r8192U_core.c

Go to the documentation of this file.

/******************************************************************************
 * Copyright(c) 2008 - 2010 Realtek Corporation. All rights reserved.
 * Linux device driver for RTL8192U
 *
 * Based on the r8187 driver, which is:
 * Copyright 2004-2005 Andrea Merello <[email protected]>, et al.
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of version 2 of the GNU General Public License as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
 *
 * The full GNU General Public License is included in this distribution in the
 * file called LICENSE.
 *
 * Contact Information:
 * Jerry chuang <[email protected]>
 */

#ifndef CONFIG_FORCE_HARD_FLOAT
double __floatsidf (int i) { return i; }
unsigned int __fixunsdfsi (double d) { return d; }
double __adddf3(double a, double b) { return a+b; }
double __addsf3(float a, float b) { return a+b; }
double __subdf3(double a, double b) { return a-b; }
double __extendsfdf2(float a) {return a;}
#endif

#undef LOOP_TEST
#undef DUMP_RX
#undef DUMP_TX
#undef DEBUG_TX_DESC2
#undef RX_DONT_PASS_UL
#undef DEBUG_EPROM
#undef DEBUG_RX_VERBOSE
#undef DUMMY_RX
#undef DEBUG_ZERO_RX
#undef DEBUG_RX_SKB
#undef DEBUG_TX_FRAG
#undef DEBUG_RX_FRAG
#undef DEBUG_TX_FILLDESC
#undef DEBUG_TX
#undef DEBUG_IRQ
#undef DEBUG_RX
#undef DEBUG_RXALLOC
#undef DEBUG_REGISTERS
#undef DEBUG_RING
#undef DEBUG_IRQ_TASKLET
#undef DEBUG_TX_ALLOC
#undef DEBUG_TX_DESC

#define CONFIG_RTL8192_IO_MAP

#include <asm/uaccess.h>
#include "r8192U_hw.h"
#include "r8192U.h"
#include "r8190_rtl8256.h" /* RTL8225 Radio frontend */
#include "r8180_93cx6.h"   /* Card EEPROM */
#include "r8192U_wx.h"
#include "r819xU_phy.h" //added by WB 4.30.2008
#include "r819xU_phyreg.h"
#include "r819xU_cmdpkt.h"
#include "r8192U_dm.h"
//#include "r8192xU_phyreg.h"
#include <linux/usb.h>
#include <linux/slab.h>
// FIXME: check if 2.6.7 is ok

#ifdef CONFIG_RTL8192_PM
#include "r8192_pm.h"
#endif

#include "dot11d.h"
//set here to open your trace code. //WB
u32 rt_global_debug_component = \
            //  COMP_INIT       |
//              COMP_DBG    |
            //  COMP_EPROM      |
//              COMP_PHY    |
            //  COMP_RF     |
//              COMP_FIRMWARE   |
//              COMP_CH     |
            //  COMP_POWER_TRACKING |
//              COMP_RATE   |
            //  COMP_TXAGC  |
        //      COMP_TRACE  |
                COMP_DOWN   |
        //      COMP_RECV   |
        //              COMP_SWBW   |
                COMP_SEC    |
    //          COMP_RESET  |
        //      COMP_SEND   |
            //  COMP_EVENTS |
                COMP_ERR ; //always open err flags on

#define TOTAL_CAM_ENTRY 32
#define CAM_CONTENT_COUNT 8

static const struct usb_device_id rtl8192_usb_id_tbl[] = {
    /* Realtek */
    {USB_DEVICE(0x0bda, 0x8709)},
    /* Corega */
    {USB_DEVICE(0x07aa, 0x0043)},
    /* Belkin */
    {USB_DEVICE(0x050d, 0x805E)},
    /* Sitecom */
    {USB_DEVICE(0x0df6, 0x0031)},
    /* EnGenius */
    {USB_DEVICE(0x1740, 0x9201)},
    /* Dlink */
    {USB_DEVICE(0x2001, 0x3301)},
    /* Zinwell */
    {USB_DEVICE(0x5a57, 0x0290)},
    /* LG */
    {USB_DEVICE(0x043e, 0x7a01)},
    {}
};

MODULE_LICENSE("GPL");
MODULE_VERSION("V 1.1");
MODULE_DEVICE_TABLE(usb, rtl8192_usb_id_tbl);
MODULE_DESCRIPTION("Linux driver for Realtek RTL8192 USB WiFi cards");

static char* ifname = "wlan%d";
static int hwwep = 1;  //default use hw. set 0 to use software security
static int channels = 0x3fff;



module_param(ifname, charp, S_IRUGO|S_IWUSR );
//module_param(hwseqnum,int, S_IRUGO|S_IWUSR);
module_param(hwwep,int, S_IRUGO|S_IWUSR);
module_param(channels,int, S_IRUGO|S_IWUSR);

MODULE_PARM_DESC(ifname," Net interface name, wlan%d=default");
//MODULE_PARM_DESC(hwseqnum," Try to use hardware 802.11 header sequence numbers. Zero=default");
MODULE_PARM_DESC(hwwep," Try to use hardware security support. ");
MODULE_PARM_DESC(channels," Channel bitmask for specific locales. NYI");

static int __devinit rtl8192_usb_probe(struct usb_interface *intf,
             const struct usb_device_id *id);
static void __devexit rtl8192_usb_disconnect(struct usb_interface *intf);


static struct usb_driver rtl8192_usb_driver = {
    .name       = RTL819xU_MODULE_NAME,       /* Driver name   */
    .id_table   = rtl8192_usb_id_tbl,         /* PCI_ID table  */
    .probe      = rtl8192_usb_probe,          /* probe fn      */
    .disconnect = rtl8192_usb_disconnect,     /* remove fn     */
#ifdef CONFIG_RTL8192_PM
    .suspend    = rtl8192_suspend,        /* PM suspend fn */
    .resume     = rtl8192_resume,                 /* PM resume fn  */
#else
    .suspend    = NULL,               /* PM suspend fn */
    .resume         = NULL,               /* PM resume fn  */
#endif
};


typedef struct _CHANNEL_LIST
{
    u8  Channel[32];
    u8  Len;
}CHANNEL_LIST, *PCHANNEL_LIST;

static CHANNEL_LIST ChannelPlan[] = {
    {{1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,149,153,157,161,165},24},         //FCC
    {{1,2,3,4,5,6,7,8,9,10,11},11},                                 //IC
    {{1,2,3,4,5,6,7,8,9,10,11,12,13,36,40,44,48,52,56,60,64},21},   //ETSI
    {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},    //Spain. Change to ETSI.
    {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},   //France. Change to ETSI.
    {{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64},22},    //MKK                   //MKK
    {{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64},22},//MKK1
    {{1,2,3,4,5,6,7,8,9,10,11,12,13},13},   //Israel.
    {{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64},22},            // For 11a , TELEC
    {{1,2,3,4,5,6,7,8,9,10,11,12,13,14,36,40,44,48,52,56,60,64}, 22},    //MIC
    {{1,2,3,4,5,6,7,8,9,10,11,12,13,14},14}                 //For Global Domain. 1-11:active scan, 12-14 passive scan. //+YJ, 080626
};

static void rtl819x_set_channel_map(u8 channel_plan, struct r8192_priv* priv)
{
    int i, max_chan=-1, min_chan=-1;
    struct ieee80211_device* ieee = priv->ieee80211;
    switch (channel_plan)
    {
        case COUNTRY_CODE_FCC:
        case COUNTRY_CODE_IC:
        case COUNTRY_CODE_ETSI:
        case COUNTRY_CODE_SPAIN:
        case COUNTRY_CODE_FRANCE:
        case COUNTRY_CODE_MKK:
        case COUNTRY_CODE_MKK1:
        case COUNTRY_CODE_ISRAEL:
        case COUNTRY_CODE_TELEC:
        case COUNTRY_CODE_MIC:
        {
            Dot11d_Init(ieee);
            ieee->bGlobalDomain = false;
            //actually 8225 & 8256 rf chips only support B,G,24N mode
            if ((priv->rf_chip == RF_8225) || (priv->rf_chip == RF_8256))
            {
                min_chan = 1;
                max_chan = 14;
            }
            else
            {
                RT_TRACE(COMP_ERR, "unknown rf chip, can't set channel map in function:%s()\n", __FUNCTION__);
            }
            if (ChannelPlan[channel_plan].Len != 0){
                // Clear old channel map
                memset(GET_DOT11D_INFO(ieee)->channel_map, 0, sizeof(GET_DOT11D_INFO(ieee)->channel_map));
                // Set new channel map
                for (i=0;i<ChannelPlan[channel_plan].Len;i++)
                {
                    if (ChannelPlan[channel_plan].Channel[i] < min_chan || ChannelPlan[channel_plan].Channel[i] > max_chan)
                    break;
                    GET_DOT11D_INFO(ieee)->channel_map[ChannelPlan[channel_plan].Channel[i]] = 1;
                }
            }
            break;
        }
        case COUNTRY_CODE_GLOBAL_DOMAIN:
        {
            GET_DOT11D_INFO(ieee)->bEnabled = 0;//this flag enabled to follow 11d country IE setting, otherwise, it shall follow global domain settings.
            Dot11d_Reset(ieee);
            ieee->bGlobalDomain = true;
            break;
        }
        default:
            break;
    }
    return;
}


#define     rx_hal_is_cck_rate(_pdrvinfo)\
            (_pdrvinfo->RxRate == DESC90_RATE1M ||\
            _pdrvinfo->RxRate == DESC90_RATE2M ||\
            _pdrvinfo->RxRate == DESC90_RATE5_5M ||\
            _pdrvinfo->RxRate == DESC90_RATE11M) &&\
            !_pdrvinfo->RxHT\


void CamResetAllEntry(struct net_device *dev)
{
    u32 ulcommand = 0;
    //2004/02/11  In static WEP, OID_ADD_KEY or OID_ADD_WEP are set before STA associate to AP.
    // However, ResetKey is called on OID_802_11_INFRASTRUCTURE_MODE and MlmeAssociateRequest
    // In this condition, Cam can not be reset because upper layer will not set this static key again.
    //if(Adapter->EncAlgorithm == WEP_Encryption)
    //      return;
//debug
    //DbgPrint("========================================\n");
    //DbgPrint("                            Call ResetAllEntry                                              \n");
    //DbgPrint("========================================\n\n");
    ulcommand |= BIT31|BIT30;
    write_nic_dword(dev, RWCAM, ulcommand);

}


void write_cam(struct net_device *dev, u8 addr, u32 data)
{
    write_nic_dword(dev, WCAMI, data);
    write_nic_dword(dev, RWCAM, BIT31|BIT16|(addr&0xff) );
}

u32 read_cam(struct net_device *dev, u8 addr)
{
    write_nic_dword(dev, RWCAM, 0x80000000|(addr&0xff) );
    return read_nic_dword(dev, 0xa8);
}

void write_nic_byte_E(struct net_device *dev, int indx, u8 data)
{
    int status;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct usb_device *udev = priv->udev;

    status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
                   RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
                   indx|0xfe00, 0, &data, 1, HZ / 2);

    if (status < 0)
    {
        printk("write_nic_byte_E TimeOut! status:%d\n", status);
    }
}

u8 read_nic_byte_E(struct net_device *dev, int indx)
{
    int status;
    u8 data;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct usb_device *udev = priv->udev;

    status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                   RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                   indx|0xfe00, 0, &data, 1, HZ / 2);

    if (status < 0)
    {
        printk("read_nic_byte_E TimeOut! status:%d\n", status);
    }

    return data;
}
//as 92U has extend page from 4 to 16, so modify functions below.
void write_nic_byte(struct net_device *dev, int indx, u8 data)
{
    int status;

    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct usb_device *udev = priv->udev;

    status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
                   RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
                   (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 1, HZ / 2);

    if (status < 0)
    {
        printk("write_nic_byte TimeOut! status:%d\n", status);
    }


}


void write_nic_word(struct net_device *dev, int indx, u16 data)
{

    int status;

    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct usb_device *udev = priv->udev;

    status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
                   RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
                   (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 2, HZ / 2);

    if (status < 0)
    {
        printk("write_nic_word TimeOut! status:%d\n", status);
    }

}


void write_nic_dword(struct net_device *dev, int indx, u32 data)
{

    int status;

    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct usb_device *udev = priv->udev;

    status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
                   RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
                   (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 4, HZ / 2);


    if (status < 0)
    {
        printk("write_nic_dword TimeOut! status:%d\n", status);
    }

}



u8 read_nic_byte(struct net_device *dev, int indx)
{
    u8 data;
    int status;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct usb_device *udev = priv->udev;

    status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                   RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                   (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 1, HZ / 2);

    if (status < 0)
    {
        printk("read_nic_byte TimeOut! status:%d\n", status);
    }

    return data;
}



u16 read_nic_word(struct net_device *dev, int indx)
{
    u16 data;
    int status;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct usb_device *udev = priv->udev;

    status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                       RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                       (indx&0xff)|0xff00, (indx>>8)&0x0f,
                            &data, 2, HZ / 2);

    if (status < 0)
        printk("read_nic_word TimeOut! status:%d\n", status);

    return data;
}

u16 read_nic_word_E(struct net_device *dev, int indx)
{
    u16 data;
    int status;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct usb_device *udev = priv->udev;

    status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                   RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                       indx|0xfe00, 0, &data, 2, HZ / 2);

    if (status < 0)
        printk("read_nic_word TimeOut! status:%d\n", status);

    return data;
}

u32 read_nic_dword(struct net_device *dev, int indx)
{
    u32 data;
    int status;
    /* int result; */

    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct usb_device *udev = priv->udev;

    status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
                       RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
                    (indx&0xff)|0xff00, (indx>>8)&0x0f,
                            &data, 4, HZ / 2);
    /* if(0 != result) {
     *  printk(KERN_WARNING "read size of data = %d\, date = %d\n",
     *                           result, data);
     * }
     */

    if (status < 0)
        printk("read_nic_dword TimeOut! status:%d\n", status);

    return data;
}

/* u8 read_phy_cck(struct net_device *dev, u8 adr); */
/* u8 read_phy_ofdm(struct net_device *dev, u8 adr); */
/* this might still called in what was the PHY rtl8185/rtl8192 common code
 * plans are to possibility turn it again in one common code...
 */
inline void force_pci_posting(struct net_device *dev)
{
}

static struct net_device_stats *rtl8192_stats(struct net_device *dev);
void rtl8192_commit(struct net_device *dev);
/* void rtl8192_restart(struct net_device *dev); */
void rtl8192_restart(struct work_struct *work);
/* void rtl8192_rq_tx_ack(struct work_struct *work); */
void watch_dog_timer_callback(unsigned long data);

/****************************************************************************
 *   -----------------------------PROCFS STUFF-------------------------
*****************************************************************************
 */

static struct proc_dir_entry *rtl8192_proc;

static int proc_get_stats_ap(char *page, char **start, off_t offset, int count,
                            int *eof, void *data)
{
    struct net_device *dev = data;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct ieee80211_device *ieee = priv->ieee80211;
    struct ieee80211_network *target;

    int len = 0;

    list_for_each_entry(target, &ieee->network_list, list) {

        len += snprintf(page + len, count - len, "%s ", target->ssid);

        if (target->wpa_ie_len > 0 || target->rsn_ie_len > 0)
            len += snprintf(page + len, count - len, "WPA\n");
        else
            len += snprintf(page + len, count - len, "non_WPA\n");
    }

    *eof = 1;
    return len;
}

static int proc_get_registers(char *page, char **start,
              off_t offset, int count,
              int *eof, void *data)
{
    struct net_device *dev = data;
//  struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);

    int len = 0;
    int i,n;

    int max=0xff;

    /* This dump the current register page */
len += snprintf(page + len, count - len,
            "\n####################page 0##################\n ");

    for(n=0;n<=max;)
    {
        //printk( "\nD: %2x> ", n);
        len += snprintf(page + len, count - len,
            "\nD:  %2x > ",n);

        for(i=0;i<16 && n<=max;i++,n++)
        len += snprintf(page + len, count - len,
            "%2x ",read_nic_byte(dev,0x000|n));

        //  printk("%2x ",read_nic_byte(dev,n));
    }
len += snprintf(page + len, count - len,
            "\n####################page 1##################\n ");
    for(n=0;n<=max;)
    {
        //printk( "\nD: %2x> ", n);
        len += snprintf(page + len, count - len,
            "\nD:  %2x > ",n);

        for(i=0;i<16 && n<=max;i++,n++)
        len += snprintf(page + len, count - len,
            "%2x ",read_nic_byte(dev,0x100|n));

        //      printk("%2x ",read_nic_byte(dev,n));
    }
len += snprintf(page + len, count - len,
            "\n####################page 3##################\n ");
    for(n=0;n<=max;)
    {
        //printk( "\nD: %2x> ", n);
        len += snprintf(page + len, count - len,
            "\nD:  %2x > ",n);

        for(i=0;i<16 && n<=max;i++,n++)
        len += snprintf(page + len, count - len,
            "%2x ",read_nic_byte(dev,0x300|n));

        //      printk("%2x ",read_nic_byte(dev,n));
    }


    len += snprintf(page + len, count - len,"\n");
    *eof = 1;
    return len;

}





static int proc_get_stats_tx(char *page, char **start,
              off_t offset, int count,
              int *eof, void *data)
{
    struct net_device *dev = data;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);

    int len = 0;

    len += snprintf(page + len, count - len,
        "TX VI priority ok int: %lu\n"
        "TX VI priority error int: %lu\n"
        "TX VO priority ok int: %lu\n"
        "TX VO priority error int: %lu\n"
        "TX BE priority ok int: %lu\n"
        "TX BE priority error int: %lu\n"
        "TX BK priority ok int: %lu\n"
        "TX BK priority error int: %lu\n"
        "TX MANAGE priority ok int: %lu\n"
        "TX MANAGE priority error int: %lu\n"
        "TX BEACON priority ok int: %lu\n"
        "TX BEACON priority error int: %lu\n"
//      "TX high priority ok int: %lu\n"
//      "TX high priority failed error int: %lu\n"
        "TX queue resume: %lu\n"
        "TX queue stopped?: %d\n"
        "TX fifo overflow: %lu\n"
//      "TX beacon: %lu\n"
        "TX VI queue: %d\n"
        "TX VO queue: %d\n"
        "TX BE queue: %d\n"
        "TX BK queue: %d\n"
//      "TX HW queue: %d\n"
        "TX VI dropped: %lu\n"
        "TX VO dropped: %lu\n"
        "TX BE dropped: %lu\n"
        "TX BK dropped: %lu\n"
        "TX total data packets %lu\n",
//      "TX beacon aborted: %lu\n",
        priv->stats.txviokint,
        priv->stats.txvierr,
        priv->stats.txvookint,
        priv->stats.txvoerr,
        priv->stats.txbeokint,
        priv->stats.txbeerr,
        priv->stats.txbkokint,
        priv->stats.txbkerr,
        priv->stats.txmanageokint,
        priv->stats.txmanageerr,
        priv->stats.txbeaconokint,
        priv->stats.txbeaconerr,
//      priv->stats.txhpokint,
//      priv->stats.txhperr,
        priv->stats.txresumed,
        netif_queue_stopped(dev),
        priv->stats.txoverflow,
//      priv->stats.txbeacon,
        atomic_read(&(priv->tx_pending[VI_PRIORITY])),
        atomic_read(&(priv->tx_pending[VO_PRIORITY])),
        atomic_read(&(priv->tx_pending[BE_PRIORITY])),
        atomic_read(&(priv->tx_pending[BK_PRIORITY])),
//      read_nic_byte(dev, TXFIFOCOUNT),
        priv->stats.txvidrop,
        priv->stats.txvodrop,
        priv->stats.txbedrop,
        priv->stats.txbkdrop,
        priv->stats.txdatapkt
//      priv->stats.txbeaconerr
        );

    *eof = 1;
    return len;
}



static int proc_get_stats_rx(char *page, char **start,
              off_t offset, int count,
              int *eof, void *data)
{
    struct net_device *dev = data;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);

    int len = 0;

    len += snprintf(page + len, count - len,
        "RX packets: %lu\n"
        "RX urb status error: %lu\n"
        "RX invalid urb error: %lu\n",
        priv->stats.rxoktotal,
        priv->stats.rxstaterr,
        priv->stats.rxurberr);

    *eof = 1;
    return len;
}
void rtl8192_proc_module_init(void)
{
    RT_TRACE(COMP_INIT, "Initializing proc filesystem");
    rtl8192_proc = proc_mkdir(RTL819xU_MODULE_NAME, init_net.proc_net);
}


void rtl8192_proc_module_remove(void)
{
    remove_proc_entry(RTL819xU_MODULE_NAME, init_net.proc_net);
}


void rtl8192_proc_remove_one(struct net_device *dev)
{
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);


    if (priv->dir_dev) {
    //  remove_proc_entry("stats-hw", priv->dir_dev);
        remove_proc_entry("stats-tx", priv->dir_dev);
        remove_proc_entry("stats-rx", priv->dir_dev);
    //  remove_proc_entry("stats-ieee", priv->dir_dev);
        remove_proc_entry("stats-ap", priv->dir_dev);
        remove_proc_entry("registers", priv->dir_dev);
    //  remove_proc_entry("cck-registers",priv->dir_dev);
    //  remove_proc_entry("ofdm-registers",priv->dir_dev);
        //remove_proc_entry(dev->name, rtl8192_proc);
        remove_proc_entry("wlan0", rtl8192_proc);
        priv->dir_dev = NULL;
    }
}


void rtl8192_proc_init_one(struct net_device *dev)
{
    struct proc_dir_entry *e;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    priv->dir_dev = proc_mkdir(dev->name, rtl8192_proc);
    if (!priv->dir_dev) {
        RT_TRACE(COMP_ERR, "Unable to initialize /proc/net/rtl8192/%s\n",
              dev->name);
        return;
    }
    e = create_proc_read_entry("stats-rx", S_IFREG | S_IRUGO,
                   priv->dir_dev, proc_get_stats_rx, dev);

    if (!e) {
        RT_TRACE(COMP_ERR,"Unable to initialize "
              "/proc/net/rtl8192/%s/stats-rx\n",
              dev->name);
    }


    e = create_proc_read_entry("stats-tx", S_IFREG | S_IRUGO,
                   priv->dir_dev, proc_get_stats_tx, dev);

    if (!e) {
        RT_TRACE(COMP_ERR, "Unable to initialize "
              "/proc/net/rtl8192/%s/stats-tx\n",
              dev->name);
    }

    e = create_proc_read_entry("stats-ap", S_IFREG | S_IRUGO,
                   priv->dir_dev, proc_get_stats_ap, dev);

    if (!e) {
        RT_TRACE(COMP_ERR, "Unable to initialize "
              "/proc/net/rtl8192/%s/stats-ap\n",
              dev->name);
    }

    e = create_proc_read_entry("registers", S_IFREG | S_IRUGO,
                   priv->dir_dev, proc_get_registers, dev);
    if (!e) {
        RT_TRACE(COMP_ERR, "Unable to initialize "
              "/proc/net/rtl8192/%s/registers\n",
              dev->name);
    }
}
/****************************************************************************
   -----------------------------MISC STUFF-------------------------
*****************************************************************************/

