007f0000)
+#define TXRX_CSR2_BBP_ID2_VALID                FIELD32(0x00800000)
+#define TXRX_CSR2_BBP_ID3              FIELD32(0x7f000000)
+#define TXRX_CSR2_BBP_ID3_VALID                FIELD32(0x80000000)
+
+/*
+ * TXRX_CSR3
+ */
+#define TXRX_CSR3                      0x304c
+#define TXRX_CSR3_BBP_ID0              FIELD32(0x0000007f)
+#define TXRX_CSR3_BBP_ID0_VALID                FIELD32(0x00000080)
+#define TXRX_CSR3_BBP_ID1              FIELD32(0x00007f00)
+#define TXRX_CSR3_BBP_ID1_VALID                FIELD32(0x00008000)
+#define TXRX_CSR3_BBP_ID2              FIELD32(0x007f0000)
+#define TXRX_CSR3_BBP_ID2_VALID                FIELD32(0x00800000)
+#define TXRX_CSR3_BBP_ID3              FIELD32(0x7f000000)
+#define TXRX_CSR3_BBP_ID3_VALID                FIELD32(0x80000000)
+
+/*
+ * TXRX_CSR4: Auto-Responder/Tx-retry register.
+ * AUTORESPOND_PREAMBLE: 0:long, 1:short preamble.
+ * OFDM_TX_RATE_DOWN: 1:enable.
+ * OFDM_TX_RATE_STEP: 0:1-step, 1: 2-step, 2:3-step, 3:4-step.
+ * OFDM_TX_FALLBACK_CCK: 0: Fallback to OFDM 6M only, 1: Fallback to CCK 1M,2M.
+ */
+#define TXRX_CSR4                      0x3050
+#define TXRX_CSR4_TX_ACK_TIMEOUT       FIELD32(0x000000ff)
+#define TXRX_CSR4_CNTL_ACK_POLICY      FIELD32(0x00000700)
+#define TXRX_CSR4_ACK_CTS_PSM          FIELD32(0x00010000)
+#define TXRX_CSR4_AUTORESPOND_ENABLE   FIELD32(0x00020000)
+#define TXRX_CSR4_AUTORESPOND_PREAMBLE FIELD32(0x00040000)
+#define TXRX_CSR4_OFDM_TX_RATE_DOWN    FIELD32(0x00080000)
+#define TXRX_CSR4_OFDM_TX_RATE_STEP    FIELD32(0x00300000)
+#define TXRX_CSR4_OFDM_TX_FALLBACK_CCK FIELD32(0x00400000)
+#define TXRX_CSR4_LONG_RETRY_LIMIT     FIELD32(0x0f000000)
+#define TXRX_CSR4_SHORT_RETRY_LIMIT    FIELD32(0xf0000000)
+
+/*
+ * TXRX_CSR5
+ */
+#define TXRX_CSR5                      0x3054
+
+/*
+ * TXRX_CSR6: ACK/CTS payload consumed time
+ */
+#define TXRX_CSR6                      0x3058
+
+/*
+ * TXRX_CSR7: OFDM ACK/CTS payload consumed time for 6/9/12/18 mbps.
+ */
+#define TXRX_CSR7                      0x305c
+#define TXRX_CSR7_ACK_CTS_6MBS         FIELD32(0x000000ff)
+#define TXRX_CSR7_ACK_CTS_9MBS         FIELD32(0x0000ff00)
+#define TXRX_CSR7_ACK_CTS_12MBS                FIELD32(0x00ff0000)
+#define TXRX_CSR7_ACK_CTS_18MBS                FIELD32(0xff000000)
+
+/*
+ * TXRX_CSR8: OFDM ACK/CTS payload consumed time for 24/36/48/54 mbps.
+ */
+#define TXRX_CSR8                      0x3060
+#define TXRX_CSR8_ACK_CTS_24MBS                FIELD32(0x000000ff)
+#define TXRX_CSR8_ACK_CTS_36MBS                FIELD32(0x0000ff00)
+#define TXRX_CSR8_ACK_CTS_48MBS                FIELD32(0x00ff0000)
+#define TXRX_CSR8_ACK_CTS_54MBS                FIELD32(0xff000000)
+
+/*
+ * TXRX_CSR9: Synchronization control register.
+ * BEACON_INTERVAL: In unit of 1/16 TU.
+ * TSF_TICKING: Enable TSF auto counting.
+ * TSF_SYNC: Tsf sync, 0: disable, 1: infra, 2: ad-hoc/master mode.
+ * BEACON_GEN: Enable beacon generator.
+ */
+#define TXRX_CSR9                      0x3064
+#define TXRX_CSR9_BEACON_INTERVAL      FIELD32(0x0000ffff)
+#define TXRX_CSR9_TSF_TICKING          FIELD32(0x00010000)
+#define TXRX_CSR9_TSF_SYNC             FIELD32(0x00060000)
+#define TXRX_CSR9_TBTT_ENABLE          FIELD32(0x00080000)
+#define TXRX_CSR9_BEACON_GEN           FIELD32(0x00100000)
+#define TXRX_CSR9_TIMESTAMP_COMPENSATE FIELD32(0xff000000)
+
+/*
+ * TXRX_CSR10: BEACON alignment.
+ */
+#define TXRX_CSR10                     0x3068
+
+/*
+ * TXRX_CSR11: AES mask.
+ */
+#define TXRX_CSR11                     0x306c
+
+/*
+ * TXRX_CSR12: TSF low 32.
+ */
+#define TXRX_CSR12                     0x3070
+#define TXRX_CSR12_LOW_TSFTIMER                FIELD32(0xffffffff)
+
+/*
+ * TXRX_CSR13: TSF high 32.
+ */
+#define TXRX_CSR13                     0x3074
+#define TXRX_CSR13_HIGH_TSFTIMER       FIELD32(0xffffffff)
+
+/*
+ * TXRX_CSR14: TBTT timer.
+ */
+#define TXRX_CSR14                     0x3078
+
+/*
+ * TXRX_CSR15: TKIP MIC priority byte "AND" mask.
+ */
+#define TXRX_CSR15                     0x307c
+
+/*
+ * PHY control registers.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * PHY_CSR0: RF/PS control.
+ */
+#define PHY_CSR0                       0x3080
+#define PHY_CSR0_PA_PE_BG              FIELD32(0x00010000)
+#define PHY_CSR0_PA_PE_A               FIELD32(0x00020000)
+
+/*
+ * PHY_CSR1
+ */
+#define PHY_CSR1                       0x3084
+
+/*
+ * PHY_CSR2: Pre-TX BBP control.
+ */
+#define PHY_CSR2                       0x3088
+
+/*
+ * PHY_CSR3: BBP serial control register.
+ * VALUE: Register value to program into BBP.
+ * REG_NUM: Selected BBP register.
+ * READ_CONTROL: 0: Write BBP, 1: Read BBP.
+ * BUSY: 1: ASIC is busy execute BBP programming.
+ */
+#define PHY_CSR3                       0x308c
+#define PHY_CSR3_VALUE                 FIELD32(0x000000ff)
+#define PHY_CSR3_REGNUM                        FIELD32(0x00007f00)
+#define PHY_CSR3_READ_CONTROL          FIELD32(0x00008000)
+#define PHY_CSR3_BUSY                  FIELD32(0x00010000)
+
+/*
+ * PHY_CSR4: RF serial control register
+ * VALUE: Register value (include register id) serial out to RF/IF chip.
+ * NUMBER_OF_BITS: Number of bits used in RFRegValue (I:20, RFMD:22).
+ * IF_SELECT: 1: select IF to program, 0: select RF to program.
+ * PLL_LD: RF PLL_LD status.
+ * BUSY: 1: ASIC is busy execute RF programming.
+ */
+#define PHY_CSR4                       0x3090
+#define PHY_CSR4_VALUE                 FIELD32(0x00ffffff)
+#define PHY_CSR4_NUMBER_OF_BITS                FIELD32(0x1f000000)
+#define PHY_CSR4_IF_SELECT             FIELD32(0x20000000)
+#define PHY_CSR4_PLL_LD                        FIELD32(0x40000000)
+#define PHY_CSR4_BUSY                  FIELD32(0x80000000)
+
+/*
+ * PHY_CSR5: RX to TX signal switch timing control.
+ */
+#define PHY_CSR5                       0x3094
+#define PHY_CSR5_IQ_FLIP               FIELD32(0x00000004)
+
+/*
+ * PHY_CSR6: TX to RX signal timing control.
+ */
+#define PHY_CSR6                       0x3098
+#define PHY_CSR6_IQ_FLIP               FIELD32(0x00000004)
+
+/*
+ * PHY_CSR7: TX DAC switching timing control.
+ */
+#define PHY_CSR7                       0x309c
+
+/*
+ * Security control register.
+ */
+
+/*
+ * SEC_CSR0: Shared key table control.
+ */
+#define SEC_CSR0                       0x30a0
+#define SEC_CSR0_BSS0_KEY0_VALID       FIELD32(0x00000001)
+#define SEC_CSR0_BSS0_KEY1_VALID       FIELD32(0x00000002)
+#define SEC_CSR0_BSS0_KEY2_VALID       FIELD32(0x00000004)
+#define SEC_CSR0_BSS0_KEY3_VALID       FIELD32(0x00000008)
+#define SEC_CSR0_BSS1_KEY0_VALID       FIELD32(0x00000010)
+#define SEC_CSR0_BSS1_KEY1_VALID       FIELD32(0x00000020)
+#define SEC_CSR0_BSS1_KEY2_VALID       FIELD32(0x00000040)
+#define SEC_CSR0_BSS1_KEY3_VALID       FIELD32(0x00000080)
+#define SEC_CSR0_BSS2_KEY0_VALID       FIELD32(0x00000100)
+#define SEC_CSR0_BSS2_KEY1_VALID       FIELD32(0x00000200)
+#define SEC_CSR0_BSS2_KEY2_VALID       FIELD32(0x00000400)
+#define SEC_CSR0_BSS2_KEY3_VALID       FIELD32(0x00000800)
+#define SEC_CSR0_BSS3_KEY0_VALID       FIELD32(0x00001000)
+#define SEC_CSR0_BSS3_KEY1_VALID       FIELD32(0x00002000)
+#define SEC_CSR0_BSS3_KEY2_VALID       FIELD32(0x00004000)
+#define SEC_CSR0_BSS3_KEY3_VALID       FIELD32(0x00008000)
+
+/*
+ * SEC_CSR1: Shared key table security mode register.
+ */
+#define SEC_CSR1                       0x30a4
+#define SEC_CSR1_BSS0_KEY0_CIPHER_ALG  FIELD32(0x00000007)
+#define SEC_CSR1_BSS0_KEY1_CIPHER_ALG  FIELD32(0x00000070)
+#define SEC_CSR1_BSS0_KEY2_CIPHER_ALG  FIELD32(0x00000700)
+#define SEC_CSR1_BSS0_KEY3_CIPHER_ALG  FIELD32(0x00007000)
+#define SEC_CSR1_BSS1_KEY0_CIPHER_ALG  FIELD32(0x00070000)
+#define SEC_CSR1_BSS1_KEY1_CIPHER_ALG  FIELD32(0x00700000)
+#define SEC_CSR1_BSS1_KEY2_CIPHER_ALG  FIELD32(0x07000000)
+#define SEC_CSR1_BSS1_KEY3_CIPHER_ALG  FIELD32(0x70000000)
+
+/*
+ * Pairwise key table valid bitmap registers.
+ * SEC_CSR2: pairwise key table valid bitmap 0.
+ * SEC_CSR3: pairwise key table valid bitmap 1.
+ */
+#define SEC_CSR2                       0x30a8
+#define SEC_CSR3                       0x30ac
+
+/*
+ * SEC_CSR4: Pairwise key table lookup control.
+ */
+#define SEC_CSR4                       0x30b0
+
+/*
+ * SEC_CSR5: shared key table security mode register.
+ */
+#define SEC_CSR5                       0x30b4
+#define SEC_CSR5_BSS2_KEY0_CIPHER_ALG  FIELD32(0x00000007)
+#define SEC_CSR5_BSS2_KEY1_CIPHER_ALG  FIELD32(0x00000070)
+#define SEC_CSR5_BSS2_KEY2_CIPHER_ALG  FIELD32(0x00000700)
+#define SEC_CSR5_BSS2_KEY3_CIPHER_ALG  FIELD32(0x00007000)
+#define SEC_CSR5_BSS3_KEY0_CIPHER_ALG  FIELD32(0x00070000)
+#define SEC_CSR5_BSS3_KEY1_CIPHER_ALG  FIELD32(0x00700000)
+#define SEC_CSR5_BSS3_KEY2_CIPHER_ALG  FIELD32(0x07000000)
+#define SEC_CSR5_BSS3_KEY3_CIPHER_ALG  FIELD32(0x70000000)
+
+/*
+ * STA control registers.
+ */
+
+/*
+ * STA_CSR0: RX PLCP error count & RX FCS error count.
+ */
+#define STA_CSR0                       0x30c0
+#define STA_CSR0_FCS_ERROR             FIELD32(0x0000ffff)
+#define STA_CSR0_PLCP_ERROR            FIELD32(0xffff0000)
+
+/*
+ * STA_CSR1: RX False CCA count & RX LONG frame count.
+ */
+#define STA_CSR1                       0x30c4
+#define STA_CSR1_PHYSICAL_ERROR                FIELD32(0x0000ffff)
+#define STA_CSR1_FALSE_CCA_ERROR       FIELD32(0xffff0000)
+
+/*
+ * STA_CSR2: TX Beacon count and RX FIFO overflow count.
+ */
+#define STA_CSR2                       0x30c8
+#define STA_CSR2_RX_FIFO_OVERFLOW_COUNT        FIELD32(0x0000ffff)
+#define STA_CSR2_RX_OVERFLOW_COUNT     FIELD32(0xffff0000)
+
+/*
+ * STA_CSR3: TX Beacon count.
+ */
+#define STA_CSR3                       0x30cc
+#define STA_CSR3_TX_BEACON_COUNT       FIELD32(0x0000ffff)
+
+/*
+ * STA_CSR4: TX Result status register.
+ * VALID: 1:This register contains a valid TX result.
+ */
+#define STA_CSR4                       0x30d0
+#define STA_CSR4_VALID                 FIELD32(0x00000001)
+#define STA_CSR4_TX_RESULT             FIELD32(0x0000000e)
+#define STA_CSR4_RETRY_COUNT           FIELD32(0x000000f0)
+#define STA_CSR4_PID_SUBTYPE           FIELD32(0x00001f00)
+#define STA_CSR4_PID_TYPE              FIELD32(0x0000e000)
+#define STA_CSR4_TXRATE                        FIELD32(0x000f0000)
+
+/*
+ * QOS control registers.
+ */
+
+/*
+ * QOS_CSR0: TXOP holder MAC address register.
+ */
+#define QOS_CSR0                       0x30e0
+#define QOS_CSR0_BYTE0                 FIELD32(0x000000ff)
+#define QOS_CSR0_BYTE1                 FIELD32(0x0000ff00)
+#define QOS_CSR0_BYTE2                 FIELD32(0x00ff0000)
+#define QOS_CSR0_BYTE3                 FIELD32(0xff000000)
+
+/*
+ * QOS_CSR1: TXOP holder MAC address register.
+ */
+#define QOS_CSR1                       0x30e4
+#define QOS_CSR1_BYTE4                 FIELD32(0x000000ff)
+#define QOS_CSR1_BYTE5                 FIELD32(0x0000ff00)
+
+/*
+ * QOS_CSR2: TXOP holder timeout register.
+ */
+#define QOS_CSR2                       0x30e8
+
+/*
+ * RX QOS-CFPOLL MAC address register.
+ * QOS_CSR3: RX QOS-CFPOLL MAC address 0.
+ * QOS_CSR4: RX QOS-CFPOLL MAC address 1.
+ */
+#define QOS_CSR3                       0x30ec
+#define QOS_CSR4                       0x30f0
+
+/*
+ * QOS_CSR5: "QosControl" field of the RX QOS-CFPOLL.
+ */
+#define QOS_CSR5                       0x30f4
+
+/*
+ * Host DMA registers.
+ */
+
+/*
+ * AC0_BASE_CSR: AC_BK base address.
+ */
+#define AC0_BASE_CSR                   0x3400
+#define AC0_BASE_CSR_RING_REGISTER     FIELD32(0xffffffff)
+
+/*
+ * AC1_BASE_CSR: AC_BE base address.
+ */
+#define AC1_BASE_CSR                   0x3404
+#define AC1_BASE_CSR_RING_REGISTER     FIELD32(0xffffffff)
+
+/*
+ * AC2_BASE_CSR: AC_VI base address.
+ */
+#define AC2_BASE_CSR                   0x3408
+#define AC2_BASE_CSR_RING_REGISTER     FIELD32(0xffffffff)
+
+/*
+ * AC3_BASE_CSR: AC_VO base address.
+ */
+#define AC3_BASE_CSR                   0x340c
+#define AC3_BASE_CSR_RING_REGISTER     FIELD32(0xffffffff)
+
+/*
+ * MGMT_BASE_CSR: MGMT ring base address.
+ */
+#define MGMT_BASE_CSR                  0x3410
+#define MGMT_BASE_CSR_RING_REGISTER    FIELD32(0xffffffff)
+
+/*
+ * TX_RING_CSR0: TX Ring size for AC_BK, AC_BE, AC_VI, AC_VO.
+ */
+#define TX_RING_CSR0                   0x3418
+#define TX_RING_CSR0_AC0_RING_SIZE     FIELD32(0x000000ff)
+#define TX_RING_CSR0_AC1_RING_SIZE     FIELD32(0x0000ff00)
+#define TX_RING_CSR0_AC2_RING_SIZE     FIELD32(0x00ff0000)
+#define TX_RING_CSR0_AC3_RING_SIZE     FIELD32(0xff000000)
+
+/*
+ * TX_RING_CSR1: TX Ring size for MGMT Ring, HCCA Ring
+ * TXD_SIZE: In unit of 32-bit.
+ */
+#define TX_RING_CSR1                   0x341c
+#define TX_RING_CSR1_MGMT_RING_SIZE    FIELD32(0x000000ff)
+#define TX_RING_CSR1_HCCA_RING_SIZE    FIELD32(0x0000ff00)
+#define TX_RING_CSR1_TXD_SIZE          FIELD32(0x003f0000)
+
+/*
+ * AIFSN_CSR: AIFSN for each EDCA AC.
+ * AIFSN0: For AC_BK.
+ * AIFSN1: For AC_BE.
+ * AIFSN2: For AC_VI.
+ * AIFSN3: For AC_VO.
+ */
+#define AIFSN_CSR                      0x3420
+#define AIFSN_CSR_AIFSN0               FIELD32(0x0000000f)
+#define AIFSN_CSR_AIFSN1               FIELD32(0x000000f0)
+#define AIFSN_CSR_AIFSN2               FIELD32(0x00000f00)
+#define AIFSN_CSR_AIFSN3               FIELD32(0x0000f000)
+
+/*
+ * CWMIN_CSR: CWmin for each EDCA AC.
+ * CWMIN0: For AC_BK.
+ * CWMIN1: For AC_BE.
+ * CWMIN2: For AC_VI.
+ * CWMIN3: For AC_VO.
+ */
+#define CWMIN_CSR                      0x3424
+#define CWMIN_CSR_CWMIN0               FIELD32(0x0000000f)
+#define CWMIN_CSR_CWMIN1               FIELD32(0x000000f0)
+#define CWMIN_CSR_CWMIN2               FIELD32(0x00000f00)
+#define CWMIN_CSR_CWMIN3               FIELD32(0x0000f000)
+
+/*
+ * CWMAX_CSR: CWmax for each EDCA AC.
+ * CWMAX0: For AC_BK.
+ * CWMAX1: For AC_BE.
+ * CWMAX2: For AC_VI.
+ * CWMAX3: For AC_VO.
+ */
+#define CWMAX_CSR                      0x3428
+#define CWMAX_CSR_CWMAX0               FIELD32(0x0000000f)
+#define CWMAX_CSR_CWMAX1               FIELD32(0x000000f0)
+#define CWMAX_CSR_CWMAX2               FIELD32(0x00000f00)
+#define CWMAX_CSR_CWMAX3               FIELD32(0x0000f000)
+
+/*
+ * TX_DMA_DST_CSR: TX DMA destination
+ * 0: TX ring0, 1: TX ring1, 2: TX ring2 3: invalid
+ */
+#define TX_DMA_DST_CSR                 0x342c
+#define TX_DMA_DST_CSR_DEST_AC0                FIELD32(0x00000003)
+#define TX_DMA_DST_CSR_DEST_AC1                FIELD32(0x0000000c)
+#define TX_DMA_DST_CSR_DEST_AC2                FIELD32(0x00000030)
+#define TX_DMA_DST_CSR_DEST_AC3                FIELD32(0x000000c0)
+#define TX_DMA_DST_CSR_DEST_MGMT       FIELD32(0x00000300)
+
+/*
+ * TX_CNTL_CSR: KICK/Abort TX.
+ * KICK_TX_AC0: For AC_BK.
+ * KICK_TX_AC1: For AC_BE.
+ * KICK_TX_AC2: For AC_VI.
+ * KICK_TX_AC3: For AC_VO.
+ * ABORT_TX_AC0: For AC_BK.
+ * ABORT_TX_AC1: For AC_BE.
+ * ABORT_TX_AC2: For AC_VI.
+ * ABORT_TX_AC3: For AC_VO.
