Add rt2x00-mac80211 snapshot (#1916)
authorFlorian Fainelli <florian@openwrt.org>
Thu, 26 Jul 2007 20:00:24 +0000 (20:00 +0000)
committerFlorian Fainelli <florian@openwrt.org>
Thu, 26 Jul 2007 20:00:24 +0000 (20:00 +0000)
SVN-Revision: 8184

29 files changed:
package/rt2x00/Makefile [new file with mode: 0644]
package/rt2x00/src/Makefile [new file with mode: 0644]
package/rt2x00/src/rt2400pci.c [new file with mode: 0644]
package/rt2x00/src/rt2400pci.h [new file with mode: 0644]
package/rt2x00/src/rt2500pci.c [new file with mode: 0644]
package/rt2x00/src/rt2500pci.h [new file with mode: 0644]
package/rt2x00/src/rt2500usb.c [new file with mode: 0644]
package/rt2x00/src/rt2500usb.h [new file with mode: 0644]
package/rt2x00/src/rt2x00.h [new file with mode: 0644]
package/rt2x00/src/rt2x00_compat.h [new file with mode: 0644]
package/rt2x00/src/rt2x00_config.h [new file with mode: 0644]
package/rt2x00/src/rt2x00debug.c [new file with mode: 0644]
package/rt2x00/src/rt2x00debug.h [new file with mode: 0644]
package/rt2x00/src/rt2x00dev.c [new file with mode: 0644]
package/rt2x00/src/rt2x00dev.h [new file with mode: 0644]
package/rt2x00/src/rt2x00firmware.c [new file with mode: 0644]
package/rt2x00/src/rt2x00firmware.h [new file with mode: 0644]
package/rt2x00/src/rt2x00lib.h [new file with mode: 0644]
package/rt2x00/src/rt2x00mac.c [new file with mode: 0644]
package/rt2x00/src/rt2x00pci.c [new file with mode: 0644]
package/rt2x00/src/rt2x00pci.h [new file with mode: 0644]
package/rt2x00/src/rt2x00rfkill.c [new file with mode: 0644]
package/rt2x00/src/rt2x00rfkill.h [new file with mode: 0644]
package/rt2x00/src/rt2x00usb.c [new file with mode: 0644]
package/rt2x00/src/rt2x00usb.h [new file with mode: 0644]
package/rt2x00/src/rt61pci.c [new file with mode: 0644]
package/rt2x00/src/rt61pci.h [new file with mode: 0644]
package/rt2x00/src/rt73usb.c [new file with mode: 0644]
package/rt2x00/src/rt73usb.h [new file with mode: 0644]

diff --git a/package/rt2x00/Makefile b/package/rt2x00/Makefile
new file mode 100644 (file)
index 0000000..dbfff83
--- /dev/null
@@ -0,0 +1,67 @@
+# 
+# Copyright (C) 2007 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+# $Id: $
+
+include $(TOPDIR)/rules.mk
+include $(INCLUDE_DIR)/kernel.mk
+
+PKG_NAME:=kmod-rt2x00
+PKG_VERSION:=git-200706018
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/rt2x00/Default
+  SUBMENU:=Wireless Drivers
+  DEPENDS:=@LINUX_2_6 +kmod-mac80211 @LINUX_2_6_X86||@LINUX_2_6_RDC
+  TITLE:=Ralink GPL Drivers
+  DESCRIPTION:=Ralink GPL Drivers for rt2x00 cards
+  VERSION:=$(LINUX_VERSION)+$(PKG_VERSION)-$(BOARD)-$(LINUX_RELEASE)
+endef
+
+define KernelPackage/rt2x00-lib
+  $(call Package/rt2x00/Default)
+  TITLE+= (LIB)
+  DESCRIPTION+= (LIB)
+  FILES:=$(PKG_BUILD_DIR)/rt2x00lib.$(LINUX_KMOD_SUFFIX)
+  AUTOLOAD:=$(call AutoLoad,25,rt2x00lib)
+endef
+
+define KernelPackage/rt2x00-pci
+  $(call Package/rt2x00/Default)
+  TITLE+= (PCI)
+  DESCRIPTION+= (PCI)
+  FILES:=$(PKG_BUILD_DIR)/rt2x00pci.$(LINUX_KMOD_SUFFIX)
+  AUTOLOAD:=$(call AutoLoad,26,rt2x00pci)
+endef
+
+define KernelPackage/rt2x00-usb
+  $(call Package/rt2x00/Default)
+  TITLE+= (USB)
+  DESCRIPTION+= (USB)
+  FILES:=$(PKG_BUILD_DIR)/rt2x00usb.$(LINUX_KMOD_SUFFIX)
+  AUTOLOAD:=$(call AutoLoad,26,rt2x00usb)
+endef
+
+define Build/Prepare
+       $(call Build/Prepare/Default)
+       $(CP) -r src/* $(PKG_BUILD_DIR)/
+endef
+
+define Build/Compile
+       $(MAKE) -C "$(LINUX_DIR)" \
+               CROSS_COMPILE="$(TARGET_CROSS)" \
+               ARCH="$(LINUX_KARCH)" \
+               SUBDIRS="$(PKG_BUILD_DIR)" \
+               KERNELVERSION="$(KERNEL)" \
+               KERNEL_SOURCE="$(LINUX_DIR)" \
+               EXTRA_CFLAGS="$(BUILDFLAGS) -include $(PKG_BUILD_DIR)/rt2x00_compat.h" \
+               KDIR="$(LINUX_DIR)"
+endef
+
+$(eval $(call KernelPackage,rt2x00-lib))
+$(eval $(call KernelPackage,rt2x00-pci))
+$(eval $(call KernelPackage,rt2x00-usb))
diff --git a/package/rt2x00/src/Makefile b/package/rt2x00/src/Makefile
new file mode 100644 (file)
index 0000000..4f3304f
--- /dev/null
@@ -0,0 +1,11 @@
+rt2x00lib-objs := rt2x00dev.o rt2x00mac.o
+
+EXTRA_CFLAGS += -DCONFIG_RT2X00_LIB_FIRMWARE
+
+obj-m                          += rt2x00lib.o rt2x00pci.o rt2x00usb.o
+
+obj-$(CONFIG_RT2400PCI)                += rt2400pci.o
+obj-$(CONFIG_RT2500PCI)                += rt2500pci.o
+obj-$(CONFIG_RT61PCI)          += rt61pci.o
+obj-$(CONFIG_RT2500USB)                += rt2500usb.o
+obj-$(CONFIG_RT73USB)          += rt73usb.o
diff --git a/package/rt2x00/src/rt2400pci.c b/package/rt2x00/src/rt2400pci.c
new file mode 100644 (file)
index 0000000..aaed3b4
--- /dev/null
@@ -0,0 +1,1694 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2400pci
+       Abstract: rt2400pci device specific routines.
+       Supported chipsets: RT2460.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2400pci"
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/version.h>
+#include <linux/init.h>
+#include <linux/pci.h>
+#include <linux/dma-mapping.h>
+#include <linux/delay.h>
+#include <linux/etherdevice.h>
+#include <linux/eeprom_93cx6.h>
+
+#include <asm/io.h>
+
+#include "rt2x00.h"
+#include "rt2x00pci.h"
+#include "rt2400pci.h"
+
+/*
+ * Register access.
+ * All access to the CSR registers will go through the methods
+ * rt2x00pci_register_read and rt2x00pci_register_write.
+ * BBP and RF register require indirect register access,
+ * and use the CSR registers BBPCSR and RFCSR to achieve this.
+ * These indirect registers work with busy bits,
+ * and we will try maximal REGISTER_BUSY_COUNT times to access
+ * the register while taking a REGISTER_BUSY_DELAY us delay
+ * between each attampt. When the busy bit is still set at that time,
+ * the access attempt is considered to have failed,
+ * and we will print an error.
+ */
+static u32 rt2400pci_bbp_check(const struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, BBPCSR, &reg);
+               if (!rt2x00_get_field32(reg, BBPCSR_BUSY))
+                       break;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       return reg;
+}
+
+static void rt2400pci_bbp_write(const struct rt2x00_dev *rt2x00dev,
+       const u8 reg_id, const u8 value)
+{
+       u32 reg;
+
+       /*
+        *  Wait until the BBP becomes ready.
+        */
+       reg = rt2400pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Write failed.\n");
+               return;
+       }
+
+       /*
+        * Write the data into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, BBPCSR_VALUE, value);
+       rt2x00_set_field32(&reg, BBPCSR_REGNUM, reg_id);
+       rt2x00_set_field32(&reg, BBPCSR_BUSY, 1);
+       rt2x00_set_field32(&reg, BBPCSR_WRITE_CONTROL, 1);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR, reg);
+}
+
+static void rt2400pci_bbp_read(const struct rt2x00_dev *rt2x00dev,
+       const u8 reg_id, u8 *value)
+{
+       u32 reg;
+
+       /*
+        *  Wait until the BBP becomes ready.
+        */
+       reg = rt2400pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Read failed.\n");
+               return;
+       }
+
+       /*
+        * Write the request into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, BBPCSR_REGNUM, reg_id);
+       rt2x00_set_field32(&reg, BBPCSR_BUSY, 1);
+       rt2x00_set_field32(&reg, BBPCSR_WRITE_CONTROL, 0);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR, reg);
+
+       /*
+        *  Wait until the BBP becomes ready.
+        */
+       reg = rt2400pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Read failed.\n");
+               *value = 0xff;
+               return;
+       }
+
+       *value = rt2x00_get_field32(reg, BBPCSR_VALUE);
+}
+
+static void rt2400pci_rf_write(const struct rt2x00_dev *rt2x00dev,
+       const u32 value)
+{
+       u32 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, RFCSR, &reg);
+               if (!rt2x00_get_field32(reg, RFCSR_BUSY))
+                       goto rf_write;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "RFCSR register busy. Write failed.\n");
+       return;
+
+rf_write:
+       reg = 0;
+       rt2x00_set_field32(&reg, RFCSR_VALUE, value);
+       rt2x00_set_field32(&reg, RFCSR_NUMBER_OF_BITS, 20);
+       rt2x00_set_field32(&reg, RFCSR_IF_SELECT, 0);
+       rt2x00_set_field32(&reg, RFCSR_BUSY, 1);
+
+       rt2x00pci_register_write(rt2x00dev, RFCSR, reg);
+}
+
+static void rt2400pci_eepromregister_read(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR21, &reg);
+
+       eeprom->reg_data_in = !!rt2x00_get_field32(reg,
+               CSR21_EEPROM_DATA_IN);
+       eeprom->reg_data_out = !!rt2x00_get_field32(reg,
+               CSR21_EEPROM_DATA_OUT);
+       eeprom->reg_data_clock = !!rt2x00_get_field32(reg,
+               CSR21_EEPROM_DATA_CLOCK);
+       eeprom->reg_chip_select = !!rt2x00_get_field32(reg,
+               CSR21_EEPROM_CHIP_SELECT);
+}
+
+static void rt2400pci_eepromregister_write(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg = 0;
+
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_IN,
+               !!eeprom->reg_data_in);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_OUT,
+               !!eeprom->reg_data_out);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_CLOCK,
+               !!eeprom->reg_data_clock);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_CHIP_SELECT,
+               !!eeprom->reg_chip_select);
+
+       rt2x00pci_register_write(rt2x00dev, CSR21, reg);
+}
+
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+#define CSR_OFFSET(__word)     ( CSR_REG_BASE + ((__word) * sizeof(u32)) )
+
+static void rt2400pci_read_csr(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00pci_register_read(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static void rt2400pci_write_csr(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00pci_register_write(rt2x00dev, CSR_OFFSET(word), *((u32*)data));
+}
+
+static void rt2400pci_read_eeprom(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00_eeprom_read(rt2x00dev, word, data);
+}
+
+static void rt2400pci_write_eeprom(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00_eeprom_write(rt2x00dev, word, *((u16*)data));
+}
+
+static void rt2400pci_read_bbp(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2400pci_bbp_read(rt2x00dev, word, data);
+}
+
+static void rt2400pci_write_bbp(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2400pci_bbp_write(rt2x00dev, word, *((u8*)data));
+}
+
+static const struct rt2x00debug rt2400pci_rt2x00debug = {
+       .owner          = THIS_MODULE,
+       .reg_csr        = {
+               .read           = rt2400pci_read_csr,
+               .write          = rt2400pci_write_csr,
+               .word_size      = sizeof(u32),
+               .word_count     = CSR_REG_SIZE / sizeof(u32),
+       },
+       .reg_eeprom     = {
+               .read           = rt2400pci_read_eeprom,
+               .write          = rt2400pci_write_eeprom,
+               .word_size      = sizeof(u16),
+               .word_count     = EEPROM_SIZE / sizeof(u16),
+       },
+       .reg_bbp        = {
+               .read           = rt2400pci_read_bbp,
+               .write          = rt2400pci_write_bbp,
+               .word_size      = sizeof(u8),
+               .word_count     = BBP_SIZE / sizeof(u8),
+       },
+};
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+#ifdef CONFIG_RT2400PCI_RFKILL
+static int rt2400pci_rfkill_poll(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, GPIOCSR, &reg);
+       return rt2x00_get_field32(reg, GPIOCSR_BIT0);
+}
+#endif /* CONFIG_RT2400PCI_RFKILL */
+
+/*
+ * Configuration handlers.
+ */
+static void rt2400pci_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid)
+{
+       u32 reg[2];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, bssid, ETH_ALEN);
+
+       /*
+        * The BSSID is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, CSR5, &reg, sizeof(reg));
+}
+
+static void rt2400pci_config_promisc(struct rt2x00_dev *rt2x00dev,
+       const int promisc)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+       rt2x00_set_field32(&reg, RXCSR0_DROP_NOT_TO_ME, !promisc);
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+}
+
+static void rt2400pci_config_type(struct rt2x00_dev *rt2x00dev, int type)
+{
+       u32 reg;
+
+       rt2x00pci_register_write(rt2x00dev, CSR14, 0);
+
+       /*
+        * Apply hardware packet filter.
+        */
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+
+       if (!is_monitor_present(&rt2x00dev->interface) &&
+           (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_STA))
+               rt2x00_set_field32(&reg, RXCSR0_DROP_TODS, 1);
+       else
+               rt2x00_set_field32(&reg, RXCSR0_DROP_TODS, 0);
+
+       rt2x00_set_field32(&reg, RXCSR0_DROP_CRC, 1);
+       if (is_monitor_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, RXCSR0_DROP_PHYSICAL, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CONTROL, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_VERSION_ERROR, 0);
+       } else {
+               rt2x00_set_field32(&reg, RXCSR0_DROP_PHYSICAL, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CONTROL, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_VERSION_ERROR, 1);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+
+       /*
+        * Enable beacon config
+        */
+       rt2x00pci_register_read(rt2x00dev, BCNCSR1, &reg);
+       rt2x00_set_field32(&reg, BCNCSR1_PRELOAD,
+               PREAMBLE + get_duration(IEEE80211_HEADER, 2));
+       rt2x00pci_register_write(rt2x00dev, BCNCSR1, reg);
+
+       /*
+        * Enable synchronisation.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR14, &reg);
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, CSR14_TSF_COUNT, 1);
+               rt2x00_set_field32(&reg, CSR14_TBCN, 1);
+       }
+
+       rt2x00_set_field32(&reg, CSR14_BEACON_GEN, 0);
+       if (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_AP)
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 2);
+       else if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 1);
+       else if (is_monitor_present(&rt2x00dev->interface) &&
+                !is_interface_present(&rt2x00dev->interface))
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 0);
+
+       rt2x00pci_register_write(rt2x00dev, CSR14, reg);
+}
+
+static void rt2400pci_config_channel(struct rt2x00_dev *rt2x00dev,
+       const int value, const int channel, const int txpower)
+{
+       u32 rf1 = rt2x00dev->rf1;
+       u32 rf2 = value;
+       u32 rf3 = rt2x00dev->rf3;
+
+       /*
+        * Switch on tuning bits.
+        */
+       rt2x00_set_field32(&rf1, RF1_TUNER, 1);
+       rt2x00_set_field32(&rf3, RF3_TUNER, 1);
+
+       rt2400pci_rf_write(rt2x00dev, rf1);
+       rt2400pci_rf_write(rt2x00dev, rf2);
+       rt2400pci_rf_write(rt2x00dev, rf3);
+
+       /*
+        * RF2420 chipset don't need any additional actions.
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2420))
+               return;
+
+       /*
+        * For the RT2421 chipsets we need to write an invalid
+        * reference clock rate to activate auto_tune.
+        * After that we set the value back to the correct channel.
+        */
+       rt2400pci_rf_write(rt2x00dev, rf1);
+       rt2400pci_rf_write(rt2x00dev, 0x000c2a32);
+       rt2400pci_rf_write(rt2x00dev, rf3);
+
+       msleep(1);
+
+       rt2400pci_rf_write(rt2x00dev, rf1);
+       rt2400pci_rf_write(rt2x00dev, rf2);
+       rt2400pci_rf_write(rt2x00dev, rf3);
+
+       msleep(1);
+
+       /*
+        * Switch off tuning bits.
+        */
+       rt2x00_set_field32(&rf1, RF1_TUNER, 0);
+       rt2x00_set_field32(&rf3, RF3_TUNER, 0);
+
+       rt2400pci_rf_write(rt2x00dev, rf1);
+       rt2400pci_rf_write(rt2x00dev, rf3);
+
+       /*
+        * Update rf fields
+        */
+       rt2x00dev->rf1 = rf1;
+       rt2x00dev->rf2 = rf2;
+       rt2x00dev->rf3 = rf3;
+
+       /*
+        * Clear false CRC during channel switch.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &rf1);
+}
+
+static void rt2400pci_config_txpower(struct rt2x00_dev *rt2x00dev, int txpower)
+{
+       rt2400pci_bbp_write(rt2x00dev, 3, TXPOWER_TO_DEV(txpower));
+}
+
+static void rt2400pci_config_antenna(struct rt2x00_dev *rt2x00dev,
+       int antenna_tx, int antenna_rx)
+{
+       u8 r1;
+       u8 r4;
+
+       rt2400pci_bbp_read(rt2x00dev, 4, &r4);
+       rt2400pci_bbp_read(rt2x00dev, 1, &r1);
+
+       /*
+        * Configure the TX antenna.
+        */
+       if (antenna_tx == ANTENNA_DIVERSITY)
+               rt2x00_set_field8(&r1, BBP_R1_TX_ANTENNA, 1);
+       else if (antenna_tx == ANTENNA_A)
+               rt2x00_set_field8(&r1, BBP_R1_TX_ANTENNA, 0);
+       else if (antenna_tx == ANTENNA_B)
+               rt2x00_set_field8(&r1, BBP_R1_TX_ANTENNA, 2);
+
+       /*
+        * Configure the RX antenna.
+        */
+       if (antenna_rx == ANTENNA_DIVERSITY)
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 1);
+       else if (antenna_rx == ANTENNA_A)
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 0);
+       else if (antenna_rx == ANTENNA_B)
+               rt2x00_set_field8(&r4, BBP_R4_RX_ANTENNA, 2);
+
+       rt2400pci_bbp_write(rt2x00dev, 4, r4);
+       rt2400pci_bbp_write(rt2x00dev, 1, r1);
+}
+
+static void rt2400pci_config_cw(struct rt2x00_dev *rt2x00dev,
+       struct ieee80211_tx_queue_params *params)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_CWMIN, params->cw_min);
+       rt2x00_set_field32(&reg, CSR11_CWMAX, params->cw_max);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+}
+
+static void rt2400pci_config_duration(struct rt2x00_dev *rt2x00dev,
+       int short_slot_time, int beacon_int)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_SLOT_TIME,
+               short_slot_time ? SHORT_SLOT_TIME : SLOT_TIME);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR18, &reg);
+       rt2x00_set_field32(&reg, CSR18_SIFS, SIFS);
+       rt2x00_set_field32(&reg, CSR18_PIFS,
+               short_slot_time ? SHORT_PIFS :  PIFS);
+       rt2x00pci_register_write(rt2x00dev, CSR18, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR19, &reg);
+       rt2x00_set_field32(&reg, CSR19_DIFS,
+               short_slot_time ? SHORT_DIFS : DIFS);
+       rt2x00_set_field32(&reg, CSR19_EIFS, EIFS);
+       rt2x00pci_register_write(rt2x00dev, CSR19, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR1, &reg);
+       rt2x00_set_field32(&reg, TXCSR1_TSF_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&reg, TXCSR1_AUTORESPONDER, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR12, &reg);
+       rt2x00_set_field32(&reg, CSR12_BEACON_INTERVAL, beacon_int * 16);
+       rt2x00_set_field32(&reg, CSR12_CFP_MAX_DURATION, beacon_int * 16);
+       rt2x00pci_register_write(rt2x00dev, CSR12, reg);
+}
+
+static void rt2400pci_config_rate(struct rt2x00_dev *rt2x00dev, const int rate)
+{
+       struct ieee80211_conf *conf = &rt2x00dev->hw->conf;
+       u32 reg;
+       u32 preamble;
+       u16 value;
+
+       preamble = DEVICE_GET_RATE_FIELD(rate, PREAMBLE)
+               ? SHORT_PREAMBLE : PREAMBLE;
+
+       reg = DEVICE_GET_RATE_FIELD(rate, RATEMASK) & DEV_BASIC_RATE;
+       rt2x00pci_register_write(rt2x00dev, ARCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR1, &reg);
+       value = ((conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME) ?
+                SHORT_DIFS :  DIFS) +
+               PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXCSR1_ACK_TIMEOUT, value);
+       value = SIFS + PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXCSR1_ACK_CONSUME_TIME, value);
+       rt2x00pci_register_write(rt2x00dev, TXCSR1, reg);
+
+       preamble = DEVICE_GET_RATE_FIELD(rate, PREAMBLE) ? 0x08 : 0x00;
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR2, &reg);
+       rt2x00_set_field32(&reg, ARCSR2_SIGNAL, 0x00 | preamble);
+       rt2x00_set_field32(&reg, ARCSR2_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 10));
+       rt2x00pci_register_write(rt2x00dev, ARCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR3, &reg);
+       rt2x00_set_field32(&reg, ARCSR3_SIGNAL, 0x01 | preamble);
+       rt2x00_set_field32(&reg, ARCSR3_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 20));
+       rt2x00pci_register_write(rt2x00dev, ARCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR4, &reg);
+       rt2x00_set_field32(&reg, ARCSR4_SIGNAL, 0x02 | preamble);
+       rt2x00_set_field32(&reg, ARCSR4_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 55));
+       rt2x00pci_register_write(rt2x00dev, ARCSR4, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR5, &reg);
+       rt2x00_set_field32(&reg, ARCSR5_SIGNAL, 0x03 | preamble);
+       rt2x00_set_field32(&reg, ARCSR5_SERVICE, 0x84);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 110));
+       rt2x00pci_register_write(rt2x00dev, ARCSR5, reg);
+}
+
+static void rt2400pci_config_phymode(struct rt2x00_dev *rt2x00dev,
+       const int phymode)
+{
+       struct ieee80211_hw_mode *mode;
+       struct ieee80211_rate *rate;
+
+       rt2x00dev->curr_hwmode = HWMODE_B;
+
+       mode = &rt2x00dev->hwmodes[rt2x00dev->curr_hwmode];
+       rate = &mode->rates[mode->num_rates - 1];
+
+       rt2400pci_config_rate(rt2x00dev, rate->val2);
+}
+
+static void rt2400pci_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *addr)
+{
+       u32 reg[2];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, addr, ETH_ALEN);
+
+       /*
+        * The MAC address is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, CSR3, &reg, sizeof(reg));
+}
+
+/*
+ * LED functions.
+ */
+static void rt2400pci_enable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, LEDCSR, &reg);
+
+       rt2x00_set_field32(&reg, LEDCSR_ON_PERIOD, 70);
+       rt2x00_set_field32(&reg, LEDCSR_OFF_PERIOD, 30);
+
+       if (rt2x00dev->led_mode == LED_MODE_TXRX_ACTIVITY) {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 1);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 0);
+       } else if (rt2x00dev->led_mode == LED_MODE_ASUS) {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 0);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 1);
+       } else {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 1);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 1);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, LEDCSR, reg);
+}
+
+static void rt2400pci_disable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, LEDCSR, &reg);
+       rt2x00_set_field32(&reg, LEDCSR_LINK, 0);
+       rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 0);
+       rt2x00pci_register_write(rt2x00dev, LEDCSR, reg);
+}
+
+/*
+ * Link tuning
+ */
+static void rt2400pci_link_tuner(struct rt2x00_dev *rt2x00dev, int rssi)
+{
+       u8 reg;
+       char false_cca_delta;
+
+       /*
+        * The link tuner should not run longer then 60 seconds,
+        * and should run once every 2 seconds.
+        */
+       if (rt2x00dev->link.count > 60 || !(rt2x00dev->link.count % 1))
+               return;
+
+       /*
+        * Read false CCA counter.
+        */
+       rt2400pci_bbp_read(rt2x00dev, 39, &reg);
+
+       /*
+        * Determine difference with previous CCA counter.
+        */
+       false_cca_delta = reg - rt2x00dev->link.false_cca;
+       rt2x00dev->link.false_cca = reg;
+
+       /*
+        * Check if the difference is higher than the
+        * threshold and if so, tune the link.
+        */
+       if (false_cca_delta >= 8) {
+               /*
+                * Read and update RX AGC VGC.
+                */
+               rt2400pci_bbp_read(rt2x00dev, 13, &reg);
+               reg += 2;
+               if (reg < 0x20)
+                       rt2400pci_bbp_write(rt2x00dev, 13, reg);
+       }
+}
+
+/*
+ * Initialization functions.
+ */
+static void rt2400pci_init_rxring(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_desc *rxd;
+       unsigned int i;
+       u32 word;
+
+       memset(rt2x00dev->rx->data_addr, 0x00,
+               rt2x00_get_ring_size(rt2x00dev->rx));
+
+       for (i = 0; i < rt2x00dev->rx->stats.limit; i++) {
+               rxd = rt2x00dev->rx->entry[i].priv;
+
+               rt2x00_desc_read(rxd, 2, &word);
+               rt2x00_set_field32(&word, RXD_W2_BUFFER_LENGTH,
+                       rt2x00dev->rx->data_size);
+               rt2x00_desc_write(rxd, 2, word);
+
+               rt2x00_desc_read(rxd, 1, &word);
+               rt2x00_set_field32(&word, RXD_W1_BUFFER_ADDRESS,
+                       rt2x00dev->rx->entry[i].data_dma);
+               rt2x00_desc_write(rxd, 1, word);
+
+               rt2x00_desc_read(rxd, 0, &word);
+               rt2x00_set_field32(&word, RXD_W0_OWNER_NIC, 1);
+               rt2x00_desc_write(rxd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(rt2x00dev->rx);
+}
+
+static void rt2400pci_init_txring(struct rt2x00_dev *rt2x00dev,
+       const int queue)
+{
+       struct data_ring *ring = rt2x00_get_ring(rt2x00dev, queue);
+       struct data_desc *txd;
+       unsigned int i;
+       u32 word;
+
+       memset(ring->data_addr, 0x00, rt2x00_get_ring_size(ring));
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               txd = ring->entry[i].priv;
+
+               rt2x00_desc_read(txd, 1, &word);
+               rt2x00_set_field32(&word, TXD_W1_BUFFER_ADDRESS,
+                       ring->entry[i].data_dma);
+               rt2x00_desc_write(txd, 1, word);
+
+               rt2x00_desc_read(txd, 2, &word);
+               rt2x00_set_field32(&word, TXD_W2_BUFFER_LENGTH,
+                       ring->data_size);
+               rt2x00_desc_write(txd, 2, word);
+
+               rt2x00_desc_read(txd, 0, &word);
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 0);
+               rt2x00_desc_write(txd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(ring);
+}
+
+static int rt2400pci_init_rings(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Initialize rings.
+        */
+       rt2400pci_init_rxring(rt2x00dev);
+       rt2400pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+       rt2400pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+       rt2400pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_AFTER_BEACON);
+       rt2400pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       /*
+        * Initialize registers.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXCSR2, &reg);
+       rt2x00_set_field32(&reg, TXCSR2_TXD_SIZE,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].desc_size);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_TXD,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].stats.limit);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_ATIM,
+               rt2x00dev->bcn[1].stats.limit);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_PRIO,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].stats.limit);
+       rt2x00pci_register_write(rt2x00dev, TXCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR3, &reg);
+       rt2x00_set_field32(&reg, TXCSR3_TX_RING_REGISTER,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR5, &reg);
+       rt2x00_set_field32(&reg, TXCSR5_PRIO_RING_REGISTER,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR5, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR4, &reg);
+       rt2x00_set_field32(&reg, TXCSR4_ATIM_RING_REGISTER,
+               rt2x00dev->bcn[1].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR4, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR6, &reg);
+       rt2x00_set_field32(&reg, TXCSR6_BEACON_RING_REGISTER,
+               rt2x00dev->bcn[0].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR6, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR1, &reg);
+       rt2x00_set_field32(&reg, RXCSR1_RXD_SIZE,
+               rt2x00dev->rx->desc_size);
+       rt2x00_set_field32(&reg, RXCSR1_NUM_RXD,
+               rt2x00dev->rx->stats.limit);
+       rt2x00pci_register_write(rt2x00dev, RXCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR2, &reg);
+       rt2x00_set_field32(&reg, RXCSR2_RX_RING_REGISTER,
+               rt2x00dev->rx->data_dma);
+       rt2x00pci_register_write(rt2x00dev, RXCSR2, reg);
+
+       return 0;
+}
+
+static int rt2400pci_init_registers(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       if (rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_AWAKE))
+               return -EBUSY;
+
+       rt2x00pci_register_write(rt2x00dev, PWRCSR0, 0x3f3b3100);
+
+       rt2x00pci_register_write(rt2x00dev, PSCSR0, 0x00020002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR1, 0x00000002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR2, 0x00020002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR3, 0x00000002);
+
+       rt2x00pci_register_read(rt2x00dev, TIMECSR, &reg);
+       rt2x00_set_field32(&reg, TIMECSR_US_COUNT, 33);
+       rt2x00_set_field32(&reg, TIMECSR_US_64_COUNT, 63);
+       rt2x00_set_field32(&reg, TIMECSR_BEACON_EXPECT, 0);
+       rt2x00pci_register_write(rt2x00dev, TIMECSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR9, &reg);
+       rt2x00_set_field32(&reg, CSR9_MAX_FRAME_UNIT,
+               (rt2x00dev->rx->data_size / 128));
+       rt2x00pci_register_write(rt2x00dev, CSR9, reg);
+
+       rt2x00pci_register_write(rt2x00dev, CNT3, 0x3f080000);
+
+       rt2x00pci_register_write(rt2x00dev, MACCSR0, 0x00217223);
+       rt2x00pci_register_write(rt2x00dev, MACCSR1, 0x00235518);
+
+       rt2x00pci_register_read(rt2x00dev, MACCSR2, &reg);
+       rt2x00_set_field32(&reg, MACCSR2_DELAY, 64);
+       rt2x00pci_register_write(rt2x00dev, MACCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR3, &reg);
+       /*
+        * Tx power.
+        */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID0, 3);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID0_VALID, 1);
+       /*
+        * Signal.
+        */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID1, 32);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID1_VALID, 1);
+       /*
+        * Rssi.
+        */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID2, 36);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID2_VALID, 1);
+       rt2x00pci_register_write(rt2x00dev, RXCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RALINKCSR, &reg);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_DATA0, 17);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_ID0, 154);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_DATA1, 0);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_ID1, 154);
+       rt2x00pci_register_write(rt2x00dev, RALINKCSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR1, &reg);
+       rt2x00_set_field32(&reg, CSR1_SOFT_RESET, 1);
+       rt2x00_set_field32(&reg, CSR1_BBP_RESET, 0);
+       rt2x00_set_field32(&reg, CSR1_HOST_READY, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR1, &reg);
+       rt2x00_set_field32(&reg, CSR1_SOFT_RESET, 0);
+       rt2x00_set_field32(&reg, CSR1_HOST_READY, 1);
+       rt2x00pci_register_write(rt2x00dev, CSR1, reg);
+
+       /*
+        * We must clear the FCS and FIFO error count.
+        * These registers are cleared on read,
+        * so we may pass a useless variable to store the value.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg);
+       rt2x00pci_register_read(rt2x00dev, CNT4, &reg);
+
+       return 0;
+}
+
+static int rt2400pci_init_bbp(struct rt2x00_dev *rt2x00dev)
+{
+       unsigned int i;
+       u16 eeprom;
+       u8 reg_id;
+       u8 value;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2400pci_bbp_read(rt2x00dev, 0, &value);
+               if ((value != 0xff) && (value != 0x00))
+                       goto continue_csr_init;
+               NOTICE(rt2x00dev, "Waiting for BBP register.\n");
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "BBP register access failed, aborting.\n");
+       return -EACCES;
+
+continue_csr_init:
+       rt2400pci_bbp_write(rt2x00dev, 1, 0x00);
+       rt2400pci_bbp_write(rt2x00dev, 3, 0x27);
+       rt2400pci_bbp_write(rt2x00dev, 4, 0x08);
+       rt2400pci_bbp_write(rt2x00dev, 10, 0x0f);
+       rt2400pci_bbp_write(rt2x00dev, 13, 0x08);
+       rt2400pci_bbp_write(rt2x00dev, 15, 0x72);
+       rt2400pci_bbp_write(rt2x00dev, 16, 0x74);
+       rt2400pci_bbp_write(rt2x00dev, 17, 0x20);
+       rt2400pci_bbp_write(rt2x00dev, 18, 0x72);
+       rt2400pci_bbp_write(rt2x00dev, 19, 0x0b);
+       rt2400pci_bbp_write(rt2x00dev, 20, 0x00);
+       rt2400pci_bbp_write(rt2x00dev, 28, 0x11);
+       rt2400pci_bbp_write(rt2x00dev, 29, 0x04);
+       rt2400pci_bbp_write(rt2x00dev, 30, 0x21);
+       rt2400pci_bbp_write(rt2x00dev, 31, 0x00);
+
+       DEBUG(rt2x00dev, "Start initialization from EEPROM...\n");
+       for (i = 0; i < EEPROM_BBP_SIZE; i++) {
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_BBP_START + i, &eeprom);
+
+               if (eeprom != 0xffff && eeprom != 0x0000) {
+                       reg_id = rt2x00_get_field16(eeprom, EEPROM_BBP_REG_ID);
+                       value = rt2x00_get_field16(eeprom, EEPROM_BBP_VALUE);
+                       DEBUG(rt2x00dev, "BBP: 0x%02x, value: 0x%02x.\n",
+                               reg_id, value);
+                       rt2400pci_bbp_write(rt2x00dev, reg_id, value);
+               }
+       }
+       DEBUG(rt2x00dev, "...End initialization from EEPROM.\n");
+
+       return 0;
+}
+
+/*
+ * Device state switch handlers.
+ */
+static void rt2400pci_toggle_rx(struct rt2x00_dev *rt2x00dev,
+       enum dev_state state)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+       rt2x00_set_field32(&reg, RXCSR0_DISABLE_RX,
+               state == STATE_RADIO_RX_OFF);
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+}
+
+static int rt2400pci_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Initialize all registers.
+        */
+       if (rt2400pci_init_rings(rt2x00dev) ||
+           rt2400pci_init_registers(rt2x00dev) ||
+           rt2400pci_init_bbp(rt2x00dev)) {
+               ERROR(rt2x00dev, "Register initialization failed.\n");
+               return -EIO;
+       }
+
+       /*
+        * Clear interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR7, &reg);
+       rt2x00pci_register_write(rt2x00dev, CSR7, reg);
+
+       /*
+        * Enable interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR8, &reg);
+       rt2x00_set_field32(&reg, CSR8_TBCN_EXPIRE, 0);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_TXRING, 0);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_ATIMRING, 0);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_PRIORING, 0);
+       rt2x00_set_field32(&reg, CSR8_RXDONE, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR8, reg);
+
+       /*
+        * Enable LED
+        */
+       rt2400pci_enable_led(rt2x00dev);
+
+       return 0;
+}
+
+static void rt2400pci_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Disable LED
+        */
+       rt2400pci_disable_led(rt2x00dev);
+
+       rt2x00pci_register_write(rt2x00dev, PWRCSR0, 0);
+
+       /*
+        * Disable synchronisation.
+        */
+       rt2x00pci_register_write(rt2x00dev, CSR14, 0);
+
+       /*
+        * Cancel RX and TX.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXCSR0, &reg);
+       rt2x00_set_field32(&reg, TXCSR0_ABORT, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR0, reg);
+
+       /*
+        * Disable interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR8, &reg);
+       rt2x00_set_field32(&reg, CSR8_TBCN_EXPIRE, 1);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_TXRING, 1);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_ATIMRING, 1);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_PRIORING, 1);
+       rt2x00_set_field32(&reg, CSR8_RXDONE, 1);
+       rt2x00pci_register_write(rt2x00dev, CSR8, reg);
+}
+
+static int rt2400pci_set_state(struct rt2x00_dev *rt2x00dev,
+       enum dev_state state)
+{
+       u32 reg;
+       unsigned int i;
+       char put_to_sleep;
+       char bbp_state;
+       char rf_state;
+
+       put_to_sleep = (state != STATE_AWAKE);
+
+       rt2x00pci_register_read(rt2x00dev, PWRCSR1, &reg);
+       rt2x00_set_field32(&reg, PWRCSR1_SET_STATE, 1);
+       rt2x00_set_field32(&reg, PWRCSR1_BBP_DESIRE_STATE, state);
+       rt2x00_set_field32(&reg, PWRCSR1_RF_DESIRE_STATE, state);
+       rt2x00_set_field32(&reg, PWRCSR1_PUT_TO_SLEEP, put_to_sleep);
+       rt2x00pci_register_write(rt2x00dev, PWRCSR1, reg);
+
+       /*
+        * Device is not guaranteed to be in the requested state yet.
+        * We must wait until the register indicates that the
+        * device has entered the correct state.
+        */
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, PWRCSR1, &reg);
+               bbp_state = rt2x00_get_field32(reg, PWRCSR1_BBP_CURR_STATE);
+               rf_state = rt2x00_get_field32(reg, PWRCSR1_RF_CURR_STATE);
+               if (bbp_state == state && rf_state == state)
+                       return 0;
+               msleep(10);
+       }
+
+       NOTICE(rt2x00dev, "Device failed to enter state %d, "
+               "current device state: bbp %d and rf %d.\n",
+               state, bbp_state, rf_state);
+
+       return -EBUSY;
+}
+
+static int rt2400pci_set_device_state(struct rt2x00_dev *rt2x00dev,
+       enum dev_state state)
+{
+       int retval = 0;
+
+       switch (state) {
+               case STATE_RADIO_ON:
+                       retval = rt2400pci_enable_radio(rt2x00dev);
+               break;
+               case STATE_RADIO_OFF:
+                       rt2400pci_disable_radio(rt2x00dev);
+               break;
+               case STATE_RADIO_RX_ON:
+               case STATE_RADIO_RX_OFF:
+                       rt2400pci_toggle_rx(rt2x00dev, state);
+               break;
+               case STATE_DEEP_SLEEP:
+               case STATE_SLEEP:
+               case STATE_STANDBY:
+               case STATE_AWAKE:
+                       retval = rt2400pci_set_state(rt2x00dev, state);
+               break;
+               default:
+                       retval = -ENOTSUPP;
+               break;
+       }
+
+       return retval;
+}
+
+/*
+ * TX descriptor initialization
+ */
+static void rt2400pci_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+       struct data_entry *entry, struct data_desc *txd,
+       struct data_entry_desc *desc, struct ieee80211_hdr *ieee80211hdr,
+       unsigned int length, struct ieee80211_tx_control *control)
+{
+       u32 word;
+       u32 signal = 0;
+       u32 service = 0;
+       u32 length_high = 0;
+       u32 length_low = 0;
+
+       /*
+        * The PLCP values should be treated as if they
+        * were BBP values.
+        */
+       rt2x00_set_field32(&signal, BBPCSR_VALUE, desc->signal);
+       rt2x00_set_field32(&signal, BBPCSR_REGNUM, 5);
+       rt2x00_set_field32(&signal, BBPCSR_BUSY, 1);
+
+       rt2x00_set_field32(&service, BBPCSR_VALUE, desc->service);
+       rt2x00_set_field32(&service, BBPCSR_REGNUM, 6);
+       rt2x00_set_field32(&service, BBPCSR_BUSY, 1);
+
+       rt2x00_set_field32(&length_high, BBPCSR_VALUE, desc->length_high);
+       rt2x00_set_field32(&length_high, BBPCSR_REGNUM, 7);
+       rt2x00_set_field32(&length_high, BBPCSR_BUSY, 1);
+
+       rt2x00_set_field32(&length_low, BBPCSR_VALUE, desc->length_low);
+       rt2x00_set_field32(&length_low, BBPCSR_REGNUM, 8);
+       rt2x00_set_field32(&length_low, BBPCSR_BUSY, 1);
+
+       /*
+        * Start writing the descriptor words.
+        */
+       rt2x00_desc_read(txd, 2, &word);
+       rt2x00_set_field32(&word, TXD_W2_DATABYTE_COUNT, length);
+       rt2x00_desc_write(txd, 2, word);
+
+       rt2x00_desc_read(txd, 3, &word);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_SIGNAL, signal);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_SERVICE, service);
+       rt2x00_desc_write(txd, 3, word);
+
+       rt2x00_desc_read(txd, 4, &word);
+       rt2x00_set_field32(&word, TXD_W4_PLCP_LENGTH_LOW, length_low);
+       rt2x00_set_field32(&word, TXD_W4_PLCP_LENGTH_HIGH, length_high);
+       rt2x00_desc_write(txd, 4, word);
+
+       rt2x00_desc_read(txd, 0, &word);
+       rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 1);
+       rt2x00_set_field32(&word, TXD_W0_VALID, 1);
+       rt2x00_set_field32(&word, TXD_W0_MORE_FRAG,
+               test_bit(ENTRY_TXD_MORE_FRAG, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_ACK,
+               test_bit(ENTRY_TXD_REQ_ACK, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_TIMESTAMP,
+               test_bit(ENTRY_TXD_REQ_TIMESTAMP, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_RTS,
+               test_bit(ENTRY_TXD_RTS_FRAME, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_IFS, desc->ifs);
+       rt2x00_set_field32(&word, TXD_W0_RETRY_MODE, 0);
+       rt2x00_desc_write(txd, 0, word);
+}
+
+/*
+ * TX data initialization
+ */
+static void rt2400pci_kick_tx_queue(struct rt2x00_dev *rt2x00dev, int queue)
+{
+       u32 reg;
+
+       if (queue == IEEE80211_TX_QUEUE_BEACON) {
+               rt2x00pci_register_read(rt2x00dev, CSR14, &reg);
+               if (!rt2x00_get_field32(reg, CSR14_BEACON_GEN)) {
+                       rt2x00_set_field32(&reg, CSR14_BEACON_GEN, 1);
+                       rt2x00pci_register_write(rt2x00dev, CSR14, reg);
+               }
+               return;
+       }
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR0, &reg);
+       if (queue == IEEE80211_TX_QUEUE_DATA0)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_PRIO, 1);
+       else if (queue == IEEE80211_TX_QUEUE_DATA1)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_TX, 1);
+       else if (queue == IEEE80211_TX_QUEUE_AFTER_BEACON)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_ATIM, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR0, reg);
+}
+
+/*
+ * Interrupt functions.