/* this is only for debugging */
void print_buffer(u32 *buffer, int len)
{
    int i;
    u8 *buf =(u8*)buffer;

    printk("ASCII BUFFER DUMP (len: %x):\n",len);

    for(i=0;i<len;i++)
        printk("%c",buf[i]);

    printk("\nBINARY BUFFER DUMP (len: %x):\n",len);

    for(i=0;i<len;i++)
        printk("%x",buf[i]);

    printk("\n");
}

//short check_nic_enough_desc(struct net_device *dev, priority_t priority)
short check_nic_enough_desc(struct net_device *dev,int queue_index)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    int used = atomic_read(&priv->tx_pending[queue_index]);

    return (used < MAX_TX_URB);
}

void tx_timeout(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    //rtl8192_commit(dev);

    schedule_work(&priv->reset_wq);
    //DMESG("TXTIMEOUT");
}


/* this is only for debug */
void dump_eprom(struct net_device *dev)
{
    int i;
    for(i=0; i<63; i++)
        RT_TRACE(COMP_EPROM, "EEPROM addr %x : %x", i, eprom_read(dev,i));
}

/* this is only for debug */
void rtl8192_dump_reg(struct net_device *dev)
{
    int i;
    int n;
    int max=0x1ff;

    RT_TRACE(COMP_PHY, "Dumping NIC register map");

    for(n=0;n<=max;)
    {
        printk( "\nD: %2x> ", n);
        for(i=0;i<16 && n<=max;i++,n++)
            printk("%2x ",read_nic_byte(dev,n));
    }
    printk("\n");
}

/****************************************************************************
      ------------------------------HW STUFF---------------------------
*****************************************************************************/


void rtl8192_set_mode(struct net_device *dev,int mode)
{
    u8 ecmd;
    ecmd=read_nic_byte(dev, EPROM_CMD);
    ecmd=ecmd &~ EPROM_CMD_OPERATING_MODE_MASK;
    ecmd=ecmd | (mode<<EPROM_CMD_OPERATING_MODE_SHIFT);
    ecmd=ecmd &~ (1<<EPROM_CS_SHIFT);
    ecmd=ecmd &~ (1<<EPROM_CK_SHIFT);
    write_nic_byte(dev, EPROM_CMD, ecmd);
}


void rtl8192_update_msr(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    u8 msr;

    msr  = read_nic_byte(dev, MSR);
    msr &= ~ MSR_LINK_MASK;

    /* do not change in link_state != WLAN_LINK_ASSOCIATED.
     * msr must be updated if the state is ASSOCIATING.
     * this is intentional and make sense for ad-hoc and
     * master (see the create BSS/IBSS func)
     */
    if (priv->ieee80211->state == IEEE80211_LINKED){

        if (priv->ieee80211->iw_mode == IW_MODE_INFRA)
            msr |= (MSR_LINK_MANAGED<<MSR_LINK_SHIFT);
        else if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
            msr |= (MSR_LINK_ADHOC<<MSR_LINK_SHIFT);
        else if (priv->ieee80211->iw_mode == IW_MODE_MASTER)
            msr |= (MSR_LINK_MASTER<<MSR_LINK_SHIFT);

    }else
        msr |= (MSR_LINK_NONE<<MSR_LINK_SHIFT);

    write_nic_byte(dev, MSR, msr);
}

void rtl8192_set_chan(struct net_device *dev,short ch)
{
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
//  u32 tx;
    RT_TRACE(COMP_CH, "=====>%s()====ch:%d\n", __FUNCTION__, ch);
    priv->chan=ch;

    /* this hack should avoid frame TX during channel setting*/


//  tx = read_nic_dword(dev,TX_CONF);
//  tx &= ~TX_LOOPBACK_MASK;

#ifndef LOOP_TEST
//  write_nic_dword(dev,TX_CONF, tx |( TX_LOOPBACK_MAC<<TX_LOOPBACK_SHIFT));

    //need to implement rf set channel here WB

    if (priv->rf_set_chan)
    priv->rf_set_chan(dev,priv->chan);
    mdelay(10);
//  write_nic_dword(dev,TX_CONF,tx | (TX_LOOPBACK_NONE<<TX_LOOPBACK_SHIFT));
#endif
}

static void rtl8192_rx_isr(struct urb *urb);
//static void rtl8192_rx_isr(struct urb *rx_urb);

u32 get_rxpacket_shiftbytes_819xusb(struct ieee80211_rx_stats *pstats)
{

#ifdef USB_RX_AGGREGATION_SUPPORT
    if (pstats->bisrxaggrsubframe)
        return (sizeof(rx_desc_819x_usb) + pstats->RxDrvInfoSize
            + pstats->RxBufShift + 8);
    else
#endif
        return (sizeof(rx_desc_819x_usb) + pstats->RxDrvInfoSize
                + pstats->RxBufShift);

}
static int rtl8192_rx_initiate(struct net_device*dev)
{
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct urb *entry;
    struct sk_buff *skb;
    struct rtl8192_rx_info *info;

    /* nomal packet rx procedure */
    while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB) {
        skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
        if (!skb)
            break;
        entry = usb_alloc_urb(0, GFP_KERNEL);
        if (!entry) {
            kfree_skb(skb);
            break;
        }
//      printk("nomal packet IN request!\n");
        usb_fill_bulk_urb(entry, priv->udev,
                  usb_rcvbulkpipe(priv->udev, 3), skb_tail_pointer(skb),
                  RX_URB_SIZE, rtl8192_rx_isr, skb);
        info = (struct rtl8192_rx_info *) skb->cb;
        info->urb = entry;
        info->dev = dev;
        info->out_pipe = 3; //denote rx normal packet queue
        skb_queue_tail(&priv->rx_queue, skb);
        usb_submit_urb(entry, GFP_KERNEL);
    }

    /* command packet rx procedure */
    while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB + 3) {
//      printk("command packet IN request!\n");
        skb = __dev_alloc_skb(RX_URB_SIZE ,GFP_KERNEL);
        if (!skb)
            break;
        entry = usb_alloc_urb(0, GFP_KERNEL);
        if (!entry) {
            kfree_skb(skb);
            break;
        }
        usb_fill_bulk_urb(entry, priv->udev,
                  usb_rcvbulkpipe(priv->udev, 9), skb_tail_pointer(skb),
                  RX_URB_SIZE, rtl8192_rx_isr, skb);
        info = (struct rtl8192_rx_info *) skb->cb;
        info->urb = entry;
        info->dev = dev;
           info->out_pipe = 9; //denote rx cmd packet queue
        skb_queue_tail(&priv->rx_queue, skb);
        usb_submit_urb(entry, GFP_KERNEL);
    }

    return 0;
}

void rtl8192_set_rxconf(struct net_device *dev)
{
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    u32 rxconf;

    rxconf=read_nic_dword(dev,RCR);
    rxconf = rxconf &~ MAC_FILTER_MASK;
    rxconf = rxconf | RCR_AMF;
    rxconf = rxconf | RCR_ADF;
    rxconf = rxconf | RCR_AB;
    rxconf = rxconf | RCR_AM;
    //rxconf = rxconf | RCR_ACF;

    if (dev->flags & IFF_PROMISC) {DMESG ("NIC in promisc mode");}

    if(priv->ieee80211->iw_mode == IW_MODE_MONITOR || \
       dev->flags & IFF_PROMISC){
        rxconf = rxconf | RCR_AAP;
    } /*else if(priv->ieee80211->iw_mode == IW_MODE_MASTER){
        rxconf = rxconf | (1<<ACCEPT_ALLMAC_FRAME_SHIFT);
        rxconf = rxconf | (1<<RX_CHECK_BSSID_SHIFT);
    }*/else{
        rxconf = rxconf | RCR_APM;
        rxconf = rxconf | RCR_CBSSID;
    }


    if(priv->ieee80211->iw_mode == IW_MODE_MONITOR){
        rxconf = rxconf | RCR_AICV;
        rxconf = rxconf | RCR_APWRMGT;
    }

    if( priv->crcmon == 1 && priv->ieee80211->iw_mode == IW_MODE_MONITOR)
        rxconf = rxconf | RCR_ACRC32;


    rxconf = rxconf &~ RX_FIFO_THRESHOLD_MASK;
    rxconf = rxconf | (RX_FIFO_THRESHOLD_NONE<<RX_FIFO_THRESHOLD_SHIFT);
    rxconf = rxconf &~ MAX_RX_DMA_MASK;
    rxconf = rxconf | ((u32)7<<RCR_MXDMA_OFFSET);

//  rxconf = rxconf | (1<<RX_AUTORESETPHY_SHIFT);
    rxconf = rxconf | RCR_ONLYERLPKT;

//  rxconf = rxconf &~ RCR_CS_MASK;
//  rxconf = rxconf | (1<<RCR_CS_SHIFT);

    write_nic_dword(dev, RCR, rxconf);

    #ifdef DEBUG_RX
    DMESG("rxconf: %x %x",rxconf ,read_nic_dword(dev,RCR));
    #endif
}
//wait to be removed
void rtl8192_rx_enable(struct net_device *dev)
{
    //u8 cmd;

    //struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);

    rtl8192_rx_initiate(dev);

//  rtl8192_set_rxconf(dev);
}


void rtl8192_tx_enable(struct net_device *dev)
{
}



void rtl8192_rtx_disable(struct net_device *dev)
{
    u8 cmd;
    struct r8192_priv *priv = ieee80211_priv(dev);
    struct sk_buff *skb;
    struct rtl8192_rx_info *info;

    cmd=read_nic_byte(dev,CMDR);
    write_nic_byte(dev, CMDR, cmd &~ \
        (CR_TE|CR_RE));
    force_pci_posting(dev);
    mdelay(10);

    while ((skb = __skb_dequeue(&priv->rx_queue))) {
        info = (struct rtl8192_rx_info *) skb->cb;
        if (!info->urb)
            continue;

        usb_kill_urb(info->urb);
        kfree_skb(skb);
    }

    if (skb_queue_len(&priv->skb_queue)) {
        printk(KERN_WARNING "skb_queue not empty\n");
    }

    skb_queue_purge(&priv->skb_queue);
    return;
}


int alloc_tx_beacon_desc_ring(struct net_device *dev, int count)
{
    return 0;
}

inline u16 ieeerate2rtlrate(int rate)
{
    switch(rate){
    case 10:
    return 0;
    case 20:
    return 1;
    case 55:
    return 2;
    case 110:
    return 3;
    case 60:
    return 4;
    case 90:
    return 5;
    case 120:
    return 6;
    case 180:
    return 7;
    case 240:
    return 8;
    case 360:
    return 9;
    case 480:
    return 10;
    case 540:
    return 11;
    default:
    return 3;

    }
}
static u16 rtl_rate[] = {10,20,55,110,60,90,120,180,240,360,480,540};
inline u16 rtl8192_rate2rate(short rate)
{
    if (rate >11) return 0;
    return rtl_rate[rate];
}


/* The prototype of rx_isr has changed since one version of Linux Kernel */
static void rtl8192_rx_isr(struct urb *urb)
{
    struct sk_buff *skb = (struct sk_buff *) urb->context;
    struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
    struct net_device *dev = info->dev;
    struct r8192_priv *priv = ieee80211_priv(dev);
    int out_pipe = info->out_pipe;
    int err;
    if(!priv->up)
        return;
    if (unlikely(urb->status)) {
        info->urb = NULL;
        priv->stats.rxstaterr++;
        priv->ieee80211->stats.rx_errors++;
        usb_free_urb(urb);
    //  printk("%s():rx status err\n",__FUNCTION__);
        return;
    }
    skb_unlink(skb, &priv->rx_queue);
    skb_put(skb, urb->actual_length);

    skb_queue_tail(&priv->skb_queue, skb);
    tasklet_schedule(&priv->irq_rx_tasklet);

    skb = dev_alloc_skb(RX_URB_SIZE);
    if (unlikely(!skb)) {
        usb_free_urb(urb);
        printk("%s():can,t alloc skb\n",__FUNCTION__);
        /* TODO check rx queue length and refill *somewhere* */
        return;
    }

    usb_fill_bulk_urb(urb, priv->udev,
            usb_rcvbulkpipe(priv->udev, out_pipe), skb_tail_pointer(skb),
            RX_URB_SIZE, rtl8192_rx_isr, skb);

    info = (struct rtl8192_rx_info *) skb->cb;
    info->urb = urb;
    info->dev = dev;
    info->out_pipe = out_pipe;

    urb->transfer_buffer = skb_tail_pointer(skb);
    urb->context = skb;
    skb_queue_tail(&priv->rx_queue, skb);
    err = usb_submit_urb(urb, GFP_ATOMIC);
    if(err && err != EPERM)
        printk("can not submit rxurb, err is %x,URB status is %x\n",err,urb->status);
}

u32
rtl819xusb_rx_command_packet(
    struct net_device *dev,
    struct ieee80211_rx_stats *pstats
    )
{
    u32 status;

    //RT_TRACE(COMP_RECV, DBG_TRACE, ("---> RxCommandPacketHandle819xUsb()\n"));

    status = cmpk_message_handle_rx(dev, pstats);
    if (status)
    {
        DMESG("rxcommandpackethandle819xusb: It is a command packet\n");
    }
    else
    {
        //RT_TRACE(COMP_RECV, DBG_TRACE, ("RxCommandPacketHandle819xUsb: It is not a command packet\n"));
    }

    //RT_TRACE(COMP_RECV, DBG_TRACE, ("<--- RxCommandPacketHandle819xUsb()\n"));
    return status;
}


void rtl8192_data_hard_stop(struct net_device *dev)
{
    //FIXME !!
}


void rtl8192_data_hard_resume(struct net_device *dev)
{
    // FIXME !!
}

/* this function TX data frames when the ieee80211 stack requires this.
 * It checks also if we need to stop the ieee tx queue, eventually do it
 */
void rtl8192_hard_data_xmit(struct sk_buff *skb, struct net_device *dev, int rate)
{
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    int ret;
    unsigned long flags;
    cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
    u8 queue_index = tcb_desc->queue_index;

    /* shall not be referred by command packet */
    assert(queue_index != TXCMD_QUEUE);

    spin_lock_irqsave(&priv->tx_lock,flags);

    memcpy((unsigned char *)(skb->cb),&dev,sizeof(dev));
//  tcb_desc->RATRIndex = 7;
//  tcb_desc->bTxDisableRateFallBack = 1;
//  tcb_desc->bTxUseDriverAssingedRate = 1;
    tcb_desc->bTxEnableFwCalcDur = 1;
    skb_push(skb, priv->ieee80211->tx_headroom);
    ret = rtl8192_tx(dev, skb);

    //priv->ieee80211->stats.tx_bytes+=(skb->len - priv->ieee80211->tx_headroom);
    //priv->ieee80211->stats.tx_packets++;

    spin_unlock_irqrestore(&priv->tx_lock,flags);

//  return ret;
    return;
}

/* This is a rough attempt to TX a frame
 * This is called by the ieee 80211 stack to TX management frames.
 * If the ring is full packet are dropped (for data frame the queue
 * is stopped before this can happen).
 */
int rtl8192_hard_start_xmit(struct sk_buff *skb,struct net_device *dev)
{
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    int ret;
    unsigned long flags;
    cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
    u8 queue_index = tcb_desc->queue_index;


    spin_lock_irqsave(&priv->tx_lock,flags);

    memcpy((unsigned char *)(skb->cb),&dev,sizeof(dev));
    if(queue_index == TXCMD_QUEUE) {
        skb_push(skb, USB_HWDESC_HEADER_LEN);
        rtl819xU_tx_cmd(dev, skb);
        ret = 1;
        spin_unlock_irqrestore(&priv->tx_lock,flags);
        return ret;
    } else {
        skb_push(skb, priv->ieee80211->tx_headroom);
        ret = rtl8192_tx(dev, skb);
    }

    spin_unlock_irqrestore(&priv->tx_lock,flags);

    return ret;
}


void rtl8192_try_wake_queue(struct net_device *dev, int pri);

#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
u16 DrvAggr_PaddingAdd(struct net_device *dev, struct sk_buff *skb)
{
    u16     PaddingNum =  256 - ((skb->len + TX_PACKET_DRVAGGR_SUBFRAME_SHIFT_BYTES) % 256);
    return  (PaddingNum&0xff);
}

u8 MRateToHwRate8190Pci(u8 rate);
u8 QueryIsShort(u8 TxHT, u8 TxRate, cb_desc *tcb_desc);
u8 MapHwQueueToFirmwareQueue(u8 QueueID);
struct sk_buff *DrvAggr_Aggregation(struct net_device *dev, struct ieee80211_drv_agg_txb *pSendList)
{
    struct ieee80211_device *ieee = netdev_priv(dev);
    struct r8192_priv *priv = ieee80211_priv(dev);
    cb_desc     *tcb_desc = NULL;
    u8      i;
    u32     TotalLength;
    struct sk_buff  *skb;
    struct sk_buff  *agg_skb;
    tx_desc_819x_usb_aggr_subframe *tx_agg_desc = NULL;
    tx_fwinfo_819x_usb         *tx_fwinfo = NULL;

    //
    // Local variable initialization.
    //
    /* first skb initialization */
    skb = pSendList->tx_agg_frames[0];
    TotalLength = skb->len;

    /* Get the total aggregation length including the padding space and
     * sub frame header.
     */
    for(i = 1; i < pSendList->nr_drv_agg_frames; i++) {
        TotalLength += DrvAggr_PaddingAdd(dev, skb);
        skb = pSendList->tx_agg_frames[i];
        TotalLength += (skb->len + TX_PACKET_DRVAGGR_SUBFRAME_SHIFT_BYTES);
    }

    /* allocate skb to contain the aggregated packets */
    agg_skb = dev_alloc_skb(TotalLength + ieee->tx_headroom);
    memset(agg_skb->data, 0, agg_skb->len);
    skb_reserve(agg_skb, ieee->tx_headroom);

//  RT_DEBUG_DATA(COMP_SEND, skb->cb, sizeof(skb->cb));
    /* reserve info for first subframe Tx descriptor to be set in the tx function */
    skb = pSendList->tx_agg_frames[0];
    tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
    tcb_desc->drv_agg_enable = 1;
    tcb_desc->pkt_size = skb->len;
    tcb_desc->DrvAggrNum = pSendList->nr_drv_agg_frames;
    printk("DrvAggNum = %d\n", tcb_desc->DrvAggrNum);
//  RT_DEBUG_DATA(COMP_SEND, skb->cb, sizeof(skb->cb));
//  printk("========>skb->data ======> \n");
//  RT_DEBUG_DATA(COMP_SEND, skb->data, skb->len);
    memcpy(agg_skb->cb, skb->cb, sizeof(skb->cb));
    memcpy(skb_put(agg_skb,skb->len),skb->data,skb->len);

    for(i = 1; i < pSendList->nr_drv_agg_frames; i++) {
        /* push the next sub frame to be 256 byte aline */
        skb_put(agg_skb,DrvAggr_PaddingAdd(dev,skb));

        /* Subframe drv Tx descriptor and firmware info setting */
        skb = pSendList->tx_agg_frames[i];
        tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
        tx_agg_desc = (tx_desc_819x_usb_aggr_subframe *)agg_skb->tail;
        tx_fwinfo = (tx_fwinfo_819x_usb *)(agg_skb->tail + sizeof(tx_desc_819x_usb_aggr_subframe));

        memset(tx_fwinfo,0,sizeof(tx_fwinfo_819x_usb));
        /* DWORD 0 */
        tx_fwinfo->TxHT = (tcb_desc->data_rate&0x80)?1:0;
        tx_fwinfo->TxRate = MRateToHwRate8190Pci(tcb_desc->data_rate);
        tx_fwinfo->EnableCPUDur = tcb_desc->bTxEnableFwCalcDur;
        tx_fwinfo->Short = QueryIsShort(tx_fwinfo->TxHT, tx_fwinfo->TxRate, tcb_desc);
        if(tcb_desc->bAMPDUEnable) {//AMPDU enabled
            tx_fwinfo->AllowAggregation = 1;
            /* DWORD 1 */
            tx_fwinfo->RxMF = tcb_desc->ampdu_factor;
            tx_fwinfo->RxAMD = tcb_desc->ampdu_density&0x07;//ampdudensity
        } else {
            tx_fwinfo->AllowAggregation = 0;
            /* DWORD 1 */
            tx_fwinfo->RxMF = 0;
            tx_fwinfo->RxAMD = 0;
        }

        /* Protection mode related */
        tx_fwinfo->RtsEnable = (tcb_desc->bRTSEnable)?1:0;
        tx_fwinfo->CtsEnable = (tcb_desc->bCTSEnable)?1:0;
        tx_fwinfo->RtsSTBC = (tcb_desc->bRTSSTBC)?1:0;
        tx_fwinfo->RtsHT = (tcb_desc->rts_rate&0x80)?1:0;
        tx_fwinfo->RtsRate =  MRateToHwRate8190Pci((u8)tcb_desc->rts_rate);
        tx_fwinfo->RtsSubcarrier = (tx_fwinfo->RtsHT==0)?(tcb_desc->RTSSC):0;
        tx_fwinfo->RtsBandwidth = (tx_fwinfo->RtsHT==1)?((tcb_desc->bRTSBW)?1:0):0;
        tx_fwinfo->RtsShort = (tx_fwinfo->RtsHT==0)?(tcb_desc->bRTSUseShortPreamble?1:0):\
                      (tcb_desc->bRTSUseShortGI?1:0);

        /* Set Bandwidth and sub-channel settings. */
        if(priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20_40)
        {
            if(tcb_desc->bPacketBW) {
                tx_fwinfo->TxBandwidth = 1;
                tx_fwinfo->TxSubCarrier = 0;    //By SD3's Jerry suggestion, use duplicated mode
            } else {
                tx_fwinfo->TxBandwidth = 0;
                tx_fwinfo->TxSubCarrier = priv->nCur40MhzPrimeSC;
            }
        } else {
            tx_fwinfo->TxBandwidth = 0;
            tx_fwinfo->TxSubCarrier = 0;
        }

        /* Fill Tx descriptor */
        memset(tx_agg_desc, 0, sizeof(tx_desc_819x_usb_aggr_subframe));
        /* DWORD 0 */
        //tx_agg_desc->LINIP = 0;
        //tx_agg_desc->CmdInit = 1;
        tx_agg_desc->Offset =  sizeof(tx_fwinfo_819x_usb) + 8;
        /* already raw data, need not to subtract header length */
        tx_agg_desc->PktSize = skb->len & 0xffff;

        /*DWORD 1*/
        tx_agg_desc->SecCAMID= 0;
        tx_agg_desc->RATid = tcb_desc->RATRIndex;
        {
            //MPDUOverhead = 0;
            tx_agg_desc->NoEnc = 1;
        }
        tx_agg_desc->SecType = 0x0;

        if (tcb_desc->bHwSec) {
            switch (priv->ieee80211->pairwise_key_type)
            {
                case KEY_TYPE_WEP40:
                case KEY_TYPE_WEP104:
                    tx_agg_desc->SecType = 0x1;
                    tx_agg_desc->NoEnc = 0;
                    break;
                case KEY_TYPE_TKIP:
                    tx_agg_desc->SecType = 0x2;
                    tx_agg_desc->NoEnc = 0;
                    break;
                case KEY_TYPE_CCMP:
                    tx_agg_desc->SecType = 0x3;
                    tx_agg_desc->NoEnc = 0;
                    break;
                case KEY_TYPE_NA:
                    tx_agg_desc->SecType = 0x0;
                    tx_agg_desc->NoEnc = 1;
                    break;
            }
        }

        tx_agg_desc->QueueSelect = MapHwQueueToFirmwareQueue(tcb_desc->queue_index);
        tx_agg_desc->TxFWInfoSize =  sizeof(tx_fwinfo_819x_usb);

        tx_agg_desc->DISFB = tcb_desc->bTxDisableRateFallBack;
        tx_agg_desc->USERATE = tcb_desc->bTxUseDriverAssingedRate;

        tx_agg_desc->OWN = 1;

