/******************************************************************************
 * Copyright(c) 2008 - 2010 Realtek Corporation. All rights reserved.
 * Linux device driver for RTL8192U
 *
 * Based on the r8187 driver, which is:
 * Copyright 2004-2005 Andrea Merello <andreamrl@tiscali.it>, et al.
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of version 2 of the GNU General Public License as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
 *
 * The full GNU General Public License is included in this distribution in the
 * file called LICENSE.
 *
 * Contact Information:
 * Jerry chuang <wlanfae@realtek.com>
 */

#ifndef CONFIG_FORCE_HARD_FLOAT
double __floatsidf(int i)
{
        return i;
}

unsigned int __fixunsdfsi(double d)
{
        return d;
}

double __adddf3(double a, double b)
{
        return a+b;
}

double __addsf3(float a, float b)
{
        return a+b;
}

double __subdf3(double a, double b)
{
        return a-b;
}

double __extendsfdf2(float a)
{
        return a;
}
#endif

#undef LOOP_TEST
#undef DUMP_RX
#undef DUMP_TX
#undef DEBUG_TX_DESC2
#undef RX_DONT_PASS_UL
#undef DEBUG_EPROM
#undef DEBUG_RX_VERBOSE
#undef DUMMY_RX
#undef DEBUG_ZERO_RX
#undef DEBUG_RX_SKB
#undef DEBUG_TX_FRAG
#undef DEBUG_RX_FRAG
#undef DEBUG_TX_FILLDESC
#undef DEBUG_TX
#undef DEBUG_IRQ
#undef DEBUG_RX
#undef DEBUG_RXALLOC
#undef DEBUG_REGISTERS
#undef DEBUG_RING
#undef DEBUG_IRQ_TASKLET
#undef DEBUG_TX_ALLOC
#undef DEBUG_TX_DESC

#define CONFIG_RTL8192_IO_MAP

#include <asm/uaccess.h>
#include "r8192U_hw.h"
#include "r8192U.h"
#include "r8190_rtl8256.h" /* RTL8225 Radio frontend */
#include "r8180_93cx6.h"   /* Card EEPROM */
#include "r8192U_wx.h"
#include "r819xU_phy.h" //added by WB 4.30.2008
#include "r819xU_phyreg.h"
#include "r819xU_cmdpkt.h"
#include "r8192U_dm.h"
#include <linux/usb.h>
#include <linux/slab.h>
#include <linux/proc_fs.h>
#include <linux/seq_file.h>
// FIXME: check if 2.6.7 is ok

#ifdef CONFIG_RTL8192_PM
#include "r8192_pm.h"
#endif

#include "dot11d.h"
//set here to open your trace code. //WB
u32 rt_global_debug_component = COMP_DOWN       |
                                COMP_SEC        |
                                COMP_ERR; //always open err flags on

#define TOTAL_CAM_ENTRY 32
#define CAM_CONTENT_COUNT 8

static const struct usb_device_id rtl8192_usb_id_tbl[] = {
        /* Realtek */
        {USB_DEVICE(0x0bda, 0x8709)},
        /* Corega */
        {USB_DEVICE(0x07aa, 0x0043)},
        /* Belkin */
        {USB_DEVICE(0x050d, 0x805E)},
        /* Sitecom */
        {USB_DEVICE(0x0df6, 0x0031)},
        /* EnGenius */
        {USB_DEVICE(0x1740, 0x9201)},
        /* Dlink */
        {USB_DEVICE(0x2001, 0x3301)},
        /* Zinwell */
        {USB_DEVICE(0x5a57, 0x0290)},
        /* LG */
        {USB_DEVICE(0x043e, 0x7a01)},
        {}
};

MODULE_LICENSE("GPL");
MODULE_VERSION("V 1.1");
MODULE_DEVICE_TABLE(usb, rtl8192_usb_id_tbl);
MODULE_DESCRIPTION("Linux driver for Realtek RTL8192 USB WiFi cards");

static char *ifname = "wlan%d";
static int hwwep = 1;  //default use hw. set 0 to use software security
static int channels = 0x3fff;



module_param(ifname, charp, S_IRUGO|S_IWUSR);
module_param(hwwep, int, S_IRUGO|S_IWUSR);
module_param(channels, int, S_IRUGO|S_IWUSR);

MODULE_PARM_DESC(ifname, " Net interface name, wlan%d=default");
MODULE_PARM_DESC(hwwep, " Try to use hardware security support. ");
MODULE_PARM_DESC(channels, " Channel bitmask for specific locales. NYI");

static int rtl8192_usb_probe(struct usb_interface *intf,
                             const struct usb_device_id *id);
static void rtl8192_usb_disconnect(struct usb_interface *intf);


static struct usb_driver rtl8192_usb_driver = {
        .name           = RTL819xU_MODULE_NAME,           /* Driver name   */
        .id_table       = rtl8192_usb_id_tbl,             /* PCI_ID table  */
        .probe          = rtl8192_usb_probe,              /* probe fn      */
        .disconnect     = rtl8192_usb_disconnect,         /* remove fn     */
#ifdef CONFIG_RTL8192_PM
        .suspend        = rtl8192_suspend,                /* PM suspend fn */
        .resume         = rtl8192_resume,                 /* PM resume fn  */
#else
        .suspend        = NULL,                           /* PM suspend fn */
        .resume         = NULL,                           /* PM resume fn  */
#endif
};


typedef struct _CHANNEL_LIST {
        u8      Channel[32];
        u8      Len;
} CHANNEL_LIST, *PCHANNEL_LIST;

static CHANNEL_LIST ChannelPlan[] = {
        {{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,149,153,157,161,165},24},             //FCC
        {{1,2,3,4,5,6,7,8,9,10,11},11},                                                 //IC
        {{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64},21},   //ETSI
        {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},    //Spain. Change to ETSI.
        {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},   //France. Change to ETSI.
        {{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64},22},        //MKK                                   //MKK
        {{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64},22},//MKK1
        {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},   //Israel.
        {{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64},22},                        // For 11a , TELEC
        {{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64}, 22},    //MIC
        {{1,2,3,4,5,6,7,8,9,10,11,12,13,14},14}                                 //For Global Domain. 1-11:active scan, 12-14 passive scan. //+YJ, 080626
};

static void rtl819x_set_channel_map(u8 channel_plan, struct r8192_priv *priv)
{
        int i, max_chan = -1, min_chan = -1;
        struct ieee80211_device *ieee = priv->ieee80211;
        switch (channel_plan) {
        case COUNTRY_CODE_FCC:
        case COUNTRY_CODE_IC:
        case COUNTRY_CODE_ETSI:
        case COUNTRY_CODE_SPAIN:
        case COUNTRY_CODE_FRANCE:
        case COUNTRY_CODE_MKK:
        case COUNTRY_CODE_MKK1:
        case COUNTRY_CODE_ISRAEL:
        case COUNTRY_CODE_TELEC:
        case COUNTRY_CODE_MIC:
                Dot11d_Init(ieee);
                ieee->bGlobalDomain = false;
                //actually 8225 & 8256 rf chips only support B,G,24N mode
                if ((priv->rf_chip == RF_8225) || (priv->rf_chip == RF_8256)) {
                        min_chan = 1;
                        max_chan = 14;
                } else {
                        RT_TRACE(COMP_ERR, "unknown rf chip, can't set channel map in function:%s()\n", __func__);
                }
                if (ChannelPlan[channel_plan].Len != 0) {
                        // Clear old channel map
                        memset(GET_DOT11D_INFO(ieee)->channel_map, 0, sizeof(GET_DOT11D_INFO(ieee)->channel_map));
                        // Set new channel map
                        for (i = 0; i < ChannelPlan[channel_plan].Len; i++) {
                                if (ChannelPlan[channel_plan].Channel[i] < min_chan || ChannelPlan[channel_plan].Channel[i] > max_chan)
                                        break;
                                GET_DOT11D_INFO(ieee)->channel_map[ChannelPlan[channel_plan].Channel[i]] = 1;
                        }
                }
                break;

        case COUNTRY_CODE_GLOBAL_DOMAIN:
                GET_DOT11D_INFO(ieee)->bEnabled = 0;//this flag enabled to follow 11d country IE setting, otherwise, it shall follow global domain settings.
                Dot11d_Reset(ieee);
                ieee->bGlobalDomain = true;
                break;

        default:
                break;
        }
}




void CamResetAllEntry(struct net_device *dev)
{
        u32 ulcommand = 0;
        //2004/02/11  In static WEP, OID_ADD_KEY or OID_ADD_WEP are set before STA associate to AP.
        // However, ResetKey is called on OID_802_11_INFRASTRUCTURE_MODE and MlmeAssociateRequest
        // In this condition, Cam can not be reset because upper layer will not set this static key again.
        ulcommand |= BIT31|BIT30;
        write_nic_dword(dev, RWCAM, ulcommand);

}


void write_cam(struct net_device *dev, u8 addr, u32 data)
{
        write_nic_dword(dev, WCAMI, data);
        write_nic_dword(dev, RWCAM, BIT31|BIT16|(addr&0xff));
}

u32 read_cam(struct net_device *dev, u8 addr)
{
        u32 data;

        write_nic_dword(dev, RWCAM, 0x80000000|(addr&0xff));
        read_nic_dword(dev, 0xa8, &data);
        return data;
}

void write_nic_byte_E(struct net_device *dev, int indx, u8 data)
{
        int status;
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct usb_device *udev = priv->udev;

        status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
                                 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
                                 indx|0xfe00, 0, &data, 1, HZ / 2);

        if (status < 0)
                netdev_err(dev, "write_nic_byte_E TimeOut! status: %d\n", status);
}

int read_nic_byte_E(struct net_device *dev, int indx, u8 *data)
{
        int status;
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct usb_device *udev = priv->udev;

        status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                                 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                                 indx|0xfe00, 0, data, 1, HZ / 2);

        if (status < 0) {
                netdev_err(dev, "%s failure status: %d\n", __func__, status);
                return status;
        }

        return 0;
}
//as 92U has extend page from 4 to 16, so modify functions below.
void write_nic_byte(struct net_device *dev, int indx, u8 data)
{
        int status;

        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct usb_device *udev = priv->udev;

        status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
                                 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
                                 (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 1, HZ / 2);

        if (status < 0)
                netdev_err(dev, "write_nic_byte TimeOut! status: %d\n", status);


}


void write_nic_word(struct net_device *dev, int indx, u16 data)
{

        int status;

        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct usb_device *udev = priv->udev;

        status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
                                 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
                                 (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 2, HZ / 2);

        if (status < 0)
                netdev_err(dev, "write_nic_word TimeOut! status: %d\n", status);

}


void write_nic_dword(struct net_device *dev, int indx, u32 data)
{

        int status;

        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct usb_device *udev = priv->udev;

        status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
                                 RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
                                 (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 4, HZ / 2);


        if (status < 0)
                netdev_err(dev, "write_nic_dword TimeOut! status: %d\n", status);

}



int read_nic_byte(struct net_device *dev, int indx, u8 *data)
{
        int status;
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct usb_device *udev = priv->udev;

        status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                                 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                                 (indx&0xff)|0xff00, (indx>>8)&0x0f, data, 1, HZ / 2);

        if (status < 0) {
                netdev_err(dev, "%s failure status: %d\n", __func__, status);
                return status;
        }

        return 0;
}



int read_nic_word(struct net_device *dev, int indx, u16 *data)
{
        int status;
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct usb_device *udev = priv->udev;

        status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                                 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                                 (indx&0xff)|0xff00, (indx>>8)&0x0f,
                                 data, 2, HZ / 2);

        if (status < 0) {
                netdev_err(dev, "%s failure status: %d\n", __func__, status);
                return status;
        }

        return 0;
}

int read_nic_word_E(struct net_device *dev, int indx, u16 *data)
{
        int status;
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct usb_device *udev = priv->udev;

        status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                                 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                                 indx|0xfe00, 0, data, 2, HZ / 2);

        if (status < 0) {
                netdev_err(dev, "%s failure status: %d\n", __func__, status);
                return status;
        }

        return 0;
}

int read_nic_dword(struct net_device *dev, int indx, u32 *data)
{
        int status;

        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct usb_device *udev = priv->udev;

        status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                                 RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                                 (indx&0xff)|0xff00, (indx>>8)&0x0f,
                                 data, 4, HZ / 2);

        if (status < 0) {
                netdev_err(dev, "%s failure status: %d\n", __func__, status);
                return status;
        }

        return 0;
}

/* u8 read_phy_cck(struct net_device *dev, u8 adr); */
/* u8 read_phy_ofdm(struct net_device *dev, u8 adr); */
/* this might still called in what was the PHY rtl8185/rtl8192 common code
 * plans are to possibility turn it again in one common code...
 */
inline void force_pci_posting(struct net_device *dev)
{
}

static struct net_device_stats *rtl8192_stats(struct net_device *dev);
void rtl8192_commit(struct net_device *dev);
void rtl8192_restart(struct work_struct *work);
void watch_dog_timer_callback(unsigned long data);