+ */
+static void rt2400pci_rxdone(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring = rt2x00dev->rx;
+       struct data_entry *entry;
+       struct data_desc *rxd;
+       u32 word0;
+       u32 word2;
+       int signal;
+       int rssi;
+       u16 size;
+
+       while (1) {
+               entry = rt2x00_get_data_entry(ring);
+               rxd = entry->priv;
+               rt2x00_desc_read(rxd, 0, &word0);
+               rt2x00_desc_read(rxd, 2, &word2);
+
+               if (rt2x00_get_field32(word0, RXD_W0_OWNER_NIC))
+                       break;
+
+               /*
+                * TODO: Don't we need to keep statistics
+                * updated about events like CRC and physical errors?
+                */
+               if (rt2x00_get_field32(word0, RXD_W0_CRC) ||
+                   rt2x00_get_field32(word0, RXD_W0_PHYSICAL_ERROR))
+                       goto skip_entry;
+
+               /*
+                * Obtain the status about this packet.
+                */
+               size = rt2x00_get_field32(word0, RXD_W0_DATABYTE_COUNT);
+               signal = rt2x00_get_field32(word2, RXD_W2_SIGNAL);
+               rssi = rt2x00_get_field32(word2, RXD_W2_RSSI);
+
+               /*
+                * Send the packet to upper layer.
+                */
+               rt2x00lib_rxdone(entry, entry->data_addr, size,
+                       signal, rssi, 0);
+
+skip_entry:
+               if (test_bit(DEVICE_ENABLED_RADIO, &ring->rt2x00dev->flags)) {
+                       rt2x00_set_field32(&word0, RXD_W0_OWNER_NIC, 1);
+                       rt2x00_desc_write(rxd, 0, word0);
+               }
+
+               rt2x00_ring_index_inc(ring);
+       }
+}
+
+static void rt2400pci_txdone(struct rt2x00_dev *rt2x00dev, const int queue)
+{
+       struct data_ring *ring = rt2x00_get_ring(rt2x00dev, queue);
+       struct data_entry *entry;
+       struct data_desc *txd;
+       u32 word;
+       int tx_status;
+       int retry;
+
+       while (!rt2x00_ring_empty(ring)) {
+               entry = rt2x00_get_data_entry_done(ring);
+               txd = entry->priv;
+               rt2x00_desc_read(txd, 0, &word);
+
+               if (rt2x00_get_field32(word, TXD_W0_OWNER_NIC) ||
+                   !rt2x00_get_field32(word, TXD_W0_VALID))
+                       break;
+
+               /*
+                * Obtain the status about this packet.
+                */
+               tx_status = rt2x00_get_field32(word, TXD_W0_RESULT);
+               retry = rt2x00_get_field32(word, TXD_W0_RETRY_COUNT);
+
+               rt2x00lib_txdone(entry, tx_status, retry);
+
+               /*
+                * Make this entry available for reuse.
+                */
+               entry->flags = 0;
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_desc_write(txd, 0, word);
+               rt2x00_ring_index_done_inc(ring);
+       }
+
+       /*
+        * If the data ring was full before the txdone handler
+        * we must make sure the packet queue in the mac80211 stack
+        * is reenabled when the txdone handler has finished.
+        */
+       entry = ring->entry;
+       if (!rt2x00_ring_full(ring))
+               ieee80211_wake_queue(rt2x00dev->hw,
+                       entry->tx_status.control.queue);
+}
+
+static irqreturn_t rt2400pci_interrupt(int irq, void *dev_instance)
+{
+       struct rt2x00_dev *rt2x00dev = dev_instance;
+       u32 reg;
+
+       /*
+        * Get the interrupt sources & saved to local variable.
+        * Write register value back to clear pending interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR7, &reg);
+       rt2x00pci_register_write(rt2x00dev, CSR7, reg);
+
+       if (!reg)
+               return IRQ_NONE;
+
+       if (!test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags))
+               return IRQ_HANDLED;
+
+       /*
+        * Handle interrupts, walk through all bits
+        * and run the tasks, the bits are checked in order of
+        * priority.
+        */
+
+       /*
+        * 1 - Beacon timer expired interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TBCN_EXPIRE))
+               rt2x00pci_beacondone(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       /*
+        * 2 - Rx ring done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_RXDONE))
+               rt2400pci_rxdone(rt2x00dev);
+
+       /*
+        * 3 - Atim ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_ATIMRING))
+               rt2400pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_AFTER_BEACON);
+
+       /*
+        * 4 - Priority ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_PRIORING))
+               rt2400pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+
+       /*
+        * 5 - Tx ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_TXRING))
+               rt2400pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+
+       return IRQ_HANDLED;
+}
+
+/*
+ * Device initialization functions.
+ */
+static int rt2400pci_alloc_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       struct eeprom_93cx6 eeprom;
+       u32 reg;
+       u16 word;
+
+       /*
+        * Allocate the eeprom memory, check the eeprom width
+        * and copy the entire eeprom into this allocated memory.
+        */
+       rt2x00dev->eeprom = kzalloc(EEPROM_SIZE, GFP_KERNEL);
+       if (!rt2x00dev->eeprom)
+               return -ENOMEM;
+
+       rt2x00pci_register_read(rt2x00dev, CSR21, &reg);
+
+       eeprom.data = rt2x00dev;
+       eeprom.register_read = rt2400pci_eepromregister_read;
+       eeprom.register_write = rt2400pci_eepromregister_write;
+       eeprom.width = rt2x00_get_field32(reg, CSR21_TYPE_93C46) ?
+               PCI_EEPROM_WIDTH_93C46 : PCI_EEPROM_WIDTH_93C66;
+       eeprom.reg_data_in = 0;
+       eeprom.reg_data_out = 0;
+       eeprom.reg_data_clock = 0;
+       eeprom.reg_chip_select = 0;
+
+       eeprom_93cx6_multiread(&eeprom, EEPROM_BASE, rt2x00dev->eeprom,
+               EEPROM_SIZE / sizeof(u16));
+
+       /*
+        * Start validation of the data that has been read.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &word);
+       if (word == 0xffff) {
+               ERROR(rt2x00dev, "Invalid EEPROM data detected.\n");
+               return -EINVAL;
+       }
+
+       return 0;
+}
+
+static int rt2400pci_init_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       u16 value;
+       u16 eeprom;
+
+       /*
+        * Read EEPROM word for configuration.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &eeprom);
+
+       /*
+        * Identify RF chipset.
+        */
+       value = rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RF_TYPE);
+       rt2x00pci_register_read(rt2x00dev, CSR0, &reg);
+       rt2x00_set_chip(rt2x00dev, RT2460, value, reg);
+
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2420) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2421)) {
+               ERROR(rt2x00dev, "Invalid RF chipset detected.\n");
+               return -ENODEV;
+       }
+
+       /*
+        * Identify default antenna configuration.
+        */
+       rt2x00dev->hw->conf.antenna_sel_tx = rt2x00_get_field16(eeprom,
+               EEPROM_ANTENNA_TX_DEFAULT);
+       rt2x00dev->hw->conf.antenna_sel_rx = rt2x00_get_field16(eeprom,
+               EEPROM_ANTENNA_RX_DEFAULT);
+
+       /*
+        * Store led mode, for correct led behaviour.
+        */
+       rt2x00dev->led_mode = rt2x00_get_field16(eeprom,
+               EEPROM_ANTENNA_LED_MODE);
+
+       /*
+        * Detect if this device has an hardware controlled radio.
+        */
+       if (rt2x00_get_field16(eeprom, EEPROM_ANTENNA_HARDWARE_RADIO))
+               __set_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags);
+
+       /*
+        * Check if the BBP tuning should be enabled.
+        */
+       if (!rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RX_AGCVGC_TUNING))
+               __set_bit(CONFIG_DISABLE_LINK_TUNING, &rt2x00dev->flags);
+
+       return 0;
+}
+
+/*
+ * RF value list for RF2420 & RF2421
+ * Supports: 2.4 GHz
+ */
+static const u32 rf_vals_bg[] = {
+       0x000c1fda, 0x000c1fee, 0x000c2002, 0x000c2016, 0x000c202a,
+       0x000c203e, 0x000c2052, 0x000c2066, 0x000c207a, 0x000c208e,
+       0x000c20a2, 0x000c20b6, 0x000c20ca, 0x000c20fa
+};
+
+static void rt2400pci_init_hw_mode(struct rt2x00_dev *rt2x00dev)
+{
+       struct hw_mode_spec *spec = &rt2x00dev->spec;
+       u8 *txpower;
+       unsigned int i;
+
+       /*
+        * Initialize all hw fields.
+        */
+       rt2x00dev->hw->flags = IEEE80211_HW_HOST_GEN_BEACON |
+               IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING |
+               IEEE80211_HW_WEP_INCLUDE_IV |
+               IEEE80211_HW_DATA_NULLFUNC_ACK |
+               IEEE80211_HW_NO_TKIP_WMM_HWACCEL |
+               IEEE80211_HW_MONITOR_DURING_OPER;
+       rt2x00dev->hw->extra_tx_headroom = 0;
+       rt2x00dev->hw->max_rssi = MAX_RX_SSI;
+       rt2x00dev->hw->max_noise = MAX_RX_NOISE;
+       rt2x00dev->hw->queues = 2;
+
+       /*
+        * This device supports ATIM
+        */
+       __set_bit(DEVICE_SUPPORT_ATIM, &rt2x00dev->flags);
+
+       /*
+        * Set device specific, but channel independent RF values.
+        */
+       rt2x00dev->rf1 = 0x00022058;
+       if (rt2x00_rf(&rt2x00dev->chip, RF2420))
+               rt2x00dev->rf3 = 0x00000111;
+       else
+               rt2x00dev->rf3 = 0x00000101;
+
+       /*
+        * Convert tx_power array in eeprom.
+        */
+       txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_START);
+       for (i = 0; i < 14; i++)
+               txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+       /*
+        * Initialize hw_mode information.
+        */
+       spec->mac_addr = rt2x00_eeprom_addr(rt2x00dev, EEPROM_MAC_ADDR_0);
+       spec->num_modes = 1;
+       spec->num_rates = 4;
+       spec->num_channels = 14;
+       spec->tx_power_a = NULL;
+       spec->tx_power_bg = txpower;
+       spec->tx_power_default = DEFAULT_TXPOWER;
+       spec->chan_val_a = NULL;
+       spec->chan_val_bg = rf_vals_bg;
+}
+
+static int rt2400pci_init_hw(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       /*
+        * Allocate eeprom data.
+        */
+       retval = rt2400pci_alloc_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt2400pci_init_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       /*
+        * Initialize hw specifications.
+        */
+       rt2400pci_init_hw_mode(rt2x00dev);
+
+       return 0;
+}
+
+/*
+ * IEEE80211 stack callback functions.
+ */
+static int rt2400pci_get_stats(struct ieee80211_hw *hw,
+       struct ieee80211_low_level_stats *stats)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       /*
+        * Update FCS error count from register.
+        * The dot11ACKFailureCount, dot11RTSFailureCount and
+        * dot11RTSSuccessCount are updated in interrupt time.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg);
+       rt2x00dev->low_level_stats.dot11FCSErrorCount +=
+               rt2x00_get_field32(reg, CNT0_FCS_ERROR);
+
+       memcpy(stats, &rt2x00dev->low_level_stats, sizeof(*stats));
+
+       return 0;
+}
+
+static int rt2400pci_set_retry_limit(struct ieee80211_hw *hw,
+       u32 short_retry, u32 long_retry)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_LONG_RETRY, long_retry);
+       rt2x00_set_field32(&reg, CSR11_SHORT_RETRY, short_retry);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       return 0;
+}
+
+static int rt2400pci_conf_tx(struct ieee80211_hw *hw,
+       int queue, const struct ieee80211_tx_queue_params *params)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       /*
+        * We don't support variating cw_min and cw_max variables
+        * per queue. So by default we only configure the TX queue,
+        * and ignore all other configurations.
+        */
+       if (queue != IEEE80211_TX_QUEUE_DATA0)
+               return -EINVAL;
+
+       if (rt2x00lib_conf_tx(hw, queue, params))
+               return -EINVAL;
+
+       /*
+        * Write configuration to register.
+        */
+       rt2400pci_config_cw(rt2x00dev, &rt2x00dev->tx->tx_params);
+
+       return 0;
+}
+
+static u64 rt2400pci_get_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u64 tsf;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR17, &reg);
+       tsf = (u64)rt2x00_get_field32(reg, CSR17_HIGH_TSFTIMER) << 32;
+       rt2x00pci_register_read(rt2x00dev, CSR16, &reg);
+       tsf |= rt2x00_get_field32(reg, CSR16_LOW_TSFTIMER);
+
+       return tsf;
+}
+
+static void rt2400pci_reset_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       rt2x00pci_register_write(rt2x00dev, CSR16, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR17, 0);
+}
+
+static int rt2400pci_tx_last_beacon(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR15, &reg);
+       return rt2x00_get_field32(reg, CSR15_BEACON_SENT);
+}
+
+static const struct ieee80211_ops rt2400pci_mac80211_ops = {
+       .tx                     = rt2x00lib_tx,
+       .reset                  = rt2x00lib_reset,
+       .open                   = rt2x00lib_open,
+       .stop                   = rt2x00lib_stop,
+       .add_interface          = rt2x00lib_add_interface,
+       .remove_interface       = rt2x00lib_remove_interface,
+       .config                 = rt2x00lib_config,
+       .config_interface       = rt2x00lib_config_interface,
+       .set_multicast_list     = rt2x00lib_set_multicast_list,
+       .get_stats              = rt2400pci_get_stats,
+       .set_retry_limit        = rt2400pci_set_retry_limit,
+       .conf_tx                = rt2400pci_conf_tx,
+       .get_tx_stats           = rt2x00lib_get_tx_stats,
+       .get_tsf                = rt2400pci_get_tsf,
+       .reset_tsf              = rt2400pci_reset_tsf,
+       .beacon_update          = rt2x00pci_beacon_update,
+       .tx_last_beacon         = rt2400pci_tx_last_beacon,
+};
+
+static const struct rt2x00lib_ops rt2400pci_rt2x00_ops = {
+       .irq_handler            = rt2400pci_interrupt,
+       .init_hw                = rt2400pci_init_hw,
+       .initialize             = rt2x00pci_initialize,
+       .uninitialize           = rt2x00pci_uninitialize,
+       .set_device_state       = rt2400pci_set_device_state,
+#ifdef CONFIG_RT2400PCI_RFKILL
+       .rfkill_poll            = rt2400pci_rfkill_poll,
+#endif /* CONFIG_RT2400PCI_RFKILL */
+       .link_tuner             = rt2400pci_link_tuner,
+       .write_tx_desc          = rt2400pci_write_tx_desc,
+       .write_tx_data          = rt2x00pci_write_tx_data,
+       .kick_tx_queue          = rt2400pci_kick_tx_queue,
+       .config_type            = rt2400pci_config_type,
+       .config_phymode         = rt2400pci_config_phymode,
+       .config_channel         = rt2400pci_config_channel,
+       .config_mac_addr        = rt2400pci_config_mac_addr,
+       .config_bssid           = rt2400pci_config_bssid,
+       .config_promisc         = rt2400pci_config_promisc,
+       .config_txpower         = rt2400pci_config_txpower,
+       .config_antenna         = rt2400pci_config_antenna,
+       .config_duration        = rt2400pci_config_duration,
+};
+
+static const struct rt2x00_ops rt2400pci_ops = {
+       .name   = DRV_NAME,
+       .rxd_size = RXD_DESC_SIZE,
+       .txd_size = TXD_DESC_SIZE,
+       .lib    = &rt2400pci_rt2x00_ops,
+       .hw     = &rt2400pci_mac80211_ops,
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       .debugfs = &rt2400pci_rt2x00debug,
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * RT2400pci module information.
+ */
+static struct pci_device_id rt2400pci_device_table[] = {
+       { PCI_DEVICE(0x1814, 0x0101), PCI_DEVICE_DATA(&rt2400pci_ops) },
+       { 0, }
+};
+
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("Ralink RT2400 PCI & PCMCIA Wireless LAN driver.");
+MODULE_SUPPORTED_DEVICE("Ralink RT2460 PCI & PCMCIA chipset based cards");
+MODULE_DEVICE_TABLE(pci, rt2400pci_device_table);
+MODULE_LICENSE("GPL");
+
+static struct pci_driver rt2400pci_driver = {
+       .name           = DRV_NAME,
+       .id_table       = rt2400pci_device_table,
+       .probe          = rt2x00pci_probe,
+       .remove         = __devexit_p(rt2x00pci_remove),
+#ifdef CONFIG_PM
+       .suspend        = rt2x00pci_suspend,
+       .resume         = rt2x00pci_resume,
+#endif /* CONFIG_PM */
+};
+
+static int __init rt2400pci_init(void)
+{
+       printk(KERN_INFO "Loading module: %s - %s by %s.\n",
+               DRV_NAME, DRV_VERSION, DRV_PROJECT);
+       return pci_register_driver(&rt2400pci_driver);
+}
+
+static void __exit rt2400pci_exit(void)
+{
+       printk(KERN_INFO "Unloading module: %s.\n", DRV_NAME);
+       pci_unregister_driver(&rt2400pci_driver);
+}
+
+module_init(rt2400pci_init);
+module_exit(rt2400pci_exit);
diff --git a/package/rt2x00/src/rt2400pci.h b/package/rt2x00/src/rt2400pci.h
new file mode 100644 (file)
index 0000000..097f4c9
--- /dev/null
@@ -0,0 +1,933 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2400pci
+       Abstract: Data structures and registers for the rt2400pci module.
+       Supported chipsets: RT2460.
+ */
+
+#ifndef RT2400PCI_H
+#define RT2400PCI_H
+
+/*
+ * RF chip defines.
+ */
+#define RF2420                         0x0000
+#define RF2421                         0x0001
+
+/*
+ * Max RSSI value, required for RSSI <-> dBm conversion.
+ */
+#define MAX_RX_SSI                     100
+#define MAX_RX_NOISE                   -110
+
+/*
+ * Register layout information.
+ */
+#define CSR_REG_BASE                   0x0000
+#define CSR_REG_SIZE                   0x014c
+#define EEPROM_BASE                    0x0000
+#define EEPROM_SIZE                    0x0100
+#define BBP_SIZE                       0x0020
+
+/*
+ * Control/Status Registers(CSR).
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * CSR0: ASIC revision number.
+ */
+#define CSR0                           0x0000
+
+/*
+ * CSR1: System control register.
+ * SOFT_RESET: Software reset, 1: reset, 0: normal.
+ * BBP_RESET: Hardware reset, 1: reset, 0, release.
+ * HOST_READY: Host ready after initialization.
+ */
+#define CSR1                           0x0004
+#define CSR1_SOFT_RESET                        FIELD32(0x00000001)
+#define CSR1_BBP_RESET                 FIELD32(0x00000002)
+#define CSR1_HOST_READY                        FIELD32(0x00000004)
+
+/*
+ * CSR2: System admin status register (invalid).
+ */
+#define CSR2                           0x0008
+
+/*
+ * CSR3: STA MAC address register 0.
+ */
+#define CSR3                           0x000c
+#define CSR3_BYTE0                     FIELD32(0x000000ff)
+#define CSR3_BYTE1                     FIELD32(0x0000ff00)
+#define CSR3_BYTE2                     FIELD32(0x00ff0000)
+#define CSR3_BYTE3                     FIELD32(0xff000000)
+
+/*
+ * CSR4: STA MAC address register 1.
+ */
+#define CSR4                           0x0010
+#define CSR4_BYTE4                     FIELD32(0x000000ff)
+#define CSR4_BYTE5                     FIELD32(0x0000ff00)
+
+/*
+ * CSR5: BSSID register 0.
+ */
+#define CSR5                           0x0014
+#define CSR5_BYTE0                     FIELD32(0x000000ff)
+#define CSR5_BYTE1                     FIELD32(0x0000ff00)
+#define CSR5_BYTE2                     FIELD32(0x00ff0000)
+#define CSR5_BYTE3                     FIELD32(0xff000000)
+
+/*
+ * CSR6: BSSID register 1.
+ */
+#define CSR6                           0x0018
+#define CSR6_BYTE4                     FIELD32(0x000000ff)
+#define CSR6_BYTE5                     FIELD32(0x0000ff00)
+
+/*
+ * CSR7: Interrupt source register.
+ * Write 1 to clear interrupt.
+ * TBCN_EXPIRE: Beacon timer expired interrupt.
+ * TWAKE_EXPIRE: Wakeup timer expired interrupt.
+ * TATIMW_EXPIRE: Timer of atim window expired interrupt.
+ * TXDONE_TXRING: Tx ring transmit done interrupt.
+ * TXDONE_ATIMRING: Atim ring transmit done interrupt.
+ * TXDONE_PRIORING: Priority ring transmit done interrupt.
+ * RXDONE: Receive done interrupt.
+ */
+#define CSR7                           0x001c
+#define CSR7_TBCN_EXPIRE               FIELD32(0x00000001)
+#define CSR7_TWAKE_EXPIRE              FIELD32(0x00000002)
+#define CSR7_TATIMW_EXPIRE             FIELD32(0x00000004)
+#define CSR7_TXDONE_TXRING             FIELD32(0x00000008)
+#define CSR7_TXDONE_ATIMRING           FIELD32(0x00000010)
+#define CSR7_TXDONE_PRIORING           FIELD32(0x00000020)
+#define CSR7_RXDONE                    FIELD32(0x00000040)
+
+/*
+ * CSR8: Interrupt mask register.
+ * Write 1 to mask interrupt.
+ * TBCN_EXPIRE: Beacon timer expired interrupt.
+ * TWAKE_EXPIRE: Wakeup timer expired interrupt.
+ * TATIMW_EXPIRE: Timer of atim window expired interrupt.
+ * TXDONE_TXRING: Tx ring transmit done interrupt.
+ * TXDONE_ATIMRING: Atim ring transmit done interrupt.
+ * TXDONE_PRIORING: Priority ring transmit done interrupt.
+ * RXDONE: Receive done interrupt.
+ */
+#define CSR8                           0x0020
+#define CSR8_TBCN_EXPIRE               FIELD32(0x00000001)
+#define CSR8_TWAKE_EXPIRE              FIELD32(0x00000002)
+#define CSR8_TATIMW_EXPIRE             FIELD32(0x00000004)
+#define CSR8_TXDONE_TXRING             FIELD32(0x00000008)
+#define CSR8_TXDONE_ATIMRING           FIELD32(0x00000010)
+#define CSR8_TXDONE_PRIORING           FIELD32(0x00000020)
+#define CSR8_RXDONE                    FIELD32(0x00000040)
+
+/*
+ * CSR9: Maximum frame length register.
+ * MAX_FRAME_UNIT: Maximum frame length in 128b unit, default: 12.
+ */
+#define CSR9                           0x0024
+#define CSR9_MAX_FRAME_UNIT            FIELD32(0x00000f80)
+
+/*
+ * CSR11: Back-off control register.
+ * CWMIN: CWmin. Default cwmin is 31 (2^5 - 1).
+ * CWMAX: CWmax. Default cwmax is 1023 (2^10 - 1).
+ * SLOT_TIME: Slot time, default is 20us for 802.11b.
+ * LONG_RETRY: Long retry count.
+ * SHORT_RETRY: Short retry count.
+ */
+#define CSR11                          0x002c
+#define CSR11_CWMIN                    FIELD32(0x0000000f)
+#define CSR11_CWMAX                    FIELD32(0x000000f0)
+#define CSR11_SLOT_TIME                        FIELD32(0x00001f00)
+#define CSR11_LONG_RETRY               FIELD32(0x00ff0000)
+#define CSR11_SHORT_RETRY              FIELD32(0xff000000)
+
+/*
+ * CSR12: Synchronization configuration register 0.
+ * All units in 1/16 TU.
+ * BEACON_INTERVAL: Beacon interval, default is 100 TU.
+ * CFPMAX_DURATION: Cfp maximum duration, default is 100 TU.
+ */
+#define CSR12                          0x0030
+#define CSR12_BEACON_INTERVAL          FIELD32(0x0000ffff)
+#define CSR12_CFP_MAX_DURATION         FIELD32(0xffff0000)
+
+/*
+ * CSR13: Synchronization configuration register 1.
+ * All units in 1/16 TU.
+ * ATIMW_DURATION: Atim window duration.
+ * CFP_PERIOD: Cfp period, default is 0 TU.
+ */
+#define CSR13                          0x0034
+#define CSR13_ATIMW_DURATION           FIELD32(0x0000ffff)
+#define CSR13_CFP_PERIOD               FIELD32(0x00ff0000)
+
+/*
+ * CSR14: Synchronization control register.
+ * TSF_COUNT: Enable tsf auto counting.
+ * TSF_SYNC: Tsf sync, 0: disable, 1: infra, 2: ad-hoc/master mode.
+ * TBCN: Enable tbcn with reload value.
+ * TCFP: Enable tcfp & cfp / cp switching.
+ * TATIMW: Enable tatimw & atim window switching.
+ * BEACON_GEN: Enable beacon generator.
+ * CFP_COUNT_PRELOAD: Cfp count preload value.
+ * TBCM_PRELOAD: Tbcn preload value in units of 64us.
+ */
+#define CSR14                          0x0038
+#define CSR14_TSF_COUNT                        FIELD32(0x00000001)
+#define CSR14_TSF_SYNC                 FIELD32(0x00000006)
+#define CSR14_TBCN                     FIELD32(0x00000008)
+#define CSR14_TCFP                     FIELD32(0x00000010)
+#define CSR14_TATIMW                   FIELD32(0x00000020)
+#define CSR14_BEACON_GEN               FIELD32(0x00000040)
+#define CSR14_CFP_COUNT_PRELOAD                FIELD32(0x0000ff00)
+#define CSR14_TBCM_PRELOAD             FIELD32(0xffff0000)
+
+/*
+ * CSR15: Synchronization status register.
+ * CFP: ASIC is in contention-free period.
+ * ATIMW: ASIC is in ATIM window.
+ * BEACON_SENT: Beacon is send.
+ */
+#define CSR15                          0x003c
+#define CSR15_CFP                      FIELD32(0x00000001)
+#define CSR15_ATIMW                    FIELD32(0x00000002)
+#define CSR15_BEACON_SENT              FIELD32(0x00000004)
+
+/*
+ * CSR16: TSF timer register 0.
+ */
+#define CSR16                          0x0040
+#define CSR16_LOW_TSFTIMER             FIELD32(0xffffffff)
+
+/*
+ * CSR17: TSF timer register 1.
+ */
+#define CSR17                          0x0044
+#define CSR17_HIGH_TSFTIMER            FIELD32(0xffffffff)
+
+/*
+ * CSR18: IFS timer register 0.
+ * SIFS: Sifs, default is 10 us.
+ * PIFS: Pifs, default is 30 us.
+ */
+#define CSR18                          0x0048
+#define CSR18_SIFS                     FIELD32(0x0000ffff)
+#define CSR18_PIFS                     FIELD32(0xffff0000)
+
+/*
+ * CSR19: IFS timer register 1.
+ * DIFS: Difs, default is 50 us.
+ * EIFS: Eifs, default is 364 us.
+ */
+#define CSR19                          0x004c
+#define CSR19_DIFS                     FIELD32(0x0000ffff)
+#define CSR19_EIFS                     FIELD32(0xffff0000)
+
+/*
+ * CSR20: Wakeup timer register.
+ * DELAY_AFTER_TBCN: Delay after tbcn expired in units of 1/16 TU.
+ * TBCN_BEFORE_WAKEUP: Number of beacon before wakeup.
+ * AUTOWAKE: Enable auto wakeup / sleep mechanism.
+ */
+#define CSR20                          0x0050
+#define CSR20_DELAY_AFTER_TBCN         FIELD32(0x0000ffff)
+#define CSR20_TBCN_BEFORE_WAKEUP       FIELD32(0x00ff0000)
+#define CSR20_AUTOWAKE                 FIELD32(0x01000000)
+
+/*
+ * CSR21: EEPROM control register.
+ * RELOAD: Write 1 to reload eeprom content.
+ * TYPE_93C46: 1: 93c46, 0:93c66.
+ */
+#define CSR21                          0x0054
+#define CSR21_RELOAD                   FIELD32(0x00000001)
+#define CSR21_EEPROM_DATA_CLOCK                FIELD32(0x00000002)
+#define CSR21_EEPROM_CHIP_SELECT       FIELD32(0x00000004)
+#define CSR21_EEPROM_DATA_IN           FIELD32(0x00000008)
+#define CSR21_EEPROM_DATA_OUT          FIELD32(0x00000010)
+#define CSR21_TYPE_93C46               FIELD32(0x00000020)
+
+/*
+ * CSR22: CFP control register.
+ * CFP_DURATION_REMAIN: Cfp duration remain, in units of TU.
+ * RELOAD_CFP_DURATION: Write 1 to reload cfp duration remain.
+ */
+#define CSR22                          0x0058
+#define CSR22_CFP_DURATION_REMAIN      FIELD32(0x0000ffff)
+#define CSR22_RELOAD_CFP_DURATION      FIELD32(0x00010000)
+
+/*
+ * Transmit related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * TXCSR0: TX Control Register.
+ * KICK_TX: Kick tx ring.
+ * KICK_ATIM: Kick atim ring.
+ * KICK_PRIO: Kick priority ring.
+ * ABORT: Abort all transmit related ring operation.
+ */
+#define TXCSR0                         0x0060
+#define TXCSR0_KICK_TX                 FIELD32(0x00000001)
+#define TXCSR0_KICK_ATIM               FIELD32(0x00000002)
+#define TXCSR0_KICK_PRIO               FIELD32(0x00000004)
+#define TXCSR0_ABORT                   FIELD32(0x00000008)
+
+/*
+ * TXCSR1: TX Configuration Register.
+ * ACK_TIMEOUT: Ack timeout, default = sifs + 2*slottime + acktime @ 1mbps.
+ * ACK_CONSUME_TIME: Ack consume time, default = sifs + acktime @ 1mbps.
+ * TSF_OFFSET: Insert tsf offset.
+ * AUTORESPONDER: Enable auto responder which include ack & cts.
+ */
+#define TXCSR1                         0x0064
+#define TXCSR1_ACK_TIMEOUT             FIELD32(0x000001ff)
+#define TXCSR1_ACK_CONSUME_TIME                FIELD32(0x0003fe00)
+#define TXCSR1_TSF_OFFSET              FIELD32(0x00fc0000)
+#define TXCSR1_AUTORESPONDER           FIELD32(0x01000000)
+
+/*
+ * TXCSR2: Tx descriptor configuration register.
+ * TXD_SIZE: Tx descriptor size, default is 48.
+ * NUM_TXD: Number of tx entries in ring.
+ * NUM_ATIM: Number of atim entries in ring.
+ * NUM_PRIO: Number of priority entries in ring.
+ */
+#define TXCSR2                         0x0068
+#define TXCSR2_TXD_SIZE                        FIELD32(0x000000ff)
+#define TXCSR2_NUM_TXD                 FIELD32(0x0000ff00)
+#define TXCSR2_NUM_ATIM                        FIELD32(0x00ff0000)
+#define TXCSR2_NUM_PRIO                        FIELD32(0xff000000)
+
+/*
+ * TXCSR3: TX Ring Base address register.
+ */
+#define TXCSR3                         0x006c
+#define TXCSR3_TX_RING_REGISTER                FIELD32(0xffffffff)
+
+/*
+ * TXCSR4: TX Atim Ring Base address register.
+ */
+#define TXCSR4                         0x0070
+#define TXCSR4_ATIM_RING_REGISTER      FIELD32(0xffffffff)
+
+/*
+ * TXCSR5: TX Prio Ring Base address register.
+ */
+#define TXCSR5                         0x0074
+#define TXCSR5_PRIO_RING_REGISTER      FIELD32(0xffffffff)
+
+/*
+ * TXCSR6: Beacon Base address register.
+ */
+#define TXCSR6                         0x0078
+#define TXCSR6_BEACON_RING_REGISTER    FIELD32(0xffffffff)
+
+/*
+ * TXCSR7: Auto responder control register.
+ * AR_POWERMANAGEMENT: Auto responder power management bit.
+ */
+#define TXCSR7                         0x007c
+#define TXCSR7_AR_POWERMANAGEMENT      FIELD32(0x00000001)
+
+/*
+ * Receive related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * RXCSR0: RX Control Register.
+ * DISABLE_RX: Disable rx engine.
+ * DROP_CRC: Drop crc error.
+ * DROP_PHYSICAL: Drop physical error.
+ * DROP_CONTROL: Drop control frame.
+ * DROP_NOT_TO_ME: Drop not to me unicast frame.
+ * DROP_TODS: Drop frame tods bit is true.
+ * DROP_VERSION_ERROR: Drop version error frame.
+ * PASS_CRC: Pass all packets with crc attached.
+ */
+#define RXCSR0                         0x0080
+#define RXCSR0_DISABLE_RX              FIELD32(0x00000001)
+#define RXCSR0_DROP_CRC                        FIELD32(0x00000002)
+#define RXCSR0_DROP_PHYSICAL           FIELD32(0x00000004)
+#define RXCSR0_DROP_CONTROL            FIELD32(0x00000008)
+#define RXCSR0_DROP_NOT_TO_ME          FIELD32(0x00000010)
+#define RXCSR0_DROP_TODS               FIELD32(0x00000020)
+#define RXCSR0_DROP_VERSION_ERROR      FIELD32(0x00000040)
+#define RXCSR0_PASS_CRC                        FIELD32(0x00000080)
+
+/*
+ * RXCSR1: RX descriptor configuration register.
+ * RXD_SIZE: Rx descriptor size, default is 32b.
+ * NUM_RXD: Number of rx entries in ring.
+ */
+#define RXCSR1                         0x0084
+#define RXCSR1_RXD_SIZE                        FIELD32(0x000000ff)
+#define RXCSR1_NUM_RXD                 FIELD32(0x0000ff00)
+
+/*
+ * RXCSR2: RX Ring base address register.
+ */
+#define RXCSR2                         0x0088
+#define RXCSR2_RX_RING_REGISTER                FIELD32(0xffffffff)
+
+/*
+ * RXCSR3: BBP ID register for Rx operation.
+ * BBP_ID#: BBP register # id.
+ * BBP_ID#_VALID: BBP register # id is valid or not.
+ */
+#define RXCSR3                         0x0090
+#define RXCSR3_BBP_ID0                 FIELD32(0x0000007f)
+#define RXCSR3_BBP_ID0_VALID           FIELD32(0x00000080)
+#define RXCSR3_BBP_ID1                 FIELD32(0x00007f00)
+#define RXCSR3_BBP_ID1_VALID           FIELD32(0x00008000)
+#define RXCSR3_BBP_ID2                 FIELD32(0x007f0000)
+#define RXCSR3_BBP_ID2_VALID           FIELD32(0x00800000)
+#define RXCSR3_BBP_ID3                 FIELD32(0x7f000000)
+#define RXCSR3_BBP_ID3_VALID           FIELD32(0x80000000)
+
+/*
+ * RXCSR4: BBP ID register for Rx operation.
+ * BBP_ID#: BBP register # id.
+ * BBP_ID#_VALID: BBP register # id is valid or not.
+ */
+#define RXCSR4                         0x0094
+#define RXCSR4_BBP_ID4                 FIELD32(0x0000007f)
+#define RXCSR4_BBP_ID4_VALID           FIELD32(0x00000080)
+#define RXCSR4_BBP_ID5                 FIELD32(0x00007f00)
+#define RXCSR4_BBP_ID5_VALID           FIELD32(0x00008000)
+
+/*
+ * ARCSR0: Auto Responder PLCP config register 0.
+ * ARCSR0_AR_BBP_DATA#: Auto responder BBP register # data.
+ * ARCSR0_AR_BBP_ID#: Auto responder BBP register # Id.
+ */
+#define ARCSR0                         0x0098
+#define ARCSR0_AR_BBP_DATA0            FIELD32(0x000000ff)
+#define ARCSR0_AR_BBP_ID0              FIELD32(0x0000ff00)
+#define ARCSR0_AR_BBP_DATA1            FIELD32(0x00ff0000)
+#define ARCSR0_AR_BBP_ID1              FIELD32(0xff000000)
+
+/*
+ * ARCSR1: Auto Responder PLCP config register 1.
+ * ARCSR0_AR_BBP_DATA#: Auto responder BBP register # data.
+ * ARCSR0_AR_BBP_ID#: Auto responder BBP register # Id.
+ */
+#define ARCSR1                         0x009c
+#define ARCSR1_AR_BBP_DATA2            FIELD32(0x000000ff)
+#define ARCSR1_AR_BBP_ID2              FIELD32(0x0000ff00)
+#define ARCSR1_AR_BBP_DATA3            FIELD32(0x00ff0000)
+#define ARCSR1_AR_BBP_ID3              FIELD32(0xff000000)
+
+/*
+ * Miscellaneous Registers.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * PCICSR: PCI control register.
+ * BIG_ENDIAN: 1: big endian, 0: little endian.
+ * RX_TRESHOLD: Rx threshold in dw to start pci access
+ * 0: 16dw (default), 1: 8dw, 2: 4dw, 3: 32dw.
+ * TX_TRESHOLD: Tx threshold in dw to start pci access
+ * 0: 0dw (default), 1: 1dw, 2: 4dw, 3: forward.
+ * BURST_LENTH: Pci burst length 0: 4dw (default, 1: 8dw, 2: 16dw, 3:32dw.
+ * ENABLE_CLK: Enable clk_run, pci clock can't going down to non-operational.
+ */
+#define PCICSR                         0x008c
+#define PCICSR_BIG_ENDIAN              FIELD32(0x00000001)
+#define PCICSR_RX_TRESHOLD             FIELD32(0x00000006)
+#define PCICSR_TX_TRESHOLD             FIELD32(0x00000018)
+#define PCICSR_BURST_LENTH             FIELD32(0x00000060)
+#define PCICSR_ENABLE_CLK              FIELD32(0x00000080)
+
+/*
+ * CNT0: FCS error count.
+ * FCS_ERROR: FCS error count, cleared when read.
+ */
+#define CNT0                           0x00a0
+#define CNT0_FCS_ERROR                 FIELD32(0x0000ffff)
+
+/*
+ * Statistic Register.
+ * CNT1: PLCP error count.
+ * CNT2: Long error count.
+ * CNT3: CCA false alarm count.
+ * CNT4: Rx FIFO overflow count.
+ * CNT5: Tx FIFO underrun count.
+ */
+#define TIMECSR2                       0x00a8
+#define CNT1                           0x00ac
+#define CNT2                           0x00b0
+#define TIMECSR3                       0x00b4
+#define CNT3                           0x00b8
+#define CNT4                           0x00bc
+#define CNT5                           0x00c0
+
+/*
+ * Baseband Control Register.
+ */
+
+/*
+ * PWRCSR0: Power mode configuration register.
+ */
+#define PWRCSR0                                0x00c4
+
+/*
+ * Power state transition time registers.
+ */
+#define PSCSR0                         0x00c8
+#define PSCSR1                         0x00cc
+#define PSCSR2                         0x00d0
+#define PSCSR3                         0x00d4
+
+/*
+ * PWRCSR1: Manual power control / status register.
+ * Allowed state: 0 deep_sleep, 1: sleep, 2: standby, 3: awake.
+ * SET_STATE: Set state. Write 1 to trigger, self cleared.
+ * BBP_DESIRE_STATE: BBP desired state.
+ * RF_DESIRE_STATE: RF desired state.
+ * BBP_CURR_STATE: BBP current state.
+ * RF_CURR_STATE: RF current state.
+ * PUT_TO_SLEEP: Put to sleep. Write 1 to trigger, self cleared.
+ */
+#define PWRCSR1                                0x00d8
+#define PWRCSR1_SET_STATE              FIELD32(0x00000001)
+#define PWRCSR1_BBP_DESIRE_STATE       FIELD32(0x00000006)
+#define PWRCSR1_RF_DESIRE_STATE                FIELD32(0x00000018)
+#define PWRCSR1_BBP_CURR_STATE         FIELD32(0x00000060)
+#define PWRCSR1_RF_CURR_STATE          FIELD32(0x00000180)
+#define PWRCSR1_PUT_TO_SLEEP           FIELD32(0x00000200)
+
+/*
+ * TIMECSR: Timer control register.
+ * US_COUNT: 1 us timer count in units of clock cycles.
+ * US_64_COUNT: 64 us timer count in units of 1 us timer.
+ * BEACON_EXPECT: Beacon expect window.
+ */
+#define TIMECSR                                0x00dc
+#define TIMECSR_US_COUNT               FIELD32(0x000000ff)
+#define TIMECSR_US_64_COUNT            FIELD32(0x0000ff00)
+#define TIMECSR_BEACON_EXPECT          FIELD32(0x00070000)
+
+/*
+ * MACCSR0: MAC configuration register 0.
+ */
+#define MACCSR0                                0x00e0
+
+
+/*
+ * MACCSR1: MAC configuration register 1.
+ * KICK_RX: Kick one-shot rx in one-shot rx mode.
+ * ONESHOT_RXMODE: Enable one-shot rx mode for debugging.
+ * BBPRX_RESET_MODE: Ralink bbp rx reset mode.
+ * AUTO_TXBBP: Auto tx logic access bbp control register.
+ * AUTO_RXBBP: Auto rx logic access bbp control register.
+ * LOOPBACK: Loopback mode. 0: normal, 1: internal, 2: external, 3:rsvd.
+ * INTERSIL_IF: Intersil if calibration pin.
+ */
+#define MACCSR1                                0x00e4
+#define MACCSR1_KICK_RX                        FIELD32(0x00000001)
+#define MACCSR1_ONESHOT_RXMODE         FIELD32(0x00000002)
+#define MACCSR1_BBPRX_RESET_MODE       FIELD32(0x00000004)
+#define MACCSR1_AUTO_TXBBP             FIELD32(0x00000008)
+#define MACCSR1_AUTO_RXBBP             FIELD32(0x00000010)
+#define MACCSR1_LOOPBACK               FIELD32(0x00000060)
+#define MACCSR1_INTERSIL_IF            FIELD32(0x00000080)
+
+/*
+ * RALINKCSR: Ralink Rx auto-reset BBCR.
+ * AR_BBP_DATA#: Auto reset BBP register # data.
+ * AR_BBP_ID#: Auto reset BBP register # id.
+ */
+#define RALINKCSR                      0x00e8
+#define RALINKCSR_AR_BBP_DATA0         FIELD32(0x000000ff)
+#define RALINKCSR_AR_BBP_ID0           FIELD32(0x0000ff00)
+#define RALINKCSR_AR_BBP_DATA1         FIELD32(0x00ff0000)
+#define RALINKCSR_AR_BBP_ID1           FIELD32(0xff000000)
+
+/*
+ * BCNCSR: Beacon interval control register.
+ * CHANGE: Write one to change beacon interval.
+ * DELTATIME: The delta time value.
+ * NUM_BEACON: Number of beacon according to mode.
+ * MODE: Please refer to asic specs.
+ * PLUS: Plus or minus delta time value.
+ */
+#define BCNCSR                         0x00ec
+#define BCNCSR_CHANGE                  FIELD32(0x00000001)
+#define BCNCSR_DELTATIME               FIELD32(0x0000001e)
+#define BCNCSR_NUM_BEACON              FIELD32(0x00001fe0)
+#define BCNCSR_MODE                    FIELD32(0x00006000)
+#define BCNCSR_PLUS                    FIELD32(0x00008000)
+
+/*
+ * BBP / RF / IF Control Register.
+ */
+
+/*
+ * BBPCSR: BBP serial control register.
+ * VALUE: Register value to program into BBP.
+ * REGNUM: Selected BBP register.
+ * BUSY: 1: asic is busy execute BBP programming.
+ * WRITE_CONTROL: 1: write BBP, 0: read BBP.
+ */
+#define BBPCSR                         0x00f0
+#define BBPCSR_VALUE                   FIELD32(0x000000ff)
+#define BBPCSR_REGNUM                  FIELD32(0x00007f00)
+#define BBPCSR_BUSY                    FIELD32(0x00008000)
+#define BBPCSR_WRITE_CONTROL           FIELD32(0x00010000)
+
+/*
+ * RFCSR: RF serial control register.