+ */
+#define TX_CNTL_CSR                    0x3430
+#define TX_CNTL_CSR_KICK_TX_AC0                FIELD32(0x00000001)
+#define TX_CNTL_CSR_KICK_TX_AC1                FIELD32(0x00000002)
+#define TX_CNTL_CSR_KICK_TX_AC2                FIELD32(0x00000004)
+#define TX_CNTL_CSR_KICK_TX_AC3                FIELD32(0x00000008)
+#define TX_CNTL_CSR_KICK_TX_MGMT       FIELD32(0x00000010)
+#define TX_CNTL_CSR_ABORT_TX_AC0       FIELD32(0x00010000)
+#define TX_CNTL_CSR_ABORT_TX_AC1       FIELD32(0x00020000)
+#define TX_CNTL_CSR_ABORT_TX_AC2       FIELD32(0x00040000)
+#define TX_CNTL_CSR_ABORT_TX_AC3       FIELD32(0x00080000)
+#define TX_CNTL_CSR_ABORT_TX_MGMT      FIELD32(0x00100000)
+
+/*
+ * LOAD_TX_RING_CSR: Load RX de
+ */
+#define LOAD_TX_RING_CSR               0x3434
+#define LOAD_TX_RING_CSR_LOAD_TXD_AC0  FIELD32(0x00000001)
+#define LOAD_TX_RING_CSR_LOAD_TXD_AC1  FIELD32(0x00000002)
+#define LOAD_TX_RING_CSR_LOAD_TXD_AC2  FIELD32(0x00000004)
+#define LOAD_TX_RING_CSR_LOAD_TXD_AC3  FIELD32(0x00000008)
+#define LOAD_TX_RING_CSR_LOAD_TXD_MGMT FIELD32(0x00000010)
+
+/*
+ * Several read-only registers, for debugging.
+ */
+#define AC0_TXPTR_CSR                  0x3438
+#define AC1_TXPTR_CSR                  0x343c
+#define AC2_TXPTR_CSR                  0x3440
+#define AC3_TXPTR_CSR                  0x3444
+#define MGMT_TXPTR_CSR                 0x3448
+
+/*
+ * RX_BASE_CSR
+ */
+#define RX_BASE_CSR                    0x3450
+#define RX_BASE_CSR_RING_REGISTER      FIELD32(0xffffffff)
+
+/*
+ * RX_RING_CSR.
+ * RXD_SIZE: In unit of 32-bit.
+ */
+#define RX_RING_CSR                    0x3454
+#define RX_RING_CSR_RING_SIZE          FIELD32(0x000000ff)
+#define RX_RING_CSR_RXD_SIZE           FIELD32(0x00003f00)
+#define RX_RING_CSR_RXD_WRITEBACK_SIZE FIELD32(0x00070000)
+
+/*
+ * RX_CNTL_CSR
+ */
+#define RX_CNTL_CSR                    0x3458
+#define RX_CNTL_CSR_ENABLE_RX_DMA      FIELD32(0x00000001)
+#define RX_CNTL_CSR_LOAD_RXD           FIELD32(0x00000002)
+
+/*
+ * RXPTR_CSR: Read-only, for debugging.
+ */
+#define RXPTR_CSR                      0x345c
+
+/*
+ * PCI_CFG_CSR
+ */
+#define PCI_CFG_CSR                    0x3460
+
+/*
+ * BUF_FORMAT_CSR
+ */
+#define BUF_FORMAT_CSR                 0x3464
+
+/*
+ * INT_SOURCE_CSR: Interrupt source register.
+ * Write one to clear corresponding bit.
+ */
+#define INT_SOURCE_CSR                 0x3468
+#define INT_SOURCE_CSR_TXDONE          FIELD32(0x00000001)
+#define INT_SOURCE_CSR_RXDONE          FIELD32(0x00000002)
+#define INT_SOURCE_CSR_BEACON_DONE     FIELD32(0x00000004)
+#define INT_SOURCE_CSR_TX_ABORT_DONE   FIELD32(0x00000010)
+#define INT_SOURCE_CSR_AC0_DMA_DONE    FIELD32(0x00010000)
+#define INT_SOURCE_CSR_AC1_DMA_DONE    FIELD32(0x00020000)
+#define INT_SOURCE_CSR_AC2_DMA_DONE    FIELD32(0x00040000)
+#define INT_SOURCE_CSR_AC3_DMA_DONE    FIELD32(0x00080000)
+#define INT_SOURCE_CSR_MGMT_DMA_DONE   FIELD32(0x00100000)
+#define INT_SOURCE_CSR_HCCA_DMA_DONE   FIELD32(0x00200000)
+
+/*
+ * INT_MASK_CSR: Interrupt MASK register. 1: the interrupt is mask OFF.
+ * MITIGATION_PERIOD: Interrupt mitigation in unit of 32 PCI clock.
+ */
+#define INT_MASK_CSR                   0x346c
+#define INT_MASK_CSR_TXDONE            FIELD32(0x00000001)
+#define INT_MASK_CSR_RXDONE            FIELD32(0x00000002)
+#define INT_MASK_CSR_BEACON_DONE       FIELD32(0x00000004)
+#define INT_MASK_CSR_TX_ABORT_DONE     FIELD32(0x00000010)
+#define INT_MASK_CSR_ENABLE_MITIGATION FIELD32(0x00000080)
+#define INT_MASK_CSR_MITIGATION_PERIOD FIELD32(0x0000ff00)
+#define INT_MASK_CSR_AC0_DMA_DONE      FIELD32(0x00010000)
+#define INT_MASK_CSR_AC1_DMA_DONE      FIELD32(0x00020000)
+#define INT_MASK_CSR_AC2_DMA_DONE      FIELD32(0x00040000)
+#define INT_MASK_CSR_AC3_DMA_DONE      FIELD32(0x00080000)
+#define INT_MASK_CSR_MGMT_DMA_DONE     FIELD32(0x00100000)
+#define INT_MASK_CSR_HCCA_DMA_DONE     FIELD32(0x00200000)
+
+/*
+ * E2PROM_CSR: EEPROM control register.
+ * RELOAD: Write 1 to reload eeprom content.
+ * TYPE_93C46: 1: 93c46, 0:93c66.
+ * LOAD_STATUS: 1:loading, 0:done.
+ */
+#define E2PROM_CSR                     0x3470
+#define E2PROM_CSR_RELOAD              FIELD32(0x00000001)
+#define E2PROM_CSR_DATA_CLOCK          FIELD32(0x00000002)
+#define E2PROM_CSR_CHIP_SELECT         FIELD32(0x00000004)
+#define E2PROM_CSR_DATA_IN             FIELD32(0x00000008)
+#define E2PROM_CSR_DATA_OUT            FIELD32(0x00000010)
+#define E2PROM_CSR_TYPE_93C46          FIELD32(0x00000020)
+#define E2PROM_CSR_LOAD_STATUS         FIELD32(0x00000040)
+
+/*
+ * AC_TXOP_CSR0: AC_BK/AC_BE TXOP register.
+ * AC0_TX_OP: For AC_BK, in unit of 32us.
+ * AC1_TX_OP: For AC_BE, in unit of 32us.
+ */
+#define AC_TXOP_CSR0                   0x3474
+#define AC_TXOP_CSR0_AC0_TX_OP         FIELD32(0x0000ffff)
+#define AC_TXOP_CSR0_AC1_TX_OP         FIELD32(0xffff0000)
+
+/*
+ * AC_TXOP_CSR1: AC_VO/AC_VI TXOP register.
+ * AC2_TX_OP: For AC_VI, in unit of 32us.
+ * AC3_TX_OP: For AC_VO, in unit of 32us.
+ */
+#define AC_TXOP_CSR1                   0x3478
+#define AC_TXOP_CSR1_AC2_TX_OP         FIELD32(0x0000ffff)
+#define AC_TXOP_CSR1_AC3_TX_OP         FIELD32(0xffff0000)
+
+/*
+ * DMA_STATUS_CSR
+ */
+#define DMA_STATUS_CSR                 0x3480
+
+/*
+ * TEST_MODE_CSR
+ */
+#define TEST_MODE_CSR                  0x3484
+
+/*
+ * UART0_TX_CSR
+ */
+#define UART0_TX_CSR                   0x3488
+
+/*
+ * UART0_RX_CSR
+ */
+#define UART0_RX_CSR                   0x348c
+
+/*
+ * UART0_FRAME_CSR
+ */
+#define UART0_FRAME_CSR                        0x3490
+
+/*
+ * UART0_BUFFER_CSR
+ */
+#define UART0_BUFFER_CSR               0x3494
+
+/*
+ * IO_CNTL_CSR
+ */
+#define IO_CNTL_CSR                    0x3498
+
+/*
+ * UART_INT_SOURCE_CSR
+ */
+#define UART_INT_SOURCE_CSR            0x34a8
+
+/*
+ * UART_INT_MASK_CSR
+ */
+#define UART_INT_MASK_CSR              0x34ac
+
+/*
+ * PBF_QUEUE_CSR
+ */
+#define PBF_QUEUE_CSR                  0x34b0
+
+/*
+ * Firmware DMA registers.
+ * Firmware DMA registers are dedicated for MCU usage
+ * and should not be touched by host driver.
+ * Therefore we skip the definition of these registers.
+ */
+#define FW_TX_BASE_CSR                 0x34c0
+#define FW_TX_START_CSR                        0x34c4
+#define FW_TX_LAST_CSR                 0x34c8
+#define FW_MODE_CNTL_CSR               0x34cc
+#define FW_TXPTR_CSR                   0x34d0
+
+/*
+ * 8051 firmware image.
+ */
+#define FIRMWARE_RT2561                        "rt2561.bin"
+#define FIRMWARE_RT2561s               "rt2561s.bin"
+#define FIRMWARE_RT2661                        "rt2661.bin"
+#define FIRMWARE_IMAGE_BASE            0x4000
+
+/*
+ * BBP registers.
+ * The wordsize of the BBP is 8 bits.
+ */
+
+/*
+ * R2
+ */
+#define BBP_R2_BG_MODE                 FIELD8(0x20)
+
+/*
+ * R3
+ */
+#define BBP_R3_SMART_MODE              FIELD8(0x01)
+
+/*
+ * R4: RX antenna control
+ * FRAME_END: 1 - DPDT, 0 - SPDT (Only valid for 802.11G, RF2527 & RF2529)
+ */
+#define BBP_R4_RX_ANTENNA              FIELD8(0x03)
+#define BBP_R4_RX_FRAME_END            FIELD8(0x20)
+
+/*
+ * R77
+ */
+#define BBP_R77_PAIR                   FIELD8(0x03)
+
+/*
+ * RF registers
+ */
+
+/*
+ * RF 3
+ */
+#define RF3_TXPOWER                    FIELD32(0x00003e00)
+
+/*
+ * RF 4
+ */
+#define RF4_FREQ_OFFSET                        FIELD32(0x0003f000)
+
+/*
+ * EEPROM content.
+ * The wordsize of the EEPROM is 16 bits.
+ */
+
+/*
+ * HW MAC address.
+ */
+#define EEPROM_MAC_ADDR_0              0x0002
+#define EEPROM_MAC_ADDR_BYTE0          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE1          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR1               0x0004
+#define EEPROM_MAC_ADDR_BYTE2          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE3          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR_2              0x0006
+#define EEPROM_MAC_ADDR_BYTE4          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE5          FIELD16(0xff00)
+
+/*
+ * EEPROM antenna.
+ * ANTENNA_NUM: Number of antenna's.
+ * TX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * FRAME_TYPE: 0: DPDT , 1: SPDT , noted this bit is valid for g only.
+ * DYN_TXAGC: Dynamic TX AGC control.
+ * HARDWARE_RADIO: 1: Hardware controlled radio. Read GPIO0.
+ * RF_TYPE: Rf_type of this adapter.
+ */
+#define EEPROM_ANTENNA                 0x0010
+#define EEPROM_ANTENNA_NUM             FIELD16(0x0003)
+#define EEPROM_ANTENNA_TX_DEFAULT      FIELD16(0x000c)
+#define EEPROM_ANTENNA_RX_DEFAULT      FIELD16(0x0030)
+#define EEPROM_ANTENNA_FRAME_TYPE      FIELD16(0x0040)
+#define EEPROM_ANTENNA_DYN_TXAGC       FIELD16(0x0200)
+#define EEPROM_ANTENNA_HARDWARE_RADIO  FIELD16(0x0400)
+#define EEPROM_ANTENNA_RF_TYPE         FIELD16(0xf800)
+
+/*
+ * EEPROM NIC config.
+ * ENABLE_DIVERSITY: 1:enable, 0:disable.
+ * EXTERNAL_LNA_BG: External LNA enable for 2.4G.
+ * CARDBUS_ACCEL: 0:enable, 1:disable.
+ * EXTERNAL_LNA_A: External LNA enable for 5G.
+ */
+#define EEPROM_NIC                     0x0011
+#define EEPROM_NIC_ENABLE_DIVERSITY    FIELD16(0x0001)
+#define EEPROM_NIC_TX_DIVERSITY                FIELD16(0x0002)
+#define EEPROM_NIC_TX_RX_FIXED         FIELD16(0x000c)
+#define EEPROM_NIC_EXTERNAL_LNA_BG     FIELD16(0x0010)
+#define EEPROM_NIC_CARDBUS_ACCEL       FIELD16(0x0020)
+#define EEPROM_NIC_EXTERNAL_LNA_A      FIELD16(0x0040)
+
+/*
+ * EEPROM geography.
+ * GEO_A: Default geographical setting for 5GHz band
+ * GEO: Default geographical setting.
+ */
+#define EEPROM_GEOGRAPHY               0x0012
+#define EEPROM_GEOGRAPHY_GEO_A         FIELD16(0x00ff)
+#define EEPROM_GEOGRAPHY_GEO           FIELD16(0xff00)
+
+/*
+ * EEPROM BBP.
+ */
+#define EEPROM_BBP_START               0x0013
+#define EEPROM_BBP_SIZE                        16
+#define EEPROM_BBP_VALUE               FIELD16(0x00ff)
+#define EEPROM_BBP_REG_ID              FIELD16(0xff00)
+
+/*
+ * EEPROM TXPOWER 802.11G
+ */
+#define EEPROM_TXPOWER_G_START         0x0023
+#define EEPROM_TXPOWER_G_SIZE          7
+#define EEPROM_TXPOWER_G_1             FIELD16(0x00ff)
+#define EEPROM_TXPOWER_G_2             FIELD16(0xff00)
+
+/*
+ * EEPROM Frequency
+ */
+#define EEPROM_FREQ                    0x002f
+#define EEPROM_FREQ_OFFSET             FIELD16(0x00ff)
+#define EEPROM_FREQ_SEQ_MASK           FIELD16(0xff00)
+#define EEPROM_FREQ_SEQ                        FIELD16(0x0300)
+
+/*
+ * EEPROM LED.
+ * POLARITY_RDY_G: Polarity RDY_G setting.
+ * POLARITY_RDY_A: Polarity RDY_A setting.
+ * POLARITY_ACT: Polarity ACT setting.
+ * POLARITY_GPIO_0: Polarity GPIO0 setting.
+ * POLARITY_GPIO_1: Polarity GPIO1 setting.
+ * POLARITY_GPIO_2: Polarity GPIO2 setting.
+ * POLARITY_GPIO_3: Polarity GPIO3 setting.
+ * POLARITY_GPIO_4: Polarity GPIO4 setting.
+ * LED_MODE: Led mode.
+ */
+#define EEPROM_LED                     0x0030
+#define EEPROM_LED_POLARITY_RDY_G      FIELD16(0x0001)
+#define EEPROM_LED_POLARITY_RDY_A      FIELD16(0x0002)
+#define EEPROM_LED_POLARITY_ACT                FIELD16(0x0004)
+#define EEPROM_LED_POLARITY_GPIO_0     FIELD16(0x0008)
+#define EEPROM_LED_POLARITY_GPIO_1     FIELD16(0x0010)
+#define EEPROM_LED_POLARITY_GPIO_2     FIELD16(0x0020)
+#define EEPROM_LED_POLARITY_GPIO_3     FIELD16(0x0040)
+#define EEPROM_LED_POLARITY_GPIO_4     FIELD16(0x0080)
+#define EEPROM_LED_LED_MODE            FIELD16(0x1f00)
+
+/*
+ * EEPROM TXPOWER 802.11A
+ */
+#define EEPROM_TXPOWER_A_START         0x0031
+#define EEPROM_TXPOWER_A_SIZE          12
+#define EEPROM_TXPOWER_A_1             FIELD16(0x00ff)
+#define EEPROM_TXPOWER_A_2             FIELD16(0xff00)
+
+/*
+ * EEPROM RSSI offset 802.11BG
+ */
+#define EEPROM_RSSI_OFFSET_BG          0x004d
+#define EEPROM_RSSI_OFFSET_BG_1                FIELD16(0x00ff)
+#define EEPROM_RSSI_OFFSET_BG_2                FIELD16(0xff00)
+
+/*
+ * EEPROM RSSI offset 802.11A
+ */
+#define EEPROM_RSSI_OFFSET_A           0x004e
+#define EEPROM_RSSI_OFFSET_A_1         FIELD16(0x00ff)
+#define EEPROM_RSSI_OFFSET_A_2         FIELD16(0xff00)
+
+/*
+ * MCU mailbox commands.
+ */
+#define MCU_SLEEP                      0x30
+#define MCU_WAKEUP                     0x31
+#define MCU_LED                                0x50
+#define MCU_LED_STRENGTH               0x52
+
+/*
+ * DMA descriptor defines.
+ */
+#define TXD_DESC_SIZE                  ( 16 * sizeof(struct data_desc) )
+#define RXD_DESC_SIZE                  ( 16 * sizeof(struct data_desc) )
+
+/*
+ * TX descriptor format for TX, PRIO and Beacon Ring.
+ */
+
+/*
+ * Word0
+ * TKIP_MIC: ASIC appends TKIP MIC if TKIP is used.
+ * KEY_TABLE: Use per-client pairwise KEY table.
+ * KEY_INDEX:
+ * Key index (0~31) to the pairwise KEY table.
+ * 0~3 to shared KEY table 0 (BSS0).
+ * 4~7 to shared KEY table 1 (BSS1).
+ * 8~11 to shared KEY table 2 (BSS2).
+ * 12~15 to shared KEY table 3 (BSS3).
+ * BURST: Next frame belongs to same "burst" event.
+ */
+#define TXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define TXD_W0_VALID                   FIELD32(0x00000002)
+#define TXD_W0_MORE_FRAG               FIELD32(0x00000004)
+#define TXD_W0_ACK                     FIELD32(0x00000008)
+#define TXD_W0_TIMESTAMP               FIELD32(0x00000010)
+#define TXD_W0_OFDM                    FIELD32(0x00000020)
+#define TXD_W0_IFS                     FIELD32(0x00000040)
+#define TXD_W0_RETRY_MODE              FIELD32(0x00000080)
+#define TXD_W0_TKIP_MIC                        FIELD32(0x00000100)
+#define TXD_W0_KEY_TABLE               FIELD32(0x00000200)
+#define TXD_W0_KEY_INDEX               FIELD32(0x0000fc00)
+#define TXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define TXD_W0_BURST                   FIELD32(0x10000000)
+#define TXD_W0_CIPHER_ALG              FIELD32(0xe0000000)
+
+/*
+ * Word1
+ * HOST_Q_ID: EDCA/HCCA queue ID.
+ * HW_SEQUENCE: MAC overwrites the frame sequence number.
+ * BUFFER_COUNT: Number of buffers in this TXD.
+ */
+#define TXD_W1_HOST_Q_ID               FIELD32(0x0000000f)
+#define TXD_W1_AIFSN                   FIELD32(0x000000f0)
+#define TXD_W1_CWMIN                   FIELD32(0x00000f00)
+#define TXD_W1_CWMAX                   FIELD32(0x0000f000)
+#define TXD_W1_IV_OFFSET               FIELD32(0x003f0000)
+#define TXD_W1_PIGGY_BACK              FIELD32(0x01000000)
+#define TXD_W1_HW_SEQUENCE             FIELD32(0x10000000)
+#define TXD_W1_BUFFER_COUNT            FIELD32(0xe0000000)
+
+/*
+ * Word2: PLCP information
+ */
+#define TXD_W2_PLCP_SIGNAL             FIELD32(0x000000ff)
+#define TXD_W2_PLCP_SERVICE            FIELD32(0x0000ff00)
+#define TXD_W2_PLCP_LENGTH_LOW         FIELD32(0x00ff0000)
+#define TXD_W2_PLCP_LENGTH_HIGH                FIELD32(0xff000000)
+
+/*
+ * Word3
+ */
+#define TXD_W3_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word4
+ */
+#define TXD_W4_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Word5
+ * FRAME_OFFSET: Frame start offset inside ASIC TXFIFO (after TXINFO field).
+ * TXD_W5_PID_SUBTYPE: Driver assigned packet ID index for txdone handler.
+ * TXD_W5_PID_TYPE: Driver assigned packet ID type for txdone handler.
+ * WAITING_DMA_DONE_INT: TXD been filled with data
+ * and waiting for TxDoneISR housekeeping.
+ */
+#define TXD_W5_FRAME_OFFSET            FIELD32(0x000000ff)
+#define TXD_W5_PID_SUBTYPE             FIELD32(0x00001f00)
+#define TXD_W5_PID_TYPE                        FIELD32(0x0000e000)
+#define TXD_W5_TX_POWER                        FIELD32(0x00ff0000)
+#define TXD_W5_WAITING_DMA_DONE_INT    FIELD32(0x01000000)
+
+/*
+ * the above 24-byte is called TXINFO and will be DMAed to MAC block
+ * through TXFIFO. MAC block use this TXINFO to control the transmission
+ * behavior of this frame.
+ * The following fields are not used by MAC block.
+ * They are used by DMA block and HOST driver only.
+ * Once a frame has been DMA to ASIC, all the following fields are useless
+ * to ASIC.
+ */
+
+/*
+ * Word6-10: Buffer physical address
+ */
+#define TXD_W6_BUFFER_PHYSICAL_ADDRESS FIELD32(0xffffffff)
+#define TXD_W7_BUFFER_PHYSICAL_ADDRESS FIELD32(0xffffffff)
+#define TXD_W8_BUFFER_PHYSICAL_ADDRESS FIELD32(0xffffffff)
+#define TXD_W9_BUFFER_PHYSICAL_ADDRESS FIELD32(0xffffffff)
+#define TXD_W10_BUFFER_PHYSICAL_ADDRESS        FIELD32(0xffffffff)
+
+/*
+ * Word11-13: Buffer length
+ */
+#define TXD_W11_BUFFER_LENGTH0         FIELD32(0x00000fff)
+#define TXD_W11_BUFFER_LENGTH1         FIELD32(0x0fff0000)
+#define TXD_W12_BUFFER_LENGTH2         FIELD32(0x00000fff)
+#define TXD_W12_BUFFER_LENGTH3         FIELD32(0x0fff0000)
+#define TXD_W13_BUFFER_LENGTH4         FIELD32(0x00000fff)
+
+/*
+ * Word14
+ */
+#define TXD_W14_SK_BUFFER              FIELD32(0xffffffff)
+
+/*
+ * Word15
+ */
+#define TXD_W15_NEXT_SK_BUFFER         FIELD32(0xffffffff)
+
+/*
+ * RX descriptor format for RX Ring.