/****************************************************************************
 *   -----------------------------PROCFS STUFF-------------------------
*****************************************************************************
 */

static struct proc_dir_entry *rtl8192_proc;

static int proc_get_stats_ap(struct seq_file *m, void *v)
{
        struct net_device *dev = m->private;
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct ieee80211_device *ieee = priv->ieee80211;
        struct ieee80211_network *target;

        list_for_each_entry(target, &ieee->network_list, list) {
                const char *wpa = "non_WPA";
                if (target->wpa_ie_len > 0 || target->rsn_ie_len > 0)
                        wpa = "WPA";

                seq_printf(m, "%s %s\n", target->ssid, wpa);
        }

        return 0;
}

static int proc_get_registers(struct seq_file *m, void *v)
{
        struct net_device *dev = m->private;
        int i, n, max = 0xff;
        u8 byte_rd;

        seq_puts(m, "\n####################page 0##################\n ");

        for (n = 0; n <= max;) {
                seq_printf(m, "\nD:  %2x > ", n);

                for (i = 0; i < 16 && n <= max; i++, n++) {
                        read_nic_byte(dev, 0x000|n, &byte_rd);
                        seq_printf(m, "%2x ", byte_rd);
                }
        }

        seq_puts(m, "\n####################page 1##################\n ");
        for (n = 0; n <= max;) {
                seq_printf(m, "\nD:  %2x > ", n);

                for (i = 0; i < 16 && n <= max; i++, n++) {
                        read_nic_byte(dev, 0x100|n, &byte_rd);
                        seq_printf(m, "%2x ", byte_rd);
                }
        }

        seq_puts(m, "\n####################page 3##################\n ");
        for (n = 0; n <= max;) {
                seq_printf(m, "\nD:  %2x > ", n);

                for (i = 0; i < 16 && n <= max; i++, n++) {
                        read_nic_byte(dev, 0x300|n, &byte_rd);
                        seq_printf(m, "%2x ", byte_rd);
                }
        }

        seq_putc(m, '\n');
        return 0;
}

static int proc_get_stats_tx(struct seq_file *m, void *v)
{
        struct net_device *dev = m->private;
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);

        seq_printf(m,
                   "TX VI priority ok int: %lu\n"
                   "TX VI priority error int: %lu\n"
                   "TX VO priority ok int: %lu\n"
                   "TX VO priority error int: %lu\n"
                   "TX BE priority ok int: %lu\n"
                   "TX BE priority error int: %lu\n"
                   "TX BK priority ok int: %lu\n"
                   "TX BK priority error int: %lu\n"
                   "TX MANAGE priority ok int: %lu\n"
                   "TX MANAGE priority error int: %lu\n"
                   "TX BEACON priority ok int: %lu\n"
                   "TX BEACON priority error int: %lu\n"
                   "TX queue resume: %lu\n"
                   "TX queue stopped?: %d\n"
                   "TX fifo overflow: %lu\n"
                   "TX VI queue: %d\n"
                   "TX VO queue: %d\n"
                   "TX BE queue: %d\n"
                   "TX BK queue: %d\n"
                   "TX VI dropped: %lu\n"
                   "TX VO dropped: %lu\n"
                   "TX BE dropped: %lu\n"
                   "TX BK dropped: %lu\n"
                   "TX total data packets %lu\n",
                   priv->stats.txviokint,
                   priv->stats.txvierr,
                   priv->stats.txvookint,
                   priv->stats.txvoerr,
                   priv->stats.txbeokint,
                   priv->stats.txbeerr,
                   priv->stats.txbkokint,
                   priv->stats.txbkerr,
                   priv->stats.txmanageokint,
                   priv->stats.txmanageerr,
                   priv->stats.txbeaconokint,
                   priv->stats.txbeaconerr,
                   priv->stats.txresumed,
                   netif_queue_stopped(dev),
                   priv->stats.txoverflow,
                   atomic_read(&(priv->tx_pending[VI_PRIORITY])),
                   atomic_read(&(priv->tx_pending[VO_PRIORITY])),
                   atomic_read(&(priv->tx_pending[BE_PRIORITY])),
                   atomic_read(&(priv->tx_pending[BK_PRIORITY])),
                   priv->stats.txvidrop,
                   priv->stats.txvodrop,
                   priv->stats.txbedrop,
                   priv->stats.txbkdrop,
                   priv->stats.txdatapkt
                );

        return 0;
}

static int proc_get_stats_rx(struct seq_file *m, void *v)
{
        struct net_device *dev = m->private;
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);

        seq_printf(m,
                   "RX packets: %lu\n"
                   "RX urb status error: %lu\n"
                   "RX invalid urb error: %lu\n",
                   priv->stats.rxoktotal,
                   priv->stats.rxstaterr,
                   priv->stats.rxurberr);

        return 0;
}

void rtl8192_proc_module_init(void)
{
        RT_TRACE(COMP_INIT, "Initializing proc filesystem");
        rtl8192_proc = proc_mkdir(RTL819xU_MODULE_NAME, init_net.proc_net);
}


void rtl8192_proc_module_remove(void)
{
        remove_proc_entry(RTL819xU_MODULE_NAME, init_net.proc_net);
}

/*
 * seq_file wrappers for procfile show routines.
 */
static int rtl8192_proc_open(struct inode *inode, struct file *file)
{
        struct net_device *dev = proc_get_parent_data(inode);
        int (*show)(struct seq_file *, void *) = PDE_DATA(inode);

        return single_open(file, show, dev);
}

static const struct file_operations rtl8192_proc_fops = {
        .open           = rtl8192_proc_open,
        .read           = seq_read,
        .llseek         = seq_lseek,
        .release        = single_release,
};

/*
 * Table of proc files we need to create.
 */
struct rtl8192_proc_file {
        char name[12];
        int (*show)(struct seq_file *, void *);
};

static const struct rtl8192_proc_file rtl8192_proc_files[] = {
        { "stats-rx",   &proc_get_stats_rx },
        { "stats-tx",   &proc_get_stats_tx },
        { "stats-ap",   &proc_get_stats_ap },
        { "registers",  &proc_get_registers },
        { "" }
};

void rtl8192_proc_init_one(struct net_device *dev)
{
        const struct rtl8192_proc_file *f;
        struct proc_dir_entry *dir;

        if (rtl8192_proc) {
                dir = proc_mkdir_data(dev->name, 0, rtl8192_proc, dev);
                if (!dir) {
                        RT_TRACE(COMP_ERR, "Unable to initialize /proc/net/rtl8192/%s\n",
                                 dev->name);
                        return;
                }

                for (f = rtl8192_proc_files; f->name[0]; f++) {
                        if (!proc_create_data(f->name, S_IFREG | S_IRUGO, dir,
                                              &rtl8192_proc_fops, f->show)) {
                                RT_TRACE(COMP_ERR, "Unable to initialize "
                                         "/proc/net/rtl8192/%s/%s\n",
                                         dev->name, f->name);
                                return;
                        }
                }
        }
}

void rtl8192_proc_remove_one(struct net_device *dev)
{
        remove_proc_subtree(dev->name, rtl8192_proc);
}

/****************************************************************************
   -----------------------------MISC STUFF-------------------------
*****************************************************************************/

short check_nic_enough_desc(struct net_device *dev, int queue_index)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        int used = atomic_read(&priv->tx_pending[queue_index]);

        return (used < MAX_TX_URB);
}

void tx_timeout(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);

        schedule_work(&priv->reset_wq);
}


/* this is only for debug */
void dump_eprom(struct net_device *dev)
{
        int i;
        for (i = 0; i < 63; i++)
                RT_TRACE(COMP_EPROM, "EEPROM addr %x : %x", i, eprom_read(dev, i));
}


/****************************************************************************
      ------------------------------HW STUFF---------------------------
*****************************************************************************/


void rtl8192_set_mode(struct net_device *dev, int mode)
{
        u8 ecmd;
        read_nic_byte(dev, EPROM_CMD, &ecmd);
        ecmd = ecmd & ~EPROM_CMD_OPERATING_MODE_MASK;
        ecmd = ecmd | (mode<<EPROM_CMD_OPERATING_MODE_SHIFT);
        ecmd = ecmd & ~EPROM_CS_BIT;
        ecmd = ecmd & ~EPROM_CK_BIT;
        write_nic_byte(dev, EPROM_CMD, ecmd);
}


void rtl8192_update_msr(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        u8 msr;

        read_nic_byte(dev, MSR, &msr);
        msr &= ~MSR_LINK_MASK;

        /* do not change in link_state != WLAN_LINK_ASSOCIATED.
         * msr must be updated if the state is ASSOCIATING.
         * this is intentional and make sense for ad-hoc and
         * master (see the create BSS/IBSS func)
         */
        if (priv->ieee80211->state == IEEE80211_LINKED) {

                if (priv->ieee80211->iw_mode == IW_MODE_INFRA)
                        msr |= (MSR_LINK_MANAGED<<MSR_LINK_SHIFT);
                else if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
                        msr |= (MSR_LINK_ADHOC<<MSR_LINK_SHIFT);
                else if (priv->ieee80211->iw_mode == IW_MODE_MASTER)
                        msr |= (MSR_LINK_MASTER<<MSR_LINK_SHIFT);

        } else {
                msr |= (MSR_LINK_NONE<<MSR_LINK_SHIFT);
        }

        write_nic_byte(dev, MSR, msr);
}

void rtl8192_set_chan(struct net_device *dev, short ch)
{
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        RT_TRACE(COMP_CH, "=====>%s()====ch:%d\n", __func__, ch);
        priv->chan = ch;

        /* this hack should avoid frame TX during channel setting*/

#ifndef LOOP_TEST
        //need to implement rf set channel here WB

        if (priv->rf_set_chan)
                priv->rf_set_chan(dev, priv->chan);
        mdelay(10);
#endif
}

static void rtl8192_rx_isr(struct urb *urb);

u32 get_rxpacket_shiftbytes_819xusb(struct ieee80211_rx_stats *pstats)
{

#ifdef USB_RX_AGGREGATION_SUPPORT
        if (pstats->bisrxaggrsubframe)
                return (sizeof(rx_desc_819x_usb) + pstats->RxDrvInfoSize
                        + pstats->RxBufShift + 8);
        else
#endif
                return (sizeof(rx_desc_819x_usb) + pstats->RxDrvInfoSize
                        + pstats->RxBufShift);

}
static int rtl8192_rx_initiate(struct net_device *dev)
{
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        struct urb *entry;
        struct sk_buff *skb;
        struct rtl8192_rx_info *info;

        /* nomal packet rx procedure */
        while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB) {
                skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
                if (!skb)
                        break;
                entry = usb_alloc_urb(0, GFP_KERNEL);
                if (!entry) {
                        kfree_skb(skb);
                        break;
                }
                usb_fill_bulk_urb(entry, priv->udev,
                                  usb_rcvbulkpipe(priv->udev, 3), skb_tail_pointer(skb),
                                  RX_URB_SIZE, rtl8192_rx_isr, skb);
                info = (struct rtl8192_rx_info *) skb->cb;
                info->urb = entry;
                info->dev = dev;
                info->out_pipe = 3; //denote rx normal packet queue
                skb_queue_tail(&priv->rx_queue, skb);
                usb_submit_urb(entry, GFP_KERNEL);
        }

        /* command packet rx procedure */
        while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB + 3) {
                skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
                if (!skb)
                        break;
                entry = usb_alloc_urb(0, GFP_KERNEL);
                if (!entry) {
                        kfree_skb(skb);
                        break;
                }
                usb_fill_bulk_urb(entry, priv->udev,
                                  usb_rcvbulkpipe(priv->udev, 9), skb_tail_pointer(skb),
                                  RX_URB_SIZE, rtl8192_rx_isr, skb);
                info = (struct rtl8192_rx_info *) skb->cb;
                info->urb = entry;
                info->dev = dev;
                info->out_pipe = 9; //denote rx cmd packet queue
                skb_queue_tail(&priv->rx_queue, skb);
                usb_submit_urb(entry, GFP_KERNEL);
        }

        return 0;
}

void rtl8192_set_rxconf(struct net_device *dev)
{
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        u32 rxconf;

        read_nic_dword(dev, RCR, &rxconf);
        rxconf = rxconf & ~MAC_FILTER_MASK;
        rxconf = rxconf | RCR_AMF;
        rxconf = rxconf | RCR_ADF;
        rxconf = rxconf | RCR_AB;
        rxconf = rxconf | RCR_AM;

        if (dev->flags & IFF_PROMISC)
                DMESG("NIC in promisc mode");

        if (priv->ieee80211->iw_mode == IW_MODE_MONITOR ||
            dev->flags & IFF_PROMISC) {
                rxconf = rxconf | RCR_AAP;
        } else {
                rxconf = rxconf | RCR_APM;
                rxconf = rxconf | RCR_CBSSID;
        }


        if (priv->ieee80211->iw_mode == IW_MODE_MONITOR) {
                rxconf = rxconf | RCR_AICV;
                rxconf = rxconf | RCR_APWRMGT;
        }

        if (priv->crcmon == 1 && priv->ieee80211->iw_mode == IW_MODE_MONITOR)
                rxconf = rxconf | RCR_ACRC32;


        rxconf = rxconf & ~RX_FIFO_THRESHOLD_MASK;
        rxconf = rxconf | (RX_FIFO_THRESHOLD_NONE<<RX_FIFO_THRESHOLD_SHIFT);
        rxconf = rxconf & ~MAX_RX_DMA_MASK;
        rxconf = rxconf | ((u32)7<<RCR_MXDMA_OFFSET);

        rxconf = rxconf | RCR_ONLYERLPKT;

        write_nic_dword(dev, RCR, rxconf);
}
//wait to be removed
void rtl8192_rx_enable(struct net_device *dev)
{
        rtl8192_rx_initiate(dev);
}


void rtl8192_tx_enable(struct net_device *dev)
{
}



void rtl8192_rtx_disable(struct net_device *dev)
{
        u8 cmd;
        struct r8192_priv *priv = ieee80211_priv(dev);
        struct sk_buff *skb;
        struct rtl8192_rx_info *info;

        read_nic_byte(dev, CMDR, &cmd);
        write_nic_byte(dev, CMDR, cmd & ~(CR_TE|CR_RE));
        force_pci_posting(dev);
        mdelay(10);

        while ((skb = __skb_dequeue(&priv->rx_queue))) {
                info = (struct rtl8192_rx_info *) skb->cb;
                if (!info->urb)
                        continue;

                usb_kill_urb(info->urb);
                kfree_skb(skb);
        }

        if (skb_queue_len(&priv->skb_queue))
                netdev_warn(dev, "skb_queue not empty\n");

        skb_queue_purge(&priv->skb_queue);
        return;
}


int alloc_tx_beacon_desc_ring(struct net_device *dev, int count)
{
        return 0;
}

inline u16 ieeerate2rtlrate(int rate)
{
        switch (rate) {
        case 10:
                return 0;
        case 20:
                return 1;
        case 55:
                return 2;
        case 110:
                return 3;
        case 60:
                return 4;
        case 90:
                return 5;
        case 120:
                return 6;
        case 180:
                return 7;
        case 240:
                return 8;
        case 360:
                return 9;
        case 480:
                return 10;
        case 540:
                return 11;
        default:
                return 3;

        }
}
static u16 rtl_rate[] = {10, 20, 55, 110, 60, 90, 120, 180, 240, 360, 480, 540};
inline u16 rtl8192_rate2rate(short rate)
{
        if (rate > 11) return 0;
        return rtl_rate[rate];
}