        //DWORD 2
        /* According windows driver, it seems that there no need to fill this field */
        //tx_agg_desc->TxBufferSize= (u32)(skb->len - USB_HWDESC_HEADER_LEN);

        /* to fill next packet */
        skb_put(agg_skb,TX_PACKET_DRVAGGR_SUBFRAME_SHIFT_BYTES);
        memcpy(skb_put(agg_skb,skb->len),skb->data,skb->len);
    }

    for(i = 0; i < pSendList->nr_drv_agg_frames; i++) {
        dev_kfree_skb_any(pSendList->tx_agg_frames[i]);
    }

    return agg_skb;
}

/* NOTE:
    This function return a list of PTCB which is proper to be aggregate with the input TCB.
    If no proper TCB is found to do aggregation, SendList will only contain the input TCB.
*/
u8 DrvAggr_GetAggregatibleList(struct net_device *dev, struct sk_buff *skb,
        struct ieee80211_drv_agg_txb *pSendList)
{
    struct ieee80211_device *ieee = netdev_priv(dev);
    PRT_HIGH_THROUGHPUT pHTInfo = ieee->pHTInfo;
    u16     nMaxAggrNum = pHTInfo->UsbTxAggrNum;
    cb_desc     *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
    u8      QueueID = tcb_desc->queue_index;

    do {
        pSendList->tx_agg_frames[pSendList->nr_drv_agg_frames++] = skb;
        if(pSendList->nr_drv_agg_frames >= nMaxAggrNum) {
            break;
        }

    } while((skb = skb_dequeue(&ieee->skb_drv_aggQ[QueueID])));

    RT_TRACE(COMP_AMSDU, "DrvAggr_GetAggregatibleList, nAggrTcbNum = %d \n", pSendList->nr_drv_agg_frames);
    return pSendList->nr_drv_agg_frames;
}
#endif

static void rtl8192_tx_isr(struct urb *tx_urb)
{
    struct sk_buff *skb = (struct sk_buff*)tx_urb->context;
    struct net_device *dev = NULL;
    struct r8192_priv *priv = NULL;
    cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
    u8  queue_index = tcb_desc->queue_index;
//  bool bToSend0Byte;
//  u16 BufLen = skb->len;

    memcpy(&dev,(struct net_device*)(skb->cb),sizeof(struct net_device*));
    priv = ieee80211_priv(dev);

    if(tcb_desc->queue_index != TXCMD_QUEUE) {
        if(tx_urb->status == 0) {
            dev->trans_start = jiffies;
            // Act as station mode, destination shall be unicast address.
            //priv->ieee80211->stats.tx_bytes+=(skb->len - priv->ieee80211->tx_headroom);
            //priv->ieee80211->stats.tx_packets++;
            priv->stats.txoktotal++;
            priv->ieee80211->LinkDetectInfo.NumTxOkInPeriod++;
            priv->stats.txbytesunicast += (skb->len - priv->ieee80211->tx_headroom);
        } else {
            priv->ieee80211->stats.tx_errors++;
            //priv->stats.txmanageerr++;
            /* TODO */
        }
    }

    /* free skb and tx_urb */
    if(skb != NULL) {
        dev_kfree_skb_any(skb);
        usb_free_urb(tx_urb);
        atomic_dec(&priv->tx_pending[queue_index]);
    }

    {
        //
        // Handle HW Beacon:
        // We had transfer our beacon frame to host controller at this moment.
        //
        //
        // Caution:
        // Handling the wait queue of command packets.
        // For Tx command packets, we must not do TCB fragment because it is not handled right now.
        // We must cut the packets to match the size of TX_CMD_PKT before we send it.
        //

        /* Handle MPDU in wait queue. */
        if(queue_index != BEACON_QUEUE) {
            /* Don't send data frame during scanning.*/
            if((skb_queue_len(&priv->ieee80211->skb_waitQ[queue_index]) != 0)&&\
                    (!(priv->ieee80211->queue_stop))) {
                if(NULL != (skb = skb_dequeue(&(priv->ieee80211->skb_waitQ[queue_index]))))
                    priv->ieee80211->softmac_hard_start_xmit(skb, dev);

                return; //modified by david to avoid further processing AMSDU
            }
#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
            else if ((skb_queue_len(&priv->ieee80211->skb_drv_aggQ[queue_index])!= 0)&&\
                (!(priv->ieee80211->queue_stop))) {
                // Tx Driver Aggregation process
                /* The driver will aggregation the packets according to the following stats
                 * 1. check whether there's tx irq available, for it's a completion return
                 *    function, it should contain enough tx irq;
                 * 2. check packet type;
                 * 3. initialize sendlist, check whether the to-be send packet no greater than 1
                 * 4. aggregates the packets, and fill firmware info and tx desc into it, etc.
                 * 5. check whether the packet could be sent, otherwise just insert into wait head
                 * */
                skb = skb_dequeue(&priv->ieee80211->skb_drv_aggQ[queue_index]);
                if(!check_nic_enough_desc(dev, queue_index)) {
                    skb_queue_head(&(priv->ieee80211->skb_drv_aggQ[queue_index]), skb);
                    return;
                }

                {
                    /*TODO*/
                    /*
                    u8* pHeader = skb->data;

                    if(IsMgntQosData(pHeader) ||
                        IsMgntQData_Ack(pHeader) ||
                        IsMgntQData_Poll(pHeader) ||
                        IsMgntQData_Poll_Ack(pHeader)
                      )
                    */
                    {
                        struct ieee80211_drv_agg_txb SendList;

                        memset(&SendList, 0, sizeof(struct ieee80211_drv_agg_txb));
                        if(DrvAggr_GetAggregatibleList(dev, skb, &SendList) > 1) {
                            skb = DrvAggr_Aggregation(dev, &SendList);

                        }
                    }
                    priv->ieee80211->softmac_hard_start_xmit(skb, dev);
                }
            }
#endif
        }
    }

}

void rtl8192_beacon_stop(struct net_device *dev)
{
    u8 msr, msrm, msr2;
    struct r8192_priv *priv = ieee80211_priv(dev);

    msr  = read_nic_byte(dev, MSR);
    msrm = msr & MSR_LINK_MASK;
    msr2 = msr & ~MSR_LINK_MASK;

    if(NIC_8192U == priv->card_8192) {
        usb_kill_urb(priv->rx_urb[MAX_RX_URB]);
    }
    if ((msrm == (MSR_LINK_ADHOC<<MSR_LINK_SHIFT) ||
        (msrm == (MSR_LINK_MASTER<<MSR_LINK_SHIFT)))){
        write_nic_byte(dev, MSR, msr2 | MSR_LINK_NONE);
        write_nic_byte(dev, MSR, msr);
    }
}

void rtl8192_config_rate(struct net_device* dev, u16* rate_config)
{
     struct r8192_priv *priv = ieee80211_priv(dev);
     struct ieee80211_network *net;
     u8 i=0, basic_rate = 0;
     net = & priv->ieee80211->current_network;

     for (i=0; i<net->rates_len; i++)
     {
         basic_rate = net->rates[i]&0x7f;
         switch(basic_rate)
         {
             case MGN_1M:   *rate_config |= RRSR_1M;    break;
             case MGN_2M:   *rate_config |= RRSR_2M;    break;
             case MGN_5_5M: *rate_config |= RRSR_5_5M;  break;
             case MGN_11M:  *rate_config |= RRSR_11M;   break;
             case MGN_6M:   *rate_config |= RRSR_6M;    break;
             case MGN_9M:   *rate_config |= RRSR_9M;    break;
             case MGN_12M:  *rate_config |= RRSR_12M;   break;
             case MGN_18M:  *rate_config |= RRSR_18M;   break;
             case MGN_24M:  *rate_config |= RRSR_24M;   break;
             case MGN_36M:  *rate_config |= RRSR_36M;   break;
             case MGN_48M:  *rate_config |= RRSR_48M;   break;
             case MGN_54M:  *rate_config |= RRSR_54M;   break;
         }
     }
     for (i=0; i<net->rates_ex_len; i++)
     {
         basic_rate = net->rates_ex[i]&0x7f;
         switch(basic_rate)
         {
             case MGN_1M:   *rate_config |= RRSR_1M;    break;
             case MGN_2M:   *rate_config |= RRSR_2M;    break;
             case MGN_5_5M: *rate_config |= RRSR_5_5M;  break;
             case MGN_11M:  *rate_config |= RRSR_11M;   break;
             case MGN_6M:   *rate_config |= RRSR_6M;    break;
             case MGN_9M:   *rate_config |= RRSR_9M;    break;
             case MGN_12M:  *rate_config |= RRSR_12M;   break;
             case MGN_18M:  *rate_config |= RRSR_18M;   break;
             case MGN_24M:  *rate_config |= RRSR_24M;   break;
             case MGN_36M:  *rate_config |= RRSR_36M;   break;
             case MGN_48M:  *rate_config |= RRSR_48M;   break;
             case MGN_54M:  *rate_config |= RRSR_54M;   break;
         }
     }
}


#define SHORT_SLOT_TIME 9
#define NON_SHORT_SLOT_TIME 20

void rtl8192_update_cap(struct net_device* dev, u16 cap)
{
    u32 tmp = 0;
    struct r8192_priv *priv = ieee80211_priv(dev);
    struct ieee80211_network *net = &priv->ieee80211->current_network;
    priv->short_preamble = cap & WLAN_CAPABILITY_SHORT_PREAMBLE;
    tmp = priv->basic_rate;
    if (priv->short_preamble)
        tmp |= BRSR_AckShortPmb;
    write_nic_dword(dev, RRSR, tmp);

    if (net->mode & (IEEE_G|IEEE_N_24G))
    {
        u8 slot_time = 0;
        if ((cap & WLAN_CAPABILITY_SHORT_SLOT)&&(!priv->ieee80211->pHTInfo->bCurrentRT2RTLongSlotTime))
        {//short slot time
            slot_time = SHORT_SLOT_TIME;
        }
        else //long slot time
            slot_time = NON_SHORT_SLOT_TIME;
        priv->slot_time = slot_time;
        write_nic_byte(dev, SLOT_TIME, slot_time);
    }

}
void rtl8192_net_update(struct net_device *dev)
{

    struct r8192_priv *priv = ieee80211_priv(dev);
    struct ieee80211_network *net;
    u16 BcnTimeCfg = 0, BcnCW = 6, BcnIFS = 0xf;
    u16 rate_config = 0;
    net = & priv->ieee80211->current_network;

    rtl8192_config_rate(dev, &rate_config);
    priv->basic_rate = rate_config &= 0x15f;

    write_nic_dword(dev,BSSIDR,((u32*)net->bssid)[0]);
    write_nic_word(dev,BSSIDR+4,((u16*)net->bssid)[2]);
    //for(i=0;i<ETH_ALEN;i++)
    //  write_nic_byte(dev,BSSID+i,net->bssid[i]);

    rtl8192_update_msr(dev);
//  rtl8192_update_cap(dev, net->capability);
    if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
    {
    write_nic_word(dev, ATIMWND, 2);
    write_nic_word(dev, BCN_DMATIME, 1023);
    write_nic_word(dev, BCN_INTERVAL, net->beacon_interval);
//  write_nic_word(dev, BcnIntTime, 100);
    write_nic_word(dev, BCN_DRV_EARLY_INT, 1);
    write_nic_byte(dev, BCN_ERR_THRESH, 100);
        BcnTimeCfg |= (BcnCW<<BCN_TCFG_CW_SHIFT);
    // TODO: BcnIFS may required to be changed on ASIC
        BcnTimeCfg |= BcnIFS<<BCN_TCFG_IFS;

    write_nic_word(dev, BCN_TCFG, BcnTimeCfg);
    }



}

//temporary hw beacon is not used any more.
//open it when necessary
void rtl819xusb_beacon_tx(struct net_device *dev,u16  tx_rate)
{

}
inline u8 rtl8192_IsWirelessBMode(u16 rate)
{
    if( ((rate <= 110) && (rate != 60) && (rate != 90)) || (rate == 220) )
        return 1;
    else return 0;
}

u16 N_DBPSOfRate(u16 DataRate);

u16 ComputeTxTime(
    u16     FrameLength,
    u16     DataRate,
    u8      bManagementFrame,
    u8      bShortPreamble
)
{
    u16 FrameTime;
    u16 N_DBPS;
    u16 Ceiling;

    if( rtl8192_IsWirelessBMode(DataRate) )
    {
        if( bManagementFrame || !bShortPreamble || DataRate == 10 )
        {   // long preamble
            FrameTime = (u16)(144+48+(FrameLength*8/(DataRate/10)));
        }
        else
        {   // Short preamble
            FrameTime = (u16)(72+24+(FrameLength*8/(DataRate/10)));
        }
        if( ( FrameLength*8 % (DataRate/10) ) != 0 ) //Get the Ceilling
                FrameTime ++;
    } else {    //802.11g DSSS-OFDM PLCP length field calculation.
        N_DBPS = N_DBPSOfRate(DataRate);
        Ceiling = (16 + 8*FrameLength + 6) / N_DBPS
                + (((16 + 8*FrameLength + 6) % N_DBPS) ? 1 : 0);
        FrameTime = (u16)(16 + 4 + 4*Ceiling + 6);
    }
    return FrameTime;
}

u16 N_DBPSOfRate(u16 DataRate)
{
     u16 N_DBPS = 24;

     switch(DataRate)
     {
     case 60:
      N_DBPS = 24;
      break;

     case 90:
      N_DBPS = 36;
      break;

     case 120:
      N_DBPS = 48;
      break;

     case 180:
      N_DBPS = 72;
      break;

     case 240:
      N_DBPS = 96;
      break;

     case 360:
      N_DBPS = 144;
      break;

     case 480:
      N_DBPS = 192;
      break;

     case 540:
      N_DBPS = 216;
      break;

     default:
      break;
     }

     return N_DBPS;
}

void rtl819xU_cmd_isr(struct urb *tx_cmd_urb, struct pt_regs *regs)
{
    usb_free_urb(tx_cmd_urb);
}

unsigned int txqueue2outpipe(struct r8192_priv* priv,unsigned int tx_queue) {

    if(tx_queue >= 9)
    {
        RT_TRACE(COMP_ERR,"%s():Unknown queue ID!!!\n",__FUNCTION__);
        return 0x04;
    }
    return priv->txqueue_to_outpipemap[tx_queue];
}

short rtl819xU_tx_cmd(struct net_device *dev, struct sk_buff *skb)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    //u8            *tx;
    int         status;
    struct urb      *tx_urb;
    //int           urb_buf_len;
    unsigned int        idx_pipe;
    tx_desc_cmd_819x_usb *pdesc = (tx_desc_cmd_819x_usb *)skb->data;
    cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
    u8 queue_index = tcb_desc->queue_index;

    //printk("\n %s::queue_index = %d\n",__FUNCTION__, queue_index);
    atomic_inc(&priv->tx_pending[queue_index]);
    tx_urb = usb_alloc_urb(0,GFP_ATOMIC);
    if(!tx_urb){
        dev_kfree_skb(skb);
        return -ENOMEM;
    }

    memset(pdesc, 0, USB_HWDESC_HEADER_LEN);
    /* Tx descriptor ought to be set according to the skb->cb */
    pdesc->FirstSeg = 1;//bFirstSeg;
    pdesc->LastSeg = 1;//bLastSeg;
    pdesc->CmdInit = tcb_desc->bCmdOrInit;
    pdesc->TxBufferSize = tcb_desc->txbuf_size;
    pdesc->OWN = 1;
    pdesc->LINIP = tcb_desc->bLastIniPkt;

    //----------------------------------------------------------------------------
    // Fill up USB_OUT_CONTEXT.
    //----------------------------------------------------------------------------
    // Get index to out pipe from specified QueueID.
#ifndef USE_ONE_PIPE
    idx_pipe = txqueue2outpipe(priv,queue_index);
#else
    idx_pipe = 0x04;
#endif
#ifdef JOHN_DUMP_TXDESC
    int i;
    printk("<Tx descriptor>--rate %x---",rate);
    for (i = 0; i < 8; i++)
        printk("%8x ", tx[i]);
    printk("\n");
#endif
    usb_fill_bulk_urb(tx_urb,priv->udev, usb_sndbulkpipe(priv->udev,idx_pipe), \
            skb->data, skb->len, rtl8192_tx_isr, skb);

    status = usb_submit_urb(tx_urb, GFP_ATOMIC);

    if (!status){
        return 0;
    }else{
        DMESGE("Error TX CMD URB, error %d",
                status);
        return -1;
    }
}

/*
 * Mapping Software/Hardware descriptor queue id to "Queue Select Field"
 * in TxFwInfo data structure
 * 2006.10.30 by Emily
 *
 * \param QUEUEID       Software Queue
*/
u8 MapHwQueueToFirmwareQueue(u8 QueueID)
{
    u8 QueueSelect = 0x0;       //defualt set to

    switch(QueueID) {
        case BE_QUEUE:
            QueueSelect = QSLT_BE;  //or QSelect = pTcb->priority;
            break;

        case BK_QUEUE:
            QueueSelect = QSLT_BK;  //or QSelect = pTcb->priority;
            break;

        case VO_QUEUE:
            QueueSelect = QSLT_VO;  //or QSelect = pTcb->priority;
            break;

        case VI_QUEUE:
            QueueSelect = QSLT_VI;  //or QSelect = pTcb->priority;
            break;
        case MGNT_QUEUE:
            QueueSelect = QSLT_MGNT;
            break;

        case BEACON_QUEUE:
            QueueSelect = QSLT_BEACON;
            break;

            // TODO: 2006.10.30 mark other queue selection until we verify it is OK
            // TODO: Remove Assertions
//#if (RTL819X_FPGA_VER & RTL819X_FPGA_GUANGAN_070502)
        case TXCMD_QUEUE:
            QueueSelect = QSLT_CMD;
            break;
//#endif
        case HIGH_QUEUE:
            QueueSelect = QSLT_HIGH;
            break;

        default:
            RT_TRACE(COMP_ERR, "TransmitTCB(): Impossible Queue Selection: %d \n", QueueID);
            break;
    }
    return QueueSelect;
}

u8 MRateToHwRate8190Pci(u8 rate)
{
    u8  ret = DESC90_RATE1M;

    switch(rate) {
        case MGN_1M:    ret = DESC90_RATE1M;    break;
        case MGN_2M:    ret = DESC90_RATE2M;    break;
        case MGN_5_5M:  ret = DESC90_RATE5_5M;  break;
        case MGN_11M:   ret = DESC90_RATE11M;   break;
        case MGN_6M:    ret = DESC90_RATE6M;    break;
        case MGN_9M:    ret = DESC90_RATE9M;    break;
        case MGN_12M:   ret = DESC90_RATE12M;   break;
        case MGN_18M:   ret = DESC90_RATE18M;   break;
        case MGN_24M:   ret = DESC90_RATE24M;   break;
        case MGN_36M:   ret = DESC90_RATE36M;   break;
        case MGN_48M:   ret = DESC90_RATE48M;   break;
        case MGN_54M:   ret = DESC90_RATE54M;   break;

        // HT rate since here
        case MGN_MCS0:  ret = DESC90_RATEMCS0;  break;
        case MGN_MCS1:  ret = DESC90_RATEMCS1;  break;
        case MGN_MCS2:  ret = DESC90_RATEMCS2;  break;
        case MGN_MCS3:  ret = DESC90_RATEMCS3;  break;
        case MGN_MCS4:  ret = DESC90_RATEMCS4;  break;
        case MGN_MCS5:  ret = DESC90_RATEMCS5;  break;
        case MGN_MCS6:  ret = DESC90_RATEMCS6;  break;
        case MGN_MCS7:  ret = DESC90_RATEMCS7;  break;
        case MGN_MCS8:  ret = DESC90_RATEMCS8;  break;
        case MGN_MCS9:  ret = DESC90_RATEMCS9;  break;
        case MGN_MCS10: ret = DESC90_RATEMCS10; break;
        case MGN_MCS11: ret = DESC90_RATEMCS11; break;
        case MGN_MCS12: ret = DESC90_RATEMCS12; break;
        case MGN_MCS13: ret = DESC90_RATEMCS13; break;
        case MGN_MCS14: ret = DESC90_RATEMCS14; break;
        case MGN_MCS15: ret = DESC90_RATEMCS15; break;
        case (0x80|0x20): ret = DESC90_RATEMCS32; break;

        default:       break;
    }
    return ret;
}


u8 QueryIsShort(u8 TxHT, u8 TxRate, cb_desc *tcb_desc)
{
    u8   tmp_Short;

    tmp_Short = (TxHT==1)?((tcb_desc->bUseShortGI)?1:0):((tcb_desc->bUseShortPreamble)?1:0);

    if(TxHT==1 && TxRate != DESC90_RATEMCS15)
        tmp_Short = 0;

    return tmp_Short;
}

static void tx_zero_isr(struct urb *tx_urb)
{
    return;
}

/*
 * The tx procedure is just as following,
 * skb->cb will contain all the following information,
 * priority, morefrag, rate, &dev.
 * */
short rtl8192_tx(struct net_device *dev, struct sk_buff* skb)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
    tx_desc_819x_usb *tx_desc = (tx_desc_819x_usb *)skb->data;
    tx_fwinfo_819x_usb *tx_fwinfo = (tx_fwinfo_819x_usb *)(skb->data + USB_HWDESC_HEADER_LEN);
    struct usb_device *udev = priv->udev;
    int pend;
    int status;
    struct urb *tx_urb = NULL, *tx_urb_zero = NULL;
    //int urb_len;
    unsigned int idx_pipe;
//  RT_DEBUG_DATA(COMP_SEND, tcb_desc, sizeof(cb_desc));
//  printk("=============> %s\n", __FUNCTION__);
    pend = atomic_read(&priv->tx_pending[tcb_desc->queue_index]);
    /* we are locked here so the two atomic_read and inc are executed
     * without interleaves
     * !!! For debug purpose
     */
    if( pend > MAX_TX_URB){
        printk("To discard skb packet!\n");
        dev_kfree_skb_any(skb);
        return -1;
    }

    tx_urb = usb_alloc_urb(0,GFP_ATOMIC);
    if(!tx_urb){
        dev_kfree_skb_any(skb);
        return -ENOMEM;
    }

    /* Fill Tx firmware info */
    memset(tx_fwinfo,0,sizeof(tx_fwinfo_819x_usb));
    /* DWORD 0 */
    tx_fwinfo->TxHT = (tcb_desc->data_rate&0x80)?1:0;
    tx_fwinfo->TxRate = MRateToHwRate8190Pci(tcb_desc->data_rate);
    tx_fwinfo->EnableCPUDur = tcb_desc->bTxEnableFwCalcDur;
    tx_fwinfo->Short = QueryIsShort(tx_fwinfo->TxHT, tx_fwinfo->TxRate, tcb_desc);
    if(tcb_desc->bAMPDUEnable) {//AMPDU enabled
        tx_fwinfo->AllowAggregation = 1;
        /* DWORD 1 */
        tx_fwinfo->RxMF = tcb_desc->ampdu_factor;
        tx_fwinfo->RxAMD = tcb_desc->ampdu_density&0x07;//ampdudensity
    } else {
        tx_fwinfo->AllowAggregation = 0;
        /* DWORD 1 */
        tx_fwinfo->RxMF = 0;
        tx_fwinfo->RxAMD = 0;
    }