+ * VALUE: Register value + id to program into rf/if.
+ * NUMBER_OF_BITS: Number of bits used in value (i:20, rfmd:22).
+ * IF_SELECT: Chip to program: 0: rf, 1: if.
+ * PLL_LD: Rf pll_ld status.
+ * BUSY: 1: asic is busy execute rf programming.
+ */
+#define RFCSR                          0x00f4
+#define RFCSR_VALUE                    FIELD32(0x00ffffff)
+#define RFCSR_NUMBER_OF_BITS           FIELD32(0x1f000000)
+#define RFCSR_IF_SELECT                        FIELD32(0x20000000)
+#define RFCSR_PLL_LD                   FIELD32(0x40000000)
+#define RFCSR_BUSY                     FIELD32(0x80000000)
+
+/*
+ * LEDCSR: LED control register.
+ * ON_PERIOD: On period, default 70ms.
+ * OFF_PERIOD: Off period, default 30ms.
+ * LINK: 0: linkoff, 1: linkup.
+ * ACTIVITY: 0: idle, 1: active.
+ */
+#define LEDCSR                         0x00f8
+#define LEDCSR_ON_PERIOD               FIELD32(0x000000ff)
+#define LEDCSR_OFF_PERIOD              FIELD32(0x0000ff00)
+#define LEDCSR_LINK                    FIELD32(0x00010000)
+#define LEDCSR_ACTIVITY                        FIELD32(0x00020000)
+
+/*
+ * ASIC pointer information.
+ * RXPTR: Current RX ring address.
+ * TXPTR: Current Tx ring address.
+ * PRIPTR: Current Priority ring address.
+ * ATIMPTR: Current ATIM ring address.
+ */
+#define RXPTR                          0x0100
+#define TXPTR                          0x0104
+#define PRIPTR                         0x0108
+#define ATIMPTR                                0x010c
+
+/*
+ * GPIO and others.
+ */
+
+/*
+ * GPIOCSR: GPIO control register.
+ */
+#define GPIOCSR                                0x0120
+#define GPIOCSR_BIT0                   FIELD32(0x00000001)
+#define GPIOCSR_BIT1                   FIELD32(0x00000002)
+#define GPIOCSR_BIT2                   FIELD32(0x00000004)
+#define GPIOCSR_BIT3                   FIELD32(0x00000008)
+#define GPIOCSR_BIT4                   FIELD32(0x00000010)
+#define GPIOCSR_BIT5                   FIELD32(0x00000020)
+#define GPIOCSR_BIT6                   FIELD32(0x00000040)
+#define GPIOCSR_BIT7                   FIELD32(0x00000080)
+
+/*
+ * BBPPCSR: BBP Pin control register.
+ */
+#define BBPPCSR                                0x0124
+
+/*
+ * BCNCSR1: Tx BEACON offset time control register.
+ * PRELOAD: Beacon timer offset in units of usec.
+ */
+#define BCNCSR1                                0x0130
+#define BCNCSR1_PRELOAD                        FIELD32(0x0000ffff)
+
+/*
+ * MACCSR2: TX_PE to RX_PE turn-around time control register
+ * DELAY: RX_PE low width, in units of pci clock cycle.
+ */
+#define MACCSR2                                0x0134
+#define MACCSR2_DELAY                  FIELD32(0x000000ff)
+
+/*
+ * ARCSR2: 1 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR2                         0x013c
+#define ARCSR2_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR2_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR2_LENGTH_LOW              FIELD32(0x00ff0000)
+#define ARCSR2_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR3: 2 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR3                         0x0140
+#define ARCSR3_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR3_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR3_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR4: 5.5 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR4                         0x0144
+#define ARCSR4_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR4_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR4_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR5: 11 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR5                         0x0148
+#define ARCSR5_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR5_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR5_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * RF registers
+ */
+#define RF1_TUNER                      FIELD32(0x00020000)
+#define RF3_TUNER                      FIELD32(0x00000100)
+#define RF3_TXPOWER                    FIELD32(0x00003e00)
+
+/*
+ * EEPROM content.
+ * The wordsize of the EEPROM is 16 bits.
+ */
+
+/*
+ * HW MAC address.
+ */
+#define EEPROM_MAC_ADDR_0              0x0002
+#define EEPROM_MAC_ADDR_BYTE0          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE1          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR1               0x0003
+#define EEPROM_MAC_ADDR_BYTE2          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE3          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR_2              0x0004
+#define EEPROM_MAC_ADDR_BYTE4          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE5          FIELD16(0xff00)
+
+/*
+ * EEPROM antenna.
+ * ANTENNA_NUM: Number of antenna's.
+ * TX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RF_TYPE: Rf_type of this adapter.
+ * LED_MODE: 0: default, 1: TX/RX activity,2: Single (ignore link), 3: rsvd.
+ * RX_AGCVGC: 0: disable, 1:enable BBP R13 tuning.
+ * HARDWARE_RADIO: 1: Hardware controlled radio. Read GPIO0.
+ */
+#define EEPROM_ANTENNA                 0x0b
+#define EEPROM_ANTENNA_NUM             FIELD16(0x0003)
+#define EEPROM_ANTENNA_TX_DEFAULT      FIELD16(0x000c)
+#define EEPROM_ANTENNA_RX_DEFAULT      FIELD16(0x0030)
+#define EEPROM_ANTENNA_RF_TYPE         FIELD16(0x0040)
+#define EEPROM_ANTENNA_LED_MODE                FIELD16(0x0180)
+#define EEPROM_ANTENNA_RX_AGCVGC_TUNING        FIELD16(0x0200)
+#define EEPROM_ANTENNA_HARDWARE_RADIO  FIELD16(0x0400)
+
+/*
+ * EEPROM BBP.
+ */
+#define EEPROM_BBP_START               0x0c
+#define EEPROM_BBP_SIZE                        7
+#define EEPROM_BBP_VALUE               FIELD16(0x00ff)
+#define EEPROM_BBP_REG_ID              FIELD16(0xff00)
+
+/*
+ * EEPROM TXPOWER
+ */
+#define EEPROM_TXPOWER_START           0x13
+#define EEPROM_TXPOWER_SIZE            7
+#define EEPROM_TXPOWER_1               FIELD16(0x00ff)
+#define EEPROM_TXPOWER_2               FIELD16(0xff00)
+
+/*
+ * BBP content.
+ * The wordsize of the BBP is 8 bits.
+ */
+
+/*
+ * BBP_R1: TX antenna control
+ */
+#define BBP_R1_TX_ANTENNA              FIELD8(0x03)
+
+/*
+ * BBP_R4: RX antenna control
+ */
+#define BBP_R4_RX_ANTENNA              FIELD8(0x06)
+
+/*
+ * DMA descriptor defines.
+ */
+#define TXD_DESC_SIZE                  ( 8 * sizeof(struct data_desc) )
+#define RXD_DESC_SIZE                  ( 8 * sizeof(struct data_desc) )
+
+/*
+ * TX descriptor format for TX, PRIO, ATIM and Beacon Ring.
+ */
+
+/*
+ * Word0
+ */
+#define TXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define TXD_W0_VALID                   FIELD32(0x00000002)
+#define TXD_W0_RESULT                  FIELD32(0x0000001c)
+#define TXD_W0_RETRY_COUNT             FIELD32(0x000000e0)
+#define TXD_W0_MORE_FRAG               FIELD32(0x00000100)
+#define TXD_W0_ACK                     FIELD32(0x00000200)
+#define TXD_W0_TIMESTAMP               FIELD32(0x00000400)
+#define TXD_W0_RTS                     FIELD32(0x00000800)
+#define TXD_W0_IFS                     FIELD32(0x00006000)
+#define TXD_W0_RETRY_MODE              FIELD32(0x00008000)
+#define TXD_W0_AGC                     FIELD32(0x00ff0000)
+#define TXD_W0_R2                      FIELD32(0xff000000)
+
+/*
+ * Word1
+ */
+#define TXD_W1_BUFFER_ADDRESS          FIELD32(0xffffffff)
+
+/*
+ * Word2
+ */
+#define TXD_W2_BUFFER_LENGTH           FIELD32(0x0000ffff)
+#define TXD_W2_DATABYTE_COUNT          FIELD32(0xffff0000)
+
+/*
+ * Word3 & 4: PLCP information
+ */
+#define TXD_W3_PLCP_SIGNAL             FIELD32(0x0000ffff)
+#define TXD_W3_PLCP_SERVICE            FIELD32(0xffff0000)
+#define TXD_W4_PLCP_LENGTH_LOW         FIELD32(0x0000ffff)
+#define TXD_W4_PLCP_LENGTH_HIGH                FIELD32(0xffff0000)
+
+/*
+ * Word5
+ */
+#define TXD_W5_BBCR4                   FIELD32(0x0000ffff)
+#define TXD_W5_AGC_REG                 FIELD32(0x007f0000)
+#define TXD_W5_AGC_REG_VALID           FIELD32(0x00800000)
+#define TXD_W5_XXX_REG                 FIELD32(0x7f000000)
+#define TXD_W5_XXX_REG_VALID           FIELD32(0x80000000)
+
+/*
+ * Word6
+ */
+#define TXD_W6_SK_BUFF                 FIELD32(0xffffffff)
+
+/*
+ * Word7
+ */
+#define TXD_W7_RESERVED                        FIELD32(0xffffffff)
+
+/*
+ * RX descriptor format for RX Ring.
+ */
+
+/*
+ * Word0
+ */
+#define RXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define RXD_W0_UNICAST_TO_ME           FIELD32(0x00000002)
+#define RXD_W0_MULTICAST               FIELD32(0x00000004)
+#define RXD_W0_BROADCAST               FIELD32(0x00000008)
+#define RXD_W0_MY_BSS                  FIELD32(0x00000010)
+#define RXD_W0_CRC                     FIELD32(0x00000020)
+#define RXD_W0_PHYSICAL_ERROR          FIELD32(0x00000080)
+#define RXD_W0_DATABYTE_COUNT          FIELD32(0xffff0000)
+
+/*
+ * Word1
+ */
+#define RXD_W1_BUFFER_ADDRESS          FIELD32(0xffffffff)
+
+/*
+ * Word2
+ */
+#define RXD_W2_BUFFER_LENGTH           FIELD32(0x0000ffff)
+#define RXD_W2_SIGNAL                  FIELD32(0x00ff0000)
+#define RXD_W2_RSSI                    FIELD32(0xff000000)
+
+/*
+ * Word3
+ */
+#define RXD_W3_BBR2                    FIELD32(0x000000ff)
+#define RXD_W3_BBR3                    FIELD32(0x0000ff00)
+#define RXD_W3_BBR4                    FIELD32(0x00ff0000)
+#define RXD_W3_BBR5                    FIELD32(0xff000000)
+
+/*
+ * Word4
+ */
+#define RXD_W4_RX_END_TIME             FIELD32(0xffffffff)
+
+/*
+ * Word5 & 6 & 7: Reserved
+ */
+#define RXD_W5_RESERVED                        FIELD32(0xffffffff)
+#define RXD_W6_RESERVED                        FIELD32(0xffffffff)
+#define RXD_W7_RESERVED                        FIELD32(0xffffffff)
+
+/*
+ * Macro's for converting txpower from EEPROM to dscape value
+ * and from dscape value to register value.
+ * NOTE: Logics in rt2400pci for txpower are reversed
+ * compared to the other rt2x00 drivers. A higher txpower
+ * value means that the txpower must be lowered. This is
+ * important when converting the value coming from the
+ * dscape stack to the rt2400 acceptable value.
+ */
+#define MIN_TXPOWER    31
+#define MAX_TXPOWER    62
+#define DEFAULT_TXPOWER        39
+
+#define TXPOWER_FROM_DEV(__txpower)                                    \
+({                                                                     \
+       ((__txpower) > MAX_TXPOWER) ? DEFAULT_TXPOWER - MIN_TXPOWER :   \
+       ((__txpower) < MIN_TXPOWER) ? DEFAULT_TXPOWER - MIN_TXPOWER :   \
+       (((__txpower) - MAX_TXPOWER) + MIN_TXPOWER);                    \
+})
+
+#define TXPOWER_TO_DEV(__txpower)                      \
+({                                                     \
+       (__txpower) += MIN_TXPOWER;                     \
+       ((__txpower) <= MIN_TXPOWER) ? MAX_TXPOWER :    \
+       (((__txpower) >= MAX_TXPOWER) ? MIN_TXPOWER :   \
+       (MAX_TXPOWER - ((__txpower) - MIN_TXPOWER)));   \
+})
+
+#endif /* RT2400PCI_H */
diff --git a/package/rt2x00/src/rt2500pci.c b/package/rt2x00/src/rt2500pci.c
new file mode 100644 (file)
index 0000000..61d7e74
--- /dev/null
@@ -0,0 +1,1907 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2500pci
+       Abstract: rt2500pci device specific routines.
+       Supported chipsets: RT2560.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2500pci"
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/version.h>
+#include <linux/init.h>
+#include <linux/pci.h>
+#include <linux/dma-mapping.h>
+#include <linux/delay.h>
+#include <linux/etherdevice.h>
+#include <linux/eeprom_93cx6.h>
+
+#include <asm/io.h>
+
+#include "rt2x00.h"
+#include "rt2x00pci.h"
+#include "rt2500pci.h"
+
+/*
+ * Register access.
+ * All access to the CSR registers will go through the methods
+ * rt2x00pci_register_read and rt2x00pci_register_write.
+ * BBP and RF register require indirect register access,
+ * and use the CSR registers BBPCSR and RFCSR to achieve this.
+ * These indirect registers work with busy bits,
+ * and we will try maximal REGISTER_BUSY_COUNT times to access
+ * the register while taking a REGISTER_BUSY_DELAY us delay
+ * between each attampt. When the busy bit is still set at that time,
+ * the access attempt is considered to have failed,
+ * and we will print an error.
+ */
+static u32 rt2500pci_bbp_check(const struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, BBPCSR, &reg);
+               if (!rt2x00_get_field32(reg, BBPCSR_BUSY))
+                       break;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       return reg;
+}
+
+static void rt2500pci_bbp_write(const struct rt2x00_dev *rt2x00dev,
+       const u8 reg_id, const u8 value)
+{
+       u32 reg;
+
+       /*
+        *  Wait until the BBP becomes ready.
+        */
+       reg = rt2500pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Write failed.\n");
+               return;
+       }
+
+       /*
+        * Write the data into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, BBPCSR_VALUE, value);
+       rt2x00_set_field32(&reg, BBPCSR_REGNUM, reg_id);
+       rt2x00_set_field32(&reg, BBPCSR_BUSY, 1);
+       rt2x00_set_field32(&reg, BBPCSR_WRITE_CONTROL, 1);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR, reg);
+}
+
+static void rt2500pci_bbp_read(const struct rt2x00_dev *rt2x00dev,
+       const u8 reg_id, u8 *value)
+{
+       u32 reg;
+
+       /*
+        *  Wait until the BBP becomes ready.
+        */
+       reg = rt2500pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Read failed.\n");
+               return;
+       }
+
+       /*
+        * Write the request into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field32(&reg, BBPCSR_REGNUM, reg_id);
+       rt2x00_set_field32(&reg, BBPCSR_BUSY, 1);
+       rt2x00_set_field32(&reg, BBPCSR_WRITE_CONTROL, 0);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR, reg);
+
+       /*
+        *  Wait until the BBP becomes ready.
+        */
+       reg = rt2500pci_bbp_check(rt2x00dev);
+       if (rt2x00_get_field32(reg, BBPCSR_BUSY)) {
+               ERROR(rt2x00dev, "BBPCSR register busy. Read failed.\n");
+               *value = 0xff;
+               return;
+       }
+
+       *value = rt2x00_get_field32(reg, BBPCSR_VALUE);
+}
+
+static void rt2500pci_rf_write(const struct rt2x00_dev *rt2x00dev,
+       const u32 value)
+{
+       u32 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, RFCSR, &reg);
+               if (!rt2x00_get_field32(reg, RFCSR_BUSY))
+                       goto rf_write;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "RFCSR register busy. Write failed.\n");
+       return;
+
+rf_write:
+       reg = 0;
+       rt2x00_set_field32(&reg, RFCSR_VALUE, value);
+       rt2x00_set_field32(&reg, RFCSR_NUMBER_OF_BITS, 20);
+       rt2x00_set_field32(&reg, RFCSR_IF_SELECT, 0);
+       rt2x00_set_field32(&reg, RFCSR_BUSY, 1);
+
+       rt2x00pci_register_write(rt2x00dev, RFCSR, reg);
+}
+
+static void rt2500pci_eepromregister_read(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR21, &reg);
+
+       eeprom->reg_data_in = !!rt2x00_get_field32(reg,
+               CSR21_EEPROM_DATA_IN);
+       eeprom->reg_data_out = !!rt2x00_get_field32(reg,
+               CSR21_EEPROM_DATA_OUT);
+       eeprom->reg_data_clock = !!rt2x00_get_field32(reg,
+               CSR21_EEPROM_DATA_CLOCK);
+       eeprom->reg_chip_select = !!rt2x00_get_field32(reg,
+               CSR21_EEPROM_CHIP_SELECT);
+}
+
+static void rt2500pci_eepromregister_write(struct eeprom_93cx6 *eeprom)
+{
+       struct rt2x00_dev *rt2x00dev = eeprom->data;
+       u32 reg = 0;
+
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_IN,
+               !!eeprom->reg_data_in);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_OUT,
+               !!eeprom->reg_data_out);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_DATA_CLOCK,
+               !!eeprom->reg_data_clock);
+       rt2x00_set_field32(&reg, CSR21_EEPROM_CHIP_SELECT,
+               !!eeprom->reg_chip_select);
+
+       rt2x00pci_register_write(rt2x00dev, CSR21, reg);
+}
+
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+#define CSR_OFFSET(__word)     ( CSR_REG_BASE + ((__word) * sizeof(u32)) )
+
+static void rt2500pci_read_csr(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00pci_register_read(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static void rt2500pci_write_csr(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00pci_register_write(rt2x00dev, CSR_OFFSET(word), *((u32*)data));
+}
+
+static void rt2500pci_read_eeprom(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00_eeprom_read(rt2x00dev, word, data);
+}
+
+static void rt2500pci_write_eeprom(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00_eeprom_write(rt2x00dev, word, *((u16*)data));
+}
+
+static void rt2500pci_read_bbp(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2500pci_bbp_read(rt2x00dev, word, data);
+}
+
+static void rt2500pci_write_bbp(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2500pci_bbp_write(rt2x00dev, word, *((u8*)data));
+}
+
+static const struct rt2x00debug rt2500pci_rt2x00debug = {
+       .owner          = THIS_MODULE,
+       .reg_csr        = {
+               .read           = rt2500pci_read_csr,
+               .write          = rt2500pci_write_csr,
+               .word_size      = sizeof(u32),
+               .word_count     = CSR_REG_SIZE / sizeof(u32),
+       },
+       .reg_eeprom     = {
+               .read           = rt2500pci_read_eeprom,
+               .write          = rt2500pci_write_eeprom,
+               .word_size      = sizeof(u16),
+               .word_count     = EEPROM_SIZE / sizeof(u16),
+       },
+       .reg_bbp        = {
+               .read           = rt2500pci_read_bbp,
+               .write          = rt2500pci_write_bbp,
+               .word_size      = sizeof(u8),
+               .word_count     = BBP_SIZE / sizeof(u8),
+       },
+};
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+#ifdef CONFIG_RT2500PCI_RFKILL
+static int rt2500pci_rfkill_poll(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, GPIOCSR, &reg);
+       return rt2x00_get_field32(reg, GPIOCSR_BIT0);
+}
+#endif /* CONFIG_RT2400PCI_RFKILL */
+
+/*
+ * Configuration handlers.
+ */
+static void rt2500pci_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid)
+{
+       u32 reg[2];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, bssid, ETH_ALEN);
+
+       /*
+        * The BSSID is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, CSR5, &reg, sizeof(reg));
+}
+
+static void rt2500pci_config_promisc(struct rt2x00_dev *rt2x00dev,
+       const int promisc)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+       rt2x00_set_field32(&reg, RXCSR0_DROP_NOT_TO_ME, !promisc);
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+}
+
+static void rt2500pci_config_type(struct rt2x00_dev *rt2x00dev,
+       const int type)
+{
+       u32 reg;
+
+       rt2x00pci_register_write(rt2x00dev, CSR14, 0);
+
+       /*
+        * Apply hardware packet filter.
+        */
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+
+       if (!is_monitor_present(&rt2x00dev->interface) &&
+           (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_STA))
+               rt2x00_set_field32(&reg, RXCSR0_DROP_TODS, 1);
+       else
+               rt2x00_set_field32(&reg, RXCSR0_DROP_TODS, 0);
+
+       rt2x00_set_field32(&reg, RXCSR0_DROP_CRC, 1);
+       if (is_monitor_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, RXCSR0_DROP_PHYSICAL, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CONTROL, 0);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_VERSION_ERROR, 0);
+       } else {
+               rt2x00_set_field32(&reg, RXCSR0_DROP_PHYSICAL, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_CONTROL, 1);
+               rt2x00_set_field32(&reg, RXCSR0_DROP_VERSION_ERROR, 1);
+       }
+
+       rt2x00_set_field32(&reg, RXCSR0_DROP_MCAST, 0);
+       rt2x00_set_field32(&reg, RXCSR0_DROP_BCAST, 0);
+
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+
+       /*
+        * Enable beacon config
+        */
+       rt2x00pci_register_read(rt2x00dev, BCNCSR1, &reg);
+       rt2x00_set_field32(&reg, BCNCSR1_PRELOAD,
+               PREAMBLE + get_duration(IEEE80211_HEADER, 2));
+       rt2x00_set_field32(&reg, BCNCSR1_BEACON_CWMIN,
+               rt2x00_get_ring(rt2x00dev, IEEE80211_TX_QUEUE_BEACON)
+                       ->tx_params.cw_min);
+       rt2x00pci_register_write(rt2x00dev, BCNCSR1, reg);
+
+       /*
+        * Enable synchronisation.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR14, &reg);
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field32(&reg, CSR14_TSF_COUNT, 1);
+               rt2x00_set_field32(&reg, CSR14_TBCN, 1);
+       }
+
+       rt2x00_set_field32(&reg, CSR14_BEACON_GEN, 0);
+       if (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_AP)
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 2);
+       else if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 1);
+       else if (is_monitor_present(&rt2x00dev->interface) &&
+                !is_interface_present(&rt2x00dev->interface))
+               rt2x00_set_field32(&reg, CSR14_TSF_SYNC, 0);
+
+       rt2x00pci_register_write(rt2x00dev, CSR14, reg);
+}
+
+static void rt2500pci_config_channel(struct rt2x00_dev *rt2x00dev,
+       const int value, const int channel, const int txpower)
+{
+       u32 rf1 = rt2x00dev->rf1;
+       u32 rf2 = value;
+       u32 rf3 = rt2x00dev->rf3;
+       u32 rf4 = rt2x00dev->rf4;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525) ||
+           rt2x00_rf(&rt2x00dev->chip, RF2525E))
+               rf2 |= 0x00080000;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525E) && channel == 14)
+               rf4 |= 0x00000010;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               if (channel < 14) {
+                       rf1 = 0x00022020;
+                       rf4 = 0x00000a0b;
+               } else if (channel == 14) {
+                       rf1 = 0x00022010;
+                       rf4 = 0x00000a1b;
+               } else if (channel < 64) {
+                       rf1 = 0x00022010;
+                       rf4 = 0x00000a1f;
+               } else if (channel < 140) {
+                       rf1 = 0x00022010;
+                       rf4 = 0x00000a0f;
+               } else if (channel < 161) {
+                       rf1 = 0x00022020;
+                       rf4 = 0x00000a07;
+               }
+       }
+
+       /*
+        * Set TXpower.
+        */
+       rt2x00_set_field32(&rf3, RF3_TXPOWER, TXPOWER_TO_DEV(txpower));
+
+       /*
+        * Switch on tuning bits.
+        * For RT2523 devices we do not need to update the R1 register.
+        */
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2523))
+               rt2x00_set_field32(&rf1, RF1_TUNER, 1);
+       rt2x00_set_field32(&rf3, RF3_TUNER, 1);
+
+       /*
+        * For RT2525 we should first set the channel to half band higher.
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525)) {
+               static const u32 vals[] = {
+                       0x00080cbe, 0x00080d02, 0x00080d06, 0x00080d0a,
+                       0x00080d0e, 0x00080d12, 0x00080d16, 0x00080d1a,
+                       0x00080d1e, 0x00080d22, 0x00080d26, 0x00080d2a,
+                       0x00080d2e, 0x00080d3a
+               };
+
+               rt2500pci_rf_write(rt2x00dev, rf1);
+               rt2500pci_rf_write(rt2x00dev, vals[channel - 1]);
+               rt2500pci_rf_write(rt2x00dev, rf3);
+               if (rf4)
+                       rt2500pci_rf_write(rt2x00dev, rf4);
+       }
+
+       rt2500pci_rf_write(rt2x00dev, rf1);
+       rt2500pci_rf_write(rt2x00dev, rf2);
+       rt2500pci_rf_write(rt2x00dev, rf3);
+       if (rf4)
+               rt2500pci_rf_write(rt2x00dev, rf4);
+
+       /*
+        * Channel 14 requires the Japan filter bit to be set.
+        */
+       rt2500pci_bbp_write(rt2x00dev, 70, (channel == 14) ? 0x4e : 0x46);
+
+       msleep(1);
+
+       /*
+        * Switch off tuning bits.
+        * For RT2523 devices we do not need to update the R1 register.
+        */
+       rt2x00_set_field32(&rf1, RF1_TUNER, 0);
+       rt2x00_set_field32(&rf3, RF3_TUNER, 0);
+
+
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2523))
+               rt2500pci_rf_write(rt2x00dev, rf1);
+
+       rt2500pci_rf_write(rt2x00dev, rf3);
+
+       /*
+        * Update rf fields
+        */
+       rt2x00dev->rf1 = rf1;
+       rt2x00dev->rf2 = rf2;
+       rt2x00dev->rf3 = rf3;
+       rt2x00dev->rf4 = rf4;
+       rt2x00dev->tx_power = txpower;
+
+       /*
+        * Clear false CRC during channel switch.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &rf1);
+}
+
+static void rt2500pci_config_txpower(struct rt2x00_dev *rt2x00dev,
+       const int txpower)
+{
+       rt2x00_set_field32(&rt2x00dev->rf3, RF3_TXPOWER,
+               TXPOWER_TO_DEV(txpower));
+       rt2500pci_rf_write(rt2x00dev, rt2x00dev->rf3);
+
+}
+
+static void rt2500pci_config_antenna(struct rt2x00_dev *rt2x00dev,
+       const int antenna_tx, const int antenna_rx)
+{
+       u32 reg;
+       u8 r14;
+       u8 r2;
+
+       rt2x00pci_register_read(rt2x00dev, BBPCSR1, &reg);
+       rt2500pci_bbp_read(rt2x00dev, 14, &r14);
+       rt2500pci_bbp_read(rt2x00dev, 2, &r2);
+
+       /*
+        * Configure the TX antenna.
+        */
+       if (antenna_tx == ANTENNA_DIVERSITY) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 2);
+               rt2x00_set_field32(&reg, BBPCSR1_CCK, 2);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM, 2);
+       } else if (antenna_tx == ANTENNA_A) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 0);
+               rt2x00_set_field32(&reg, BBPCSR1_CCK, 0);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM, 0);
+       } else if (antenna_tx == ANTENNA_B) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 2);
+               rt2x00_set_field32(&reg, BBPCSR1_CCK, 2);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM, 2);
+       }
+
+       /*
+        * Configure the RX antenna.
+        */
+       if (antenna_rx == ANTENNA_DIVERSITY)
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 2);
+       else if (antenna_rx == ANTENNA_A)
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 0);
+       else if (antenna_rx == ANTENNA_B)
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 2);
+
+       /*
+        * RT2525E and RT5222 need to flip TX I/Q
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525E) ||
+           rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_IQ_FLIP, 1);
+               rt2x00_set_field32(&reg, BBPCSR1_CCK_FLIP, 1);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM_FLIP, 1);
+
+               /*
+                * RT2525E does not need RX I/Q Flip.
+                */
+               if (rt2x00_rf(&rt2x00dev->chip, RF2525E))
+                       rt2x00_set_field8(&r14, BBP_R14_RX_IQ_FLIP, 0);
+       } else {
+               rt2x00_set_field32(&reg, BBPCSR1_CCK_FLIP, 0);
+               rt2x00_set_field32(&reg, BBPCSR1_OFDM_FLIP, 0);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR1, reg);
+       rt2500pci_bbp_write(rt2x00dev, 14, r14);
+       rt2500pci_bbp_write(rt2x00dev, 2, r2);
+}
+
+static void rt2500pci_config_duration(struct rt2x00_dev *rt2x00dev,
+       const int short_slot_time, const int beacon_int)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_SLOT_TIME,
+               short_slot_time ? SHORT_SLOT_TIME : SLOT_TIME);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR18, &reg);
+       rt2x00_set_field32(&reg, CSR18_SIFS, SIFS);
+       rt2x00_set_field32(&reg, CSR18_PIFS,
+               short_slot_time ? SHORT_PIFS : PIFS);
+       rt2x00pci_register_write(rt2x00dev, CSR18, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR19, &reg);
+       rt2x00_set_field32(&reg, CSR19_DIFS,
+               short_slot_time ? SHORT_DIFS : DIFS);
+       rt2x00_set_field32(&reg, CSR19_EIFS, EIFS);
+       rt2x00pci_register_write(rt2x00dev, CSR19, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR1, &reg);
+       rt2x00_set_field32(&reg, TXCSR1_TSF_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&reg, TXCSR1_AUTORESPONDER, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR12, &reg);
+       rt2x00_set_field32(&reg, CSR12_BEACON_INTERVAL, beacon_int * 16);
+       rt2x00_set_field32(&reg, CSR12_CFP_MAX_DURATION, beacon_int * 16);
+       rt2x00pci_register_write(rt2x00dev, CSR12, reg);
+}
+
+static void rt2500pci_config_rate(struct rt2x00_dev *rt2x00dev, const int rate)
+{
+       struct ieee80211_conf *conf = &rt2x00dev->hw->conf;
+       u32 reg;
+       u32 preamble;
+       u16 value;
+
+       preamble = DEVICE_GET_RATE_FIELD(rate, PREAMBLE)
+               ? SHORT_PREAMBLE : PREAMBLE;
+
+       reg = DEVICE_GET_RATE_FIELD(rate, RATEMASK) & DEV_BASIC_RATE;
+       rt2x00pci_register_write(rt2x00dev, ARCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR1, &reg);
+       value = ((conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME) ?
+                SHORT_DIFS :  DIFS) +
+               PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXCSR1_ACK_TIMEOUT, value);
+       value = SIFS + PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field32(&reg, TXCSR1_ACK_CONSUME_TIME, value);
+       rt2x00pci_register_write(rt2x00dev, TXCSR1, reg);
+
+       preamble = DEVICE_GET_RATE_FIELD(rate, PREAMBLE) ? 0x08 : 0x00;
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR2, &reg);
+       rt2x00_set_field32(&reg, ARCSR2_SIGNAL, 0x00 | preamble);
+       rt2x00_set_field32(&reg, ARCSR2_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 10));
+       rt2x00pci_register_write(rt2x00dev, ARCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR3, &reg);
+       rt2x00_set_field32(&reg, ARCSR3_SIGNAL, 0x01 | preamble);
+       rt2x00_set_field32(&reg, ARCSR3_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 20));
+       rt2x00pci_register_write(rt2x00dev, ARCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR4, &reg);
+       rt2x00_set_field32(&reg, ARCSR4_SIGNAL, 0x02 | preamble);
+       rt2x00_set_field32(&reg, ARCSR4_SERVICE, 0x04);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 55));
+       rt2x00pci_register_write(rt2x00dev, ARCSR4, reg);
+
+       rt2x00pci_register_read(rt2x00dev, ARCSR5, &reg);
+       rt2x00_set_field32(&reg, ARCSR5_SIGNAL, 0x03 | preamble);
+       rt2x00_set_field32(&reg, ARCSR5_SERVICE, 0x84);
+       rt2x00_set_field32(&reg, ARCSR2_LENGTH, get_duration(ACK_SIZE, 110));
+       rt2x00pci_register_write(rt2x00dev, ARCSR5, reg);
+}
+
+static void rt2500pci_config_phymode(struct rt2x00_dev *rt2x00dev,
+       const int phymode)
+{
+       struct ieee80211_hw_mode *mode;
+       struct ieee80211_rate *rate;
+
+       if (phymode == MODE_IEEE80211A)
+               rt2x00dev->curr_hwmode = HWMODE_A;
+       else if (phymode == MODE_IEEE80211B)
+               rt2x00dev->curr_hwmode = HWMODE_B;
+       else
+               rt2x00dev->curr_hwmode = HWMODE_G;
+
+       mode = &rt2x00dev->hwmodes[rt2x00dev->curr_hwmode];
+       rate = &mode->rates[mode->num_rates - 1];
+
+       rt2500pci_config_rate(rt2x00dev, rate->val2);
+}
+
+static void rt2500pci_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *addr)
+{
+       u32 reg[2];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, addr, ETH_ALEN);
+
+       /*
+        * The MAC address is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2x00pci_register_multiwrite(rt2x00dev, CSR3, &reg, sizeof(reg));
+}
+
+/*
+ * LED functions.
+ */
+static void rt2500pci_enable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, LEDCSR, &reg);
+
+       rt2x00_set_field32(&reg, LEDCSR_ON_PERIOD, 70);
+       rt2x00_set_field32(&reg, LEDCSR_OFF_PERIOD, 30);
+
+       if (rt2x00dev->led_mode == LED_MODE_TXRX_ACTIVITY) {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 1);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 0);
+       } else if (rt2x00dev->led_mode == LED_MODE_ASUS) {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 0);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 1);
+       } else {
+               rt2x00_set_field32(&reg, LEDCSR_LINK, 1);
+               rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 1);
+       }
+
+       rt2x00pci_register_write(rt2x00dev, LEDCSR, reg);
+}
+
+static void rt2500pci_disable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, LEDCSR, &reg);
+       rt2x00_set_field32(&reg, LEDCSR_LINK, 0);
+       rt2x00_set_field32(&reg, LEDCSR_ACTIVITY, 0);
+       rt2x00pci_register_write(rt2x00dev, LEDCSR, reg);
+}
+
+/*
+ * Link tuning
+ */
+static void rt2500pci_link_tuner(struct rt2x00_dev *rt2x00dev, int rssi)
+{
+       u32 reg;
+       u8 r17;
+
+       /*
+        * To prevent collisions with MAC ASIC on chipsets
+        * up to version C the link tuning should halt after 20
+        * seconds.
+        */
+       if (rt2x00_rev(&rt2x00dev->chip) < RT2560_VERSION_D &&
+           rt2x00dev->link.count > 20)
+               return;
+
+       rt2500pci_bbp_read(rt2x00dev, 17, &r17);
+
+       /*
+        * Chipset versions C and lower should directly continue
+        * to the dynamic CCA tuning.
+        */
+       if (rt2x00_rev(&rt2x00dev->chip) < RT2560_VERSION_D)
+               goto dynamic_cca_tune;
+
+       /*
+        * A too low RSSI will cause too much false CCA which will
+        * then corrupt the R17 tuning. To remidy this the tuning should
+        * be stopped (While making sure the R17 value will not exceed limits)
+        */
+       if (rssi < -80 && rt2x00dev->link.count > 20) {
+               if (r17 >= 0x41) {
+                       r17 = rt2x00dev->link.curr_noise;
+                       rt2500pci_bbp_write(rt2x00dev, 17, r17);
+               }
+               return;
+       }
+
+       /*
+        * Special big-R17 for short distance
+        */
+       if (rssi >= -58) {
+               if (r17 != 0x50)
+                       rt2500pci_bbp_write(rt2x00dev, 17, 0x50);
+               return;
+       }
+
+       /*
+        * Special mid-R17 for middle distance
+        */
+       if (rssi >= -74) {
+               if (r17 != 0x41)
+                       rt2500pci_bbp_write(rt2x00dev, 17, 0x41);
+               return;
+       }
+
+       /*
+        * Leave short or middle distance condition, restore r17
+        * to the dynamic tuning range.
+        */
+       if (r17 >= 0x41) {
+               rt2500pci_bbp_write(rt2x00dev, 17, rt2x00dev->link.curr_noise);
+               return;
+       }
+
+dynamic_cca_tune:
+
+       /*
+        * R17 is inside the dynamic tuning range,
+        * start tuning the link based on the false cca counter.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT3, &reg);
+       rt2x00dev->link.false_cca = rt2x00_get_field32(reg, CNT3_FALSE_CCA);
+
+       if (rt2x00dev->link.false_cca > 512 && r17 < 0x40) {
+               rt2500pci_bbp_write(rt2x00dev, 17, ++r17);
+               rt2x00dev->link.curr_noise = r17;
+       } else if (rt2x00dev->link.false_cca < 100 && r17 > 0x32) {
+               rt2500pci_bbp_write(rt2x00dev, 17, --r17);
+               rt2x00dev->link.curr_noise = r17;
+       }
+}
+
+/*
+ * Initialization functions.
+ */
+static void rt2500pci_init_rxring(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_desc *rxd;
+       unsigned int i;
+       u32 word;
+
+       memset(rt2x00dev->rx->data_addr, 0x00,
+               rt2x00_get_ring_size(rt2x00dev->rx));
+
+       for (i = 0; i < rt2x00dev->rx->stats.limit; i++) {
+               rxd = rt2x00dev->rx->entry[i].priv;
+
+               rt2x00_desc_read(rxd, 1, &word);
+               rt2x00_set_field32(&word, RXD_W1_BUFFER_ADDRESS,
+                       rt2x00dev->rx->entry[i].data_dma);
+               rt2x00_desc_write(rxd, 1, word);
+
+               rt2x00_desc_read(rxd, 0, &word);
+               rt2x00_set_field32(&word, RXD_W0_OWNER_NIC, 1);
+               rt2x00_desc_write(rxd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(rt2x00dev->rx);
+}
+
+static void rt2500pci_init_txring(struct rt2x00_dev *rt2x00dev,
+       const int queue)
+{
+       struct data_ring *ring = rt2x00_get_ring(rt2x00dev, queue);
+       struct data_desc *txd;
+       unsigned int i;
+       u32 word;
+
+       memset(ring->data_addr, 0x00, rt2x00_get_ring_size(ring));
+
+       for (i = 0; i < ring->stats.limit; i++) {
+               txd = ring->entry[i].priv;
+
+               rt2x00_desc_read(txd, 1, &word);
+               rt2x00_set_field32(&word, TXD_W1_BUFFER_ADDRESS,
+                       ring->entry[i].data_dma);
+               rt2x00_desc_write(txd, 1, word);
+
+               rt2x00_desc_read(txd, 0, &word);
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 0);
+               rt2x00_desc_write(txd, 0, word);
+       }
+
+       rt2x00_ring_index_clear(ring);
+}
+
+static int rt2500pci_init_rings(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Initialize rings.
+        */
+       rt2500pci_init_rxring(rt2x00dev);
+       rt2500pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+       rt2500pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+       rt2500pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_AFTER_BEACON);
+       rt2500pci_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       /*
+        * Initialize registers.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXCSR2, &reg);
+       rt2x00_set_field32(&reg, TXCSR2_TXD_SIZE,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].desc_size);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_TXD,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].stats.limit);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_ATIM,
+               rt2x00dev->bcn[1].stats.limit);
+       rt2x00_set_field32(&reg, TXCSR2_NUM_PRIO,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].stats.limit);
+       rt2x00pci_register_write(rt2x00dev, TXCSR2, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR3, &reg);
+       rt2x00_set_field32(&reg, TXCSR3_TX_RING_REGISTER,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA1].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR5, &reg);
+       rt2x00_set_field32(&reg, TXCSR5_PRIO_RING_REGISTER,
+               rt2x00dev->tx[IEEE80211_TX_QUEUE_DATA0].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR5, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR4, &reg);
+       rt2x00_set_field32(&reg, TXCSR4_ATIM_RING_REGISTER,
+               rt2x00dev->bcn[1].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR4, reg);
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR6, &reg);
+       rt2x00_set_field32(&reg, TXCSR6_BEACON_RING_REGISTER,
+               rt2x00dev->bcn[0].data_dma);
+       rt2x00pci_register_write(rt2x00dev, TXCSR6, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR1, &reg);
+       rt2x00_set_field32(&reg, RXCSR1_RXD_SIZE,
+               rt2x00dev->rx->desc_size);
+       rt2x00_set_field32(&reg, RXCSR1_NUM_RXD,
+               rt2x00dev->rx->stats.limit);
+       rt2x00pci_register_write(rt2x00dev, RXCSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR2, &reg);
+       rt2x00_set_field32(&reg, RXCSR2_RX_RING_REGISTER,
+               rt2x00dev->rx->data_dma);
+       rt2x00pci_register_write(rt2x00dev, RXCSR2, reg);
+
+       return 0;
+}
+
+static int rt2500pci_init_registers(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       if (rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_AWAKE))
+               return -EBUSY;
+
+       rt2x00pci_register_write(rt2x00dev, PWRCSR0, 0x3f3b3100);
+       rt2x00pci_register_write(rt2x00dev, PCICSR, 0x000003b8);
+
+       rt2x00pci_register_write(rt2x00dev, PSCSR0, 0x00020002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR1, 0x00000002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR2, 0x00020002);
+       rt2x00pci_register_write(rt2x00dev, PSCSR3, 0x00000002);
+
+       rt2x00pci_register_read(rt2x00dev, TIMECSR, &reg);
+       rt2x00_set_field32(&reg, TIMECSR_US_COUNT, 33);
+       rt2x00_set_field32(&reg, TIMECSR_US_64_COUNT, 63);
+       rt2x00_set_field32(&reg, TIMECSR_BEACON_EXPECT, 0);
+       rt2x00pci_register_write(rt2x00dev, TIMECSR, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR9, &reg);
+       rt2x00_set_field32(&reg, CSR9_MAX_FRAME_UNIT,
+               rt2x00dev->rx->data_size / 128);
+       rt2x00pci_register_write(rt2x00dev, CSR9, reg);
+
+       rt2x00pci_register_write(rt2x00dev, CNT3, 0);
+
+       rt2x00pci_register_write(rt2x00dev, GPIOCSR, 0x0000ff00);
+       rt2x00pci_register_write(rt2x00dev, TESTCSR, 0x000000f0);
+
+       rt2x00pci_register_write(rt2x00dev, MACCSR0, 0x00213223);
+       rt2x00pci_register_write(rt2x00dev, MACCSR1, 0x00235518);
+
+       rt2x00pci_register_read(rt2x00dev, MACCSR2, &reg);
+       rt2x00_set_field32(&reg, MACCSR2_DELAY, 64);
+       rt2x00pci_register_write(rt2x00dev, MACCSR2, reg);
+
+       /*
+        * Always use CWmin and CWmax set in descriptor.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_CW_SELECT, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR3, &reg);
+       /*
+        * Signal.
+        */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID0, 47);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID0_VALID, 1);
+       /*
+        * Rssi.
+        */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID1, 51);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID1_VALID, 1);
+       /*
+        * OFDM Rate.
+        */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID2, 42);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID2_VALID, 1);
+       /*
+        * OFDM.