/* The prototype of rx_isr has changed since one version of Linux Kernel */
static void rtl8192_rx_isr(struct urb *urb)
{
        struct sk_buff *skb = (struct sk_buff *) urb->context;
        struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
        struct net_device *dev = info->dev;
        struct r8192_priv *priv = ieee80211_priv(dev);
        int out_pipe = info->out_pipe;
        int err;
        if (!priv->up)
                return;
        if (unlikely(urb->status)) {
                info->urb = NULL;
                priv->stats.rxstaterr++;
                priv->ieee80211->stats.rx_errors++;
                usb_free_urb(urb);
                return;
        }
        skb_unlink(skb, &priv->rx_queue);
        skb_put(skb, urb->actual_length);

        skb_queue_tail(&priv->skb_queue, skb);
        tasklet_schedule(&priv->irq_rx_tasklet);

        skb = dev_alloc_skb(RX_URB_SIZE);
        if (unlikely(!skb)) {
                usb_free_urb(urb);
                netdev_err(dev, "%s(): can't alloc skb\n", __func__);
                /* TODO check rx queue length and refill *somewhere* */
                return;
        }

        usb_fill_bulk_urb(urb, priv->udev,
                          usb_rcvbulkpipe(priv->udev, out_pipe), skb_tail_pointer(skb),
                          RX_URB_SIZE, rtl8192_rx_isr, skb);

        info = (struct rtl8192_rx_info *) skb->cb;
        info->urb = urb;
        info->dev = dev;
        info->out_pipe = out_pipe;

        urb->transfer_buffer = skb_tail_pointer(skb);
        urb->context = skb;
        skb_queue_tail(&priv->rx_queue, skb);
        err = usb_submit_urb(urb, GFP_ATOMIC);
        if (err && err != EPERM)
                netdev_err(dev, "can not submit rxurb, err is %x, URB status is %x\n", err, urb->status);
}

u32 rtl819xusb_rx_command_packet(struct net_device *dev,
                                 struct ieee80211_rx_stats *pstats)
{
        u32     status;

        status = cmpk_message_handle_rx(dev, pstats);
        if (status)
                DMESG("rxcommandpackethandle819xusb: It is a command packet\n");

        return status;
}


void rtl8192_data_hard_stop(struct net_device *dev)
{
        //FIXME !!
}


void rtl8192_data_hard_resume(struct net_device *dev)
{
        // FIXME !!
}

/* this function TX data frames when the ieee80211 stack requires this.
 * It checks also if we need to stop the ieee tx queue, eventually do it
 */
void rtl8192_hard_data_xmit(struct sk_buff *skb, struct net_device *dev, int rate)
{
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        int ret;
        unsigned long flags;
        cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
        u8 queue_index = tcb_desc->queue_index;

        /* shall not be referred by command packet */
        RTL8192U_ASSERT(queue_index != TXCMD_QUEUE);

        spin_lock_irqsave(&priv->tx_lock, flags);

        memcpy((unsigned char *)(skb->cb), &dev, sizeof(dev));
        tcb_desc->bTxEnableFwCalcDur = 1;
        skb_push(skb, priv->ieee80211->tx_headroom);
        ret = rtl8192_tx(dev, skb);

        spin_unlock_irqrestore(&priv->tx_lock, flags);

        return;
}

/* This is a rough attempt to TX a frame
 * This is called by the ieee 80211 stack to TX management frames.
 * If the ring is full packet are dropped (for data frame the queue
 * is stopped before this can happen).
 */
int rtl8192_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
{
        struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
        int ret;
        unsigned long flags;
        cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
        u8 queue_index = tcb_desc->queue_index;


        spin_lock_irqsave(&priv->tx_lock, flags);

        memcpy((unsigned char *)(skb->cb), &dev, sizeof(dev));
        if (queue_index == TXCMD_QUEUE) {
                skb_push(skb, USB_HWDESC_HEADER_LEN);
                rtl819xU_tx_cmd(dev, skb);
                ret = 1;
                spin_unlock_irqrestore(&priv->tx_lock, flags);
                return ret;
        } else {
                skb_push(skb, priv->ieee80211->tx_headroom);
                ret = rtl8192_tx(dev, skb);
        }

        spin_unlock_irqrestore(&priv->tx_lock, flags);

        return ret;
}


void rtl8192_try_wake_queue(struct net_device *dev, int pri);

#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
u16 DrvAggr_PaddingAdd(struct net_device *dev, struct sk_buff *skb)
{
        u16     PaddingNum =  256 - ((skb->len + TX_PACKET_DRVAGGR_SUBFRAME_SHIFT_BYTES) % 256);
        return  PaddingNum & 0xff;
}

u8 MRateToHwRate8190Pci(u8 rate);
u8 QueryIsShort(u8 TxHT, u8 TxRate, cb_desc *tcb_desc);
u8 MapHwQueueToFirmwareQueue(u8 QueueID);
struct sk_buff *DrvAggr_Aggregation(struct net_device *dev, struct ieee80211_drv_agg_txb *pSendList)
{
        struct ieee80211_device *ieee = netdev_priv(dev);
        struct r8192_priv *priv = ieee80211_priv(dev);
        cb_desc         *tcb_desc = NULL;
        u8              i;
        u32             TotalLength;
        struct sk_buff  *skb;
        struct sk_buff  *agg_skb;
        tx_desc_819x_usb_aggr_subframe *tx_agg_desc = NULL;
        tx_fwinfo_819x_usb             *tx_fwinfo = NULL;

        //
        // Local variable initialization.
        //
        /* first skb initialization */
        skb = pSendList->tx_agg_frames[0];
        TotalLength = skb->len;

        /* Get the total aggregation length including the padding space and
         * sub frame header.
         */
        for (i = 1; i < pSendList->nr_drv_agg_frames; i++) {
                TotalLength += DrvAggr_PaddingAdd(dev, skb);
                skb = pSendList->tx_agg_frames[i];
                TotalLength += (skb->len + TX_PACKET_DRVAGGR_SUBFRAME_SHIFT_BYTES);
        }

        /* allocate skb to contain the aggregated packets */
        agg_skb = dev_alloc_skb(TotalLength + ieee->tx_headroom);
        memset(agg_skb->data, 0, agg_skb->len);
        skb_reserve(agg_skb, ieee->tx_headroom);

        /* reserve info for first subframe Tx descriptor to be set in the tx function */
        skb = pSendList->tx_agg_frames[0];
        tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
        tcb_desc->drv_agg_enable = 1;
        tcb_desc->pkt_size = skb->len;
        tcb_desc->DrvAggrNum = pSendList->nr_drv_agg_frames;
        netdev_dbg(dev, "DrvAggNum = %d\n", tcb_desc->DrvAggrNum);
        memcpy(agg_skb->cb, skb->cb, sizeof(skb->cb));
        memcpy(skb_put(agg_skb, skb->len), skb->data, skb->len);

        for (i = 1; i < pSendList->nr_drv_agg_frames; i++) {
                /* push the next sub frame to be 256 byte aline */
                skb_put(agg_skb, DrvAggr_PaddingAdd(dev, skb));

                /* Subframe drv Tx descriptor and firmware info setting */
                skb = pSendList->tx_agg_frames[i];
                tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
                tx_agg_desc = (tx_desc_819x_usb_aggr_subframe *)skb_tail_pointer(agg_skb);
                tx_fwinfo = (tx_fwinfo_819x_usb *)(skb_tail_pointer(agg_skb) + sizeof(tx_desc_819x_usb_aggr_subframe));

                memset(tx_fwinfo, 0, sizeof(tx_fwinfo_819x_usb));
                /* DWORD 0 */
                tx_fwinfo->TxHT = (tcb_desc->data_rate&0x80) ? 1 : 0;
                tx_fwinfo->TxRate = MRateToHwRate8190Pci(tcb_desc->data_rate);
                tx_fwinfo->EnableCPUDur = tcb_desc->bTxEnableFwCalcDur;
                tx_fwinfo->Short = QueryIsShort(tx_fwinfo->TxHT, tx_fwinfo->TxRate, tcb_desc);
                if (tcb_desc->bAMPDUEnable) {//AMPDU enabled
                        tx_fwinfo->AllowAggregation = 1;
                        /* DWORD 1 */
                        tx_fwinfo->RxMF = tcb_desc->ampdu_factor;
                        tx_fwinfo->RxAMD = tcb_desc->ampdu_density&0x07;//ampdudensity
                } else {
                        tx_fwinfo->AllowAggregation = 0;
                        /* DWORD 1 */
                        tx_fwinfo->RxMF = 0;
                        tx_fwinfo->RxAMD = 0;
                }

                /* Protection mode related */
                tx_fwinfo->RtsEnable = (tcb_desc->bRTSEnable) ? 1 : 0;
                tx_fwinfo->CtsEnable = (tcb_desc->bCTSEnable) ? 1 : 0;
                tx_fwinfo->RtsSTBC = (tcb_desc->bRTSSTBC) ? 1 : 0;
                tx_fwinfo->RtsHT = (tcb_desc->rts_rate&0x80) ? 1 : 0;
                tx_fwinfo->RtsRate =  MRateToHwRate8190Pci((u8)tcb_desc->rts_rate);
                tx_fwinfo->RtsSubcarrier = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->RTSSC) : 0;
                tx_fwinfo->RtsBandwidth = (tx_fwinfo->RtsHT == 1) ? ((tcb_desc->bRTSBW) ? 1 : 0) : 0;
                tx_fwinfo->RtsShort = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->bRTSUseShortPreamble ? 1 : 0) :
                                      (tcb_desc->bRTSUseShortGI ? 1 : 0);

                /* Set Bandwidth and sub-channel settings. */
                if (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20_40) {
                        if (tcb_desc->bPacketBW) {
                                tx_fwinfo->TxBandwidth = 1;
                                tx_fwinfo->TxSubCarrier = 0;    //By SD3's Jerry suggestion, use duplicated mode
                        } else {
                                tx_fwinfo->TxBandwidth = 0;
                                tx_fwinfo->TxSubCarrier = priv->nCur40MhzPrimeSC;
                        }
                } else {
                        tx_fwinfo->TxBandwidth = 0;
                        tx_fwinfo->TxSubCarrier = 0;
                }

                /* Fill Tx descriptor */
                memset(tx_agg_desc, 0, sizeof(tx_desc_819x_usb_aggr_subframe));
                /* DWORD 0 */
                tx_agg_desc->Offset =  sizeof(tx_fwinfo_819x_usb) + 8;
                /* already raw data, need not to subtract header length */
                tx_agg_desc->PktSize = skb->len & 0xffff;

                /*DWORD 1*/
                tx_agg_desc->SecCAMID = 0;
                tx_agg_desc->RATid = tcb_desc->RATRIndex;
                tx_agg_desc->NoEnc = 1;
                tx_agg_desc->SecType = 0x0;

                if (tcb_desc->bHwSec) {
                        switch (priv->ieee80211->pairwise_key_type) {
                        case KEY_TYPE_WEP40:
                        case KEY_TYPE_WEP104:
                                tx_agg_desc->SecType = 0x1;
                                tx_agg_desc->NoEnc = 0;
                                break;
                        case KEY_TYPE_TKIP:
                                tx_agg_desc->SecType = 0x2;
                                tx_agg_desc->NoEnc = 0;
                                break;
                        case KEY_TYPE_CCMP:
                                tx_agg_desc->SecType = 0x3;
                                tx_agg_desc->NoEnc = 0;
                                break;
                        case KEY_TYPE_NA:
                                tx_agg_desc->SecType = 0x0;
                                tx_agg_desc->NoEnc = 1;
                                break;
                        }
                }

                tx_agg_desc->QueueSelect = MapHwQueueToFirmwareQueue(tcb_desc->queue_index);
                tx_agg_desc->TxFWInfoSize =  sizeof(tx_fwinfo_819x_usb);

                tx_agg_desc->DISFB = tcb_desc->bTxDisableRateFallBack;
                tx_agg_desc->USERATE = tcb_desc->bTxUseDriverAssingedRate;

                tx_agg_desc->OWN = 1;

                //DWORD 2
                /* According windows driver, it seems that there no need to fill this field */

                /* to fill next packet */
                skb_put(agg_skb, TX_PACKET_DRVAGGR_SUBFRAME_SHIFT_BYTES);
                memcpy(skb_put(agg_skb, skb->len), skb->data, skb->len);
        }

        for (i = 0; i < pSendList->nr_drv_agg_frames; i++)
                dev_kfree_skb_any(pSendList->tx_agg_frames[i]);

        return agg_skb;
}

/* NOTE:
        This function return a list of PTCB which is proper to be aggregate with the input TCB.
        If no proper TCB is found to do aggregation, SendList will only contain the input TCB.
*/
u8 DrvAggr_GetAggregatibleList(struct net_device *dev, struct sk_buff *skb,
                               struct ieee80211_drv_agg_txb *pSendList)
{
        struct ieee80211_device *ieee = netdev_priv(dev);
        PRT_HIGH_THROUGHPUT     pHTInfo = ieee->pHTInfo;
        u16             nMaxAggrNum = pHTInfo->UsbTxAggrNum;
        cb_desc         *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
        u8              QueueID = tcb_desc->queue_index;

        do {
                pSendList->tx_agg_frames[pSendList->nr_drv_agg_frames++] = skb;
                if (pSendList->nr_drv_agg_frames >= nMaxAggrNum)
                        break;

        } while ((skb = skb_dequeue(&ieee->skb_drv_aggQ[QueueID])));

        RT_TRACE(COMP_AMSDU, "DrvAggr_GetAggregatibleList, nAggrTcbNum = %d \n", pSendList->nr_drv_agg_frames);
        return pSendList->nr_drv_agg_frames;
}
#endif

static void rtl8192_tx_isr(struct urb *tx_urb)
{
        struct sk_buff *skb = (struct sk_buff *)tx_urb->context;
        struct net_device *dev = NULL;
        struct r8192_priv *priv = NULL;
        cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
        u8  queue_index = tcb_desc->queue_index;

        memcpy(&dev, (struct net_device *)(skb->cb), sizeof(struct net_device *));
        priv = ieee80211_priv(dev);

        if (tcb_desc->queue_index != TXCMD_QUEUE) {
                if (tx_urb->status == 0) {
                        dev->trans_start = jiffies;
                        priv->stats.txoktotal++;
                        priv->ieee80211->LinkDetectInfo.NumTxOkInPeriod++;
                        priv->stats.txbytesunicast += (skb->len - priv->ieee80211->tx_headroom);
                } else {
                        priv->ieee80211->stats.tx_errors++;
                        /* TODO */
                }
        }