    /* Protection mode related */
    tx_fwinfo->RtsEnable = (tcb_desc->bRTSEnable)?1:0;
    tx_fwinfo->CtsEnable = (tcb_desc->bCTSEnable)?1:0;
    tx_fwinfo->RtsSTBC = (tcb_desc->bRTSSTBC)?1:0;
    tx_fwinfo->RtsHT = (tcb_desc->rts_rate&0x80)?1:0;
    tx_fwinfo->RtsRate =  MRateToHwRate8190Pci((u8)tcb_desc->rts_rate);
    tx_fwinfo->RtsSubcarrier = (tx_fwinfo->RtsHT==0)?(tcb_desc->RTSSC):0;
    tx_fwinfo->RtsBandwidth = (tx_fwinfo->RtsHT==1)?((tcb_desc->bRTSBW)?1:0):0;
    tx_fwinfo->RtsShort = (tx_fwinfo->RtsHT==0)?(tcb_desc->bRTSUseShortPreamble?1:0):\
                (tcb_desc->bRTSUseShortGI?1:0);

    /* Set Bandwidth and sub-channel settings. */
    if(priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20_40)
    {
        if(tcb_desc->bPacketBW) {
            tx_fwinfo->TxBandwidth = 1;
            tx_fwinfo->TxSubCarrier = 0;    //By SD3's Jerry suggestion, use duplicated mode
        } else {
            tx_fwinfo->TxBandwidth = 0;
            tx_fwinfo->TxSubCarrier = priv->nCur40MhzPrimeSC;
        }
    } else {
        tx_fwinfo->TxBandwidth = 0;
        tx_fwinfo->TxSubCarrier = 0;
    }

#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
    if (tcb_desc->drv_agg_enable)
    {
        tx_fwinfo->Tx_INFO_RSVD = (tcb_desc->DrvAggrNum & 0x1f) << 1;
    }
#endif
    /* Fill Tx descriptor */
    memset(tx_desc, 0, sizeof(tx_desc_819x_usb));
    /* DWORD 0 */
    tx_desc->LINIP = 0;
    tx_desc->CmdInit = 1;
    tx_desc->Offset =  sizeof(tx_fwinfo_819x_usb) + 8;

#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
    if (tcb_desc->drv_agg_enable) {
        tx_desc->PktSize = tcb_desc->pkt_size;
    } else
#endif
    {
        tx_desc->PktSize = (skb->len - TX_PACKET_SHIFT_BYTES) & 0xffff;
    }

    /*DWORD 1*/
    tx_desc->SecCAMID= 0;
    tx_desc->RATid = tcb_desc->RATRIndex;
    {
        //MPDUOverhead = 0;
        tx_desc->NoEnc = 1;
    }
    tx_desc->SecType = 0x0;
        if (tcb_desc->bHwSec)
            {
                switch (priv->ieee80211->pairwise_key_type)
                {
                    case KEY_TYPE_WEP40:
                    case KEY_TYPE_WEP104:
                         tx_desc->SecType = 0x1;
                         tx_desc->NoEnc = 0;
                         break;
                    case KEY_TYPE_TKIP:
                         tx_desc->SecType = 0x2;
                         tx_desc->NoEnc = 0;
                         break;
                    case KEY_TYPE_CCMP:
                         tx_desc->SecType = 0x3;
                         tx_desc->NoEnc = 0;
                         break;
                    case KEY_TYPE_NA:
                         tx_desc->SecType = 0x0;
                         tx_desc->NoEnc = 1;
                         break;
                }
            }

    tx_desc->QueueSelect = MapHwQueueToFirmwareQueue(tcb_desc->queue_index);
    tx_desc->TxFWInfoSize =  sizeof(tx_fwinfo_819x_usb);

    tx_desc->DISFB = tcb_desc->bTxDisableRateFallBack;
    tx_desc->USERATE = tcb_desc->bTxUseDriverAssingedRate;

    /* Fill fields that are required to be initialized in all of the descriptors */
    //DWORD 0
    tx_desc->FirstSeg = 1;
    tx_desc->LastSeg = 1;
    tx_desc->OWN = 1;

#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
    if (tcb_desc->drv_agg_enable) {
        tx_desc->TxBufferSize = tcb_desc->pkt_size + sizeof(tx_fwinfo_819x_usb);
    } else
#endif
    {
        //DWORD 2
        tx_desc->TxBufferSize = (u32)(skb->len - USB_HWDESC_HEADER_LEN);
    }
    /* Get index to out pipe from specified QueueID */
#ifndef USE_ONE_PIPE
    idx_pipe = txqueue2outpipe(priv,tcb_desc->queue_index);
#else
    idx_pipe = 0x5;
#endif

    //RT_DEBUG_DATA(COMP_SEND,tx_fwinfo,sizeof(tx_fwinfo_819x_usb));
    //RT_DEBUG_DATA(COMP_SEND,tx_desc,sizeof(tx_desc_819x_usb));

    /* To submit bulk urb */
    usb_fill_bulk_urb(tx_urb,udev,
            usb_sndbulkpipe(udev,idx_pipe), skb->data,
            skb->len, rtl8192_tx_isr, skb);

    status = usb_submit_urb(tx_urb, GFP_ATOMIC);
    if (!status){
//we need to send 0 byte packet whenever 512N bytes/64N(HIGN SPEED/NORMAL SPEED) bytes packet has been transmitted. Otherwise, it will be halt to wait for another packet. WB. 2008.08.27
        bool bSend0Byte = false;
        u8 zero = 0;
        if(udev->speed == USB_SPEED_HIGH)
        {
            if (skb->len > 0 && skb->len % 512 == 0)
                bSend0Byte = true;
        }
        else
        {
            if (skb->len > 0 && skb->len % 64 == 0)
                bSend0Byte = true;
        }
        if (bSend0Byte)
        {
            tx_urb_zero = usb_alloc_urb(0,GFP_ATOMIC);
            if(!tx_urb_zero){
                RT_TRACE(COMP_ERR, "can't alloc urb for zero byte\n");
                return -ENOMEM;
            }
            usb_fill_bulk_urb(tx_urb_zero,udev,
                    usb_sndbulkpipe(udev,idx_pipe), &zero,
                    0, tx_zero_isr, dev);
            status = usb_submit_urb(tx_urb_zero, GFP_ATOMIC);
            if (status){
            RT_TRACE(COMP_ERR, "Error TX URB for zero byte %d, error %d", atomic_read(&priv->tx_pending[tcb_desc->queue_index]), status);
            return -1;
            }
        }
        dev->trans_start = jiffies;
        atomic_inc(&priv->tx_pending[tcb_desc->queue_index]);
        return 0;
    }else{
        RT_TRACE(COMP_ERR, "Error TX URB %d, error %d", atomic_read(&priv->tx_pending[tcb_desc->queue_index]),
                status);
        return -1;
    }
}

short rtl8192_usb_initendpoints(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);

    priv->rx_urb = kmalloc(sizeof(struct urb *) * (MAX_RX_URB+1),
                GFP_KERNEL);
    if (priv->rx_urb == NULL)
        return -ENOMEM;

#ifndef JACKSON_NEW_RX
    for(i=0;i<(MAX_RX_URB+1);i++){

        priv->rx_urb[i] = usb_alloc_urb(0,GFP_KERNEL);

        priv->rx_urb[i]->transfer_buffer = kmalloc(RX_URB_SIZE, GFP_KERNEL);

        priv->rx_urb[i]->transfer_buffer_length = RX_URB_SIZE;
    }
#endif

#ifdef THOMAS_BEACON
{
    long align = 0;
    void *oldaddr, *newaddr;

    priv->rx_urb[16] = usb_alloc_urb(0, GFP_KERNEL);
    priv->oldaddr = kmalloc(16, GFP_KERNEL);
    oldaddr = priv->oldaddr;
    align = ((long)oldaddr) & 3;
    if (align) {
        newaddr = oldaddr + 4 - align;
        priv->rx_urb[16]->transfer_buffer_length = 16 - 4 + align;
    } else {
        newaddr = oldaddr;
        priv->rx_urb[16]->transfer_buffer_length = 16;
    }
    priv->rx_urb[16]->transfer_buffer = newaddr;
}
#endif

    memset(priv->rx_urb, 0, sizeof(struct urb*) * MAX_RX_URB);
    priv->pp_rxskb = kcalloc(MAX_RX_URB, sizeof(struct sk_buff *),
                 GFP_KERNEL);
    if (!priv->pp_rxskb) {
        kfree(priv->rx_urb);

        priv->pp_rxskb = NULL;
        priv->rx_urb = NULL;

        DMESGE("Endpoint Alloc Failure");
        return -ENOMEM;
    }

    printk("End of initendpoints\n");
    return 0;

}
#ifdef THOMAS_BEACON
void rtl8192_usb_deleteendpoints(struct net_device *dev)
{
    int i;
    struct r8192_priv *priv = ieee80211_priv(dev);

    if(priv->rx_urb){
        for(i=0;i<(MAX_RX_URB+1);i++){
            usb_kill_urb(priv->rx_urb[i]);
            usb_free_urb(priv->rx_urb[i]);
        }
        kfree(priv->rx_urb);
        priv->rx_urb = NULL;
    }
    kfree(priv->oldaddr);
    priv->oldaddr = NULL;
    if (priv->pp_rxskb) {
        kfree(priv->pp_rxskb);
        priv->pp_rxskb = 0;
    }
}
#else
void rtl8192_usb_deleteendpoints(struct net_device *dev)
{
    int i;
    struct r8192_priv *priv = ieee80211_priv(dev);

#ifndef JACKSON_NEW_RX

    if(priv->rx_urb){
        for(i=0;i<(MAX_RX_URB+1);i++){
            usb_kill_urb(priv->rx_urb[i]);
            kfree(priv->rx_urb[i]->transfer_buffer);
            usb_free_urb(priv->rx_urb[i]);
        }
        kfree(priv->rx_urb);
        priv->rx_urb = NULL;

    }
#else
    kfree(priv->rx_urb);
    priv->rx_urb = NULL;
    kfree(priv->oldaddr);
    priv->oldaddr = NULL;
    if (priv->pp_rxskb) {
        kfree(priv->pp_rxskb);
        priv->pp_rxskb = 0;

    }

#endif
}
#endif

extern void rtl8192_update_ratr_table(struct net_device* dev);
void rtl8192_link_change(struct net_device *dev)
{
//  int i;

    struct r8192_priv *priv = ieee80211_priv(dev);
    struct ieee80211_device* ieee = priv->ieee80211;
    //write_nic_word(dev, BCN_INTR_ITV, net->beacon_interval);
    if (ieee->state == IEEE80211_LINKED)
    {
        rtl8192_net_update(dev);
        rtl8192_update_ratr_table(dev);
        //add this as in pure N mode, wep encryption will use software way, but there is no chance to set this as wep will not set group key in wext. WB.2008.07.08
        if ((KEY_TYPE_WEP40 == ieee->pairwise_key_type) || (KEY_TYPE_WEP104 == ieee->pairwise_key_type))
        EnableHWSecurityConfig8192(dev);
    }
    /*update timing params*/
//  RT_TRACE(COMP_CH, "========>%s(), chan:%d\n", __FUNCTION__, priv->chan);
//  rtl8192_set_chan(dev, priv->chan);
     if (ieee->iw_mode == IW_MODE_INFRA || ieee->iw_mode == IW_MODE_ADHOC)
        {
                u32 reg = 0;
                reg = read_nic_dword(dev, RCR);
                if (priv->ieee80211->state == IEEE80211_LINKED)
                        priv->ReceiveConfig = reg |= RCR_CBSSID;
                else
                        priv->ReceiveConfig = reg &= ~RCR_CBSSID;
                write_nic_dword(dev, RCR, reg);
        }

//  rtl8192_set_rxconf(dev);
}

static struct ieee80211_qos_parameters def_qos_parameters = {
        {3,3,3,3},/* cw_min */
        {7,7,7,7},/* cw_max */
        {2,2,2,2},/* aifs */
        {0,0,0,0},/* flags */
        {0,0,0,0} /* tx_op_limit */
};


void rtl8192_update_beacon(struct work_struct * work)
{
        struct r8192_priv *priv = container_of(work, struct r8192_priv, update_beacon_wq.work);
        struct net_device *dev = priv->ieee80211->dev;
    struct ieee80211_device* ieee = priv->ieee80211;
    struct ieee80211_network* net = &ieee->current_network;

    if (ieee->pHTInfo->bCurrentHTSupport)
        HTUpdateSelfAndPeerSetting(ieee, net);
    ieee->pHTInfo->bCurrentRT2RTLongSlotTime = net->bssht.bdRT2RTLongSlotTime;
    rtl8192_update_cap(dev, net->capability);
}
/*
* background support to run QoS activate functionality
*/
int WDCAPARA_ADD[] = {EDCAPARA_BE,EDCAPARA_BK,EDCAPARA_VI,EDCAPARA_VO};
void rtl8192_qos_activate(struct work_struct * work)
{
    struct r8192_priv *priv = container_of(work, struct r8192_priv, qos_activate);
    struct net_device *dev = priv->ieee80211->dev;
    struct ieee80211_qos_parameters *qos_parameters = &priv->ieee80211->current_network.qos_data.parameters;
    u8 mode = priv->ieee80211->current_network.mode;
    //u32 size = sizeof(struct ieee80211_qos_parameters);
    u8  u1bAIFS;
    u32 u4bAcParam;
    int i;

    if (priv == NULL)
        return;

       mutex_lock(&priv->mutex);
    if(priv->ieee80211->state != IEEE80211_LINKED)
        goto success;
    RT_TRACE(COMP_QOS,"qos active process with associate response received\n");
    /* It better set slot time at first */
    /* For we just support b/g mode at present, let the slot time at 9/20 selection */
    /* update the ac parameter to related registers */
    for(i = 0; i <  QOS_QUEUE_NUM; i++) {
        //Mode G/A: slotTimeTimer = 9; Mode B: 20
        u1bAIFS = qos_parameters->aifs[i] * ((mode&(IEEE_G|IEEE_N_24G)) ?9:20) + aSifsTime;
        u4bAcParam = ((((u32)(qos_parameters->tx_op_limit[i]))<< AC_PARAM_TXOP_LIMIT_OFFSET)|
                (((u32)(qos_parameters->cw_max[i]))<< AC_PARAM_ECW_MAX_OFFSET)|
                (((u32)(qos_parameters->cw_min[i]))<< AC_PARAM_ECW_MIN_OFFSET)|
                ((u32)u1bAIFS << AC_PARAM_AIFS_OFFSET));

        write_nic_dword(dev, WDCAPARA_ADD[i], u4bAcParam);
        //write_nic_dword(dev, WDCAPARA_ADD[i], 0x005e4332);
    }

success:
       mutex_unlock(&priv->mutex);
}

static int rtl8192_qos_handle_probe_response(struct r8192_priv *priv,
        int active_network,
        struct ieee80211_network *network)
{
    int ret = 0;
    u32 size = sizeof(struct ieee80211_qos_parameters);

    if(priv->ieee80211->state !=IEEE80211_LINKED)
        return ret;

    if ((priv->ieee80211->iw_mode != IW_MODE_INFRA))
        return ret;

    if (network->flags & NETWORK_HAS_QOS_MASK) {
        if (active_network &&
                (network->flags & NETWORK_HAS_QOS_PARAMETERS))
            network->qos_data.active = network->qos_data.supported;

        if ((network->qos_data.active == 1) && (active_network == 1) &&
                (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
                (network->qos_data.old_param_count !=
                 network->qos_data.param_count)) {
            network->qos_data.old_param_count =
                network->qos_data.param_count;
            queue_work(priv->priv_wq, &priv->qos_activate);
            RT_TRACE (COMP_QOS, "QoS parameters change call "
                    "qos_activate\n");
        }
    } else {
        memcpy(&priv->ieee80211->current_network.qos_data.parameters,\
               &def_qos_parameters, size);

        if ((network->qos_data.active == 1) && (active_network == 1)) {
            queue_work(priv->priv_wq, &priv->qos_activate);
            RT_TRACE(COMP_QOS, "QoS was disabled call qos_activate \n");
        }
        network->qos_data.active = 0;
        network->qos_data.supported = 0;
    }

    return 0;
}

/* handle and manage frame from beacon and probe response */
static int rtl8192_handle_beacon(struct net_device * dev,
                  struct ieee80211_beacon * beacon,
                  struct ieee80211_network * network)
{
    struct r8192_priv *priv = ieee80211_priv(dev);

    rtl8192_qos_handle_probe_response(priv,1,network);
    queue_delayed_work(priv->priv_wq, &priv->update_beacon_wq, 0);
    return 0;

}

/*
* handling the beaconing responses. if we get different QoS setting
* off the network from the associated setting, adjust the QoS
* setting
*/
static int rtl8192_qos_association_resp(struct r8192_priv *priv,
                    struct ieee80211_network *network)
{
    int ret = 0;
    unsigned long flags;
    u32 size = sizeof(struct ieee80211_qos_parameters);
    int set_qos_param = 0;

    if ((priv == NULL) || (network == NULL))
        return ret;

    if(priv->ieee80211->state !=IEEE80211_LINKED)
        return ret;

    if ((priv->ieee80211->iw_mode != IW_MODE_INFRA))
        return ret;

    spin_lock_irqsave(&priv->ieee80211->lock, flags);
    if(network->flags & NETWORK_HAS_QOS_PARAMETERS) {
        memcpy(&priv->ieee80211->current_network.qos_data.parameters,\
             &network->qos_data.parameters,\
            sizeof(struct ieee80211_qos_parameters));
        priv->ieee80211->current_network.qos_data.active = 1;
         {
            set_qos_param = 1;
            /* update qos parameter for current network */
            priv->ieee80211->current_network.qos_data.old_param_count = \
				 priv->ieee80211->current_network.qos_data.param_count;
            priv->ieee80211->current_network.qos_data.param_count = \
                 network->qos_data.param_count;
        }
    } else {
        memcpy(&priv->ieee80211->current_network.qos_data.parameters,\
               &def_qos_parameters, size);
        priv->ieee80211->current_network.qos_data.active = 0;
        priv->ieee80211->current_network.qos_data.supported = 0;
        set_qos_param = 1;
    }

    spin_unlock_irqrestore(&priv->ieee80211->lock, flags);

    RT_TRACE(COMP_QOS, "%s: network->flags = %d,%d\n",__FUNCTION__,network->flags ,priv->ieee80211->current_network.qos_data.active);
    if (set_qos_param == 1)
        queue_work(priv->priv_wq, &priv->qos_activate);


    return ret;
}


static int rtl8192_handle_assoc_response(struct net_device *dev,
                     struct ieee80211_assoc_response_frame *resp,
                     struct ieee80211_network *network)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    rtl8192_qos_association_resp(priv, network);
    return 0;
}


void rtl8192_update_ratr_table(struct net_device* dev)
    //  POCTET_STRING   posLegacyRate,
    //  u8*         pMcsRate)
    //  PRT_WLAN_STA    pEntry)
{
    struct r8192_priv* priv = ieee80211_priv(dev);
    struct ieee80211_device* ieee = priv->ieee80211;
    u8* pMcsRate = ieee->dot11HTOperationalRateSet;
    //struct ieee80211_network *net = &ieee->current_network;
    u32 ratr_value = 0;
    u8 rate_index = 0;
    rtl8192_config_rate(dev, (u16*)(&ratr_value));
    ratr_value |= (*(u16*)(pMcsRate)) << 12;
//  switch (net->mode)
    switch (ieee->mode)
    {
        case IEEE_A:
            ratr_value &= 0x00000FF0;
            break;
        case IEEE_B:
            ratr_value &= 0x0000000F;
            break;
        case IEEE_G:
            ratr_value &= 0x00000FF7;
            break;
        case IEEE_N_24G:
        case IEEE_N_5G:
            if (ieee->pHTInfo->PeerMimoPs == 0) //MIMO_PS_STATIC
                ratr_value &= 0x0007F007;
            else{
                if (priv->rf_type == RF_1T2R)
                    ratr_value &= 0x000FF007;
                else
                    ratr_value &= 0x0F81F007;
            }
            break;
        default:
            break;
    }
    ratr_value &= 0x0FFFFFFF;
    if(ieee->pHTInfo->bCurTxBW40MHz && ieee->pHTInfo->bCurShortGI40MHz){
        ratr_value |= 0x80000000;
    }else if(!ieee->pHTInfo->bCurTxBW40MHz && ieee->pHTInfo->bCurShortGI20MHz){
        ratr_value |= 0x80000000;
    }
    write_nic_dword(dev, RATR0+rate_index*4, ratr_value);
    write_nic_byte(dev, UFWP, 1);
}

static u8 ccmp_ie[4] = {0x00,0x50,0xf2,0x04};
static u8 ccmp_rsn_ie[4] = {0x00, 0x0f, 0xac, 0x04};
bool GetNmodeSupportBySecCfg8192(struct net_device*dev)
{
    struct r8192_priv* priv = ieee80211_priv(dev);
    struct ieee80211_device* ieee = priv->ieee80211;
    struct ieee80211_network * network = &ieee->current_network;
    int wpa_ie_len= ieee->wpa_ie_len;
    struct ieee80211_crypt_data* crypt;
    int encrypt;

    crypt = ieee->crypt[ieee->tx_keyidx];
    //we use connecting AP's capability instead of only security config on our driver to distinguish whether it should use N mode or G mode
    encrypt = (network->capability & WLAN_CAPABILITY_PRIVACY) || (ieee->host_encrypt && crypt && crypt->ops && (0 == strcmp(crypt->ops->name,"WEP")));

    /* simply judge  */
    if(encrypt && (wpa_ie_len == 0)) {
        /* wep encryption, no N mode setting */
        return false;
//  } else if((wpa_ie_len != 0)&&(memcmp(&(ieee->wpa_ie[14]),ccmp_ie,4))) {
    } else if((wpa_ie_len != 0)) {
        /* parse pairwise key type */
        //if((pairwisekey = WEP40)||(pairwisekey = WEP104)||(pairwisekey = TKIP))
        if (((ieee->wpa_ie[0] == 0xdd) && (!memcmp(&(ieee->wpa_ie[14]),ccmp_ie,4))) || ((ieee->wpa_ie[0] == 0x30) && (!memcmp(&ieee->wpa_ie[10],ccmp_rsn_ie, 4))))
            return true;
        else
            return false;
    } else {
        return true;
    }

    return true;
}

bool GetHalfNmodeSupportByAPs819xUsb(struct net_device* dev)
{
    bool            Reval;
    struct r8192_priv* priv = ieee80211_priv(dev);
    struct ieee80211_device* ieee = priv->ieee80211;

    if(ieee->bHalfWirelessN24GMode == true)
        Reval = true;
    else
        Reval =  false;

    return Reval;
}

void rtl8192_refresh_supportrate(struct r8192_priv* priv)
{
    struct ieee80211_device* ieee = priv->ieee80211;
    //we do not consider set support rate for ABG mode, only HT MCS rate is set here.
    if (ieee->mode == WIRELESS_MODE_N_24G || ieee->mode == WIRELESS_MODE_N_5G)
    {
        memcpy(ieee->Regdot11HTOperationalRateSet, ieee->RegHTSuppRateSet, 16);
        //RT_DEBUG_DATA(COMP_INIT, ieee->RegHTSuppRateSet, 16);
        //RT_DEBUG_DATA(COMP_INIT, ieee->Regdot11HTOperationalRateSet, 16);
    }
    else
        memset(ieee->Regdot11HTOperationalRateSet, 0, 16);
    return;
}

u8 rtl8192_getSupportedWireleeMode(struct net_device*dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    u8 ret = 0;
    switch(priv->rf_chip)
    {
        case RF_8225:
        case RF_8256:
        case RF_PSEUDO_11N:
            ret = (WIRELESS_MODE_N_24G|WIRELESS_MODE_G|WIRELESS_MODE_B);
            break;
        case RF_8258:
            ret = (WIRELESS_MODE_A|WIRELESS_MODE_N_5G);
            break;
        default:
            ret = WIRELESS_MODE_B;
            break;
    }
    return ret;
}
void rtl8192_SetWirelessMode(struct net_device* dev, u8 wireless_mode)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    u8 bSupportMode = rtl8192_getSupportedWireleeMode(dev);

    if ((wireless_mode == WIRELESS_MODE_AUTO) || ((wireless_mode&bSupportMode)==0))
    {
        if(bSupportMode & WIRELESS_MODE_N_24G)
        {
            wireless_mode = WIRELESS_MODE_N_24G;
        }
        else if(bSupportMode & WIRELESS_MODE_N_5G)
        {
            wireless_mode = WIRELESS_MODE_N_5G;
        }
        else if((bSupportMode & WIRELESS_MODE_A))
        {
            wireless_mode = WIRELESS_MODE_A;
        }
        else if((bSupportMode & WIRELESS_MODE_G))
        {
            wireless_mode = WIRELESS_MODE_G;
        }
        else if((bSupportMode & WIRELESS_MODE_B))
        {
            wireless_mode = WIRELESS_MODE_B;
        }
        else{
            RT_TRACE(COMP_ERR, "%s(), No valid wireless mode supported, SupportedWirelessMode(%x)!!!\n", __FUNCTION__,bSupportMode);
            wireless_mode = WIRELESS_MODE_B;
        }
    }
#ifdef TO_DO_LIST 
    ActUpdateChannelAccessSetting( pAdapter, pHalData->CurrentWirelessMode, &pAdapter->MgntInfo.Info8185.ChannelAccessSetting );
#endif
    priv->ieee80211->mode = wireless_mode;

    if ((wireless_mode == WIRELESS_MODE_N_24G) ||  (wireless_mode == WIRELESS_MODE_N_5G))
        priv->ieee80211->pHTInfo->bEnableHT = 1;
    else
        priv->ieee80211->pHTInfo->bEnableHT = 0;
    RT_TRACE(COMP_INIT, "Current Wireless Mode is %x\n", wireless_mode);
    rtl8192_refresh_supportrate(priv);