+        */
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID3, 51);
+       rt2x00_set_field32(&reg, RXCSR3_BBP_ID3_VALID, 1);
+       rt2x00pci_register_write(rt2x00dev, RXCSR3, reg);
+
+       rt2x00pci_register_read(rt2x00dev, RALINKCSR, &reg);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_DATA0, 17);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_ID0, 26);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_VALID0, 1);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_DATA1, 0);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_ID1, 26);
+       rt2x00_set_field32(&reg, RALINKCSR_AR_BBP_VALID1, 1);
+       rt2x00pci_register_write(rt2x00dev, RALINKCSR, reg);
+
+       rt2x00pci_register_write(rt2x00dev, BBPCSR1, 0x82188200);
+
+       rt2x00pci_register_write(rt2x00dev, TXACKCSR0, 0x00000020);
+
+       rt2x00pci_register_write(rt2x00dev, ARTCSR0, 0x7038140a);
+       rt2x00pci_register_write(rt2x00dev, ARTCSR1, 0x1d21252d);
+       rt2x00pci_register_write(rt2x00dev, ARTCSR2, 0x1919191d);
+
+       rt2x00pci_register_read(rt2x00dev, CSR1, &reg);
+       rt2x00_set_field32(&reg, CSR1_SOFT_RESET, 1);
+       rt2x00_set_field32(&reg, CSR1_BBP_RESET, 0);
+       rt2x00_set_field32(&reg, CSR1_HOST_READY, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR1, reg);
+
+       rt2x00pci_register_read(rt2x00dev, CSR1, &reg);
+       rt2x00_set_field32(&reg, CSR1_SOFT_RESET, 0);
+       rt2x00_set_field32(&reg, CSR1_HOST_READY, 1);
+       rt2x00pci_register_write(rt2x00dev, CSR1, reg);
+
+       /*
+        * We must clear the FCS and FIFO error count.
+        * These registers are cleared on read,
+        * so we may pass a useless variable to store the value.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg);
+       rt2x00pci_register_read(rt2x00dev, CNT4, &reg);
+
+       return 0;
+}
+
+static int rt2500pci_init_bbp(struct rt2x00_dev *rt2x00dev)
+{
+       unsigned int i;
+       u16 eeprom;
+       u8 reg_id;
+       u8 value;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500pci_bbp_read(rt2x00dev, 0, &value);
+               if ((value != 0xff) && (value != 0x00))
+                       goto continue_csr_init;
+               NOTICE(rt2x00dev, "Waiting for BBP register.\n");
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "BBP register access failed, aborting.\n");
+       return -EACCES;
+
+continue_csr_init:
+       rt2500pci_bbp_write(rt2x00dev, 3, 0x02);
+       rt2500pci_bbp_write(rt2x00dev, 4, 0x19);
+       rt2500pci_bbp_write(rt2x00dev, 14, 0x1c);
+       rt2500pci_bbp_write(rt2x00dev, 15, 0x30);
+       rt2500pci_bbp_write(rt2x00dev, 16, 0xac);
+       rt2500pci_bbp_write(rt2x00dev, 17, 0x48);
+       rt2500pci_bbp_write(rt2x00dev, 18, 0x18);
+       rt2500pci_bbp_write(rt2x00dev, 19, 0xff);
+       rt2500pci_bbp_write(rt2x00dev, 20, 0x1e);
+       rt2500pci_bbp_write(rt2x00dev, 21, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 22, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 23, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 24, 0x70);
+       rt2500pci_bbp_write(rt2x00dev, 25, 0x40);
+       rt2500pci_bbp_write(rt2x00dev, 26, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 27, 0x23);
+       rt2500pci_bbp_write(rt2x00dev, 30, 0x10);
+       rt2500pci_bbp_write(rt2x00dev, 31, 0x2b);
+       rt2500pci_bbp_write(rt2x00dev, 32, 0xb9);
+       rt2500pci_bbp_write(rt2x00dev, 34, 0x12);
+       rt2500pci_bbp_write(rt2x00dev, 35, 0x50);
+       rt2500pci_bbp_write(rt2x00dev, 39, 0xc4);
+       rt2500pci_bbp_write(rt2x00dev, 40, 0x02);
+       rt2500pci_bbp_write(rt2x00dev, 41, 0x60);
+       rt2500pci_bbp_write(rt2x00dev, 53, 0x10);
+       rt2500pci_bbp_write(rt2x00dev, 54, 0x18);
+       rt2500pci_bbp_write(rt2x00dev, 56, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 57, 0x10);
+       rt2500pci_bbp_write(rt2x00dev, 58, 0x08);
+       rt2500pci_bbp_write(rt2x00dev, 61, 0x6d);
+       rt2500pci_bbp_write(rt2x00dev, 62, 0x10);
+
+       DEBUG(rt2x00dev, "Start initialization from EEPROM...\n");
+       for (i = 0; i < EEPROM_BBP_SIZE; i++) {
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_BBP_START + i, &eeprom);
+
+               if (eeprom != 0xffff && eeprom != 0x0000) {
+                       reg_id = rt2x00_get_field16(eeprom, EEPROM_BBP_REG_ID);
+                       value = rt2x00_get_field16(eeprom, EEPROM_BBP_VALUE);
+                       DEBUG(rt2x00dev, "BBP: 0x%02x, value: 0x%02x.\n",
+                               reg_id, value);
+                       rt2500pci_bbp_write(rt2x00dev, reg_id, value);
+               }
+       }
+       DEBUG(rt2x00dev, "...End initialization from EEPROM.\n");
+
+       return 0;
+}
+
+/*
+ * Device state switch handlers.
+ */
+static void rt2500pci_toggle_rx(struct rt2x00_dev *rt2x00dev,
+       enum dev_state state)
+{
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, RXCSR0, &reg);
+       rt2x00_set_field32(&reg, RXCSR0_DISABLE_RX,
+               state == STATE_RADIO_RX_OFF);
+       rt2x00pci_register_write(rt2x00dev, RXCSR0, reg);
+}
+
+static int rt2500pci_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Initialize all registers.
+        */
+       if (rt2500pci_init_rings(rt2x00dev) ||
+           rt2500pci_init_registers(rt2x00dev) ||
+           rt2500pci_init_bbp(rt2x00dev)) {
+               ERROR(rt2x00dev, "Register initialization failed.\n");
+               return -EIO;
+       }
+
+       /*
+        * Clear interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR7, &reg);
+       rt2x00pci_register_write(rt2x00dev, CSR7, reg);
+
+       /*
+        * Enable interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR8, &reg);
+       rt2x00_set_field32(&reg, CSR8_TBCN_EXPIRE, 0);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_TXRING, 0);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_ATIMRING, 0);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_PRIORING, 0);
+       rt2x00_set_field32(&reg, CSR8_RXDONE, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR8, reg);
+
+       /*
+        * Enable LED
+        */
+       rt2500pci_enable_led(rt2x00dev);
+
+       return 0;
+}
+
+static void rt2500pci_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+
+       /*
+        * Disable LED
+        */
+       rt2500pci_disable_led(rt2x00dev);
+
+       rt2x00pci_register_write(rt2x00dev, PWRCSR0, 0);
+
+       /*
+        * Disable synchronisation.
+        */
+       rt2x00pci_register_write(rt2x00dev, CSR14, 0);
+
+       /*
+        * Cancel RX and TX.
+        */
+       rt2x00pci_register_read(rt2x00dev, TXCSR0, &reg);
+       rt2x00_set_field32(&reg, TXCSR0_ABORT, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR0, reg);
+
+       /*
+        * Disable interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR8, &reg);
+       rt2x00_set_field32(&reg, CSR8_TBCN_EXPIRE, 1);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_TXRING, 1);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_ATIMRING, 1);
+       rt2x00_set_field32(&reg, CSR8_TXDONE_PRIORING, 1);
+       rt2x00_set_field32(&reg, CSR8_RXDONE, 1);
+       rt2x00pci_register_write(rt2x00dev, CSR8, reg);
+}
+
+static int rt2500pci_set_state(struct rt2x00_dev *rt2x00dev,
+       enum dev_state state)
+{
+       u32 reg;
+       unsigned int i;
+       char put_to_sleep;
+       char bbp_state;
+       char rf_state;
+
+       put_to_sleep = (state != STATE_AWAKE);
+
+       rt2x00pci_register_read(rt2x00dev, PWRCSR1, &reg);
+       rt2x00_set_field32(&reg, PWRCSR1_SET_STATE, 1);
+       rt2x00_set_field32(&reg, PWRCSR1_BBP_DESIRE_STATE, state);
+       rt2x00_set_field32(&reg, PWRCSR1_RF_DESIRE_STATE, state);
+       rt2x00_set_field32(&reg, PWRCSR1_PUT_TO_SLEEP, put_to_sleep);
+       rt2x00pci_register_write(rt2x00dev, PWRCSR1, reg);
+
+       /*
+        * Device is not guaranteed to be in the requested state yet.
+        * We must wait until the register indicates that the
+        * device has entered the correct state.
+        */
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2x00pci_register_read(rt2x00dev, PWRCSR1, &reg);
+               bbp_state = rt2x00_get_field32(reg, PWRCSR1_BBP_CURR_STATE);
+               rf_state = rt2x00_get_field32(reg, PWRCSR1_RF_CURR_STATE);
+               if (bbp_state == state && rf_state == state)
+                       return 0;
+               msleep(10);
+       }
+
+       NOTICE(rt2x00dev, "Device failed to enter state %d, "
+               "current device state: bbp %d and rf %d.\n",
+               state, bbp_state, rf_state);
+
+       return -EBUSY;
+}
+
+static int rt2500pci_set_device_state(struct rt2x00_dev *rt2x00dev,
+       enum dev_state state)
+{
+       int retval = 0;
+
+       switch (state) {
+               case STATE_RADIO_ON:
+                       retval = rt2500pci_enable_radio(rt2x00dev);
+               break;
+               case STATE_RADIO_OFF:
+                       rt2500pci_disable_radio(rt2x00dev);
+               break;
+               case STATE_RADIO_RX_ON:
+               case STATE_RADIO_RX_OFF:
+                       rt2500pci_toggle_rx(rt2x00dev, state);
+               break;
+               case STATE_DEEP_SLEEP:
+               case STATE_SLEEP:
+               case STATE_STANDBY:
+               case STATE_AWAKE:
+                       retval = rt2500pci_set_state(rt2x00dev, state);
+               break;
+               default:
+                       retval = -ENOTSUPP;
+               break;
+       }
+
+       return retval;
+}
+
+/*
+ * TX descriptor initialization
+ */
+static void rt2500pci_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+       struct data_entry *entry, struct data_desc *txd,
+       struct data_entry_desc *desc, struct ieee80211_hdr *ieee80211hdr,
+       unsigned int length, struct ieee80211_tx_control *control)
+{
+       u32 word;
+
+       /*
+        * Start writing the descriptor words.
+        */
+       rt2x00_desc_read(txd, 2, &word);
+       rt2x00_set_field32(&word, TXD_W2_IV_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&word, TXD_W2_AIFS, entry->ring->tx_params.aifs);
+       rt2x00_set_field32(&word, TXD_W2_CWMIN, entry->ring->tx_params.cw_min);
+       rt2x00_set_field32(&word, TXD_W2_CWMAX, entry->ring->tx_params.cw_max);
+       rt2x00_desc_write(txd, 2, word);
+
+       rt2x00_desc_read(txd, 3, &word);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_SIGNAL, desc->signal);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_SERVICE, desc->service);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_LENGTH_LOW, desc->length_low);
+       rt2x00_set_field32(&word, TXD_W3_PLCP_LENGTH_HIGH, desc->length_high);
+       rt2x00_desc_write(txd, 3, word);
+
+       rt2x00_desc_read(txd, 10, &word);
+       rt2x00_set_field32(&word, TXD_W10_RTS,
+               test_bit(ENTRY_TXD_RTS_FRAME, &entry->flags));
+       rt2x00_desc_write(txd, 10, word);
+
+       rt2x00_desc_read(txd, 0, &word);
+       rt2x00_set_field32(&word, TXD_W0_OWNER_NIC, 1);
+       rt2x00_set_field32(&word, TXD_W0_VALID, 1);
+       rt2x00_set_field32(&word, TXD_W0_MORE_FRAG,
+               test_bit(ENTRY_TXD_MORE_FRAG, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_ACK,
+               test_bit(ENTRY_TXD_REQ_ACK, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_TIMESTAMP,
+               test_bit(ENTRY_TXD_REQ_TIMESTAMP, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_OFDM,
+               test_bit(ENTRY_TXD_OFDM_RATE, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_CIPHER_OWNER, 1);
+       rt2x00_set_field32(&word, TXD_W0_IFS, desc->ifs);
+       rt2x00_set_field32(&word, TXD_W0_RETRY_MODE, 0);
+       rt2x00_set_field32(&word, TXD_W0_DATABYTE_COUNT, length);
+       rt2x00_set_field32(&word, TXD_W0_CIPHER_ALG, CIPHER_NONE);
+       rt2x00_desc_write(txd, 0, word);
+}
+
+/*
+ * TX data initialization
+ */
+static void rt2500pci_kick_tx_queue(struct rt2x00_dev *rt2x00dev, int queue)
+{
+       u32 reg;
+
+       if (queue == IEEE80211_TX_QUEUE_BEACON) {
+               rt2x00pci_register_read(rt2x00dev, CSR14, &reg);
+               if (!rt2x00_get_field32(reg, CSR14_BEACON_GEN)) {
+                       rt2x00_set_field32(&reg, CSR14_BEACON_GEN, 1);
+                       rt2x00pci_register_write(rt2x00dev, CSR14, reg);
+               }
+               return;
+       }
+
+       rt2x00pci_register_read(rt2x00dev, TXCSR0, &reg);
+       if (queue == IEEE80211_TX_QUEUE_DATA0)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_PRIO, 1);
+       else if (queue == IEEE80211_TX_QUEUE_DATA1)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_TX, 1);
+       else if (queue == IEEE80211_TX_QUEUE_AFTER_BEACON)
+               rt2x00_set_field32(&reg, TXCSR0_KICK_ATIM, 1);
+       rt2x00pci_register_write(rt2x00dev, TXCSR0, reg);
+}
+
+/*
+ * Interrupt functions.
+ */
+static void rt2500pci_rxdone(struct rt2x00_dev *rt2x00dev)
+{
+       struct data_ring *ring = rt2x00dev->rx;
+       struct data_entry *entry;
+       struct data_desc *rxd;
+       u32 word0;
+       u32 word2;
+       int signal;
+       int rssi;
+       int ofdm;
+       u16 size;
+
+       while (1) {
+               entry = rt2x00_get_data_entry(ring);
+               rxd = entry->priv;
+               rt2x00_desc_read(rxd, 0, &word0);
+               rt2x00_desc_read(rxd, 2, &word2);
+
+               if (rt2x00_get_field32(word0, RXD_W0_OWNER_NIC))
+                       break;
+
+               /*
+                * TODO: Don't we need to keep statistics
+                * updated about events like CRC and physical errors?
+                */
+               if (rt2x00_get_field32(word0, RXD_W0_CRC) ||
+                   rt2x00_get_field32(word0, RXD_W0_PHYSICAL_ERROR))
+                       goto skip_entry;
+
+               /*
+                * Obtain the status about this packet.
+                */
+               size = rt2x00_get_field32(word0, RXD_W0_DATABYTE_COUNT);
+               signal = rt2x00_get_field32(word2, RXD_W2_SIGNAL);
+               rssi = rt2x00_get_field32(word2, RXD_W2_RSSI);
+               ofdm = rt2x00_get_field32(word0, RXD_W0_OFDM);
+
+               /*
+                * Send the packet to upper layer.
+                */
+               rt2x00lib_rxdone(entry, entry->data_addr, size,
+                       signal, rssi, ofdm);
+
+skip_entry:
+               if (test_bit(DEVICE_ENABLED_RADIO, &ring->rt2x00dev->flags)) {
+                       rt2x00_set_field32(&word0, RXD_W0_OWNER_NIC, 1);
+                       rt2x00_desc_write(rxd, 0, word0);
+               }
+
+               rt2x00_ring_index_inc(ring);
+       }
+}
+
+static void rt2500pci_txdone(struct rt2x00_dev *rt2x00dev, const int queue)
+{
+       struct data_ring *ring = rt2x00_get_ring(rt2x00dev, queue);
+       struct data_entry *entry;
+       struct data_desc *txd;
+       u32 word;
+       int tx_status;
+       int retry;
+
+       while (!rt2x00_ring_empty(ring)) {
+               entry = rt2x00_get_data_entry_done(ring);
+               txd = entry->priv;
+               rt2x00_desc_read(txd, 0, &word);
+
+               if (rt2x00_get_field32(word, TXD_W0_OWNER_NIC) ||
+                   !rt2x00_get_field32(word, TXD_W0_VALID))
+                       break;
+
+               /*
+                * Obtain the status about this packet.
+                */
+               tx_status = rt2x00_get_field32(word, TXD_W0_RESULT);
+               retry = rt2x00_get_field32(word, TXD_W0_RETRY_COUNT);
+
+               rt2x00lib_txdone(entry, tx_status, retry);
+
+               /*
+                * Make this entry available for reuse.
+                */
+               entry->flags = 0;
+               rt2x00_set_field32(&word, TXD_W0_VALID, 0);
+               rt2x00_desc_write(txd, 0, word);
+               rt2x00_ring_index_done_inc(ring);
+       }
+
+       /*
+        * If the data ring was full before the txdone handler
+        * we must make sure the packet queue in the mac80211 stack
+        * is reenabled when the txdone handler has finished.
+        */
+       entry = ring->entry;
+       if (!rt2x00_ring_full(ring))
+               ieee80211_wake_queue(rt2x00dev->hw,
+                       entry->tx_status.control.queue);
+}
+
+static irqreturn_t rt2500pci_interrupt(int irq, void *dev_instance)
+{
+       struct rt2x00_dev *rt2x00dev = dev_instance;
+       u32 reg;
+
+       /*
+        * Get the interrupt sources & saved to local variable.
+        * Write register value back to clear pending interrupts.
+        */
+       rt2x00pci_register_read(rt2x00dev, CSR7, &reg);
+       rt2x00pci_register_write(rt2x00dev, CSR7, reg);
+
+       if (!reg)
+               return IRQ_NONE;
+
+       if (!test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags))
+               return IRQ_HANDLED;
+
+       /*
+        * Handle interrupts, walk through all bits
+        * and run the tasks, the bits are checked in order of
+        * priority.
+        */
+
+       /*
+        * 1 - Beacon timer expired interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TBCN_EXPIRE))
+               rt2x00pci_beacondone(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       /*
+        * 2 - Rx ring done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_RXDONE))
+               rt2500pci_rxdone(rt2x00dev);
+
+       /*
+        * 3 - Atim ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_ATIMRING))
+               rt2500pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_AFTER_BEACON);
+
+       /*
+        * 4 - Priority ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_PRIORING))
+               rt2500pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+
+       /*
+        * 5 - Tx ring transmit done interrupt.
+        */
+       if (rt2x00_get_field32(reg, CSR7_TXDONE_TXRING))
+               rt2500pci_txdone(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+
+       return IRQ_HANDLED;
+}
+
+/*
+ * Device initialization functions.
+ */
+static int rt2500pci_alloc_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       struct eeprom_93cx6 eeprom;
+       u32 reg;
+       u16 word;
+
+       /*
+        * Allocate the eeprom memory, check the eeprom width
+        * and copy the entire eeprom into this allocated memory.
+        */
+       rt2x00dev->eeprom = kzalloc(EEPROM_SIZE, GFP_KERNEL);
+       if (!rt2x00dev->eeprom)
+               return -ENOMEM;
+
+       rt2x00pci_register_read(rt2x00dev, CSR21, &reg);
+
+       eeprom.data = rt2x00dev;
+       eeprom.register_read = rt2500pci_eepromregister_read;
+       eeprom.register_write = rt2500pci_eepromregister_write;
+       eeprom.width = rt2x00_get_field32(reg, CSR21_TYPE_93C46) ?
+               PCI_EEPROM_WIDTH_93C46 : PCI_EEPROM_WIDTH_93C66;
+       eeprom.reg_data_in = 0;
+       eeprom.reg_data_out = 0;
+       eeprom.reg_data_clock = 0;
+       eeprom.reg_chip_select = 0;
+
+       eeprom_93cx6_multiread(&eeprom, EEPROM_BASE, rt2x00dev->eeprom,
+               EEPROM_SIZE / sizeof(u16));
+
+       /*
+        * Start validation of the data that has been read.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_NUM, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_TX_DEFAULT, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RX_DEFAULT, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_LED_MODE, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_DYN_TXAGC, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_HARDWARE_RADIO, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RF_TYPE, RF2522);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_ANTENNA, word);
+               EEPROM(rt2x00dev, "Antenna: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_NIC_CARDBUS_ACCEL, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_DYN_BBP_TUNE, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_CCK_TX_POWER, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_NIC, word);
+               EEPROM(rt2x00dev, "NIC: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_CALIBRATE_OFFSET, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_CALIBRATE_OFFSET_RSSI,
+                       MAX_RX_SSI);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_CALIBRATE_OFFSET, word);
+               EEPROM(rt2x00dev, "Calibrate offset: 0x%04x\n", word);
+       }
+
+       return 0;
+}
+
+static int rt2500pci_init_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u32 reg;
+       u16 value;
+       u16 eeprom;
+
+       /*
+        * Read EEPROM word for configuration.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &eeprom);
+
+       /*
+        * Identify RF chipset.
+        */
+       value = rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RF_TYPE);
+       rt2x00pci_register_read(rt2x00dev, CSR0, &reg);
+       rt2x00_set_chip(rt2x00dev, RT2560, value, reg);
+
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2522) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2523) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2524) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2525) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2525E) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               ERROR(rt2x00dev, "Invalid RF chipset detected.\n");
+               return -ENODEV;
+       }
+
+       /*
+        * Identify default antenna configuration.
+        */
+       rt2x00dev->hw->conf.antenna_sel_tx = rt2x00_get_field16(eeprom,
+               EEPROM_ANTENNA_TX_DEFAULT);
+       rt2x00dev->hw->conf.antenna_sel_rx = rt2x00_get_field16(eeprom,
+               EEPROM_ANTENNA_RX_DEFAULT);
+
+       /*
+        * Store led mode, for correct led behaviour.
+        */
+       rt2x00dev->led_mode = rt2x00_get_field16(eeprom,
+               EEPROM_ANTENNA_LED_MODE);
+
+       /*
+        * Detect if this device has an hardware controlled radio.
+        */
+       if (rt2x00_get_field16(eeprom, EEPROM_ANTENNA_HARDWARE_RADIO))
+               __set_bit(DEVICE_SUPPORT_HW_BUTTON, &rt2x00dev->flags);
+
+       /*
+        * Check if the BBP tuning should be enabled.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &eeprom);
+
+       if (rt2x00_get_field16(eeprom, EEPROM_NIC_DYN_BBP_TUNE))
+               __set_bit(CONFIG_DISABLE_LINK_TUNING, &rt2x00dev->flags);
+
+       /*
+        * Read the RSSI <-> dBm offset information.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_CALIBRATE_OFFSET, &eeprom);
+       rt2x00dev->hw->max_rssi =
+               rt2x00_get_field16(eeprom, EEPROM_CALIBRATE_OFFSET_RSSI);
+
+       return 0;
+}
+
+static const struct {
+       unsigned int chip;
+       u32 val[3];
+} rf_vals[] = {
+       { RF2522,       { 0x00002050, 0x00000101, 0x00000000 } },
+       { RF2523,       { 0x00022010, 0x000e0111, 0x00000a1b } },
+       { RF2524,       { 0x00032020, 0x00000101, 0x00000a1b } },
+       { RF2525,       { 0x00022020, 0x00060111, 0x00000a1b } },
+       { RF2525E,      { 0x00022020, 0x00060111, 0x00000a0b } },
+       { RF5222,       { 0x00000000, 0x00000101, 0x00000000 } },
+};
+
+/*
+ * RF value list for RF2522
+ * Supports: 2.4 GHz
+ */
+static const u32 rf_vals_bg_2522[] = {
+       0x000c1fda, 0x000c1fee, 0x000c2002, 0x000c2016, 0x000c202a,
+       0x000c203e, 0x000c2052, 0x000c2066, 0x000c207a, 0x000c208e,
+       0x000c20a2, 0x000c20b6, 0x000c20ca, 0x000c20fa
+};
+
+/*
+ * RF value list for RF2523, RF2524 & RF2525
+ * Supports: 2.4 GHz
+ */
+static const u32 rf_vals_bg_252x[] = {
+       0x00000c9e, 0x00000ca2, 0x00000ca6, 0x00000caa, 0x00000cae,
+       0x00000cb2, 0x00000cb6, 0x00000cba, 0x00000cbe, 0x00000d02,
+       0x00000d06, 0x00000d0a, 0x00000d0e, 0x00000d1a
+};
+
+/*
+ * RF value list for RF2525E & RF5222
+ * Supports: 2.4 GHz
+ */
+static const u32 rf_vals_bg_5x[] = {
+       0x00001136, 0x0000113a, 0x0000113e, 0x00001182, 0x00001186,
+       0x0000118a, 0x0000118e, 0x00001192, 0x00001196, 0x0000119a,
+       0x0000119e, 0x000011a2, 0x000011a6, 0x000011ae
+};
+
+/*
+ * RF value list for RF5222 (supplement to rf_vals_bg_5x)
+ * Supports: 5.2 GHz
+ */
+static const u32 rf_vals_a_5x[] = {
+       0x00018896, 0x0001889a, 0x0001889e, 0x000188a2, 0x000188a6,
+       0x000188aa, 0x000188ae, 0x000188b2, 0x00008802, 0x00008806,
+       0x0000880a, 0x0000880e, 0x00008812, 0x00008816, 0x0000881a,
+       0x0000881e, 0x00008822, 0x00008826, 0x0000882a, 0x000090a6,
+       0x000090ae, 0x000090b6, 0x000090be
+};
+
+static void rt2500pci_init_hw_mode(struct rt2x00_dev *rt2x00dev)
+{
+       struct hw_mode_spec *spec = &rt2x00dev->spec;
+       u8 *txpower;
+       unsigned int i;
+
+       /*
+        * Initialize all hw fields.
+        */
+       rt2x00dev->hw->flags =  IEEE80211_HW_HOST_GEN_BEACON |
+               IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING |
+               IEEE80211_HW_WEP_INCLUDE_IV |
+               IEEE80211_HW_DATA_NULLFUNC_ACK |
+               IEEE80211_HW_NO_TKIP_WMM_HWACCEL |
+               IEEE80211_HW_MONITOR_DURING_OPER;
+       rt2x00dev->hw->extra_tx_headroom = 0;
+       rt2x00dev->hw->max_rssi = MAX_RX_SSI;
+       rt2x00dev->hw->max_noise = MAX_RX_NOISE;
+       rt2x00dev->hw->queues = 2;
+
+       /*
+        * This device supports ATIM
+        */
+       __set_bit(DEVICE_SUPPORT_ATIM, &rt2x00dev->flags);
+
+       /*
+        * Set device specific, but channel independent RF values.
+        */
+       for (i = 0; i < ARRAY_SIZE(rf_vals); i++) {
+               if (rt2x00_rf(&rt2x00dev->chip, rf_vals[i].chip)) {
+                       rt2x00dev->rf1 = rf_vals[i].val[0];
+                       rt2x00dev->rf3 = rf_vals[i].val[1];
+                       rt2x00dev->rf4 = rf_vals[i].val[2];
+               }
+       }
+
+       /*
+        * Convert tx_power array in eeprom.
+        */
+       txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_START);
+       for (i = 0; i < 14; i++)
+               txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+       /*
+        * Initialize hw_mode information.
+        */
+       spec->mac_addr = rt2x00_eeprom_addr(rt2x00dev, EEPROM_MAC_ADDR_0);
+       spec->num_modes = 2;
+       spec->num_rates = 12;
+       spec->num_channels = 14;
+       spec->tx_power_a = NULL;
+       spec->tx_power_bg = txpower;
+       spec->tx_power_default = DEFAULT_TXPOWER;
+       spec->chan_val_a = NULL;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF2522))
+               spec->chan_val_bg = rf_vals_bg_2522;
+       else if (rt2x00_rf(&rt2x00dev->chip, RF2523) ||
+                rt2x00_rf(&rt2x00dev->chip, RF2524) ||
+                rt2x00_rf(&rt2x00dev->chip, RF2525))
+               spec->chan_val_bg = rf_vals_bg_252x;
+       else if (rt2x00_rf(&rt2x00dev->chip, RF2525E) ||
+                rt2x00_rf(&rt2x00dev->chip, RF5222))
+               spec->chan_val_bg = rf_vals_bg_5x;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               spec->num_modes = 3;
+               spec->num_channels += 23;
+               spec->chan_val_a = rf_vals_a_5x;
+       }
+}
+
+static int rt2500pci_init_hw(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       /*
+        * Allocate eeprom data.
+        */
+       retval = rt2500pci_alloc_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt2500pci_init_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       /*
+        * Initialize hw specifications.
+        */
+       rt2500pci_init_hw_mode(rt2x00dev);
+
+       return 0;
+}
+
+/*
+ * IEEE80211 stack callback functions.
+ */
+static int rt2500pci_get_stats(struct ieee80211_hw *hw,
+       struct ieee80211_low_level_stats *stats)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       /*
+        * Update FCS error count from register.
+        * The dot11ACKFailureCount, dot11RTSFailureCount and
+        * dot11RTSSuccessCount are updated in interrupt time.
+        */
+       rt2x00pci_register_read(rt2x00dev, CNT0, &reg);
+       rt2x00dev->low_level_stats.dot11FCSErrorCount +=
+               rt2x00_get_field32(reg, CNT0_FCS_ERROR);
+
+       memcpy(stats, &rt2x00dev->low_level_stats, sizeof(*stats));
+
+       return 0;
+}
+
+static int rt2500pci_set_retry_limit(struct ieee80211_hw *hw,
+       u32 short_retry, u32 long_retry)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR11, &reg);
+       rt2x00_set_field32(&reg, CSR11_LONG_RETRY, long_retry);
+       rt2x00_set_field32(&reg, CSR11_SHORT_RETRY, short_retry);
+       rt2x00pci_register_write(rt2x00dev, CSR11, reg);
+
+       return 0;
+}
+
+static u64 rt2500pci_get_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u64 tsf;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR17, &reg);
+       tsf = (u64)rt2x00_get_field32(reg, CSR17_HIGH_TSFTIMER) << 32;
+       rt2x00pci_register_read(rt2x00dev, CSR16, &reg);
+       tsf |= rt2x00_get_field32(reg, CSR16_LOW_TSFTIMER);
+
+       return tsf;
+}
+
+static void rt2500pci_reset_tsf(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+
+       rt2x00pci_register_write(rt2x00dev, CSR16, 0);
+       rt2x00pci_register_write(rt2x00dev, CSR17, 0);
+}
+
+static int rt2500pci_tx_last_beacon(struct ieee80211_hw *hw)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u32 reg;
+
+       rt2x00pci_register_read(rt2x00dev, CSR15, &reg);
+       return rt2x00_get_field32(reg, CSR15_BEACON_SENT);
+}
+
+static const struct ieee80211_ops rt2500pci_mac80211_ops = {
+       .tx                     = rt2x00lib_tx,
+       .reset                  = rt2x00lib_reset,
+       .open                   = rt2x00lib_open,
+       .stop                   = rt2x00lib_stop,
+       .add_interface          = rt2x00lib_add_interface,
+       .remove_interface       = rt2x00lib_remove_interface,
+       .config                 = rt2x00lib_config,
+       .config_interface       = rt2x00lib_config_interface,
+       .set_multicast_list     = rt2x00lib_set_multicast_list,
+       .get_stats              = rt2500pci_get_stats,
+       .set_retry_limit        = rt2500pci_set_retry_limit,
+       .conf_tx                = rt2x00lib_conf_tx,
+       .get_tx_stats           = rt2x00lib_get_tx_stats,
+       .get_tsf                = rt2500pci_get_tsf,
+       .reset_tsf              = rt2500pci_reset_tsf,
+       .beacon_update          = rt2x00pci_beacon_update,
+       .tx_last_beacon         = rt2500pci_tx_last_beacon,
+};
+
+static const struct rt2x00lib_ops rt2500pci_rt2x00_ops = {
+       .irq_handler            = rt2500pci_interrupt,
+       .init_hw                = rt2500pci_init_hw,
+       .initialize             = rt2x00pci_initialize,
+       .uninitialize           = rt2x00pci_uninitialize,
+       .set_device_state       = rt2500pci_set_device_state,
+#ifdef CONFIG_RT2500PCI_RFKILL
+       .rfkill_poll            = rt2500pci_rfkill_poll,
+#endif /* CONFIG_RT2500PCI_RFKILL */
+       .link_tuner             = rt2500pci_link_tuner,
+       .write_tx_desc          = rt2500pci_write_tx_desc,
+       .write_tx_data          = rt2x00pci_write_tx_data,
+       .kick_tx_queue          = rt2500pci_kick_tx_queue,
+       .config_type            = rt2500pci_config_type,
+       .config_phymode         = rt2500pci_config_phymode,
+       .config_channel         = rt2500pci_config_channel,
+       .config_mac_addr        = rt2500pci_config_mac_addr,
+       .config_bssid           = rt2500pci_config_bssid,
+       .config_promisc         = rt2500pci_config_promisc,
+       .config_txpower         = rt2500pci_config_txpower,
+       .config_antenna         = rt2500pci_config_antenna,
+       .config_duration        = rt2500pci_config_duration,
+};
+
+static const struct rt2x00_ops rt2500pci_ops = {
+       .name   = DRV_NAME,
+       .rxd_size = RXD_DESC_SIZE,
+       .txd_size = TXD_DESC_SIZE,
+       .lib    = &rt2500pci_rt2x00_ops,
+       .hw     = &rt2500pci_mac80211_ops,
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       .debugfs = &rt2500pci_rt2x00debug,
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * RT2500pci module information.
+ */
+static struct pci_device_id rt2500pci_device_table[] = {
+       { PCI_DEVICE(0x1814, 0x0201), PCI_DEVICE_DATA(&rt2500pci_ops) },
+       { 0, }
+};
+
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("Ralink RT2500 PCI & PCMCIA Wireless LAN driver.");
+MODULE_SUPPORTED_DEVICE("Ralink RT2560 PCI & PCMCIA chipset based cards");
+MODULE_DEVICE_TABLE(pci, rt2500pci_device_table);
+MODULE_LICENSE("GPL");
+
+static struct pci_driver rt2500pci_driver = {
+       .name           = DRV_NAME,
+       .id_table       = rt2500pci_device_table,
+       .probe          = rt2x00pci_probe,
+       .remove         = __devexit_p(rt2x00pci_remove),
+#ifdef CONFIG_PM
+       .suspend        = rt2x00pci_suspend,
+       .resume         = rt2x00pci_resume,
+#endif /* CONFIG_PM */
+};
+
+static int __init rt2500pci_init(void)
+{
+       printk(KERN_INFO "Loading module: %s - %s by %s.\n",
+               DRV_NAME, DRV_VERSION, DRV_PROJECT);
+       return pci_register_driver(&rt2500pci_driver);
+}
+
+static void __exit rt2500pci_exit(void)
+{
+       printk(KERN_INFO "Unloading module: %s.\n", DRV_NAME);
+       pci_unregister_driver(&rt2500pci_driver);
+}
+
+module_init(rt2500pci_init);
+module_exit(rt2500pci_exit);
diff --git a/package/rt2x00/src/rt2500pci.h b/package/rt2x00/src/rt2500pci.h
new file mode 100644 (file)
index 0000000..e695a57
--- /dev/null
@@ -0,0 +1,1202 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2500pci
+       Abstract: Data structures and registers for the rt2500pci module.
+       Supported chipsets: RT2560.
+ */
+
+#ifndef RT2500PCI_H
+#define RT2500PCI_H
+
+/*
+ * RF chip defines.
+ */
+#define RF2522                         0x0000
+#define RF2523                         0x0001
+#define RF2524                         0x0002
+#define RF2525                         0x0003
+#define RF2525E                                0x0004
+#define RF5222                         0x0010
+
+/*
+ * RT2560 version
+ */
+#define RT2560_VERSION_B               2
+#define RT2560_VERSION_C               3
+#define RT2560_VERSION_D               4
+
+/*
+ * Max RSSI value, required for RSSI <-> dBm conversion.
+ */
+#define MAX_RX_SSI                     121
+#define MAX_RX_NOISE                   -110
+
+/*
+ * Register layout information.
+ */
+#define CSR_REG_BASE                   0x0000
+#define CSR_REG_SIZE                   0x0174
+#define EEPROM_BASE                    0x0000
+#define EEPROM_SIZE                    0x0200
+#define BBP_SIZE                       0x0040
+
+/*
+ * Control/Status Registers(CSR).
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * CSR0: ASIC revision number.
+ */
+#define CSR0                           0x0000
+
+/*
+ * CSR1: System control register.
+ * SOFT_RESET: Software reset, 1: reset, 0: normal.
+ * BBP_RESET: Hardware reset, 1: reset, 0, release.
+ * HOST_READY: Host ready after initialization.
+ */
+#define CSR1                           0x0004
+#define CSR1_SOFT_RESET                        FIELD32(0x00000001)
+#define CSR1_BBP_RESET                 FIELD32(0x00000002)
+#define CSR1_HOST_READY                        FIELD32(0x00000004)
+
+/*
+ * CSR2: System admin status register (invalid).
+ */
+#define CSR2                           0x0008
+
+/*
+ * CSR3: STA MAC address register 0.
+ */
+#define CSR3                           0x000c
+#define CSR3_BYTE0                     FIELD32(0x000000ff)
+#define CSR3_BYTE1                     FIELD32(0x0000ff00)
+#define CSR3_BYTE2                     FIELD32(0x00ff0000)
+#define CSR3_BYTE3                     FIELD32(0xff000000)
+
+/*
+ * CSR4: STA MAC address register 1.
+ */
+#define CSR4                           0x0010
+#define CSR4_BYTE4                     FIELD32(0x000000ff)
+#define CSR4_BYTE5                     FIELD32(0x0000ff00)
+
+/*
+ * CSR5: BSSID register 0.
+ */
+#define CSR5                           0x0014
+#define CSR5_BYTE0                     FIELD32(0x000000ff)
+#define CSR5_BYTE1                     FIELD32(0x0000ff00)
+#define CSR5_BYTE2                     FIELD32(0x00ff0000)
+#define CSR5_BYTE3                     FIELD32(0xff000000)
+
+/*
+ * CSR6: BSSID register 1.
+ */
+#define CSR6                           0x0018
+#define CSR6_BYTE4                     FIELD32(0x000000ff)
+#define CSR6_BYTE5                     FIELD32(0x0000ff00)
+
+/*
+ * CSR7: Interrupt source register.
+ * Write 1 to clear.
+ * TBCN_EXPIRE: Beacon timer expired interrupt.
+ * TWAKE_EXPIRE: Wakeup timer expired interrupt.
+ * TATIMW_EXPIRE: Timer of atim window expired interrupt.
+ * TXDONE_TXRING: Tx ring transmit done interrupt.
+ * TXDONE_ATIMRING: Atim ring transmit done interrupt.
+ * TXDONE_PRIORING: Priority ring transmit done interrupt.
+ * RXDONE: Receive done interrupt.
+ * DECRYPTION_DONE: Decryption done interrupt.
+ * ENCRYPTION_DONE: Encryption done interrupt.
+ * UART1_TX_TRESHOLD: UART1 TX reaches threshold.
+ * UART1_RX_TRESHOLD: UART1 RX reaches threshold.
+ * UART1_IDLE_TRESHOLD: UART1 IDLE over threshold.
+ * UART1_TX_BUFF_ERROR: UART1 TX buffer error.
+ * UART1_RX_BUFF_ERROR: UART1 RX buffer error.
+ * UART2_TX_TRESHOLD: UART2 TX reaches threshold.
+ * UART2_RX_TRESHOLD: UART2 RX reaches threshold.
+ * UART2_IDLE_TRESHOLD: UART2 IDLE over threshold.
+ * UART2_TX_BUFF_ERROR: UART2 TX buffer error.
+ * UART2_RX_BUFF_ERROR: UART2 RX buffer error.
+ * TIMER_CSR3_EXPIRE: TIMECSR3 timer expired (802.1H quiet period).
+
+ */
+#define CSR7                           0x001c
+#define CSR7_TBCN_EXPIRE               FIELD32(0x00000001)
+#define CSR7_TWAKE_EXPIRE              FIELD32(0x00000002)
+#define CSR7_TATIMW_EXPIRE             FIELD32(0x00000004)
+#define CSR7_TXDONE_TXRING             FIELD32(0x00000008)
+#define CSR7_TXDONE_ATIMRING           FIELD32(0x00000010)
+#define CSR7_TXDONE_PRIORING           FIELD32(0x00000020)
+#define CSR7_RXDONE                    FIELD32(0x00000040)
+#define CSR7_DECRYPTION_DONE           FIELD32(0x00000080)
+#define CSR7_ENCRYPTION_DONE           FIELD32(0x00000100)
+#define CSR7_UART1_TX_TRESHOLD         FIELD32(0x00000200)
+#define CSR7_UART1_RX_TRESHOLD         FIELD32(0x00000400)
+#define CSR7_UART1_IDLE_TRESHOLD       FIELD32(0x00000800)
+#define CSR7_UART1_TX_BUFF_ERROR       FIELD32(0x00001000)
+#define CSR7_UART1_RX_BUFF_ERROR       FIELD32(0x00002000)
+#define CSR7_UART2_TX_TRESHOLD         FIELD32(0x00004000)
+#define CSR7_UART2_RX_TRESHOLD         FIELD32(0x00008000)
+#define CSR7_UART2_IDLE_TRESHOLD       FIELD32(0x00010000)
+#define CSR7_UART2_TX_BUFF_ERROR       FIELD32(0x00020000)
+#define CSR7_UART2_RX_BUFF_ERROR       FIELD32(0x00040000)
+#define CSR7_TIMER_CSR3_EXPIRE         FIELD32(0x00080000)
+
+/*
+ * CSR8: Interrupt mask register.
+ * Write 1 to mask interrupt.
+ * TBCN_EXPIRE: Beacon timer expired interrupt.
+ * TWAKE_EXPIRE: Wakeup timer expired interrupt.
+ * TATIMW_EXPIRE: Timer of atim window expired interrupt.
+ * TXDONE_TXRING: Tx ring transmit done interrupt.
+ * TXDONE_ATIMRING: Atim ring transmit done interrupt.
+ * TXDONE_PRIORING: Priority ring transmit done interrupt.
+ * RXDONE: Receive done interrupt.
+ * DECRYPTION_DONE: Decryption done interrupt.
+ * ENCRYPTION_DONE: Encryption done interrupt.
+ * UART1_TX_TRESHOLD: UART1 TX reaches threshold.
+ * UART1_RX_TRESHOLD: UART1 RX reaches threshold.
+ * UART1_IDLE_TRESHOLD: UART1 IDLE over threshold.
+ * UART1_TX_BUFF_ERROR: UART1 TX buffer error.
+ * UART1_RX_BUFF_ERROR: UART1 RX buffer error.
+ * UART2_TX_TRESHOLD: UART2 TX reaches threshold.
+ * UART2_RX_TRESHOLD: UART2 RX reaches threshold.
+ * UART2_IDLE_TRESHOLD: UART2 IDLE over threshold.
+ * UART2_TX_BUFF_ERROR: UART2 TX buffer error.
+ * UART2_RX_BUFF_ERROR: UART2 RX buffer error.
+ * TIMER_CSR3_EXPIRE: TIMECSR3 timer expired (802.1H quiet period).