+ */
+
+/*
+ * Word0
+ * CIPHER_ERROR: 1:ICV error, 2:MIC error, 3:invalid key.
+ * KEY_INDEX: Decryption key actually used.
+ */
+#define RXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define RXD_W0_DROP                    FIELD32(0x00000002)
+#define RXD_W0_UNICAST_TO_ME           FIELD32(0x00000004)
+#define RXD_W0_MULTICAST               FIELD32(0x00000008)
+#define RXD_W0_BROADCAST               FIELD32(0x00000010)
+#define RXD_W0_MY_BSS                  FIELD32(0x00000020)
+#define RXD_W0_CRC_ERROR               FIELD32(0x00000040)
+#define RXD_W0_OFDM                    FIELD32(0x00000080)
+#define RXD_W0_CIPHER_ERROR            FIELD32(0x00000300)
+#define RXD_W0_KEY_INDEX               FIELD32(0x0000fc00)
+#define RXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define RXD_W0_CIPHER_ALG              FIELD32(0xe0000000)
+
+/*
+ * Word1
+ * SIGNAL: RX raw data rate reported by BBP.
+ */
+#define RXD_W1_SIGNAL                  FIELD32(0x000000ff)
+#define RXD_W1_RSSI_AGC                        FIELD32(0x00001f00)
+#define RXD_W1_RSSI_LNA                        FIELD32(0x00006000)
+#define RXD_W1_FRAME_OFFSET            FIELD32(0x7f000000)
+
+/*
+ * Word2
+ * IV: Received IV of originally encrypted.
+ */
+#define RXD_W2_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word3
+ * EIV: Received EIV of originally encrypted.
+ */
+#define RXD_W3_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Word4
+ */
+#define RXD_W4_RESERVED                        FIELD32(0xffffffff)
+
+/*
+ * the above 20-byte is called RXINFO and will be DMAed to MAC RX block
+ * and passed to the HOST driver.
+ * The following fields are for DMA block and HOST usage only.
+ * Can't be touched by ASIC MAC block.
+ */
+
+/*
+ * Word5
+ */
+#define RXD_W5_BUFFER_PHYSICAL_ADDRESS FIELD32(0xffffffff)
+
+/*
+ * Word6-15: Reserved
+ */
+#define RXD_W6_RESERVED                        FIELD32(0xffffffff)
+#define RXD_W7_RESERVED                        FIELD32(0xffffffff)
+#define RXD_W8_RESERVED                        FIELD32(0xffffffff)
+#define RXD_W9_RESERVED                        FIELD32(0xffffffff)
+#define RXD_W10_RESERVED               FIELD32(0xffffffff)
+#define RXD_W11_RESERVED               FIELD32(0xffffffff)
+#define RXD_W12_RESERVED               FIELD32(0xffffffff)
+#define RXD_W13_RESERVED               FIELD32(0xffffffff)
+#define RXD_W14_RESERVED               FIELD32(0xffffffff)
+#define RXD_W15_RESERVED               FIELD32(0xffffffff)
+
+/*
+ * Macro's for converting txpower from EEPROM to dscape value
+ * and from dscape value to register value.
+ */
+#define MIN_TXPOWER    0
+#define MAX_TXPOWER    31
+#define DEFAULT_TXPOWER        24
+
+#define TXPOWER_FROM_DEV(__txpower)            \
+({                                             \
+       ((__txpower) > MAX_TXPOWER) ?           \
+               DEFAULT_TXPOWER : (__txpower);  \
+})
+
+#define TXPOWER_TO_DEV(__txpower)                      \
+({                                                     \
+       ((__txpower) <= MIN_TXPOWER) ? MIN_TXPOWER :    \
+       (((__txpower) >= MAX_TXPOWER) ? MAX_TXPOWER :   \
+       (__txpower));                                   \
+})
+
+#endif /* RT61PCI_H */
diff --git a/drivers/net/wireless/rt2x00/rt73usb.c b/drivers/net/wireless/rt2x00/rt73usb.c
new file mode 100644 (file)
index 0000000..b047c7c
--- /dev/null
@@ -0,0 +1,2124 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt73usb
+       Abstract: rt73usb device specific routines.
+       Supported chipsets: rt2571W & rt2671.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt73usb"
+
+#include <linux/delay.h>
+#include <linux/etherdevice.h>
+#include <linux/init.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/usb.h>
+
+#include "rt2x00.h"
+#include "rt2x00usb.h"
+#include "rt73usb.h"
+
+/*
+ * Register access.
+ * All access to the CSR registers will go through the methods
+ * rt73usb_register_read and rt73usb_register_write.
+ * BBP and RF register require indirect register access,
+ * and use the CSR registers BBPCSR and RFCSR to achieve this.
+ * These indirect registers work with busy bits,
+ * and we will try maximal REGISTER_BUSY_COUNT times to access
+ * the register while taking a REGISTER_BUSY_DELAY us delay
+ * between each attampt. When the busy bit is still set at that time,
+ * the access attempt is considered to have failed,
+ * and we will print an error.
+ */
+static inline void rt73usb_register_read(const struct rt2x00_dev *rt2x00dev,
+                                        const unsigned int offset, u32 *value)
+{
+       __le32 reg;
+       rt2x00usb_vendor_request_buff(rt2x00dev, USB_MULTI_READ,
+                                     USB_VENDOR_REQUEST_IN, offset,
+                                     &reg, sizeof(u32), REGISTER_TIMEOUT);
+       *value = le32_to_cpu(reg);
+}
+
+static inline void rt73usb_register_multiread(const struct rt2x00_dev
+                                             *rt2x00dev,
+                                             const unsigned int offset,
+                                             void *value, const u32 length)
+{
+       int timeout = REGISTER_TIMEOUT * (length / sizeof(u32));
+       rt2x00usb_vendor_request_buff(rt2x00dev, USB_MULTI_READ,
+                                     USB_VENDOR_REQUEST_IN, offset,
+                                     value, length, timeout);
+}
+
+static inline void rt73usb_register_write(const struct rt2x00_dev *rt2x00dev,
+                                         const unsigned int offset, u32 value)
+{
+       __le32 reg = cpu_to_le32(value);
+       rt2x00usb_vendor_request_buff(rt2x00dev, USB_MULTI_WRITE,
+                                     USB_VENDOR_REQUEST_OUT, offset,
+                                     &reg, sizeof(u32), REGISTER_TIMEOUT);
+}
+
+static inline void rt73usb_register_multiwrite(const struct rt2x00_dev
+                                              *rt2x00dev,
+                                              const unsigned int offset,
+                                              void *value, const u32 length)
+{
+       int timeout = REGISTER_TIMEOUT * (length / sizeof(u32));
+       rt2x00usb_vendor_request_buff(rt2x00dev, USB_MULTI_WRITE,
+                                     USB_VENDOR_REQUEST_OUT, offset,
+                                     value, length, timeout);
+}
+
+static u32 rt73usb_bbp_check(const struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt73usb_register_read(rt2x00dev, PHY_CSR3, &reg);
+               if (!rt2x00_get_field32(reg, PHY_CSR3_BUSY))
+                       break;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       return reg;
+}
+
+static void rt73usb_bbp_write(const struct rt2x00_dev *rt2x00dev,
+                             const unsigned int word, const u8 value)
+{
+       u32 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt73usb_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, PHY_CSR3_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR3 register busy. Write failed.\n");
+               return;
+       }
+
+       /*
+        * Write the data into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, PHY_CSR3_VALUE, value);
+       rt2x00_set_field32(&reg, PHY_CSR3_REGNUM, word);
+       rt2x00_set_field32(&reg, PHY_CSR3_BUSY, 1);
+       rt2x00_set_field32(&reg, PHY_CSR3_READ_CONTROL, 0);
+
+       rt73usb_register_write(rt2x00dev, PHY_CSR3, reg);
+}
+
+static void rt73usb_bbp_read(const struct rt2x00_dev *rt2x00dev,
+                            const unsigned int word, u8 *value)
+{
+       u32 reg;
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt73usb_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, PHY_CSR3_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR3 register busy. Read failed.\n");
+               return;
+       }
+
+       /*
+        * Write the request into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, PHY_CSR3_REGNUM, word);
+       rt2x00_set_field32(&reg, PHY_CSR3_BUSY, 1);
+       rt2x00_set_field32(&reg, PHY_CSR3_READ_CONTROL, 1);
+
+       rt73usb_register_write(rt2x00dev, PHY_CSR3, reg);
+
+       /*
+        * Wait until the BBP becomes ready.
+        */
+       reg = rt73usb_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, PHY_CSR3_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR3 register busy. Read failed.\n");
+               *value = 0xff;
+               return;
+       }
+
+       *value = rt2x00_get_field32(reg, PHY_CSR3_VALUE);
+}
+
+static void rt73usb_rf_write(const struct rt2x00_dev *rt2x00dev,
+                            const unsigned int word, const u32 value)
+{
+       u32 reg;
+       unsigned int i;
+
+       if (!word)
+               return;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt73usb_register_read(rt2x00dev, PHY_CSR4, &reg);
+               if (!rt2x00_get_field32(reg, PHY_CSR4_BUSY))
+                       goto rf_write;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "PHY_CSR4 register busy. Write failed.\n");
+       return;
+
+rf_write:
+       reg = 0;
+       rt2x00_set_field32(&reg, PHY_CSR4_VALUE, value);
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF5225) ||
+           rt2x00_rf(&rt2x00dev->chip, RF2527))
+               rt2x00_set_field32(&reg, PHY_CSR4_NUMBER_OF_BITS, 21);
+       else
+               rt2x00_set_field32(&reg, PHY_CSR4_NUMBER_OF_BITS, 20);
+
+       rt2x00_set_field32(&reg, PHY_CSR4_IF_SELECT, 0);
+       rt2x00_set_field32(&reg, PHY_CSR4_BUSY, 1);
+
+       rt73usb_register_write(rt2x00dev, PHY_CSR4, reg);
+       rt2x00_rf_write(rt2x00dev, word, value);
+}
+
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+#define CSR_OFFSET(__word)     ( CSR_REG_BASE + ((__word) * sizeof(u32)) )
+
+static void rt73usb_read_csr(const struct rt2x00_dev *rt2x00dev,
+                            const unsigned int word, u32 *data)
+{
+       rt73usb_register_read(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static void rt73usb_write_csr(const struct rt2x00_dev *rt2x00dev,
+                             const unsigned int word, u32 data)
+{
+       rt73usb_register_write(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static const struct rt2x00debug rt73usb_rt2x00debug = {
+       .owner  = THIS_MODULE,
+       .csr    = {
+               .read           = rt73usb_read_csr,
+               .write          = rt73usb_write_csr,
+               .word_size      = sizeof(u32),
+               .word_count     = CSR_REG_SIZE / sizeof(u32),
+       },
+       .eeprom = {
+               .read           = rt2x00_eeprom_read,
+               .write          = rt2x00_eeprom_write,
+               .word_size      = sizeof(u16),
+               .word_count     = EEPROM_SIZE / sizeof(u16),
+       },
+       .bbp    = {
+               .read           = rt73usb_bbp_read,
+               .write          = rt73usb_bbp_write,
+               .word_size      = sizeof(u8),
+               .word_count     = BBP_SIZE / sizeof(u8),
+       },
+       .rf     = {
+               .read           = rt2x00_rf_read,
+               .write          = rt73usb_rf_write,
+               .word_size      = sizeof(u32),
+               .word_count     = RF_SIZE / sizeof(u32),
+       },
+};
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+/*
+ * Configuration handlers.
+ */
+static void rt73usb_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *addr)
+{
+       __le32 reg[2];
+       u32 tmp;
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, addr, ETH_ALEN);
+
+       tmp = le32_to_cpu(reg[1]);
+       rt2x00_set_field32(&tmp, MAC_CSR3_UNICAST_TO_ME_MASK, 0xff);
+       reg[1] = cpu_to_le32(tmp);
+
+       /*
+        * The MAC address is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt73usb_register_multiwrite(rt2x00dev, MAC_CSR2, &reg, sizeof(reg));
+}
+
+static void rt73usb_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid)
+{
+       __le32 reg[2];
+       u32 tmp;
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, bssid, ETH_ALEN);
+
+       tmp = le32_to_cpu(reg[1]);
+       rt2x00_set_field32(&tmp, MAC_CSR5_BSS_ID_MASK, 3);
+       reg[1] = cpu_to_le32(tmp);
+
+       /*
+        * The BSSID is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt73usb_register_multiwrite(rt2x00dev, MAC_CSR4, &reg, sizeof(reg));
+}
+
+static void rt73usb_config_packet_filter(struct rt2x00_dev *rt2x00dev,
+                                        const unsigned int filter)
+{
+       int promisc = !!(filter & IFF_PROMISC);
+       int multicast = !!(filter & IFF_MULTICAST);
+       int broadcast = !!(filter & IFF_BROADCAST);
+       u32 reg;
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DROP_NOT_TO_ME, !promisc);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DROP_MULTICAST, !multicast);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DROP_BORADCAST, !broadcast);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR0, reg);
+}
+
+static void rt73usb_config_type(struct rt2x00_dev *rt2x00dev, const int type)
+{
+       u32 reg;
+
+       /*
+        * Clear current synchronisation setup.
+        * For the Beacon base registers we only need to clear
+        * the first byte since that byte contains the VALID and OWNER
+        * bits which (when set to 0) will invalidate the entire beacon.
+        */
+       rt73usb_register_write(rt2x00dev, TXRX_CSR9, 0);
+       rt73usb_register_write(rt2x00dev, HW_BEACON_BASE0, 0);
+       rt73usb_register_write(rt2x00dev, HW_BEACON_BASE1, 0);
+       rt73usb_register_write(rt2x00dev, HW_BEACON_BASE2, 0);
+       rt73usb_register_write(rt2x00dev, HW_BEACON_BASE3, 0);
+
+       /*
+        * Apply hardware packet filter.
+        */
+       rt73usb_register_read(rt2x00dev, TXRX_CSR0, &reg);
+
+       if (!is_monitor_present(&rt2x00dev->interface) &&
+           (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_STA))
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_TO_DS, 1);
+       else
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_TO_DS, 0);
+
+       /*
+        * If there is a non-monitor interface present
+        * the packet should be strict (even if a monitor interface is present!).
+        * When there is only 1 interface present which is in monitor mode
+        * we should start accepting _all_ frames.
+        */
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_CRC, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_PHYSICAL, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_CONTROL, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_VERSION_ERROR, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_ACK_CTS, 1);
+       } else if (is_monitor_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_CRC, 0);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_PHYSICAL, 0);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_CONTROL, 0);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_VERSION_ERROR, 0);
+               rt2x00_set_field32(&reg, TXRX_CSR0_DROP_ACK_CTS, 0);
+       }
+
+       rt73usb_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       /*
+        * Enable synchronisation.
+        */
+       rt73usb_register_read(rt2x00dev, TXRX_CSR9, &reg);
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, TXRX_CSR9_TSF_TICKING, 1);
+               rt2x00_set_field32(&reg, TXRX_CSR9_TBTT_ENABLE, 1);
+       }
+
+       rt2x00_set_field32(&reg, TXRX_CSR9_BEACON_GEN, 0);
+       if (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_AP)
+               rt2x00_set_field32(&reg, TXRX_CSR9_TSF_SYNC, 2);
+       else if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field32(&reg, TXRX_CSR9_TSF_SYNC, 1);
+       else if (is_monitor_present(&rt2x00dev->interface) &&
+                !is_interface_present(&rt2x00dev->interface))
+               rt2x00_set_field32(&reg, TXRX_CSR9_TSF_SYNC, 0);
+
+       rt73usb_register_write(rt2x00dev, TXRX_CSR9, reg);
+}
+
+static void rt73usb_config_rate(struct rt2x00_dev *rt2x00dev, const int rate)
+{
+       struct ieee80211_conf *conf = &rt2x00dev->hw->conf;
+       u32 reg;
+       u32 value;
+       u32 preamble;
+
+       if (DEVICE_GET_RATE_FIELD(rate, PREAMBLE))
+               preamble = SHORT_PREAMBLE;
+       else
+               preamble = PREAMBLE;
+
+       reg = DEVICE_GET_RATE_FIELD(rate, RATEMASK) & DEV_BASIC_RATEMASK;
+
+       rt73usb_register_write(rt2x00dev, TXRX_CSR5, reg);
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       value = ((conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME) ?
+                SHORT_DIFS : DIFS) +
+           PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXRX_CSR0_RX_ACK_TIMEOUT, value);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR4, &reg);
+       if (preamble == SHORT_PREAMBLE)
+               rt2x00_set_field32(&reg, TXRX_CSR4_AUTORESPOND_PREAMBLE, 1);
+       else
+               rt2x00_set_field32(&reg, TXRX_CSR4_AUTORESPOND_PREAMBLE, 0);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR4, reg);
+}
+
+static void rt73usb_config_phymode(struct rt2x00_dev *rt2x00dev,
+                                  const int phymode)
+{
+       struct ieee80211_hw_mode *mode;
+       struct ieee80211_rate *rate;
+
+       if (phymode == MODE_IEEE80211A)
+               rt2x00dev->curr_hwmode = HWMODE_A;
+       else if (phymode == MODE_IEEE80211B)
+               rt2x00dev->curr_hwmode = HWMODE_B;
+       else
+               rt2x00dev->curr_hwmode = HWMODE_G;
+
+       mode = &rt2x00dev->hwmodes[rt2x00dev->curr_hwmode];
+       rate = &mode->rates[mode->num_rates - 1];
+
+       rt73usb_config_rate(rt2x00dev, rate->val2);
+}
+
+static void rt73usb_config_lock_channel(struct rt2x00_dev *rt2x00dev,
+                                       struct rf_channel *rf,
+                                       const int txpower)
+{
+       u8 r3;
+       u8 r94;
+       u8 smart;
+
+       rt2x00_set_field32(&rf->rf3, RF3_TXPOWER, TXPOWER_TO_DEV(txpower));
+       rt2x00_set_field32(&rf->rf4, RF4_FREQ_OFFSET, rt2x00dev->freq_offset);
+
+       smart = !(rt2x00_rf(&rt2x00dev->chip, RF5225) ||
+                 rt2x00_rf(&rt2x00dev->chip, RF2527));
+
+       rt73usb_bbp_read(rt2x00dev, 3, &r3);
+       rt2x00_set_field8(&r3, BBP_R3_SMART_MODE, smart);
+       rt73usb_bbp_write(rt2x00dev, 3, r3);
+
+       r94 = 6;
+       if (txpower > MAX_TXPOWER && txpower <= (MAX_TXPOWER + r94))
+               r94 += txpower - MAX_TXPOWER;
+       else if (txpower < MIN_TXPOWER && txpower >= (MIN_TXPOWER - r94))
+               r94 += txpower;
+       rt73usb_bbp_write(rt2x00dev, 94, r94);
+
+       rt73usb_rf_write(rt2x00dev, 1, rf->rf1);
+       rt73usb_rf_write(rt2x00dev, 2, rf->rf2);
+       rt73usb_rf_write(rt2x00dev, 3, rf->rf3 & ~0x00000004);
+       rt73usb_rf_write(rt2x00dev, 4, rf->rf4);
+
+       rt73usb_rf_write(rt2x00dev, 1, rf->rf1);
+       rt73usb_rf_write(rt2x00dev, 2, rf->rf2);
+       rt73usb_rf_write(rt2x00dev, 3, rf->rf3 | 0x00000004);
+       rt73usb_rf_write(rt2x00dev, 4, rf->rf4);
+
+       rt73usb_rf_write(rt2x00dev, 1, rf->rf1);
+       rt73usb_rf_write(rt2x00dev, 2, rf->rf2);
+       rt73usb_rf_write(rt2x00dev, 3, rf->rf3 & ~0x00000004);
+       rt73usb_rf_write(rt2x00dev, 4, rf->rf4);
+
+       udelay(10);
+}
+
+static void rt73usb_config_channel(struct rt2x00_dev *rt2x00dev,
+                                  const int index, const int channel,
+                                  const int txpower)
+{
+       struct rf_channel rf;
+
+       /*
+        * Fill rf_reg structure.