        /* free skb and tx_urb */
        if (skb != NULL) {
                dev_kfree_skb_any(skb);
                usb_free_urb(tx_urb);
                atomic_dec(&priv->tx_pending[queue_index]);
        }

        //
        // Handle HW Beacon:
        // We had transfer our beacon frame to host controller at this moment.
        //
        //
        // Caution:
        // Handling the wait queue of command packets.
        // For Tx command packets, we must not do TCB fragment because it is not handled right now.
        // We must cut the packets to match the size of TX_CMD_PKT before we send it.
        //

        /* Handle MPDU in wait queue. */
        if (queue_index != BEACON_QUEUE) {
                /* Don't send data frame during scanning.*/
                if ((skb_queue_len(&priv->ieee80211->skb_waitQ[queue_index]) != 0) &&
                    (!(priv->ieee80211->queue_stop))) {
                        if (NULL != (skb = skb_dequeue(&(priv->ieee80211->skb_waitQ[queue_index]))))
                                priv->ieee80211->softmac_hard_start_xmit(skb, dev);

                        return; //modified by david to avoid further processing AMSDU
                }
#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
                else if ((skb_queue_len(&priv->ieee80211->skb_drv_aggQ[queue_index]) != 0) &&
                         (!(priv->ieee80211->queue_stop))) {
                        // Tx Driver Aggregation process
                        /* The driver will aggregation the packets according to the following stats
                         * 1. check whether there's tx irq available, for it's a completion return
                         *    function, it should contain enough tx irq;
                         * 2. check packet type;
                         * 3. initialize sendlist, check whether the to-be send packet no greater than 1
                         * 4. aggregates the packets, and fill firmware info and tx desc into it, etc.
                         * 5. check whether the packet could be sent, otherwise just insert into wait head
                         * */
                        skb = skb_dequeue(&priv->ieee80211->skb_drv_aggQ[queue_index]);
                        if (!check_nic_enough_desc(dev, queue_index)) {
                                skb_queue_head(&(priv->ieee80211->skb_drv_aggQ[queue_index]), skb);
                                return;
                        }

                        /*TODO*/
                        {
                                struct ieee80211_drv_agg_txb SendList;

                                memset(&SendList, 0, sizeof(struct ieee80211_drv_agg_txb));
                                if (DrvAggr_GetAggregatibleList(dev, skb, &SendList) > 1) {
                                        skb = DrvAggr_Aggregation(dev, &SendList);

                                }
                        }
                        priv->ieee80211->softmac_hard_start_xmit(skb, dev);
                }
#endif
        }

}

void rtl8192_beacon_stop(struct net_device *dev)
{
        u8 msr, msrm, msr2;
        struct r8192_priv *priv = ieee80211_priv(dev);

        read_nic_byte(dev, MSR, &msr);
        msrm = msr & MSR_LINK_MASK;
        msr2 = msr & ~MSR_LINK_MASK;

        if (NIC_8192U == priv->card_8192)
                usb_kill_urb(priv->rx_urb[MAX_RX_URB]);
        if ((msrm == (MSR_LINK_ADHOC<<MSR_LINK_SHIFT) ||
            (msrm == (MSR_LINK_MASTER<<MSR_LINK_SHIFT)))) {
                write_nic_byte(dev, MSR, msr2 | MSR_LINK_NONE);
                write_nic_byte(dev, MSR, msr);
        }
}

void rtl8192_config_rate(struct net_device *dev, u16 *rate_config)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        struct ieee80211_network *net;
        u8 i = 0, basic_rate = 0;
        net = &priv->ieee80211->current_network;

        for (i = 0; i < net->rates_len; i++) {
                basic_rate = net->rates[i]&0x7f;
                switch (basic_rate) {
                case MGN_1M:    *rate_config |= RRSR_1M;        break;
                case MGN_2M:    *rate_config |= RRSR_2M;        break;
                case MGN_5_5M:  *rate_config |= RRSR_5_5M;      break;
                case MGN_11M:   *rate_config |= RRSR_11M;       break;
                case MGN_6M:    *rate_config |= RRSR_6M;        break;
                case MGN_9M:    *rate_config |= RRSR_9M;        break;
                case MGN_12M:   *rate_config |= RRSR_12M;       break;
                case MGN_18M:   *rate_config |= RRSR_18M;       break;
                case MGN_24M:   *rate_config |= RRSR_24M;       break;
                case MGN_36M:   *rate_config |= RRSR_36M;       break;
                case MGN_48M:   *rate_config |= RRSR_48M;       break;
                case MGN_54M:   *rate_config |= RRSR_54M;       break;
                }
        }
        for (i = 0; i < net->rates_ex_len; i++) {
                basic_rate = net->rates_ex[i]&0x7f;
                switch (basic_rate) {
                case MGN_1M:    *rate_config |= RRSR_1M;        break;
                case MGN_2M:    *rate_config |= RRSR_2M;        break;
                case MGN_5_5M:  *rate_config |= RRSR_5_5M;      break;
                case MGN_11M:   *rate_config |= RRSR_11M;       break;
                case MGN_6M:    *rate_config |= RRSR_6M;        break;
                case MGN_9M:    *rate_config |= RRSR_9M;        break;
                case MGN_12M:   *rate_config |= RRSR_12M;       break;
                case MGN_18M:   *rate_config |= RRSR_18M;       break;
                case MGN_24M:   *rate_config |= RRSR_24M;       break;
                case MGN_36M:   *rate_config |= RRSR_36M;       break;
                case MGN_48M:   *rate_config |= RRSR_48M;       break;
                case MGN_54M:   *rate_config |= RRSR_54M;       break;
                }
        }
}


#define SHORT_SLOT_TIME 9
#define NON_SHORT_SLOT_TIME 20

void rtl8192_update_cap(struct net_device *dev, u16 cap)
{
        u32 tmp = 0;
        struct r8192_priv *priv = ieee80211_priv(dev);
        struct ieee80211_network *net = &priv->ieee80211->current_network;
        priv->short_preamble = cap & WLAN_CAPABILITY_SHORT_PREAMBLE;
        tmp = priv->basic_rate;
        if (priv->short_preamble)
                tmp |= BRSR_AckShortPmb;
        write_nic_dword(dev, RRSR, tmp);

        if (net->mode & (IEEE_G|IEEE_N_24G)) {
                u8 slot_time = 0;
                if ((cap & WLAN_CAPABILITY_SHORT_SLOT) && (!priv->ieee80211->pHTInfo->bCurrentRT2RTLongSlotTime)) //short slot time
                        slot_time = SHORT_SLOT_TIME;
                else //long slot time
                        slot_time = NON_SHORT_SLOT_TIME;
                priv->slot_time = slot_time;
                write_nic_byte(dev, SLOT_TIME, slot_time);
        }

}
void rtl8192_net_update(struct net_device *dev)
{

        struct r8192_priv *priv = ieee80211_priv(dev);
        struct ieee80211_network *net;
        u16 BcnTimeCfg = 0, BcnCW = 6, BcnIFS = 0xf;
        u16 rate_config = 0;
        net = &priv->ieee80211->current_network;

        rtl8192_config_rate(dev, &rate_config);
        priv->basic_rate = rate_config &= 0x15f;

        write_nic_dword(dev, BSSIDR, ((u32 *)net->bssid)[0]);
        write_nic_word(dev, BSSIDR+4, ((u16 *)net->bssid)[2]);

        rtl8192_update_msr(dev);
        if (priv->ieee80211->iw_mode == IW_MODE_ADHOC) {
                write_nic_word(dev, ATIMWND, 2);
                write_nic_word(dev, BCN_DMATIME, 1023);
                write_nic_word(dev, BCN_INTERVAL, net->beacon_interval);
                write_nic_word(dev, BCN_DRV_EARLY_INT, 1);
                write_nic_byte(dev, BCN_ERR_THRESH, 100);
                BcnTimeCfg |= (BcnCW<<BCN_TCFG_CW_SHIFT);
                // TODO: BcnIFS may required to be changed on ASIC
                BcnTimeCfg |= BcnIFS<<BCN_TCFG_IFS;

                write_nic_word(dev, BCN_TCFG, BcnTimeCfg);
        }



}

//temporary hw beacon is not used any more.
//open it when necessary
void rtl819xusb_beacon_tx(struct net_device *dev, u16  tx_rate)
{

}
inline u8 rtl8192_IsWirelessBMode(u16 rate)
{
        if (((rate <= 110) && (rate != 60) && (rate != 90)) || (rate == 220))
                return 1;
        else return 0;
}

u16 N_DBPSOfRate(u16 DataRate);

u16 ComputeTxTime(u16 FrameLength, u16 DataRate, u8 bManagementFrame,
                  u8 bShortPreamble)
{
        u16     FrameTime;
        u16     N_DBPS;
        u16     Ceiling;

        if (rtl8192_IsWirelessBMode(DataRate)) {
                if (bManagementFrame || !bShortPreamble || DataRate == 10) // long preamble
                        FrameTime = (u16)(144+48+(FrameLength*8/(DataRate/10)));
                else // Short preamble
                        FrameTime = (u16)(72+24+(FrameLength*8/(DataRate/10)));
                if ((FrameLength*8 % (DataRate/10)) != 0) //Get the Ceilling
                        FrameTime++;
        } else {        //802.11g DSSS-OFDM PLCP length field calculation.
                N_DBPS = N_DBPSOfRate(DataRate);
                Ceiling = (16 + 8*FrameLength + 6) / N_DBPS
                        + (((16 + 8*FrameLength + 6) % N_DBPS) ? 1 : 0);
                FrameTime = (u16)(16 + 4 + 4*Ceiling + 6);
        }
        return FrameTime;
}

u16 N_DBPSOfRate(u16 DataRate)
{
        u16 N_DBPS = 24;

        switch (DataRate) {
        case 60:
                N_DBPS = 24;
                break;

        case 90:
                N_DBPS = 36;
                break;

        case 120:
                N_DBPS = 48;
                break;

        case 180:
                N_DBPS = 72;
                break;

        case 240:
                N_DBPS = 96;
                break;

        case 360:
                N_DBPS = 144;
                break;

        case 480:
                N_DBPS = 192;
                break;

        case 540:
                N_DBPS = 216;
                break;

        default:
                break;
        }

        return N_DBPS;
}

void rtl819xU_cmd_isr(struct urb *tx_cmd_urb, struct pt_regs *regs)
{
        usb_free_urb(tx_cmd_urb);
}

unsigned int txqueue2outpipe(struct r8192_priv *priv, unsigned int tx_queue)
{
        if (tx_queue >= 9) {
                RT_TRACE(COMP_ERR, "%s():Unknown queue ID!!!\n", __func__);
                return 0x04;
        }
        return priv->txqueue_to_outpipemap[tx_queue];
}

short rtl819xU_tx_cmd(struct net_device *dev, struct sk_buff *skb)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        int                     status;
        struct urb              *tx_urb;
        unsigned int            idx_pipe;
        tx_desc_cmd_819x_usb *pdesc = (tx_desc_cmd_819x_usb *)skb->data;
        cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
        u8 queue_index = tcb_desc->queue_index;

        atomic_inc(&priv->tx_pending[queue_index]);
        tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
        if (!tx_urb) {
                dev_kfree_skb(skb);
                return -ENOMEM;
        }

        memset(pdesc, 0, USB_HWDESC_HEADER_LEN);
        /* Tx descriptor ought to be set according to the skb->cb */
        pdesc->FirstSeg = 1;//bFirstSeg;
        pdesc->LastSeg = 1;//bLastSeg;
        pdesc->CmdInit = tcb_desc->bCmdOrInit;
        pdesc->TxBufferSize = tcb_desc->txbuf_size;
        pdesc->OWN = 1;
        pdesc->LINIP = tcb_desc->bLastIniPkt;

        //----------------------------------------------------------------------------
        // Fill up USB_OUT_CONTEXT.
        //----------------------------------------------------------------------------
        // Get index to out pipe from specified QueueID.
#ifndef USE_ONE_PIPE
        idx_pipe = txqueue2outpipe(priv, queue_index);
#else
        idx_pipe = 0x04;
#endif
#ifdef JOHN_DUMP_TXDESC
        int i;
        printk("<Tx descriptor>--rate %x---", rate);
        for (i = 0; i < 8; i++)
                printk("%8x ", tx[i]);
        printk("\n");
#endif
        usb_fill_bulk_urb(tx_urb, priv->udev, usb_sndbulkpipe(priv->udev, idx_pipe),
                          skb->data, skb->len, rtl8192_tx_isr, skb);

        status = usb_submit_urb(tx_urb, GFP_ATOMIC);

        if (!status) {
                return 0;
        } else {
                DMESGE("Error TX CMD URB, error %d", status);
                return -1;
        }
}

/*
 * Mapping Software/Hardware descriptor queue id to "Queue Select Field"
 * in TxFwInfo data structure
 * 2006.10.30 by Emily
 *
 * \param QUEUEID       Software Queue
*/
u8 MapHwQueueToFirmwareQueue(u8 QueueID)
{
        u8 QueueSelect = 0x0;       //defualt set to

        switch (QueueID) {
        case BE_QUEUE:
                QueueSelect = QSLT_BE;
                break;

        case BK_QUEUE:
                QueueSelect = QSLT_BK;
                break;

        case VO_QUEUE:
                QueueSelect = QSLT_VO;
                break;

        case VI_QUEUE:
                QueueSelect = QSLT_VI;
                break;
        case MGNT_QUEUE:
                QueueSelect = QSLT_MGNT;
                break;

        case BEACON_QUEUE:
                QueueSelect = QSLT_BEACON;
                break;

                // TODO: 2006.10.30 mark other queue selection until we verify it is OK
                // TODO: Remove Assertions
        case TXCMD_QUEUE:
                QueueSelect = QSLT_CMD;
                break;
        case HIGH_QUEUE:
                QueueSelect = QSLT_HIGH;
                break;

        default:
                RT_TRACE(COMP_ERR, "TransmitTCB(): Impossible Queue Selection: %d \n", QueueID);
                break;
        }
        return QueueSelect;
}

u8 MRateToHwRate8190Pci(u8 rate)
{
        u8  ret = DESC90_RATE1M;

        switch (rate) {
        case MGN_1M:    ret = DESC90_RATE1M;    break;
        case MGN_2M:    ret = DESC90_RATE2M;    break;
        case MGN_5_5M:  ret = DESC90_RATE5_5M;  break;
        case MGN_11M:   ret = DESC90_RATE11M;   break;
        case MGN_6M:    ret = DESC90_RATE6M;    break;
        case MGN_9M:    ret = DESC90_RATE9M;    break;
        case MGN_12M:   ret = DESC90_RATE12M;   break;
        case MGN_18M:   ret = DESC90_RATE18M;   break;
        case MGN_24M:   ret = DESC90_RATE24M;   break;
        case MGN_36M:   ret = DESC90_RATE36M;   break;
        case MGN_48M:   ret = DESC90_RATE48M;   break;
        case MGN_54M:   ret = DESC90_RATE54M;   break;