}
//init priv variables here. only non_zero value should be initialized here.
static void rtl8192_init_priv_variable(struct net_device* dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    u8 i;
    priv->card_8192 = NIC_8192U;
    priv->chan = 1; //set to channel 1
    priv->ieee80211->mode = WIRELESS_MODE_AUTO; //SET AUTO
    priv->ieee80211->iw_mode = IW_MODE_INFRA;
    priv->ieee80211->ieee_up=0;
    priv->retry_rts = DEFAULT_RETRY_RTS;
    priv->retry_data = DEFAULT_RETRY_DATA;
    priv->ieee80211->rts = DEFAULT_RTS_THRESHOLD;
    priv->ieee80211->rate = 110; //11 mbps
    priv->ieee80211->short_slot = 1;
    priv->promisc = (dev->flags & IFF_PROMISC) ? 1:0;
    priv->CckPwEnl = 6;
    //for silent reset
    priv->IrpPendingCount = 1;
    priv->ResetProgress = RESET_TYPE_NORESET;
    priv->bForcedSilentReset = 0;
    priv->bDisableNormalResetCheck = false;
    priv->force_reset = false;

    priv->ieee80211->FwRWRF = 0;    //we don't use FW read/write RF until stable firmware is available.
    priv->ieee80211->current_network.beacon_interval = DEFAULT_BEACONINTERVAL;
    priv->ieee80211->iw_mode = IW_MODE_INFRA;
    priv->ieee80211->softmac_features  = IEEE_SOFTMAC_SCAN |
        IEEE_SOFTMAC_ASSOCIATE | IEEE_SOFTMAC_PROBERQ |
        IEEE_SOFTMAC_PROBERS | IEEE_SOFTMAC_TX_QUEUE |
        IEEE_SOFTMAC_BEACONS;//added by amy 080604 //|  //IEEE_SOFTMAC_SINGLE_QUEUE;

    priv->ieee80211->active_scan = 1;
    priv->ieee80211->modulation = IEEE80211_CCK_MODULATION | IEEE80211_OFDM_MODULATION;
    priv->ieee80211->host_encrypt = 1;
    priv->ieee80211->host_decrypt = 1;
    priv->ieee80211->start_send_beacons = NULL;//rtl819xusb_beacon_tx;//-by amy 080604
    priv->ieee80211->stop_send_beacons = NULL;//rtl8192_beacon_stop;//-by amy 080604
    priv->ieee80211->softmac_hard_start_xmit = rtl8192_hard_start_xmit;
    priv->ieee80211->set_chan = rtl8192_set_chan;
    priv->ieee80211->link_change = rtl8192_link_change;
    priv->ieee80211->softmac_data_hard_start_xmit = rtl8192_hard_data_xmit;
    priv->ieee80211->data_hard_stop = rtl8192_data_hard_stop;
    priv->ieee80211->data_hard_resume = rtl8192_data_hard_resume;
    priv->ieee80211->init_wmmparam_flag = 0;
    priv->ieee80211->fts = DEFAULT_FRAG_THRESHOLD;
    priv->ieee80211->check_nic_enough_desc = check_nic_enough_desc;
    priv->ieee80211->tx_headroom = TX_PACKET_SHIFT_BYTES;
    priv->ieee80211->qos_support = 1;

    //added by WB
//  priv->ieee80211->SwChnlByTimerHandler = rtl8192_phy_SwChnl;
    priv->ieee80211->SetBWModeHandler = rtl8192_SetBWMode;
    priv->ieee80211->handle_assoc_response = rtl8192_handle_assoc_response;
    priv->ieee80211->handle_beacon = rtl8192_handle_beacon;
    //added by david
    priv->ieee80211->GetNmodeSupportBySecCfg = GetNmodeSupportBySecCfg8192;
    priv->ieee80211->GetHalfNmodeSupportByAPsHandler = GetHalfNmodeSupportByAPs819xUsb;
    priv->ieee80211->SetWirelessMode = rtl8192_SetWirelessMode;
    //added by amy
    priv->ieee80211->InitialGainHandler = InitialGain819xUsb;
    priv->card_type = USB;
#ifdef TO_DO_LIST
    if(Adapter->bInHctTest)
    {
        pHalData->ShortRetryLimit = 7;
        pHalData->LongRetryLimit = 7;
    }
#endif
    {
        priv->ShortRetryLimit = 0x30;
        priv->LongRetryLimit = 0x30;
    }
    priv->EarlyRxThreshold = 7;
    priv->enable_gpio0 = 0;
    priv->TransmitConfig =
    //  TCR_DurProcMode |   //for RTL8185B, duration setting by HW
    //? TCR_DISReqQsize |
        (TCR_MXDMA_2048<<TCR_MXDMA_OFFSET)|  // Max DMA Burst Size per Tx DMA Burst, 7: reserved.
        (priv->ShortRetryLimit<<TCR_SRL_OFFSET)|    // Short retry limit
        (priv->LongRetryLimit<<TCR_LRL_OFFSET) |    // Long retry limit
        (false ? TCR_SAT: 0);   // FALSE: HW provides PLCP length and LENGEXT, TRUE: SW provides them
#ifdef TO_DO_LIST
    if(Adapter->bInHctTest)
        pHalData->ReceiveConfig =   pHalData->CSMethod |
                        RCR_AMF | RCR_ADF | //RCR_AAP |     //accept management/data
                        //guangan200710
                        RCR_ACF |   //accept control frame for SW AP needs PS-poll, 2005.07.07, by rcnjko.
                        RCR_AB | RCR_AM | RCR_APM |     //accept BC/MC/UC
                        RCR_AICV | RCR_ACRC32 |         //accept ICV/CRC error packet
                        ((u32)7<<RCR_MXDMA_OFFSET) | // Max DMA Burst Size per Rx DMA Burst, 7: unlimited.
                        (pHalData->EarlyRxThreshold<<RCR_FIFO_OFFSET) | // Rx FIFO Threshold, 7: No Rx threshold.
                        (pHalData->EarlyRxThreshold == 7 ? RCR_OnlyErlPkt:0);
    else

#endif
    priv->ReceiveConfig =
        RCR_AMF | RCR_ADF |     //accept management/data
        RCR_ACF |           //accept control frame for SW AP needs PS-poll, 2005.07.07, by rcnjko.
        RCR_AB | RCR_AM | RCR_APM | //accept BC/MC/UC
        //RCR_AICV | RCR_ACRC32 |   //accept ICV/CRC error packet
        ((u32)7<<RCR_MXDMA_OFFSET)| // Max DMA Burst Size per Rx DMA Burst, 7: unlimited.
        (priv->EarlyRxThreshold<<RX_FIFO_THRESHOLD_SHIFT) | // Rx FIFO Threshold, 7: No Rx threshold.
        (priv->EarlyRxThreshold == 7 ? RCR_ONLYERLPKT:0);

    priv->AcmControl = 0;
    priv->pFirmware = kzalloc(sizeof(rt_firmware), GFP_KERNEL);

    /* rx related queue */
    skb_queue_head_init(&priv->rx_queue);
    skb_queue_head_init(&priv->skb_queue);

    /* Tx related queue */
    for(i = 0; i < MAX_QUEUE_SIZE; i++) {
        skb_queue_head_init(&priv->ieee80211->skb_waitQ [i]);
    }
    for(i = 0; i < MAX_QUEUE_SIZE; i++) {
        skb_queue_head_init(&priv->ieee80211->skb_aggQ [i]);
    }
    for(i = 0; i < MAX_QUEUE_SIZE; i++) {
        skb_queue_head_init(&priv->ieee80211->skb_drv_aggQ [i]);
    }
    priv->rf_set_chan = rtl8192_phy_SwChnl;
}

//init lock here
static void rtl8192_init_priv_lock(struct r8192_priv* priv)
{
    spin_lock_init(&priv->tx_lock);
    spin_lock_init(&priv->irq_lock);//added by thomas
    //spin_lock_init(&priv->rf_lock);
    sema_init(&priv->wx_sem,1);
    sema_init(&priv->rf_sem,1);
    mutex_init(&priv->mutex);
}

extern  void    rtl819x_watchdog_wqcallback(struct work_struct *work);

void rtl8192_irq_rx_tasklet(struct r8192_priv *priv);
//init tasklet and wait_queue here. only 2.6 above kernel is considered
#define DRV_NAME "wlan0"
static void rtl8192_init_priv_task(struct net_device* dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);

    priv->priv_wq = create_workqueue(DRV_NAME);

    INIT_WORK(&priv->reset_wq, rtl8192_restart);

    //INIT_DELAYED_WORK(&priv->watch_dog_wq, hal_dm_watchdog);
    INIT_DELAYED_WORK(&priv->watch_dog_wq, rtl819x_watchdog_wqcallback);
    INIT_DELAYED_WORK(&priv->txpower_tracking_wq,  dm_txpower_trackingcallback);
//  INIT_DELAYED_WORK(&priv->gpio_change_rf_wq,  dm_gpio_change_rf_callback);
    INIT_DELAYED_WORK(&priv->rfpath_check_wq,  dm_rf_pathcheck_workitemcallback);
    INIT_DELAYED_WORK(&priv->update_beacon_wq, rtl8192_update_beacon);
    INIT_DELAYED_WORK(&priv->initialgain_operate_wq, InitialGainOperateWorkItemCallBack);
    //INIT_WORK(&priv->SwChnlWorkItem,  rtl8192_SwChnl_WorkItem);
    //INIT_WORK(&priv->SetBWModeWorkItem,  rtl8192_SetBWModeWorkItem);
    INIT_WORK(&priv->qos_activate, rtl8192_qos_activate);

    tasklet_init(&priv->irq_rx_tasklet,
         (void(*)(unsigned long))rtl8192_irq_rx_tasklet,
         (unsigned long)priv);
}

static void rtl8192_get_eeprom_size(struct net_device* dev)
{
    u16 curCR = 0;
    struct r8192_priv *priv = ieee80211_priv(dev);
    RT_TRACE(COMP_EPROM, "===========>%s()\n", __FUNCTION__);
    curCR = read_nic_word_E(dev,EPROM_CMD);
    RT_TRACE(COMP_EPROM, "read from Reg EPROM_CMD(%x):%x\n", EPROM_CMD, curCR);
    //whether need I consider BIT5?
    priv->epromtype = (curCR & Cmd9346CR_9356SEL) ? EPROM_93c56 : EPROM_93c46;
    RT_TRACE(COMP_EPROM, "<===========%s(), epromtype:%d\n", __FUNCTION__, priv->epromtype);
}

//used to swap endian. as ntohl & htonl are not necessary to swap endian, so use this instead.
static inline u16 endian_swap(u16* data)
{
    u16 tmp = *data;
    *data = (tmp >> 8) | (tmp << 8);
    return *data;
}
static void rtl8192_read_eeprom_info(struct net_device* dev)
{
    u16 wEPROM_ID = 0;
    u8 bMac_Tmp_Addr[6] = {0x00, 0xe0, 0x4c, 0x00, 0x00, 0x02};
    u8 bLoad_From_EEPOM = false;
    struct r8192_priv *priv = ieee80211_priv(dev);
    u16 tmpValue = 0;
    RT_TRACE(COMP_EPROM, "===========>%s()\n", __FUNCTION__);
    wEPROM_ID = eprom_read(dev, 0); //first read EEPROM ID out;
    RT_TRACE(COMP_EPROM, "EEPROM ID is 0x%x\n", wEPROM_ID);

    if (wEPROM_ID != RTL8190_EEPROM_ID)
    {
        RT_TRACE(COMP_ERR, "EEPROM ID is invalid(is 0x%x(should be 0x%x)\n", wEPROM_ID, RTL8190_EEPROM_ID);
    }
    else
        bLoad_From_EEPOM = true;

    if (bLoad_From_EEPOM)
    {
        tmpValue = eprom_read(dev, (EEPROM_VID>>1));
        priv->eeprom_vid = endian_swap(&tmpValue);
        priv->eeprom_pid = eprom_read(dev, (EEPROM_PID>>1));
        tmpValue = eprom_read(dev, (EEPROM_ChannelPlan>>1));
        priv->eeprom_ChannelPlan =((tmpValue&0xff00)>>8);
        priv->btxpowerdata_readfromEEPORM = true;
        priv->eeprom_CustomerID = eprom_read(dev, (EEPROM_Customer_ID>>1)) >>8;
    }
    else
    {
        priv->eeprom_vid = 0;
        priv->eeprom_pid = 0;
        priv->card_8192_version = VERSION_819xU_B;
        priv->eeprom_ChannelPlan = 0;
        priv->eeprom_CustomerID = 0;
    }
    RT_TRACE(COMP_EPROM, "vid:0x%4x, pid:0x%4x, CustomID:0x%2x, ChanPlan:0x%x\n", priv->eeprom_vid, priv->eeprom_pid, priv->eeprom_CustomerID, priv->eeprom_ChannelPlan);
    //set channelplan from eeprom
    priv->ChannelPlan = priv->eeprom_ChannelPlan;
    if (bLoad_From_EEPOM)
    {
        int i;
        for (i=0; i<6; i+=2)
        {
            u16 tmp = 0;
            tmp = eprom_read(dev, (u16)((EEPROM_NODE_ADDRESS_BYTE_0 + i)>>1));
            *(u16*)(&dev->dev_addr[i]) = tmp;
        }
    }
    else
    {
        memcpy(dev->dev_addr, bMac_Tmp_Addr, 6);
        //should I set IDR0 here?
    }
    RT_TRACE(COMP_EPROM, "MAC addr:%pM\n", dev->dev_addr);
    priv->rf_type = RTL819X_DEFAULT_RF_TYPE; //default 1T2R
    priv->rf_chip = RF_8256;

    if (priv->card_8192_version == (u8)VERSION_819xU_A)
    {
        //read Tx power gain offset of legacy OFDM to HT rate
        if (bLoad_From_EEPOM)
            priv->EEPROMTxPowerDiff = (eprom_read(dev, (EEPROM_TxPowerDiff>>1))&0xff00) >> 8;
        else
            priv->EEPROMTxPowerDiff = EEPROM_Default_TxPower;
        RT_TRACE(COMP_EPROM, "TxPowerDiff:%d\n", priv->EEPROMTxPowerDiff);
        //read ThermalMeter from EEPROM
        if (bLoad_From_EEPOM)
            priv->EEPROMThermalMeter = (u8)(eprom_read(dev, (EEPROM_ThermalMeter>>1))&0x00ff);
        else
            priv->EEPROMThermalMeter = EEPROM_Default_ThermalMeter;
        RT_TRACE(COMP_EPROM, "ThermalMeter:%d\n", priv->EEPROMThermalMeter);
        //vivi, for tx power track
        priv->TSSI_13dBm = priv->EEPROMThermalMeter *100;
        //read antenna tx power offset of B/C/D to A from EEPROM
        if (bLoad_From_EEPOM)
            priv->EEPROMPwDiff = (eprom_read(dev, (EEPROM_PwDiff>>1))&0x0f00)>>8;
        else
            priv->EEPROMPwDiff = EEPROM_Default_PwDiff;
        RT_TRACE(COMP_EPROM, "TxPwDiff:%d\n", priv->EEPROMPwDiff);
        // Read CrystalCap from EEPROM
        if (bLoad_From_EEPOM)
            priv->EEPROMCrystalCap = (eprom_read(dev, (EEPROM_CrystalCap>>1))&0x0f);
        else
            priv->EEPROMCrystalCap = EEPROM_Default_CrystalCap;
        RT_TRACE(COMP_EPROM, "CrystalCap = %d\n", priv->EEPROMCrystalCap);
        //get per-channel Tx power level
        if (bLoad_From_EEPOM)
            priv->EEPROM_Def_Ver = (eprom_read(dev, (EEPROM_TxPwIndex_Ver>>1))&0xff00)>>8;
        else
            priv->EEPROM_Def_Ver = 1;
        RT_TRACE(COMP_EPROM, "EEPROM_DEF_VER:%d\n", priv->EEPROM_Def_Ver);
        if (priv->EEPROM_Def_Ver == 0) //old eeprom definition
        {
            int i;
            if (bLoad_From_EEPOM)
                priv->EEPROMTxPowerLevelCCK = (eprom_read(dev, (EEPROM_TxPwIndex_CCK>>1))&0xff) >> 8;
            else
                priv->EEPROMTxPowerLevelCCK = 0x10;
            RT_TRACE(COMP_EPROM, "CCK Tx Power Levl: 0x%02x\n", priv->EEPROMTxPowerLevelCCK);
            for (i=0; i<3; i++)
            {
                if (bLoad_From_EEPOM)
                {
                    tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G+i)>>1);
                    if (((EEPROM_TxPwIndex_OFDM_24G+i) % 2) == 0)
                        tmpValue = tmpValue & 0x00ff;
                    else
                        tmpValue = (tmpValue & 0xff00) >> 8;
                }
                else
                    tmpValue = 0x10;
                priv->EEPROMTxPowerLevelOFDM24G[i] = (u8) tmpValue;
                RT_TRACE(COMP_EPROM, "OFDM 2.4G Tx Power Level, Index %d = 0x%02x\n", i, priv->EEPROMTxPowerLevelCCK);
            }
        }//end if EEPROM_DEF_VER == 0
        else if (priv->EEPROM_Def_Ver == 1)
        {
            if (bLoad_From_EEPOM)
            {
                tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_CCK_V1>>1));
                tmpValue = (tmpValue & 0xff00) >> 8;
            }
            else
                tmpValue = 0x10;
            priv->EEPROMTxPowerLevelCCK_V1[0] = (u8)tmpValue;

            if (bLoad_From_EEPOM)
                tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_CCK_V1 + 2)>>1);
            else
                tmpValue = 0x1010;
            *((u16*)(&priv->EEPROMTxPowerLevelCCK_V1[1])) = tmpValue;
            if (bLoad_From_EEPOM)
                tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G_V1>>1));
            else
                tmpValue = 0x1010;
            *((u16*)(&priv->EEPROMTxPowerLevelOFDM24G[0])) = tmpValue;
            if (bLoad_From_EEPOM)
                tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G_V1+2)>>1);
            else
                tmpValue = 0x10;
            priv->EEPROMTxPowerLevelOFDM24G[2] = (u8)tmpValue;
        }//endif EEPROM_Def_Ver == 1

        //update HAL variables
        //
        {
            int i;
            for (i=0; i<14; i++)
            {
                if (i<=3)
                    priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[0];
                else if (i>=4 && i<=9)
                    priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[1];
                else
                    priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[2];
            }

            for (i=0; i<14; i++)
            {
                if (priv->EEPROM_Def_Ver == 0)
                {
                    if (i<=3)
                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[0] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
                    else if (i>=4 && i<=9)
                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK;
                    else
                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[2] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
                }
                else if (priv->EEPROM_Def_Ver == 1)
                {
                    if (i<=3)
                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[0];
                    else if (i>=4 && i<=9)
                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[1];
                    else
                        priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[2];
                }
            }
        }//end update HAL variables
        priv->TxPowerDiff = priv->EEPROMPwDiff;
// Antenna B gain offset to antenna A, bit0~3
        priv->AntennaTxPwDiff[0] = (priv->EEPROMTxPowerDiff & 0xf);
        // Antenna C gain offset to antenna A, bit4~7
        priv->AntennaTxPwDiff[1] = ((priv->EEPROMTxPowerDiff & 0xf0)>>4);
        // CrystalCap, bit12~15
        priv->CrystalCap = priv->EEPROMCrystalCap;
        // ThermalMeter, bit0~3 for RFIC1, bit4~7 for RFIC2
        // 92U does not enable TX power tracking.
        priv->ThermalMeter[0] = priv->EEPROMThermalMeter;
    }//end if VersionID == VERSION_819xU_A

//added by vivi, for dlink led, 20080416
    switch(priv->eeprom_CustomerID)
    {
        case EEPROM_CID_RUNTOP:
            priv->CustomerID = RT_CID_819x_RUNTOP;
            break;

        case EEPROM_CID_DLINK:
            priv->CustomerID = RT_CID_DLINK;
            break;

        default:
            priv->CustomerID = RT_CID_DEFAULT;
            break;

    }

    switch(priv->CustomerID)
    {
        case RT_CID_819x_RUNTOP:
            priv->LedStrategy = SW_LED_MODE2;
            break;

        case RT_CID_DLINK:
            priv->LedStrategy = SW_LED_MODE4;
            break;

        default:
            priv->LedStrategy = SW_LED_MODE0;
            break;

    }


    if(priv->rf_type == RF_1T2R)
    {
        RT_TRACE(COMP_EPROM, "\n1T2R config\n");
    }
    else
    {
        RT_TRACE(COMP_EPROM, "\n2T4R config\n");
    }

    // 2008/01/16 MH We can only know RF type in the function. So we have to init
    // DIG RATR table again.
    init_rate_adaptive(dev);
    //we need init DIG RATR table here again.