+        */
+       memcpy(&rf, &rt2x00dev->spec.channels[index], sizeof(rf));
+
+       rt73usb_config_lock_channel(rt2x00dev, &rf, txpower);
+}
+
+static void rt73usb_config_txpower(struct rt2x00_dev *rt2x00dev,
+                                  const int txpower)
+{
+       struct rf_channel rf;
+
+       rt2x00_rf_read(rt2x00dev, 1, &rf.rf1);
+       rt2x00_rf_read(rt2x00dev, 2, &rf.rf2);
+       rt2x00_rf_read(rt2x00dev, 3, &rf.rf3);
+       rt2x00_rf_read(rt2x00dev, 4, &rf.rf4);
+
+       rt73usb_config_lock_channel(rt2x00dev, &rf, txpower);
+}
+
+static void rt73usb_config_antenna_5x(struct rt2x00_dev *rt2x00dev,
+                                     const int antenna_tx,
+                                     const int antenna_rx)
+{
+       u8 r3;
+       u8 r4;
+       u8 r77;
+
+       rt73usb_bbp_read(rt2x00dev, 3, &r3);
+       rt73usb_bbp_read(rt2x00dev, 4, &r4);
+       rt73usb_bbp_read(rt2x00dev, 77, &r77);
+
+       rt2x00_set_field8(&r3, BBP_R3_SMART_MODE, 0);
+
+       switch (antenna_rx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 2);
+               rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END,
+                                 !!(rt2x00dev->curr_hwmode != HWMODE_A));
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END, 0);
+
+               if (rt2x00dev->curr_hwmode == HWMODE_A)
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 0);
+               else
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 3);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END, 0);
+
+               if (rt2x00dev->curr_hwmode == HWMODE_A)
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 3);
+               else
+                       rt2x00_set_field8(&r77, BBP_R77_PAIR, 0);
+               break;
+       }
+
+       rt73usb_bbp_write(rt2x00dev, 77, r77);
+       rt73usb_bbp_write(rt2x00dev, 3, r3);
+       rt73usb_bbp_write(rt2x00dev, 4, r4);
+}
+
+static void rt73usb_config_antenna_2x(struct rt2x00_dev *rt2x00dev,
+                                     const int antenna_tx,
+                                     const int antenna_rx)
+{
+       u8 r3;
+       u8 r4;
+       u8 r77;
+
+       rt73usb_bbp_read(rt2x00dev, 3, &r3);
+       rt73usb_bbp_read(rt2x00dev, 4, &r4);
+       rt73usb_bbp_read(rt2x00dev, 77, &r77);
+
+       rt2x00_set_field8(&r3, BBP_R3_SMART_MODE, 0);
+       rt2x00_set_field8(&r4, BBP_R4_RX_FRAME_END,
+                         !test_bit(CONFIG_FRAME_TYPE, &rt2x00dev->flags));
+
+       switch (antenna_rx) {
+       case ANTENNA_SW_DIVERSITY:
+       case ANTENNA_HW_DIVERSITY:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 2);
+               break;
+       case ANTENNA_A:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt2x00_set_field8(&r77, BBP_R77_PAIR, 3);
+               break;
+       case ANTENNA_B:
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+               rt2x00_set_field8(&r77, BBP_R77_PAIR, 0);
+               break;
+       }
+
+       rt73usb_bbp_write(rt2x00dev, 77, r77);
+       rt73usb_bbp_write(rt2x00dev, 3, r3);
+       rt73usb_bbp_write(rt2x00dev, 4, r4);
+}
+
+struct antenna_sel {
+       u8 word;
+       /*
+        * value[0] -> non-LNA
+        * value[1] -> LNA
+        */
+       u8 value[2];
+};
+
+static const struct antenna_sel antenna_sel_a[] = {
+       { 96,  { 0x58, 0x78 } },
+       { 104, { 0x38, 0x48 } },
+       { 75,  { 0xfe, 0x80 } },
+       { 86,  { 0xfe, 0x80 } },
+       { 88,  { 0xfe, 0x80 } },
+       { 35,  { 0x60, 0x60 } },
+       { 97,  { 0x58, 0x58 } },
+       { 98,  { 0x58, 0x58 } },
+};
+
+static const struct antenna_sel antenna_sel_bg[] = {
+       { 96,  { 0x48, 0x68 } },
+       { 104, { 0x2c, 0x3c } },
+       { 75,  { 0xfe, 0x80 } },
+       { 86,  { 0xfe, 0x80 } },
+       { 88,  { 0xfe, 0x80 } },
+       { 35,  { 0x50, 0x50 } },
+       { 97,  { 0x48, 0x48 } },
+       { 98,  { 0x48, 0x48 } },
+};
+
+static void rt73usb_config_antenna(struct rt2x00_dev *rt2x00dev,
+                                  const int antenna_tx, const int antenna_rx)
+{
+       const struct antenna_sel *sel;
+       unsigned int lna;
+       unsigned int i;
+       u32 reg;
+
+       rt73usb_register_read(rt2x00dev, PHY_CSR0, &reg);
+
+       if (rt2x00dev->curr_hwmode == HWMODE_A) {
+               sel = antenna_sel_a;
+               lna = test_bit(CONFIG_EXTERNAL_LNA_A, &rt2x00dev->flags);
+
+               rt2x00_set_field32(&reg, PHY_CSR0_PA_PE_BG, 0);
+               rt2x00_set_field32(&reg, PHY_CSR0_PA_PE_A, 1);
+       } else {
+               sel = antenna_sel_bg;
+               lna = test_bit(CONFIG_EXTERNAL_LNA_BG, &rt2x00dev->flags);
+
+               rt2x00_set_field32(&reg, PHY_CSR0_PA_PE_BG, 1);
+               rt2x00_set_field32(&reg, PHY_CSR0_PA_PE_A, 0);
+       }
+
+       for (i = 0; i < ARRAY_SIZE(antenna_sel_a); i++)
+               rt73usb_bbp_write(rt2x00dev, sel[i].word, sel[i].value[lna]);
+
+       rt73usb_register_write(rt2x00dev, PHY_CSR0, reg);
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF5226) ||
+           rt2x00_rf(&rt2x00dev->chip, RF5225))
+               rt73usb_config_antenna_5x(rt2x00dev, antenna_tx, antenna_rx);
+       else if (rt2x00_rf(&rt2x00dev->chip, RF2528) ||
+                rt2x00_rf(&rt2x00dev->chip, RF2527))
+               rt73usb_config_antenna_2x(rt2x00dev, antenna_tx, antenna_rx);
+}
+
+static void rt73usb_config_duration(struct rt2x00_dev *rt2x00dev,
+                                   const int short_slot_time,
+                                   const int beacon_int)
+{
+       u32 reg;
+
+       rt73usb_register_read(rt2x00dev, MAC_CSR9, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR9_SLOT_TIME,
+                          short_slot_time ? SHORT_SLOT_TIME : SLOT_TIME);
+       rt73usb_register_write(rt2x00dev, MAC_CSR9, reg);
+
+       rt73usb_register_read(rt2x00dev, MAC_CSR8, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR8_SIFS, SIFS);
+       rt2x00_set_field32(&reg, MAC_CSR8_SIFS_AFTER_RX_OFDM, 3);
+       rt2x00_set_field32(&reg, MAC_CSR8_EIFS, EIFS);
+       rt73usb_register_write(rt2x00dev, MAC_CSR8, reg);
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR0_TSF_OFFSET, IEEE80211_HEADER);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR4, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR4_AUTORESPOND_ENABLE, 1);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR4, reg);
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR9, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR9_BEACON_INTERVAL, beacon_int * 16);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR9, reg);
+}
+
+static void rt73usb_config(struct rt2x00_dev *rt2x00dev,
+                          const unsigned int flags,
+                          struct ieee80211_conf *conf)
+{
+       int short_slot_time = conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME;
+
+       if (flags & CONFIG_UPDATE_PHYMODE)
+               rt73usb_config_phymode(rt2x00dev, conf->phymode);
+       if (flags & CONFIG_UPDATE_CHANNEL)
+               rt73usb_config_channel(rt2x00dev, conf->channel_val,
+                                      conf->channel, conf->power_level);
+       if ((flags & CONFIG_UPDATE_TXPOWER) && !(flags & CONFIG_UPDATE_CHANNEL))
+               rt73usb_config_txpower(rt2x00dev, conf->power_level);
+       if (flags & CONFIG_UPDATE_ANTENNA)
+               rt73usb_config_antenna(rt2x00dev, conf->antenna_sel_tx,
+                                      conf->antenna_sel_rx);
+       if (flags & (CONFIG_UPDATE_SLOT_TIME | CONFIG_UPDATE_BEACON_INT))
+               rt73usb_config_duration(rt2x00dev, short_slot_time,
+                                       conf->beacon_int);
+}
+
+/*
+ * LED functions.
+ */
+static void rt73usb_enable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt73usb_register_read(rt2x00dev, MAC_CSR14, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR14_ON_PERIOD, 70);
+       rt2x00_set_field32(&reg, MAC_CSR14_OFF_PERIOD, 30);
+       rt73usb_register_write(rt2x00dev, MAC_CSR14, reg);
+
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_RADIO_STATUS, 1);
+       if (rt2x00dev->rx_status.phymode == MODE_IEEE80211A)
+               rt2x00_set_field16(&rt2x00dev->led_reg,
+                                  MCU_LEDCS_LINK_A_STATUS, 1);
+       else
+               rt2x00_set_field16(&rt2x00dev->led_reg,
+                                  MCU_LEDCS_LINK_BG_STATUS, 1);
+
+       rt2x00usb_vendor_request_sw(rt2x00dev, USB_LED_CONTROL, 0x0000,
+                                   rt2x00dev->led_reg, REGISTER_TIMEOUT);
+}
+
+static void rt73usb_disable_led(struct rt2x00_dev *rt2x00dev)
+{
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_RADIO_STATUS, 0);
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_LINK_BG_STATUS, 0);
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_LINK_A_STATUS, 0);
+
+       rt2x00usb_vendor_request_sw(rt2x00dev, USB_LED_CONTROL, 0x0000,
+                                   rt2x00dev->led_reg, REGISTER_TIMEOUT);
+}
+
+static void rt73usb_activity_led(struct rt2x00_dev *rt2x00dev, int rssi)
+{
+       u32 led;
+
+       if (rt2x00dev->led_mode != LED_MODE_SIGNAL_STRENGTH)
+               return;
+
+       /*
+        * Led handling requires a positive value for the rssi,
+        * to do that correctly we need to add the correction.
+        */
+       rssi += rt2x00dev->rssi_offset;
+
+       if (rssi <= 30)
+               led = 0;
+       else if (rssi <= 39)
+               led = 1;
+       else if (rssi <= 49)
+               led = 2;
+       else if (rssi <= 53)
+               led = 3;
+       else if (rssi <= 63)
+               led = 4;
+       else
+               led = 5;
+
+       rt2x00usb_vendor_request_sw(rt2x00dev, USB_LED_CONTROL, led,
+                                   rt2x00dev->led_reg, REGISTER_TIMEOUT);
+}
+
+/*
+ * Link tuning
+ */
+static void rt73usb_link_stats(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Update FCS error count from register.
+        */
+       rt73usb_register_read(rt2x00dev, STA_CSR0, &reg);
+       rt2x00dev->link.rx_failed = rt2x00_get_field32(reg, STA_CSR0_FCS_ERROR);
+
+       /*
+        * Update False CCA count from register.
+        */
+       rt73usb_register_read(rt2x00dev, STA_CSR1, &reg);
+       reg = rt2x00_get_field32(reg, STA_CSR1_FALSE_CCA_ERROR);
+       rt2x00dev->link.false_cca =
+           rt2x00_get_field32(reg, STA_CSR1_FALSE_CCA_ERROR);
+}
+
+static void rt73usb_reset_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       rt73usb_bbp_write(rt2x00dev, 17, 0x20);
+       rt2x00dev->link.vgc_level = 0x20;
+}
+
+static void rt73usb_link_tuner(struct rt2x00_dev *rt2x00dev)
+{
+       int rssi = rt2x00_get_link_rssi(&rt2x00dev->link);
+       u8 r17;
+       u8 up_bound;
+       u8 low_bound;
+
+       /*
+        * Update Led strength
+        */
+       rt73usb_activity_led(rt2x00dev, rssi);
+
+       rt73usb_bbp_read(rt2x00dev, 17, &r17);
+
+       /*
+        * Determine r17 bounds.
+        */
+       if (rt2x00dev->rx_status.phymode == MODE_IEEE80211A) {
+               low_bound = 0x28;
+               up_bound = 0x48;
+
+               if (test_bit(CONFIG_EXTERNAL_LNA_A, &rt2x00dev->flags)) {
+                       low_bound += 0x10;
+                       up_bound += 0x10;
+               }
+       } else {
+               if (rssi > -82) {
+                       low_bound = 0x1c;
+                       up_bound = 0x40;
+               } else if (rssi > -84) {
+                       low_bound = 0x1c;
+                       up_bound = 0x20;
+               } else {
+                       low_bound = 0x1c;
+                       up_bound = 0x1c;
+               }
+
+               if (test_bit(CONFIG_EXTERNAL_LNA_BG, &rt2x00dev->flags)) {
+                       low_bound += 0x14;
+                       up_bound += 0x10;
+               }
+       }
+
+       /*
+        * Special big-R17 for very short distance
+        */
+       if (rssi > -35) {
+               if (r17 != 0x60)
+                       rt73usb_bbp_write(rt2x00dev, 17, 0x60);
+               return;
+       }
+
+       /*
+        * Special big-R17 for short distance
+        */
+       if (rssi >= -58) {
+               if (r17 != up_bound)
+                       rt73usb_bbp_write(rt2x00dev, 17, up_bound);
+               return;
+       }
+
+       /*
+        * Special big-R17 for middle-short distance
+        */
+       if (rssi >= -66) {
+               low_bound += 0x10;
+               if (r17 != low_bound)
+                       rt73usb_bbp_write(rt2x00dev, 17, low_bound);
+               return;
+       }
+
+       /*
+        * Special mid-R17 for middle distance
+        */
+       if (rssi >= -74) {
+               if (r17 != (low_bound + 0x10))
+                       rt73usb_bbp_write(rt2x00dev, 17, low_bound + 0x08);
+               return;
+       }
+
+       /*
+        * Special case: Change up_bound based on the rssi.
+        * Lower up_bound when rssi is weaker then -74 dBm.
+        */
+       up_bound -= 2 * (-74 - rssi);
+       if (low_bound > up_bound)
+               up_bound = low_bound;
+
+       if (r17 > up_bound) {
+               rt73usb_bbp_write(rt2x00dev, 17, up_bound);
+               return;
+       }
+
+       /*
+        * r17 does not yet exceed upper limit, continue and base
+        * the r17 tuning on the false CCA count.
+        */
+       if (rt2x00dev->link.false_cca > 512 && r17 < up_bound) {
+               r17 += 4;
+               if (r17 > up_bound)
+                       r17 = up_bound;
+               rt73usb_bbp_write(rt2x00dev, 17, r17);
+       } else if (rt2x00dev->link.false_cca < 100 && r17 > low_bound) {
+               r17 -= 4;
+               if (r17 < low_bound)
+                       r17 = low_bound;
+               rt73usb_bbp_write(rt2x00dev, 17, r17);
+       }
+}
+
+/*
+ * Firmware name function.
+ */
+static char *rt73usb_get_firmware_name(struct rt2x00_dev *rt2x00dev)
+{
+       return FIRMWARE_RT2571;
+}
+
+/*
+ * Initialization functions.
+ */
+static int rt73usb_load_firmware(struct rt2x00_dev *rt2x00dev, void *data,
+                                const size_t len)
+{
+       unsigned int i;
+       int status;
+       u32 reg;
+       char *ptr = data;
+       char *cache;
+       int buflen;
+       int timeout;
+
+       /*
+        * Wait for stable hardware.
+        */
+       for (i = 0; i < 100; i++) {
+               rt73usb_register_read(rt2x00dev, MAC_CSR0, &reg);
+               if (reg)
+                       break;
+               msleep(1);
+       }
+
+       if (!reg) {
+               ERROR(rt2x00dev, "Unstable hardware.\n");
+               return -EBUSY;
+       }
+
+       /*
+        * Write firmware to device.
+        * We setup a seperate cache for this action,
+        * since we are going to write larger chunks of data
+        * then normally used cache size.
+        */
+       cache = kmalloc(CSR_CACHE_SIZE_FIRMWARE, GFP_KERNEL);
+       if (!cache) {
+               ERROR(rt2x00dev, "Failed to allocate firmware cache.\n");
+               return -ENOMEM;
+       }
+
+       for (i = 0; i < len; i += CSR_CACHE_SIZE_FIRMWARE) {
+               buflen = min_t(int, len - i, CSR_CACHE_SIZE_FIRMWARE);
+               timeout = REGISTER_TIMEOUT * (buflen / sizeof(u32));
+
+               memcpy(cache, ptr, buflen);
+
+               rt2x00usb_vendor_request(rt2x00dev, USB_MULTI_WRITE,
+                                        USB_VENDOR_REQUEST_OUT,
+                                        FIRMWARE_IMAGE_BASE + i, 0x0000,
+                                        cache, buflen, timeout);
+
+               ptr += buflen;
+       }
+
+       kfree(cache);
+
+       /*
+        * Send firmware request to device to load firmware,
+        * we need to specify a long timeout time.
+        */
+       status = rt2x00usb_vendor_request_sw(rt2x00dev, USB_DEVICE_MODE,
+                                            0x0000, USB_MODE_FIRMWARE,
+                                            REGISTER_TIMEOUT_FIRMWARE);
+       if (status < 0) {
+               ERROR(rt2x00dev, "Failed to write Firmware to device.\n");
+               return status;
+       }
+
+       rt73usb_disable_led(rt2x00dev);
+
+       return 0;
+}
+
+static int rt73usb_init_registers(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR0_AUTO_TX_SEQ, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DISABLE_RX, 0);
+       rt2x00_set_field32(&reg, TXRX_CSR0_TX_WITHOUT_WAITING, 0);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR1, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID0, 47); /* CCK Signal */
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID0_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID1, 30); /* Rssi */
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID1_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID2, 42); /* OFDM Rate */
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID2_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID3, 30); /* Rssi */
+       rt2x00_set_field32(&reg, TXRX_CSR1_BBP_ID3_VALID, 1);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR1, reg);
+
+       /*
+        * CCK TXD BBP registers
+        */
+       rt73usb_register_read(rt2x00dev, TXRX_CSR2, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID0, 13);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID0_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID1, 12);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID1_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID2, 11);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID2_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID3, 10);
+       rt2x00_set_field32(&reg, TXRX_CSR2_BBP_ID3_VALID, 1);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR2, reg);
+
+       /*
+        * OFDM TXD BBP registers
+        */
+       rt73usb_register_read(rt2x00dev, TXRX_CSR3, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID0, 7);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID0_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID1, 6);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID1_VALID, 1);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID2, 5);
+       rt2x00_set_field32(&reg, TXRX_CSR3_BBP_ID2_VALID, 1);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR3, reg);
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR7, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR7_ACK_CTS_6MBS, 59);
+       rt2x00_set_field32(&reg, TXRX_CSR7_ACK_CTS_9MBS, 53);
+       rt2x00_set_field32(&reg, TXRX_CSR7_ACK_CTS_12MBS, 49);
+       rt2x00_set_field32(&reg, TXRX_CSR7_ACK_CTS_18MBS, 46);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR7, reg);
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR8, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR8_ACK_CTS_24MBS, 44);
+       rt2x00_set_field32(&reg, TXRX_CSR8_ACK_CTS_36MBS, 42);
+       rt2x00_set_field32(&reg, TXRX_CSR8_ACK_CTS_48MBS, 42);
+       rt2x00_set_field32(&reg, TXRX_CSR8_ACK_CTS_54MBS, 42);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR8, reg);
+
+       rt73usb_register_write(rt2x00dev, TXRX_CSR15, 0x0000000f);
+
+       rt73usb_register_read(rt2x00dev, MAC_CSR6, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR6_MAX_FRAME_UNIT, 0xfff);
+       rt73usb_register_write(rt2x00dev, MAC_CSR6, reg);
+
+       rt73usb_register_write(rt2x00dev, MAC_CSR10, 0x00000718);
+
+       if (rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_AWAKE))
+               return -EBUSY;
+
+       rt73usb_register_write(rt2x00dev, MAC_CSR13, 0x00007f00);
+
+       /*
+        * Invalidate all Shared Keys (SEC_CSR0),
+        * and clear the Shared key Cipher algorithms (SEC_CSR1 & SEC_CSR5)
+        */
+       rt73usb_register_write(rt2x00dev, SEC_CSR0, 0x00000000);
+       rt73usb_register_write(rt2x00dev, SEC_CSR1, 0x00000000);
+       rt73usb_register_write(rt2x00dev, SEC_CSR5, 0x00000000);
+
+       reg = 0x000023b0;
+       if (rt2x00_rf(&rt2x00dev->chip, RF5225) ||
+           rt2x00_rf(&rt2x00dev->chip, RF2527))
+               rt2x00_set_field32(&reg, PHY_CSR1_RF_RPI, 1);
+       rt73usb_register_write(rt2x00dev, PHY_CSR1, reg);
+
+       rt73usb_register_write(rt2x00dev, PHY_CSR5, 0x00040a06);
+       rt73usb_register_write(rt2x00dev, PHY_CSR6, 0x00080606);
+       rt73usb_register_write(rt2x00dev, PHY_CSR7, 0x00000408);
+
+       rt73usb_register_read(rt2x00dev, AC_TXOP_CSR0, &reg);
+       rt2x00_set_field32(&reg, AC_TXOP_CSR0_AC0_TX_OP, 0);
+       rt2x00_set_field32(&reg, AC_TXOP_CSR0_AC1_TX_OP, 0);
+       rt73usb_register_write(rt2x00dev, AC_TXOP_CSR0, reg);
+
+       rt73usb_register_read(rt2x00dev, AC_TXOP_CSR1, &reg);
+       rt2x00_set_field32(&reg, AC_TXOP_CSR1_AC2_TX_OP, 192);
+       rt2x00_set_field32(&reg, AC_TXOP_CSR1_AC3_TX_OP, 48);
+       rt73usb_register_write(rt2x00dev, AC_TXOP_CSR1, reg);
+
+       rt73usb_register_read(rt2x00dev, MAC_CSR9, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR9_CW_SELECT, 0);
+       rt73usb_register_write(rt2x00dev, MAC_CSR9, reg);
+
+       /*
+        * We must clear the error counters.
+        * These registers are cleared on read,
+        * so we may pass a useless variable to store the value.
+        */
+       rt73usb_register_read(rt2x00dev, STA_CSR0, &reg);
+       rt73usb_register_read(rt2x00dev, STA_CSR1, &reg);
+       rt73usb_register_read(rt2x00dev, STA_CSR2, &reg);
+
+       /*
+        * Reset MAC and BBP registers.