+ */
+#define CSR8                           0x0020
+#define CSR8_TBCN_EXPIRE               FIELD32(0x00000001)
+#define CSR8_TWAKE_EXPIRE              FIELD32(0x00000002)
+#define CSR8_TATIMW_EXPIRE             FIELD32(0x00000004)
+#define CSR8_TXDONE_TXRING             FIELD32(0x00000008)
+#define CSR8_TXDONE_ATIMRING           FIELD32(0x00000010)
+#define CSR8_TXDONE_PRIORING           FIELD32(0x00000020)
+#define CSR8_RXDONE                    FIELD32(0x00000040)
+#define CSR8_DECRYPTION_DONE           FIELD32(0x00000080)
+#define CSR8_ENCRYPTION_DONE           FIELD32(0x00000100)
+#define CSR8_UART1_TX_TRESHOLD         FIELD32(0x00000200)
+#define CSR8_UART1_RX_TRESHOLD         FIELD32(0x00000400)
+#define CSR8_UART1_IDLE_TRESHOLD       FIELD32(0x00000800)
+#define CSR8_UART1_TX_BUFF_ERROR       FIELD32(0x00001000)
+#define CSR8_UART1_RX_BUFF_ERROR       FIELD32(0x00002000)
+#define CSR8_UART2_TX_TRESHOLD         FIELD32(0x00004000)
+#define CSR8_UART2_RX_TRESHOLD         FIELD32(0x00008000)
+#define CSR8_UART2_IDLE_TRESHOLD       FIELD32(0x00010000)
+#define CSR8_UART2_TX_BUFF_ERROR       FIELD32(0x00020000)
+#define CSR8_UART2_RX_BUFF_ERROR       FIELD32(0x00040000)
+#define CSR8_TIMER_CSR3_EXPIRE         FIELD32(0x00080000)
+
+/*
+ * CSR9: Maximum frame length register.
+ * MAX_FRAME_UNIT: Maximum frame length in 128b unit, default: 12.
+ */
+#define CSR9                           0x0024
+#define CSR9_MAX_FRAME_UNIT            FIELD32(0x00000f80)
+
+/*
+ * SECCSR0: WEP control register.
+ * KICK_DECRYPT: Kick decryption engine, self-clear.
+ * ONE_SHOT: 0: ring mode, 1: One shot only mode.
+ * DESC_ADDRESS: Descriptor physical address of frame.
+ */
+#define SECCSR0                                0x0028
+#define SECCSR0_KICK_DECRYPT           FIELD32(0x00000001)
+#define SECCSR0_ONE_SHOT               FIELD32(0x00000002)
+#define SECCSR0_DESC_ADDRESS           FIELD32(0xfffffffc)
+
+/*
+ * CSR11: Back-off control register.
+ * CWMIN: CWmin. Default cwmin is 31 (2^5 - 1).
+ * CWMAX: CWmax. Default cwmax is 1023 (2^10 - 1).
+ * SLOT_TIME: Slot time, default is 20us for 802.11b
+ * CW_SELECT: CWmin/CWmax selection, 1: Register, 0: TXD.
+ * LONG_RETRY: Long retry count.
+ * SHORT_RETRY: Short retry count.
+ */
+#define CSR11                          0x002c
+#define CSR11_CWMIN                    FIELD32(0x0000000f)
+#define CSR11_CWMAX                    FIELD32(0x000000f0)
+#define CSR11_SLOT_TIME                        FIELD32(0x00001f00)
+#define CSR11_CW_SELECT                        FIELD32(0x00002000)
+#define CSR11_LONG_RETRY               FIELD32(0x00ff0000)
+#define CSR11_SHORT_RETRY              FIELD32(0xff000000)
+
+/*
+ * CSR12: Synchronization configuration register 0.
+ * All units in 1/16 TU.
+ * BEACON_INTERVAL: Beacon interval, default is 100 TU.
+ * CFP_MAX_DURATION: Cfp maximum duration, default is 100 TU.
+ */
+#define CSR12                          0x0030
+#define CSR12_BEACON_INTERVAL          FIELD32(0x0000ffff)
+#define CSR12_CFP_MAX_DURATION         FIELD32(0xffff0000)
+
+/*
+ * CSR13: Synchronization configuration register 1.
+ * All units in 1/16 TU.
+ * ATIMW_DURATION: Atim window duration.
+ * CFP_PERIOD: Cfp period, default is 0 TU.
+ */
+#define CSR13                          0x0034
+#define CSR13_ATIMW_DURATION           FIELD32(0x0000ffff)
+#define CSR13_CFP_PERIOD               FIELD32(0x00ff0000)
+
+/*
+ * CSR14: Synchronization control register.
+ * TSF_COUNT: Enable tsf auto counting.
+ * TSF_SYNC: Tsf sync, 0: disable, 1: infra, 2: ad-hoc/master mode.
+ * TBCN: Enable tbcn with reload value.
+ * TCFP: Enable tcfp & cfp / cp switching.
+ * TATIMW: Enable tatimw & atim window switching.
+ * BEACON_GEN: Enable beacon generator.
+ * CFP_COUNT_PRELOAD: Cfp count preload value.
+ * TBCM_PRELOAD: Tbcn preload value in units of 64us.
+ */
+#define CSR14                          0x0038
+#define CSR14_TSF_COUNT                        FIELD32(0x00000001)
+#define CSR14_TSF_SYNC                 FIELD32(0x00000006)
+#define CSR14_TBCN                     FIELD32(0x00000008)
+#define CSR14_TCFP                     FIELD32(0x00000010)
+#define CSR14_TATIMW                   FIELD32(0x00000020)
+#define CSR14_BEACON_GEN               FIELD32(0x00000040)
+#define CSR14_CFP_COUNT_PRELOAD                FIELD32(0x0000ff00)
+#define CSR14_TBCM_PRELOAD             FIELD32(0xffff0000)
+
+/*
+ * CSR15: Synchronization status register.
+ * CFP: ASIC is in contention-free period.
+ * ATIMW: ASIC is in ATIM window.
+ * BEACON_SENT: Beacon is send.
+ */
+#define CSR15                          0x003c
+#define CSR15_CFP                      FIELD32(0x00000001)
+#define CSR15_ATIMW                    FIELD32(0x00000002)
+#define CSR15_BEACON_SENT              FIELD32(0x00000004)
+
+/*
+ * CSR16: TSF timer register 0.
+ */
+#define CSR16                          0x0040
+#define CSR16_LOW_TSFTIMER             FIELD32(0xffffffff)
+
+/*
+ * CSR17: TSF timer register 1.
+ */
+#define CSR17                          0x0044
+#define CSR17_HIGH_TSFTIMER            FIELD32(0xffffffff)
+
+/*
+ * CSR18: IFS timer register 0.
+ * SIFS: Sifs, default is 10 us.
+ * PIFS: Pifs, default is 30 us.
+ */
+#define CSR18                          0x0048
+#define CSR18_SIFS                     FIELD32(0x000001ff)
+#define CSR18_PIFS                     FIELD32(0x001f0000)
+
+/*
+ * CSR19: IFS timer register 1.
+ * DIFS: Difs, default is 50 us.
+ * EIFS: Eifs, default is 364 us.
+ */
+#define CSR19                          0x004c
+#define CSR19_DIFS                     FIELD32(0x0000ffff)
+#define CSR19_EIFS                     FIELD32(0xffff0000)
+
+/*
+ * CSR20: Wakeup timer register.
+ * DELAY_AFTER_TBCN: Delay after tbcn expired in units of 1/16 TU.
+ * TBCN_BEFORE_WAKEUP: Number of beacon before wakeup.
+ * AUTOWAKE: Enable auto wakeup / sleep mechanism.
+ */
+#define CSR20                          0x0050
+#define CSR20_DELAY_AFTER_TBCN         FIELD32(0x0000ffff)
+#define CSR20_TBCN_BEFORE_WAKEUP       FIELD32(0x00ff0000)
+#define CSR20_AUTOWAKE                 FIELD32(0x01000000)
+
+/*
+ * CSR21: EEPROM control register.
+ * RELOAD: Write 1 to reload eeprom content.
+ * TYPE_93C46: 1: 93c46, 0:93c66.
+ */
+#define CSR21                          0x0054
+#define CSR21_RELOAD                   FIELD32(0x00000001)
+#define CSR21_EEPROM_DATA_CLOCK                FIELD32(0x00000002)
+#define CSR21_EEPROM_CHIP_SELECT       FIELD32(0x00000004)
+#define CSR21_EEPROM_DATA_IN           FIELD32(0x00000008)
+#define CSR21_EEPROM_DATA_OUT          FIELD32(0x00000010)
+#define CSR21_TYPE_93C46               FIELD32(0x00000020)
+
+/*
+ * CSR22: CFP control register.
+ * CFP_DURATION_REMAIN: Cfp duration remain, in units of TU.
+ * RELOAD_CFP_DURATION: Write 1 to reload cfp duration remain.
+ */
+#define CSR22                          0x0058
+#define CSR22_CFP_DURATION_REMAIN      FIELD32(0x0000ffff)
+#define CSR22_RELOAD_CFP_DURATION      FIELD32(0x00010000)
+
+/*
+ * Transmit related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * TXCSR0: TX Control Register.
+ * KICK_TX: Kick tx ring.
+ * KICK_ATIM: Kick atim ring.
+ * KICK_PRIO: Kick priority ring.
+ * ABORT: Abort all transmit related ring operation.
+ */
+#define TXCSR0                         0x0060
+#define TXCSR0_KICK_TX                 FIELD32(0x00000001)
+#define TXCSR0_KICK_ATIM               FIELD32(0x00000002)
+#define TXCSR0_KICK_PRIO               FIELD32(0x00000004)
+#define TXCSR0_ABORT                   FIELD32(0x00000008)
+
+/*
+ * TXCSR1: TX Configuration Register.
+ * ACK_TIMEOUT: Ack timeout, default = sifs + 2*slottime + acktime @ 1mbps.
+ * ACK_CONSUME_TIME: Ack consume time, default = sifs + acktime @ 1mbps.
+ * TSF_OFFSET: Insert tsf offset.
+ * AUTORESPONDER: Enable auto responder which include ack & cts.
+ */
+#define TXCSR1                         0x0064
+#define TXCSR1_ACK_TIMEOUT             FIELD32(0x000001ff)
+#define TXCSR1_ACK_CONSUME_TIME                FIELD32(0x0003fe00)
+#define TXCSR1_TSF_OFFSET              FIELD32(0x00fc0000)
+#define TXCSR1_AUTORESPONDER           FIELD32(0x01000000)
+
+/*
+ * TXCSR2: Tx descriptor configuration register.
+ * TXD_SIZE: Tx descriptor size, default is 48.
+ * NUM_TXD: Number of tx entries in ring.
+ * NUM_ATIM: Number of atim entries in ring.
+ * NUM_PRIO: Number of priority entries in ring.
+ */
+#define TXCSR2                         0x0068
+#define TXCSR2_TXD_SIZE                        FIELD32(0x000000ff)
+#define TXCSR2_NUM_TXD                 FIELD32(0x0000ff00)
+#define TXCSR2_NUM_ATIM                        FIELD32(0x00ff0000)
+#define TXCSR2_NUM_PRIO                        FIELD32(0xff000000)
+
+/*
+ * TXCSR3: TX Ring Base address register.
+ */
+#define TXCSR3                         0x006c
+#define TXCSR3_TX_RING_REGISTER                FIELD32(0xffffffff)
+
+/*
+ * TXCSR4: TX Atim Ring Base address register.
+ */
+#define TXCSR4                         0x0070
+#define TXCSR4_ATIM_RING_REGISTER      FIELD32(0xffffffff)
+
+/*
+ * TXCSR5: TX Prio Ring Base address register.
+ */
+#define TXCSR5                         0x0074
+#define TXCSR5_PRIO_RING_REGISTER      FIELD32(0xffffffff)
+
+/*
+ * TXCSR6: Beacon Base address register.
+ */
+#define TXCSR6                         0x0078
+#define TXCSR6_BEACON_RING_REGISTER    FIELD32(0xffffffff)
+
+/*
+ * TXCSR7: Auto responder control register.
+ * AR_POWERMANAGEMENT: Auto responder power management bit.
+ */
+#define TXCSR7                         0x007c
+#define TXCSR7_AR_POWERMANAGEMENT      FIELD32(0x00000001)
+
+/*
+ * TXCSR8: CCK Tx BBP register.
+ * CCK_SIGNAL: BBP rate field address for CCK.
+ * CCK_SERVICE: BBP service field address for CCK.
+ * CCK_LENGTH_LOW: BBP length low byte address for CCK.
+ * CCK_LENGTH_HIGH: BBP length high byte address for CCK.
+ */
+#define TXCSR8                         0x0098
+#define TXCSR8_CCK_SIGNAL              FIELD32(0x000000ff)
+#define TXCSR8_CCK_SERVICE             FIELD32(0x0000ff00)
+#define TXCSR8_CCK_LENGTH_LOW          FIELD32(0x00ff0000)
+#define TXCSR8_CCK_LENGTH_HIGH         FIELD32(0xff000000)
+
+/*
+ * TXCSR9: OFDM TX BBP registers
+ * OFDM_SIGNAL: BBP rate field address for OFDM.
+ * OFDM_SERVICE: BBP service field address for OFDM.
+ * OFDM_LENGTH_LOW: BBP length low byte address for OFDM.
+ * OFDM_LENGTH_HIGH: BBP length high byte address for OFDM.
+ */
+#define TXCSR9                         0x0094
+#define TXCSR9_OFDM_RATE               FIELD32(0x000000ff)
+#define TXCSR9_OFDM_SERVICE            FIELD32(0x0000ff00)
+#define TXCSR9_OFDM_LENGTH_LOW         FIELD32(0x00ff0000)
+#define TXCSR9_OFDM_LENGTH_HIGH                FIELD32(0xff000000)
+
+/*
+ * Receive related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * RXCSR0: RX Control Register.
+ * DISABLE_RX: Disable rx engine.
+ * DROP_CRC: Drop crc error.
+ * DROP_PHYSICAL: Drop physical error.
+ * DROP_CONTROL: Drop control frame.
+ * DROP_NOT_TO_ME: Drop not to me unicast frame.
+ * DROP_TODS: Drop frame tods bit is true.
+ * DROP_VERSION_ERROR: Drop version error frame.
+ * PASS_CRC: Pass all packets with crc attached.
+ * PASS_CRC: Pass all packets with crc attached.
+ * PASS_PLCP: Pass all packets with 4 bytes PLCP attached.
+ * DROP_MCAST: Drop multicast frames.
+ * DROP_BCAST: Drop broadcast frames.
+ * ENABLE_QOS: Accept QOS data frame and parse QOS field.
+ */
+#define RXCSR0                         0x0080
+#define RXCSR0_DISABLE_RX              FIELD32(0x00000001)
+#define RXCSR0_DROP_CRC                        FIELD32(0x00000002)
+#define RXCSR0_DROP_PHYSICAL           FIELD32(0x00000004)
+#define RXCSR0_DROP_CONTROL            FIELD32(0x00000008)
+#define RXCSR0_DROP_NOT_TO_ME          FIELD32(0x00000010)
+#define RXCSR0_DROP_TODS               FIELD32(0x00000020)
+#define RXCSR0_DROP_VERSION_ERROR      FIELD32(0x00000040)
+#define RXCSR0_PASS_CRC                        FIELD32(0x00000080)
+#define RXCSR0_PASS_PLCP               FIELD32(0x00000100)
+#define RXCSR0_DROP_MCAST              FIELD32(0x00000200)
+#define RXCSR0_DROP_BCAST              FIELD32(0x00000400)
+#define RXCSR0_ENABLE_QOS              FIELD32(0x00000800)
+
+/*
+ * RXCSR1: RX descriptor configuration register.
+ * RXD_SIZE: Rx descriptor size, default is 32b.
+ * NUM_RXD: Number of rx entries in ring.
+ */
+#define RXCSR1                         0x0084
+#define RXCSR1_RXD_SIZE                        FIELD32(0x000000ff)
+#define RXCSR1_NUM_RXD                 FIELD32(0x0000ff00)
+
+/*
+ * RXCSR2: RX Ring base address register.
+ */
+#define RXCSR2                         0x0088
+#define RXCSR2_RX_RING_REGISTER                FIELD32(0xffffffff)
+
+/*
+ * RXCSR3: BBP ID register for Rx operation.
+ * BBP_ID#: BBP register # id.
+ * BBP_ID#_VALID: BBP register # id is valid or not.
+ */
+#define RXCSR3                         0x0090
+#define RXCSR3_BBP_ID0                 FIELD32(0x0000007f)
+#define RXCSR3_BBP_ID0_VALID           FIELD32(0x00000080)
+#define RXCSR3_BBP_ID1                 FIELD32(0x00007f00)
+#define RXCSR3_BBP_ID1_VALID           FIELD32(0x00008000)
+#define RXCSR3_BBP_ID2                 FIELD32(0x007f0000)
+#define RXCSR3_BBP_ID2_VALID           FIELD32(0x00800000)
+#define RXCSR3_BBP_ID3                 FIELD32(0x7f000000)
+#define RXCSR3_BBP_ID3_VALID           FIELD32(0x80000000)
+
+/*
+ * ARCSR1: Auto Responder PLCP config register 1.
+ * AR_BBP_DATA#: Auto responder BBP register # data.
+ * AR_BBP_ID#: Auto responder BBP register # Id.
+ */
+#define ARCSR1                         0x009c
+#define ARCSR1_AR_BBP_DATA2            FIELD32(0x000000ff)
+#define ARCSR1_AR_BBP_ID2              FIELD32(0x0000ff00)
+#define ARCSR1_AR_BBP_DATA3            FIELD32(0x00ff0000)
+#define ARCSR1_AR_BBP_ID3              FIELD32(0xff000000)
+
+/*
+ * Miscellaneous Registers.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+
+ */
+
+/*
+ * PCICSR: PCI control register.
+ * BIG_ENDIAN: 1: big endian, 0: little endian.
+ * RX_TRESHOLD: Rx threshold in dw to start pci access
+ * 0: 16dw (default), 1: 8dw, 2: 4dw, 3: 32dw.
+ * TX_TRESHOLD: Tx threshold in dw to start pci access
+ * 0: 0dw (default), 1: 1dw, 2: 4dw, 3: forward.
+ * BURST_LENTH: Pci burst length 0: 4dw (default, 1: 8dw, 2: 16dw, 3:32dw.
+ * ENABLE_CLK: Enable clk_run, pci clock can't going down to non-operational.
+ * READ_MULTIPLE: Enable memory read multiple.
+ * WRITE_INVALID: Enable memory write & invalid.
+ */
+#define PCICSR                         0x008c
+#define PCICSR_BIG_ENDIAN              FIELD32(0x00000001)
+#define PCICSR_RX_TRESHOLD             FIELD32(0x00000006)
+#define PCICSR_TX_TRESHOLD             FIELD32(0x00000018)
+#define PCICSR_BURST_LENTH             FIELD32(0x00000060)
+#define PCICSR_ENABLE_CLK              FIELD32(0x00000080)
+#define PCICSR_READ_MULTIPLE           FIELD32(0x00000100)
+#define PCICSR_WRITE_INVALID           FIELD32(0x00000200)
+
+/*
+ * CNT0: FCS error count.
+ * FCS_ERROR: FCS error count, cleared when read.
+ */
+#define CNT0                           0x00a0
+#define CNT0_FCS_ERROR                 FIELD32(0x0000ffff)
+
+/*
+ * Statistic Register.
+ * CNT1: PLCP error count.
+ * CNT2: Long error count.
+ */
+#define TIMECSR2                       0x00a8
+#define CNT1                           0x00ac
+#define CNT2                           0x00b0
+#define TIMECSR3                       0x00b4
+
+/*
+ * CNT3: CCA false alarm count.
+ */
+#define CNT3                           0x00b8
+#define CNT3_FALSE_CCA                 FIELD32(0x0000ffff)
+
+/*
+ * Statistic Register.
+ * CNT4: Rx FIFO overflow count.
+ * CNT5: Tx FIFO underrun count.
+ */
+#define CNT4                           0x00bc
+#define CNT5                           0x00c0
+
+/*
+ * Baseband Control Register.
+ */
+
+/*
+ * PWRCSR0: Power mode configuration register.
+ */
+#define PWRCSR0                                0x00c4
+
+/*
+ * Power state transition time registers.
+ */
+#define PSCSR0                         0x00c8
+#define PSCSR1                         0x00cc
+#define PSCSR2                         0x00d0
+#define PSCSR3                         0x00d4
+
+/*
+ * PWRCSR1: Manual power control / status register.
+ * Allowed state: 0 deep_sleep, 1: sleep, 2: standby, 3: awake.
+ * SET_STATE: Set state. Write 1 to trigger, self cleared.
+ * BBP_DESIRE_STATE: BBP desired state.
+ * RF_DESIRE_STATE: RF desired state.
+ * BBP_CURR_STATE: BBP current state.
+ * RF_CURR_STATE: RF current state.
+ * PUT_TO_SLEEP: Put to sleep. Write 1 to trigger, self cleared.
+ */
+#define PWRCSR1                                0x00d8
+#define PWRCSR1_SET_STATE              FIELD32(0x00000001)
+#define PWRCSR1_BBP_DESIRE_STATE       FIELD32(0x00000006)
+#define PWRCSR1_RF_DESIRE_STATE                FIELD32(0x00000018)
+#define PWRCSR1_BBP_CURR_STATE         FIELD32(0x00000060)
+#define PWRCSR1_RF_CURR_STATE          FIELD32(0x00000180)
+#define PWRCSR1_PUT_TO_SLEEP           FIELD32(0x00000200)
+
+/*
+ * TIMECSR: Timer control register.
+ * US_COUNT: 1 us timer count in units of clock cycles.
+ * US_64_COUNT: 64 us timer count in units of 1 us timer.
+ * BEACON_EXPECT: Beacon expect window.
+ */
+#define TIMECSR                                0x00dc
+#define TIMECSR_US_COUNT               FIELD32(0x000000ff)
+#define TIMECSR_US_64_COUNT            FIELD32(0x0000ff00)
+#define TIMECSR_BEACON_EXPECT          FIELD32(0x00070000)
+
+/*
+ * MACCSR0: MAC configuration register 0.
+ */
+#define MACCSR0                                0x00e0
+
+/*
+ * MACCSR1: MAC configuration register 1.
+ * KICK_RX: Kick one-shot rx in one-shot rx mode.
+ * ONESHOT_RXMODE: Enable one-shot rx mode for debugging.
+ * BBPRX_RESET_MODE: Ralink bbp rx reset mode.
+ * AUTO_TXBBP: Auto tx logic access bbp control register.
+ * AUTO_RXBBP: Auto rx logic access bbp control register.
+ * LOOPBACK: Loopback mode. 0: normal, 1: internal, 2: external, 3:rsvd.
+ * INTERSIL_IF: Intersil if calibration pin.
+ */
+#define MACCSR1                                0x00e4
+#define MACCSR1_KICK_RX                        FIELD32(0x00000001)
+#define MACCSR1_ONESHOT_RXMODE         FIELD32(0x00000002)
+#define MACCSR1_BBPRX_RESET_MODE       FIELD32(0x00000004)
+#define MACCSR1_AUTO_TXBBP             FIELD32(0x00000008)
+#define MACCSR1_AUTO_RXBBP             FIELD32(0x00000010)
+#define MACCSR1_LOOPBACK               FIELD32(0x00000060)
+#define MACCSR1_INTERSIL_IF            FIELD32(0x00000080)
+
+/*
+ * RALINKCSR: Ralink Rx auto-reset BBCR.
+ * AR_BBP_DATA#: Auto reset BBP register # data.
+ * AR_BBP_ID#: Auto reset BBP register # id.
+ */
+#define RALINKCSR                      0x00e8
+#define RALINKCSR_AR_BBP_DATA0         FIELD32(0x000000ff)
+#define RALINKCSR_AR_BBP_ID0           FIELD32(0x00007f00)
+#define RALINKCSR_AR_BBP_VALID0                FIELD32(0x00008000)
+#define RALINKCSR_AR_BBP_DATA1         FIELD32(0x00ff0000)
+#define RALINKCSR_AR_BBP_ID1           FIELD32(0x7f000000)
+#define RALINKCSR_AR_BBP_VALID1                FIELD32(0x80000000)
+
+/*
+ * BCNCSR: Beacon interval control register.
+ * CHANGE: Write one to change beacon interval.
+ * DELTATIME: The delta time value.
+ * NUM_BEACON: Number of beacon according to mode.
+ * MODE: Please refer to asic specs.
+ * PLUS: Plus or minus delta time value.
+ */
+#define BCNCSR                         0x00ec
+#define BCNCSR_CHANGE                  FIELD32(0x00000001)
+#define BCNCSR_DELTATIME               FIELD32(0x0000001e)
+#define BCNCSR_NUM_BEACON              FIELD32(0x00001fe0)
+#define BCNCSR_MODE                    FIELD32(0x00006000)
+#define BCNCSR_PLUS                    FIELD32(0x00008000)
+
+/*
+ * BBP / RF / IF Control Register.
+ */
+
+/*
+ * BBPCSR: BBP serial control register.
+ * VALUE: Register value to program into BBP.
+ * REGNUM: Selected BBP register.
+ * BUSY: 1: asic is busy execute BBP programming.
+ * WRITE_CONTROL: 1: write BBP, 0: read BBP.
+ */
+#define BBPCSR                         0x00f0
+#define BBPCSR_VALUE                   FIELD32(0x000000ff)
+#define BBPCSR_REGNUM                  FIELD32(0x00007f00)
+#define BBPCSR_BUSY                    FIELD32(0x00008000)
+#define BBPCSR_WRITE_CONTROL           FIELD32(0x00010000)
+
+/*
+ * RFCSR: RF serial control register.
+ * VALUE: Register value + id to program into rf/if.
+ * NUMBER_OF_BITS: Number of bits used in value (i:20, rfmd:22).
+ * IF_SELECT: Chip to program: 0: rf, 1: if.
+ * PLL_LD: Rf pll_ld status.
+ * BUSY: 1: asic is busy execute rf programming.
+ */
+#define RFCSR                          0x00f4
+#define RFCSR_VALUE                    FIELD32(0x00ffffff)
+#define RFCSR_NUMBER_OF_BITS           FIELD32(0x1f000000)
+#define RFCSR_IF_SELECT                        FIELD32(0x20000000)
+#define RFCSR_PLL_LD                   FIELD32(0x40000000)
+#define RFCSR_BUSY                     FIELD32(0x80000000)
+
+/*
+ * LEDCSR: LED control register.
+ * ON_PERIOD: On period, default 70ms.
+ * OFF_PERIOD: Off period, default 30ms.
+ * LINK: 0: linkoff, 1: linkup.
+ * ACTIVITY: 0: idle, 1: active.
+ * LINK_POLARITY: 0: active low, 1: active high.
+ * ACTIVITY_POLARITY: 0: active low, 1: active high.
+ * LED_DEFAULT: LED state for "enable" 0: ON, 1: OFF.
+ */
+#define LEDCSR                         0x00f8
+#define LEDCSR_ON_PERIOD               FIELD32(0x000000ff)
+#define LEDCSR_OFF_PERIOD              FIELD32(0x0000ff00)
+#define LEDCSR_LINK                    FIELD32(0x00010000)
+#define LEDCSR_ACTIVITY                        FIELD32(0x00020000)
+#define LEDCSR_LINK_POLARITY           FIELD32(0x00040000)
+#define LEDCSR_ACTIVITY_POLARITY       FIELD32(0x00080000)
+#define LEDCSR_LED_DEFAULT             FIELD32(0x00100000)
+
+/*
+ * AES control register.
+ */
+#define SECCSR3                                0x00fc
+
+/*
+ * ASIC pointer information.
+ * RXPTR: Current RX ring address.
+ * TXPTR: Current Tx ring address.
+ * PRIPTR: Current Priority ring address.
+ * ATIMPTR: Current ATIM ring address.
+ */
+#define RXPTR                          0x0100
+#define TXPTR                          0x0104
+#define PRIPTR                         0x0108
+#define ATIMPTR                                0x010c
+
+/*
+ * TXACKCSR0: TX ACK timeout.
+ */
+#define TXACKCSR0                      0x0110
+
+/*
+ * ACK timeout count registers.
+ * ACKCNT0: TX ACK timeout count.
+ * ACKCNT1: RX ACK timeout count.
+ */
+#define ACKCNT0                                0x0114
+#define ACKCNT1                                0x0118
+
+/*
+ * GPIO and others.
+ */
+
+/*
+ * GPIOCSR: GPIO control register.
+ */
+#define GPIOCSR                                0x0120
+#define GPIOCSR_BIT0                   FIELD32(0x00000001)
+#define GPIOCSR_BIT1                   FIELD32(0x00000002)
+#define GPIOCSR_BIT2                   FIELD32(0x00000004)
+#define GPIOCSR_BIT3                   FIELD32(0x00000008)
+#define GPIOCSR_BIT4                   FIELD32(0x00000010)
+#define GPIOCSR_BIT5                   FIELD32(0x00000020)
+#define GPIOCSR_BIT6                   FIELD32(0x00000040)
+#define GPIOCSR_BIT7                   FIELD32(0x00000080)
+#define GPIOCSR_DIR0                   FIELD32(0x00000100)
+#define GPIOCSR_DIR1                   FIELD32(0x00000200)
+#define GPIOCSR_DIR2                   FIELD32(0x00000400)
+#define GPIOCSR_DIR3                   FIELD32(0x00000800)
+#define GPIOCSR_DIR4                   FIELD32(0x00001000)
+#define GPIOCSR_DIR5                   FIELD32(0x00002000)
+#define GPIOCSR_DIR6                   FIELD32(0x00004000)
+#define GPIOCSR_DIR7                   FIELD32(0x00008000)
+
+/*
+ * FIFO pointer registers.
+ * FIFOCSR0: TX FIFO pointer.
+ * FIFOCSR1: RX FIFO pointer.
+ */
+#define FIFOCSR0                       0x0128
+#define FIFOCSR1                       0x012c
+
+/*
+ * BCNCSR1: Tx BEACON offset time control register.
+ * PRELOAD: Beacon timer offset in units of usec.
+ * BEACON_CWMIN: 2^CwMin.
+ */
+#define BCNCSR1                                0x0130
+#define BCNCSR1_PRELOAD                        FIELD32(0x0000ffff)
+#define BCNCSR1_BEACON_CWMIN           FIELD32(0x000f0000)
+
+/*
+ * MACCSR2: TX_PE to RX_PE turn-around time control register
+ * DELAY: RX_PE low width, in units of pci clock cycle.
+ */
+#define MACCSR2                                0x0134
+#define MACCSR2_DELAY                  FIELD32(0x000000ff)
+
+/*
+ * TESTCSR: TEST mode selection register.
+ */
+#define TESTCSR                                0x0138
+
+/*
+ * ARCSR2: 1 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR2                         0x013c
+#define ARCSR2_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR2_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR2_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR3: 2 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR3                         0x0140
+#define ARCSR3_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR3_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR3_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR4: 5.5 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR4                         0x0144
+#define ARCSR4_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR4_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR4_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ARCSR5: 11 Mbps ACK/CTS PLCP.
+ */
+#define ARCSR5                         0x0148
+#define ARCSR5_SIGNAL                  FIELD32(0x000000ff)
+#define ARCSR5_SERVICE                 FIELD32(0x0000ff00)
+#define ARCSR5_LENGTH                  FIELD32(0xffff0000)
+
+/*
+ * ACK/CTS payload consumed time registers.
+ * ARTCSR0: CCK ACK/CTS payload consumed time for 1/2/5.5/11 mbps.
+ * ARTCSR1: OFDM ACK/CTS payload consumed time for 6/9/12/18 mbps.
+ * ARTCSR2: OFDM ACK/CTS payload consumed time for 24/36/48/54 mbps.
+ */
+#define ARTCSR0                                0x014c
+#define ARTCSR1                                0x0150
+#define ARTCSR2                                0x0154
+
+/*
+ * SECCSR1_RT2509: WEP control register.
+ * KICK_ENCRYPT: Kick encryption engine, self-clear.
+ * ONE_SHOT: 0: ring mode, 1: One shot only mode.
+ * DESC_ADDRESS: Descriptor physical address of frame.
+ */
+#define SECCSR1                                0x0158
+#define SECCSR1_KICK_ENCRYPT           FIELD32(0x00000001)
+#define SECCSR1_ONE_SHOT               FIELD32(0x00000002)
+#define SECCSR1_DESC_ADDRESS           FIELD32(0xfffffffc)
+
+/*
+ * BBPCSR1: BBP TX configuration.
+ */
+#define BBPCSR1                                0x015c
+#define BBPCSR1_CCK                    FIELD32(0x00000003)
+#define BBPCSR1_CCK_FLIP               FIELD32(0x00000004)
+#define BBPCSR1_OFDM                   FIELD32(0x00030000)
+#define BBPCSR1_OFDM_FLIP              FIELD32(0x00040000)
+
+/*
+ * Dual band configuration registers.
+ * DBANDCSR0: Dual band configuration register 0.
+ * DBANDCSR1: Dual band configuration register 1.
+ */
+#define DBANDCSR0                      0x0160
+#define DBANDCSR1                      0x0164
+
+/*
+ * BBPPCSR: BBP Pin control register.
+ */
+#define BBPPCSR                                0x0168
+
+/*
+ * MAC special debug mode selection registers.
+ * DBGSEL0: MAC special debug mode selection register 0.
+ * DBGSEL1: MAC special debug mode selection register 1.
+ */
+#define DBGSEL0                                0x016c
+#define DBGSEL1                                0x0170
+
+/*
+ * BISTCSR: BBP BIST register.
+ */
+#define BISTCSR                                0x0174
+
+/*
+ * Multicast filter registers.
+ * MCAST0: Multicast filter register 0.
+ * MCAST1: Multicast filter register 1.
+ */
+#define MCAST0                         0x0178
+#define MCAST1                         0x017c
+
+/*
+ * UART registers.
+ * UARTCSR0: UART1 TX register.
+ * UARTCSR1: UART1 RX register.
+ * UARTCSR3: UART1 frame control register.
+ * UARTCSR4: UART1 buffer control register.
+ * UART2CSR0: UART2 TX register.
+ * UART2CSR1: UART2 RX register.
+ * UART2CSR3: UART2 frame control register.
+ * UART2CSR4: UART2 buffer control register.
+ */
+#define UARTCSR0                       0x0180
+#define UARTCSR1                       0x0184
+#define UARTCSR3                       0x0188
+#define UARTCSR4                       0x018c
+#define UART2CSR0                      0x0190
+#define UART2CSR1                      0x0194
+#define UART2CSR3                      0x0198
+#define UART2CSR4                      0x019c
+
+/*
+ * RF registers
+ */
+#define RF1_TUNER                      FIELD32(0x00020000)
+#define RF3_TUNER                      FIELD32(0x00000100)
+#define RF3_TXPOWER                    FIELD32(0x00003e00)
+
+/*
+ * EEPROM content.
+ * The wordsize of the EEPROM is 16 bits.
+ */
+
+/*
+ * HW MAC address.
+ */
+#define EEPROM_MAC_ADDR_0              0x0002
+#define EEPROM_MAC_ADDR_BYTE0          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE1          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR1               0x0003
+#define EEPROM_MAC_ADDR_BYTE2          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE3          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR_2              0x0004
+#define EEPROM_MAC_ADDR_BYTE4          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE5          FIELD16(0xff00)
+
+/*
+ * EEPROM antenna.
+ * ANTENNA_NUM: Number of antenna's.
+ * TX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * LED_MODE: 0: default, 1: TX/RX activity,2: Single (ignore link), 3: rsvd.
+ * DYN_TXAGC: Dynamic TX AGC control.
+ * HARDWARE_RADIO: 1: Hardware controlled radio. Read GPIO0.
+ * RF_TYPE: Rf_type of this adapter.
+ */
+#define EEPROM_ANTENNA                 0x10
+#define EEPROM_ANTENNA_NUM             FIELD16(0x0003)
+#define EEPROM_ANTENNA_TX_DEFAULT      FIELD16(0x000c)
+#define EEPROM_ANTENNA_RX_DEFAULT      FIELD16(0x0030)
+#define EEPROM_ANTENNA_LED_MODE                FIELD16(0x01c0)
+#define EEPROM_ANTENNA_DYN_TXAGC       FIELD16(0x0200)
+#define EEPROM_ANTENNA_HARDWARE_RADIO  FIELD16(0x0400)
+#define EEPROM_ANTENNA_RF_TYPE         FIELD16(0xf800)
+
+/*
+ * EEPROM NIC config.
+ * CARDBUS_ACCEL: 0: enable, 1: disable.
+ * DYN_BBP_TUNE: 0: enable, 1: disable.
+ * CCK_TX_POWER: CCK TX power compensation.
+ */
+#define EEPROM_NIC                     0x11
+#define EEPROM_NIC_CARDBUS_ACCEL       FIELD16(0x0001)
+#define EEPROM_NIC_DYN_BBP_TUNE                FIELD16(0x0002)
+#define EEPROM_NIC_CCK_TX_POWER                FIELD16(0x000c)
+
+/*
+ * EEPROM geography.
+ * GEO: Default geography setting for device.
+ */
+#define EEPROM_GEOGRAPHY               0x12
+#define EEPROM_GEOGRAPHY_GEO           FIELD16(0x0f00)
+
+/*
+ * EEPROM BBP.
+ */
+#define EEPROM_BBP_START               0x13
+#define EEPROM_BBP_SIZE                        16
+#define EEPROM_BBP_VALUE               FIELD16(0x00ff)
+#define EEPROM_BBP_REG_ID              FIELD16(0xff00)
+
+/*
+ * EEPROM TXPOWER
+ */
+#define EEPROM_TXPOWER_START           0x23
+#define EEPROM_TXPOWER_SIZE            7
+#define EEPROM_TXPOWER_1               FIELD16(0x00ff)
+#define EEPROM_TXPOWER_2               FIELD16(0xff00)
+
+/*
+ * RSSI <-> dBm offset calibration
+ */
+#define EEPROM_CALIBRATE_OFFSET                0x3e
+#define EEPROM_CALIBRATE_OFFSET_RSSI   FIELD16(0x00ff)
+
+/*
+ * BBP content.
+ * The wordsize of the BBP is 8 bits.
+ */
+
+/*
+ * BBP_R2: TX antenna control
+ */
+#define BBP_R2_TX_ANTENNA              FIELD8(0x03)
+#define BBP_R2_TX_IQ_FLIP              FIELD8(0x04)
+
+/*
+ * BBP_R14: RX antenna control
+ */
+#define BBP_R14_RX_ANTENNA             FIELD8(0x03)
+#define BBP_R14_RX_IQ_FLIP             FIELD8(0x04)
+
+/*
+ * DMA descriptor defines.
+ */
+#define TXD_DESC_SIZE                  ( 11 * sizeof(struct data_desc) )
+#define RXD_DESC_SIZE                  ( 11 * sizeof(struct data_desc) )
+
+/*
+ * TX descriptor format for TX, PRIO, ATIM and Beacon Ring.
+ */
+
+/*
+ * Word0
+ */
+#define TXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define TXD_W0_VALID                   FIELD32(0x00000002)
+#define TXD_W0_RESULT                  FIELD32(0x0000001c)
+#define TXD_W0_RETRY_COUNT             FIELD32(0x000000e0)
+#define TXD_W0_MORE_FRAG               FIELD32(0x00000100)
+#define TXD_W0_ACK                     FIELD32(0x00000200)
+#define TXD_W0_TIMESTAMP               FIELD32(0x00000400)
+#define TXD_W0_OFDM                    FIELD32(0x00000800)
+#define TXD_W0_CIPHER_OWNER            FIELD32(0x00001000)
+#define TXD_W0_IFS                     FIELD32(0x00006000)
+#define TXD_W0_RETRY_MODE              FIELD32(0x00008000)
+#define TXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define TXD_W0_CIPHER_ALG              FIELD32(0xe0000000)
+
+/*
+ * Word1
+ */
+#define TXD_W1_BUFFER_ADDRESS          FIELD32(0xffffffff)
+
+/*
+ * Word2
+ */
+#define TXD_W2_IV_OFFSET               FIELD32(0x0000003f)
+#define TXD_W2_AIFS                    FIELD32(0x000000c0)
+#define TXD_W2_CWMIN                   FIELD32(0x00000f00)
+#define TXD_W2_CWMAX                   FIELD32(0x0000f000)
+
+/*
+ * Word3: PLCP information
+ */
+#define TXD_W3_PLCP_SIGNAL             FIELD32(0x000000ff)
+#define TXD_W3_PLCP_SERVICE            FIELD32(0x0000ff00)
+#define TXD_W3_PLCP_LENGTH_LOW         FIELD32(0x00ff0000)
+#define TXD_W3_PLCP_LENGTH_HIGH                FIELD32(0xff000000)
+
+/*
+ * Word4
+ */
+#define TXD_W4_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word5
+ */
+#define TXD_W5_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Word6-9: Key
+ */
+#define TXD_W6_KEY                     FIELD32(0xffffffff)
+#define TXD_W7_KEY                     FIELD32(0xffffffff)
+#define TXD_W8_KEY                     FIELD32(0xffffffff)
+#define TXD_W9_KEY                     FIELD32(0xffffffff)
+
+/*
+ * Word10
+ */
+#define TXD_W10_RTS                    FIELD32(0x00000001)
+#define TXD_W10_TX_RATE                        FIELD32(0x000000fe)
+
+/*
+ * RX descriptor format for RX Ring.
+ */
+
+/*
+ * Word0
+ */
+#define RXD_W0_OWNER_NIC               FIELD32(0x00000001)
+#define RXD_W0_UNICAST_TO_ME           FIELD32(0x00000002)
+#define RXD_W0_MULTICAST               FIELD32(0x00000004)
+#define RXD_W0_BROADCAST               FIELD32(0x00000008)
+#define RXD_W0_MY_BSS                  FIELD32(0x00000010)
+#define RXD_W0_CRC                     FIELD32(0x00000020)
+#define RXD_W0_OFDM                    FIELD32(0x00000040)
+#define RXD_W0_PHYSICAL_ERROR          FIELD32(0x00000080)
+#define RXD_W0_CIPHER_OWNER            FIELD32(0x00000100)
+#define RXD_W0_ICV_ERROR               FIELD32(0x00000200)
+#define RXD_W0_IV_OFFSET               FIELD32(0x0000fc00)
+#define RXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define RXD_W0_CIPHER_ALG              FIELD32(0xe0000000)
+
+/*
+ * Word1
+ */
+#define RXD_W1_BUFFER_ADDRESS          FIELD32(0xffffffff)
+
+/*
+ * Word2
+ */
+#define RXD_W2_SIGNAL                  FIELD32(0x000000ff)
+#define RXD_W2_RSSI                    FIELD32(0x0000ff00)
+#define RXD_W2_TA                      FIELD32(0xffff0000)
+
+/*
+ * Word3
+ */
+#define RXD_W3_TA                      FIELD32(0xffffffff)
+
+/*
+ * Word4
+ */
+#define RXD_W4_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word5
+ */
+#define RXD_W5_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Word6-9: Key
+ */
+#define RXD_W6_KEY                     FIELD32(0xffffffff)
+#define RXD_W7_KEY                     FIELD32(0xffffffff)
+#define RXD_W8_KEY                     FIELD32(0xffffffff)
+#define RXD_W9_KEY                     FIELD32(0xffffffff)
+
+/*
+ * Word10
+ */
+#define RXD_W10_DROP                   FIELD32(0x00000001)
+
+/*
+ * Macro's for converting txpower from EEPROM to dscape value
+ * and from dscape value to register value.
+ */
+#define MIN_TXPOWER    0
+#define MAX_TXPOWER    31
+#define DEFAULT_TXPOWER        24
+
+#define TXPOWER_FROM_DEV(__txpower)            \
+({                                             \
+       ((__txpower) > MAX_TXPOWER) ?           \
+               DEFAULT_TXPOWER : (__txpower);  \
+})
+
+#define TXPOWER_TO_DEV(__txpower)                      \
+({                                                     \
+       ((__txpower) <= MIN_TXPOWER) ? MIN_TXPOWER :    \
+       (((__txpower) >= MAX_TXPOWER) ? MAX_TXPOWER :   \
+       (__txpower));                                   \
+})
+
+#endif /* RT2500PCI_H */
diff --git a/package/rt2x00/src/rt2500usb.c b/package/rt2x00/src/rt2500usb.c
new file mode 100644 (file)
index 0000000..c5459b5
--- /dev/null
@@ -0,0 +1,1680 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2500usb
+       Abstract: rt2500usb device specific routines.