        // HT rate since here
        case MGN_MCS0:  ret = DESC90_RATEMCS0;  break;
        case MGN_MCS1:  ret = DESC90_RATEMCS1;  break;
        case MGN_MCS2:  ret = DESC90_RATEMCS2;  break;
        case MGN_MCS3:  ret = DESC90_RATEMCS3;  break;
        case MGN_MCS4:  ret = DESC90_RATEMCS4;  break;
        case MGN_MCS5:  ret = DESC90_RATEMCS5;  break;
        case MGN_MCS6:  ret = DESC90_RATEMCS6;  break;
        case MGN_MCS7:  ret = DESC90_RATEMCS7;  break;
        case MGN_MCS8:  ret = DESC90_RATEMCS8;  break;
        case MGN_MCS9:  ret = DESC90_RATEMCS9;  break;
        case MGN_MCS10: ret = DESC90_RATEMCS10; break;
        case MGN_MCS11: ret = DESC90_RATEMCS11; break;
        case MGN_MCS12: ret = DESC90_RATEMCS12; break;
        case MGN_MCS13: ret = DESC90_RATEMCS13; break;
        case MGN_MCS14: ret = DESC90_RATEMCS14; break;
        case MGN_MCS15: ret = DESC90_RATEMCS15; break;
        case (0x80|0x20): ret = DESC90_RATEMCS32; break;

        default:       break;
        }
        return ret;
}


u8 QueryIsShort(u8 TxHT, u8 TxRate, cb_desc *tcb_desc)
{
        u8   tmp_Short;

        tmp_Short = (TxHT == 1) ? ((tcb_desc->bUseShortGI) ? 1 : 0) : ((tcb_desc->bUseShortPreamble) ? 1 : 0);

        if (TxHT == 1 && TxRate != DESC90_RATEMCS15)
                tmp_Short = 0;

        return tmp_Short;
}

static void tx_zero_isr(struct urb *tx_urb)
{
        return;
}

/*
 * The tx procedure is just as following,
 * skb->cb will contain all the following information,
 * priority, morefrag, rate, &dev.
 * */
short rtl8192_tx(struct net_device *dev, struct sk_buff *skb)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
        tx_desc_819x_usb *tx_desc = (tx_desc_819x_usb *)skb->data;
        tx_fwinfo_819x_usb *tx_fwinfo = (tx_fwinfo_819x_usb *)(skb->data + USB_HWDESC_HEADER_LEN);
        struct usb_device *udev = priv->udev;
        int pend;
        int status;
        struct urb *tx_urb = NULL, *tx_urb_zero = NULL;
        unsigned int idx_pipe;
        pend = atomic_read(&priv->tx_pending[tcb_desc->queue_index]);
        /* we are locked here so the two atomic_read and inc are executed
         * without interleaves
         * !!! For debug purpose
         */
        if (pend > MAX_TX_URB) {
                netdev_dbg(dev, "To discard skb packet!\n");
                dev_kfree_skb_any(skb);
                return -1;
        }

        tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
        if (!tx_urb) {
                dev_kfree_skb_any(skb);
                return -ENOMEM;
        }

        /* Fill Tx firmware info */
        memset(tx_fwinfo, 0, sizeof(tx_fwinfo_819x_usb));
        /* DWORD 0 */
        tx_fwinfo->TxHT = (tcb_desc->data_rate&0x80) ? 1 : 0;
        tx_fwinfo->TxRate = MRateToHwRate8190Pci(tcb_desc->data_rate);
        tx_fwinfo->EnableCPUDur = tcb_desc->bTxEnableFwCalcDur;
        tx_fwinfo->Short = QueryIsShort(tx_fwinfo->TxHT, tx_fwinfo->TxRate, tcb_desc);
        if (tcb_desc->bAMPDUEnable) {//AMPDU enabled
                tx_fwinfo->AllowAggregation = 1;
                /* DWORD 1 */
                tx_fwinfo->RxMF = tcb_desc->ampdu_factor;
                tx_fwinfo->RxAMD = tcb_desc->ampdu_density&0x07;//ampdudensity
        } else {
                tx_fwinfo->AllowAggregation = 0;
                /* DWORD 1 */
                tx_fwinfo->RxMF = 0;
                tx_fwinfo->RxAMD = 0;
        }

        /* Protection mode related */
        tx_fwinfo->RtsEnable = (tcb_desc->bRTSEnable) ? 1 : 0;
        tx_fwinfo->CtsEnable = (tcb_desc->bCTSEnable) ? 1 : 0;
        tx_fwinfo->RtsSTBC = (tcb_desc->bRTSSTBC) ? 1 : 0;
        tx_fwinfo->RtsHT = (tcb_desc->rts_rate&0x80) ? 1 : 0;
        tx_fwinfo->RtsRate =  MRateToHwRate8190Pci((u8)tcb_desc->rts_rate);
        tx_fwinfo->RtsSubcarrier = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->RTSSC) : 0;
        tx_fwinfo->RtsBandwidth = (tx_fwinfo->RtsHT == 1) ? ((tcb_desc->bRTSBW) ? 1 : 0) : 0;
        tx_fwinfo->RtsShort = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->bRTSUseShortPreamble ? 1 : 0) :
                              (tcb_desc->bRTSUseShortGI ? 1 : 0);

        /* Set Bandwidth and sub-channel settings. */
        if (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20_40) {
                if (tcb_desc->bPacketBW) {
                        tx_fwinfo->TxBandwidth = 1;
                        tx_fwinfo->TxSubCarrier = 0;    //By SD3's Jerry suggestion, use duplicated mode
                } else {
                        tx_fwinfo->TxBandwidth = 0;
                        tx_fwinfo->TxSubCarrier = priv->nCur40MhzPrimeSC;
                }
        } else {
                tx_fwinfo->TxBandwidth = 0;
                tx_fwinfo->TxSubCarrier = 0;
        }

#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
        if (tcb_desc->drv_agg_enable)
                tx_fwinfo->Tx_INFO_RSVD = (tcb_desc->DrvAggrNum & 0x1f) << 1;
#endif
        /* Fill Tx descriptor */
        memset(tx_desc, 0, sizeof(tx_desc_819x_usb));
        /* DWORD 0 */
        tx_desc->LINIP = 0;
        tx_desc->CmdInit = 1;
        tx_desc->Offset =  sizeof(tx_fwinfo_819x_usb) + 8;

#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
        if (tcb_desc->drv_agg_enable)
                tx_desc->PktSize = tcb_desc->pkt_size;
        else
#endif
        {
                tx_desc->PktSize = (skb->len - TX_PACKET_SHIFT_BYTES) & 0xffff;
        }

        /*DWORD 1*/
        tx_desc->SecCAMID = 0;
        tx_desc->RATid = tcb_desc->RATRIndex;
        tx_desc->NoEnc = 1;
        tx_desc->SecType = 0x0;
        if (tcb_desc->bHwSec) {
                switch (priv->ieee80211->pairwise_key_type) {
                case KEY_TYPE_WEP40:
                case KEY_TYPE_WEP104:
                        tx_desc->SecType = 0x1;
                        tx_desc->NoEnc = 0;
                        break;
                case KEY_TYPE_TKIP:
                        tx_desc->SecType = 0x2;
                        tx_desc->NoEnc = 0;
                        break;
                case KEY_TYPE_CCMP:
                        tx_desc->SecType = 0x3;
                        tx_desc->NoEnc = 0;
                        break;
                case KEY_TYPE_NA:
                        tx_desc->SecType = 0x0;
                        tx_desc->NoEnc = 1;
                        break;
                }
        }

        tx_desc->QueueSelect = MapHwQueueToFirmwareQueue(tcb_desc->queue_index);
        tx_desc->TxFWInfoSize =  sizeof(tx_fwinfo_819x_usb);

        tx_desc->DISFB = tcb_desc->bTxDisableRateFallBack;
        tx_desc->USERATE = tcb_desc->bTxUseDriverAssingedRate;

        /* Fill fields that are required to be initialized in all of the descriptors */
        //DWORD 0
        tx_desc->FirstSeg = 1;
        tx_desc->LastSeg = 1;
        tx_desc->OWN = 1;

#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
        if (tcb_desc->drv_agg_enable) {
                tx_desc->TxBufferSize = tcb_desc->pkt_size + sizeof(tx_fwinfo_819x_usb);
        } else
#endif
        {
                //DWORD 2
                tx_desc->TxBufferSize = (u32)(skb->len - USB_HWDESC_HEADER_LEN);
        }
        /* Get index to out pipe from specified QueueID */
#ifndef USE_ONE_PIPE
        idx_pipe = txqueue2outpipe(priv, tcb_desc->queue_index);
#else
        idx_pipe = 0x5;
#endif

        /* To submit bulk urb */
        usb_fill_bulk_urb(tx_urb, udev,
                          usb_sndbulkpipe(udev, idx_pipe), skb->data,
                          skb->len, rtl8192_tx_isr, skb);

        status = usb_submit_urb(tx_urb, GFP_ATOMIC);
        if (!status) {
                //we need to send 0 byte packet whenever 512N bytes/64N(HIGN SPEED/NORMAL SPEED) bytes packet has been transmitted. Otherwise, it will be halt to wait for another packet. WB. 2008.08.27
                bool bSend0Byte = false;
                u8 zero = 0;
                if (udev->speed == USB_SPEED_HIGH) {
                        if (skb->len > 0 && skb->len % 512 == 0)
                                bSend0Byte = true;
                } else {
                        if (skb->len > 0 && skb->len % 64 == 0)
                                bSend0Byte = true;
                }
                if (bSend0Byte) {
                        tx_urb_zero = usb_alloc_urb(0, GFP_ATOMIC);
                        if (!tx_urb_zero) {
                                RT_TRACE(COMP_ERR, "can't alloc urb for zero byte\n");
                                return -ENOMEM;
                        }
                        usb_fill_bulk_urb(tx_urb_zero, udev,
                                          usb_sndbulkpipe(udev, idx_pipe), &zero,
                                          0, tx_zero_isr, dev);
                        status = usb_submit_urb(tx_urb_zero, GFP_ATOMIC);
                        if (status) {
                                RT_TRACE(COMP_ERR, "Error TX URB for zero byte %d, error %d", atomic_read(&priv->tx_pending[tcb_desc->queue_index]), status);
                                return -1;
                        }
                }
                dev->trans_start = jiffies;
                atomic_inc(&priv->tx_pending[tcb_desc->queue_index]);
                return 0;
        } else {
                RT_TRACE(COMP_ERR, "Error TX URB %d, error %d", atomic_read(&priv->tx_pending[tcb_desc->queue_index]),
                         status);
                return -1;
        }
}

short rtl8192_usb_initendpoints(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);

        priv->rx_urb = kmalloc(sizeof(struct urb *) * (MAX_RX_URB+1),
                               GFP_KERNEL);
        if (priv->rx_urb == NULL)
                return -ENOMEM;

#ifndef JACKSON_NEW_RX
        for (i = 0; i < (MAX_RX_URB+1); i++) {

                priv->rx_urb[i] = usb_alloc_urb(0, GFP_KERNEL);

                priv->rx_urb[i]->transfer_buffer = kmalloc(RX_URB_SIZE, GFP_KERNEL);

                priv->rx_urb[i]->transfer_buffer_length = RX_URB_SIZE;
        }
#endif

#ifdef THOMAS_BEACON
        {
                long align = 0;
                void *oldaddr, *newaddr;

                priv->rx_urb[16] = usb_alloc_urb(0, GFP_KERNEL);
                priv->oldaddr = kmalloc(16, GFP_KERNEL);
                oldaddr = priv->oldaddr;
                align = ((long)oldaddr) & 3;
                if (align) {
                        newaddr = oldaddr + 4 - align;
                        priv->rx_urb[16]->transfer_buffer_length = 16 - 4 + align;
                } else {
                        newaddr = oldaddr;
                        priv->rx_urb[16]->transfer_buffer_length = 16;
                }
                priv->rx_urb[16]->transfer_buffer = newaddr;
        }
#endif

        memset(priv->rx_urb, 0, sizeof(struct urb *) * MAX_RX_URB);
        priv->pp_rxskb = kcalloc(MAX_RX_URB, sizeof(struct sk_buff *),
                                 GFP_KERNEL);
        if (!priv->pp_rxskb) {
                kfree(priv->rx_urb);

                priv->pp_rxskb = NULL;
                priv->rx_urb = NULL;

                DMESGE("Endpoint Alloc Failure");
                return -ENOMEM;
        }

        netdev_dbg(dev, "End of initendpoints\n");
        return 0;

}
#ifdef THOMAS_BEACON
void rtl8192_usb_deleteendpoints(struct net_device *dev)
{
        int i;
        struct r8192_priv *priv = ieee80211_priv(dev);

        if (priv->rx_urb) {

                for (i = 0; i < (MAX_RX_URB+1); i++) {
                        usb_kill_urb(priv->rx_urb[i]);
                        usb_free_urb(priv->rx_urb[i]);
                }
                kfree(priv->rx_urb);
                priv->rx_urb = NULL;
        }
        kfree(priv->oldaddr);
        priv->oldaddr = NULL;
        if (priv->pp_rxskb) {
                kfree(priv->pp_rxskb);
                priv->pp_rxskb = 0;
        }
}
#else
void rtl8192_usb_deleteendpoints(struct net_device *dev)
{
        int i;
        struct r8192_priv *priv = ieee80211_priv(dev);

#ifndef JACKSON_NEW_RX

        if (priv->rx_urb) {
                for (i = 0; i < (MAX_RX_URB+1); i++) {
                        usb_kill_urb(priv->rx_urb[i]);
                        kfree(priv->rx_urb[i]->transfer_buffer);
                        usb_free_urb(priv->rx_urb[i]);
                }
                kfree(priv->rx_urb);
                priv->rx_urb = NULL;