+        */
+       rt73usb_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR1_SOFT_RESET, 1);
+       rt2x00_set_field32(&reg, MAC_CSR1_BBP_RESET, 1);
+       rt73usb_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       rt73usb_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR1_SOFT_RESET, 0);
+       rt2x00_set_field32(&reg, MAC_CSR1_BBP_RESET, 0);
+       rt73usb_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       rt73usb_register_read(rt2x00dev, MAC_CSR1, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR1_HOST_READY, 1);
+       rt73usb_register_write(rt2x00dev, MAC_CSR1, reg);
+
+       return 0;
+}
+
+static int rt73usb_init_bbp(struct rt2x00_dev *rt2x00dev)
+{
+       unsigned int i;
+       u16 eeprom;
+       u8 reg_id;
+       u8 value;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt73usb_bbp_read(rt2x00dev, 0, &value);
+               if ((value != 0xff) && (value != 0x00))
+                       goto continue_csr_init;
+               NOTICE(rt2x00dev, "Waiting for BBP register.\n");
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "BBP register access failed, aborting.\n");
+       return -EACCES;
+
+continue_csr_init:
+       rt73usb_bbp_write(rt2x00dev, 3, 0x80);
+       rt73usb_bbp_write(rt2x00dev, 15, 0x30);
+       rt73usb_bbp_write(rt2x00dev, 21, 0xc8);
+       rt73usb_bbp_write(rt2x00dev, 22, 0x38);
+       rt73usb_bbp_write(rt2x00dev, 23, 0x06);
+       rt73usb_bbp_write(rt2x00dev, 24, 0xfe);
+       rt73usb_bbp_write(rt2x00dev, 25, 0x0a);
+       rt73usb_bbp_write(rt2x00dev, 26, 0x0d);
+       rt73usb_bbp_write(rt2x00dev, 32, 0x0b);
+       rt73usb_bbp_write(rt2x00dev, 34, 0x12);
+       rt73usb_bbp_write(rt2x00dev, 37, 0x07);
+       rt73usb_bbp_write(rt2x00dev, 39, 0xf8);
+       rt73usb_bbp_write(rt2x00dev, 41, 0x60);
+       rt73usb_bbp_write(rt2x00dev, 53, 0x10);
+       rt73usb_bbp_write(rt2x00dev, 54, 0x18);
+       rt73usb_bbp_write(rt2x00dev, 60, 0x10);
+       rt73usb_bbp_write(rt2x00dev, 61, 0x04);
+       rt73usb_bbp_write(rt2x00dev, 62, 0x04);
+       rt73usb_bbp_write(rt2x00dev, 75, 0xfe);
+       rt73usb_bbp_write(rt2x00dev, 86, 0xfe);
+       rt73usb_bbp_write(rt2x00dev, 88, 0xfe);
+       rt73usb_bbp_write(rt2x00dev, 90, 0x0f);
+       rt73usb_bbp_write(rt2x00dev, 99, 0x00);
+       rt73usb_bbp_write(rt2x00dev, 102, 0x16);
+       rt73usb_bbp_write(rt2x00dev, 107, 0x04);
+
+       DEBUG(rt2x00dev, "Start initialization from EEPROM...\n");
+       for (i = 0; i < EEPROM_BBP_SIZE; i++) {
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_BBP_START + i, &eeprom);
+
+               if (eeprom != 0xffff && eeprom != 0x0000) {
+                       reg_id = rt2x00_get_field16(eeprom, EEPROM_BBP_REG_ID);
+                       value = rt2x00_get_field16(eeprom, EEPROM_BBP_VALUE);
+                       DEBUG(rt2x00dev, "BBP: 0x%02x, value: 0x%02x.\n",
+                             reg_id, value);
+                       rt73usb_bbp_write(rt2x00dev, reg_id, value);
+               }
+       }
+       DEBUG(rt2x00dev, "...End initialization from EEPROM.\n");
+
+       return 0;
+}
+
+/*
+ * Device state switch handlers.
+ */
+static void rt73usb_toggle_rx(struct rt2x00_dev *rt2x00dev,
+                             enum dev_state state)
+{
+       u32 reg;
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR0_DISABLE_RX,
+                          state == STATE_RADIO_RX_OFF);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR0, reg);
+}
+
+static int rt73usb_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Initialize all registers.
+        */
+       if (rt73usb_init_registers(rt2x00dev) ||
+           rt73usb_init_bbp(rt2x00dev)) {
+               ERROR(rt2x00dev, "Register initialization failed.\n");
+               return -EIO;
+       }
+
+       rt2x00usb_enable_radio(rt2x00dev);
+
+       /*
+        * Enable LED
+        */
+       rt73usb_enable_led(rt2x00dev);
+
+       return 0;
+}
+
+static void rt73usb_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Disable LED
+        */
+       rt73usb_disable_led(rt2x00dev);
+
+       rt73usb_register_write(rt2x00dev, MAC_CSR10, 0x00001818);
+
+       /*
+        * Disable synchronisation.
+        */
+       rt73usb_register_write(rt2x00dev, TXRX_CSR9, 0);
+
+       rt2x00usb_disable_radio(rt2x00dev);
+}
+
+static int rt73usb_set_state(struct rt2x00_dev *rt2x00dev, enum dev_state state)
+{
+       u32 reg;
+       unsigned int i;
+       char put_to_sleep;
+       char current_state;
+
+       put_to_sleep = (state != STATE_AWAKE);
+
+       rt73usb_register_read(rt2x00dev, MAC_CSR12, &reg);
+       rt2x00_set_field32(&reg, MAC_CSR12_FORCE_WAKEUP, !put_to_sleep);
+       rt2x00_set_field32(&reg, MAC_CSR12_PUT_TO_SLEEP, put_to_sleep);
+       rt73usb_register_write(rt2x00dev, MAC_CSR12, reg);
+
+       /*
+        * Device is not guaranteed to be in the requested state yet.
+        * We must wait until the register indicates that the
+        * device has entered the correct state.
+        */
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt73usb_register_read(rt2x00dev, MAC_CSR12, &reg);
+               current_state =
+                   rt2x00_get_field32(reg, MAC_CSR12_BBP_CURRENT_STATE);
+               if (current_state == !put_to_sleep)
+                       return 0;
+               msleep(10);
+       }
+
+       NOTICE(rt2x00dev, "Device failed to enter state %d, "
+              "current device state %d.\n", !put_to_sleep, current_state);
+
+       return -EBUSY;
+}
+
+static int rt73usb_set_device_state(struct rt2x00_dev *rt2x00dev,
+                                   enum dev_state state)
+{
+       int retval = 0;
+
+       switch (state) {
+       case STATE_RADIO_ON:
+               retval = rt73usb_enable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_OFF:
+               rt73usb_disable_radio(rt2x00dev);
+               break;
+       case STATE_RADIO_RX_ON:
+       case STATE_RADIO_RX_OFF:
+               rt73usb_toggle_rx(rt2x00dev, state);
+               break;
+       case STATE_DEEP_SLEEP:
+       case STATE_SLEEP:
+       case STATE_STANDBY:
+       case STATE_AWAKE:
+               retval = rt73usb_set_state(rt2x00dev, state);
+               break;
+       default:
+               retval = -ENOTSUPP;
+               break;
+       }
+
+       return retval;
+}
+
+/*
+ * TX descriptor initialization
+ */
+static void rt73usb_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+                                 struct data_desc *txd,
+                                 struct data_entry_desc *desc,
+                                 struct ieee80211_hdr *ieee80211hdr,
+                                 unsigned int length,
+                                 struct ieee80211_tx_control *control)
+{
+       u32 word;
+
+       /*
+        * Start writing the descriptor words.
+        */
+       rt2x00_desc_read(txd, 1, &word);
+       rt2x00_set_field32(&word, TXD_W1_HOST_Q_ID, desc->queue);
+       rt2x00_set_field32(&word, TXD_W1_AIFSN, desc->aifs);
+       rt2x00_set_field32(&word, TXD_W1_CWMIN, desc->cw_min);
+       rt2x00_set_field32(&word, TXD_W1_CWMAX, desc->cw_max);
+       rt2x00_set_field32(&word, TXD_W1_IV_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&word, TXD_W1_HW_SEQUENCE, 1);
+       rt2x00_desc_write(txd, 1, word);
+
+       rt2x00_desc_read(txd, 2, &word);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_SIGNAL, desc->signal);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_SERVICE, desc->service);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_LENGTH_LOW, desc->length_low);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_LENGTH_HIGH, desc->length_high);
+       rt2x00_desc_write(txd, 2, word);
+
+       rt2x00_desc_read(txd, 5, &word);
+       rt2x00_set_field32(&word, TXD_W5_TX_POWER,
+                          TXPOWER_TO_DEV(control->power_level));
+       rt2x00_set_field32(&word, TXD_W5_WAITING_DMA_DONE_INT, 1);
+       rt2x00_desc_write(txd, 5, word);
+
+       rt2x00_desc_read(txd, 0, &word);
+       rt2x00_set_field32(&word, TXD_W0_BURST,
+                          test_bit(ENTRY_TXD_BURST, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_VALID, 1);
+       rt2x00_set_field32(&word, TXD_W0_MORE_FRAG,
+                          test_bit(ENTRY_TXD_MORE_FRAG, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_ACK,
+                          !(control->flags & IEEE80211_TXCTL_NO_ACK));
+       rt2x00_set_field32(&word, TXD_W0_TIMESTAMP,
+                          test_bit(ENTRY_TXD_REQ_TIMESTAMP, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_OFDM,
+                          test_bit(ENTRY_TXD_OFDM_RATE, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_IFS, desc->ifs);
+       rt2x00_set_field32(&word, TXD_W0_RETRY_MODE,
+                          !!(control->flags &
+                             IEEE80211_TXCTL_LONG_RETRY_LIMIT));
+       rt2x00_set_field32(&word, TXD_W0_TKIP_MIC, 0);
+       rt2x00_set_field32(&word, TXD_W0_DATABYTE_COUNT, length);
+       rt2x00_set_field32(&word, TXD_W0_BURST2,
+                          test_bit(ENTRY_TXD_BURST, &desc->flags));
+       rt2x00_set_field32(&word, TXD_W0_CIPHER_ALG, CIPHER_NONE);
+       rt2x00_desc_write(txd, 0, word);
+}
+
+/*
+ * TX data initialization
+ */
+static void rt73usb_kick_tx_queue(struct rt2x00_dev *rt2x00dev,
+                                 unsigned int queue)
+{
+       u32 reg;
+
+       if (queue != IEEE80211_TX_QUEUE_BEACON)
+               return;
+
+       /*
+        * For Wi-Fi faily generated beacons between participating stations.
+        * Set TBTT phase adaptive adjustment step to 8us (default 16us)
+        */
+       rt73usb_register_write(rt2x00dev, TXRX_CSR10, 0x00001008);
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR9, &reg);
+       if (!rt2x00_get_field32(reg, TXRX_CSR9_BEACON_GEN)) {
+               rt2x00_set_field32(&reg, TXRX_CSR9_BEACON_GEN, 1);
+               rt73usb_register_write(rt2x00dev, TXRX_CSR9, reg);
+       }
+}
+
+/*
+ * RX control handlers
+ */
+static int rt73usb_agc_to_rssi(struct rt2x00_dev *rt2x00dev, int rxd_w1)
+{
+       u16 eeprom;
+       u8 offset;
+       u8 lna;
+
+       lna = rt2x00_get_field32(rxd_w1, RXD_W1_RSSI_LNA);
+       switch (lna) {
+       case 3:
+               offset = 90;
+               break;
+       case 2:
+               offset = 74;
+               break;
+       case 1:
+               offset = 64;
+               break;
+       default:
+               return 0;
+       }
+
+       if (rt2x00dev->rx_status.phymode == MODE_IEEE80211A) {
+               if (test_bit(CONFIG_EXTERNAL_LNA_A, &rt2x00dev->flags)) {
+                       if (lna == 3 || lna == 2)
+                               offset += 10;
+               } else {
+                       if (lna == 3)
+                               offset += 6;
+                       else if (lna == 2)
+                               offset += 8;
+               }
+
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_RSSI_OFFSET_A, &eeprom);
+               offset -= rt2x00_get_field16(eeprom, EEPROM_RSSI_OFFSET_A_1);
+       } else {
+               if (test_bit(CONFIG_EXTERNAL_LNA_BG, &rt2x00dev->flags))
+                       offset += 14;
+
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_RSSI_OFFSET_BG, &eeprom);
+               offset -= rt2x00_get_field16(eeprom, EEPROM_RSSI_OFFSET_BG_1);
+       }
+
+       return rt2x00_get_field32(rxd_w1, RXD_W1_RSSI_AGC) * 2 - offset;
+}
+
+static int rt73usb_fill_rxdone(struct data_entry *entry,
+                              int *signal, int *rssi, int *ofdm, int *size)
+{
+       struct data_desc *rxd = (struct data_desc *)entry->skb->data;
+       u32 word0;
+       u32 word1;
+
+       rt2x00_desc_read(rxd, 0, &word0);
+       rt2x00_desc_read(rxd, 1, &word1);
+
+       if (rt2x00_get_field32(word0, RXD_W0_CRC_ERROR) ||
+           rt2x00_get_field32(word0, RXD_W0_CIPHER_ERROR))
+               return -EINVAL;
+
+       /*
+        * Obtain the status about this packet.
+        */
+       *signal = rt2x00_get_field32(word1, RXD_W1_SIGNAL);
+       *rssi = rt73usb_agc_to_rssi(entry->ring->rt2x00dev, word1);
+       *ofdm = rt2x00_get_field32(word0, RXD_W0_OFDM);
+       *size = rt2x00_get_field32(word0, RXD_W0_DATABYTE_COUNT);
+
+       /*
+        * Pull the skb to clear the descriptor area.
+        */
+       skb_pull(entry->skb, entry->ring->desc_size);
+
+       return 0;
+}
+
+/*
+ * Device probe functions.
+ */
+static int rt73usb_validate_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u16 word;
+       u8 *mac;
+       s8 value;
+
+       rt2x00usb_eeprom_read(rt2x00dev, rt2x00dev->eeprom, EEPROM_SIZE);
+
+       /*
+        * Start validation of the data that has been read.
+        */
+       mac = rt2x00_eeprom_addr(rt2x00dev, EEPROM_MAC_ADDR_0);
+       if (!is_valid_ether_addr(mac)) {
+               random_ether_addr(mac);
+               EEPROM(rt2x00dev, "MAC: " MAC_FMT "\n", MAC_ARG(mac));
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_NUM, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_TX_DEFAULT, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RX_DEFAULT, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_FRAME_TYPE, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_DYN_TXAGC, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_HARDWARE_RADIO, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RF_TYPE, RF5226);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_ANTENNA, word);
+               EEPROM(rt2x00dev, "Antenna: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_NIC_EXTERNAL_LNA, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_NIC, word);
+               EEPROM(rt2x00dev, "NIC: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_LED, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_LED_POLARITY_RDY_G, 0);
+               rt2x00_set_field16(&word, EEPROM_LED_POLARITY_RDY_A, 0);
+               rt2x00_set_field16(&word, EEPROM_LED_POLARITY_ACT, 0);
+               rt2x00_set_field16(&word, EEPROM_LED_POLARITY_GPIO_0, 0);
+               rt2x00_set_field16(&word, EEPROM_LED_POLARITY_GPIO_1, 0);
+               rt2x00_set_field16(&word, EEPROM_LED_POLARITY_GPIO_2, 0);
+               rt2x00_set_field16(&word, EEPROM_LED_POLARITY_GPIO_3, 0);
+               rt2x00_set_field16(&word, EEPROM_LED_POLARITY_GPIO_4, 0);
+               rt2x00_set_field16(&word, EEPROM_LED_LED_MODE,
+                                  LED_MODE_DEFAULT);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_LED, word);
+               EEPROM(rt2x00dev, "Led: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_FREQ, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_FREQ_OFFSET, 0);
+               rt2x00_set_field16(&word, EEPROM_FREQ_SEQ, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_FREQ, word);
+               EEPROM(rt2x00dev, "Freq: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_RSSI_OFFSET_BG, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_BG_1, 0);
+               rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_BG_2, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_RSSI_OFFSET_BG, word);
+               EEPROM(rt2x00dev, "RSSI OFFSET BG: 0x%04x\n", word);
+       } else {
+               value = rt2x00_get_field16(word, EEPROM_RSSI_OFFSET_BG_1);
+               if (value < -10 || value > 10)
+                       rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_BG_1, 0);
+               value = rt2x00_get_field16(word, EEPROM_RSSI_OFFSET_BG_2);
+               if (value < -10 || value > 10)
+                       rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_BG_2, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_RSSI_OFFSET_BG, word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_RSSI_OFFSET_A, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_A_1, 0);
+               rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_A_2, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_RSSI_OFFSET_A, word);
+               EEPROM(rt2x00dev, "RSSI OFFSET BG: 0x%04x\n", word);
+       } else {
+               value = rt2x00_get_field16(word, EEPROM_RSSI_OFFSET_A_1);
+               if (value < -10 || value > 10)
+                       rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_A_1, 0);
+               value = rt2x00_get_field16(word, EEPROM_RSSI_OFFSET_A_2);
+               if (value < -10 || value > 10)
+                       rt2x00_set_field16(&word, EEPROM_RSSI_OFFSET_A_2, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_RSSI_OFFSET_A, word);
+       }
+
+       return 0;
+}
+
+static int rt73usb_init_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       u16 value;
+       u16 eeprom;
+
+       /*
+        * Read EEPROM word for configuration.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &eeprom);
+
+       /*
+        * Identify RF chipset.
+        */
+       value = rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RF_TYPE);
+       rt73usb_register_read(rt2x00dev, MAC_CSR0, &reg);
+       rt2x00_set_chip(rt2x00dev, RT2571, value, reg);
+
+       if (!rt2x00_rev(&rt2x00dev->chip, 0x25730)) {
+               ERROR(rt2x00dev, "Invalid RT chipset detected.\n");
+               return -ENODEV;
+       }
+
+       if (!rt2x00_rf(&rt2x00dev->chip, RF5226) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2528) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF5225) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2527)) {
+               ERROR(rt2x00dev, "Invalid RF chipset detected.\n");
+               return -ENODEV;
+       }
+
+       /*
+        * Identify default antenna configuration.
+        */
+       rt2x00dev->hw->conf.antenna_sel_tx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_TX_DEFAULT);
+       rt2x00dev->hw->conf.antenna_sel_rx =
+           rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RX_DEFAULT);
+
+       /*
+        * Read the Frame type.