+       Supported chipsets: RT2570.
+ */
+
+/*
+ * Set enviroment defines for rt2x00.h
+ */
+#define DRV_NAME "rt2500usb"
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/version.h>
+#include <linux/init.h>
+#include <linux/usb.h>
+#include <linux/delay.h>
+#include <linux/etherdevice.h>
+
+#include "rt2x00.h"
+#include "rt2x00usb.h"
+#include "rt2500usb.h"
+
+/*
+ * Register access.
+ * All access to the CSR registers will go through the methods
+ * rt2500usb_register_read and rt2500usb_register_write.
+ * BBP and RF register require indirect register access,
+ * and use the CSR registers BBPCSR and RFCSR to achieve this.
+ * These indirect registers work with busy bits,
+ * and we will try maximal REGISTER_BUSY_COUNT times to access
+ * the register while taking a REGISTER_BUSY_DELAY us delay
+ * between each attampt. When the busy bit is still set at that time,
+ * the access attempt is considered to have failed,
+ * and we will print an error.
+ */
+static inline void rt2500usb_register_read(
+       const struct rt2x00_dev *rt2x00dev,
+       const u16 offset, u16 *value)
+{
+       __le16 reg;
+       rt2x00usb_vendor_request(
+               rt2x00dev, USB_MULTI_READ, USB_VENDOR_REQUEST_IN,
+               offset, 0x00, &reg, sizeof(u16), REGISTER_TIMEOUT);
+       *value = le16_to_cpu(reg);
+}
+
+static inline void rt2500usb_register_multiread(
+       const struct rt2x00_dev *rt2x00dev,
+       const u16 offset, void *value, const u16 length)
+{
+       rt2x00usb_vendor_request(
+               rt2x00dev, USB_MULTI_READ, USB_VENDOR_REQUEST_IN,
+               offset, 0x00, value, length,
+               REGISTER_TIMEOUT * (length / sizeof(u16)));
+}
+
+static inline void rt2500usb_register_write(
+       const struct rt2x00_dev *rt2x00dev,
+       const u16 offset, u16 value)
+{
+       __le16 reg = cpu_to_le16(value);
+       rt2x00usb_vendor_request(
+               rt2x00dev, USB_MULTI_WRITE, USB_VENDOR_REQUEST_OUT,
+               offset, 0x00, &reg, sizeof(u16), REGISTER_TIMEOUT);
+}
+
+static inline void rt2500usb_register_multiwrite(
+       const struct rt2x00_dev *rt2x00dev,
+       const u16 offset, void *value, const u16 length)
+{
+       rt2x00usb_vendor_request(
+               rt2x00dev, USB_MULTI_WRITE, USB_VENDOR_REQUEST_OUT,
+               offset, 0x00, value, length,
+               REGISTER_TIMEOUT * (length / sizeof(u16)));
+}
+
+static u16 rt2500usb_bbp_check(const struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500usb_register_read(rt2x00dev, PHY_CSR8, &reg);
+               if (!rt2x00_get_field16(reg, PHY_CSR8_BUSY))
+                       break;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       return reg;
+}
+
+static void rt2500usb_bbp_write(const struct rt2x00_dev *rt2x00dev,
+       const u8 reg_id, const u8 value)
+{
+       u16 reg;
+
+       /*
+        *  Wait until the BBP becomes ready.
+        */
+       reg = rt2500usb_bbp_check(rt2x00dev);
+       if (rt2x00_get_field16(reg, PHY_CSR8_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR8 register busy. Write failed.\n");
+               return;
+       }
+
+       /*
+        * Write the data into the BBP.
+        */
+       reg = 0;
+       rt2x00_set_field16(&reg, PHY_CSR7_DATA, value);
+       rt2x00_set_field16(&reg, PHY_CSR7_REG_ID, reg_id);
+       rt2x00_set_field16(&reg, PHY_CSR7_READ_CONTROL, 0);
+
+       rt2500usb_register_write(rt2x00dev, PHY_CSR7, reg);
+}
+
+static void rt2500usb_bbp_read(const struct rt2x00_dev *rt2x00dev,
+       const u8 reg_id, u8 *value)
+{
+       u16 reg;
+
+       /*
+        *  Wait until the BBP becomes ready.
+        */
+       reg = rt2500usb_bbp_check(rt2x00dev);
+       if (rt2x00_get_field16(reg, PHY_CSR8_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR8 register busy. Read failed.\n");
+               return;
+       }
+
+       /*
+        * Write the request into the BBP.
+        */
+       reg =0;
+       rt2x00_set_field16(&reg, PHY_CSR7_REG_ID, reg_id);
+       rt2x00_set_field16(&reg, PHY_CSR7_READ_CONTROL, 1);
+
+       rt2500usb_register_write(rt2x00dev, PHY_CSR7, reg);
+
+       /*
+        *  Wait until the BBP becomes ready.
+        */
+       reg = rt2500usb_bbp_check(rt2x00dev);
+       if (rt2x00_get_field16(reg, PHY_CSR8_BUSY)) {
+               ERROR(rt2x00dev, "PHY_CSR8 register busy. Read failed.\n");
+               *value = 0xff;
+               return;
+       }
+
+       rt2500usb_register_read(rt2x00dev, PHY_CSR7, &reg);
+       *value = rt2x00_get_field16(reg, PHY_CSR7_DATA);
+}
+
+static void rt2500usb_rf_write(const struct rt2x00_dev *rt2x00dev,
+       const u32 value)
+{
+       u16 reg;
+       unsigned int i;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500usb_register_read(rt2x00dev, PHY_CSR10, &reg);
+               if (!rt2x00_get_field16(reg, PHY_CSR10_RF_BUSY))
+                       goto rf_write;
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "PHY_CSR10 register busy. Write failed.\n");
+       return;
+
+rf_write:
+       reg = 0;
+       rt2x00_set_field16(&reg, PHY_CSR9_RF_VALUE, value);
+       rt2500usb_register_write(rt2x00dev, PHY_CSR9, reg);
+
+       reg = 0;
+       rt2x00_set_field16(&reg, PHY_CSR10_RF_VALUE, value >> 16);
+       rt2x00_set_field16(&reg, PHY_CSR10_RF_NUMBER_OF_BITS, 20);
+       rt2x00_set_field16(&reg, PHY_CSR10_RF_IF_SELECT, 0);
+       rt2x00_set_field16(&reg, PHY_CSR10_RF_BUSY, 1);
+
+       rt2500usb_register_write(rt2x00dev, PHY_CSR10, reg);
+}
+
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+#define CSR_OFFSET(__word)     ( CSR_REG_BASE + ((__word) * sizeof(u16)) )
+
+static void rt2500usb_read_csr(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2500usb_register_read(rt2x00dev, CSR_OFFSET(word), data);
+}
+
+static void rt2500usb_write_csr(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2500usb_register_write(rt2x00dev, CSR_OFFSET(word), *((u16*)data));
+}
+
+static void rt2500usb_read_eeprom(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00_eeprom_read(rt2x00dev, word, data);
+}
+
+static void rt2500usb_write_eeprom(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2x00_eeprom_write(rt2x00dev, word, *((u16*)data));
+}
+
+static void rt2500usb_read_bbp(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2500usb_bbp_read(rt2x00dev, word, data);
+}
+
+static void rt2500usb_write_bbp(struct rt2x00_dev *rt2x00dev,
+       const unsigned long word, void *data)
+{
+       rt2500usb_bbp_write(rt2x00dev, word, *((u8*)data));
+}
+
+static const struct rt2x00debug rt2500usb_rt2x00debug = {
+       .owner          = THIS_MODULE,
+       .reg_csr        = {
+               .read           = rt2500usb_read_csr,
+               .write          = rt2500usb_write_csr,
+               .word_size      = sizeof(u16),
+               .word_count     = CSR_REG_SIZE / sizeof(u16),
+       },
+       .reg_eeprom     = {
+               .read           = rt2500usb_read_eeprom,
+               .write          = rt2500usb_write_eeprom,
+               .word_size      = sizeof(u16),
+               .word_count     = EEPROM_SIZE / sizeof(u16),
+       },
+       .reg_bbp        = {
+               .read           = rt2500usb_read_bbp,
+               .write          = rt2500usb_write_bbp,
+               .word_size      = sizeof(u8),
+               .word_count     = BBP_SIZE / sizeof(u8),
+       },
+};
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+
+/*
+ * Configuration handlers.
+ */
+static void rt2500usb_config_bssid(struct rt2x00_dev *rt2x00dev, u8 *bssid)
+{
+       u16 reg[3];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, bssid, ETH_ALEN);
+
+       /*
+        * The BSSID is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2500usb_register_multiwrite(rt2x00dev, MAC_CSR5, &reg, sizeof(reg));
+}
+
+static void rt2500usb_config_promisc(struct rt2x00_dev *rt2x00dev,
+       const int promisc)
+{
+       u16 reg;
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR2, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR2_DROP_NOT_TO_ME, !promisc);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR2, reg);
+}
+
+static void rt2500usb_config_type(struct rt2x00_dev *rt2x00dev,
+       const int type)
+{
+       u16 reg;
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR19, 0);
+
+       /*
+        * Apply hardware packet filter.
+        */
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR2, &reg);
+
+       if (!is_monitor_present(&rt2x00dev->interface) &&
+           (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_STA))
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_TODS, 1);
+       else
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_TODS, 0);
+
+       rt2x00_set_field16(&reg, TXRX_CSR2_DROP_CRC, 1);
+       if (is_monitor_present(&rt2x00dev->interface)) {
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_PHYSICAL, 0);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_CONTROL, 0);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_VERSION_ERROR, 0);
+       } else {
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_PHYSICAL, 1);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_CONTROL, 1);
+               rt2x00_set_field16(&reg, TXRX_CSR2_DROP_VERSION_ERROR, 1);
+       }
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR2, reg);
+
+       /*
+        * Enable beacon config
+        */
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR20, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR20_OFFSET,
+               (PREAMBLE + get_duration(IEEE80211_HEADER, 2)) >> 6);
+       if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field16(&reg, TXRX_CSR20_BCN_EXPECT_WINDOW, 0);
+       else
+               rt2x00_set_field16(&reg, TXRX_CSR20_BCN_EXPECT_WINDOW, 2);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR20, reg);
+
+       /*
+        * Enable synchronisation.
+        */
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR18, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR18_OFFSET, 0);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR18, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR19, &reg);
+       if (is_interface_present(&rt2x00dev->interface)) {
+               rt2x00_set_field16(&reg, TXRX_CSR19_TSF_COUNT, 1);
+               rt2x00_set_field16(&reg, TXRX_CSR19_TBCN, 1);
+       }
+
+       rt2x00_set_field16(&reg, TXRX_CSR19_BEACON_GEN, 0);
+       if (type == IEEE80211_IF_TYPE_IBSS || type == IEEE80211_IF_TYPE_AP)
+               rt2x00_set_field16(&reg, TXRX_CSR19_TSF_SYNC, 2);
+       else if (type == IEEE80211_IF_TYPE_STA)
+               rt2x00_set_field16(&reg, TXRX_CSR19_TSF_SYNC, 1);
+       else if (is_monitor_present(&rt2x00dev->interface) &&
+                !is_interface_present(&rt2x00dev->interface))
+               rt2x00_set_field16(&reg, TXRX_CSR19_TSF_SYNC, 0);
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR19, reg);
+}
+
+static void rt2500usb_config_channel(struct rt2x00_dev *rt2x00dev,
+       const int value, const int channel, const int txpower)
+{
+       u32 rf1 = rt2x00dev->rf1;
+       u32 rf2 = value;
+       u32 rf3 = rt2x00dev->rf3;
+       u32 rf4 = rt2x00dev->rf4;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525))
+               rf2 |= 0x00080000;
+
+       if ((rt2x00_rf(&rt2x00dev->chip, RF2523) ||
+            rt2x00_rf(&rt2x00dev->chip, RF2524) ||
+            rt2x00_rf(&rt2x00dev->chip, RF2525)) &&
+            channel == 14)
+               rf4 &= ~0x00000018;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525E)) {
+               if (channel & 0x01)
+                       rf4 = 0x00000e1b;
+               else
+                       rf4 = 0x00000e07;
+               if (channel == 14)
+                       rf4 = 0x00000e23;
+       }
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               if (channel < 14) {
+                       rf1 = 0x00022020;
+                       rf4 = 0x00000a0b;
+               } else if (channel == 14) {
+                       rf1 = 0x00022010;
+                       rf4 = 0x00000a1b;
+               } else if (channel < 64) {
+                       rf1 = 0x00022010;
+                       rf4 = 0x00000a1f;
+               } else if (channel < 140) {
+                       rf1 = 0x00022010;
+                       rf4 = 0x00000a0f;
+               } else if (channel < 161) {
+                       rf1 = 0x00022020;
+                       rf4 = 0x00000a07;
+               }
+       }
+
+       /*
+        * Set TXpower.
+        */
+       rt2x00_set_field32(&rf3, RF3_TXPOWER, TXPOWER_TO_DEV(txpower));
+
+       /*
+        * For RT2525E we should first set the channel to half band higher.
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525E)) {
+               static const u32 vals[] = {
+                       0x000008aa, 0x000008ae, 0x000008ae, 0x000008b2,
+                       0x000008b2, 0x000008b6, 0x000008b6, 0x000008ba,
+                       0x000008ba, 0x000008be, 0x000008b7, 0x00000902,
+                       0x00000902, 0x00000906
+               };
+
+               rt2500usb_rf_write(rt2x00dev, vals[channel - 1]);
+               if (rf4)
+                       rt2500usb_rf_write(rt2x00dev, rf4);
+       }
+
+       rt2500usb_rf_write(rt2x00dev, rf1);
+       rt2500usb_rf_write(rt2x00dev, rf2);
+       rt2500usb_rf_write(rt2x00dev, rf3);
+       if (rf4)
+               rt2500usb_rf_write(rt2x00dev, rf4);
+
+       /*
+        * Update rf fields
+        */
+       rt2x00dev->rf1 = rf1;
+       rt2x00dev->rf2 = rf2;
+       rt2x00dev->rf3 = rf3;
+       rt2x00dev->rf4 = rf4;
+       rt2x00dev->tx_power = txpower;
+}
+
+static void rt2500usb_config_txpower(struct rt2x00_dev *rt2x00dev,
+       const int txpower)
+{
+       rt2x00_set_field32(&rt2x00dev->rf3, RF3_TXPOWER,
+               TXPOWER_TO_DEV(txpower));
+       rt2500usb_rf_write(rt2x00dev, rt2x00dev->rf3);
+}
+
+static void rt2500usb_config_antenna(struct rt2x00_dev *rt2x00dev,
+       const int antenna_tx, const int antenna_rx)
+{
+       u8 r2;
+       u8 r14;
+       u16 csr5;
+       u16 csr6;
+
+       rt2500usb_bbp_read(rt2x00dev, 2, &r2);
+       rt2500usb_bbp_read(rt2x00dev, 14, &r14);
+       rt2500usb_register_read(rt2x00dev, PHY_CSR5, &csr5);
+       rt2500usb_register_read(rt2x00dev, PHY_CSR6, &csr6);
+
+       /*
+        * Configure the TX antenna.
+        */
+       if (antenna_tx == ANTENNA_DIVERSITY) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 1);
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK, 1);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM, 1);
+       } else if (antenna_tx == ANTENNA_A) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 0);
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK, 0);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM, 0);
+       } else if (antenna_tx == ANTENNA_B) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_ANTENNA, 2);
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK, 2);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM, 2);
+       }
+
+       /*
+        * Configure the RX antenna.
+        */
+       if (antenna_rx == ANTENNA_DIVERSITY)
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 1);
+       else if (antenna_rx == ANTENNA_A)
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 0);
+       else if (antenna_rx == ANTENNA_B)
+               rt2x00_set_field8(&r14, BBP_R14_RX_ANTENNA, 2);
+
+       /*
+        * RT2525E and RT5222 need to flip TX I/Q
+        */
+       if (rt2x00_rf(&rt2x00dev->chip, RF2525E) ||
+           rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               rt2x00_set_field8(&r2, BBP_R2_TX_IQ_FLIP, 1);
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK_FLIP, 1);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM_FLIP, 1);
+
+               /*
+                * RT2525E does not need RX I/Q Flip.
+                */
+               if (rt2x00_rf(&rt2x00dev->chip, RF2525E))
+                       rt2x00_set_field8(&r14, BBP_R14_RX_IQ_FLIP, 0);
+       } else {
+               rt2x00_set_field16(&csr5, PHY_CSR5_CCK_FLIP, 0);
+               rt2x00_set_field16(&csr6, PHY_CSR6_OFDM_FLIP, 0);
+       }
+
+       rt2500usb_bbp_write(rt2x00dev, 2, r2);
+       rt2500usb_bbp_write(rt2x00dev, 14, r14);
+       rt2500usb_register_write(rt2x00dev, PHY_CSR5, csr5);
+       rt2500usb_register_write(rt2x00dev, PHY_CSR6, csr6);
+}
+
+static void rt2500usb_config_duration(struct rt2x00_dev *rt2x00dev,
+       const int short_slot_time, const int beacon_int)
+{
+       u16 reg;
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR10,
+               short_slot_time ? SHORT_SLOT_TIME : SLOT_TIME);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR18, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR18_INTERVAL, beacon_int * 4);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR18, reg);
+}
+
+static void rt2500usb_config_rate(struct rt2x00_dev *rt2x00dev, const int rate)
+{
+       struct ieee80211_conf *conf = &rt2x00dev->hw->conf;
+       u16 reg;
+       u16 value;
+       u16 preamble;
+
+       preamble = DEVICE_GET_RATE_FIELD(rate, PREAMBLE)
+               ? SHORT_PREAMBLE : PREAMBLE;
+
+       reg = DEVICE_GET_RATE_FIELD(rate, RATEMASK) & DEV_BASIC_RATE;
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR11, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR1, &reg);
+       value = ((conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME) ?
+                SHORT_DIFS :  DIFS) +
+               PLCP + preamble + get_duration(ACK_SIZE, 10);
+       rt2x00_set_field16(&reg, TXRX_CSR1_ACK_TIMEOUT, value);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR1, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR10, &reg);
+       if (preamble == SHORT_PREAMBLE)
+               rt2x00_set_field16(&reg, TXRX_CSR10_AUTORESPOND_PREAMBLE, 1);
+       else
+               rt2x00_set_field16(&reg, TXRX_CSR10_AUTORESPOND_PREAMBLE, 0);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR10, reg);
+}
+
+static void rt2500usb_config_phymode(struct rt2x00_dev *rt2x00dev,
+       const int phymode)
+{
+       struct ieee80211_hw_mode *mode;
+       struct ieee80211_rate *rate;
+
+       if (phymode == MODE_IEEE80211A)
+               rt2x00dev->curr_hwmode = HWMODE_A;
+       else if (phymode == MODE_IEEE80211B)
+               rt2x00dev->curr_hwmode = HWMODE_B;
+       else
+               rt2x00dev->curr_hwmode = HWMODE_G;
+
+       mode = &rt2x00dev->hwmodes[rt2x00dev->curr_hwmode];
+       rate = &mode->rates[mode->num_rates - 1];
+
+       rt2500usb_config_rate(rt2x00dev, rate->val2);
+
+       if (phymode == MODE_IEEE80211B) {
+               rt2500usb_register_write(rt2x00dev, MAC_CSR11, 0x000b);
+               rt2500usb_register_write(rt2x00dev, MAC_CSR12, 0x0040);
+       } else {
+               rt2500usb_register_write(rt2x00dev, MAC_CSR11, 0x0005);
+               rt2500usb_register_write(rt2x00dev, MAC_CSR12, 0x016c);
+       }
+}
+
+static void rt2500usb_config_mac_addr(struct rt2x00_dev *rt2x00dev, u8 *addr)
+{
+       u16 reg[3];
+
+       memset(&reg, 0, sizeof(reg));
+       memcpy(&reg, addr, ETH_ALEN);
+
+       /*
+        * The MAC address is passed to us as an array of bytes,
+        * that array is little endian, so no need for byte ordering.
+        */
+       rt2500usb_register_multiwrite(rt2x00dev, MAC_CSR2, &reg, sizeof(reg));
+}
+
+/*
+ * LED functions.
+ */
+static void rt2500usb_enable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR21, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR21_ON_PERIOD, 70);
+       rt2x00_set_field16(&reg, MAC_CSR21_OFF_PERIOD, 30);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR21, reg);
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR20, &reg);
+
+       if (rt2x00dev->led_mode == LED_MODE_TXRX_ACTIVITY) {
+               rt2x00_set_field16(&reg, MAC_CSR20_LINK, 1);
+               rt2x00_set_field16(&reg, MAC_CSR20_ACTIVITY, 0);
+       } else if (rt2x00dev->led_mode == LED_MODE_ASUS) {
+               rt2x00_set_field16(&reg, MAC_CSR20_LINK, 0);
+               rt2x00_set_field16(&reg, MAC_CSR20_ACTIVITY, 1);
+       } else {
+               rt2x00_set_field16(&reg, MAC_CSR20_LINK, 1);
+               rt2x00_set_field16(&reg, MAC_CSR20_ACTIVITY, 1);
+       }
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR20, reg);
+}
+
+static void rt2500usb_disable_led(struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR20, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR20_LINK, 0);
+       rt2x00_set_field16(&reg, MAC_CSR20_ACTIVITY, 0);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR20, reg);
+}
+
+/*
+ * Link tuning
+ */
+static void rt2500usb_link_tuner(struct rt2x00_dev *rt2x00dev, int rssi)
+{
+       u16 bbp_thresh;
+       u16 cca_alarm;
+       u16 vgc_bound;
+       u16 sens;
+       u16 r24;
+       u16 r25;
+       u16 r61;
+       u16 r17_sens;
+       u8 r17;
+       u8 up_bound;
+       u8 low_bound;
+
+       /*
+        * Determine the BBP tuning threshold and correctly
+        * set BBP 24, 25 and 61.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE, &bbp_thresh);
+       bbp_thresh = rt2x00_get_field16(bbp_thresh, EEPROM_BBPTUNE_THRESHOLD);
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R24, &r24);
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R25, &r25);
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R61, &r61);
+
+       if ((rssi + bbp_thresh) > 0) {
+               r24 = rt2x00_get_field16(r24, EEPROM_BBPTUNE_R24_HIGH);
+               r25 = rt2x00_get_field16(r25, EEPROM_BBPTUNE_R25_HIGH);
+               r61 = rt2x00_get_field16(r61, EEPROM_BBPTUNE_R61_HIGH);
+       } else {
+               r24 = rt2x00_get_field16(r24, EEPROM_BBPTUNE_R24_LOW);
+               r25 = rt2x00_get_field16(r25, EEPROM_BBPTUNE_R25_LOW);
+               r61 = rt2x00_get_field16(r61, EEPROM_BBPTUNE_R61_LOW);
+       }
+
+       rt2500usb_bbp_write(rt2x00dev, 24, r24);
+       rt2500usb_bbp_write(rt2x00dev, 25, r25);
+       rt2500usb_bbp_write(rt2x00dev, 61, r61);
+
+       /*
+        * Read current r17 value, as well as the sensitivity values
+        * for the r17 register.
+        */
+       rt2500usb_bbp_read(rt2x00dev, 17, &r17);
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R17, &r17_sens);
+
+       /*
+        * A too low RSSI will cause too much false CCA which will
+        * then corrupt the R17 tuning. To remidy this the tuning should
+        * be stopped (While making sure the R17 value will not exceed limits)
+        */
+       if (rssi >= -40) {
+               if (r17 != 0x60)
+                       rt2500usb_bbp_write(rt2x00dev, 17, 0x60);
+               return;
+       }
+
+       /*
+        * Special big-R17 for short distance
+        */
+       if (rssi >= -58) {
+               sens = rt2x00_get_field16(r17_sens, EEPROM_BBPTUNE_R17_LOW);
+               if (r17 != sens)
+                       rt2500usb_bbp_write(rt2x00dev, 17, sens);
+               return;
+       }
+
+       /*
+        * Special mid-R17 for middle distance
+        */
+       if (rssi >= -74) {
+               sens = rt2x00_get_field16(r17_sens, EEPROM_BBPTUNE_R17_HIGH);
+               if (r17 != sens)
+                       rt2500usb_bbp_write(rt2x00dev, 17, sens);
+               return;
+       }
+
+       /*
+        * Leave short or middle distance condition, restore r17
+        * to the dynamic tuning range.
+        */
+       rt2500usb_register_read(rt2x00dev, STA_CSR3, &cca_alarm);
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_VGC, &vgc_bound);
+       vgc_bound = rt2x00_get_field16(vgc_bound, EEPROM_BBPTUNE_VGCUPPER);
+
+       low_bound = 0x32;
+       if (rssi >= -77)
+               up_bound = vgc_bound;
+       else
+               up_bound = vgc_bound - (-77 - rssi);
+
+       if (up_bound < low_bound)
+               up_bound = low_bound;
+
+       if (r17 > up_bound) {
+               rt2500usb_bbp_write(rt2x00dev, 17, up_bound);
+               rt2x00dev->link.curr_noise = up_bound;
+       } else if (cca_alarm > 512 && r17 < up_bound) {
+               rt2500usb_bbp_write(rt2x00dev, 17, ++r17);
+               rt2x00dev->link.curr_noise = r17;
+       } else if (cca_alarm < 100 && r17 > low_bound) {
+               rt2500usb_bbp_write(rt2x00dev, 17, --r17);
+               rt2x00dev->link.curr_noise = r17;
+       }
+}
+
+/*
+ * Initialization functions.
+ */
+static void rt2500usb_init_rxring(struct rt2x00_dev *rt2x00dev)
+{
+       struct usb_device *usb_dev =
+               interface_to_usbdev(rt2x00dev_usb(rt2x00dev));
+       unsigned int i;
+
+       for (i = 0; i < rt2x00dev->rx->stats.limit; i++) {
+               usb_fill_bulk_urb(
+                       rt2x00dev->rx->entry[i].priv,
+                       usb_dev,
+                       usb_rcvbulkpipe(usb_dev, 1),
+                       rt2x00dev->rx->entry[i].skb->data,
+                       rt2x00dev->rx->entry[i].skb->len,
+                       rt2500usb_interrupt_rxdone,
+                       &rt2x00dev->rx->entry[i]);
+       }
+
+       rt2x00_ring_index_clear(rt2x00dev->rx);
+}
+
+static void rt2500usb_init_txring(struct rt2x00_dev *rt2x00dev,
+       const int queue)
+{
+       struct data_ring *ring = rt2x00_get_ring(rt2x00dev, queue);
+       unsigned int i;
+
+       for (i = 0; i < ring->stats.limit; i++)
+               ring->entry[i].flags = 0;
+
+       rt2x00_ring_index_clear(ring);
+}
+
+static int rt2500usb_init_rings(struct rt2x00_dev *rt2x00dev)
+{
+       rt2500usb_init_rxring(rt2x00dev);
+       rt2500usb_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA0);
+       rt2500usb_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_DATA1);
+       rt2500usb_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_AFTER_BEACON);
+       rt2500usb_init_txring(rt2x00dev, IEEE80211_TX_QUEUE_BEACON);
+
+       return 0;
+}
+
+static int rt2500usb_init_registers(struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+
+       rt2x00usb_vendor_request(rt2x00dev, USB_DEVICE_MODE,
+               USB_VENDOR_REQUEST_OUT, 0x0001, USB_MODE_TEST, NULL, 0,
+               REGISTER_TIMEOUT);
+       rt2x00usb_vendor_request(rt2x00dev, USB_SINGLE_WRITE,
+               USB_VENDOR_REQUEST_OUT, 0x0308, 0xf0, NULL, 0,
+               REGISTER_TIMEOUT);
+
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR2, 0x0001);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR13, 0x1111);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR14, 0x1e11);
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR1, 0x0003);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR1, 0x0000);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR5, 0x8c8d);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR6, 0x8b8a);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR7, 0x8687);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR8, 0x0085);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR21, 0xe78f);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR9, 0xff1d);
+
+       if (rt2x00dev->ops->lib->set_device_state(rt2x00dev, STATE_AWAKE))
+               return -EBUSY;
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR1, 0x0004);
+
+       reg = 0;
+       rt2500usb_register_read(rt2x00dev, MAC_CSR0, &reg);
+       if (reg >= 0x0003) {
+               rt2500usb_register_read(rt2x00dev, PHY_CSR2, &reg);
+               reg &= ~0x0002;
+       } else {
+               reg = 0x3002;
+       }
+       rt2500usb_register_write(rt2x00dev, PHY_CSR2, reg);
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR11, 0x0002);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR22, 0x0053);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR15, 0x01ee);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR16, 0x0000);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR0, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR0_IV_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field16(&reg, TXRX_CSR0_KEY_ID, 0xff);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR0, reg);
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR8, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR8_MAX_FRAME_UNIT,
+               rt2x00dev->rx->data_size);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR8, reg);
+
+       rt2500usb_register_read(rt2x00dev, MAC_CSR18, &reg);
+       rt2x00_set_field16(&reg, MAC_CSR18_DELAY_AFTER_BEACON, 0x5a);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR18, reg);
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR1, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR1_AUTO_SEQUENCE, 1);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR1, reg);
+
+       rt2500usb_register_read(rt2x00dev, PHY_CSR4, &reg);
+       rt2500usb_register_write(rt2x00dev, PHY_CSR4, reg | 0x0001);
+
+       return 0;
+}
+
+static int rt2500usb_init_bbp(struct rt2x00_dev *rt2x00dev)
+{
+       unsigned int i;
+       u16 eeprom;
+       u8 value;
+       u8 reg_id;
+
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500usb_bbp_read(rt2x00dev, 0, &value);
+               if ((value != 0xff) && (value != 0x00))
+                       goto continue_csr_init;
+               NOTICE(rt2x00dev, "Waiting for BBP register.\n");
+               udelay(REGISTER_BUSY_DELAY);
+       }
+
+       ERROR(rt2x00dev, "BBP register access failed, aborting.\n");
+       return -EACCES;
+
+continue_csr_init:
+       rt2500usb_bbp_write(rt2x00dev, 3, 0x02);
+       rt2500usb_bbp_write(rt2x00dev, 4, 0x19);
+       rt2500usb_bbp_write(rt2x00dev, 14, 0x1c);
+       rt2500usb_bbp_write(rt2x00dev, 15, 0x30);
+       rt2500usb_bbp_write(rt2x00dev, 16, 0xac);
+       rt2500usb_bbp_write(rt2x00dev, 17, 0x48);
+       rt2500usb_bbp_write(rt2x00dev, 18, 0x18);
+       rt2500usb_bbp_write(rt2x00dev, 19, 0xff);
+       rt2500usb_bbp_write(rt2x00dev, 20, 0x1e);
+       rt2500usb_bbp_write(rt2x00dev, 21, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 22, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 23, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 24, 0x80);
+       rt2500usb_bbp_write(rt2x00dev, 25, 0x50);
+       rt2500usb_bbp_write(rt2x00dev, 26, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 27, 0x23);
+       rt2500usb_bbp_write(rt2x00dev, 30, 0x10);
+       rt2500usb_bbp_write(rt2x00dev, 31, 0x2b);
+       rt2500usb_bbp_write(rt2x00dev, 32, 0xb9);
+       rt2500usb_bbp_write(rt2x00dev, 34, 0x12);
+       rt2500usb_bbp_write(rt2x00dev, 35, 0x50);
+       rt2500usb_bbp_write(rt2x00dev, 39, 0xc4);
+       rt2500usb_bbp_write(rt2x00dev, 40, 0x02);
+       rt2500usb_bbp_write(rt2x00dev, 41, 0x60);
+       rt2500usb_bbp_write(rt2x00dev, 53, 0x10);
+       rt2500usb_bbp_write(rt2x00dev, 54, 0x18);
+       rt2500usb_bbp_write(rt2x00dev, 56, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 57, 0x10);
+       rt2500usb_bbp_write(rt2x00dev, 58, 0x08);
+       rt2500usb_bbp_write(rt2x00dev, 61, 0x60);
+       rt2500usb_bbp_write(rt2x00dev, 62, 0x10);
+       rt2500usb_bbp_write(rt2x00dev, 75, 0xff);
+
+       DEBUG(rt2x00dev, "Start initialization from EEPROM...\n");
+       for (i = 0; i < EEPROM_BBP_SIZE; i++) {
+               rt2x00_eeprom_read(rt2x00dev, EEPROM_BBP_START + i, &eeprom);
+
+               if (eeprom != 0xffff && eeprom != 0x0000) {
+                       reg_id = rt2x00_get_field16(eeprom, EEPROM_BBP_REG_ID);
+                       value = rt2x00_get_field16(eeprom, EEPROM_BBP_VALUE);
+                       DEBUG(rt2x00dev, "BBP: 0x%02x, value: 0x%02x.\n",
+                               reg_id, value);
+                       rt2500usb_bbp_write(rt2x00dev, reg_id, value);
+               }
+       }
+       DEBUG(rt2x00dev, "...End initialization from EEPROM.\n");
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R24, &eeprom);
+       value = rt2x00_get_field16(eeprom, EEPROM_BBPTUNE_R24_LOW);
+       rt2500usb_bbp_write(rt2x00dev, 24, value);
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R25, &eeprom);
+       value = rt2x00_get_field16(eeprom, EEPROM_BBPTUNE_R25_LOW);
+       rt2500usb_bbp_write(rt2x00dev, 25, value);
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R61, &eeprom);
+       value = rt2x00_get_field16(eeprom, EEPROM_BBPTUNE_R61_LOW);
+       rt2500usb_bbp_write(rt2x00dev, 61, value);
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_VGC, &eeprom);
+       value = rt2x00_get_field16(eeprom, EEPROM_BBPTUNE_VGCUPPER);
+       rt2500usb_bbp_write(rt2x00dev, 17, value);
+
+       return 0;
+}
+
+/*
+ * Device state switch handlers.
+ */
+static void rt2500usb_toggle_rx(struct rt2x00_dev *rt2x00dev,
+       enum dev_state state)
+{
+       u16 reg;
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR2, &reg);
+       rt2x00_set_field16(&reg, TXRX_CSR2_DISABLE_RX,
+               state == STATE_RADIO_RX_OFF);
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR2, reg);
+}
+
+static int rt2500usb_enable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Initialize all registers.
+        */
+       if (rt2500usb_init_rings(rt2x00dev) ||
+           rt2500usb_init_registers(rt2x00dev) ||
+           rt2500usb_init_bbp(rt2x00dev)) {
+               ERROR(rt2x00dev, "Register initialization failed.\n");
+               return -EIO;
+       }
+
+       rt2x00usb_enable_radio(rt2x00dev);
+
+       /*
+        * Enable LED
+        */
+       rt2500usb_enable_led(rt2x00dev);
+
+       return 0;
+}
+
+static void rt2500usb_disable_radio(struct rt2x00_dev *rt2x00dev)
+{
+       /*
+        * Disable LED
+        */
+       rt2500usb_disable_led(rt2x00dev);
+
+       rt2500usb_register_write(rt2x00dev, MAC_CSR13, 0x2121);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR14, 0x2121);
+
+       /*
+        * Disable synchronisation.
+        */
+       rt2500usb_register_write(rt2x00dev, TXRX_CSR19, 0);
+
+       rt2x00usb_disable_radio(rt2x00dev);
+}
+
+static int rt2500usb_set_state(struct rt2x00_dev *rt2x00dev,
+       enum dev_state state)
+{
+       u16 reg;
+       u16 reg2;
+       unsigned int i;
+       char put_to_sleep;
+       char bbp_state;
+       char rf_state;
+
+       put_to_sleep = (state != STATE_AWAKE);
+
+       reg = 0;
+       rt2x00_set_field16(&reg, MAC_CSR17_BBP_DESIRE_STATE, state);
+       rt2x00_set_field16(&reg, MAC_CSR17_RF_DESIRE_STATE, state);
+       rt2x00_set_field16(&reg, MAC_CSR17_PUT_TO_SLEEP, put_to_sleep);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR17, reg);
+       rt2x00_set_field16(&reg, MAC_CSR17_SET_STATE, 1);
+       rt2500usb_register_write(rt2x00dev, MAC_CSR17, reg);
+
+       /*
+        * Device is not guaranteed to be in the requested state yet.
+        * We must wait until the register indicates that the
+        * device has entered the correct state.
+        */
+       for (i = 0; i < REGISTER_BUSY_COUNT; i++) {
+               rt2500usb_register_read(rt2x00dev, MAC_CSR17, &reg2);
+               bbp_state = rt2x00_get_field16(reg2, MAC_CSR17_BBP_CURR_STATE);
+               rf_state = rt2x00_get_field16(reg2, MAC_CSR17_RF_CURR_STATE);
+               if (bbp_state == state && rf_state == state)
+                       return 0;
+               rt2500usb_register_write(rt2x00dev, MAC_CSR17, reg);
+               msleep(30);
+       }
+
+       NOTICE(rt2x00dev, "Device failed to enter state %d, "
+               "current device state: bbp %d and rf %d.\n",
+               state, bbp_state, rf_state);
+
+       return -EBUSY;
+}
+
+static int rt2500usb_set_device_state(struct rt2x00_dev *rt2x00dev,
+       enum dev_state state)
+{
+       int retval = 0;
+
+       switch (state) {
+               case STATE_RADIO_ON:
+                       retval = rt2500usb_enable_radio(rt2x00dev);
+               break;
+               case STATE_RADIO_OFF:
+                       rt2500usb_disable_radio(rt2x00dev);
+               break;
+               case STATE_RADIO_RX_ON:
+               case STATE_RADIO_RX_OFF:
+                       rt2500usb_toggle_rx(rt2x00dev, state);
+               break;
+               case STATE_DEEP_SLEEP:
+               case STATE_SLEEP:
+               case STATE_STANDBY:
+               case STATE_AWAKE:
+                       retval = rt2500usb_set_state(rt2x00dev, state);
+               break;
+               default:
+                       retval = -ENOTSUPP;
+               break;
+       }
+
+       return retval;
+}
+
+/*
+ * TX descriptor initialization
+ */
+static void rt2500usb_write_tx_desc(struct rt2x00_dev *rt2x00dev,
+       struct data_entry *entry, struct data_desc *txd,
+       struct data_entry_desc *desc, struct ieee80211_hdr *ieee80211hdr,
+       unsigned int length, struct ieee80211_tx_control *control)
+{
+       u32 word;
+
+       /*
+        * Start writing the descriptor words.
+        */
+       rt2x00_desc_read(txd, 1, &word);
+       rt2x00_set_field32(&word, TXD_W1_IV_OFFSET, IEEE80211_HEADER);
+       rt2x00_set_field32(&word, TXD_W1_AIFS, entry->ring->tx_params.aifs);
+       rt2x00_set_field32(&word, TXD_W1_CWMIN, entry->ring->tx_params.cw_min);
+       rt2x00_set_field32(&word, TXD_W1_CWMAX, entry->ring->tx_params.cw_max);
+       rt2x00_desc_write(txd, 1, word);
+
+       rt2x00_desc_read(txd, 2, &word);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_SIGNAL, desc->signal);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_SERVICE, desc->service);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_LENGTH_LOW, desc->length_low);
+       rt2x00_set_field32(&word, TXD_W2_PLCP_LENGTH_HIGH, desc->length_high);
+       rt2x00_desc_write(txd, 2, word);
+
+       rt2x00_desc_read(txd, 0, &word);
+       rt2x00_set_field32(&word, TXD_W0_RETRY_LIMIT, control->retry_limit);
+       rt2x00_set_field32(&word, TXD_W0_MORE_FRAG,
+               test_bit(ENTRY_TXD_MORE_FRAG, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_ACK,
+               test_bit(ENTRY_TXD_REQ_ACK, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_TIMESTAMP,
+               test_bit(ENTRY_TXD_REQ_TIMESTAMP, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_OFDM,
+               test_bit(ENTRY_TXD_OFDM_RATE, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_NEW_SEQ,
+               test_bit(ENTRY_TXD_NEW_SEQ, &entry->flags));
+       rt2x00_set_field32(&word, TXD_W0_IFS, desc->ifs);
+       rt2x00_set_field32(&word, TXD_W0_DATABYTE_COUNT, length);
+       rt2x00_set_field32(&word, TXD_W0_CIPHER, CIPHER_NONE);
+       rt2x00_desc_write(txd, 0, word);
+}
+
+/*
+ * TX data initialization
+ */
+static void rt2500usb_kick_tx_queue(struct rt2x00_dev *rt2x00dev, int queue)
+{
+       u16 reg;
+
+       if (queue != IEEE80211_TX_QUEUE_BEACON)
+               return;
+
+       rt2500usb_register_read(rt2x00dev, TXRX_CSR19, &reg);
+       if (!rt2x00_get_field16(reg, TXRX_CSR19_BEACON_GEN)) {
+               rt2x00_set_field16(&reg, TXRX_CSR19_BEACON_GEN, 1);
+               /*
+                * Beacon generation will fail initially.
+                * To prevent this we need to register the TXRX_CSR19
+                * register several times.
+                */
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, reg);
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, 0);
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, reg);
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, 0);
+               rt2500usb_register_write(rt2x00dev, TXRX_CSR19, reg);
+       }
+}
+
+/*
+ * Interrupt functions.
+ */
+static void rt2500usb_interrupt_rxdone(struct urb *urb)
+{
+       struct data_entry *entry = (struct data_entry*)urb->context;
+       struct data_ring *ring = entry->ring;
+       struct rt2x00_dev *rt2x00dev = ring->rt2x00dev;
+       struct data_desc *rxd = (struct data_desc*)
+               (entry->skb->data + urb->actual_length - ring->desc_size);
+       u32 word0;
+       u32 word1;
+       int signal;
+       int rssi;
+       int ofdm;
+       u16 size;
+
+       if (!test_bit(DEVICE_ENABLED_RADIO, &rt2x00dev->flags) ||
+           !test_and_clear_bit(ENTRY_OWNER_NIC, &entry->flags))
+               return;
+
+       /*
+        * Check if the received data is simply too small
+        * to be actually valid, or if the urb is signaling
+        * a problem.
+        */
+       if (urb->actual_length < entry->ring->desc_size || urb->status)
+               goto skip_entry;
+
+       rt2x00_desc_read(rxd, 0, &word0);
+       rt2x00_desc_read(rxd, 1, &word1);
+
+       /*
+        * TODO: Don't we need to keep statistics
+        * updated about events like CRC and physical errors?
+        */
+       if (rt2x00_get_field32(word0, RXD_W0_CRC) ||
+           rt2x00_get_field32(word0, RXD_W0_PHYSICAL_ERROR))
+               goto skip_entry;
+
+       /*
+        * Obtain the status about this packet.
+        */
+       size = rt2x00_get_field32(word0, RXD_W0_DATABYTE_COUNT) - FCS_LEN;
+       signal = rt2x00_get_field32(word1, RXD_W1_SIGNAL);
+       rssi = rt2x00_get_field32(word1, RXD_W1_RSSI);
+       ofdm = rt2x00_get_field32(word0, RXD_W0_OFDM);
+
+       /*
+        * Trim the skb_buffer to only contain the valid
+        * frame data (so ignore the device's descriptor).
+        */
+       skb_trim(entry->skb, size);
+
+       /*
+        * Send the packet to upper layer, and update urb.