    RT_TRACE(COMP_EPROM, "<===========%s()\n", __FUNCTION__);
    return;
}

short rtl8192_get_channel_map(struct net_device * dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    if(priv->ChannelPlan > COUNTRY_CODE_GLOBAL_DOMAIN){
        printk("rtl8180_init:Error channel plan! Set to default.\n");
        priv->ChannelPlan= 0;
    }
    RT_TRACE(COMP_INIT, "Channel plan is %d\n",priv->ChannelPlan);

    rtl819x_set_channel_map(priv->ChannelPlan, priv);
    return 0;
}

short rtl8192_init(struct net_device *dev)
{

    struct r8192_priv *priv = ieee80211_priv(dev);

    memset(&(priv->stats),0,sizeof(struct Stats));
    memset(priv->txqueue_to_outpipemap,0,9);
#ifdef PIPE12
    {
        int i=0;
        u8 queuetopipe[]={3,2,1,0,4,8,7,6,5};
        memcpy(priv->txqueue_to_outpipemap,queuetopipe,9);
/*      for(i=0;i<9;i++)
            printk("%d ",priv->txqueue_to_outpipemap[i]);
        printk("\n");*/
    }
#else
    {
        u8 queuetopipe[]={3,2,1,0,4,4,0,4,4};
        memcpy(priv->txqueue_to_outpipemap,queuetopipe,9);
/*      for(i=0;i<9;i++)
            printk("%d ",priv->txqueue_to_outpipemap[i]);
        printk("\n");*/
    }
#endif
    rtl8192_init_priv_variable(dev);
    rtl8192_init_priv_lock(priv);
    rtl8192_init_priv_task(dev);
    rtl8192_get_eeprom_size(dev);
    rtl8192_read_eeprom_info(dev);
    rtl8192_get_channel_map(dev);
    init_hal_dm(dev);
    init_timer(&priv->watch_dog_timer);
    priv->watch_dog_timer.data = (unsigned long)dev;
    priv->watch_dog_timer.function = watch_dog_timer_callback;
    if(rtl8192_usb_initendpoints(dev)!=0){
        DMESG("Endopoints initialization failed");
        return -ENOMEM;
    }

    //rtl8192_adapter_start(dev);
#ifdef DEBUG_EPROM
    dump_eprom(dev);
#endif
    return 0;
}

/******************************************************************************
 *function:  This function actually only set RRSR, RATR and BW_OPMODE registers
 *       not to do all the hw config as its name says
 *   input:  net_device dev
 *  output:  none
 *  return:  none
 *  notice:  This part need to modified according to the rate set we filtered
 * ****************************************************************************/
void rtl8192_hwconfig(struct net_device* dev)
{
    u32 regRATR = 0, regRRSR = 0;
    u8 regBwOpMode = 0, regTmp = 0;
    struct r8192_priv *priv = ieee80211_priv(dev);

// Set RRSR, RATR, and BW_OPMODE registers
    //
    switch(priv->ieee80211->mode)
    {
    case WIRELESS_MODE_B:
        regBwOpMode = BW_OPMODE_20MHZ;
        regRATR = RATE_ALL_CCK;
        regRRSR = RATE_ALL_CCK;
        break;
    case WIRELESS_MODE_A:
        regBwOpMode = BW_OPMODE_5G |BW_OPMODE_20MHZ;
        regRATR = RATE_ALL_OFDM_AG;
        regRRSR = RATE_ALL_OFDM_AG;
        break;
    case WIRELESS_MODE_G:
        regBwOpMode = BW_OPMODE_20MHZ;
        regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
        regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
        break;
    case WIRELESS_MODE_AUTO:
#ifdef TO_DO_LIST
        if (Adapter->bInHctTest)
        {
            regBwOpMode = BW_OPMODE_20MHZ;
            regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
            regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
        }
        else
#endif
        {
            regBwOpMode = BW_OPMODE_20MHZ;
            regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
            regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
        }
        break;
    case WIRELESS_MODE_N_24G:
        // It support CCK rate by default.
        // CCK rate will be filtered out only when associated AP does not support it.
        regBwOpMode = BW_OPMODE_20MHZ;
            regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
            regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
        break;
    case WIRELESS_MODE_N_5G:
        regBwOpMode = BW_OPMODE_5G;
        regRATR = RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
        regRRSR = RATE_ALL_OFDM_AG;
        break;
    }

    write_nic_byte(dev, BW_OPMODE, regBwOpMode);
    {
        u32 ratr_value = 0;
        ratr_value = regRATR;
        if (priv->rf_type == RF_1T2R)
        {
            ratr_value &= ~(RATE_ALL_OFDM_2SS);
        }
        write_nic_dword(dev, RATR0, ratr_value);
        write_nic_byte(dev, UFWP, 1);
    }
    regTmp = read_nic_byte(dev, 0x313);
    regRRSR = ((regTmp) << 24) | (regRRSR & 0x00ffffff);
    write_nic_dword(dev, RRSR, regRRSR);

    //
    // Set Retry Limit here
    //
    write_nic_word(dev, RETRY_LIMIT,
            priv->ShortRetryLimit << RETRY_LIMIT_SHORT_SHIFT | \
            priv->LongRetryLimit << RETRY_LIMIT_LONG_SHIFT);
    // Set Contention Window here

    // Set Tx AGC

    // Set Tx Antenna including Feedback control

    // Set Auto Rate fallback control


}


//InitializeAdapter and PhyCfg
bool rtl8192_adapter_start(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    u32 dwRegRead = 0;
    bool init_status = true;
    RT_TRACE(COMP_INIT, "====>%s()\n", __FUNCTION__);
    priv->Rf_Mode = RF_OP_By_SW_3wire;
    //for ASIC power on sequence
    write_nic_byte_E(dev, 0x5f, 0x80);
    mdelay(50);
    write_nic_byte_E(dev, 0x5f, 0xf0);
    write_nic_byte_E(dev, 0x5d, 0x00);
    write_nic_byte_E(dev, 0x5e, 0x80);
    write_nic_byte(dev, 0x17, 0x37);
    mdelay(10);
//#ifdef TO_DO_LIST
    priv->pFirmware->firmware_status = FW_STATUS_0_INIT;
    //config CPUReset Register
    //Firmware Reset or not?
    dwRegRead = read_nic_dword(dev, CPU_GEN);
    if (priv->pFirmware->firmware_status == FW_STATUS_0_INIT)
        dwRegRead |= CPU_GEN_SYSTEM_RESET; //do nothing here?
    else if (priv->pFirmware->firmware_status == FW_STATUS_5_READY)
        dwRegRead |= CPU_GEN_FIRMWARE_RESET;
    else
        RT_TRACE(COMP_ERR, "ERROR in %s(): undefined firmware state(%d)\n", __FUNCTION__,   priv->pFirmware->firmware_status);

    write_nic_dword(dev, CPU_GEN, dwRegRead);
    //mdelay(30);
    //config BB.
    rtl8192_BBConfig(dev);

    //Loopback mode or not
    priv->LoopbackMode = RTL819xU_NO_LOOPBACK;
//  priv->LoopbackMode = RTL819xU_MAC_LOOPBACK;

    dwRegRead = read_nic_dword(dev, CPU_GEN);
    if (priv->LoopbackMode == RTL819xU_NO_LOOPBACK)
        dwRegRead = ((dwRegRead & CPU_GEN_NO_LOOPBACK_MSK) | CPU_GEN_NO_LOOPBACK_SET);
    else if (priv->LoopbackMode == RTL819xU_MAC_LOOPBACK)
        dwRegRead |= CPU_CCK_LOOPBACK;
    else
        RT_TRACE(COMP_ERR, "Serious error in %s(): wrong loopback mode setting(%d)\n", __FUNCTION__,  priv->LoopbackMode);

    write_nic_dword(dev, CPU_GEN, dwRegRead);

    //after reset cpu, we need wait for a seconds to write in register.
    udelay(500);

    //xiong add for new bitfile:usb suspend reset pin set to 1. //do we need?
    write_nic_byte_E(dev, 0x5f, (read_nic_byte_E(dev, 0x5f)|0x20));

    //Set Hardware
    rtl8192_hwconfig(dev);

    //turn on Tx/Rx
    write_nic_byte(dev, CMDR, CR_RE|CR_TE);

    //set IDR0 here
    write_nic_dword(dev, MAC0, ((u32*)dev->dev_addr)[0]);
    write_nic_word(dev, MAC4, ((u16*)(dev->dev_addr + 4))[0]);

    //set RCR
    write_nic_dword(dev, RCR, priv->ReceiveConfig);

    //Initialize Number of Reserved Pages in Firmware Queue
    write_nic_dword(dev, RQPN1,  NUM_OF_PAGE_IN_FW_QUEUE_BK << RSVD_FW_QUEUE_PAGE_BK_SHIFT |\
                        NUM_OF_PAGE_IN_FW_QUEUE_BE << RSVD_FW_QUEUE_PAGE_BE_SHIFT | \
                        NUM_OF_PAGE_IN_FW_QUEUE_VI << RSVD_FW_QUEUE_PAGE_VI_SHIFT | \
                        NUM_OF_PAGE_IN_FW_QUEUE_VO <<RSVD_FW_QUEUE_PAGE_VO_SHIFT);
    write_nic_dword(dev, RQPN2, NUM_OF_PAGE_IN_FW_QUEUE_MGNT << RSVD_FW_QUEUE_PAGE_MGNT_SHIFT |\
                        NUM_OF_PAGE_IN_FW_QUEUE_CMD << RSVD_FW_QUEUE_PAGE_CMD_SHIFT);
    write_nic_dword(dev, RQPN3, APPLIED_RESERVED_QUEUE_IN_FW| \
                        NUM_OF_PAGE_IN_FW_QUEUE_BCN<<RSVD_FW_QUEUE_PAGE_BCN_SHIFT
//                      | NUM_OF_PAGE_IN_FW_QUEUE_PUB<<RSVD_FW_QUEUE_PAGE_PUB_SHIFT
                        );
    write_nic_dword(dev, RATR0+4*7, (RATE_ALL_OFDM_AG | RATE_ALL_CCK));

    //Set AckTimeout
    // TODO: (it value is only for FPGA version). need to be changed!!2006.12.18, by Emily
    write_nic_byte(dev, ACK_TIMEOUT, 0x30);

//  RT_TRACE(COMP_INIT, "%s():priv->ResetProgress is %d\n", __FUNCTION__,priv->ResetProgress);
    if(priv->ResetProgress == RESET_TYPE_NORESET)
    rtl8192_SetWirelessMode(dev, priv->ieee80211->mode);
    if(priv->ResetProgress == RESET_TYPE_NORESET){
    CamResetAllEntry(dev);
    {
        u8 SECR_value = 0x0;
        SECR_value |= SCR_TxEncEnable;
        SECR_value |= SCR_RxDecEnable;
        SECR_value |= SCR_NoSKMC;
        write_nic_byte(dev, SECR, SECR_value);
    }
    }

    //Beacon related
    write_nic_word(dev, ATIMWND, 2);
    write_nic_word(dev, BCN_INTERVAL, 100);

    {
#define DEFAULT_EDCA 0x005e4332
        int i;
        for (i=0; i<QOS_QUEUE_NUM; i++)
        write_nic_dword(dev, WDCAPARA_ADD[i], DEFAULT_EDCA);
    }
#ifdef USB_RX_AGGREGATION_SUPPORT
    //3 For usb rx firmware aggregation control
    if(priv->ResetProgress == RESET_TYPE_NORESET)
    {
        u32 ulValue;
        PRT_HIGH_THROUGHPUT pHTInfo = priv->ieee80211->pHTInfo;
        ulValue = (pHTInfo->UsbRxFwAggrEn<<24) | (pHTInfo->UsbRxFwAggrPageNum<<16) |
                    (pHTInfo->UsbRxFwAggrPacketNum<<8) | (pHTInfo->UsbRxFwAggrTimeout);
        /*
         * If usb rx firmware aggregation is enabled,
         * when anyone of three threshold conditions above is reached,
         * firmware will send aggregated packet to driver.
         */
        write_nic_dword(dev, 0x1a8, ulValue);
        priv->bCurrentRxAggrEnable = true;
    }
#endif

    rtl8192_phy_configmac(dev);

    if (priv->card_8192_version == (u8) VERSION_819xU_A)
    {
        rtl8192_phy_getTxPower(dev);
        rtl8192_phy_setTxPower(dev, priv->chan);
    }

    //Firmware download
    init_status = init_firmware(dev);
    if(!init_status)
    {
        RT_TRACE(COMP_ERR,"ERR!!! %s(): Firmware download is failed\n", __FUNCTION__);
        return init_status;
    }
    RT_TRACE(COMP_INIT, "%s():after firmware download\n", __FUNCTION__);
    //
#ifdef TO_DO_LIST
if(Adapter->ResetProgress == RESET_TYPE_NORESET)
    {
        if(pMgntInfo->RegRfOff == TRUE)
        { // User disable RF via registry.
            RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter819xUsb(): Turn off RF for RegRfOff ----------\n"));
            MgntActSet_RF_State(Adapter, eRfOff, RF_CHANGE_BY_SW);
            // Those actions will be discard in MgntActSet_RF_State because of the same state
            for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
                PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
        }
        else if(pMgntInfo->RfOffReason > RF_CHANGE_BY_PS)
        { // H/W or S/W RF OFF before sleep.
            RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter819xUsb(): Turn off RF for RfOffReason(%d) ----------\n", pMgntInfo->RfOffReason));
            MgntActSet_RF_State(Adapter, eRfOff, pMgntInfo->RfOffReason);
        }
        else
        {
            pHalData->eRFPowerState = eRfOn;
            pMgntInfo->RfOffReason = 0;
            RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter819xUsb(): RF is on ----------\n"));
        }
    }
    else
    {
        if(pHalData->eRFPowerState == eRfOff)
        {
            MgntActSet_RF_State(Adapter, eRfOff, pMgntInfo->RfOffReason);
            // Those actions will be discard in MgntActSet_RF_State because of the same state
            for(eRFPath = 0; eRFPath <pHalData->NumTotalRFPath; eRFPath++)
                PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
        }
    }
#endif
    //config RF.
    if(priv->ResetProgress == RESET_TYPE_NORESET){
    rtl8192_phy_RFConfig(dev);
    RT_TRACE(COMP_INIT, "%s():after phy RF config\n", __FUNCTION__);
    }


    if(priv->ieee80211->FwRWRF)
        // We can force firmware to do RF-R/W
        priv->Rf_Mode = RF_OP_By_FW;
    else
        priv->Rf_Mode = RF_OP_By_SW_3wire;


    rtl8192_phy_updateInitGain(dev);
    /*--set CCK and OFDM Block "ON"--*/
    rtl8192_setBBreg(dev, rFPGA0_RFMOD, bCCKEn, 0x1);
    rtl8192_setBBreg(dev, rFPGA0_RFMOD, bOFDMEn, 0x1);

    if(priv->ResetProgress == RESET_TYPE_NORESET)
    {
        //if D or C cut
        u8 tmpvalue = read_nic_byte(dev, 0x301);
        if(tmpvalue ==0x03)
        {
            priv->bDcut = TRUE;
            RT_TRACE(COMP_POWER_TRACKING, "D-cut\n");
        }
        else
        {
            priv->bDcut = FALSE;
            RT_TRACE(COMP_POWER_TRACKING, "C-cut\n");
        }
        dm_initialize_txpower_tracking(dev);

        if(priv->bDcut == TRUE)
        {
            u32 i, TempCCk;
            u32 tmpRegA= rtl8192_QueryBBReg(dev,rOFDM0_XATxIQImbalance,bMaskDWord);
        //  u32 tmpRegC= rtl8192_QueryBBReg(dev,rOFDM0_XCTxIQImbalance,bMaskDWord);
            for(i = 0; i<TxBBGainTableLength; i++)
            {
                if(tmpRegA == priv->txbbgain_table[i].txbbgain_value)
                {
                    priv->rfa_txpowertrackingindex= (u8)i;
                    priv->rfa_txpowertrackingindex_real= (u8)i;
                    priv->rfa_txpowertracking_default= priv->rfa_txpowertrackingindex;
                    break;
                }
            }

            TempCCk = rtl8192_QueryBBReg(dev, rCCK0_TxFilter1, bMaskByte2);

            for(i=0 ; i<CCKTxBBGainTableLength ; i++)
            {

                if(TempCCk == priv->cck_txbbgain_table[i].ccktxbb_valuearray[0])
                {
                    priv->cck_present_attentuation_20Mdefault=(u8) i;
                    break;
                }
            }
            priv->cck_present_attentuation_40Mdefault= 0;
            priv->cck_present_attentuation_difference= 0;
            priv->cck_present_attentuation = priv->cck_present_attentuation_20Mdefault;

    //      pMgntInfo->bTXPowerTracking = FALSE;//TEMPLY DISABLE
        }
    }
    write_nic_byte(dev, 0x87, 0x0);


    return init_status;
}

/* this configures registers for beacon tx and enables it via
 * rtl8192_beacon_tx_enable(). rtl8192_beacon_tx_disable() might
 * be used to stop beacon transmission
 */
/***************************************************************************
    -------------------------------NET STUFF---------------------------
***************************************************************************/

static struct net_device_stats *rtl8192_stats(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);

    return &priv->ieee80211->stats;
}

bool
HalTxCheckStuck819xUsb(
    struct net_device *dev
    )
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    u16         RegTxCounter = read_nic_word(dev, 0x128);
    bool        bStuck = FALSE;
    RT_TRACE(COMP_RESET,"%s():RegTxCounter is %d,TxCounter is %d\n",__FUNCTION__,RegTxCounter,priv->TxCounter);
    if(priv->TxCounter==RegTxCounter)
        bStuck = TRUE;

    priv->TxCounter = RegTxCounter;

    return bStuck;
}

/*
*   <Assumption: RT_TX_SPINLOCK is acquired.>
*   First added: 2006.11.19 by emily
*/
RESET_TYPE
TxCheckStuck(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    u8          QueueID;
//  PRT_TCB         pTcb;
//  u8          ResetThreshold;
    bool            bCheckFwTxCnt = false;
    //unsigned long flags;

    //
    // Decide such threshold according to current power save mode
    //

//     RT_TRACE(COMP_RESET, " ==> TxCheckStuck()\n");
//       PlatformAcquireSpinLock(Adapter, RT_TX_SPINLOCK);
//       spin_lock_irqsave(&priv->ieee80211->lock,flags);
         for (QueueID = 0; QueueID<=BEACON_QUEUE;QueueID ++)
         {
                if(QueueID == TXCMD_QUEUE)
                 continue;
#ifdef USB_TX_DRIVER_AGGREGATION_ENABLE
            if((skb_queue_len(&priv->ieee80211->skb_waitQ[QueueID]) == 0) && (skb_queue_len(&priv->ieee80211->skb_aggQ[QueueID]) == 0) && (skb_queue_len(&priv->ieee80211->skb_drv_aggQ[QueueID]) == 0))
#else
                if((skb_queue_len(&priv->ieee80211->skb_waitQ[QueueID]) == 0)  && (skb_queue_len(&priv->ieee80211->skb_aggQ[QueueID]) == 0))
#endif
                continue;

                 bCheckFwTxCnt = true;
         }
//       PlatformReleaseSpinLock(Adapter, RT_TX_SPINLOCK);
//  spin_unlock_irqrestore(&priv->ieee80211->lock,flags);
//  RT_TRACE(COMP_RESET,"bCheckFwTxCnt is %d\n",bCheckFwTxCnt);
    if(bCheckFwTxCnt)
    {
        if(HalTxCheckStuck819xUsb(dev))
        {
            RT_TRACE(COMP_RESET, "TxCheckStuck(): Fw indicates no Tx condition! \n");
            return RESET_TYPE_SILENT;
        }
    }
    return RESET_TYPE_NORESET;
}

bool
HalRxCheckStuck819xUsb(struct net_device *dev)
{
    u16     RegRxCounter = read_nic_word(dev, 0x130);
    struct r8192_priv *priv = ieee80211_priv(dev);
    bool bStuck = FALSE;
    static u8   rx_chk_cnt = 0;
    RT_TRACE(COMP_RESET,"%s(): RegRxCounter is %d,RxCounter is %d\n",__FUNCTION__,RegRxCounter,priv->RxCounter);
    // If rssi is small, we should check rx for long time because of bad rx.
    // or maybe it will continuous silent reset every 2 seconds.
    rx_chk_cnt++;
    if(priv->undecorated_smoothed_pwdb >= (RateAdaptiveTH_High+5))
    {
        rx_chk_cnt = 0; //high rssi, check rx stuck right now.
    }
    else if(priv->undecorated_smoothed_pwdb < (RateAdaptiveTH_High+5) &&
        ((priv->CurrentChannelBW!=HT_CHANNEL_WIDTH_20&&priv->undecorated_smoothed_pwdb>=RateAdaptiveTH_Low_40M) ||
        (priv->CurrentChannelBW==HT_CHANNEL_WIDTH_20&&priv->undecorated_smoothed_pwdb>=RateAdaptiveTH_Low_20M)) )
    {
        if(rx_chk_cnt < 2)
        {
            return bStuck;
        }
        else
        {
            rx_chk_cnt = 0;
        }
    }
    else if(((priv->CurrentChannelBW!=HT_CHANNEL_WIDTH_20&&priv->undecorated_smoothed_pwdb<RateAdaptiveTH_Low_40M) ||
        (priv->CurrentChannelBW==HT_CHANNEL_WIDTH_20&&priv->undecorated_smoothed_pwdb<RateAdaptiveTH_Low_20M)) &&
        priv->undecorated_smoothed_pwdb >= VeryLowRSSI)
    {
        if(rx_chk_cnt < 4)
        {
            //DbgPrint("RSSI < %d && RSSI >= %d, no check this time \n", RateAdaptiveTH_Low, VeryLowRSSI);
            return bStuck;
        }
        else
        {
            rx_chk_cnt = 0;
            //DbgPrint("RSSI < %d && RSSI >= %d, check this time \n", RateAdaptiveTH_Low, VeryLowRSSI);
        }
    }
    else
    {
        if(rx_chk_cnt < 8)
        {
            //DbgPrint("RSSI <= %d, no check this time \n", VeryLowRSSI);
            return bStuck;
        }
        else
        {
            rx_chk_cnt = 0;
            //DbgPrint("RSSI <= %d, check this time \n", VeryLowRSSI);
        }
    }

    if(priv->RxCounter==RegRxCounter)
        bStuck = TRUE;

    priv->RxCounter = RegRxCounter;

    return bStuck;
}

RESET_TYPE
RxCheckStuck(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    //int                     i;
    bool        bRxCheck = FALSE;

//       RT_TRACE(COMP_RESET," ==> RxCheckStuck()\n");
    //PlatformAcquireSpinLock(Adapter, RT_RX_SPINLOCK);

     if(priv->IrpPendingCount > 1)
        bRxCheck = TRUE;
       //PlatformReleaseSpinLock(Adapter, RT_RX_SPINLOCK);

//       RT_TRACE(COMP_RESET,"bRxCheck is %d \n",bRxCheck);
    if(bRxCheck)
    {
        if(HalRxCheckStuck819xUsb(dev))
        {
            RT_TRACE(COMP_RESET, "RxStuck Condition\n");
            return RESET_TYPE_SILENT;
        }
    }
    return RESET_TYPE_NORESET;
}


RESET_TYPE
rtl819x_ifcheck_resetornot(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    RESET_TYPE  TxResetType = RESET_TYPE_NORESET;
    RESET_TYPE  RxResetType = RESET_TYPE_NORESET;
    RT_RF_POWER_STATE   rfState;

    rfState = priv->ieee80211->eRFPowerState;

    TxResetType = TxCheckStuck(dev);
    if( rfState != eRfOff ||
        /*ADAPTER_TEST_STATUS_FLAG(Adapter, ADAPTER_STATUS_FW_DOWNLOAD_FAILURE)) &&*/
        (priv->ieee80211->iw_mode != IW_MODE_ADHOC))
    {
        // If driver is in the status of firmware download failure , driver skips RF initialization and RF is
        // in turned off state. Driver should check whether Rx stuck and do silent reset. And
        // if driver is in firmware download failure status, driver should initialize RF in the following
        // silent reset procedure Emily, 2008.01.21