+        */
+       if (rt2x00_get_field16(eeprom, EEPROM_ANTENNA_FRAME_TYPE))
+               __set_bit(CONFIG_FRAME_TYPE, &rt2x00dev->flags);
+
+       /*
+        * Read frequency offset.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_FREQ, &eeprom);
+       rt2x00dev->freq_offset = rt2x00_get_field16(eeprom, EEPROM_FREQ_OFFSET);
+
+       /*
+        * Read external LNA informations.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &eeprom);
+
+       if (rt2x00_get_field16(eeprom, EEPROM_NIC_EXTERNAL_LNA)) {
+               __set_bit(CONFIG_EXTERNAL_LNA_A, &rt2x00dev->flags);
+               __set_bit(CONFIG_EXTERNAL_LNA_BG, &rt2x00dev->flags);
+       }
+
+       /*
+        * Store led settings, for correct led behaviour.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_LED, &eeprom);
+
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_LED_MODE,
+                          rt2x00dev->led_mode);
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_0,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_0));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_1,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_1));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_2,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_2));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_3,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_3));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_GPIO_4,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_GPIO_4));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_ACT,
+                          rt2x00_get_field16(eeprom, EEPROM_LED_POLARITY_ACT));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_READY_BG,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_RDY_G));
+       rt2x00_set_field16(&rt2x00dev->led_reg, MCU_LEDCS_POLARITY_READY_A,
+                          rt2x00_get_field16(eeprom,
+                                             EEPROM_LED_POLARITY_RDY_A));
+
+       return 0;
+}
+
+/*
+ * RF value list for RF2528
+ * Supports: 2.4 GHz
+ */
+static const struct rf_channel rf_vals_bg_2528[] = {
+       { 1,  0x00002c0c, 0x00000786, 0x00068255, 0x000fea0b },
+       { 2,  0x00002c0c, 0x00000786, 0x00068255, 0x000fea1f },
+       { 3,  0x00002c0c, 0x0000078a, 0x00068255, 0x000fea0b },
+       { 4,  0x00002c0c, 0x0000078a, 0x00068255, 0x000fea1f },
+       { 5,  0x00002c0c, 0x0000078e, 0x00068255, 0x000fea0b },
+       { 6,  0x00002c0c, 0x0000078e, 0x00068255, 0x000fea1f },
+       { 7,  0x00002c0c, 0x00000792, 0x00068255, 0x000fea0b },
+       { 8,  0x00002c0c, 0x00000792, 0x00068255, 0x000fea1f },
+       { 9,  0x00002c0c, 0x00000796, 0x00068255, 0x000fea0b },
+       { 10, 0x00002c0c, 0x00000796, 0x00068255, 0x000fea1f },
+       { 11, 0x00002c0c, 0x0000079a, 0x00068255, 0x000fea0b },
+       { 12, 0x00002c0c, 0x0000079a, 0x00068255, 0x000fea1f },
+       { 13, 0x00002c0c, 0x0000079e, 0x00068255, 0x000fea0b },
+       { 14, 0x00002c0c, 0x000007a2, 0x00068255, 0x000fea13 },
+};
+
+/*
+ * RF value list for RF5226
+ * Supports: 2.4 GHz & 5.2 GHz
+ */
+static const struct rf_channel rf_vals_5226[] = {
+       { 1,  0x00002c0c, 0x00000786, 0x00068255, 0x000fea0b },
+       { 2,  0x00002c0c, 0x00000786, 0x00068255, 0x000fea1f },
+       { 3,  0x00002c0c, 0x0000078a, 0x00068255, 0x000fea0b },
+       { 4,  0x00002c0c, 0x0000078a, 0x00068255, 0x000fea1f },
+       { 5,  0x00002c0c, 0x0000078e, 0x00068255, 0x000fea0b },
+       { 6,  0x00002c0c, 0x0000078e, 0x00068255, 0x000fea1f },
+       { 7,  0x00002c0c, 0x00000792, 0x00068255, 0x000fea0b },
+       { 8,  0x00002c0c, 0x00000792, 0x00068255, 0x000fea1f },
+       { 9,  0x00002c0c, 0x00000796, 0x00068255, 0x000fea0b },
+       { 10, 0x00002c0c, 0x00000796, 0x00068255, 0x000fea1f },
+       { 11, 0x00002c0c, 0x0000079a, 0x00068255, 0x000fea0b },
+       { 12, 0x00002c0c, 0x0000079a, 0x00068255, 0x000fea1f },
+       { 13, 0x00002c0c, 0x0000079e, 0x00068255, 0x000fea0b },
+       { 14, 0x00002c0c, 0x000007a2, 0x00068255, 0x000fea13 },
+
+       /* 802.11 UNI / HyperLan 2 */
+       { 36, 0x00002c0c, 0x0000099a, 0x00098255, 0x000fea23 },
+       { 40, 0x00002c0c, 0x000009a2, 0x00098255, 0x000fea03 },
+       { 44, 0x00002c0c, 0x000009a6, 0x00098255, 0x000fea0b },
+       { 48, 0x00002c0c, 0x000009aa, 0x00098255, 0x000fea13 },
+       { 52, 0x00002c0c, 0x000009ae, 0x00098255, 0x000fea1b },
+       { 56, 0x00002c0c, 0x000009b2, 0x00098255, 0x000fea23 },
+       { 60, 0x00002c0c, 0x000009ba, 0x00098255, 0x000fea03 },
+       { 64, 0x00002c0c, 0x000009be, 0x00098255, 0x000fea0b },
+
+       /* 802.11 HyperLan 2 */
+       { 100, 0x00002c0c, 0x00000a2a, 0x000b8255, 0x000fea03 },
+       { 104, 0x00002c0c, 0x00000a2e, 0x000b8255, 0x000fea0b },
+       { 108, 0x00002c0c, 0x00000a32, 0x000b8255, 0x000fea13 },
+       { 112, 0x00002c0c, 0x00000a36, 0x000b8255, 0x000fea1b },
+       { 116, 0x00002c0c, 0x00000a3a, 0x000b8255, 0x000fea23 },
+       { 120, 0x00002c0c, 0x00000a82, 0x000b8255, 0x000fea03 },
+       { 124, 0x00002c0c, 0x00000a86, 0x000b8255, 0x000fea0b },
+       { 128, 0x00002c0c, 0x00000a8a, 0x000b8255, 0x000fea13 },
+       { 132, 0x00002c0c, 0x00000a8e, 0x000b8255, 0x000fea1b },
+       { 136, 0x00002c0c, 0x00000a92, 0x000b8255, 0x000fea23 },
+
+       /* 802.11 UNII */
+       { 140, 0x00002c0c, 0x00000a9a, 0x000b8255, 0x000fea03 },
+       { 149, 0x00002c0c, 0x00000aa2, 0x000b8255, 0x000fea1f },
+       { 153, 0x00002c0c, 0x00000aa6, 0x000b8255, 0x000fea27 },
+       { 157, 0x00002c0c, 0x00000aae, 0x000b8255, 0x000fea07 },
+       { 161, 0x00002c0c, 0x00000ab2, 0x000b8255, 0x000fea0f },
+       { 165, 0x00002c0c, 0x00000ab6, 0x000b8255, 0x000fea17 },
+
+       /* MMAC(Japan)J52 ch 34,38,42,46 */
+       { 34, 0x00002c0c, 0x0008099a, 0x000da255, 0x000d3a0b },
+       { 38, 0x00002c0c, 0x0008099e, 0x000da255, 0x000d3a13 },
+       { 42, 0x00002c0c, 0x000809a2, 0x000da255, 0x000d3a1b },
+       { 46, 0x00002c0c, 0x000809a6, 0x000da255, 0x000d3a23 },
+};
+
+/*
+ * RF value list for RF5225 & RF2527
+ * Supports: 2.4 GHz & 5.2 GHz
+ */
+static const struct rf_channel rf_vals_5225_2527[] = {
+       { 1,  0x00002ccc, 0x00004786, 0x00068455, 0x000ffa0b },
+       { 2,  0x00002ccc, 0x00004786, 0x00068455, 0x000ffa1f },
+       { 3,  0x00002ccc, 0x0000478a, 0x00068455, 0x000ffa0b },
+       { 4,  0x00002ccc, 0x0000478a, 0x00068455, 0x000ffa1f },
+       { 5,  0x00002ccc, 0x0000478e, 0x00068455, 0x000ffa0b },
+       { 6,  0x00002ccc, 0x0000478e, 0x00068455, 0x000ffa1f },
+       { 7,  0x00002ccc, 0x00004792, 0x00068455, 0x000ffa0b },
+       { 8,  0x00002ccc, 0x00004792, 0x00068455, 0x000ffa1f },
+       { 9,  0x00002ccc, 0x00004796, 0x00068455, 0x000ffa0b },
+       { 10, 0x00002ccc, 0x00004796, 0x00068455, 0x000ffa1f },
+       { 11, 0x00002ccc, 0x0000479a, 0x00068455, 0x000ffa0b },
+       { 12, 0x00002ccc, 0x0000479a, 0x00068455, 0x000ffa1f },
+       { 13, 0x00002ccc, 0x0000479e, 0x00068455, 0x000ffa0b },
+       { 14, 0x00002ccc, 0x000047a2, 0x00068455, 0x000ffa13 },
+
+       /* 802.11 UNI / HyperLan 2 */
+       { 36, 0x00002ccc, 0x0000499a, 0x0009be55, 0x000ffa23 },
+       { 40, 0x00002ccc, 0x000049a2, 0x0009be55, 0x000ffa03 },
+       { 44, 0x00002ccc, 0x000049a6, 0x0009be55, 0x000ffa0b },
+       { 48, 0x00002ccc, 0x000049aa, 0x0009be55, 0x000ffa13 },
+       { 52, 0x00002ccc, 0x000049ae, 0x0009ae55, 0x000ffa1b },
+       { 56, 0x00002ccc, 0x000049b2, 0x0009ae55, 0x000ffa23 },
+       { 60, 0x00002ccc, 0x000049ba, 0x0009ae55, 0x000ffa03 },
+       { 64, 0x00002ccc, 0x000049be, 0x0009ae55, 0x000ffa0b },
+
+       /* 802.11 HyperLan 2 */
+       { 100, 0x00002ccc, 0x00004a2a, 0x000bae55, 0x000ffa03 },
+       { 104, 0x00002ccc, 0x00004a2e, 0x000bae55, 0x000ffa0b },
+       { 108, 0x00002ccc, 0x00004a32, 0x000bae55, 0x000ffa13 },
+       { 112, 0x00002ccc, 0x00004a36, 0x000bae55, 0x000ffa1b },
+       { 116, 0x00002ccc, 0x00004a3a, 0x000bbe55, 0x000ffa23 },
+       { 120, 0x00002ccc, 0x00004a82, 0x000bbe55, 0x000ffa03 },
+       { 124, 0x00002ccc, 0x00004a86, 0x000bbe55, 0x000ffa0b },
+       { 128, 0x00002ccc, 0x00004a8a, 0x000bbe55, 0x000ffa13 },
+       { 132, 0x00002ccc, 0x00004a8e, 0x000bbe55, 0x000ffa1b },
+       { 136, 0x00002ccc, 0x00004a92, 0x000bbe55, 0x000ffa23 },
+
+       /* 802.11 UNII */
+       { 140, 0x00002ccc, 0x00004a9a, 0x000bbe55, 0x000ffa03 },
+       { 149, 0x00002ccc, 0x00004aa2, 0x000bbe55, 0x000ffa1f },
+       { 153, 0x00002ccc, 0x00004aa6, 0x000bbe55, 0x000ffa27 },
+       { 157, 0x00002ccc, 0x00004aae, 0x000bbe55, 0x000ffa07 },
+       { 161, 0x00002ccc, 0x00004ab2, 0x000bbe55, 0x000ffa0f },
+       { 165, 0x00002ccc, 0x00004ab6, 0x000bbe55, 0x000ffa17 },
+
+       /* MMAC(Japan)J52 ch 34,38,42,46 */
+       { 34, 0x00002ccc, 0x0000499a, 0x0009be55, 0x000ffa0b },
+       { 38, 0x00002ccc, 0x0000499e, 0x0009be55, 0x000ffa13 },
+       { 42, 0x00002ccc, 0x000049a2, 0x0009be55, 0x000ffa1b },
+       { 46, 0x00002ccc, 0x000049a6, 0x0009be55, 0x000ffa23 },
+};
+
+
+static void rt73usb_probe_hw_mode(struct rt2x00_dev *rt2x00dev)
+{
+       struct hw_mode_spec *spec = &rt2x00dev->spec;
+       u8 *txpower;
+       unsigned int i;
+
+       /*
+        * Initialize all hw fields.
+        */
+       rt2x00dev->hw->flags =
+           IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE |
+           IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING |
+           IEEE80211_HW_MONITOR_DURING_OPER |
+           IEEE80211_HW_NO_PROBE_FILTERING;
+       rt2x00dev->hw->extra_tx_headroom = TXD_DESC_SIZE;
+       rt2x00dev->hw->max_signal = MAX_SIGNAL;
+       rt2x00dev->hw->max_rssi = MAX_RX_SSI;
+       rt2x00dev->hw->queues = 5;
+
+       SET_IEEE80211_DEV(rt2x00dev->hw, &rt2x00dev_usb(rt2x00dev)->dev);
+       SET_IEEE80211_PERM_ADDR(rt2x00dev->hw,
+                               rt2x00_eeprom_addr(rt2x00dev,
+                                                  EEPROM_MAC_ADDR_0));
+
+       /*
+        * Convert tx_power array in eeprom.
+        */
+       txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_G_START);
+       for (i = 0; i < 14; i++)
+               txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+       /*
+        * Initialize hw_mode information.
+        */
+       spec->num_modes = 2;
+       spec->num_rates = 12;
+       spec->tx_power_a = NULL;
+       spec->tx_power_bg = txpower;
+       spec->tx_power_default = DEFAULT_TXPOWER;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF2528)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_bg_2528);
+               spec->channels = rf_vals_bg_2528;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF5226)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_5226);
+               spec->channels = rf_vals_5226;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF2527)) {
+               spec->num_channels = 14;
+               spec->channels = rf_vals_5225_2527;
+       } else if (rt2x00_rf(&rt2x00dev->chip, RF5225)) {
+               spec->num_channels = ARRAY_SIZE(rf_vals_5225_2527);
+               spec->channels = rf_vals_5225_2527;
+       }
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF5225) ||
+           rt2x00_rf(&rt2x00dev->chip, RF5226)) {
+               spec->num_modes = 3;
+
+               txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_A_START);
+               for (i = 0; i < 14; i++)
+                       txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+               spec->tx_power_a = txpower;
+       }
+}
+
+static int rt73usb_probe_hw(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       /*
+        * Allocate eeprom data.
+        */
+       retval = rt73usb_validate_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt73usb_init_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       /*
+        * Initialize hw specifications.
+        */
+       rt73usb_probe_hw_mode(rt2x00dev);
+
+       /*
+        * USB devices require scheduled packet filter toggling
+        * This device requires firmware
+        */
+       __set_bit(REQUIRE_FIRMWARE, &rt2x00dev->flags);
+       __set_bit(PACKET_FILTER_SCHEDULED, &rt2x00dev->flags);
+
+       /*
+        * Set the rssi offset.
+        */
+       rt2x00dev->rssi_offset = DEFAULT_RSSI_OFFSET;
+
+       return 0;
+}
+
+/*
+ * IEEE80211 stack callback functions.
+ */
+static int rt73usb_set_retry_limit(struct ieee80211_hw *hw,
+                                  u32 short_retry, u32 long_retry)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR4, &reg);
+       rt2x00_set_field32(&reg, TXRX_CSR4_LONG_RETRY_LIMIT, long_retry);
+       rt2x00_set_field32(&reg, TXRX_CSR4_SHORT_RETRY_LIMIT, short_retry);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR4, reg);
+
+       return 0;
+}
+
+#if 0
+/*
+ * Mac80211 demands get_tsf must be atomic.
+ * This is not possible for rt73usb since all register access
+ * functions require sleeping. Untill mac80211 no longer needs
+ * get_tsf to be atomic, this function should be disabled.
+ */
+static u64 rt73usb_get_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u64 tsf;
+       u32 reg;
+
+       rt73usb_register_read(rt2x00dev, TXRX_CSR13, &reg);
+       tsf = (u64) rt2x00_get_field32(reg, TXRX_CSR13_HIGH_TSFTIMER) << 32;
+       rt73usb_register_read(rt2x00dev, TXRX_CSR12, &reg);
+       tsf |= rt2x00_get_field32(reg, TXRX_CSR12_LOW_TSFTIMER);
+
+       return tsf;
+}
+#endif
+
+static void rt73usb_reset_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       rt73usb_register_write(rt2x00dev, TXRX_CSR12, 0);
+       rt73usb_register_write(rt2x00dev, TXRX_CSR13, 0);
+}
+
+int rt73usb_beacon_update(struct ieee80211_hw *hw, struct sk_buff *skb,
+                         struct ieee80211_tx_control *control)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       int timeout;
+
+       /*
+        * Just in case the ieee80211 doesn't set this,
+        * but we need this queue set for the descriptor
+        * initialization.
+        */
+       control->queue = IEEE80211_TX_QUEUE_BEACON;
+
+       /*
+        * First we create the beacon.
+        */
+       skb_push(skb, TXD_DESC_SIZE);
+       rt2x00lib_write_tx_desc(rt2x00dev, (struct data_desc *)skb->data,
+                               (struct ieee80211_hdr *)(skb->data +
+                                                        TXD_DESC_SIZE),
+                               skb->len - TXD_DESC_SIZE, control);
+
+       /*
+        * Write entire beacon with descriptor to register,
+        * and kick the beacon generator.
+        */
+       timeout = REGISTER_TIMEOUT * (skb->len / sizeof(u32));
+       rt2x00usb_vendor_request(rt2x00dev, USB_MULTI_WRITE,
+                                USB_VENDOR_REQUEST_OUT,
+                                HW_BEACON_BASE0, 0x0000,
+                                skb->data, skb->len, timeout);
+       rt73usb_kick_tx_queue(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       return 0;
+}
+
+static const struct ieee80211_ops rt73usb_mac80211_ops = {
+       .tx                     = rt2x00mac_tx,
+       .add_interface          = rt2x00mac_add_interface,
+       .remove_interface       = rt2x00mac_remove_interface,
+       .config                 = rt2x00mac_config,
+       .config_interface       = rt2x00mac_config_interface,
+       .set_multicast_list     = rt2x00mac_set_multicast_list,
+       .get_stats              = rt2x00mac_get_stats,
+       .set_retry_limit        = rt73usb_set_retry_limit,
+       .conf_tx                = rt2x00mac_conf_tx,
+       .get_tx_stats           = rt2x00mac_get_tx_stats,
+#if 0
+/*
+ * See comment at the rt73usb_get_tsf function.
+ */
+       .get_tsf                = rt73usb_get_tsf,
+#endif
+       .reset_tsf              = rt73usb_reset_tsf,
+       .beacon_update          = rt73usb_beacon_update,
+};
+
+static const struct rt2x00lib_ops rt73usb_rt2x00_ops = {
+       .probe_hw               = rt73usb_probe_hw,
+       .get_firmware_name      = rt73usb_get_firmware_name,
+       .load_firmware          = rt73usb_load_firmware,
+       .initialize             = rt2x00usb_initialize,
+       .uninitialize           = rt2x00usb_uninitialize,
+       .set_device_state       = rt73usb_set_device_state,
+       .link_stats             = rt73usb_link_stats,
+       .reset_tuner            = rt73usb_reset_tuner,
+       .link_tuner             = rt73usb_link_tuner,
+       .write_tx_desc          = rt73usb_write_tx_desc,
+       .write_tx_data          = rt2x00usb_write_tx_data,
+       .kick_tx_queue          = rt73usb_kick_tx_queue,
+       .fill_rxdone            = rt73usb_fill_rxdone,
+       .config_mac_addr        = rt73usb_config_mac_addr,
+       .config_bssid           = rt73usb_config_bssid,
+       .config_packet_filter   = rt73usb_config_packet_filter,
+       .config_type            = rt73usb_config_type,
+       .config                 = rt73usb_config,
+};
+
+static const struct rt2x00_ops rt73usb_ops = {
+       .name           = DRV_NAME,
+       .rxd_size       = RXD_DESC_SIZE,
+       .txd_size       = TXD_DESC_SIZE,
+       .eeprom_size    = EEPROM_SIZE,
+       .rf_size        = RF_SIZE,
+       .lib            = &rt73usb_rt2x00_ops,
+       .hw             = &rt73usb_mac80211_ops,
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       .debugfs        = &rt73usb_rt2x00debug,
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * rt73usb module information.
+ */
+static struct usb_device_id rt73usb_device_table[] = {
+       /* AboCom */
+       { USB_DEVICE(0x07b8, 0xb21d), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Askey */
+       { USB_DEVICE(0x1690, 0x0722), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* ASUS */
+       { USB_DEVICE(0x0b05, 0x1723), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x0b05, 0x1724), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Belkin */
+       { USB_DEVICE(0x050d, 0x7050), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x050d, 0x705a), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x050d, 0x905b), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Billionton */
+       { USB_DEVICE(0x1631, 0xc019), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Buffalo */
+       { USB_DEVICE(0x0411, 0x00f4), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* CNet */
+       { USB_DEVICE(0x1371, 0x9022), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x1371, 0x9032), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Conceptronic */
+       { USB_DEVICE(0x14b2, 0x3c22), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* D-Link */
+       { USB_DEVICE(0x07d1, 0x3c03), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x07d1, 0x3c04), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Gemtek */
+       { USB_DEVICE(0x15a9, 0x0004), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Gigabyte */
+       { USB_DEVICE(0x1044, 0x8008), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x1044, 0x800a), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Huawei-3Com */
+       { USB_DEVICE(0x1472, 0x0009), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Hercules */
+       { USB_DEVICE(0x06f8, 0xe010), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x06f8, 0xe020), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Linksys */
+       { USB_DEVICE(0x13b1, 0x0020), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x13b1, 0x0023), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* MSI */
+       { USB_DEVICE(0x0db0, 0x6877), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x0db0, 0x6874), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x0db0, 0xa861), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x0db0, 0xa874), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Ralink */
+       { USB_DEVICE(0x148f, 0x2573), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x148f, 0x2671), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Qcom */
+       { USB_DEVICE(0x18e8, 0x6196), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x18e8, 0x6229), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x18e8, 0x6238), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Senao */
+       { USB_DEVICE(0x1740, 0x7100), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Sitecom */
+       { USB_DEVICE(0x0df6, 0x9712), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x0df6, 0x90ac), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Surecom */
+       { USB_DEVICE(0x0769, 0x31f3), USB_DEVICE_DATA(&rt73usb_ops) },
+       /* Planex */
+       { USB_DEVICE(0x2019, 0xab01), USB_DEVICE_DATA(&rt73usb_ops) },
+       { USB_DEVICE(0x2019, 0xab50), USB_DEVICE_DATA(&rt73usb_ops) },
+       { 0, }
+};
+
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("Ralink RT73 USB Wireless LAN driver.");
+MODULE_SUPPORTED_DEVICE("Ralink RT2571W & RT2671 USB chipset based cards");
+MODULE_DEVICE_TABLE(usb, rt73usb_device_table);
+MODULE_FIRMWARE(FIRMWARE_RT2571);
+MODULE_LICENSE("GPL");
+
+static struct usb_driver rt73usb_driver = {
+       .name           = DRV_NAME,
+       .id_table       = rt73usb_device_table,
+       .probe          = rt2x00usb_probe,
+       .disconnect     = rt2x00usb_disconnect,
+       .suspend        = rt2x00usb_suspend,
+       .resume         = rt2x00usb_resume,
+};
+
+static int __init rt73usb_init(void)
+{
+       return usb_register(&rt73usb_driver);
+}
+
+static void __exit rt73usb_exit(void)
+{
+       usb_deregister(&rt73usb_driver);
+}
+
+module_init(rt73usb_init);
+module_exit(rt73usb_exit);
diff --git a/drivers/net/wireless/rt2x00/rt73usb.h b/drivers/net/wireless/rt2x00/rt73usb.h
new file mode 100644 (file)
index 0000000..5d63a1a
--- /dev/null
@@ -0,0 +1,1024 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt73usb
+       Abstract: Data structures and registers for the rt73usb module.
+       Supported chipsets: rt2571W & rt2671.
+ */
+
+#ifndef RT73USB_H
+#define RT73USB_H
+
+/*
+ * RF chip defines.
+ */
+#define RF5226                         0x0001
+#define RF2528                         0x0002
+#define RF5225                         0x0003
+#define RF2527                         0x0004
+
+/*
+ * Signal information.
+ * Defaul offset is required for RSSI <-> dBm conversion.
+ */
+#define MAX_SIGNAL                     100
+#define MAX_RX_SSI                     -1
+#define DEFAULT_RSSI_OFFSET            120
+
+/*
+ * Register layout information.
+ */
+#define CSR_REG_BASE                   0x3000
+#define CSR_REG_SIZE                   0x04b0
+#define EEPROM_BASE                    0x0000
+#define EEPROM_SIZE                    0x0100
+#define BBP_SIZE                       0x0080
+#define RF_SIZE                                0x0014
+
+/*
+ * USB registers.
+ */
+
+/*
+ * MCU_LEDCS: LED control for MCU Mailbox.
+ */
+#define MCU_LEDCS_LED_MODE             FIELD16(0x001f)
+#define MCU_LEDCS_RADIO_STATUS         FIELD16(0x0020)
+#define MCU_LEDCS_LINK_BG_STATUS       FIELD16(0x0040)
+#define MCU_LEDCS_LINK_A_STATUS                FIELD16(0x0080)
+#define MCU_LEDCS_POLARITY_GPIO_0      FIELD16(0x0100)
+#define MCU_LEDCS_POLARITY_GPIO_1      FIELD16(0x0200)
+#define MCU_LEDCS_POLARITY_GPIO_2      FIELD16(0x0400)
+#define MCU_LEDCS_POLARITY_GPIO_3      FIELD16(0x0800)
+#define MCU_LEDCS_POLARITY_GPIO_4      FIELD16(0x1000)
+#define MCU_LEDCS_POLARITY_ACT         FIELD16(0x2000)
+#define MCU_LEDCS_POLARITY_READY_BG    FIELD16(0x4000)
+#define MCU_LEDCS_POLARITY_READY_A     FIELD16(0x8000)
+
+/*
+ * 8051 firmware image.