        }
#else
        kfree(priv->rx_urb);
        priv->rx_urb = NULL;
        kfree(priv->oldaddr);
        priv->oldaddr = NULL;
        if (priv->pp_rxskb) {
                kfree(priv->pp_rxskb);
                priv->pp_rxskb = 0;

        }

#endif
}
#endif

extern void rtl8192_update_ratr_table(struct net_device *dev);
void rtl8192_link_change(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        struct ieee80211_device *ieee = priv->ieee80211;
        if (ieee->state == IEEE80211_LINKED) {
                rtl8192_net_update(dev);
                rtl8192_update_ratr_table(dev);
                //add this as in pure N mode, wep encryption will use software way, but there is no chance to set this as wep will not set group key in wext. WB.2008.07.08
                if ((KEY_TYPE_WEP40 == ieee->pairwise_key_type) || (KEY_TYPE_WEP104 == ieee->pairwise_key_type))
                        EnableHWSecurityConfig8192(dev);
        }
        /*update timing params*/
        if (ieee->iw_mode == IW_MODE_INFRA || ieee->iw_mode == IW_MODE_ADHOC) {
                u32 reg = 0;
                read_nic_dword(dev, RCR, &reg);
                if (priv->ieee80211->state == IEEE80211_LINKED)
                        priv->ReceiveConfig = reg |= RCR_CBSSID;
                else
                        priv->ReceiveConfig = reg &= ~RCR_CBSSID;
                write_nic_dword(dev, RCR, reg);
        }
}

static struct ieee80211_qos_parameters def_qos_parameters = {
        {3, 3, 3, 3},/* cw_min */
        {7, 7, 7, 7},/* cw_max */
        {2, 2, 2, 2},/* aifs */
        {0, 0, 0, 0},/* flags */
        {0, 0, 0, 0} /* tx_op_limit */
};


void rtl8192_update_beacon(struct work_struct *work)
{
        struct r8192_priv *priv = container_of(work, struct r8192_priv, update_beacon_wq.work);
        struct net_device *dev = priv->ieee80211->dev;
        struct ieee80211_device *ieee = priv->ieee80211;
        struct ieee80211_network *net = &ieee->current_network;

        if (ieee->pHTInfo->bCurrentHTSupport)
                HTUpdateSelfAndPeerSetting(ieee, net);
        ieee->pHTInfo->bCurrentRT2RTLongSlotTime = net->bssht.bdRT2RTLongSlotTime;
        rtl8192_update_cap(dev, net->capability);
}
/*
* background support to run QoS activate functionality
*/
int WDCAPARA_ADD[] = {EDCAPARA_BE, EDCAPARA_BK, EDCAPARA_VI, EDCAPARA_VO};
void rtl8192_qos_activate(struct work_struct *work)
{
        struct r8192_priv *priv = container_of(work, struct r8192_priv, qos_activate);
        struct net_device *dev = priv->ieee80211->dev;
        struct ieee80211_qos_parameters *qos_parameters = &priv->ieee80211->current_network.qos_data.parameters;
        u8 mode = priv->ieee80211->current_network.mode;
        u8  u1bAIFS;
        u32 u4bAcParam;
        int i;

        if (priv == NULL)
                return;

        mutex_lock(&priv->mutex);
        if (priv->ieee80211->state != IEEE80211_LINKED)
                goto success;
        RT_TRACE(COMP_QOS, "qos active process with associate response received\n");
        /* It better set slot time at first */
        /* For we just support b/g mode at present, let the slot time at 9/20 selection */
        /* update the ac parameter to related registers */
        for (i = 0; i <  QOS_QUEUE_NUM; i++) {
                //Mode G/A: slotTimeTimer = 9; Mode B: 20
                u1bAIFS = qos_parameters->aifs[i] * ((mode&(IEEE_G|IEEE_N_24G)) ? 9 : 20) + aSifsTime;
                u4bAcParam = ((((u32)(qos_parameters->tx_op_limit[i]))<< AC_PARAM_TXOP_LIMIT_OFFSET)|
                              (((u32)(qos_parameters->cw_max[i]))<< AC_PARAM_ECW_MAX_OFFSET)|
                              (((u32)(qos_parameters->cw_min[i]))<< AC_PARAM_ECW_MIN_OFFSET)|
                              ((u32)u1bAIFS << AC_PARAM_AIFS_OFFSET));

                write_nic_dword(dev, WDCAPARA_ADD[i], u4bAcParam);
        }

success:
        mutex_unlock(&priv->mutex);
}

static int rtl8192_qos_handle_probe_response(struct r8192_priv *priv,
                                             int active_network,
                                             struct ieee80211_network *network)
{
        int ret = 0;
        u32 size = sizeof(struct ieee80211_qos_parameters);

        if (priv->ieee80211->state != IEEE80211_LINKED)
                return ret;

        if ((priv->ieee80211->iw_mode != IW_MODE_INFRA))
                return ret;

        if (network->flags & NETWORK_HAS_QOS_MASK) {
                if (active_network &&
                    (network->flags & NETWORK_HAS_QOS_PARAMETERS))
                        network->qos_data.active = network->qos_data.supported;

                if ((network->qos_data.active == 1) && (active_network == 1) &&
                    (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
                    (network->qos_data.old_param_count !=
                     network->qos_data.param_count)) {
                        network->qos_data.old_param_count =
                                network->qos_data.param_count;
                        queue_work(priv->priv_wq, &priv->qos_activate);
                        RT_TRACE(COMP_QOS, "QoS parameters change call "
                                 "qos_activate\n");
                }
        } else {
                memcpy(&priv->ieee80211->current_network.qos_data.parameters,
                       &def_qos_parameters, size);

                if ((network->qos_data.active == 1) && (active_network == 1)) {
                        queue_work(priv->priv_wq, &priv->qos_activate);
                        RT_TRACE(COMP_QOS, "QoS was disabled call qos_activate \n");
                }
                network->qos_data.active = 0;
                network->qos_data.supported = 0;
        }

        return 0;
}

/* handle and manage frame from beacon and probe response */
static int rtl8192_handle_beacon(struct net_device *dev,
                                 struct ieee80211_beacon *beacon,
                                 struct ieee80211_network *network)
{
        struct r8192_priv *priv = ieee80211_priv(dev);

        rtl8192_qos_handle_probe_response(priv, 1, network);
        queue_delayed_work(priv->priv_wq, &priv->update_beacon_wq, 0);
        return 0;

}

/*
* handling the beaconing responses. if we get different QoS setting
* off the network from the associated setting, adjust the QoS
* setting
*/
static int rtl8192_qos_association_resp(struct r8192_priv *priv,
                                        struct ieee80211_network *network)
{
        int ret = 0;
        unsigned long flags;
        u32 size = sizeof(struct ieee80211_qos_parameters);
        int set_qos_param = 0;

        if ((priv == NULL) || (network == NULL))
                return ret;

        if (priv->ieee80211->state != IEEE80211_LINKED)
                return ret;

        if ((priv->ieee80211->iw_mode != IW_MODE_INFRA))
                return ret;

        spin_lock_irqsave(&priv->ieee80211->lock, flags);
        if (network->flags & NETWORK_HAS_QOS_PARAMETERS) {
                memcpy(&priv->ieee80211->current_network.qos_data.parameters,
                       &network->qos_data.parameters,
                       sizeof(struct ieee80211_qos_parameters));
                priv->ieee80211->current_network.qos_data.active = 1;
                set_qos_param = 1;
                /* update qos parameter for current network */
                priv->ieee80211->current_network.qos_data.old_param_count =
                        priv->ieee80211->current_network.qos_data.param_count;
                priv->ieee80211->current_network.qos_data.param_count =
                        network->qos_data.param_count;
        } else {
                memcpy(&priv->ieee80211->current_network.qos_data.parameters,
                       &def_qos_parameters, size);
                priv->ieee80211->current_network.qos_data.active = 0;
                priv->ieee80211->current_network.qos_data.supported = 0;
                set_qos_param = 1;
        }

        spin_unlock_irqrestore(&priv->ieee80211->lock, flags);

        RT_TRACE(COMP_QOS, "%s: network->flags = %d,%d\n", __func__, network->flags, priv->ieee80211->current_network.qos_data.active);
        if (set_qos_param == 1)
                queue_work(priv->priv_wq, &priv->qos_activate);


        return ret;
}


static int rtl8192_handle_assoc_response(struct net_device *dev,
                                         struct ieee80211_assoc_response_frame *resp,
                                         struct ieee80211_network *network)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        rtl8192_qos_association_resp(priv, network);
        return 0;
}


void rtl8192_update_ratr_table(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        struct ieee80211_device *ieee = priv->ieee80211;
        u8 *pMcsRate = ieee->dot11HTOperationalRateSet;
        u32 ratr_value = 0;
        u8 rate_index = 0;
        rtl8192_config_rate(dev, (u16 *)(&ratr_value));
        ratr_value |= (*(u16 *)(pMcsRate)) << 12;
        switch (ieee->mode) {
        case IEEE_A:
                ratr_value &= 0x00000FF0;
                break;
        case IEEE_B:
                ratr_value &= 0x0000000F;
                break;
        case IEEE_G:
                ratr_value &= 0x00000FF7;
                break;
        case IEEE_N_24G:
        case IEEE_N_5G:
                if (ieee->pHTInfo->PeerMimoPs == 0) {//MIMO_PS_STATIC
                        ratr_value &= 0x0007F007;
                } else {
                        if (priv->rf_type == RF_1T2R)
                                ratr_value &= 0x000FF007;
                        else
                                ratr_value &= 0x0F81F007;
                }
                break;
        default:
                break;
        }
        ratr_value &= 0x0FFFFFFF;
        if (ieee->pHTInfo->bCurTxBW40MHz && ieee->pHTInfo->bCurShortGI40MHz)
                ratr_value |= 0x80000000;
        else if (!ieee->pHTInfo->bCurTxBW40MHz && ieee->pHTInfo->bCurShortGI20MHz)
                ratr_value |= 0x80000000;
        write_nic_dword(dev, RATR0+rate_index*4, ratr_value);
        write_nic_byte(dev, UFWP, 1);
}

static u8 ccmp_ie[4] = {0x00, 0x50, 0xf2, 0x04};
static u8 ccmp_rsn_ie[4] = {0x00, 0x0f, 0xac, 0x04};
bool GetNmodeSupportBySecCfg8192(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        struct ieee80211_device *ieee = priv->ieee80211;
        struct ieee80211_network *network = &ieee->current_network;
        int wpa_ie_len = ieee->wpa_ie_len;
        struct ieee80211_crypt_data *crypt;
        int encrypt;

        crypt = ieee->crypt[ieee->tx_keyidx];
        //we use connecting AP's capability instead of only security config on our driver to distinguish whether it should use N mode or G mode
        encrypt = (network->capability & WLAN_CAPABILITY_PRIVACY) || (ieee->host_encrypt && crypt && crypt->ops && (0 == strcmp(crypt->ops->name, "WEP")));

        /* simply judge  */
        if (encrypt && (wpa_ie_len == 0)) {
                /* wep encryption, no N mode setting */
                return false;
        } else if ((wpa_ie_len != 0)) {
                /* parse pairwise key type */
                if (((ieee->wpa_ie[0] == 0xdd) && (!memcmp(&(ieee->wpa_ie[14]), ccmp_ie, 4))) || ((ieee->wpa_ie[0] == 0x30) && (!memcmp(&ieee->wpa_ie[10], ccmp_rsn_ie, 4))))
                        return true;
                else
                        return false;
        } else {
                return true;
        }

        return true;
}

bool GetHalfNmodeSupportByAPs819xUsb(struct net_device *dev)
{
        bool                    Reval;
        struct r8192_priv *priv = ieee80211_priv(dev);
        struct ieee80211_device *ieee = priv->ieee80211;

        if (ieee->bHalfWirelessN24GMode == true)
                Reval = true;
        else
                Reval =  false;

        return Reval;
}

void rtl8192_refresh_supportrate(struct r8192_priv *priv)
{
        struct ieee80211_device *ieee = priv->ieee80211;
        //we do not consider set support rate for ABG mode, only HT MCS rate is set here.
        if (ieee->mode == WIRELESS_MODE_N_24G || ieee->mode == WIRELESS_MODE_N_5G)
                memcpy(ieee->Regdot11HTOperationalRateSet, ieee->RegHTSuppRateSet, 16);
        else
                memset(ieee->Regdot11HTOperationalRateSet, 0, 16);
        return;
}

u8 rtl8192_getSupportedWireleeMode(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        u8 ret = 0;
        switch (priv->rf_chip) {
        case RF_8225:
        case RF_8256:
        case RF_PSEUDO_11N:
                ret = (WIRELESS_MODE_N_24G|WIRELESS_MODE_G|WIRELESS_MODE_B);
                break;
        case RF_8258:
                ret = (WIRELESS_MODE_A|WIRELESS_MODE_N_5G);
                break;
        default:
                ret = WIRELESS_MODE_B;
                break;
        }
        return ret;
}
void rtl8192_SetWirelessMode(struct net_device *dev, u8 wireless_mode)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        u8 bSupportMode = rtl8192_getSupportedWireleeMode(dev);

        if ((wireless_mode == WIRELESS_MODE_AUTO) || ((wireless_mode&bSupportMode) == 0)) {
                if (bSupportMode & WIRELESS_MODE_N_24G) {
                        wireless_mode = WIRELESS_MODE_N_24G;
                } else if (bSupportMode & WIRELESS_MODE_N_5G) {
                        wireless_mode = WIRELESS_MODE_N_5G;
                } else if ((bSupportMode & WIRELESS_MODE_A)) {
                        wireless_mode = WIRELESS_MODE_A;
                } else if ((bSupportMode & WIRELESS_MODE_G)) {
                        wireless_mode = WIRELESS_MODE_G;
                } else if ((bSupportMode & WIRELESS_MODE_B)) {
                        wireless_mode = WIRELESS_MODE_B;
                } else {
                        RT_TRACE(COMP_ERR, "%s(), No valid wireless mode supported, SupportedWirelessMode(%x)!!!\n", __func__, bSupportMode);
                        wireless_mode = WIRELESS_MODE_B;
                }
        }
#ifdef TO_DO_LIST //// TODO: this function doesn't work well at this time, we should wait for FPGA
        ActUpdateChannelAccessSetting(pAdapter, pHalData->CurrentWirelessMode, &pAdapter->MgntInfo.Info8185.ChannelAccessSetting);
#endif
        priv->ieee80211->mode = wireless_mode;

        if ((wireless_mode == WIRELESS_MODE_N_24G) ||  (wireless_mode == WIRELESS_MODE_N_5G))
                priv->ieee80211->pHTInfo->bEnableHT = 1;
        else
                priv->ieee80211->pHTInfo->bEnableHT = 0;
        RT_TRACE(COMP_INIT, "Current Wireless Mode is %x\n", wireless_mode);
        rtl8192_refresh_supportrate(priv);