+        */
+       rt2x00lib_rxdone(entry, NULL, ring->data_size + ring->desc_size,
+               signal, rssi, ofdm);
+       urb->transfer_buffer = entry->skb->data;
+       urb->transfer_buffer_length = entry->skb->len;
+
+skip_entry:
+       if (test_bit(DEVICE_ENABLED_RADIO, &ring->rt2x00dev->flags)) {
+               __set_bit(ENTRY_OWNER_NIC, &entry->flags);
+               usb_submit_urb(urb, GFP_ATOMIC);
+       }
+
+       rt2x00_ring_index_inc(ring);
+}
+
+/*
+ * Device initialization functions.
+ */
+static int rt2500usb_alloc_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u16 word;
+
+       /*
+        * Allocate the eeprom memory, check the eeprom width
+        * and copy the entire eeprom into this allocated memory.
+        */
+       rt2x00dev->eeprom = kzalloc(EEPROM_SIZE, GFP_KERNEL);
+       if (!rt2x00dev->eeprom)
+               return -ENOMEM;
+
+       rt2x00usb_vendor_request(
+               rt2x00dev, USB_EEPROM_READ, USB_VENDOR_REQUEST_IN,
+               EEPROM_BASE, 0x00, rt2x00dev->eeprom, EEPROM_SIZE,
+               REGISTER_TIMEOUT * (EEPROM_SIZE / sizeof(u16)));
+
+       /*
+        * Start validation of the data that has been read.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_NUM, 2);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_TX_DEFAULT, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RX_DEFAULT, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_LED_MODE, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_DYN_TXAGC, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_HARDWARE_RADIO, 0);
+               rt2x00_set_field16(&word, EEPROM_ANTENNA_RF_TYPE, RF2522);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_ANTENNA, word);
+               EEPROM(rt2x00dev, "Antenna: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_NIC_CARDBUS_ACCEL, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_DYN_BBP_TUNE, 0);
+               rt2x00_set_field16(&word, EEPROM_NIC_CCK_TX_POWER, 0);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_NIC, word);
+               EEPROM(rt2x00dev, "NIC: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_CALIBRATE_OFFSET, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_CALIBRATE_OFFSET_RSSI,
+                       MAX_RX_SSI);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_CALIBRATE_OFFSET, word);
+               EEPROM(rt2x00dev, "Calibrate offset: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_THRESHOLD, 45);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE, word);
+               EEPROM(rt2x00dev, "BBPtune: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_VGC, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_VGCUPPER, 0x40);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_VGC, word);
+               EEPROM(rt2x00dev, "BBPtune vgc: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R17, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R17_LOW, 0x48);
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R17_HIGH, 0x41);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_R17, word);
+               EEPROM(rt2x00dev, "BBPtune r17: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R24, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R24_LOW, 0x40);
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R24_HIGH, 0x80);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_R24, word);
+               EEPROM(rt2x00dev, "BBPtune r24: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R25, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R25_LOW, 0x40);
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R25_HIGH, 0x50);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_R25, word);
+               EEPROM(rt2x00dev, "BBPtune r25: 0x%04x\n", word);
+       }
+
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_BBPTUNE_R61, &word);
+       if (word == 0xffff) {
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R61_LOW, 0x60);
+               rt2x00_set_field16(&word, EEPROM_BBPTUNE_R61_HIGH, 0x6d);
+               rt2x00_eeprom_write(rt2x00dev, EEPROM_BBPTUNE_R61, word);
+               EEPROM(rt2x00dev, "BBPtune r61: 0x%04x\n", word);
+       }
+
+       return 0;
+}
+
+static int rt2500usb_init_eeprom(struct rt2x00_dev *rt2x00dev)
+{
+       u16 reg;
+       u16 value;
+       u16 eeprom;
+
+       /*
+        * Read EEPROM word for configuration.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_ANTENNA, &eeprom);
+
+       /*
+        * Identify RF chipset.
+        */
+       value = rt2x00_get_field16(eeprom, EEPROM_ANTENNA_RF_TYPE);
+       rt2500usb_register_read(rt2x00dev, MAC_CSR0, &reg);
+       rt2x00_set_chip(rt2x00dev, RT2570, value, reg);
+
+       if (!rt2x00_rf(&rt2x00dev->chip, RF2522) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2523) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2524) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2525) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF2525E) &&
+           !rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               ERROR(rt2x00dev, "Invalid RF chipset detected.\n");
+               return -ENODEV;
+       }
+
+       /*
+        * Identify default antenna configuration.
+        */
+       rt2x00dev->hw->conf.antenna_sel_tx = rt2x00_get_field16(eeprom,
+               EEPROM_ANTENNA_TX_DEFAULT);
+       rt2x00dev->hw->conf.antenna_sel_rx = rt2x00_get_field16(eeprom,
+               EEPROM_ANTENNA_RX_DEFAULT);
+
+       /*
+        * Store led mode, for correct led behaviour.
+        */
+       rt2x00dev->led_mode = rt2x00_get_field16(eeprom,
+               EEPROM_ANTENNA_LED_MODE);
+
+       /*
+        * Check if the BBP tuning should be disabled.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_NIC, &eeprom);
+       if (rt2x00_get_field16(eeprom, EEPROM_NIC_DYN_BBP_TUNE))
+               __set_bit(CONFIG_DISABLE_LINK_TUNING, &rt2x00dev->flags);
+
+       /*
+        * Read the RSSI <-> dBm offset information.
+        */
+       rt2x00_eeprom_read(rt2x00dev, EEPROM_CALIBRATE_OFFSET, &eeprom);
+       rt2x00dev->hw->max_rssi =
+               rt2x00_get_field16(eeprom, EEPROM_CALIBRATE_OFFSET_RSSI);
+
+       return 0;
+}
+
+static const struct {
+       unsigned int chip;
+       u32 val[3];
+} rf_vals[] = {
+       { RF2522,       { 0x00002050, 0x00000101, 0x00000000 } },
+       { RF2523,       { 0x00022010, 0x000e0111, 0x00000a1b } },
+       { RF2524,       { 0x00032020, 0x00000101, 0x00000a1b } },
+       { RF2525,       { 0x00022020, 0x00060111, 0x00000a1b } },
+       { RF2525E,      { 0x00022010, 0x00060111, 0x00000000 } },
+       { RF5222,       { 0x00000000, 0x00000101, 0x00000000 } }
+};
+
+/*
+ * RF value list for RF2522
+ * Supports: 2.4 GHz
+ */
+static const u32 rf_vals_bg_2522[] = {
+       0x000c1fda, 0x000c1fee, 0x000c2002, 0x000c2016, 0x000c202a,
+       0x000c203e, 0x000c2052, 0x000c2066, 0x000c207a, 0x000c208e,
+       0x000c20a2, 0x000c20b6, 0x000c20ca, 0x000c20fa
+};
+
+/*
+ * RF value list for RF2523, RF2524 & RF2525
+ * Supports: 2.4 GHz
+ */
+static const u32 rf_vals_bg_252x[] = {
+       0x00000c9e, 0x00000ca2, 0x00000ca6, 0x00000caa, 0x00000cae,
+       0x00000cb2, 0x00000cb6, 0x00000cba, 0x00000cbe, 0x00000d02,
+       0x00000d06, 0x00000d0a, 0x00000d0e, 0x00000d1a
+};
+
+/*
+ * RF value list for RF2525E
+ * Supports: 2.4 GHz
+ */
+static const u32 rf_vals_bg_2525e[] = {
+       0x0000089a, 0x0000089e, 0x0000089e, 0x000008a2, 0x000008a2,
+       0x000008a6, 0x000008a6, 0x000008aa, 0x000008aa, 0x000008ae,
+       0x000008ae, 0x000008b2, 0x000008b2, 0x000008b6
+};
+
+/*
+ * RF value list for RF5222
+ * Supports: 2.4 GHz & 5.2 GHz
+ */
+static const u32 rf_vals_abg_5222[] = {
+       0x00001136, 0x0000113a, 0x0000113e, 0x00001182, 0x00001186,
+       0x0000118a, 0x0000118e, 0x00001192, 0x00001196, 0x0000119a,
+       0x0000119e, 0x000011a2, 0x000011a6, 0x000011ae, 0x0001889a,
+       0x0001889a, 0x0001889e, 0x000188a2, 0x000188a6, 0x000188aa,
+       0x000188ae, 0x000188b2, 0x00008802, 0x00008806, 0x0000880a,
+       0x0000880e, 0x00008812, 0x00008816, 0x0000881a, 0x0000881e,
+       0x00008822, 0x00008826, 0x0000882a, 0x000090a6, 0x000090ae,
+       0x000090b6, 0x000090be
+};
+
+static void rt2500usb_init_hw_mode(struct rt2x00_dev *rt2x00dev)
+{
+       struct hw_mode_spec *spec = &rt2x00dev->spec;
+       u8 *txpower;
+       unsigned int i;
+
+       /*
+        * Initialize all hw fields.
+        */
+       rt2x00dev->hw->flags = IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE |
+               IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING |
+               IEEE80211_HW_WEP_INCLUDE_IV |
+               IEEE80211_HW_DATA_NULLFUNC_ACK |
+               IEEE80211_HW_NO_TKIP_WMM_HWACCEL |
+               IEEE80211_HW_MONITOR_DURING_OPER;
+       rt2x00dev->hw->extra_tx_headroom = TXD_DESC_SIZE;
+       rt2x00dev->hw->max_rssi = MAX_RX_SSI;
+       rt2x00dev->hw->max_noise = MAX_RX_NOISE;
+       rt2x00dev->hw->queues = 2;
+
+       /*
+        * This device supports ATIM
+        */
+       __set_bit(DEVICE_SUPPORT_ATIM, &rt2x00dev->flags);
+
+       /*
+        * Set device specific, but channel independent RF values.
+        */
+       for (i = 0; i < ARRAY_SIZE(rf_vals); i++) {
+               if (rt2x00_rf(&rt2x00dev->chip, rf_vals[i].chip)) {
+                       rt2x00dev->rf1 = rf_vals[i].val[0];
+                       rt2x00dev->rf3 = rf_vals[i].val[1];
+                       rt2x00dev->rf4 = rf_vals[i].val[2];
+               }
+       }
+
+       /*
+        * Convert tx_power array in eeprom.
+        */
+       txpower = rt2x00_eeprom_addr(rt2x00dev, EEPROM_TXPOWER_START);
+       for (i = 0; i < 14; i++)
+               txpower[i] = TXPOWER_FROM_DEV(txpower[i]);
+
+       /*
+        * Initialize hw_mode information.
+        */
+       spec->mac_addr = rt2x00_eeprom_addr(rt2x00dev, EEPROM_MAC_ADDR_0);
+       spec->num_modes = 2;
+       spec->num_rates = 12;
+       spec->num_channels = 14;
+       spec->tx_power_a = NULL;
+       spec->tx_power_bg = txpower;
+       spec->tx_power_default = DEFAULT_TXPOWER;
+       spec->chan_val_a = NULL;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF2522))
+               spec->chan_val_bg = rf_vals_bg_2522;
+       else if (rt2x00_rf(&rt2x00dev->chip, RF2523) ||
+                rt2x00_rf(&rt2x00dev->chip, RF2524) ||
+                rt2x00_rf(&rt2x00dev->chip, RF2525))
+               spec->chan_val_bg = rf_vals_bg_252x;
+       else if (rt2x00_rf(&rt2x00dev->chip, RF2525E))
+               spec->chan_val_bg = rf_vals_bg_2525e;
+       else if (rt2x00_rf(&rt2x00dev->chip, RF5222))
+               spec->chan_val_bg = rf_vals_abg_5222;
+
+       if (rt2x00_rf(&rt2x00dev->chip, RF5222)) {
+               spec->num_modes = 3;
+               spec->num_channels += 23;
+               spec->chan_val_a = &rf_vals_abg_5222[14];
+       }
+}
+
+static int rt2500usb_init_hw(struct rt2x00_dev *rt2x00dev)
+{
+       int retval;
+
+       /*
+        * Allocate eeprom data.
+        */
+       retval = rt2500usb_alloc_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       retval = rt2500usb_init_eeprom(rt2x00dev);
+       if (retval)
+               return retval;
+
+       /*
+        * Initialize hw specifications.
+        */
+       rt2500usb_init_hw_mode(rt2x00dev);
+
+       return 0;
+}
+
+/*
+ * IEEE80211 stack callback functions.
+ */
+static int rt2500usb_get_stats(struct ieee80211_hw *hw,
+       struct ieee80211_low_level_stats *stats)
+{
+       struct rt2x00_dev *rt2x00dev = hw->priv;
+       u16 reg;
+
+       /*
+        * Update FCS error count from register.
+        * The dot11ACKFailureCount, dot11RTSFailureCount and
+        * dot11RTSSuccessCount are updated in interrupt time.
+        */
+       rt2500usb_register_read(rt2x00dev, STA_CSR0, &reg);
+       rt2x00dev->low_level_stats.dot11FCSErrorCount +=
+               rt2x00_get_field16(reg, STA_CSR0_FCS_ERROR);
+
+       memcpy(stats, &rt2x00dev->low_level_stats, sizeof(*stats));
+
+       return 0;
+}
+
+static const struct ieee80211_ops rt2500usb_mac80211_ops = {
+       .tx                     = rt2x00lib_tx,
+       .reset                  = rt2x00lib_reset,
+       .open                   = rt2x00lib_open,
+       .stop                   = rt2x00lib_stop,
+       .add_interface          = rt2x00lib_add_interface,
+       .remove_interface       = rt2x00lib_remove_interface,
+       .config                 = rt2x00lib_config,
+       .config_interface       = rt2x00lib_config_interface,
+       .set_multicast_list     = rt2x00lib_set_multicast_list,
+       .get_stats              = rt2500usb_get_stats,
+       .conf_tx                = rt2x00lib_conf_tx,
+       .get_tx_stats           = rt2x00lib_get_tx_stats,
+       .beacon_update          = rt2x00usb_beacon_update,
+};
+
+static const struct rt2x00lib_ops rt2500usb_rt2x00_ops = {
+       .init_hw                = rt2500usb_init_hw,
+       .initialize             = rt2x00usb_initialize,
+       .uninitialize           = rt2x00usb_uninitialize,
+       .set_device_state       = rt2500usb_set_device_state,
+       .link_tuner             = rt2500usb_link_tuner,
+       .write_tx_desc          = rt2500usb_write_tx_desc,
+       .write_tx_data          = rt2x00usb_write_tx_data,
+       .kick_tx_queue          = rt2500usb_kick_tx_queue,
+       .config_type            = rt2500usb_config_type,
+       .config_phymode         = rt2500usb_config_phymode,
+       .config_channel         = rt2500usb_config_channel,
+       .config_mac_addr        = rt2500usb_config_mac_addr,
+       .config_bssid           = rt2500usb_config_bssid,
+       .config_promisc         = rt2500usb_config_promisc,
+       .config_txpower         = rt2500usb_config_txpower,
+       .config_antenna         = rt2500usb_config_antenna,
+       .config_duration        = rt2500usb_config_duration,
+};
+
+static const struct rt2x00_ops rt2500usb_ops = {
+       .name   = DRV_NAME,
+       .rxd_size = RXD_DESC_SIZE,
+       .txd_size = TXD_DESC_SIZE,
+       .lib    = &rt2500usb_rt2x00_ops,
+       .hw     = &rt2500usb_mac80211_ops,
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       .debugfs = &rt2500usb_rt2x00debug,
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * rt2500usb module information.
+ */
+static struct usb_device_id rt2500usb_device_table[] = {
+       /* ASUS */
+       { USB_DEVICE(0x0b05, 0x1706), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0b05, 0x1707), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Belkin */
+       { USB_DEVICE(0x050d, 0x7050), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x050d, 0x7051), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x050d, 0x705a), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Cisco Systems */
+       { USB_DEVICE(0x13b1, 0x000d), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x13b1, 0x0011), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x13b1, 0x001a), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Conceptronic */
+       { USB_DEVICE(0x14b2, 0x3c02), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* D-LINK */
+       { USB_DEVICE(0x2001, 0x3c00), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Gigabyte */
+       { USB_DEVICE(0x1044, 0x8001), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x1044, 0x8007), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Hercules */
+       { USB_DEVICE(0x06f8, 0xe000), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Melco */
+       { USB_DEVICE(0x0411, 0x0066), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0411, 0x0067), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0411, 0x008b), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* MSI */
+       { USB_DEVICE(0x0db0, 0x6861), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0db0, 0x6865), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x0db0, 0x6869), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Ralink */
+       { USB_DEVICE(0x148f, 0x1706), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x148f, 0x2570), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x148f, 0x2573), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { USB_DEVICE(0x148f, 0x9020), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Siemens */
+       { USB_DEVICE(0x0681, 0x3c06), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* SMC */
+       { USB_DEVICE(0x0707, 0xee13), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Spairon */
+       { USB_DEVICE(0x114b, 0x0110), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Trust */
+       { USB_DEVICE(0x0eb0, 0x9020), USB_DEVICE_DATA(&rt2500usb_ops) },
+       /* Zinwell */
+       { USB_DEVICE(0x5a57, 0x0260), USB_DEVICE_DATA(&rt2500usb_ops) },
+       { 0, }
+};
+
+MODULE_AUTHOR(DRV_PROJECT);
+MODULE_VERSION(DRV_VERSION);
+MODULE_DESCRIPTION("Ralink RT2500 USB Wireless LAN driver.");
+MODULE_SUPPORTED_DEVICE("Ralink RT2570 USB chipset based cards");
+MODULE_DEVICE_TABLE(usb, rt2500usb_device_table);
+MODULE_LICENSE("GPL");
+
+static struct usb_driver rt2500usb_driver = {
+       .name           = DRV_NAME,
+       .id_table       = rt2500usb_device_table,
+       .probe          = rt2x00usb_probe,
+       .disconnect     = rt2x00usb_disconnect,
+#ifdef CONFIG_PM
+       .suspend        = rt2x00usb_suspend,
+       .resume         = rt2x00usb_resume,
+#endif /* CONFIG_PM */
+};
+
+static int __init rt2500usb_init(void)
+{
+       printk(KERN_INFO "Loading module: %s - %s by %s.\n",
+               DRV_NAME, DRV_VERSION, DRV_PROJECT);
+       return usb_register(&rt2500usb_driver);
+}
+
+static void __exit rt2500usb_exit(void)
+{
+       printk(KERN_INFO "Unloading module: %s.\n", DRV_NAME);
+       usb_deregister(&rt2500usb_driver);
+}
+
+module_init(rt2500usb_init);
+module_exit(rt2500usb_exit);
diff --git a/package/rt2x00/src/rt2500usb.h b/package/rt2x00/src/rt2500usb.h
new file mode 100644 (file)
index 0000000..e756d6e
--- /dev/null
@@ -0,0 +1,737 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2500usb
+       Abstract: Data structures and registers for the rt2500usb module.
+       Supported chipsets: RT2570.
+ */
+
+#ifndef RT2500USB_H
+#define RT2500USB_H
+
+/*
+ * RF chip defines.
+ */
+#define RF2522                         0x0000
+#define RF2523                         0x0001
+#define RF2524                         0x0002
+#define RF2525                         0x0003
+#define RF2525E                                0x0005
+#define RF5222                         0x0010
+
+/*
+ * Max RSSI value, required for RSSI <-> dBm conversion.
+ */
+#define MAX_RX_SSI                     120
+#define MAX_RX_NOISE                   -110
+
+/*
+ * Register layout information.
+ */
+#define CSR_REG_BASE                   0x0400
+#define CSR_REG_SIZE                   0x0100
+#define EEPROM_BASE                    0x0000
+#define EEPROM_SIZE                    0x006a
+#define BBP_SIZE                       0x0060
+
+/*
+ * Control/Status Registers(CSR).
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * MAC_CSR0: ASIC revision number.
+ */
+#define MAC_CSR0                       0x0400
+
+/*
+ * MAC_CSR1: System control.
+ */
+#define MAC_CSR1                       0x0402
+
+/*
+ * MAC_CSR2: STA MAC register 0.
+ */
+#define MAC_CSR2                       0x0404
+#define MAC_CSR2_BYTE0                 FIELD16(0x00ff)
+#define MAC_CSR2_BYTE1                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR3: STA MAC register 1.
+ */
+#define MAC_CSR3                       0x0406
+#define MAC_CSR3_BYTE2                 FIELD16(0x00ff)
+#define MAC_CSR3_BYTE3                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR4: STA MAC register 2.
+ */
+#define MAC_CSR4                       0X0408
+#define MAC_CSR4_BYTE4                 FIELD16(0x00ff)
+#define MAC_CSR4_BYTE5                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR5: BSSID register 0.
+ */
+#define MAC_CSR5                       0x040a
+#define MAC_CSR5_BYTE0                 FIELD16(0x00ff)
+#define MAC_CSR5_BYTE1                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR6: BSSID register 1.
+ */
+#define MAC_CSR6                       0x040c
+#define MAC_CSR6_BYTE2                 FIELD16(0x00ff)
+#define MAC_CSR6_BYTE3                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR7: BSSID register 2.
+ */
+#define MAC_CSR7                       0x040e
+#define MAC_CSR7_BYTE4                 FIELD16(0x00ff)
+#define MAC_CSR7_BYTE5                 FIELD16(0xff00)
+
+/*
+ * MAC_CSR8: Max frame length.
+ */
+#define MAC_CSR8                       0x0410
+#define MAC_CSR8_MAX_FRAME_UNIT                FIELD16(0x0fff)
+
+/*
+ * Misc MAC_CSR registers.
+ * MAC_CSR9: Timer control.
+ * MAC_CSR10: Slot time.
+ * MAC_CSR11: IFS.
+ * MAC_CSR12: EIFS.
+ * MAC_CSR13: Power mode0.
+ * MAC_CSR14: Power mode1.
+ * MAC_CSR15: Power saving transition0
+ * MAC_CSR16: Power saving transition1
+ */
+#define MAC_CSR9                       0x0412
+#define MAC_CSR10                      0x0414
+#define MAC_CSR11                      0x0416
+#define MAC_CSR12                      0x0418
+#define MAC_CSR13                      0x041a
+#define MAC_CSR14                      0x041c
+#define MAC_CSR15                      0x041e
+#define MAC_CSR16                      0x0420
+
+/*
+ * MAC_CSR17: Manual power control / status register.
+ * Allowed state: 0 deep_sleep, 1: sleep, 2: standby, 3: awake.
+ * SET_STATE: Set state. Write 1 to trigger, self cleared.
+ * BBP_DESIRE_STATE: BBP desired state.
+ * RF_DESIRE_STATE: RF desired state.
+ * BBP_CURRENT_STATE: BBP current state.
+ * RF_CURRENT_STATE: RF current state.
+ * PUT_TO_SLEEP: Put to sleep. Write 1 to trigger, self cleared.
+ */
+#define MAC_CSR17                      0x0422
+#define MAC_CSR17_SET_STATE            FIELD16(0x0001)
+#define MAC_CSR17_BBP_DESIRE_STATE     FIELD16(0x0006)
+#define MAC_CSR17_RF_DESIRE_STATE      FIELD16(0x0018)
+#define MAC_CSR17_BBP_CURR_STATE       FIELD16(0x0060)
+#define MAC_CSR17_RF_CURR_STATE                FIELD16(0x0180)
+#define MAC_CSR17_PUT_TO_SLEEP         FIELD16(0x0200)
+
+/*
+ * MAC_CSR18: Wakeup timer register.
+ * DELAY_AFTER_BEACON: Delay after Tbcn expired in units of 1/16 TU.
+ * BEACONS_BEFORE_WAKEUP: Number of beacon before wakeup.
+ * AUTO_WAKE: Enable auto wakeup / sleep mechanism.
+ */
+#define MAC_CSR18                      0x0424
+#define MAC_CSR18_DELAY_AFTER_BEACON   FIELD16(0x00ff)
+#define MAC_CSR18_BEACONS_BEFORE_WAKEUP        FIELD16(0x7f00)
+#define MAC_CSR18_AUTO_WAKE            FIELD16(0x8000)
+
+/*
+ * MAC_CSR19: GPIO control register.
+ */
+#define MAC_CSR19                      0x0426
+
+/*
+ * MAC_CSR20: LED control register.
+ * ACTIVITY: 0: idle, 1: active.
+ * LINK: 0: linkoff, 1: linkup.
+ * ACTIVITY_POLARITY: 0: active low, 1: active high.
+ */
+#define MAC_CSR20                      0x0428
+#define MAC_CSR20_ACTIVITY             FIELD16(0x0001)
+#define MAC_CSR20_LINK                 FIELD16(0x0002)
+#define MAC_CSR20_ACTIVITY_POLARITY    FIELD16(0x0004)
+
+/*
+ * MAC_CSR21: LED control register.
+ * ON_PERIOD: On period, default 70ms.
+ * OFF_PERIOD: Off period, default 30ms.
+ */
+#define MAC_CSR21                      0x042a
+#define MAC_CSR21_ON_PERIOD            FIELD16(0x00ff)
+#define MAC_CSR21_OFF_PERIOD           FIELD16(0xff00)
+
+/*
+ * Collision window control register.
+ */
+#define MAC_CSR22                      0x042c
+
+/*
+ * Transmit related CSRs.
+ * Some values are set in TU, whereas 1 TU == 1024 us.
+ */
+
+/*
+ * TXRX_CSR0: Security control register.
+ */
+#define TXRX_CSR0                      0x0440
+#define TXRX_CSR0_ALGORITHM            FIELD16(0x0007)
+#define TXRX_CSR0_IV_OFFSET            FIELD16(0x01f8)
+#define TXRX_CSR0_KEY_ID               FIELD16(0x1e00)
+
+/*
+ * TXRX_CSR1: TX configuration.
+ * ACK_TIMEOUT: ACK Timeout in unit of 1-us.
+ * TSF_OFFSET: TSF offset in MAC header.
+ * AUTO_SEQUENCE: Let ASIC control frame sequence number.
+ */
+#define TXRX_CSR1                      0x0442
+#define TXRX_CSR1_ACK_TIMEOUT          FIELD16(0x00ff)
+#define TXRX_CSR1_TSF_OFFSET           FIELD16(0x7f00)
+#define TXRX_CSR1_AUTO_SEQUENCE                FIELD16(0x8000)
+
+/*
+ * TXRX_CSR2: RX control.
+ * DISABLE_RX: Disable rx engine.
+ * DROP_CRC: Drop crc error.
+ * DROP_PHYSICAL: Drop physical error.
+ * DROP_CONTROL: Drop control frame.
+ * DROP_NOT_TO_ME: Drop not to me unicast frame.
+ * DROP_TODS: Drop frame tods bit is true.
+ * DROP_VERSION_ERROR: Drop version error frame.
+ * DROP_MCAST: Drop multicast frames.
+ * DROP_BCAST: Drop broadcast frames.
+ */
+#define TXRX_CSR2                      0x0444
+#define        TXRX_CSR2_DISABLE_RX            FIELD16(0x0001)
+#define TXRX_CSR2_DROP_CRC             FIELD16(0x0002)
+#define TXRX_CSR2_DROP_PHYSICAL                FIELD16(0x0004)
+#define TXRX_CSR2_DROP_CONTROL         FIELD16(0x0008)
+#define TXRX_CSR2_DROP_NOT_TO_ME       FIELD16(0x0010)
+#define TXRX_CSR2_DROP_TODS            FIELD16(0x0020)
+#define TXRX_CSR2_DROP_VERSION_ERROR   FIELD16(0x0040)
+#define TXRX_CSR2_DROP_MCAST           FIELD16(0x0200)
+#define TXRX_CSR2_DROP_BCAST           FIELD16(0x0400)
+
+/*
+ * RX BBP ID registers
+ * TXRX_CSR3: CCK RX BBP ID.
+ * TXRX_CSR4: OFDM RX BBP ID.
+ */
+#define TXRX_CSR3                      0x0446
+#define TXRX_CSR4                      0x0448
+
+/*
+ * TX BBP ID registers
+ * TXRX_CSR5: CCK TX BBP ID0.
+ * TXRX_CSR5: CCK TX BBP ID1.
+ * TXRX_CSR5: OFDM TX BBP ID0.
+ * TXRX_CSR5: OFDM TX BBP ID1.
+ */
+#define TXRX_CSR5                      0x044a
+#define TXRX_CSR6                      0x044c
+#define TXRX_CSR7                      0x044e
+#define TXRX_CSR8                      0x0450
+
+/*
+ * TXRX_CSR9: TX ACK time-out.
+ */
+#define TXRX_CSR9                      0x0452
+
+/*
+ * TXRX_CSR10: Auto responder control.
+ */
+#define TXRX_CSR10                     0x0454
+#define TXRX_CSR10_AUTORESPOND_PREAMBLE FIELD16(0x0004)
+
+/*
+ * TXRX_CSR11: Auto responder basic rate.
+ */
+#define TXRX_CSR11                     0x0456
+
+/*
+ * ACK/CTS time registers.
+ */
+#define TXRX_CSR12                     0x0458
+#define TXRX_CSR13                     0x045a
+#define TXRX_CSR14                     0x045c
+#define TXRX_CSR15                     0x045e
+#define TXRX_CSR16                     0x0460
+#define TXRX_CSR17                     0x0462
+
+/*
+ * TXRX_CSR18: Synchronization control register.
+ */
+#define TXRX_CSR18                     0x0464
+#define TXRX_CSR18_OFFSET              FIELD16(0x000f)
+#define TXRX_CSR18_INTERVAL            FIELD16(0xfff0)
+
+/*
+ * TXRX_CSR19: Synchronization control register.
+ * TSF_COUNT: Enable TSF auto counting.
+ * TSF_SYNC: Tsf sync, 0: disable, 1: infra, 2: ad-hoc/master mode.
+ * TBCN: Enable Tbcn with reload value.
+ * BEACON_GEN: Enable beacon generator.
+ */
+#define TXRX_CSR19                     0x0466
+#define TXRX_CSR19_TSF_COUNT           FIELD16(0x0001)
+#define TXRX_CSR19_TSF_SYNC            FIELD16(0x0006)
+#define TXRX_CSR19_TBCN                        FIELD16(0x0008)
+#define TXRX_CSR19_BEACON_GEN          FIELD16(0x0010)
+
+/*
+ * TXRX_CSR20: Tx BEACON offset time control register.
+ * OFFSET: In units of usec.
+ * BCN_EXPECT_WINDOW: Default: 2^CWmin
+ */
+#define TXRX_CSR20                     0x0468
+#define TXRX_CSR20_OFFSET              FIELD16(0x1fff)
+#define TXRX_CSR20_BCN_EXPECT_WINDOW   FIELD16(0xe000)
+
+/*
+ * TXRX_CSR21
+ */
+#define TXRX_CSR21                     0x046a
+
+/*
+ * Encryption related CSRs.
+ *
+ */
+
+/*
+ * SEC_CSR0-SEC_CSR7: Shared key 0, word 0-7
+ */
+#define SEC_CSR0                       0x0480
+#define SEC_CSR1                       0x0482
+#define SEC_CSR2                       0x0484
+#define SEC_CSR3                       0x0486
+#define SEC_CSR4                       0x0488
+#define SEC_CSR5                       0x048a
+#define SEC_CSR6                       0x048c
+#define SEC_CSR7                       0x048e
+
+/*
+ * SEC_CSR8-SEC_CSR15: Shared key 1, word 0-7
+ */
+#define SEC_CSR8                       0x0490
+#define SEC_CSR9                       0x0492
+#define SEC_CSR10                      0x0494
+#define SEC_CSR11                      0x0496
+#define SEC_CSR12                      0x0498
+#define SEC_CSR13                      0x049a
+#define SEC_CSR14                      0x049c
+#define SEC_CSR15                      0x049e
+
+/*
+ * SEC_CSR16-SEC_CSR23: Shared key 2, word 0-7
+ */
+#define SEC_CSR16                      0x04a0
+#define SEC_CSR17                      0x04a2
+#define SEC_CSR18                      0X04A4
+#define SEC_CSR19                      0x04a6
+#define SEC_CSR20                      0x04a8
+#define SEC_CSR21                      0x04aa
+#define SEC_CSR22                      0x04ac
+#define SEC_CSR23                      0x04ae
+
+/*
+ * SEC_CSR24-SEC_CSR31: Shared key 3, word 0-7
+ */
+#define SEC_CSR24                      0x04b0
+#define SEC_CSR25                      0x04b2
+#define SEC_CSR26                      0x04b4
+#define SEC_CSR27                      0x04b6
+#define SEC_CSR28                      0x04b8
+#define SEC_CSR29                      0x04ba
+#define SEC_CSR30                      0x04bc
+#define SEC_CSR31                      0x04be
+
+/*
+ * PHY control registers.
+ */
+
+/*
+ * PHY_CSR0: RF switching timing control.
+ */
+#define PHY_CSR0                       0x04c0
+
+/*
+ * PHY_CSR1: TX PA configuration.
+ */
+#define PHY_CSR1                       0x04c2
+
+/*
+ * MAC configuration registers.
+ * PHY_CSR2: TX MAC configuration.
+ * PHY_CSR3: RX MAC configuration.
+ */
+#define PHY_CSR2                       0x04c4
+#define PHY_CSR3                       0x04c6
+
+/*
+ * PHY_CSR4: Interface configuration.
+ */
+#define PHY_CSR4                       0x04c8
+
+/*
+ * BBP pre-TX registers.
+ * PHY_CSR5: BBP pre-TX CCK.
+ */
+#define PHY_CSR5                       0x04ca
+#define PHY_CSR5_CCK                   FIELD16(0x0003)
+#define PHY_CSR5_CCK_FLIP              FIELD16(0x0004)
+
+/*
+ * BBP pre-TX registers.
+ * PHY_CSR6: BBP pre-TX OFDM.
+ */
+#define PHY_CSR6                       0x04cc
+#define PHY_CSR6_OFDM                  FIELD16(0x0003)
+#define PHY_CSR6_OFDM_FLIP             FIELD16(0x0004)
+
+/*
+ * PHY_CSR7: BBP access register 0.
+ * BBP_DATA: BBP data.
+ * BBP_REG_ID: BBP register ID.
+ * BBP_READ_CONTROL: 0: write, 1: read.
+ */
+#define PHY_CSR7                       0x04ce
+#define PHY_CSR7_DATA                  FIELD16(0x00ff)
+#define PHY_CSR7_REG_ID                        FIELD16(0x7f00)
+#define PHY_CSR7_READ_CONTROL          FIELD16(0x8000)
+
+/*
+ * PHY_CSR8: BBP access register 1.
+ * BBP_BUSY: ASIC is busy execute BBP programming.
+ */
+#define PHY_CSR8                       0x04d0
+#define PHY_CSR8_BUSY                  FIELD16(0x0001)
+
+/*
+ * PHY_CSR9: RF access register.
+ * RF_VALUE: Register value + id to program into rf/if.
+ */
+#define PHY_CSR9                       0x04d2
+#define PHY_CSR9_RF_VALUE              FIELD16(0xffff)
+
+/*
+ * PHY_CSR10: RF access register.
+ * RF_VALUE: Register value + id to program into rf/if.
+ * RF_NUMBER_OF_BITS: Number of bits used in value (i:20, rfmd:22).
+ * RF_IF_SELECT: Chip to program: 0: rf, 1: if.
+ * RF_PLL_LD: Rf pll_ld status.
+ * RF_BUSY: 1: asic is busy execute rf programming.
+ */
+#define PHY_CSR10                      0x04d4
+#define PHY_CSR10_RF_VALUE             FIELD16(0x00ff)
+#define PHY_CSR10_RF_NUMBER_OF_BITS    FIELD16(0x1f00)
+#define PHY_CSR10_RF_IF_SELECT         FIELD16(0x2000)
+#define PHY_CSR10_RF_PLL_LD            FIELD16(0x4000)
+#define PHY_CSR10_RF_BUSY              FIELD16(0x8000)
+
+/*
+ * STA_CSR0: FCS error count.
+ * FCS_ERROR: FCS error count, cleared when read.
+ */
+#define STA_CSR0                       0x04e0
+#define STA_CSR0_FCS_ERROR             FIELD16(0xffff)
+
+/*
+ * Statistic Register.
+ * STA_CSR1: PLCP error.
+ * STA_CSR2: LONG error.
+ * STA_CSR3: CCA false alarm.
+ * STA_CSR4: RX FIFO overflow.
+ * STA_CSR5: Beacon sent counter.
+ */
+#define STA_CSR1                       0x04e2
+#define STA_CSR2                       0x04e4
+#define STA_CSR3                       0x04e6
+#define STA_CSR4                       0x04e8
+#define STA_CSR5                       0x04ea
+#define STA_CSR6                       0x04ec
+#define STA_CSR7                       0x04ee
+#define STA_CSR8                       0x04f0
+#define STA_CSR9                       0x04f2
+#define STA_CSR10                      0x04f4
+
+/*
+ * RF registers.
+ */
+#define RF1_TUNER                      FIELD32(0x00020000)
+#define RF3_TUNER                      FIELD32(0x00000100)
+#define RF3_TXPOWER                    FIELD32(0x00003e00)
+
+/*
+ * EEPROM contents.
+ */
+
+/*
+ * HW MAC address.
+ */
+#define EEPROM_MAC_ADDR_0              0x0002
+#define EEPROM_MAC_ADDR_BYTE0          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE1          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR1               0x0003
+#define EEPROM_MAC_ADDR_BYTE2          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE3          FIELD16(0xff00)
+#define EEPROM_MAC_ADDR_2              0x0004
+#define EEPROM_MAC_ADDR_BYTE4          FIELD16(0x00ff)
+#define EEPROM_MAC_ADDR_BYTE5          FIELD16(0xff00)
+
+/*
+ * EEPROM antenna.
+ * ANTENNA_NUM: Number of antenna's.
+ * TX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * RX_DEFAULT: Default antenna 0: diversity, 1: A, 2: B.
+ * LED_MODE: 0: default, 1: TX/RX activity, 2: Single (ignore link), 3: rsvd.
+ * DYN_TXAGC: Dynamic TX AGC control.
+ * HARDWARE_RADIO: 1: Hardware controlled radio. Read GPIO0.
+ * RF_TYPE: Rf_type of this adapter.
+ */
+#define EEPROM_ANTENNA                 0x000b
+#define EEPROM_ANTENNA_NUM             FIELD16(0x0003)
+#define EEPROM_ANTENNA_TX_DEFAULT      FIELD16(0x000c)
+#define EEPROM_ANTENNA_RX_DEFAULT      FIELD16(0x0030)
+#define EEPROM_ANTENNA_LED_MODE                FIELD16(0x01c0)
+#define EEPROM_ANTENNA_DYN_TXAGC       FIELD16(0x0200)
+#define EEPROM_ANTENNA_HARDWARE_RADIO  FIELD16(0x0400)
+#define EEPROM_ANTENNA_RF_TYPE         FIELD16(0xf800)
+
+/*
+ * EEPROM NIC config.
+ * CARDBUS_ACCEL: 0: enable, 1: disable.
+ * DYN_BBP_TUNE: 0: enable, 1: disable.
+ * CCK_TX_POWER: CCK TX power compensation.
+ */
+#define EEPROM_NIC                     0x000c
+#define EEPROM_NIC_CARDBUS_ACCEL       FIELD16(0x0001)
+#define EEPROM_NIC_DYN_BBP_TUNE                FIELD16(0x0002)
+#define EEPROM_NIC_CCK_TX_POWER                FIELD16(0x000c)
+
+/*
+ * EEPROM geography.
+ * GEO: Default geography setting for device.
+ */
+#define EEPROM_GEOGRAPHY               0x000d
+#define EEPROM_GEOGRAPHY_GEO           FIELD16(0x0f00)
+
+/*
+ * EEPROM BBP.
+ */
+#define EEPROM_BBP_START               0x000e
+#define EEPROM_BBP_SIZE                        16
+#define EEPROM_BBP_VALUE               FIELD16(0x00ff)
+#define EEPROM_BBP_REG_ID              FIELD16(0xff00)
+
+/*
+ * EEPROM TXPOWER
+ */
+#define EEPROM_TXPOWER_START           0x001e
+#define EEPROM_TXPOWER_SIZE            7
+#define EEPROM_TXPOWER_1               FIELD16(0x00ff)
+#define EEPROM_TXPOWER_2               FIELD16(0xff00)
+
+/*
+ * EEPROM Tuning threshold
+ */
+#define EEPROM_BBPTUNE                 0x0030
+#define EEPROM_BBPTUNE_THRESHOLD       FIELD16(0x00ff)
+
+/*
+ * EEPROM BBP R24 Tuning.
+ */
+#define EEPROM_BBPTUNE_R24             0x0031
+#define EEPROM_BBPTUNE_R24_LOW         FIELD16(0x00ff)
+#define EEPROM_BBPTUNE_R24_HIGH                FIELD16(0xff00)
+
+/*
+ * EEPROM BBP R25 Tuning.
+ */
+#define EEPROM_BBPTUNE_R25             0x0032
+#define EEPROM_BBPTUNE_R25_LOW         FIELD16(0x00ff)
+#define EEPROM_BBPTUNE_R25_HIGH                FIELD16(0xff00)
+
+/*
+ * EEPROM BBP R24 Tuning.
+ */
+#define EEPROM_BBPTUNE_R61             0x0033
+#define EEPROM_BBPTUNE_R61_LOW         FIELD16(0x00ff)
+#define EEPROM_BBPTUNE_R61_HIGH                FIELD16(0xff00)
+
+/*
+ * EEPROM BBP VGC Tuning.
+ */
+#define EEPROM_BBPTUNE_VGC             0x0034
+#define EEPROM_BBPTUNE_VGCUPPER                FIELD16(0x00ff)
+
+/*
+ * EEPROM BBP R17 Tuning.
+ */
+#define EEPROM_BBPTUNE_R17             0x0035
+#define EEPROM_BBPTUNE_R17_LOW         FIELD16(0x00ff)
+#define EEPROM_BBPTUNE_R17_HIGH                FIELD16(0xff00)
+
+/*
+ * RSSI <-> dBm offset calibration
+ */
+#define EEPROM_CALIBRATE_OFFSET                0x0036
+#define EEPROM_CALIBRATE_OFFSET_RSSI   FIELD16(0x00ff)
+
+/*
+ * BBP content.
+ * The wordsize of the BBP is 8 bits.
+ */
+
+/*
+ * BBP_R2: TX antenna control
+ */
+#define BBP_R2_TX_ANTENNA              FIELD8(0x03)
+#define BBP_R2_TX_IQ_FLIP              FIELD8(0x04)
+
+/*
+ * BBP_R14: RX antenna control
+ */
+#define BBP_R14_RX_ANTENNA             FIELD8(0x03)
+#define BBP_R14_RX_IQ_FLIP             FIELD8(0x04)
+
+/*
+ * DMA descriptor defines.
+ */
+#define TXD_DESC_SIZE                  ( 5 * sizeof(struct data_desc) )
+#define RXD_DESC_SIZE                  ( 4 * sizeof(struct data_desc) )
+
+/*
+ * TX descriptor format for TX, PRIO, ATIM and Beacon Ring.
+ */
+
+/*
+ * Word0
+ */
+#define TXD_W0_PACKET_ID               FIELD32(0x0000000f)
+#define TXD_W0_RETRY_LIMIT             FIELD32(0x000000f0)
+#define TXD_W0_MORE_FRAG               FIELD32(0x00000100)
+#define TXD_W0_ACK                     FIELD32(0x00000200)
+#define TXD_W0_TIMESTAMP               FIELD32(0x00000400)
+#define TXD_W0_OFDM                    FIELD32(0x00000800)
+#define TXD_W0_NEW_SEQ                 FIELD32(0x00001000)
+#define TXD_W0_IFS                     FIELD32(0x00006000)
+#define TXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+#define TXD_W0_CIPHER                  FIELD32(0x20000000)
+#define TXD_W0_KEY_ID                  FIELD32(0xc0000000)
+
+/*
+ * Word1
+ */
+#define TXD_W1_IV_OFFSET               FIELD32(0x0000003f)
+#define TXD_W1_AIFS                    FIELD32(0x000000c0)
+#define TXD_W1_CWMIN                   FIELD32(0x00000f00)
+#define TXD_W1_CWMAX                   FIELD32(0x0000f000)
+
+/*
+ * Word2: PLCP information
+ */
+#define TXD_W2_PLCP_SIGNAL             FIELD32(0x000000ff)
+#define TXD_W2_PLCP_SERVICE            FIELD32(0x0000ff00)
+#define TXD_W2_PLCP_LENGTH_LOW         FIELD32(0x00ff0000)
+#define TXD_W2_PLCP_LENGTH_HIGH                FIELD32(0xff000000)
+
+/*
+ * Word3
+ */
+#define TXD_W3_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word4
+ */
+#define TXD_W4_EIV                     FIELD32(0xffffffff)
+
+/*
+ * RX descriptor format for RX Ring.