+ */
+#define FIRMWARE_RT2571                        "rt73.bin"
+#define FIRMWARE_IMAGE_BASE            0x0800
+
+/*
+ * Security key table memory.
+ * 16 entries 32-byte for shared key table
+ * 64 entries 32-byte for pairwise key table
+ * 64 entries 8-byte for pairwise ta key table
+ */
+#define SHARED_KEY_TABLE_BASE          0x1000
+#define PAIRWISE_KEY_TABLE_BASE                0x1200
+#define PAIRWISE_TA_TABLE_BASE         0x1a00
+
+struct hw_key_entry {
+       u8 key[16];
+       u8 tx_mic[8];
+       u8 rx_mic[8];
+} __attribute__ ((packed));
+
+struct hw_pairwise_ta_entry {
+       u8 address[6];
+       u8 reserved[2];
+} __attribute__ ((packed));
+
+/*
+ * Since NULL frame won't be that long (256 byte),
+ * We steal 16 tail bytes to save debugging settings.
+ */
+#define HW_DEBUG_SETTING_BASE          0x2bf0
+
+/*
+ * On-chip BEACON frame space.
+ */
+#define HW_BEACON_BASE0                        0x2400
+#define HW_BEACON_BASE1                        0x2500
+#define HW_BEACON_BASE2                        0x2600
+#define HW_BEACON_BASE3                        0x2700
+
+/*
+ * MAC Control/Status Registers(CSR).
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * MAC_CSR0: ASIC revision number.
+ */
+#define MAC_CSR0                       0x3000
+
+/*
+ * MAC_CSR1: System control register.
+ * SOFT_RESET: Software reset bit, 1: reset, 0: normal.
+ * BBP_RESET: Hardware reset BBP.
+ * HOST_READY: Host is ready after initialization, 1: ready.
+ */
+#define MAC_CSR1                       0x3004
+#define MAC_CSR1_SOFT_RESET            FIELD32(0x00000001)
+#define MAC_CSR1_BBP_RESET             FIELD32(0x00000002)
+#define MAC_CSR1_HOST_READY            FIELD32(0x00000004)
+
+/*
+ * MAC_CSR2: STA MAC register 0.
+ */
+#define MAC_CSR2                       0x3008
+#define MAC_CSR2_BYTE0                 FIELD32(0x000000ff)
+#define MAC_CSR2_BYTE1                 FIELD32(0x0000ff00)
+#define MAC_CSR2_BYTE2                 FIELD32(0x00ff0000)
+#define MAC_CSR2_BYTE3                 FIELD32(0xff000000)
+
+/*
+ * MAC_CSR3: STA MAC register 1.
+ */
+#define MAC_CSR3                       0x300c
+#define MAC_CSR3_BYTE4                 FIELD32(0x000000ff)
+#define MAC_CSR3_BYTE5                 FIELD32(0x0000ff00)
+#define MAC_CSR3_UNICAST_TO_ME_MASK    FIELD32(0x00ff0000)
+
+/*
+ * MAC_CSR4: BSSID register 0.
+ */
+#define MAC_CSR4                       0x3010
+#define MAC_CSR4_BYTE0                 FIELD32(0x000000ff)
+#define MAC_CSR4_BYTE1                 FIELD32(0x0000ff00)
+#define MAC_CSR4_BYTE2                 FIELD32(0x00ff0000)
+#define MAC_CSR4_BYTE3                 FIELD32(0xff000000)
+
+/*
+ * MAC_CSR5: BSSID register 1.
+ * BSS_ID_MASK: 3: one BSSID, 0: 4 BSSID, 2 or 1: 2 BSSID.
+ */
+#define MAC_CSR5                       0x3014
+#define MAC_CSR5_BYTE4                 FIELD32(0x000000ff)
+#define MAC_CSR5_BYTE5                 FIELD32(0x0000ff00)
+#define MAC_CSR5_BSS_ID_MASK           FIELD32(0x00ff0000)
+
+/*
+ * MAC_CSR6: Maximum frame length register.
+ */
+#define MAC_CSR6                       0x3018
+#define MAC_CSR6_MAX_FRAME_UNIT                FIELD32(0x00000fff)
+
+/*
+ * MAC_CSR7: Reserved
+ */
+#define MAC_CSR7                       0x301c
+
+/*
+ * MAC_CSR8: SIFS/EIFS register.
+ * All units are in US.
+ */
+#define MAC_CSR8                       0x3020
+#define MAC_CSR8_SIFS                  FIELD32(0x000000ff)
+#define MAC_CSR8_SIFS_AFTER_RX_OFDM    FIELD32(0x0000ff00)
+#define MAC_CSR8_EIFS                  FIELD32(0xffff0000)
+
+/*
+ * MAC_CSR9: Back-Off control register.
+ * SLOT_TIME: Slot time, default is 20us for 802.11BG.
+ * CWMIN: Bit for Cwmin. default Cwmin is 31 (2^5 - 1).
+ * CWMAX: Bit for Cwmax, default Cwmax is 1023 (2^10 - 1).
+ * CW_SELECT: 1: CWmin/Cwmax select from register, 0:select from TxD.
+ */
+#define MAC_CSR9                       0x3024
+#define MAC_CSR9_SLOT_TIME             FIELD32(0x000000ff)
+#define MAC_CSR9_CWMIN                 FIELD32(0x00000f00)
+#define MAC_CSR9_CWMAX                 FIELD32(0x0000f000)
+#define MAC_CSR9_CW_SELECT             FIELD32(0x00010000)
+
+/*
+ * MAC_CSR10: Power state configuration.
+ */
+#define MAC_CSR10                      0x3028
+
+/*
+ * MAC_CSR11: Power saving transition time register.
+ * DELAY_AFTER_TBCN: Delay after Tbcn expired in units of TU.
+ * TBCN_BEFORE_WAKEUP: Number of beacon before wakeup.
+ * WAKEUP_LATENCY: In unit of TU.
+ */
+#define MAC_CSR11                      0x302c
+#define MAC_CSR11_DELAY_AFTER_TBCN     FIELD32(0x000000ff)
+#define MAC_CSR11_TBCN_BEFORE_WAKEUP   FIELD32(0x00007f00)
+#define MAC_CSR11_AUTOWAKE             FIELD32(0x00008000)
+#define MAC_CSR11_WAKEUP_LATENCY       FIELD32(0x000f0000)
+
+/*
+ * MAC_CSR12: Manual power control / status register (merge CSR20 & PWRCSR1).
+ * CURRENT_STATE: 0:sleep, 1:awake.
+ * FORCE_WAKEUP: This has higher priority than PUT_TO_SLEEP.
+ * BBP_CURRENT_STATE: 0: BBP sleep, 1: BBP awake.
+ */
+#define MAC_CSR12                      0x3030
+#define MAC_CSR12_CURRENT_STATE                FIELD32(0x00000001)
+#define MAC_CSR12_PUT_TO_SLEEP         FIELD32(0x00000002)
+#define MAC_CSR12_FORCE_WAKEUP         FIELD32(0x00000004)
+#define MAC_CSR12_BBP_CURRENT_STATE    FIELD32(0x00000008)
+
+/*
+ * MAC_CSR13: GPIO.
+ */
+#define MAC_CSR13                      0x3034
+
+/*
+ * MAC_CSR14: LED control register.
+ * ON_PERIOD: On period, default 70ms.
+ * OFF_PERIOD: Off period, default 30ms.
+ * HW_LED: HW TX activity, 1: normal OFF, 0: normal ON.
+ * SW_LED: s/w LED, 1: ON, 0: OFF.
+ * HW_LED_POLARITY: 0: active low, 1: active high.
+ */
+#define MAC_CSR14                      0x3038
+#define MAC_CSR14_ON_PERIOD            FIELD32(0x000000ff)
+#define MAC_CSR14_OFF_PERIOD           FIELD32(0x0000ff00)
+#define MAC_CSR14_HW_LED               FIELD32(0x00010000)
+#define MAC_CSR14_SW_LED               FIELD32(0x00020000)
+#define MAC_CSR14_HW_LED_POLARITY      FIELD32(0x00040000)
+#define MAC_CSR14_SW_LED2              FIELD32(0x00080000)
+
+/*
+ * MAC_CSR15: NAV control.
+ */
+#define MAC_CSR15                      0x303c
+
+/*
+ * TXRX control registers.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * TXRX_CSR0: TX/RX configuration register.
+ * TSF_OFFSET: Default is 24.
+ * AUTO_TX_SEQ: 1: ASIC auto replace sequence nr in outgoing frame.
+ * DISABLE_RX: Disable Rx engine.
+ * DROP_CRC: Drop CRC error.
+ * DROP_PHYSICAL: Drop physical error.
+ * DROP_CONTROL: Drop control frame.
+ * DROP_NOT_TO_ME: Drop not to me unicast frame.
+ * DROP_TO_DS: Drop fram ToDs bit is true.
+ * DROP_VERSION_ERROR: Drop version error frame.
+ * DROP_MULTICAST: Drop multicast frames.
+ * DROP_BORADCAST: Drop broadcast frames.
+ * ROP_ACK_CTS: Drop received ACK and CTS.
+ */
+#define TXRX_CSR0                      0x3040
+#define TXRX_CSR0_RX_ACK_TIMEOUT       FIELD32(0x000001ff)
+#define TXRX_CSR0_TSF_OFFSET           FIELD32(0x00007e00)
+#define TXRX_CSR0_AUTO_TX_SEQ          FIELD32(0x00008000)
+#define TXRX_CSR0_DISABLE_RX           FIELD32(0x00010000)
+#define TXRX_CSR0_DROP_CRC             FIELD32(0x00020000)
+#define TXRX_CSR0_DROP_PHYSICAL                FIELD32(0x00040000)
+#define TXRX_CSR0_DROP_CONTROL         FIELD32(0x00080000)
+#define TXRX_CSR0_DROP_NOT_TO_ME       FIELD32(0x00100000)
+#define TXRX_CSR0_DROP_TO_DS           FIELD32(0x00200000)
+#define TXRX_CSR0_DROP_VERSION_ERROR   FIELD32(0x00400000)
+#define TXRX_CSR0_DROP_MULTICAST       FIELD32(0x00800000)
+#define TXRX_CSR0_DROP_BORADCAST       FIELD32(0x01000000)
+#define TXRX_CSR0_DROP_ACK_CTS         FIELD32(0x02000000)
+#define TXRX_CSR0_TX_WITHOUT_WAITING   FIELD32(0x04000000)
+
+/*
+ * TXRX_CSR1
+ */
+#define TXRX_CSR1                      0x3044
+#define TXRX_CSR1_BBP_ID0              FIELD32(0x0000007f)
+#define TXRX_CSR1_BBP_ID0_VALID                FIELD32(0x00000080)
+#define TXRX_CSR1_BBP_ID1              FIELD32(0x00007f00)
+#define TXRX_CSR1_BBP_ID1_VALID                FIELD32(0x00008000)
+#define TXRX_CSR1_BBP_ID2              FIELD32(0x007f0000)
+#define TXRX_CSR1_BBP_ID2_VALID                FIELD32(0x00800000)
+#define TXRX_CSR1_BBP_ID3              FIELD32(0x7f000000)
+#define TXRX_CSR1_BBP_ID3_VALID                FIELD32(0x80000000)
+
+/*
+ * TXRX_CSR2
+ */
+#define TXRX_CSR2                      0x3048
+#define TXRX_CSR2_BBP_ID0              FIELD32(0x0000007f)
+#define TXRX_CSR2_BBP_ID0_VALID                FIELD32(0x00000080)
+#define TXRX_CSR2_BBP_ID1              FIELD32(0x00007f00)
+#define TXRX_CSR2_BBP_ID1_VALID                FIELD32(0x00008000)
+#define TXRX_CSR2_BBP_ID2              FIELD32(0x007f0000)
+#define TXRX_CSR2_BBP_ID2_VALID                FIELD32(0x00800000)
+#define TXRX_CSR2_BBP_ID3              FIELD32(0x7f000000)
+#define TXRX_CSR2_BBP_ID3_VALID                FIELD32(0x80000000)
+
+/*
+ * TXRX_CSR3
+ */
+#define TXRX_CSR3                      0x304c
+#define TXRX_CSR3_BBP_ID0              FIELD32(0x0000007f)
+#define TXRX_CSR3_BBP_ID0_VALID                FIELD32(0x00000080)
+#define TXRX_CSR3_BBP_ID1              FIELD32(0x00007f00)
+#define TXRX_CSR3_BBP_ID1_VALID                FIELD32(0x00008000)
+#define TXRX_CSR3_BBP_ID2              FIELD32(0x007f0000)
+#define TXRX_CSR3_BBP_ID2_VALID                FIELD32(0x00800000)
+#define TXRX_CSR3_BBP_ID3              FIELD32(0x7f000000)
+#define TXRX_CSR3_BBP_ID3_VALID                FIELD32(0x80000000)
+
+/*
+ * TXRX_CSR4: Auto-Responder/Tx-retry register.
+ * AUTORESPOND_PREAMBLE: 0:long, 1:short preamble.
+ * OFDM_TX_RATE_DOWN: 1:enable.
+ * OFDM_TX_RATE_STEP: 0:1-step, 1: 2-step, 2:3-step, 3:4-step.
+ * OFDM_TX_FALLBACK_CCK: 0: Fallback to OFDM 6M only, 1: Fallback to CCK 1M,2M.
+ */
+#define TXRX_CSR4                      0x3050
+#define TXRX_CSR4_TX_ACK_TIMEOUT       FIELD32(0x000000ff)
+#define TXRX_CSR4_CNTL_ACK_POLICY      FIELD32(0x00000700)
+#define TXRX_CSR4_ACK_CTS_PSM          FIELD32(0x00010000)
+#define TXRX_CSR4_AUTORESPOND_ENABLE   FIELD32(0x00020000)
+#define TXRX_CSR4_AUTORESPOND_PREAMBLE FIELD32(0x00040000)
+#define TXRX_CSR4_OFDM_TX_RATE_DOWN    FIELD32(0x00080000)
+#define TXRX_CSR4_OFDM_TX_RATE_STEP    FIELD32(0x00300000)
+#define TXRX_CSR4_OFDM_TX_FALLBACK_CCK FIELD32(0x00400000)
+#define TXRX_CSR4_LONG_RETRY_LIMIT     FIELD32(0x0f000000)
+#define TXRX_CSR4_SHORT_RETRY_LIMIT    FIELD32(0xf0000000)
+
+/*
+ * TXRX_CSR5
+ */
+#define TXRX_CSR5                      0x3054
+
+/*
+ * TXRX_CSR6: ACK/CTS payload consumed time
+ */
+#define TXRX_CSR6                      0x3058
+
+/*
+ * TXRX_CSR7: OFDM ACK/CTS payload consumed time for 6/9/12/18 mbps.
+ */
+#define TXRX_CSR7                      0x305c
+#define TXRX_CSR7_ACK_CTS_6MBS         FIELD32(0x000000ff)
+#define TXRX_CSR7_ACK_CTS_9MBS         FIELD32(0x0000ff00)
+#define TXRX_CSR7_ACK_CTS_12MBS                FIELD32(0x00ff0000)
+#define TXRX_CSR7_ACK_CTS_18MBS                FIELD32(0xff000000)
+
+/*
+ * TXRX_CSR8: OFDM ACK/CTS payload consumed time for 24/36/48/54 mbps.
+ */
+#define TXRX_CSR8                      0x3060
+#define TXRX_CSR8_ACK_CTS_24MBS                FIELD32(0x000000ff)
+#define TXRX_CSR8_ACK_CTS_36MBS                FIELD32(0x0000ff00)
+#define TXRX_CSR8_ACK_CTS_48MBS                FIELD32(0x00ff0000)
+#define TXRX_CSR8_ACK_CTS_54MBS                FIELD32(0xff000000)
+
+/*
+ * TXRX_CSR9: Synchronization control register.
+ * BEACON_INTERVAL: In unit of 1/16 TU.
+ * TSF_TICKING: Enable TSF auto counting.
+ * TSF_SYNC: Tsf sync, 0: disable, 1: infra, 2: ad-hoc/master mode.
+ * BEACON_GEN: Enable beacon generator.
+ */
+#define TXRX_CSR9                      0x3064
+#define TXRX_CSR9_BEACON_INTERVAL      FIELD32(0x0000ffff)
+#define TXRX_CSR9_TSF_TICKING          FIELD32(0x00010000)
+#define TXRX_CSR9_TSF_SYNC             FIELD32(0x00060000)
+#define TXRX_CSR9_TBTT_ENABLE          FIELD32(0x00080000)
+#define TXRX_CSR9_BEACON_GEN           FIELD32(0x00100000)
+#define TXRX_CSR9_TIMESTAMP_COMPENSATE FIELD32(0xff000000)
+
+/*
+ * TXRX_CSR10: BEACON alignment.
+ */
+#define TXRX_CSR10                     0x3068
+
+/*
+ * TXRX_CSR11: AES mask.
+ */
+#define TXRX_CSR11                     0x306c
+
+/*
+ * TXRX_CSR12: TSF low 32.
+ */
+#define TXRX_CSR12                     0x3070
+#define TXRX_CSR12_LOW_TSFTIMER                FIELD32(0xffffffff)
+
+/*
+ * TXRX_CSR13: TSF high 32.
+ */
+#define TXRX_CSR13                     0x3074
+#define TXRX_CSR13_HIGH_TSFTIMER       FIELD32(0xffffffff)
+
+/*
+ * TXRX_CSR14: TBTT timer.
+ */
+#define TXRX_CSR14                     0x3078
+
+/*
+ * TXRX_CSR15: TKIP MIC priority byte "AND" mask.
+ */
+#define TXRX_CSR15                     0x307c
+
+/*
+ * PHY control registers.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * PHY_CSR0: RF/PS control.
+ */
+#define PHY_CSR0                       0x3080
+#define PHY_CSR0_PA_PE_BG              FIELD32(0x00010000)
+#define PHY_CSR0_PA_PE_A               FIELD32(0x00020000)
+
+/*
+ * PHY_CSR1
+ */
+#define PHY_CSR1                       0x3084
+#define PHY_CSR1_RF_RPI                        FIELD32(0x00010000)
+
+/*
+ * PHY_CSR2: Pre-TX BBP control.
+ */
+#define PHY_CSR2                       0x3088
+
+/*
+ * PHY_CSR3: BBP serial control register.
+ * VALUE: Register value to program into BBP.
+ * REG_NUM: Selected BBP register.
+ * READ_CONTROL: 0: Write BBP, 1: Read BBP.
+ * BUSY: 1: ASIC is busy execute BBP programming.
+ */
+#define PHY_CSR3                       0x308c
+#define PHY_CSR3_VALUE                 FIELD32(0x000000ff)
+#define PHY_CSR3_REGNUM                        FIELD32(0x00007f00)
+#define PHY_CSR3_READ_CONTROL          FIELD32(0x00008000)
+#define PHY_CSR3_BUSY                  FIELD32(0x00010000)
+
+/*
+ * PHY_CSR4: RF serial control register
+ * VALUE: Register value (include register id) serial out to RF/IF chip.
+ * NUMBER_OF_BITS: Number of bits used in RFRegValue (I:20, RFMD:22).
+ * IF_SELECT: 1: select IF to program, 0: select RF to program.
+ * PLL_LD: RF PLL_LD status.
+ * BUSY: 1: ASIC is busy execute RF programming.
+ */
+#define PHY_CSR4                       0x3090
+#define PHY_CSR4_VALUE                 FIELD32(0x00ffffff)
+#define PHY_CSR4_NUMBER_OF_BITS                FIELD32(0x1f000000)
+#define PHY_CSR4_IF_SELECT             FIELD32(0x20000000)
+#define PHY_CSR4_PLL_LD                        FIELD32(0x40000000)
+#define PHY_CSR4_BUSY                  FIELD32(0x80000000)
+
+/*
+ * PHY_CSR5: RX to TX signal switch timing control.
+ */
+#define PHY_CSR5                       0x3094
+#define PHY_CSR5_IQ_FLIP               FIELD32(0x00000004)
+
+/*
+ * PHY_CSR6: TX to RX signal timing control.
+ */
+#define PHY_CSR6                       0x3098
+#define PHY_CSR6_IQ_FLIP               FIELD32(0x00000004)
+
+/*
+ * PHY_CSR7: TX DAC switching timing control.
+ */
+#define PHY_CSR7                       0x309c
+
+/*
+ * Security control register.
+ */
+
+/*
+ * SEC_CSR0: Shared key table control.
+ */
+#define SEC_CSR0                       0x30a0
+#define SEC_CSR0_BSS0_KEY0_VALID       FIELD32(0x00000001)
+#define SEC_CSR0_BSS0_KEY1_VALID       FIELD32(0x00000002)
+#define SEC_CSR0_BSS0_KEY2_VALID       FIELD32(0x00000004)
+#define SEC_CSR0_BSS0_KEY3_VALID       FIELD32(0x00000008)
+#define SEC_CSR0_BSS1_KEY0_VALID       FIELD32(0x00000010)
+#define SEC_CSR0_BSS1_KEY1_VALID       FIELD32(0x00000020)
+#define SEC_CSR0_BSS1_KEY2_VALID       FIELD32(0x00000040)
+#define SEC_CSR0_BSS1_KEY3_VALID       FIELD32(0x00000080)
+#define SEC_CSR0_BSS2_KEY0_VALID       FIELD32(0x00000100)
+#define SEC_CSR0_BSS2_KEY1_VALID       FIELD32(0x00000200)
+#define SEC_CSR0_BSS2_KEY2_VALID       FIELD32(0x00000400)
+#define SEC_CSR0_BSS2_KEY3_VALID       FIELD32(0x00000800)
+#define SEC_CSR0_BSS3_KEY0_VALID       FIELD32(0x00001000)
+#define SEC_CSR0_BSS3_KEY1_VALID       FIELD32(0x00002000)
+#define SEC_CSR0_BSS3_KEY2_VALID       FIELD32(0x00004000)
+#define SEC_CSR0_BSS3_KEY3_VALID       FIELD32(0x00008000)
+
+/*
+ * SEC_CSR1: Shared key table security mode register.