        // Driver should not check RX stuck in IBSS mode because it is required to
        // set Check BSSID in order to send beacon, however, if check BSSID is
        // set, STA cannot hear any packet at all. Emily, 2008.04.12
        RxResetType = RxCheckStuck(dev);
    }
    if(TxResetType==RESET_TYPE_NORMAL || RxResetType==RESET_TYPE_NORMAL)
        return RESET_TYPE_NORMAL;
    else if(TxResetType==RESET_TYPE_SILENT || RxResetType==RESET_TYPE_SILENT){
        RT_TRACE(COMP_RESET,"%s():silent reset\n",__FUNCTION__);
        return RESET_TYPE_SILENT;
    }
    else
        return RESET_TYPE_NORESET;

}

void rtl8192_cancel_deferred_work(struct r8192_priv* priv);
int _rtl8192_up(struct net_device *dev);
int rtl8192_close(struct net_device *dev);



void
CamRestoreAllEntry( struct net_device *dev)
{
    u8 EntryId = 0;
    struct r8192_priv *priv = ieee80211_priv(dev);
    u8* MacAddr = priv->ieee80211->current_network.bssid;

    static u8   CAM_CONST_ADDR[4][6] = {
        {0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
        {0x00, 0x00, 0x00, 0x00, 0x00, 0x01},
        {0x00, 0x00, 0x00, 0x00, 0x00, 0x02},
        {0x00, 0x00, 0x00, 0x00, 0x00, 0x03}};
    static u8   CAM_CONST_BROAD[] =
        {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};

    RT_TRACE(COMP_SEC, "CamRestoreAllEntry: \n");


    if ((priv->ieee80211->pairwise_key_type == KEY_TYPE_WEP40)||
        (priv->ieee80211->pairwise_key_type == KEY_TYPE_WEP104))
    {

        for(EntryId=0; EntryId<4; EntryId++)
        {
            {
                MacAddr = CAM_CONST_ADDR[EntryId];
                setKey(dev,
                        EntryId ,
                        EntryId,
                        priv->ieee80211->pairwise_key_type,
                        MacAddr,
                        0,
                        NULL);
            }
        }

    }
    else if(priv->ieee80211->pairwise_key_type == KEY_TYPE_TKIP)
    {

        {
            if(priv->ieee80211->iw_mode == IW_MODE_ADHOC)
                setKey(dev,
                        4,
                        0,
                        priv->ieee80211->pairwise_key_type,
                        (u8*)dev->dev_addr,
                        0,
                        NULL);
            else
                setKey(dev,
                        4,
                        0,
                        priv->ieee80211->pairwise_key_type,
                        MacAddr,
                        0,
                        NULL);
        }
    }
    else if(priv->ieee80211->pairwise_key_type == KEY_TYPE_CCMP)
    {

        {
            if(priv->ieee80211->iw_mode == IW_MODE_ADHOC)
                setKey(dev,
                        4,
                        0,
                        priv->ieee80211->pairwise_key_type,
                        (u8*)dev->dev_addr,
                        0,
                        NULL);
            else
                setKey(dev,
                        4,
                        0,
                        priv->ieee80211->pairwise_key_type,
                        MacAddr,
                        0,
                        NULL);
        }
    }



    if(priv->ieee80211->group_key_type == KEY_TYPE_TKIP)
    {
        MacAddr = CAM_CONST_BROAD;
        for(EntryId=1 ; EntryId<4 ; EntryId++)
        {
            {
                setKey(dev,
                        EntryId,
                        EntryId,
                        priv->ieee80211->group_key_type,
                        MacAddr,
                        0,
                        NULL);
            }
        }
        if(priv->ieee80211->iw_mode == IW_MODE_ADHOC)
                setKey(dev,
                        0,
                        0,
                        priv->ieee80211->group_key_type,
                        CAM_CONST_ADDR[0],
                        0,
                        NULL);
    }
    else if(priv->ieee80211->group_key_type == KEY_TYPE_CCMP)
    {
        MacAddr = CAM_CONST_BROAD;
        for(EntryId=1; EntryId<4 ; EntryId++)
        {
            {
                setKey(dev,
                        EntryId ,
                        EntryId,
                        priv->ieee80211->group_key_type,
                        MacAddr,
                        0,
                        NULL);
            }
        }

        if(priv->ieee80211->iw_mode == IW_MODE_ADHOC)
                setKey(dev,
                        0 ,
                        0,
                        priv->ieee80211->group_key_type,
                        CAM_CONST_ADDR[0],
                        0,
                        NULL);
    }
}
// This function is used to fix Tx/Rx stop bug temporarily.
// This function will do "system reset" to NIC when Tx or Rx is stuck.
// The method checking Tx/Rx stuck of this function is supported by FW,
// which reports Tx and Rx counter to register 0x128 and 0x130.
void
rtl819x_ifsilentreset(struct net_device *dev)
{
    //OCTET_STRING asocpdu;
    struct r8192_priv *priv = ieee80211_priv(dev);
    u8  reset_times = 0;
    int reset_status = 0;
    struct ieee80211_device *ieee = priv->ieee80211;


    // 2007.07.20. If we need to check CCK stop, please uncomment this line.
    //bStuck = Adapter->HalFunc.CheckHWStopHandler(Adapter);

    if(priv->ResetProgress==RESET_TYPE_NORESET)
    {
RESET_START:

        RT_TRACE(COMP_RESET,"=========>Reset progress!! \n");

        // Set the variable for reset.
        priv->ResetProgress = RESET_TYPE_SILENT;
//      rtl8192_close(dev);
        down(&priv->wx_sem);
        if(priv->up == 0)
        {
            RT_TRACE(COMP_ERR,"%s():the driver is not up! return\n",__FUNCTION__);
            up(&priv->wx_sem);
            return ;
        }
        priv->up = 0;
        RT_TRACE(COMP_RESET,"%s():======>start to down the driver\n",__FUNCTION__);
//      if(!netif_queue_stopped(dev))
//          netif_stop_queue(dev);

        rtl8192_rtx_disable(dev);
        rtl8192_cancel_deferred_work(priv);
        deinit_hal_dm(dev);
        del_timer_sync(&priv->watch_dog_timer);

        ieee->sync_scan_hurryup = 1;
        if(ieee->state == IEEE80211_LINKED)
        {
            down(&ieee->wx_sem);
            printk("ieee->state is IEEE80211_LINKED\n");
            ieee80211_stop_send_beacons(priv->ieee80211);
            del_timer_sync(&ieee->associate_timer);
            cancel_delayed_work(&ieee->associate_retry_wq);
            ieee80211_stop_scan(ieee);
            netif_carrier_off(dev);
            up(&ieee->wx_sem);
        }
        else{
            printk("ieee->state is NOT LINKED\n");
            ieee80211_softmac_stop_protocol(priv->ieee80211);           }
        up(&priv->wx_sem);
        RT_TRACE(COMP_RESET,"%s():<==========down process is finished\n",__FUNCTION__);
    //rtl8192_irq_disable(dev);
        RT_TRACE(COMP_RESET,"%s():===========>start up the driver\n",__FUNCTION__);
        reset_status = _rtl8192_up(dev);

        RT_TRACE(COMP_RESET,"%s():<===========up process is finished\n",__FUNCTION__);
        if(reset_status == -EAGAIN)
        {
            if(reset_times < 3)
            {
                reset_times++;
                goto RESET_START;
            }
            else
            {
                RT_TRACE(COMP_ERR," ERR!!! %s():  Reset Failed!!\n", __FUNCTION__);
            }
        }
        ieee->is_silent_reset = 1;
        EnableHWSecurityConfig8192(dev);
        if(ieee->state == IEEE80211_LINKED && ieee->iw_mode == IW_MODE_INFRA)
        {
            ieee->set_chan(ieee->dev, ieee->current_network.channel);

            queue_work(ieee->wq, &ieee->associate_complete_wq);

        }
        else if(ieee->state == IEEE80211_LINKED && ieee->iw_mode == IW_MODE_ADHOC)
        {
            ieee->set_chan(ieee->dev, ieee->current_network.channel);
            ieee->link_change(ieee->dev);

        //  notify_wx_assoc_event(ieee);

            ieee80211_start_send_beacons(ieee);

            if (ieee->data_hard_resume)
                ieee->data_hard_resume(ieee->dev);
            netif_carrier_on(ieee->dev);
        }

        CamRestoreAllEntry(dev);

        priv->ResetProgress = RESET_TYPE_NORESET;
        priv->reset_count++;

        priv->bForcedSilentReset =false;
        priv->bResetInProgress = false;

        // For test --> force write UFWP.
        write_nic_byte(dev, UFWP, 1);
        RT_TRACE(COMP_RESET, "Reset finished!! ====>[%d]\n", priv->reset_count);
    }
}

void CAM_read_entry(
    struct net_device *dev,
    u32         iIndex
)
{
    u32 target_command=0;
     u32 target_content=0;
     u8 entry_i=0;
     u32 ulStatus;
    s32 i=100;
//  printk("=======>start read CAM\n");
    for(entry_i=0;entry_i<CAM_CONTENT_COUNT;entry_i++)
    {
    // polling bit, and No Write enable, and address
        target_command= entry_i+CAM_CONTENT_COUNT*iIndex;
        target_command= target_command | BIT31;

    //Check polling bit is clear
//  mdelay(1);
        while((i--)>=0)
        {
            ulStatus = read_nic_dword(dev, RWCAM);
            if(ulStatus & BIT31){
                continue;
            }
            else{
                break;
            }
        }
        write_nic_dword(dev, RWCAM, target_command);
        RT_TRACE(COMP_SEC,"CAM_read_entry(): WRITE A0: %x \n",target_command);
     // printk("CAM_read_entry(): WRITE A0: %lx \n",target_command);
        target_content = read_nic_dword(dev, RCAMO);
        RT_TRACE(COMP_SEC, "CAM_read_entry(): WRITE A8: %x \n",target_content);
     // printk("CAM_read_entry(): WRITE A8: %lx \n",target_content);
    }
    printk("\n");
}

void rtl819x_update_rxcounts(
    struct r8192_priv *priv,
    u32* TotalRxBcnNum,
    u32* TotalRxDataNum
)
{
    u16             SlotIndex;
    u8          i;

    *TotalRxBcnNum = 0;
    *TotalRxDataNum = 0;

    SlotIndex = (priv->ieee80211->LinkDetectInfo.SlotIndex++)%(priv->ieee80211->LinkDetectInfo.SlotNum);
    priv->ieee80211->LinkDetectInfo.RxBcnNum[SlotIndex] = priv->ieee80211->LinkDetectInfo.NumRecvBcnInPeriod;
    priv->ieee80211->LinkDetectInfo.RxDataNum[SlotIndex] = priv->ieee80211->LinkDetectInfo.NumRecvDataInPeriod;
    for( i=0; i<priv->ieee80211->LinkDetectInfo.SlotNum; i++ ){
        *TotalRxBcnNum += priv->ieee80211->LinkDetectInfo.RxBcnNum[i];
        *TotalRxDataNum += priv->ieee80211->LinkDetectInfo.RxDataNum[i];
    }
}


extern  void    rtl819x_watchdog_wqcallback(struct work_struct *work)
{
    struct delayed_work *dwork = container_of(work,struct delayed_work,work);
       struct r8192_priv *priv = container_of(dwork,struct r8192_priv,watch_dog_wq);
       struct net_device *dev = priv->ieee80211->dev;
    struct ieee80211_device* ieee = priv->ieee80211;
    RESET_TYPE  ResetType = RESET_TYPE_NORESET;
    static u8   check_reset_cnt=0;
    bool bBusyTraffic = false;

    if(!priv->up)
        return;
    hal_dm_watchdog(dev);

    {//to get busy traffic condition
        if(ieee->state == IEEE80211_LINKED)
        {
            if( ieee->LinkDetectInfo.NumRxOkInPeriod> 666 ||
                ieee->LinkDetectInfo.NumTxOkInPeriod> 666 ) {
                bBusyTraffic = true;
            }
            ieee->LinkDetectInfo.NumRxOkInPeriod = 0;
            ieee->LinkDetectInfo.NumTxOkInPeriod = 0;
            ieee->LinkDetectInfo.bBusyTraffic = bBusyTraffic;
        }
    }
    //added by amy for AP roaming
    {
        if(priv->ieee80211->state == IEEE80211_LINKED && priv->ieee80211->iw_mode == IW_MODE_INFRA)
        {
            u32 TotalRxBcnNum = 0;
            u32 TotalRxDataNum = 0;

            rtl819x_update_rxcounts(priv, &TotalRxBcnNum, &TotalRxDataNum);
            if((TotalRxBcnNum+TotalRxDataNum) == 0)
            {
                #ifdef TODO
                if(rfState == eRfOff)
                    RT_TRACE(COMP_ERR,"========>%s()\n",__FUNCTION__);
                #endif
                printk("===>%s(): AP is power off,connect another one\n",__FUNCTION__);
            //  Dot11d_Reset(dev);
                priv->ieee80211->state = IEEE80211_ASSOCIATING;
                notify_wx_assoc_event(priv->ieee80211);
                RemovePeerTS(priv->ieee80211,priv->ieee80211->current_network.bssid);
                priv->ieee80211->link_change(dev);
                                queue_work(priv->ieee80211->wq, &priv->ieee80211->associate_procedure_wq);

            }
        }
        priv->ieee80211->LinkDetectInfo.NumRecvBcnInPeriod=0;
        priv->ieee80211->LinkDetectInfo.NumRecvDataInPeriod=0;
    }
//  CAM_read_entry(dev,4);
    //check if reset the driver
    if(check_reset_cnt++ >= 3)
    {
            ResetType = rtl819x_ifcheck_resetornot(dev);
        check_reset_cnt = 3;
        //DbgPrint("Start to check silent reset\n");
    }
    //  RT_TRACE(COMP_RESET,"%s():priv->force_reset is %d,priv->ResetProgress is %d, priv->bForcedSilentReset is %d,priv->bDisableNormalResetCheck is %d,ResetType is %d\n",__FUNCTION__,priv->force_reset,priv->ResetProgress,priv->bForcedSilentReset,priv->bDisableNormalResetCheck,ResetType);
    if( (priv->force_reset) || (priv->ResetProgress==RESET_TYPE_NORESET &&
        (priv->bForcedSilentReset ||
        (!priv->bDisableNormalResetCheck && ResetType==RESET_TYPE_SILENT)))) // This is control by OID set in Pomelo
    {
        RT_TRACE(COMP_RESET,"%s():priv->force_reset is %d,priv->ResetProgress is %d, priv->bForcedSilentReset is %d,priv->bDisableNormalResetCheck is %d,ResetType is %d\n",__FUNCTION__,priv->force_reset,priv->ResetProgress,priv->bForcedSilentReset,priv->bDisableNormalResetCheck,ResetType);
        rtl819x_ifsilentreset(dev);
    }
    priv->force_reset = false;
    priv->bForcedSilentReset = false;
    priv->bResetInProgress = false;
    RT_TRACE(COMP_TRACE, " <==RtUsbCheckForHangWorkItemCallback()\n");

}

void watch_dog_timer_callback(unsigned long data)
{
    struct r8192_priv *priv = ieee80211_priv((struct net_device *) data);
    //printk("===============>watch_dog timer\n");
    queue_delayed_work(priv->priv_wq,&priv->watch_dog_wq, 0);
    mod_timer(&priv->watch_dog_timer, jiffies + MSECS(IEEE80211_WATCH_DOG_TIME));
}
int _rtl8192_up(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    //int i;
    int init_status = 0;
    priv->up=1;
    priv->ieee80211->ieee_up=1;
    RT_TRACE(COMP_INIT, "Bringing up iface");
    init_status = rtl8192_adapter_start(dev);
    if(!init_status)
    {
        RT_TRACE(COMP_ERR,"ERR!!! %s(): initialization failed!\n", __FUNCTION__);
        priv->up=priv->ieee80211->ieee_up = 0;
        return -EAGAIN;
    }
    RT_TRACE(COMP_INIT, "start adapter finished\n");
    rtl8192_rx_enable(dev);
//  rtl8192_tx_enable(dev);
    if(priv->ieee80211->state != IEEE80211_LINKED)
    ieee80211_softmac_start_protocol(priv->ieee80211);
    ieee80211_reset_queue(priv->ieee80211);
    watch_dog_timer_callback((unsigned long) dev);
    if(!netif_queue_stopped(dev))
        netif_start_queue(dev);
    else
        netif_wake_queue(dev);

    return 0;
}


int rtl8192_open(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    int ret;
    down(&priv->wx_sem);
    ret = rtl8192_up(dev);
    up(&priv->wx_sem);
    return ret;

}


int rtl8192_up(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);

    if (priv->up == 1) return -1;

    return _rtl8192_up(dev);
}


int rtl8192_close(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    int ret;

    down(&priv->wx_sem);

    ret = rtl8192_down(dev);

    up(&priv->wx_sem);

    return ret;

}

int rtl8192_down(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    int i;

    if (priv->up == 0) return -1;

    priv->up=0;
    priv->ieee80211->ieee_up = 0;
    RT_TRACE(COMP_DOWN, "==========>%s()\n", __FUNCTION__);
/* FIXME */
    if (!netif_queue_stopped(dev))
        netif_stop_queue(dev);

    rtl8192_rtx_disable(dev);
    //rtl8192_irq_disable(dev);

 /* Tx related queue release */
    for(i = 0; i < MAX_QUEUE_SIZE; i++) {
        skb_queue_purge(&priv->ieee80211->skb_waitQ [i]);
    }
    for(i = 0; i < MAX_QUEUE_SIZE; i++) {
        skb_queue_purge(&priv->ieee80211->skb_aggQ [i]);
    }

    for(i = 0; i < MAX_QUEUE_SIZE; i++) {
        skb_queue_purge(&priv->ieee80211->skb_drv_aggQ [i]);
    }

    //as cancel_delayed_work will del work->timer, so if work is not defined as struct delayed_work, it will corrupt
//  flush_scheduled_work();
    rtl8192_cancel_deferred_work(priv);
    deinit_hal_dm(dev);
    del_timer_sync(&priv->watch_dog_timer);


    ieee80211_softmac_stop_protocol(priv->ieee80211);
    memset(&priv->ieee80211->current_network, 0 , offsetof(struct ieee80211_network, list));
    RT_TRACE(COMP_DOWN, "<==========%s()\n", __FUNCTION__);

        return 0;
}


void rtl8192_commit(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    int reset_status = 0;
    //u8 reset_times = 0;
    if (priv->up == 0) return ;
    priv->up = 0;

    rtl8192_cancel_deferred_work(priv);
    del_timer_sync(&priv->watch_dog_timer);
    //cancel_delayed_work(&priv->SwChnlWorkItem);

    ieee80211_softmac_stop_protocol(priv->ieee80211);

    //rtl8192_irq_disable(dev);
    rtl8192_rtx_disable(dev);
    reset_status = _rtl8192_up(dev);

}

/*
void rtl8192_restart(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
*/
void rtl8192_restart(struct work_struct *work)
{
    struct r8192_priv *priv = container_of(work, struct r8192_priv, reset_wq);
    struct net_device *dev = priv->ieee80211->dev;

    down(&priv->wx_sem);

    rtl8192_commit(dev);

    up(&priv->wx_sem);
}

static void r8192_set_multicast(struct net_device *dev)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    short promisc;

    //down(&priv->wx_sem);

    /* FIXME FIXME */

    promisc = (dev->flags & IFF_PROMISC) ? 1:0;

    if (promisc != priv->promisc)
    //  rtl8192_commit(dev);

    priv->promisc = promisc;

    //schedule_work(&priv->reset_wq);
    //up(&priv->wx_sem);
}


int r8192_set_mac_adr(struct net_device *dev, void *mac)
{
    struct r8192_priv *priv = ieee80211_priv(dev);
    struct sockaddr *addr = mac;

    down(&priv->wx_sem);

    memcpy(dev->dev_addr, addr->sa_data, ETH_ALEN);

    schedule_work(&priv->reset_wq);
    up(&priv->wx_sem);

    return 0;
}

/* based on ipw2200 driver */
int rtl8192_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
{
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct iwreq *wrq = (struct iwreq *)rq;
    int ret=-1;
    struct ieee80211_device *ieee = priv->ieee80211;
    u32 key[4];
    u8 broadcast_addr[6] = {0xff,0xff,0xff,0xff,0xff,0xff};
    struct iw_point *p = &wrq->u.data;
    struct ieee_param *ipw = NULL;//(struct ieee_param *)wrq->u.data.pointer;

    down(&priv->wx_sem);


     if (p->length < sizeof(struct ieee_param) || !p->pointer){
         ret = -EINVAL;
         goto out;
    }

     ipw = kmalloc(p->length, GFP_KERNEL);
     if (ipw == NULL){
         ret = -ENOMEM;
         goto out;
     }
     if (copy_from_user(ipw, p->pointer, p->length)) {
        kfree(ipw);
        ret = -EFAULT;
        goto out;
    }

    switch (cmd) {
        case RTL_IOCTL_WPA_SUPPLICANT:
    //parse here for HW security
            if (ipw->cmd == IEEE_CMD_SET_ENCRYPTION)
            {
                if (ipw->u.crypt.set_tx)
                {
                    if (strcmp(ipw->u.crypt.alg, "CCMP") == 0)
                        ieee->pairwise_key_type = KEY_TYPE_CCMP;
                    else if (strcmp(ipw->u.crypt.alg, "TKIP") == 0)
                        ieee->pairwise_key_type = KEY_TYPE_TKIP;
                    else if (strcmp(ipw->u.crypt.alg, "WEP") == 0)
                    {
                        if (ipw->u.crypt.key_len == 13)
                            ieee->pairwise_key_type = KEY_TYPE_WEP104;
                        else if (ipw->u.crypt.key_len == 5)
                            ieee->pairwise_key_type = KEY_TYPE_WEP40;
                    }
                    else
                        ieee->pairwise_key_type = KEY_TYPE_NA;

                    if (ieee->pairwise_key_type)
                    {
                        memcpy((u8*)key, ipw->u.crypt.key, 16);
                        EnableHWSecurityConfig8192(dev);
                    //we fill both index entry and 4th entry for pairwise key as in IPW interface, adhoc will only get here, so we need index entry for its default key serching!
                    //added by WB.
                        setKey(dev, 4, ipw->u.crypt.idx, ieee->pairwise_key_type, (u8*)ieee->ap_mac_addr, 0, key);
                        if (ieee->auth_mode != 2)
                        setKey(dev, ipw->u.crypt.idx, ipw->u.crypt.idx, ieee->pairwise_key_type, (u8*)ieee->ap_mac_addr, 0, key);
                    }
                }
                else //if (ipw->u.crypt.idx) //group key use idx > 0
                {
                    memcpy((u8*)key, ipw->u.crypt.key, 16);
                    if (strcmp(ipw->u.crypt.alg, "CCMP") == 0)
                        ieee->group_key_type= KEY_TYPE_CCMP;
                    else if (strcmp(ipw->u.crypt.alg, "TKIP") == 0)
                        ieee->group_key_type = KEY_TYPE_TKIP;
                    else if (strcmp(ipw->u.crypt.alg, "WEP") == 0)
                    {
                        if (ipw->u.crypt.key_len == 13)
                            ieee->group_key_type = KEY_TYPE_WEP104;
                        else if (ipw->u.crypt.key_len == 5)
                            ieee->group_key_type = KEY_TYPE_WEP40;
                    }
                    else
                        ieee->group_key_type = KEY_TYPE_NA;

                    if (ieee->group_key_type)
                    {
                            setKey( dev,
                                ipw->u.crypt.idx,
                                ipw->u.crypt.idx,       //KeyIndex
                                    ieee->group_key_type,   //KeyType
                                        broadcast_addr, //MacAddr
                                0,      //DefaultKey
                                    key);       //KeyContent
                    }
                }
            }
#ifdef JOHN_HWSEC_DEBUG
        //john's test 0711
        printk("@@ wrq->u pointer = ");
        for(i=0;i<wrq->u.data.length;i++){
            if(i%10==0) printk("\n");
            printk( "%8x|", ((u32*)wrq->u.data.pointer)[i] );
        }
        printk("\n");
#endif /*JOHN_HWSEC_DEBUG*/
        ret = ieee80211_wpa_supplicant_ioctl(priv->ieee80211, &wrq->u.data);
        break;

        default:
        ret = -EOPNOTSUPP;
        break;
    }
    kfree(ipw);
    ipw = NULL;
out:
    up(&priv->wx_sem);
    return ret;
}

u8 HwRateToMRate90(bool bIsHT, u8 rate)
{
    u8  ret_rate = 0xff;

    if(!bIsHT) {
        switch(rate) {
            case DESC90_RATE1M:   ret_rate = MGN_1M;         break;
            case DESC90_RATE2M:   ret_rate = MGN_2M;         break;
            case DESC90_RATE5_5M: ret_rate = MGN_5_5M;       break;
            case DESC90_RATE11M:  ret_rate = MGN_11M;        break;
            case DESC90_RATE6M:   ret_rate = MGN_6M;         break;
            case DESC90_RATE9M:   ret_rate = MGN_9M;         break;
            case DESC90_RATE12M:  ret_rate = MGN_12M;        break;
            case DESC90_RATE18M:  ret_rate = MGN_18M;        break;
            case DESC90_RATE24M:  ret_rate = MGN_24M;        break;
            case DESC90_RATE36M:  ret_rate = MGN_36M;        break;
            case DESC90_RATE48M:  ret_rate = MGN_48M;        break;
            case DESC90_RATE54M:  ret_rate = MGN_54M;        break;

            default:
                ret_rate = 0xff;
                RT_TRACE(COMP_RECV, "HwRateToMRate90(): Non supported Rate [%x], bIsHT = %d!!!\n", rate, bIsHT);
                break;
        }