+ */
+
+/*
+ * Word0
+ */
+#define RXD_W0_UNICAST_TO_ME           FIELD32(0x00000002)
+#define RXD_W0_MULTICAST               FIELD32(0x00000004)
+#define RXD_W0_BROADCAST               FIELD32(0x00000008)
+#define RXD_W0_MY_BSS                  FIELD32(0x00000010)
+#define RXD_W0_CRC                     FIELD32(0x00000020)
+#define RXD_W0_OFDM                    FIELD32(0x00000040)
+#define RXD_W0_PHYSICAL_ERROR          FIELD32(0x00000080)
+#define RXD_W0_CIPHER                  FIELD32(0x00000100)
+#define RXD_W0_CI_ERROR                        FIELD32(0x00000200)
+#define RXD_W0_DATABYTE_COUNT          FIELD32(0x0fff0000)
+
+/*
+ * Word1
+ */
+#define RXD_W1_RSSI                    FIELD32(0x000000ff)
+#define RXD_W1_SIGNAL                  FIELD32(0x0000ff00)
+
+/*
+ * Word2
+ */
+#define RXD_W2_IV                      FIELD32(0xffffffff)
+
+/*
+ * Word3
+ */
+#define RXD_W3_EIV                     FIELD32(0xffffffff)
+
+/*
+ * Macro's for converting txpower from EEPROM to dscape value
+ * and from dscape value to register value.
+ */
+#define MIN_TXPOWER    0
+#define MAX_TXPOWER    31
+#define DEFAULT_TXPOWER        24
+
+#define TXPOWER_FROM_DEV(__txpower)            \
+({                                             \
+       ((__txpower) > MAX_TXPOWER) ?           \
+               DEFAULT_TXPOWER : (__txpower);  \
+})
+
+#define TXPOWER_TO_DEV(__txpower)                      \
+({                                                     \
+       ((__txpower) <= MIN_TXPOWER) ? MIN_TXPOWER :    \
+       (((__txpower) >= MAX_TXPOWER) ? MAX_TXPOWER :   \
+       (__txpower));                                   \
+})
+
+/*
+ * Interrupt functions.
+ */
+static void rt2500usb_interrupt_rxdone(struct urb *urb);
+
+#endif /* RT2500USB_H */
diff --git a/package/rt2x00/src/rt2x00.h b/package/rt2x00/src/rt2x00.h
new file mode 100644 (file)
index 0000000..dbea6ac
--- /dev/null
@@ -0,0 +1,1087 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00
+       Abstract: rt2x00 global information.
+       Supported chipsets: RT2460, RT2560, RT2570,
+       rt2561, rt2561s, rt2661, rt2571W & rt2671.
+ */
+
+#ifndef RT2X00_H
+#define RT2X00_H
+
+#include <linux/bitops.h>
+#include <linux/skbuff.h>
+#include <linux/workqueue.h>
+
+#include <net/mac80211.h>
+
+#include "rt2x00lib.h"
+#include "rt2x00debug.h"
+
+/*
+ * Module information.
+ */
+#ifndef DRV_NAME
+#define DRV_NAME       "rt2x00"
+#endif /* DRV_NAME */
+#define DRV_VERSION    "2.0.1"
+#define DRV_PROJECT    "http://rt2x00.serialmonkey.com"
+
+/*
+ * Debug definitions.
+ * Debug output has to be enabled during compile time.
+ */
+#define DEBUG_PRINTK_MSG(__dev, __kernlvl, __lvl, __msg, __args...)    \
+       printk(__kernlvl "%s -> %s: %s - " __msg,                       \
+               wiphy_name(rt2x00dev->hw->wiphy),                       \
+               __FUNCTION__, __lvl, ##__args)
+
+#define DEBUG_PRINTK_PROBE(__kernlvl, __lvl, __msg, __args...)         \
+       printk(__kernlvl "%s -> %s: %s - " __msg,                       \
+               DRV_NAME, __FUNCTION__, __lvl,  ##__args)
+
+#ifdef CONFIG_RT2X00_DEBUG
+#define DEBUG_PRINTK(__dev, __kernlvl, __lvl, __msg, __args...) \
+       DEBUG_PRINTK_MSG(__dev, __kernlvl, __lvl, __msg, ##__args);
+#else /* CONFIG_RT2X00_DEBUG */
+#define DEBUG_PRINTK(__dev, __kernlvl, __lvl, __msg, __args...) \
+       do { } while (0)
+#endif /* CONFIG_RT2X00_DEBUG */
+
+/*
+ * Various debug levels.
+ * The debug levels PANIC and ERROR both indicate serious problems,
+ * for this reason they should never be ignored.
+ * The special ERROR_PROBE message is for messages that are generated
+ * when the rt2x00_dev is not yet initialized.
+ */
+#define PANIC(__dev, __msg, __args...) \
+       DEBUG_PRINTK_MSG(__dev, KERN_CRIT, "Panic", __msg, ##__args)
+#define ERROR(__dev, __msg, __args...) \
+       DEBUG_PRINTK_MSG(__dev, KERN_ERR, "Error", __msg, ##__args)
+#define ERROR_PROBE(__msg, __args...) \
+       DEBUG_PRINTK_PROBE(KERN_ERR, "Error", __msg, ##__args)
+#define WARNING(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_WARNING, "Warning", __msg, ##__args)
+#define NOTICE(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_NOTICE, "Notice", __msg, ##__args)
+#define INFO(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_INFO, "Info", __msg, ##__args)
+#define DEBUG(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_DEBUG, "Debug", __msg, ##__args)
+#define EEPROM(__dev, __msg, __args...) \
+       DEBUG_PRINTK(__dev, KERN_DEBUG, "EEPROM recovery", __msg, ##__args)
+
+/*
+ * Ring sizes.
+ * Ralink PCI devices demand the Frame size to be a multiple of 128 bytes.
+ * DATA_FRAME_SIZE is used for TX, RX, ATIM and PRIO rings.
+ * MGMT_FRAME_SIZE is used for the BEACON ring.
+ */
+#define DATA_FRAME_SIZE        2432
+#define MGMT_FRAME_SIZE        256
+
+/*
+ * Number of entries in a packet ring.
+ */
+#define RX_ENTRIES     12
+#define TX_ENTRIES     12
+#define ATIM_ENTRIES   1
+#define BEACON_ENTRIES 1
+
+/*
+ * Standard timing and size defines.
+ */
+#define ACK_SIZE               14
+#define IEEE80211_HEADER       24
+#define PLCP                   48
+#define BEACON                 100
+#define PREAMBLE               144
+#define SHORT_PREAMBLE         72
+#define SLOT_TIME              20
+#define SHORT_SLOT_TIME                9
+#define SIFS                   10
+#define PIFS                   ( SIFS + SLOT_TIME )
+#define SHORT_PIFS             ( SIFS + SHORT_SLOT_TIME )
+#define DIFS                   ( PIFS + SLOT_TIME )
+#define SHORT_DIFS             ( SHORT_PIFS + SHORT_SLOT_TIME )
+#define EIFS                   ( SIFS + (8 * (IEEE80211_HEADER + ACK_SIZE)) )
+
+/*
+ * IEEE802.11 header defines
+ */
+#define is_rts_frame(__fc) \
+       ( !!((((__fc) &  IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_CTL) && \
+            (((__fc) &  IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_RTS)) )
+#define is_cts_frame(__fc) \
+       ( !!((((__fc) &  IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_CTL) && \
+            (((__fc) &  IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_CTS)) )
+#define is_probe_resp(__fc) \
+       ( !!((((__fc) & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT) && \
+            (((__fc) & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_PROBE_RESP)) )
+
+/*
+ * Interval defines
+ */
+#define LINK_TUNE_INTERVAL     ( 1 * HZ )
+#define RFKILL_POLL_INTERVAL   ( HZ / 4 )
+
+/*
+ * TX result flags.
+ */
+enum TX_STATUS {
+       TX_SUCCESS = 0,
+       TX_SUCCESS_RETRY = 1,
+       TX_FAIL_RETRY = 2,
+       TX_FAIL_INVALID = 3,
+       TX_FAIL_OTHER = 4,
+};
+
+/*
+ * Antenna values
+ */
+enum antenna {
+       ANTENNA_DIVERSITY = 0,
+       ANTENNA_A = 1,
+       ANTENNA_B = 2,
+};
+
+/*
+ * Led mode values.
+ */
+enum led_mode {
+       LED_MODE_DEFAULT = 0,
+       LED_MODE_TXRX_ACTIVITY = 1,
+       LED_MODE_SIGNAL_STRENGTH = 2,
+       LED_MODE_ASUS = 3,
+       LED_MODE_ALPHA = 4,
+};
+
+/*
+ * Device states
+ */
+enum dev_state {
+       STATE_DEEP_SLEEP = 0,
+       STATE_SLEEP = 1,
+       STATE_STANDBY = 2,
+       STATE_AWAKE = 3,
+
+/*
+ * Additional device states, these values are
+ * not strict since they are not directly passed
+ * into the device.
+ */
+       STATE_RADIO_ON,
+       STATE_RADIO_OFF,
+       STATE_RADIO_RX_ON,
+       STATE_RADIO_RX_OFF,
+};
+
+/*
+ * IFS backoff values
+ */
+enum ifs {
+       IFS_BACKOFF = 0,
+       IFS_SIFS = 1,
+       IFS_NEW_BACKOFF = 2,
+       IFS_NONE = 3,
+};
+
+/*
+ * Cipher types for hardware encryption
+ */
+enum cipher {
+       CIPHER_NONE = 0,
+       CIPHER_WEP64 = 1,
+       CIPHER_WEP128 = 2,
+       CIPHER_TKIP = 3,
+       CIPHER_AES = 4,
+/*
+ * The following fields were added by rt61pci and rt73usb.
+ */
+       CIPHER_CKIP64 = 5,
+       CIPHER_CKIP128 = 6,
+       CIPHER_TKIP_NO_MIC = 7,
+};
+
+/*
+ * Register handlers.
+ * We store the position of a register field inside a field structure,
+ * This will simplify the process of setting and reading a certain field
+ * inside the register while making sure the process remains byte order safe.
+ */
+struct rt2x00_field8 {
+       u8 bit_offset;
+       u8 bit_mask;
+};
+
+struct rt2x00_field16 {
+       u16 bit_offset;
+       u16 bit_mask;
+};
+
+struct rt2x00_field32 {
+       u32 bit_offset;
+       u32 bit_mask;
+};
+
+/*
+ * Power of two check from Linus Torvalds,
+ * this will check if the mask that has been
+ * given contains and contiguous set of bits.
+ */
+#define is_power_of_two(x)     ( !((x) & ((x)-1)) )
+#define low_bit_mask(x)                ( ((x)-1) & ~(x) )
+#define is_valid_mask(x)       is_power_of_two(1 + (x) + low_bit_mask(x))
+
+#define FIELD8(__mask)                         \
+({                                             \
+       BUILD_BUG_ON(!(__mask) ||               \
+                    !is_valid_mask(__mask) ||  \
+                    (__mask) != (u8)(__mask)); \
+       (struct rt2x00_field8) {                \
+               __ffs(__mask), (__mask)         \
+       };                                      \
+})
+
+#define FIELD16(__mask)                                \
+({                                             \
+       BUILD_BUG_ON(!(__mask) ||               \
+                    !is_valid_mask(__mask) ||  \
+                    (__mask) != (u16)(__mask));\
+       (struct rt2x00_field16) {               \
+               __ffs(__mask), (__mask)         \
+       };                                      \
+})
+
+#define FIELD32(__mask)                                \
+({                                             \
+       BUILD_BUG_ON(!(__mask) ||               \
+                    !is_valid_mask(__mask) ||  \
+                    (__mask) != (u32)(__mask));\
+       (struct rt2x00_field32) {               \
+               __ffs(__mask), (__mask)         \
+       };                                      \
+})
+
+static inline void rt2x00_set_field32(u32 *reg,
+       const struct rt2x00_field32 field, const u32 value)
+{
+       *reg &= ~(field.bit_mask);
+       *reg |= (value << field.bit_offset) & field.bit_mask;
+}
+
+static inline u32 rt2x00_get_field32(const u32 reg,
+       const struct rt2x00_field32 field)
+{
+       return (reg & field.bit_mask) >> field.bit_offset;
+}
+
+static inline void rt2x00_set_field16(u16 *reg,
+       const struct rt2x00_field16 field, const u16 value)
+{
+       *reg &= ~(field.bit_mask);
+       *reg |= (value << field.bit_offset) & field.bit_mask;
+}
+
+static inline u16 rt2x00_get_field16(const u16 reg,
+       const struct rt2x00_field16 field)
+{
+       return (reg & field.bit_mask) >> field.bit_offset;
+}
+
+static inline void rt2x00_set_field8(u8 *reg,
+       const struct rt2x00_field8 field, const u8 value)
+{
+       *reg &= ~(field.bit_mask);
+       *reg |= (value << field.bit_offset) & field.bit_mask;
+}
+
+static inline u8 rt2x00_get_field8(const u8 reg,
+       const struct rt2x00_field8 field)
+{
+       return (reg & field.bit_mask) >> field.bit_offset;
+}
+
+/*
+ * Chipset identification
+ * The chipset on the device is composed of a RT and RF chip.
+ * The chipset combination is important for determining device capabilities.
+ */
+struct rt2x00_chip {
+       u16 rt;
+#define RT2460         0x0101
+#define RT2560         0x0201
+#define RT2570         0x1201
+#define RT2561         0x0301
+#define RT2561s                0x0302
+#define RT2661         0x0401
+#define RT2571         0x1300
+
+       u16 rf;
+       u32 rev;
+};
+
+/*
+ * data_desc
+ * Each data entry also contains a descriptor which is used by the
+ * device to determine what should be done with the packet and
+ * what the current status is.
+ * This structure is greatly simplified, but the descriptors
+ * are basically a list of little endian 32 bit values.
+ * Make the array by default 1 word big, this will allow us
+ * to use sizeof() correctly.
+ */
+struct data_desc {
+       __le32 word[1];
+};
+
+/*
+ * data_entry_desc
+ * Summary of information that should be written into the
+ * descriptor for sending a TX frame.
+ */
+struct data_entry_desc {
+       /*
+        * PLCP values.
+        */
+       u16 length_high;
+       u16 length_low;
+       u16 signal;
+       u16 service;
+
+       int queue;
+       int ifs;
+};
+
+/*
+ * data_entry
+ * The data ring is a list of data entries.
+ * Each entry holds a reference to the descriptor
+ * and the data buffer. For TX rings the reference to the
+ * sk_buff of the packet being transmitted is also stored here.
+ */
+struct data_entry {
+       /*
+        * Status flags
+        */
+       unsigned long flags;
+#define ENTRY_OWNER_NIC                1
+#define ENTRY_TXDONE           2
+#define ENTRY_TXD_RTS_FRAME    3
+#define ENTRY_TXD_OFDM_RATE    4
+#define ENTRY_TXD_MORE_FRAG    5
+#define ENTRY_TXD_REQ_TIMESTAMP        6
+#define ENTRY_TXD_REQ_ACK      7
+#define ENTRY_TXD_NEW_SEQ      8
+
+       /*
+        * Ring we belong to.
+        */
+       struct data_ring *ring;
+
+       /*
+        * sk_buff for the packet which is being transmitted
+        * in this entry (Only used with TX related rings).
+        */
+       struct sk_buff *skb;
+
+       /*
+        * Store a ieee80211_tx_status structure in each
+        * ring entry, this will optimize the txdone
+        * handler.
+        */
+       struct ieee80211_tx_status tx_status;
+
+       /*
+        * private pointer specific to driver.
+        */
+       void *priv;
+
+       /*
+        * Data address for this entry.
+        */
+       void *data_addr;
+       dma_addr_t data_dma;
+};
+
+/*
+ * data_ring
+ * Data rings are used by the device to send and receive packets.
+ * The data_addr is the base address of the data memory.
+ * To determine at which point in the ring we are,
+ * have to use the rt2x00_ring_index_*() functions.
+ */
+struct data_ring {
+       /*
+        * Pointer to main rt2x00dev structure where this
+        * ring belongs to.
+        */
+       struct rt2x00_dev *rt2x00dev;
+
+       /*
+        * Base address for the device specific data entries.
+        */
+       struct data_entry *entry;
+
+       /*
+        * TX queue statistic info.
+        */
+       struct ieee80211_tx_queue_stats_data stats;
+
+       /*
+        * TX Queue parameters.
+        */
+       struct ieee80211_tx_queue_params tx_params;
+
+       /*
+        * Base address for data ring.
+        */
+       dma_addr_t data_dma;
+       void *data_addr;
+
+       /*
+        * Index variables.
+        */
+       u16 index;
+       u16 index_done;
+
+       /*
+        * Size of packet and descriptor in bytes.
+        */
+       u16 data_size;
+       u16 desc_size;
+};
+
+/*
+ * Handlers to determine the address of the current device specific
+ * data entry, where either index or index_done points to.
+ */
+static inline struct data_entry* rt2x00_get_data_entry(
+       struct data_ring *ring)
+{
+       return &ring->entry[ring->index];
+}
+
+static inline struct data_entry* rt2x00_get_data_entry_done(
+       struct data_ring *ring)
+{
+       return &ring->entry[ring->index_done];
+}
+
+/*
+ * Total ring memory
+ */
+static inline int rt2x00_get_ring_size(struct data_ring *ring)
+{
+       return ring->stats.limit * (ring->desc_size + ring->data_size);
+}
+
+/*
+ * Ring index manipulation functions.
+ */
+static inline void rt2x00_ring_index_inc(struct data_ring *ring)
+{
+       ring->index++;
+       if (ring->index >= ring->stats.limit)
+               ring->index = 0;
+       ring->stats.len++;
+}
+
+static inline void rt2x00_ring_index_done_inc(struct data_ring *ring)
+{
+       ring->index_done++;
+       if (ring->index_done >= ring->stats.limit)
+               ring->index_done = 0;
+       ring->stats.len--;
+       ring->stats.count++;
+}
+
+static inline void rt2x00_ring_index_clear(struct data_ring *ring)
+{
+       ring->index = 0;
+       ring->index_done = 0;
+       ring->stats.len = 0;
+       ring->stats.count = 0;
+}
+
+static inline int rt2x00_ring_empty(struct data_ring *ring)
+{
+       return ring->stats.len == 0;
+}
+
+static inline int rt2x00_ring_full(struct data_ring *ring)
+{
+       return ring->stats.len == ring->stats.limit;
+}
+
+static inline int rt2x00_ring_free(struct data_ring *ring)
+{
+       if (ring->index_done >= ring->index)
+               return ring->index_done - ring->index;
+       return ring->stats.len - (ring->index - ring->index_done);
+}
+
+/*
+ * TX/RX Descriptor access functions.
+ */
+static inline void rt2x00_desc_read(struct data_desc *desc,
+       const u8 word, u32 *value)
+{
+       *value = le32_to_cpu(desc->word[word]);
+}
+
+static inline void rt2x00_desc_write(struct data_desc *desc,
+       const u8 word, const u32 value)
+{
+       desc->word[word] = cpu_to_le32(value);
+}
+
+/*
+ * To optimize the quality of the link we need to store
+ * the quality of received frames and periodically
+ * optimize the link.
+ */
+struct link {
+       /*
+        * Link tuner counter
+        * The number of times the link has been tuned
+        * since the radio has been switched on.
+        */
+       u32 count;
+
+       /*
+        * RSSI statistics.
+        */
+       u32 count_rssi;
+       u32 total_rssi;
+
+       /*
+        * Misc statistics.
+        */
+       u32 curr_noise;
+       u32 false_cca;
+
+       /*
+        * Work structure for scheduling periodic link tuning.
+        */
+       struct delayed_work work;
+};
+
+/*
+ * Interface structure
+ * Configuration details about the current interface.
+ */
+struct interface {
+       /*
+        * Interface identification. The value is assigned
+        * to us by the 80211 stack, and is used to request
+        * new beacons.
+        */
+       int id;
+
+       /*
+        * Current working type (IEEE80211_IF_TYPE_*).
+        * This excludes the type IEEE80211_IF_TYPE_MNTR
+        * since that is counted seperately in the monitor_count
+        * field.
+        */
+       int type;
+
+       /*
+        * BBSID of the AP to associate with.
+        */
+       u8 bssid[ETH_ALEN];
+
+       /*
+        * Store the promisc mode for the current interface.
+        * monitor mode always forces promisc mode to be enabled,
+        * so we need to store the promisc mode seperately.
+        */
+       short promisc;
+
+       /*
+        * Monitor mode count, the number of interfaces
+        * in monitor mode that that have been added.
+        */
+       short monitor_count;
+};
+
+static inline int is_interface_present(struct interface *intf)
+{
+       return !!intf->id;
+}
+
+static inline int is_monitor_present(struct interface *intf)
+{
+       return !!intf->monitor_count;
+}
+
+/*
+ * rt2x00lib callback functions.
+ */
+struct rt2x00lib_ops {
+       /*
+        * Interrupt handlers.
+        */
+       irq_handler_t irq_handler;
+
+       /*
+        * Device init handlers.
+        */
+       int (*init_hw)(struct rt2x00_dev *rt2x00dev);
+       char* (*get_fw_name)(struct rt2x00_dev *rt2x00dev);
+       int (*load_firmware)(struct rt2x00_dev *rt2x00dev, void *data,
+               const size_t len);
+
+       /*
+        * Device initialization/deinitialization handlers.
+        */
+       int (*initialize)(struct rt2x00_dev *rt2x00dev);
+       void (*uninitialize)(struct rt2x00_dev *rt2x00dev);
+
+       /*
+        * Radio control handlers.
+        */
+       int (*set_device_state)(struct rt2x00_dev *rt2x00dev,
+               enum dev_state state);
+       int (*rfkill_poll)(struct rt2x00_dev *rt2x00dev);
+       void (*link_tuner)(struct rt2x00_dev *rt2x00dev, int rssi);
+
+       /*
+        * TX control handlers
+        */
+       void (*write_tx_desc)(struct rt2x00_dev *rt2x00dev,
+               struct data_entry *entry, struct data_desc *txd,
+               struct data_entry_desc *desc,
+               struct ieee80211_hdr *ieee80211hdr, unsigned int length,
+               struct ieee80211_tx_control *control);
+       int (*write_tx_data)(struct rt2x00_dev *rt2x00dev,
+               struct data_ring *ring, struct sk_buff *skb,
+               struct ieee80211_tx_control *control);
+       void (*kick_tx_queue)(struct rt2x00_dev *rt2x00dev, int queue);
+
+       /*
+        * Configuration handlers.
+        */
+       void (*config_type)(struct rt2x00_dev *rt2x00dev, const int type);
+       void (*config_phymode)(struct rt2x00_dev *rt2x00dev, const int phy);
+       void (*config_channel)(struct rt2x00_dev *rt2x00dev, const int value,
+       const int channel, const int txpower);
+       void (*config_mac_addr)(struct rt2x00_dev *rt2x00dev, u8 *mac);
+       void (*config_bssid)(struct rt2x00_dev *rt2x00dev, u8 *bssid);
+       void (*config_promisc)(struct rt2x00_dev *rt2x00dev, const int promisc);
+       void (*config_txpower)(struct rt2x00_dev *rt2x00dev, const int txpower);
+       void (*config_antenna)(struct rt2x00_dev *rt2x00dev,
+               const int antenna_tx, const int antenna_rx);
+       void (*config_duration)(struct rt2x00_dev *rt2x00dev,
+               const int short_slot_time, const int beacon_int);
+};
+
+/*
+ * rt2x00 driver callback operation structure.
+ */
+struct rt2x00_ops {
+       const char *name;
+       const unsigned int rxd_size;
+       const unsigned int txd_size;
+       const struct rt2x00lib_ops *lib;
+       const struct ieee80211_ops *hw;
+#ifdef CONFIG_RT2X00_LIB_DEBUGFS
+       const struct rt2x00debug *debugfs;
+#endif /* CONFIG_RT2X00_LIB_DEBUGFS */
+};
+
+/*
+ * rt2x00 device structure.
+ */
+struct rt2x00_dev {
+       /*
+        * Device structure.
+        * The structure stored in here depends on the
+        * system bus (PCI or USB).
+        * When accessing this variable, the rt2x00dev_{pci,usb}
+        * macro's should be used for correct typecasting.
+        */
+       void *dev;
+       struct device *device;
+#define rt2x00dev_pci(__dev)   ( (struct pci_dev*)(__dev)->dev )
+#define rt2x00dev_usb(__dev)   ( (struct usb_interface*)(__dev)->dev )
+
+       /*
+        * Callback functions.
+        */
+       const struct rt2x00_ops *ops;
+
+       /*
+        * IEEE80211 control structure.
+        */
+       struct ieee80211_hw *hw;
+       struct ieee80211_hw_mode *hwmodes;
+       unsigned int curr_hwmode;
+#define HWMODE_B       0
+#define HWMODE_G       1
+#define HWMODE_A       2
+
+       /*
+        * rfkill structure for RF state switching support.
+        * This will only be compiled in when required.
+        */
+#ifdef CONFIG_RT2X00_LIB_RFKILL
+       struct rfkill *rfkill;
+       struct delayed_work rfkill_work;
+#endif /* CONFIG_RT2X00_LIB_RFKILL */
+
+       /*
+        * Device flags.
+        * In these flags the current status and some
+        * of the device capabilities are stored.
+        */
+       unsigned long flags;
+#define DEVICE_ENABLED_RADIO           1
+#define DEVICE_ENABLED_RADIO_HW                2
+#define DEVICE_INITIALIZED             3
+#define DEVICE_INITIALIZED_HW          4
+#define FIRMWARE_REQUIRED              5
+#define FIRMWARE_LOADED                        6
+#define FIRMWARE_FAILED                        7
+#define INTERFACE_ENABLED              8
+#define INTERFACE_ENABLED_MONITOR      9
+#define INTERFACE_ENABLED_PROMISC      10
+#define DEVICE_SUPPORT_ATIM            11
+#define DEVICE_SUPPORT_HW_BUTTON       12
+#define CONFIG_FRAME_TYPE              13
+#define CONFIG_RF_SEQUENCE             14
+#define CONFIG_EXTERNAL_LNA            15
+#define CONFIG_EXTERNAL_LNA_A          16
+#define CONFIG_EXTERNAL_LNA_BG         17
+#define CONFIG_DOUBLE_ANTENNA          18
+#define CONFIG_DISABLE_LINK_TUNING     19
+
+       /*
+        * Chipset identification.
+        */
+       struct rt2x00_chip chip;
+
+       /*
+        * hw capability specifications.
+        */
+       struct hw_mode_spec spec;
+
+       /*
+        * Base address of device registers (PCI devices only).
+        */
+       void __iomem *csr_addr;
+
+       /*
+        * If enabled, the debugfs interface structures
+        * required for deregistration of debugfs.
+        */
+       const struct rt2x00debug_intf *debugfs_intf;
+
+       /*
+        * Queue for deferred work.
+        */
+       struct workqueue_struct *workqueue;
+
+       /*
+        * Interface configuration.
+        */
+       struct interface interface;
+
+       /*
+        * Link quality
+        */
+       struct link link;
+
+       /*
+        * EEPROM data.
+        */
+       __le16 *eeprom;
+
+       /*
+        * Active RF register values.
+        * These are stored here for easier working
+        * with the rf registers.
+        */
+       u32 rf1;
+       u32 rf2;
+       u32 rf3;
+       u32 rf4;
+
+       /*
+        * Current TX power value.
+        */
+       u16 tx_power;
+
+       /*
+        * LED register (for rt61pci & rt73usb).
+        */
+       u16 led_reg;
+
+       /*
+        * Led mode (LED_MODE_*)
+        */
+       u8 led_mode;
+
+       /*
+        * EEPROM bus width (PCI devices only).
+        */
+       u8 eeprom_width;
+
+       /*
+        * Frequency offset (for rt61pci & rt73usb).
+        */
+       u8 freq_offset;
+
+       /*
+        * Low level statistics which will have
+        * to be kept up to date while device is running.
+        */
+       struct ieee80211_low_level_stats low_level_stats;
+
+       /*
+        * RX configuration information.
+        */
+       struct ieee80211_rx_status rx_status;
+
+       /*
+        * Data ring arrays for RX, TX and Beacon.
+        * The Beacon array also contains the Atim ring
+        * if that is supported by the device.
+        */
+       struct data_ring *rx;
+       struct data_ring *tx;
+       struct data_ring *bcn;
+};
+
+static inline struct data_ring* rt2x00_get_ring(
+       struct rt2x00_dev *rt2x00dev, const unsigned int queue)
+{
+       int atim = test_bit(DEVICE_SUPPORT_ATIM, &rt2x00dev->flags);
+
+       /*
+        * Check if the rings have been allocated.
+        */
+       if (!rt2x00dev->tx || !rt2x00dev->bcn)
+               return NULL;
+
+       /*
+        * Check if we are requesting a reqular TX ring,
+        * or if we are requesting a Beacon or Atim ring.
+        * For Atim rings, we should check if it is supported.
+        */
+       if (queue < rt2x00dev->hw->queues)
+               return &rt2x00dev->tx[queue];
+       else if (queue == IEEE80211_TX_QUEUE_BEACON)
+               return &rt2x00dev->bcn[0];
+       else if (queue == IEEE80211_TX_QUEUE_AFTER_BEACON && atim)
+               return &rt2x00dev->bcn[1];
+
+       return NULL;
+}
+
+/*
+ * For-each loop for the ring array.
+ * Since the all rings are allocated as a single array,
+ * we can start at the rx pointer and move forward to the tx rings.
+ * The 1 + Atim check will assure that the address directly after
+ * the ring array is obtained and the for-each loop exits correctly.
+ */
+#define ring_for_each(__dev, __entry)          \
+       for ((__entry) = (__dev)->rx;           \
+               (__entry) != &(__dev)->bcn[1 +  \
+                       test_bit(DEVICE_SUPPORT_ATIM, &rt2x00dev->flags)]; \
+               (__entry)++)
+
+#define txring_for_each(__dev, __entry)                \
+       for ((__entry) = (__dev)->tx; (__entry) != (__dev)->bcn; (__entry)++)
+
+/*
+ * EEPROM access.
+ * The EEPROM is being accessed by word index.
+ */
+static inline void* rt2x00_eeprom_addr(const struct rt2x00_dev *rt2x00dev,
+       const u8 word)
+{
+       return (void*)&rt2x00dev->eeprom[word];
+}
+
+static inline void rt2x00_eeprom_read(const struct rt2x00_dev *rt2x00dev,
+       const u8 word, u16 *data)
+{
+       *data = le16_to_cpu(rt2x00dev->eeprom[word]);
+}
+
+static inline void rt2x00_eeprom_write(const struct rt2x00_dev *rt2x00dev,
+       const u8 word, u16 data)
+{
+       rt2x00dev->eeprom[word] = cpu_to_le16(data);
+}
+
+/*
+ * Link tuning handlers
+ */
+static inline void rt2x00_start_link_tune(struct rt2x00_dev *rt2x00dev)
+{
+       rt2x00dev->link.count = 0;
+       rt2x00dev->link.count_rssi = 0;
+       rt2x00dev->link.total_rssi = 0;
+       rt2x00dev->link.curr_noise = 0;
+
+       queue_delayed_work(rt2x00dev->workqueue,
+               &rt2x00dev->link.work, LINK_TUNE_INTERVAL);
+}
+
+static inline void rt2x00_stop_link_tune(struct rt2x00_dev *rt2x00dev)
+{
+       if (work_pending(&rt2x00dev->link.work.work))
+               cancel_rearming_delayed_workqueue(
+                       rt2x00dev->workqueue, &rt2x00dev->link.work);
+}
+
+static inline void rt2x00_update_link_rssi(struct link *link, u32 rssi)
+{
+       link->count_rssi++;
+       link->total_rssi += rssi;
+}
+
+static inline u32 rt2x00_get_link_rssi(struct link *link)
+{
+       u32 average = 0;
+
+       if (link->count_rssi && link->total_rssi)
+               average = link->total_rssi / link->count_rssi;
+
+       link->count_rssi = 0;
+       link->total_rssi = 0;
+
+       return average;
+}
+
+/*
+ * Chipset handlers
+ */
+static inline void rt2x00_set_chip(struct rt2x00_dev *rt2x00dev,
+       const u16 rt, const u16 rf, const u32 rev)
+{
+       INFO(rt2x00dev,
+               "Chipset detected - rt: %04x, rf: %04x, rev: %08x.\n",
+               rt, rf, rev);
+
+       rt2x00dev->chip.rt = rt;
+       rt2x00dev->chip.rf = rf;
+       rt2x00dev->chip.rev = rev;
+}
+
+static inline char rt2x00_rt(const struct rt2x00_chip *chipset, const u16 chip)
+{
+       return (chipset->rt == chip);
+}
+
+static inline char rt2x00_rf(const struct rt2x00_chip *chipset, const u16 chip)
+{
+       return (chipset->rf == chip);
+}
+
+static inline u16 rt2x00_rev(const struct rt2x00_chip *chipset)
+{
+       return chipset->rev;
+}
+
+/*
+ * Device specific rate value.
+ * We will have to create the device specific rate value
+ * passed to the ieee80211 kernel. We need to make it a consist of
+ * multiple fields because we want to store more then 1 device specific
+ * values inside the value.
+ *     1 - rate, stored as 100 kbit/s.
+ *     2 - preamble, short_preamble enabled flag.
+ *     3 - MASK_RATE, which rates are enabled in this mode, this mask
+ *     corresponds with the TX register format for the current device.
+ *     4 - plcp, 802.11b rates are device specific,
+ *     802.11g rates are set according to the ieee802.11a-1999 p.14.
+ * The bit to enable preamble is set in a seperate define.
+ */
+#define DEV_RATE       FIELD32(0x000007ff)
+#define DEV_PREAMBLE   FIELD32(0x00000800)
+#define DEV_RATEMASK   FIELD32(0x00fff000)
+#define DEV_PLCP       FIELD32(0xff000000)
+
+/*
+ * Bitmask for MASK_RATE
+ */
+#define DEV_RATE_1MB   0x00000001
+#define DEV_RATE_2MB   0x00000002
+#define DEV_RATE_5_5MB 0x00000004
+#define DEV_RATE_11MB  0x00000008
+#define DEV_RATE_6MB   0x00000010
+#define DEV_RATE_9MB   0x00000020
+#define DEV_RATE_12MB  0x00000040
+#define DEV_RATE_18MB  0x00000080
+#define DEV_RATE_24MB  0x00000100
+#define DEV_RATE_36MB  0x00000200
+#define DEV_RATE_48MB  0x00000400
+#define DEV_RATE_54MB  0x00000800
+
+/*
+ * Bitmask groups of bitrates
+ */
+#define DEV_BASIC_RATE \
+       ( DEV_RATE_1MB | DEV_RATE_2MB | DEV_RATE_5_5MB | DEV_RATE_11MB | \
+         DEV_RATE_6MB | DEV_RATE_12MB | DEV_RATE_24MB )
+
+#define DEV_CCK_RATE \
+       ( DEV_RATE_1MB | DEV_RATE_2MB | DEV_RATE_5_5MB | DEV_RATE_11MB )
+
+#define DEV_OFDM_RATE \
+       ( DEV_RATE_6MB | DEV_RATE_9MB | DEV_RATE_12MB | DEV_RATE_18MB | \
+         DEV_RATE_24MB | DEV_RATE_36MB | DEV_RATE_48MB | DEV_RATE_54MB )
+
+/*
+ * Macro's to set and get specific fields from the device specific val and val2
+ * fields inside the ieee80211_rate entry.
+ */
+#define DEVICE_SET_RATE_FIELD(__value, __mask) \
+       (int)( ((__value) << DEV_##__mask.bit_offset) & DEV_##__mask.bit_mask )
+
+#define DEVICE_GET_RATE_FIELD(__value, __mask) \
+       (int)( ((__value) & DEV_##__mask.bit_mask) >> DEV_##__mask.bit_offset )
+
+/*
+ * Duration calculations
+ * The rate variable passed is: 100kbs.
+ * To convert from bytes to bits we multiply size with 8,
+ * then the size is multiplied with 10 to make the
+ * real rate -> rate argument correction.
+ */
+static inline u16 get_duration(const unsigned int size, const u8 rate)
+{
+       return ((size * 8 * 10) / rate);
+}
+
+static inline u16 get_duration_res(const unsigned int size, const u8 rate)
+{
+       return ((size * 8 * 10) % rate);
+}
+
+#endif /* RT2X00_H */
diff --git a/package/rt2x00/src/rt2x00_compat.h b/package/rt2x00/src/rt2x00_compat.h
new file mode 100644 (file)
index 0000000..111c51e
--- /dev/null
@@ -0,0 +1,60 @@
+/*
+ * RT2X00 Compatability fixes for specific kernels.
+ */
+#ifndef RT2X00_COMPAT_H
+#define RT2X00_COMPAT_H
+
+/*
+ * First include the 2 config headers.
+ * The rt2x00_config.h should overrule
+ * the kernel configuration.
+ */
+#include <linux/autoconf.h>
+#include "rt2x00_config.h"
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/version.h>
+
+/*
+ * Check minimal requirements.
+ */
+#if (!defined(CONFIG_MAC80211) && !defined(CONFIG_MAC80211_MODULE))
+#error mac80211 support not enabled in kernel!
+#endif
+
+#if !defined(CONFIG_WLAN_80211)
+#error 802.11 wlan card support not enabled in kernel!
+#endif
+
+#if (defined(CONFIG_RT2400PCI) || defined(CONFIG_RT2500PCI) || defined(CONFIG_RT61PCI))
+#if (!defined(CONFIG_PCI) && !defined(CONFIG_PCI_MODULE))
+#error PCI has been disabled in your kernel!
+#endif
+#if (!defined(CONFIG_EEPROM_93CX6) && !defined(CONFIG_EEPROM_93CX6_MODULE))
+#error EEPROM_93CX6 has been disabled in your kernel!
+#endif
+#endif
+
+#if (defined(CONFIG_RT2500USB) || defined(CONFIG_RT73USB))
+#if (!defined(CONFIG_USB) && !defined(CONFIG_USB_MODULE))
+#error USB has been disabled in your kernel!
+#endif
+#endif
+
+#if (defined(CONFIG_RT61PCI) || defined(CONFIG_RT73USB))
+#if (!defined(CONFIG_FW_LOADER) && !defined(CONFIG_FW_LOADER_MODULE))
+#error Firmware loading has been disabled in your kernel!
+#endif
+#if (!defined(CONFIG_CRC_ITU_T) && !defined(CONFIG_CRC_ITU_T_MODULE))
+#error CRC_ITU_T loading has been disabled in your kernel!
+#endif
+#endif
+
+#if (defined(CONFIG_RT2400PCI_BUTTON) || defined(CONFIG_RT2500PCI_BUTTON) || defined(CONFIG_RT61PCI_BUTTON))
+#if (!defined(CONFIG_RFKILL) && !defined (CONFIG_RFKILL_MODULE))
+#error RFKILL has been disabled in your kernel!
+#endif
+#endif
+
+#endif /* RT2X00_COMPAT_H */
diff --git a/package/rt2x00/src/rt2x00_config.h b/package/rt2x00/src/rt2x00_config.h
new file mode 100644 (file)
index 0000000..8d63434
--- /dev/null
@@ -0,0 +1,66 @@
+#ifndef CONFIG_RT2X00
+#define CONFIG_RT2X00
+#endif
+
+#ifndef CONFIG_RT2X00_DEBUG
+#define CONFIG_RT2X00_DEBUG
+#endif
+
+#ifndef CONFIG_RT2X00_DEBUGFS
+#define CONFIG_RT2X00_DEBUGFS
+#endif
+
+#undef CONFIG_RT2X00_ASM
+
+#ifndef CONFIG_RT2400PCI
+#define CONFIG_RT2400PCI
+#endif
+
+#undef CONFIG_RT2400PCI_BUTTON
+
+#ifndef CONFIG_RT2500PCI
+#define CONFIG_RT2500PCI
+#endif
+
+#undef CONFIG_RT2500PCI_BUTTON
+
+#ifndef CONFIG_RT2500USB
+#define CONFIG_RT2500USB
+#endif
+
+#ifndef CONFIG_RT61PCI
+#define CONFIG_RT61PCI
+#endif
+
+#undef CONFIG_RT61PCI_BUTTON
+
+#ifndef CONFIG_RT73USB
+#define CONFIG_RT73USB
+#endif
+
+#ifndef CONFIG_D80211
+#define CONFIG_D80211
+#endif
+
+#ifndef CONFIG_D80211_DEBUG
+#define CONFIG_D80211_DEBUG
+#endif
+
+#undef CONFIG_D80211_ASM
+
+#ifndef CONFIG_CRC_ITU_T
+#define CONFIG_CRC_ITU_T
+#endif
+
+#undef CONFIG_CRC_ITU_T_ASM
+
+#ifndef CONFIG_EEPROM_93CX6
+#define CONFIG_EEPROM_93CX6
+#endif
+
+#undef CONFIG_EEPROM_93CX6_ASM
+
+#undef CONFIG_RFKILL
+
+#undef CONFIG_RFKILL_ASM
+
diff --git a/package/rt2x00/src/rt2x00debug.c b/package/rt2x00/src/rt2x00debug.c
new file mode 100644 (file)
index 0000000..cb61870
--- /dev/null
@@ -0,0 +1,360 @@
+/*
+       Copyright (C) 2004 - 2007 rt2x00 SourceForge Project
+       <http://rt2x00.serialmonkey.com>
+
+       This program is free software; you can redistribute it and/or modify
+       it under the terms of the GNU General Public License as published by
+       the Free Software Foundation; either version 2 of the License, or
+       (at your option) any later version.
+
+       This program is distributed in the hope that it will be useful,
+       but WITHOUT ANY WARRANTY; without even the implied warranty of
+       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+       GNU General Public License for more details.
+
+       You should have received a copy of the GNU General Public License
+       along with this program; if not, write to the
+       Free Software Foundation, Inc.,
+       59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+
+/*
+       Module: rt2x00lib
+       Abstract: rt2x00 debugfs specific routines.
+       Supported chipsets: RT2460, RT2560, RT2570,
+       rt2561, rt2561s, rt2661, rt2571W & rt2671.
+ */
+
+#include <linux/debugfs.h>
+
+#include <asm/uaccess.h>
+
+#include "rt2x00.h"
+
+#define PRINT_REG8_STR         ( "0x%.2x\n" )
+#define PRINT_REG16_STR                ( "0x%.4x\n" )
+#define PRINT_REG32_STR                ( "0x%.8x\n" )
+#define PRINT_REG_LEN_MAX      ( 16 )
+#define PRINT_LINE_LEN_MAX     ( 32 )
+
+struct rt2x00debug_intf {
+       /*
+        * Pointer to driver structure where
+        * this debugfs entry belongs to.
+        */
+       struct rt2x00_dev *rt2x00dev;
+
+       /*
+        * Reference to the rt2x00debug structure
+        * which can be used to communicate with
+        * the registers.
+        */
+       const struct rt2x00debug *debug;
+
+       /*
+        * Debugfs entries for:
+        * - driver folder
+        * - driver file
+        * - chipset file
+&nb