}
//init priv variables here. only non_zero value should be initialized here.
static void rtl8192_init_priv_variable(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        u8 i;
        priv->card_8192 = NIC_8192U;
        priv->chan = 1; //set to channel 1
        priv->ieee80211->mode = WIRELESS_MODE_AUTO; //SET AUTO
        priv->ieee80211->iw_mode = IW_MODE_INFRA;
        priv->ieee80211->ieee_up = 0;
        priv->retry_rts = DEFAULT_RETRY_RTS;
        priv->retry_data = DEFAULT_RETRY_DATA;
        priv->ieee80211->rts = DEFAULT_RTS_THRESHOLD;
        priv->ieee80211->rate = 110; //11 mbps
        priv->ieee80211->short_slot = 1;
        priv->promisc = (dev->flags & IFF_PROMISC) ? 1 : 0;
        priv->CckPwEnl = 6;
        //for silent reset
        priv->IrpPendingCount = 1;
        priv->ResetProgress = RESET_TYPE_NORESET;
        priv->bForcedSilentReset = 0;
        priv->bDisableNormalResetCheck = false;
        priv->force_reset = false;

        priv->ieee80211->FwRWRF = 0;    //we don't use FW read/write RF until stable firmware is available.
        priv->ieee80211->current_network.beacon_interval = DEFAULT_BEACONINTERVAL;
        priv->ieee80211->iw_mode = IW_MODE_INFRA;
        priv->ieee80211->softmac_features  = IEEE_SOFTMAC_SCAN |
                IEEE_SOFTMAC_ASSOCIATE | IEEE_SOFTMAC_PROBERQ |
                IEEE_SOFTMAC_PROBERS | IEEE_SOFTMAC_TX_QUEUE |
                IEEE_SOFTMAC_BEACONS;//added by amy 080604

        priv->ieee80211->active_scan = 1;
        priv->ieee80211->modulation = IEEE80211_CCK_MODULATION | IEEE80211_OFDM_MODULATION;
        priv->ieee80211->host_encrypt = 1;
        priv->ieee80211->host_decrypt = 1;
        priv->ieee80211->start_send_beacons = NULL; //-by amy 080604
        priv->ieee80211->stop_send_beacons = NULL;  //-by amy 080604
        priv->ieee80211->softmac_hard_start_xmit = rtl8192_hard_start_xmit;
        priv->ieee80211->set_chan = rtl8192_set_chan;
        priv->ieee80211->link_change = rtl8192_link_change;
        priv->ieee80211->softmac_data_hard_start_xmit = rtl8192_hard_data_xmit;
        priv->ieee80211->data_hard_stop = rtl8192_data_hard_stop;
        priv->ieee80211->data_hard_resume = rtl8192_data_hard_resume;
        priv->ieee80211->init_wmmparam_flag = 0;
        priv->ieee80211->fts = DEFAULT_FRAG_THRESHOLD;
        priv->ieee80211->check_nic_enough_desc = check_nic_enough_desc;
        priv->ieee80211->tx_headroom = TX_PACKET_SHIFT_BYTES;
        priv->ieee80211->qos_support = 1;

        //added by WB
        priv->ieee80211->SetBWModeHandler = rtl8192_SetBWMode;
        priv->ieee80211->handle_assoc_response = rtl8192_handle_assoc_response;
        priv->ieee80211->handle_beacon = rtl8192_handle_beacon;
        //added by david
        priv->ieee80211->GetNmodeSupportBySecCfg = GetNmodeSupportBySecCfg8192;
        priv->ieee80211->GetHalfNmodeSupportByAPsHandler = GetHalfNmodeSupportByAPs819xUsb;
        priv->ieee80211->SetWirelessMode = rtl8192_SetWirelessMode;
        //added by amy
        priv->ieee80211->InitialGainHandler = InitialGain819xUsb;
        priv->card_type = USB;
#ifdef TO_DO_LIST
        if (Adapter->bInHctTest) {
                pHalData->ShortRetryLimit = 7;
                pHalData->LongRetryLimit = 7;
        }
#endif
        priv->ShortRetryLimit = 0x30;
        priv->LongRetryLimit = 0x30;
        priv->EarlyRxThreshold = 7;
        priv->enable_gpio0 = 0;
        priv->TransmitConfig =
                (TCR_MXDMA_2048<<TCR_MXDMA_OFFSET)|  // Max DMA Burst Size per Tx DMA Burst, 7: reserved.
                (priv->ShortRetryLimit<<TCR_SRL_OFFSET)|        // Short retry limit
                (priv->LongRetryLimit<<TCR_LRL_OFFSET) |        // Long retry limit
                (false ? TCR_SAT : 0);  // FALSE: HW provides PLCP length and LENGEXT, TRUE: SW provides them
#ifdef TO_DO_LIST
        if (Adapter->bInHctTest)
                pHalData->ReceiveConfig =       pHalData->CSMethod |
                                                RCR_AMF | RCR_ADF |     //accept management/data
                                                //guangan200710
                                                RCR_ACF |       //accept control frame for SW AP needs PS-poll, 2005.07.07, by rcnjko.
                                                RCR_AB | RCR_AM | RCR_APM |             //accept BC/MC/UC
                                                RCR_AICV | RCR_ACRC32 |                 //accept ICV/CRC error packet
                                                ((u32)7<<RCR_MXDMA_OFFSET) | // Max DMA Burst Size per Rx DMA Burst, 7: unlimited.
                                                (pHalData->EarlyRxThreshold<<RCR_FIFO_OFFSET) | // Rx FIFO Threshold, 7: No Rx threshold.
                                                (pHalData->EarlyRxThreshold == 7 ? RCR_OnlyErlPkt : 0);
        else

#endif
        priv->ReceiveConfig     =
                RCR_AMF | RCR_ADF |             //accept management/data
                RCR_ACF |                       //accept control frame for SW AP needs PS-poll, 2005.07.07, by rcnjko.
                RCR_AB | RCR_AM | RCR_APM |     //accept BC/MC/UC
                ((u32)7<<RCR_MXDMA_OFFSET)| // Max DMA Burst Size per Rx DMA Burst, 7: unlimited.
                (priv->EarlyRxThreshold<<RX_FIFO_THRESHOLD_SHIFT) | // Rx FIFO Threshold, 7: No Rx threshold.
                (priv->EarlyRxThreshold == 7 ? RCR_ONLYERLPKT : 0);

        priv->AcmControl = 0;
        priv->pFirmware = kzalloc(sizeof(rt_firmware), GFP_KERNEL);

        /* rx related queue */
        skb_queue_head_init(&priv->rx_queue);
        skb_queue_head_init(&priv->skb_queue);

        /* Tx related queue */
        for (i = 0; i < MAX_QUEUE_SIZE; i++)
                skb_queue_head_init(&priv->ieee80211->skb_waitQ[i]);
        for (i = 0; i < MAX_QUEUE_SIZE; i++)
                skb_queue_head_init(&priv->ieee80211->skb_aggQ[i]);
        for (i = 0; i < MAX_QUEUE_SIZE; i++)
                skb_queue_head_init(&priv->ieee80211->skb_drv_aggQ[i]);
        priv->rf_set_chan = rtl8192_phy_SwChnl;
}

//init lock here
static void rtl8192_init_priv_lock(struct r8192_priv *priv)
{
        spin_lock_init(&priv->tx_lock);
        spin_lock_init(&priv->irq_lock);//added by thomas
        sema_init(&priv->wx_sem, 1);
        sema_init(&priv->rf_sem, 1);
        mutex_init(&priv->mutex);
}

extern  void    rtl819x_watchdog_wqcallback(struct work_struct *work);

void rtl8192_irq_rx_tasklet(struct r8192_priv *priv);
//init tasklet and wait_queue here. only 2.6 above kernel is considered
#define DRV_NAME "wlan0"
static void rtl8192_init_priv_task(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);

        priv->priv_wq = create_workqueue(DRV_NAME);

        INIT_WORK(&priv->reset_wq, rtl8192_restart);

        INIT_DELAYED_WORK(&priv->watch_dog_wq, rtl819x_watchdog_wqcallback);
        INIT_DELAYED_WORK(&priv->txpower_tracking_wq,  dm_txpower_trackingcallback);
        INIT_DELAYED_WORK(&priv->rfpath_check_wq,  dm_rf_pathcheck_workitemcallback);
        INIT_DELAYED_WORK(&priv->update_beacon_wq, rtl8192_update_beacon);
        INIT_DELAYED_WORK(&priv->initialgain_operate_wq, InitialGainOperateWorkItemCallBack);
        INIT_WORK(&priv->qos_activate, rtl8192_qos_activate);

        tasklet_init(&priv->irq_rx_tasklet,
                     (void(*)(unsigned long))rtl8192_irq_rx_tasklet,
                     (unsigned long)priv);
}

static void rtl8192_get_eeprom_size(struct net_device *dev)
{
        u16 curCR = 0;
        struct r8192_priv *priv = ieee80211_priv(dev);
        RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
        read_nic_word_E(dev, EPROM_CMD, &curCR);
        RT_TRACE(COMP_EPROM, "read from Reg EPROM_CMD(%x):%x\n", EPROM_CMD, curCR);
        //whether need I consider BIT5?
        priv->epromtype = (curCR & Cmd9346CR_9356SEL) ? EPROM_93c56 : EPROM_93c46;
        RT_TRACE(COMP_EPROM, "<===========%s(), epromtype:%d\n", __func__, priv->epromtype);
}

//used to swap endian. as ntohl & htonl are not necessary to swap endian, so use this instead.
static inline u16 endian_swap(u16 *data)
{
        u16 tmp = *data;
        *data = (tmp >> 8) | (tmp << 8);
        return *data;
}
static void rtl8192_read_eeprom_info(struct net_device *dev)
{
        u16 wEPROM_ID = 0;
        u8 bMac_Tmp_Addr[6] = {0x00, 0xe0, 0x4c, 0x00, 0x00, 0x02};
        u8 bLoad_From_EEPOM = false;
        struct r8192_priv *priv = ieee80211_priv(dev);
        u16 tmpValue = 0;
        int i;
        RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
        wEPROM_ID = eprom_read(dev, 0); //first read EEPROM ID out;
        RT_TRACE(COMP_EPROM, "EEPROM ID is 0x%x\n", wEPROM_ID);

        if (wEPROM_ID != RTL8190_EEPROM_ID) {
                RT_TRACE(COMP_ERR, "EEPROM ID is invalid(is 0x%x(should be 0x%x)\n", wEPROM_ID, RTL8190_EEPROM_ID);
        } else {
                bLoad_From_EEPOM = true;
        }

        if (bLoad_From_EEPOM) {
                tmpValue = eprom_read(dev, (EEPROM_VID>>1));
                priv->eeprom_vid = endian_swap(&tmpValue);
                priv->eeprom_pid = eprom_read(dev, (EEPROM_PID>>1));
                tmpValue = eprom_read(dev, (EEPROM_ChannelPlan>>1));
                priv->eeprom_ChannelPlan = ((tmpValue&0xff00)>>8);
                priv->btxpowerdata_readfromEEPORM = true;
                priv->eeprom_CustomerID = eprom_read(dev, (EEPROM_Customer_ID>>1)) >>8;
        } else {
                priv->eeprom_vid = 0;
                priv->eeprom_pid = 0;
                priv->card_8192_version = VERSION_819xU_B;
                priv->eeprom_ChannelPlan = 0;
                priv->eeprom_CustomerID = 0;
        }
        RT_TRACE(COMP_EPROM, "vid:0x%4x, pid:0x%4x, CustomID:0x%2x, ChanPlan:0x%x\n", priv->eeprom_vid, priv->eeprom_pid, priv->eeprom_CustomerID, priv->eeprom_ChannelPlan);
        //set channelplan from eeprom
        priv->ChannelPlan = priv->eeprom_ChannelPlan;
        if (bLoad_From_EEPOM) {
                int i;
                for (i = 0; i < 6; i += 2) {
                        u16 tmp = 0;
                        tmp = eprom_read(dev, (u16)((EEPROM_NODE_ADDRESS_BYTE_0 + i)>>1));
                        *(u16 *)(&dev->dev_addr[i]) = tmp;
                }
        } else {
                memcpy(dev->dev_addr, bMac_Tmp_Addr, 6);
                //should I set IDR0 here?
        }
        RT_TRACE(COMP_EPROM, "MAC addr:%pM\n", dev->dev_addr);
        priv->rf_type = RTL819X_DEFAULT_RF_TYPE; //default 1T2R
        priv->rf_chip = RF_8256;