+ */
+#define SEC_CSR1                       0x30a4
+#define SEC_CSR1_BSS0_KEY0_CIPHER_ALG  FIELD32(0x00000007)
+#define SEC_CSR1_BSS0_KEY1_CIPHER_ALG  FIELD32(0x00000070)
+#define SEC_CSR1_BSS0_KEY2_CIPHER_ALG  FIELD32(0x00000700)
+#define SEC_CSR1_BSS0_KEY3_CIPHER_ALG  FIELD32(0x00007000)
+#define SEC_CSR1_BSS1_KEY0_CIPHER_ALG  FIELD32(0x00070000)
+#define SEC_CSR1_BSS1_KEY1_CIPHER_ALG  FIELD32(0x00700000)
+#define SEC_CSR1_BSS1_KEY2_CIPHER_ALG  FIELD32(0x07000000)
+#define SEC_CSR1_BSS1_KEY3_CIPHER_ALG  FIELD32(0x70000000)
+
+/*
+ * Pairwise key table valid bitmap registers.
+ * SEC_CSR2: pairwise key table valid bitmap 0.
+ * SEC_CSR3: pairwise key table valid bitmap 1.
+ */
+#define SEC_CSR2                       0x30a8
+#define SEC_CSR3                       0x30ac
+
+/*
+ * SEC_CSR4: Pairwise key table lookup control.
+ */
+#define SEC_CSR4                       0x30b0
+
+/*
+ * SEC_CSR5: shared key table security mode register.
+ */
+#define SEC_CSR5                       0x30b4
+#define SEC_CSR5_BSS2_KEY0_CIPHER_ALG  FIELD32(0x00000007)
+#define SEC_CSR5_BSS2_KEY1_CIPHER_ALG  FIELD32(0x00000070)
+#define SEC_CSR5_BSS2_KEY2_CIPHER_ALG  FIELD32(0x00000700)
+#define SEC_CSR5_BSS2_KEY3_CIPHER_ALG  FIELD32(0x00007000)
+#define SEC_CSR5_BSS3_KEY0_CIPHER_ALG  FIELD32(0x00070000)
+#define SEC_CSR5_BSS3_KEY1_CIPHER_ALG  FIELD32(0x00700000)
+#define SEC_CSR5_BSS3_KEY2_CIPHER_ALG  FIELD32(0x07000000)
+#define SEC_CSR5_BSS3_KEY3_CIPHER_ALG  FIELD32(0x70000000)
+
+/*
+ * STA control registers.
+ */
+
+/*
+ * STA_CSR0: RX PLCP error count & RX FCS error count.
+ */
+#define STA_CSR0                       0x30c0
+#define STA_CSR0_FCS_ERROR             FIELD32(0x0000ffff)
+#define STA_CSR0_PLCP_ERROR            FIELD32(0xffff0000)
+
+/*
+ * STA_CSR1: RX False CCA count & RX LONG frame count.
+ */
+#define STA_CSR1                       0x30c4
+#define STA_CSR1_PHYSICAL_ERROR                FIELD32(0x0000ffff)
+#define STA_CSR1_FALSE_CCA_ERROR       FIELD32(0xffff0000)
+
+/*
+ * STA_CSR2: TX Beacon count and RX FIFO overflow count.
+ */
+#define STA_CSR2                       0x30c8
+#define STA_CSR2_RX_FIFO_OVERFLOW_COUNT        FIELD32(0x0000ffff)
+#define STA_CSR2_RX_OVERFLOW_COUNT     FIELD32(0xffff0000)
+
+/*
+ * STA_CSR3: TX Beacon count.
+ */
+#define STA_CSR3                       0x30cc
+#define STA_CSR3_TX_BEACON_COUNT       FIELD32(0x0000ffff)
+
+/*
+ * STA_CSR4: TX Retry count.
+ */
+#define STA_CSR4                       0x30d0
+#define STA_CSR4_TX_NO_RETRY_COUNT     FIELD32(0x0000ffff)
+#define STA_CSR4_TX_ONE_RETRY_COUNT    FIELD32(0xffff0000)
+
+/*
+ * STA_CSR5: TX Retry count.
+ */
+#define STA_CSR5                       0x30d4
+#define STA_CSR4_TX_MULTI_RETRY_COUNT  FIELD32(0x0000ffff)
+#define STA_CSR4_TX_RETRY_FAIL_COUNT   FIELD32(0xffff0000)
+
+/*
+ * QOS control registers.
+ */
+
+/*
+ * QOS_CSR1: TXOP holder MAC address register.
+ */
+#define QOS_CSR1                       0x30e4
+#define QOS_CSR1_BYTE4                 FIELD32(0x000000ff)
+#define QOS_CSR1_BYTE5                 FIELD32(0x0000ff00)
+
+/*
+ * QOS_CSR2: TXOP holder timeout register.
+ */
+#define QOS_CSR2                       0x30e8
+
+/*
+ * RX QOS-CFPOLL MAC address register.
+ * QOS_CSR3: RX QOS-CFPOLL MAC address 0.
+ * QOS_CSR4: RX QOS-CFPOLL MAC address 1.
+ */
+#define QOS_CSR3                       0x30ec
+#define QOS_CSR4                       0x30f0
+
+/*
+ * QOS_CSR5: "QosControl" field of the RX QOS-CFPOLL.
+ */
+#define QOS_CSR5                       0x30f4
+
+/*
+ * WMM Scheduler Register
+ */
+
+/*
+ * AIFSN_CSR: AIFSN for each EDCA AC.
+ * AIFSN0: For AC_BK.
+ * AIFSN1: For AC_BE.
+ * AIFSN2: For AC_VI.
+ * AIFSN3: For AC_VO.
+ */
+#define AIFSN_CSR                      0x0400
+#define AIFSN_CSR_AIFSN0               FIELD32(0x0000000f)
+#define AIFSN_CSR_AIFSN1               FIELD32(0x000000f0)
+#define AIFSN_CSR_AIFSN2               FIELD32(0x00000f00)
+#define AIFSN_CSR_AIFSN3               FIELD32(0x0000f000)
+
+/*
+ * CWMIN_CSR: CWmin for each EDCA AC.
+ * CWMIN0: For AC_BK.
+ * CWMIN1: For AC_BE.
+ * CWMIN2: For AC_VI.
+ * CWMIN3: For AC_VO.
+ */
+#define CWMIN_CSR                      0x0404
+#define CWMIN_CSR_CWMIN0               FIELD32(0x0000000f)
+#define CWMIN_CSR_CWMIN1               FIELD32(0x000000f0)
+#define CWMIN_CSR_CWMIN2               FIELD32(0x00000f00)
+#define CWMIN_CSR_CWMIN3               FIELD32(0x0000f000)
+
+/*
+ * CWMAX_CSR: CWmax for each EDCA AC.
+ * CWMAX0: For AC_BK.
+ * CWMAX1: For AC_BE.
+ * CWMAX2: For AC_VI.
+ * CWMAX3: For AC_VO.
+ */
+#define CWMAX_CSR                      0x0408
+#define CWMAX_CSR_CWMAX0               FIELD32(0x0000000f)
+#define CWMAX_CSR_CWMAX1               FIELD32(0x000000f0)
+#define CWMAX_CSR_CWMAX2               FIELD32(0x00000f00)
+#define CWMAX_CSR_CWMAX3               FIELD32(0x0000f000)
+
+/*
+ * AC_TXOP_CSR0: AC_BK/AC_BE TXOP register.
+ * AC0_TX_OP: For AC_BK, in unit of 32us.
+ * AC1_TX_OP: For AC_BE, in unit of 32us.
+ */
+#define AC_TXOP_CSR0                   0x040c
+#define AC_TXOP_CSR0_AC0_TX_OP         FIELD32(0x0000ffff)
+#define AC_TXOP_CSR0_AC1_TX_OP         FIELD32(0xffff0000)
+
+/*
+ * AC_TXOP_CSR1: AC_VO/AC_VI TXOP register.
+ * AC2_TX_OP: For AC_VI, in unit of 32us.
+ * AC3_TX_OP: For AC_VO, in unit of 32us.
+ */
+#define AC_TXOP_CSR1                   0x0410
+#define AC_TXOP_CSR1_AC2_TX_OP         FIELD32(0x0000ffff)
+#define AC_TXOP_CSR1_AC3_TX_OP         FIELD32(0xffff0000)
+
+/*
+ * BBP registers.
+ * The wordsize of the BBP is 8 bits.
+ */
+
+/*
+ * R2
+ */
+#define BBP_R2_BG_MODE                 FIELD8(0x20)
+
+/*
+ * R3
+ */
+#define BBP_R3_SMART_MODE              FIELD8(0x01)
+
+/*
+ * R4: RX antenna control
+ * FRAME_END: 1 - DPDT, 0 - SPDT (Only valid for 802.11G, RF2527 & RF2529)
+ */
+#define BBP_R4_RX_ANTENNA              FIELD8(0x03)
+#define BBP_R4_RX_FRAME_END            FIELD8(0x20)
+
+/*
+ * R77
+ */
+#define BBP_R77_PAIR                   FIELD8(0x03)
+
+/*
+ * RF registers
+ */
+
+/*
+ * RF 3
+ */
+#define RF3_TXPOWER                    FIELD32(0x00003e00)
+
+/*
+ * RF 4
+ */
+#define RF4_FREQ_OFFSET                        FIELD32(0x0003f000)
+
+/*
+ * EEPROM content.
+ * The wordsize of the EEPROM is 16 bits.
+ */
+
+/*
+ * HW MAC address.
+ */
+#define EEPROM_MAC_ADDR_0              0x0002
+#define EEPROM_MAC_ADDR_BYTE0          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE1          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR1               0x0003
+#define EEPROM_MAC_ADDR_BYTE2          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE3          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR_2              0x0004
+#define EEPROM_MAC_ADDR_BYTE4          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE5          FIELD16(0xff00)
+
+/*
+ * EEPROM antenna.
+ * ANTENNA_NUM: Number of antenna's.
+ * TX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * FRAME_TYPE: 0: DPDT , 1: SPDT , noted this bit is valid for g only.
+ * DYN_TXAGC: Dynamic TX AGC control.
+ * HARDWARE_RADIO: 1: Hardware controlled radio. Read GPIO0.
+ * RF_TYPE: Rf_type of this adapter.
+ */
+#define EEPROM_ANTENNA                 0x0010
+#define EEPROM_ANTENNA_NUM             FIELD16(0x0003)
+#define EEPROM_ANTENNA_TX_DEFAULT      FIELD16(0x000c)
+#define EEPROM_ANTENNA_RX_DEFAULT      FIELD16(0x0030)
+#define EEPROM_ANTENNA_FRAME_TYPE      FIELD16(0x0040)
+#define EEPROM_ANTENNA_DYN_TXAGC       FIELD16(0x0200)
+#define EEPROM_ANTENNA_HARDWARE_RADIO  FIELD16(0x0400)
+#define EEPROM_ANTENNA_RF_TYPE         FIELD16(0xf800)
+
+/*
+ * EEPROM NIC config.
+ * EXTERNAL_LNA: External LNA.
+ */
+#define EEPROM_NIC                     0x0011
+#define EEPROM_NIC_EXTERNAL_LNA                FIELD16(0x0010)
+
+/*
+ * EEPROM geography.
+ * GEO_A: Default geographical setting for 5GHz band
+ * GEO: Default geographical setting.
+ */
+#define EEPROM_GEOGRAPHY               0x0012
+#define EEPROM_GEOGRAPHY_GEO_A         FIELD16(0x00ff)
+#define EEPROM_GEOGRAPHY_GEO           FIELD16(0xff00)
+
+/*
+ * EEPROM BBP.
+ */
+#define EEPROM_BBP_START               0x0013
+#define EEPROM_BBP_SIZE                        16
+#define EEPROM_BBP_VALUE               FIELD16(0x00ff)
+#define EEPROM_BBP_REG_ID              FIELD16(0xff00)
+
+/*
+ * EEPROM TXPOWER 802.11G
+ */
+#define EEPROM_TXPOWER_G_START         0x0023
+#define EEPROM_TXPOWER_G_SIZE          7
+#define EEPROM_TXPOWER_G_1             FIELD16(0x00ff)
+#define EEPROM_TXPOWER_G_2             FIELD16(0xff00)
+
+/*
+ * EEPROM Frequency
+ */
+#define EEPROM_FREQ                    0x002f
+#define EEPROM_FREQ_OFFSET             FIELD16(0x00ff)
+#define EEPROM_FREQ_SEQ_MASK           FIELD16(0xff00)
+#define EEPROM_FREQ_SEQ                        FIELD16(0x0300)
+
+/*
+ * EEPROM LED.
+ * POLARITY_RDY_G: Polarity RDY_G setting.
+ * POLARITY_RDY_A: Polarity RDY_A setting.
+ * POLARITY_ACT: Polarity ACT setting.
+ * POLARITY_GPIO_0: Polarity GPIO0 setting.
+ * POLARITY_GPIO_1: Polarity GPIO1 setting.
+ * POLARITY_GPIO_2: Polarity GPIO2 setting.
+ * POLARITY_GPIO_3: Polarity GPIO3 setting.
+ * POLARITY_GPIO_4: Polarity GPIO4 setting.
+ * LED_MODE: Led mode.
+ */
+#define EEPROM_LED                     0x0030
+#define EEPROM_LED_POLARITY_RDY_G      FIELD16(0x0001)
+#define EEPROM_LED_POLARITY_RDY_A      FIELD16(0x0002)
+#define EEPROM_LED_POLARITY_ACT                FIELD16(0x0004)
+#define EEPROM_LED_POLARITY_GPIO_0     FIELD16(0x0008)
+#define EEPROM_LED_POLARITY_GPIO_1     FIELD16(0x0010)
+#define EEPROM_LED_POLARITY_GPIO_2     FIELD16(0x0020)
+#define EEPROM_LED_POLARITY_GPIO_3     FIELD16(0x0040)
+#define EEPROM_LED_POLARITY_GPIO_4     FIELD16(0x0080)
+#define EEPROM_LED_LED_MODE            FIELD16(0x1f00)
+
+/*
+ * EEPROM TXPOWER 802.11A
+ */
+#define EEPROM_TXPOWER_A_START         0x0031
+#define EEPROM_TXPOWER_A_SIZE          12
+#define EEPROM_TXPOWER_A_1             FIELD16(0x00ff)
+#define EEPROM_TXPOWER_A_2             FIELD16(0xff00)
+
+/*
+ * EEPROM RSSI offset 802.11BG
+ */
+#define EEPROM_RSSI_OFFSET_BG          0x004d
+#define EEPROM_RSSI_OFFSET_BG_1                FIELD16(0x00ff)
+#define EEPROM_RSSI_OFFSET_BG_2                FIELD16(0xff00)
+
+/*
+ * EEPROM RSSI offset 802.11A
+ */
+#define EEPROM_RSSI_OFFSET_A           0x004e
+#define EEPROM_RSSI_OFFSET_A_1         FIELD16(0x00ff)
+#define EEPROM_RSSI_OFFSET_A_2         FIELD16(0xff00)
+
+/*
+ * DMA descriptor defines.
+ */
+#define TXD_DESC_SIZE                  ( 6 * sizeof(struct data_desc) )
+#define RXD_DESC_SIZE                  ( 6 * sizeof(struct data_desc) )
+
+/*
+ * TX descriptor format for TX, PRIO and Beacon Ring.
+ */
+
+/*
+ * Word0
+ * BURST: Next frame belongs to same "burst" event.
+ * TKIP_MIC: ASIC appends TKIP MIC if TKIP is used.
+ * KEY_TABLE: Use per-client pairwise KEY table.
+ * KEY_INDEX:
+ * Key index (0~31) to the pairwise KEY table.
+ * 0~3 to shared KEY table 0 (BSS0).
+ * 4~7 to shared KEY table 1 (BSS1).
+ * 8~11 to shared KEY table 2 (BSS2).
+ * 12~15 to shared KEY table 3 (BSS3).
+ * BURST2: For backward compatibility, set to same value as BURST.
+ */
+#define TXD_W0_BURST                   FIELD32(0x00000001)
+#define TXD_W0_VALID                   FIELD32(0x00000002)
+#define TXD_W0_MORE_FRAG               FIELD32(0x00000004)
+#define TXD_W0_ACK                     FIELD32(0x00000008)
+#define TXD_W0_TIMESTAMP               FIELD32(0x00000010)
+#define TXD_W0_OFDM                    FIELD32(0x00000020)
+#define TXD_W0_IFS                     FIELD32(0x00000040)
+#define TXD_W0_RETRY_MODE              FIELD32(0x00000080)
+#define TXD_W0_TKIP_MIC                        FIELD32(0x00000100)
+#define TXD_W0_KEY_TABLE               FIELD32(0x00000200)
+#define TXD_W0_KEY_INDEX               FIELD32(0x0000fc00)
+#define TXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define TXD_W0_BURST2                  FIELD32(0x10000000)
+#define TXD_W0_CIPHER_ALG              FIELD32(0xe0000000)
+
+/*
+ * Word1
+ * HOST_Q_ID: EDCA/HCCA queue ID.
+ * HW_SEQUENCE: MAC overwrites the frame sequence number.
+ * BUFFER_COUNT: Number of buffers in this TXD.
+ */
+#define TXD_W1_HOST_Q_ID               FIELD32(0x0000000f)
+#define TXD_W1_AIFSN                   FIELD32(0x000000f0)
+#define TXD_W1_CWMIN                   FIELD32(0x00000f00)
+#define TXD_W1_CWMAX                   FIELD32(0x0000f000)
+#define TXD_W1_IV_OFFSET               FIELD32(0x003f0000)
+#define TXD_W1_HW_SEQUENCE             FIELD32(0x10000000)
+#define TXD_W1_BUFFER_COUNT            FIELD32(0xe0000000)
+
+/*
+ * Word2: PLCP information
+ */
+#define TXD_W2_PLCP_SIGNAL             FIELD32(0x000000ff)
+#define TXD_W2_PLCP_SERVICE            FIELD32(0x0000ff00)
+#define TXD_W2_PLCP_LENGTH_LOW         FIELD32(0x00ff0000)
+#define TXD_W2_PLCP_LENGTH_HIGH                FIELD32(0xff000000)
+
+/*
+ * Word3
+ */
+#define TXD_W3_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word4
+ */
+#define TXD_W4_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Word5
+ * FRAME_OFFSET: Frame start offset inside ASIC TXFIFO (after TXINFO field).
+ * PACKET_ID: Driver assigned packet ID to categorize TXResult in interrupt.
+ * WAITING_DMA_DONE_INT: TXD been filled with data
+ * and waiting for TxDoneISR housekeeping.
+ */
+#define TXD_W5_FRAME_OFFSET            FIELD32(0x000000ff)
+#define TXD_W5_PACKET_ID               FIELD32(0x0000ff00)
+#define TXD_W5_TX_POWER                        FIELD32(0x00ff0000)
+#define TXD_W5_WAITING_DMA_DONE_INT    FIELD32(0x01000000)
+
+/*
+ * RX descriptor format for RX Ring.
+ */
+
+/*
+ * Word0
+ * CIPHER_ERROR: 1:ICV error, 2:MIC error, 3:invalid key.
+ * KEY_INDEX: Decryption key actually used.
+ */
+#define RXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define RXD_W0_DROP                    FIELD32(0x00000002)
+#define RXD_W0_UNICAST_TO_ME           FIELD32(0x00000004)
+#define RXD_W0_MULTICAST               FIELD32(0x00000008)
+#define RXD_W0_BROADCAST               FIELD32(0x00000010)
+#define RXD_W0_MY_BSS                  FIELD32(0x00000020)
+#define RXD_W0_CRC_ERROR               FIELD32(0x00000040)
+#define RXD_W0_OFDM                    FIELD32(0x00000080)
+#define RXD_W0_CIPHER_ERROR            FIELD32(0x00000300)
+#define RXD_W0_KEY_INDEX               FIELD32(0x0000fc00)
+#define RXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define RXD_W0_CIPHER_ALG              FIELD32(0xe0000000)
+
+/*
+ * WORD1
+ * SIGNAL: RX raw data rate reported by BBP.
+ * RSSI: RSSI reported by BBP.
+ */
+#define RXD_W1_SIGNAL                  FIELD32(0x000000ff)
+#define RXD_W1_RSSI_AGC                        FIELD32(0x00001f00)
+#define RXD_W1_RSSI_LNA                        FIELD32(0x00006000)
+#define RXD_W1_FRAME_OFFSET            FIELD32(0x7f000000)
+
+/*
+ * Word2
+ * IV: Received IV of originally encrypted.
+ */
+#define RXD_W2_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word3
+ * EIV: Received EIV of originally encrypted.
+ */
+#define RXD_W3_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Word4
+ */
+#define RXD_W4_RESERVED                        FIELD32(0xffffffff)
+
+/*
+ * the above 20-byte is called RXINFO and will be DMAed to MAC RX block
+ * and passed to the HOST driver.
+ * The following fields are for DMA block and HOST usage only.
+ * Can't be touched by ASIC MAC block.
+ */
+
+/*
+ * Word5
+ */
+#define RXD_W5_RESERVED                        FIELD32(0xffffffff)
+
+/*
+ * Macro's for converting txpower from EEPROM to dscape value
+ * and from dscape value to register value.
+ */
+#define MIN_TXPOWER    0
+#define MAX_TXPOWER    31
+#define DEFAULT_TXPOWER        24
+
+#define TXPOWER_FROM_DEV(__txpower)            \
+({                                             \
+       ((__txpower) > MAX_TXPOWER) ?           \
+               DEFAULT_TXPOWER : (__txpower);  \
+})
+
+#define TXPOWER_TO_DEV(__txpower)                      \
+({                                                     \
+       ((__txpower) <= MIN_TXPOWER) ? MIN_TXPOWER :    \
+       (((__txpower) >= MAX_TXPOWER) ? MAX_TXPOWER :   \
+       (__txpower));                                   \
+})
+
+#endif /* RT73USB_H */