        if (priv->card_8192_version == (u8)VERSION_819xU_A) {
                //read Tx power gain offset of legacy OFDM to HT rate
                if (bLoad_From_EEPOM)
                        priv->EEPROMTxPowerDiff = (eprom_read(dev, (EEPROM_TxPowerDiff>>1))&0xff00) >> 8;
                else
                        priv->EEPROMTxPowerDiff = EEPROM_Default_TxPower;
                RT_TRACE(COMP_EPROM, "TxPowerDiff:%d\n", priv->EEPROMTxPowerDiff);
                //read ThermalMeter from EEPROM
                if (bLoad_From_EEPOM)
                        priv->EEPROMThermalMeter = (u8)(eprom_read(dev, (EEPROM_ThermalMeter>>1))&0x00ff);
                else
                        priv->EEPROMThermalMeter = EEPROM_Default_ThermalMeter;
                RT_TRACE(COMP_EPROM, "ThermalMeter:%d\n", priv->EEPROMThermalMeter);
                //vivi, for tx power track
                priv->TSSI_13dBm = priv->EEPROMThermalMeter *100;
                //read antenna tx power offset of B/C/D to A from EEPROM
                if (bLoad_From_EEPOM)
                        priv->EEPROMPwDiff = (eprom_read(dev, (EEPROM_PwDiff>>1))&0x0f00)>>8;
                else
                        priv->EEPROMPwDiff = EEPROM_Default_PwDiff;
                RT_TRACE(COMP_EPROM, "TxPwDiff:%d\n", priv->EEPROMPwDiff);
                // Read CrystalCap from EEPROM
                if (bLoad_From_EEPOM)
                        priv->EEPROMCrystalCap = (eprom_read(dev, (EEPROM_CrystalCap>>1))&0x0f);
                else
                        priv->EEPROMCrystalCap = EEPROM_Default_CrystalCap;
                RT_TRACE(COMP_EPROM, "CrystalCap = %d\n", priv->EEPROMCrystalCap);
                //get per-channel Tx power level
                if (bLoad_From_EEPOM)
                        priv->EEPROM_Def_Ver = (eprom_read(dev, (EEPROM_TxPwIndex_Ver>>1))&0xff00)>>8;
                else
                        priv->EEPROM_Def_Ver = 1;
                RT_TRACE(COMP_EPROM, "EEPROM_DEF_VER:%d\n", priv->EEPROM_Def_Ver);
                if (priv->EEPROM_Def_Ver == 0) { //old eeprom definition
                        int i;
                        if (bLoad_From_EEPOM)
                                priv->EEPROMTxPowerLevelCCK = (eprom_read(dev, (EEPROM_TxPwIndex_CCK>>1))&0xff) >> 8;
                        else
                                priv->EEPROMTxPowerLevelCCK = 0x10;
                        RT_TRACE(COMP_EPROM, "CCK Tx Power Levl: 0x%02x\n", priv->EEPROMTxPowerLevelCCK);
                        for (i = 0; i < 3; i++) {
                                if (bLoad_From_EEPOM) {
                                        tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G+i)>>1);
                                        if (((EEPROM_TxPwIndex_OFDM_24G+i) % 2) == 0)
                                                tmpValue = tmpValue & 0x00ff;
                                        else
                                                tmpValue = (tmpValue & 0xff00) >> 8;
                                } else {
                                        tmpValue = 0x10;
                                }
                                priv->EEPROMTxPowerLevelOFDM24G[i] = (u8) tmpValue;
                                RT_TRACE(COMP_EPROM, "OFDM 2.4G Tx Power Level, Index %d = 0x%02x\n", i, priv->EEPROMTxPowerLevelCCK);
                        }
                } else if (priv->EEPROM_Def_Ver == 1) {
                        if (bLoad_From_EEPOM) {
                                tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_CCK_V1>>1));
                                tmpValue = (tmpValue & 0xff00) >> 8;
                        } else {
                                tmpValue = 0x10;
                        }
                        priv->EEPROMTxPowerLevelCCK_V1[0] = (u8)tmpValue;

                        if (bLoad_From_EEPOM)
                                tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_CCK_V1 + 2)>>1);
                        else
                                tmpValue = 0x1010;
                        *((u16 *)(&priv->EEPROMTxPowerLevelCCK_V1[1])) = tmpValue;
                        if (bLoad_From_EEPOM)
                                tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G_V1>>1));
                        else
                                tmpValue = 0x1010;
                        *((u16 *)(&priv->EEPROMTxPowerLevelOFDM24G[0])) = tmpValue;
                        if (bLoad_From_EEPOM)
                                tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G_V1+2)>>1);
                        else
                                tmpValue = 0x10;
                        priv->EEPROMTxPowerLevelOFDM24G[2] = (u8)tmpValue;
                }//endif EEPROM_Def_Ver == 1

                //update HAL variables
                //
                for (i = 0; i < 14; i++) {
                        if (i <= 3)
                                priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[0];
                        else if (i >= 4 && i <= 9)
                                priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[1];
                        else
                                priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[2];
                }

                for (i = 0; i < 14; i++) {
                        if (priv->EEPROM_Def_Ver == 0) {
                                if (i <= 3)
                                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[0] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
                                else if (i >= 4 && i <= 9)
                                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK;
                                else
                                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[2] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
                        } else if (priv->EEPROM_Def_Ver == 1) {
                                if (i <= 3)
                                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[0];
                                else if (i >= 4 && i <= 9)
                                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[1];
                                else
                                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[2];
                        }
                }
                priv->TxPowerDiff = priv->EEPROMPwDiff;
                // Antenna B gain offset to antenna A, bit0~3
                priv->AntennaTxPwDiff[0] = (priv->EEPROMTxPowerDiff & 0xf);
                // Antenna C gain offset to antenna A, bit4~7
                priv->AntennaTxPwDiff[1] = ((priv->EEPROMTxPowerDiff & 0xf0)>>4);
                // CrystalCap, bit12~15
                priv->CrystalCap = priv->EEPROMCrystalCap;
                // ThermalMeter, bit0~3 for RFIC1, bit4~7 for RFIC2
                // 92U does not enable TX power tracking.
                priv->ThermalMeter[0] = priv->EEPROMThermalMeter;
        }//end if VersionID == VERSION_819xU_A

        //added by vivi, for dlink led, 20080416
        switch (priv->eeprom_CustomerID) {
        case EEPROM_CID_RUNTOP:
                priv->CustomerID = RT_CID_819x_RUNTOP;
                break;

        case EEPROM_CID_DLINK:
                priv->CustomerID = RT_CID_DLINK;
                break;

        default:
                priv->CustomerID = RT_CID_DEFAULT;
                break;

        }

        switch (priv->CustomerID) {
        case RT_CID_819x_RUNTOP:
                priv->LedStrategy = SW_LED_MODE2;
                break;

        case RT_CID_DLINK:
                priv->LedStrategy = SW_LED_MODE4;
                break;

        default:
                priv->LedStrategy = SW_LED_MODE0;
                break;

        }


        if (priv->rf_type == RF_1T2R) {
                RT_TRACE(COMP_EPROM, "\n1T2R config\n");
        } else {
                RT_TRACE(COMP_EPROM, "\n2T4R config\n");
        }

        // 2008/01/16 MH We can only know RF type in the function. So we have to init
        // DIG RATR table again.
        init_rate_adaptive(dev);
        //we need init DIG RATR table here again.

        RT_TRACE(COMP_EPROM, "<===========%s()\n", __func__);
        return;
}

short rtl8192_get_channel_map(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        if (priv->ChannelPlan > COUNTRY_CODE_GLOBAL_DOMAIN) {
                netdev_err(dev, "rtl8180_init: Error channel plan! Set to default.\n");
                priv->ChannelPlan = 0;
        }
        RT_TRACE(COMP_INIT, "Channel plan is %d\n", priv->ChannelPlan);

        rtl819x_set_channel_map(priv->ChannelPlan, priv);
        return 0;
}

short rtl8192_init(struct net_device *dev)
{

        struct r8192_priv *priv = ieee80211_priv(dev);

        memset(&(priv->stats), 0, sizeof(struct Stats));
        memset(priv->txqueue_to_outpipemap, 0, 9);
#ifdef PIPE12
        {
                int i = 0;
                u8 queuetopipe[] = {3, 2, 1, 0, 4, 8, 7, 6, 5};
                memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
        }
#else
        {
                u8 queuetopipe[] = {3, 2, 1, 0, 4, 4, 0, 4, 4};
                memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
        }
#endif
        rtl8192_init_priv_variable(dev);
        rtl8192_init_priv_lock(priv);
        rtl8192_init_priv_task(dev);
        rtl8192_get_eeprom_size(dev);
        rtl8192_read_eeprom_info(dev);
        rtl8192_get_channel_map(dev);
        init_hal_dm(dev);
        init_timer(&priv->watch_dog_timer);
        priv->watch_dog_timer.data = (unsigned long)dev;
        priv->watch_dog_timer.function = watch_dog_timer_callback;
        if (rtl8192_usb_initendpoints(dev) != 0) {
                DMESG("Endopoints initialization failed");
                return -ENOMEM;
        }

#ifdef DEBUG_EPROM
        dump_eprom(dev);
#endif
        return 0;
}

/******************************************************************************
 *function:  This function actually only set RRSR, RATR and BW_OPMODE registers
 *           not to do all the hw config as its name says
 *   input:  net_device dev
 *  output:  none
 *  return:  none
 *  notice:  This part need to modified according to the rate set we filtered
 * ****************************************************************************/
void rtl8192_hwconfig(struct net_device *dev)
{
        u32 regRATR = 0, regRRSR = 0;
        u8 regBwOpMode = 0, regTmp = 0;
        struct r8192_priv *priv = ieee80211_priv(dev);
        u32 ratr_value = 0;

        // Set RRSR, RATR, and BW_OPMODE registers
        //
        switch (priv->ieee80211->mode) {
        case WIRELESS_MODE_B:
                regBwOpMode = BW_OPMODE_20MHZ;
                regRATR = RATE_ALL_CCK;
                regRRSR = RATE_ALL_CCK;
                break;
        case WIRELESS_MODE_A:
                regBwOpMode = BW_OPMODE_5G |BW_OPMODE_20MHZ;
                regRATR = RATE_ALL_OFDM_AG;
                regRRSR = RATE_ALL_OFDM_AG;
                break;
        case WIRELESS_MODE_G:
                regBwOpMode = BW_OPMODE_20MHZ;
                regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
                regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
                break;
        case WIRELESS_MODE_AUTO:
#ifdef TO_DO_LIST
                if (Adapter->bInHctTest) {
                        regBwOpMode = BW_OPMODE_20MHZ;
                        regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
                        regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
                }
                else
#endif
                {
                        regBwOpMode = BW_OPMODE_20MHZ;
                        regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
                        regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
                }
                break;
        case WIRELESS_MODE_N_24G:
                // It support CCK rate by default.
                // CCK rate will be filtered out only when associated AP does not support it.
                regBwOpMode = BW_OPMODE_20MHZ;
                regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
                regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
                break;
        case WIRELESS_MODE_N_5G:
                regBwOpMode = BW_OPMODE_5G;
                regRATR = RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
                regRRSR = RATE_ALL_OFDM_AG;
                break;
        }

        write_nic_byte(dev, BW_OPMODE, regBwOpMode);
        ratr_value = regRATR;
        if (priv->rf_type == RF_1T2R)
                ratr_value &= ~(RATE_ALL_OFDM_2SS);
        write_nic_dword(dev, RATR0, ratr_value);
        write_nic_byte(dev, UFWP, 1);
        read_nic_byte(dev, 0x313, &regTmp);
        regRRSR = ((regTmp) << 24) | (regRRSR & 0x00ffffff);
        write_nic_dword(dev, RRSR, regRRSR);

        //
        // Set Retry Limit here
        //
        write_nic_word(dev, RETRY_LIMIT,
                       priv->ShortRetryLimit << RETRY_LIMIT_SHORT_SHIFT |
                       priv->LongRetryLimit << RETRY_LIMIT_LONG_SHIFT);
        // Set Contention Window here

        // Set Tx AGC

        // Set Tx Antenna including Feedback control

        // Set Auto Rate fallback control


}


//InitializeAdapter and PhyCfg
bool rtl8192_adapter_start(struct net_device *dev)
{
        struct r8192_priv *priv = ieee80211_priv(dev);
        u32 dwRegRead = 0;
        bool init_status = true;
        u8 SECR_value = 0x0;
        u8 tmp;
        RT_TRACE(COMP_INIT, "====>%s()\n", __func__);
        priv->Rf_Mode = RF_OP_By_SW_3wire;
        //for ASIC power on sequence
        write_nic_byte_E(dev, 0x5f, 0x80);
        mdelay(50);
        write_nic_byte_E(dev, 0x5f, 0xf0);
        write_nic_byte_E(dev, 0x5d, 0x00);
        write_nic_byte_E(dev, 0x5e, 0x80);
        write_nic_byte(dev, 0x17, 0x37);
        mdelay(10);
        priv->pFirmware->firmware_status = FW_STATUS_0_INIT;
        //config CPUReset Register
        //Firmware Reset or not?
        read_nic_dword(dev, CPU_GEN, &dwRegRead);
        if (priv->pFirmware->firmware_status == FW_STATUS_0_INIT)
                dwRegRead |= CPU_GEN_SYSTEM_RESET; //do nothing here?
        else if (priv->pFirmware->firmware_status == FW_STATUS_5_READY)
                dwRegRead |= CPU_GEN_FIRMWARE_RESET;
        else
                RT_TRACE(COMP_ERR, "ERROR in %s(): undefined firmware state(%d)\n", __func__,   priv->pFirmware->firmware_status);

        write_nic_dword(dev, CPU_GEN, dwRegRead);
        //config BB.
        rtl8192_BBConfig(dev);

        //Loopback mode or not
        priv->LoopbackMode = RTL819xU_NO_LOOPBACK;

        read_nic_dword(dev, CPU_GEN, &dwRegRead);
        if (priv->LoopbackMode == RTL819xU_NO_LOOPBACK)
                dwRegRead = ((dwRegRead & CPU_GEN_NO_LOOPBACK_MSK) | CPU_GEN_NO_LOOPBACK_SET);
        else if (priv->LoopbackMode == RTL819xU_MAC_LOOPBACK)
                dwRegRead |= CPU_CCK_LOOPBACK;
        else
                RT_TRACE(COMP_ERR, "Serious error in %s(): wrong loopback mode setting(%d)\n", __func__,  priv->LoopbackMode);

        write_nic_dword(dev, CPU_GEN, dwRegRead);

        //after reset cpu, we need wait for a seconds to write in register.
        udelay(500);

        //xiong add for new bitfile:usb suspend reset pin set to 1. //do we need?
        read_nic_byte_E(dev, 0x5f, &tmp);
        write_nic_byte_E(dev, 0x5f, tmp|0x20);

        //Set Hardware
        rtl8192_hwconfig(dev);

        //turn on Tx/Rx
        write_nic_byte(dev, CMDR, CR_RE|CR_TE);

        //set IDR0 here
        write_nic_dword(dev, MAC0, ((u32 *)dev->dev_addr)[0]);
        write_nic_word(dev, MAC4, ((u16 *)(dev->dev_addr + 4))[0]);

        //set RCR
        write_nic_dword(dev, RCR, priv->ReceiveConfig);

        //Initialize Number of Reserved Pages in Firmware Queue
        write_nic_dword(dev, RQPN1,  NUM_OF_PAGE_IN_FW_QUEUE_BK << RSVD_FW_QUEUE_PAGE_BK_SHIFT |
                        NUM_OF_PAGE_IN_FW_QUEUE_BE << RSVD_FW_QUEUE_PAGE_BE_SHIFT |