    } else {
        switch(rate) {
            case DESC90_RATEMCS0:   ret_rate = MGN_MCS0;    break;
            case DESC90_RATEMCS1:   ret_rate = MGN_MCS1;    break;
            case DESC90_RATEMCS2:   ret_rate = MGN_MCS2;    break;
            case DESC90_RATEMCS3:   ret_rate = MGN_MCS3;    break;
            case DESC90_RATEMCS4:   ret_rate = MGN_MCS4;    break;
            case DESC90_RATEMCS5:   ret_rate = MGN_MCS5;    break;
            case DESC90_RATEMCS6:   ret_rate = MGN_MCS6;    break;
            case DESC90_RATEMCS7:   ret_rate = MGN_MCS7;    break;
            case DESC90_RATEMCS8:   ret_rate = MGN_MCS8;    break;
            case DESC90_RATEMCS9:   ret_rate = MGN_MCS9;    break;
            case DESC90_RATEMCS10:  ret_rate = MGN_MCS10;   break;
            case DESC90_RATEMCS11:  ret_rate = MGN_MCS11;   break;
            case DESC90_RATEMCS12:  ret_rate = MGN_MCS12;   break;
            case DESC90_RATEMCS13:  ret_rate = MGN_MCS13;   break;
            case DESC90_RATEMCS14:  ret_rate = MGN_MCS14;   break;
            case DESC90_RATEMCS15:  ret_rate = MGN_MCS15;   break;
            case DESC90_RATEMCS32:  ret_rate = (0x80|0x20); break;

            default:
                ret_rate = 0xff;
                RT_TRACE(COMP_RECV, "HwRateToMRate90(): Non supported Rate [%x], bIsHT = %d!!!\n",rate, bIsHT);
                break;
        }
    }

    return ret_rate;
}

void UpdateRxPktTimeStamp8190 (struct net_device *dev, struct ieee80211_rx_stats *stats)
{
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);

    if(stats->bIsAMPDU && !stats->bFirstMPDU) {
        stats->mac_time[0] = priv->LastRxDescTSFLow;
        stats->mac_time[1] = priv->LastRxDescTSFHigh;
    } else {
        priv->LastRxDescTSFLow = stats->mac_time[0];
        priv->LastRxDescTSFHigh = stats->mac_time[1];
    }
}

//by amy 080606

long rtl819x_translate_todbm(u8 signal_strength_index   )// 0-100 index.
{
    long    signal_power; // in dBm.

    // Translate to dBm (x=0.5y-95).
    signal_power = (long)((signal_strength_index + 1) >> 1);
    signal_power -= 95;

    return signal_power;
}


/* 2008/01/22 MH We can not declare RSSI/EVM total value of sliding window to
    be a local static. Otherwise, it may increase when we return from S3/S4. The
    value will be kept in memory or disk. Declare the value in the adaptor
    and it will be reinitialized when returned from S3/S4. */
void rtl8192_process_phyinfo(struct r8192_priv * priv,u8* buffer, struct ieee80211_rx_stats * pprevious_stats, struct ieee80211_rx_stats * pcurrent_stats)
{
    bool bcheck = false;
    u8  rfpath;
    u32 nspatial_stream, tmp_val;
    //u8    i;
    static u32 slide_rssi_index=0, slide_rssi_statistics=0;
    static u32 slide_evm_index=0, slide_evm_statistics=0;
    static u32 last_rssi=0, last_evm=0;

    static u32 slide_beacon_adc_pwdb_index=0, slide_beacon_adc_pwdb_statistics=0;
    static u32 last_beacon_adc_pwdb=0;

    struct ieee80211_hdr_3addr *hdr;
    u16 sc ;
    unsigned int frag,seq;
    hdr = (struct ieee80211_hdr_3addr *)buffer;
    sc = le16_to_cpu(hdr->seq_ctl);
    frag = WLAN_GET_SEQ_FRAG(sc);
    seq = WLAN_GET_SEQ_SEQ(sc);
    //cosa add 04292008 to record the sequence number
    pcurrent_stats->Seq_Num = seq;
    //
    // Check whether we should take the previous packet into accounting
    //
    if(!pprevious_stats->bIsAMPDU)
    {
        // if previous packet is not aggregated packet
        bcheck = true;
    }else
    {
    }


    if(slide_rssi_statistics++ >= PHY_RSSI_SLID_WIN_MAX)
    {
        slide_rssi_statistics = PHY_RSSI_SLID_WIN_MAX;
        last_rssi = priv->stats.slide_signal_strength[slide_rssi_index];
        priv->stats.slide_rssi_total -= last_rssi;
    }
    priv->stats.slide_rssi_total += pprevious_stats->SignalStrength;

    priv->stats.slide_signal_strength[slide_rssi_index++] = pprevious_stats->SignalStrength;
    if(slide_rssi_index >= PHY_RSSI_SLID_WIN_MAX)
        slide_rssi_index = 0;

    // <1> Showed on UI for user, in dbm
    tmp_val = priv->stats.slide_rssi_total/slide_rssi_statistics;
    priv->stats.signal_strength = rtl819x_translate_todbm((u8)tmp_val);
    pcurrent_stats->rssi = priv->stats.signal_strength;
    //
    // If the previous packet does not match the criteria, neglect it
    //
    if(!pprevious_stats->bPacketMatchBSSID)
    {
        if(!pprevious_stats->bToSelfBA)
            return;
    }

    if(!bcheck)
        return;


    //rtl8190_process_cck_rxpathsel(priv,pprevious_stats);//only rtl8190 supported

    //
    // Check RSSI
    //
    priv->stats.num_process_phyinfo++;

    /* record the general signal strength to the sliding window. */


    // <2> Showed on UI for engineering
    // hardware does not provide rssi information for each rf path in CCK
    if(!pprevious_stats->bIsCCK && (pprevious_stats->bPacketToSelf || pprevious_stats->bToSelfBA))
    {
        for (rfpath = RF90_PATH_A; rfpath < priv->NumTotalRFPath; rfpath++)
        {
             if (!rtl8192_phy_CheckIsLegalRFPath(priv->ieee80211->dev, rfpath))
                 continue;

            //Fixed by Jacken 2008-03-20
            if(priv->stats.rx_rssi_percentage[rfpath] == 0)
            {
                priv->stats.rx_rssi_percentage[rfpath] = pprevious_stats->RxMIMOSignalStrength[rfpath];
                //DbgPrint("MIMO RSSI initialize \n");
            }
            if(pprevious_stats->RxMIMOSignalStrength[rfpath]  > priv->stats.rx_rssi_percentage[rfpath])
            {
                priv->stats.rx_rssi_percentage[rfpath] =
                    ( (priv->stats.rx_rssi_percentage[rfpath]*(Rx_Smooth_Factor-1)) +
                    (pprevious_stats->RxMIMOSignalStrength[rfpath])) /(Rx_Smooth_Factor);
                priv->stats.rx_rssi_percentage[rfpath] = priv->stats.rx_rssi_percentage[rfpath]  + 1;
            }
            else
            {
                priv->stats.rx_rssi_percentage[rfpath] =
                    ( (priv->stats.rx_rssi_percentage[rfpath]*(Rx_Smooth_Factor-1)) +
                    (pprevious_stats->RxMIMOSignalStrength[rfpath])) /(Rx_Smooth_Factor);
            }
            RT_TRACE(COMP_DBG,"priv->stats.rx_rssi_percentage[rfPath]  = %d \n" ,priv->stats.rx_rssi_percentage[rfpath] );
        }
    }


    //
    // Check PWDB.
    //
    RT_TRACE(COMP_RXDESC, "Smooth %s PWDB = %d\n",
                pprevious_stats->bIsCCK? "CCK": "OFDM",
                pprevious_stats->RxPWDBAll);

    if(pprevious_stats->bPacketBeacon)
    {
/* record the beacon pwdb to the sliding window. */
        if(slide_beacon_adc_pwdb_statistics++ >= PHY_Beacon_RSSI_SLID_WIN_MAX)
        {
            slide_beacon_adc_pwdb_statistics = PHY_Beacon_RSSI_SLID_WIN_MAX;
            last_beacon_adc_pwdb = priv->stats.Slide_Beacon_pwdb[slide_beacon_adc_pwdb_index];
            priv->stats.Slide_Beacon_Total -= last_beacon_adc_pwdb;
            //DbgPrint("slide_beacon_adc_pwdb_index = %d, last_beacon_adc_pwdb = %d, Adapter->RxStats.Slide_Beacon_Total = %d\n",
            //  slide_beacon_adc_pwdb_index, last_beacon_adc_pwdb, Adapter->RxStats.Slide_Beacon_Total);
        }
        priv->stats.Slide_Beacon_Total += pprevious_stats->RxPWDBAll;
        priv->stats.Slide_Beacon_pwdb[slide_beacon_adc_pwdb_index] = pprevious_stats->RxPWDBAll;
        //DbgPrint("slide_beacon_adc_pwdb_index = %d, pPreviousRfd->Status.RxPWDBAll = %d\n", slide_beacon_adc_pwdb_index, pPreviousRfd->Status.RxPWDBAll);
        slide_beacon_adc_pwdb_index++;
        if(slide_beacon_adc_pwdb_index >= PHY_Beacon_RSSI_SLID_WIN_MAX)
            slide_beacon_adc_pwdb_index = 0;
        pprevious_stats->RxPWDBAll = priv->stats.Slide_Beacon_Total/slide_beacon_adc_pwdb_statistics;
        if(pprevious_stats->RxPWDBAll >= 3)
            pprevious_stats->RxPWDBAll -= 3;
    }

    RT_TRACE(COMP_RXDESC, "Smooth %s PWDB = %d\n",
                pprevious_stats->bIsCCK? "CCK": "OFDM",
                pprevious_stats->RxPWDBAll);


    if(pprevious_stats->bPacketToSelf || pprevious_stats->bPacketBeacon || pprevious_stats->bToSelfBA)
    {
        if(priv->undecorated_smoothed_pwdb < 0) // initialize
        {
            priv->undecorated_smoothed_pwdb = pprevious_stats->RxPWDBAll;
            //DbgPrint("First pwdb initialize \n");
        }
        if(pprevious_stats->RxPWDBAll > (u32)priv->undecorated_smoothed_pwdb)
        {
            priv->undecorated_smoothed_pwdb =
                    ( ((priv->undecorated_smoothed_pwdb)*(Rx_Smooth_Factor-1)) +
                    (pprevious_stats->RxPWDBAll)) /(Rx_Smooth_Factor);
            priv->undecorated_smoothed_pwdb = priv->undecorated_smoothed_pwdb + 1;
        }
        else
        {
            priv->undecorated_smoothed_pwdb =
                    ( ((priv->undecorated_smoothed_pwdb)*(Rx_Smooth_Factor-1)) +
                    (pprevious_stats->RxPWDBAll)) /(Rx_Smooth_Factor);
        }

    }

    //
    // Check EVM
    //
    /* record the general EVM to the sliding window. */
    if(pprevious_stats->SignalQuality == 0)
    {
    }
    else
    {
        if(pprevious_stats->bPacketToSelf || pprevious_stats->bPacketBeacon || pprevious_stats->bToSelfBA){
            if(slide_evm_statistics++ >= PHY_RSSI_SLID_WIN_MAX){
                slide_evm_statistics = PHY_RSSI_SLID_WIN_MAX;
                last_evm = priv->stats.slide_evm[slide_evm_index];
                priv->stats.slide_evm_total -= last_evm;
            }

            priv->stats.slide_evm_total += pprevious_stats->SignalQuality;

            priv->stats.slide_evm[slide_evm_index++] = pprevious_stats->SignalQuality;
            if(slide_evm_index >= PHY_RSSI_SLID_WIN_MAX)
                slide_evm_index = 0;

            // <1> Showed on UI for user, in percentage.
            tmp_val = priv->stats.slide_evm_total/slide_evm_statistics;
            priv->stats.signal_quality = tmp_val;
            //cosa add 10/11/2007, Showed on UI for user in Windows Vista, for Link quality.
            priv->stats.last_signal_strength_inpercent = tmp_val;
        }

        // <2> Showed on UI for engineering
        if(pprevious_stats->bPacketToSelf || pprevious_stats->bPacketBeacon || pprevious_stats->bToSelfBA)
        {
            for(nspatial_stream = 0; nspatial_stream<2 ; nspatial_stream++) // 2 spatial stream
            {
                if(pprevious_stats->RxMIMOSignalQuality[nspatial_stream] != -1)
                {
                    if(priv->stats.rx_evm_percentage[nspatial_stream] == 0) // initialize
                    {
                        priv->stats.rx_evm_percentage[nspatial_stream] = pprevious_stats->RxMIMOSignalQuality[nspatial_stream];
                    }
                    priv->stats.rx_evm_percentage[nspatial_stream] =
                        ( (priv->stats.rx_evm_percentage[nspatial_stream]* (Rx_Smooth_Factor-1)) +
                        (pprevious_stats->RxMIMOSignalQuality[nspatial_stream]* 1)) / (Rx_Smooth_Factor);
                }
            }
        }
    }


}

/*-----------------------------------------------------------------------------
 * Function:    rtl819x_query_rxpwrpercentage()
 *
 * Overview:
 *
 * Input:       char        antpower
 *
 * Output:      NONE
 *
 * Return:      0-100 percentage
 *
 * Revised History:
 *  When        Who     Remark
 *  05/26/2008  amy     Create Version 0 porting from windows code.
 *
 *---------------------------------------------------------------------------*/
static u8 rtl819x_query_rxpwrpercentage(
    char        antpower
    )
{
    if ((antpower <= -100) || (antpower >= 20))
    {
        return  0;
    }
    else if (antpower >= 0)
    {
        return  100;
    }
    else
    {
        return  (100+antpower);
    }

}   /* QueryRxPwrPercentage */

static u8
rtl819x_evm_dbtopercentage(
    char value
    )
{
    char ret_val;

    ret_val = value;

    if(ret_val >= 0)
        ret_val = 0;
    if(ret_val <= -33)
        ret_val = -33;
    ret_val = 0 - ret_val;
    ret_val*=3;
    if(ret_val == 99)
        ret_val = 100;
    return(ret_val);
}
//
//  Description:
//  We want good-looking for signal strength/quality
//  2007/7/19 01:09, by cosa.
//
long
rtl819x_signal_scale_mapping(
    long currsig
    )
{
    long retsig;

    // Step 1. Scale mapping.
    if(currsig >= 61 && currsig <= 100)
    {
        retsig = 90 + ((currsig - 60) / 4);
    }
    else if(currsig >= 41 && currsig <= 60)
    {
        retsig = 78 + ((currsig - 40) / 2);
    }
    else if(currsig >= 31 && currsig <= 40)
    {
        retsig = 66 + (currsig - 30);
    }
    else if(currsig >= 21 && currsig <= 30)
    {
        retsig = 54 + (currsig - 20);
    }
    else if(currsig >= 5 && currsig <= 20)
    {
        retsig = 42 + (((currsig - 5) * 2) / 3);
    }
    else if(currsig == 4)
    {
        retsig = 36;
    }
    else if(currsig == 3)
    {
        retsig = 27;
    }
    else if(currsig == 2)
    {
        retsig = 18;
    }
    else if(currsig == 1)
    {
        retsig = 9;
    }
    else
    {
        retsig = currsig;
    }

    return retsig;
}

static void rtl8192_query_rxphystatus(
    struct r8192_priv * priv,
    struct ieee80211_rx_stats * pstats,
    rx_drvinfo_819x_usb  * pdrvinfo,
    struct ieee80211_rx_stats * precord_stats,
    bool bpacket_match_bssid,
    bool bpacket_toself,
    bool bPacketBeacon,
    bool bToSelfBA
    )
{
    //PRT_RFD_STATUS        pRtRfdStatus = &(pRfd->Status);
    phy_sts_ofdm_819xusb_t* pofdm_buf;
    phy_sts_cck_819xusb_t   *   pcck_buf;
    phy_ofdm_rx_status_rxsc_sgien_exintfflag* prxsc;
    u8              *prxpkt;
    u8              i, max_spatial_stream, tmp_rxsnr, tmp_rxevm, rxsc_sgien_exflg;
    char                rx_pwr[4], rx_pwr_all=0;
    //long              rx_avg_pwr = 0;
    char                rx_snrX, rx_evmX;
    u8              evm, pwdb_all;
    u32             RSSI, total_rssi=0;//, total_evm=0;
//  long                signal_strength_index = 0;
    u8              is_cck_rate=0;
    u8              rf_rx_num = 0;


    priv->stats.numqry_phystatus++;

    is_cck_rate = rx_hal_is_cck_rate(pdrvinfo);

    // Record it for next packet processing
    memset(precord_stats, 0, sizeof(struct ieee80211_rx_stats));
    pstats->bPacketMatchBSSID = precord_stats->bPacketMatchBSSID = bpacket_match_bssid;
    pstats->bPacketToSelf = precord_stats->bPacketToSelf = bpacket_toself;
    pstats->bIsCCK = precord_stats->bIsCCK = is_cck_rate;//RX_HAL_IS_CCK_RATE(pDrvInfo);
    pstats->bPacketBeacon = precord_stats->bPacketBeacon = bPacketBeacon;
    pstats->bToSelfBA = precord_stats->bToSelfBA = bToSelfBA;

    prxpkt = (u8*)pdrvinfo;

    /* Move pointer to the 16th bytes. Phy status start address. */
    prxpkt += sizeof(rx_drvinfo_819x_usb);

    /* Initial the cck and ofdm buffer pointer */
    pcck_buf = (phy_sts_cck_819xusb_t *)prxpkt;
    pofdm_buf = (phy_sts_ofdm_819xusb_t *)prxpkt;

    pstats->RxMIMOSignalQuality[0] = -1;
    pstats->RxMIMOSignalQuality[1] = -1;
    precord_stats->RxMIMOSignalQuality[0] = -1;
    precord_stats->RxMIMOSignalQuality[1] = -1;

    if(is_cck_rate)
    {
        //
        // (1)Hardware does not provide RSSI for CCK
        //

        //
        // (2)PWDB, Average PWDB cacluated by hardware (for rate adaptive)
        //
        u8 report;//, cck_agc_rpt;

        priv->stats.numqry_phystatusCCK++;

        if(!priv->bCckHighPower)
        {
            report = pcck_buf->cck_agc_rpt & 0xc0;
            report = report>>6;
            switch(report)
            {
                //Fixed by Jacken from Bryant 2008-03-20
                //Original value is -38 , -26 , -14 , -2
                //Fixed value is -35 , -23 , -11 , 6
                case 0x3:
                    rx_pwr_all = -35 - (pcck_buf->cck_agc_rpt & 0x3e);
                    break;
                case 0x2:
                    rx_pwr_all = -23 - (pcck_buf->cck_agc_rpt & 0x3e);
                    break;
                case 0x1:
                    rx_pwr_all = -11 - (pcck_buf->cck_agc_rpt & 0x3e);
                    break;
                case 0x0:
                    rx_pwr_all = 6 - (pcck_buf->cck_agc_rpt & 0x3e);
                    break;
            }
        }
        else
        {
            report = pcck_buf->cck_agc_rpt & 0x60;
            report = report>>5;
            switch(report)
            {
                case 0x3:
                    rx_pwr_all = -35 - ((pcck_buf->cck_agc_rpt & 0x1f)<<1) ;
                    break;
                case 0x2:
                    rx_pwr_all = -23 - ((pcck_buf->cck_agc_rpt & 0x1f)<<1);
                    break;
                case 0x1:
                    rx_pwr_all = -11 - ((pcck_buf->cck_agc_rpt & 0x1f)<<1) ;
                    break;
                case 0x0:
                    rx_pwr_all = 6 - ((pcck_buf->cck_agc_rpt & 0x1f)<<1) ;
                    break;
            }
        }

        pwdb_all = rtl819x_query_rxpwrpercentage(rx_pwr_all);
        pstats->RxPWDBAll = precord_stats->RxPWDBAll = pwdb_all;
        pstats->RecvSignalPower = pwdb_all;

        //
        // (3) Get Signal Quality (EVM)
        //
        //if(bpacket_match_bssid)
        {
            u8  sq;

            if(pstats->RxPWDBAll > 40)
            {
                sq = 100;
            }else
            {
                sq = pcck_buf->sq_rpt;

                if(pcck_buf->sq_rpt > 64)
                    sq = 0;
                else if (pcck_buf->sq_rpt < 20)
                    sq = 100;
                else
                    sq = ((64-sq) * 100) / 44;
            }
            pstats->SignalQuality = precord_stats->SignalQuality = sq;
            pstats->RxMIMOSignalQuality[0] = precord_stats->RxMIMOSignalQuality[0] = sq;
            pstats->RxMIMOSignalQuality[1] = precord_stats->RxMIMOSignalQuality[1] = -1;
        }
    }
    else
    {
        priv->stats.numqry_phystatusHT++;
        //
        // (1)Get RSSI for HT rate
        //
        for(i=RF90_PATH_A; i<priv->NumTotalRFPath; i++)
        {
            // 2008/01/30 MH we will judge RF RX path now.
            if (priv->brfpath_rxenable[i])
                rf_rx_num++;
            else
                continue;

        if (!rtl8192_phy_CheckIsLegalRFPath(priv->ieee80211->dev, i))
                continue;

            //Fixed by Jacken from Bryant 2008-03-20
            //Original value is 106
            rx_pwr[i] = ((pofdm_buf->trsw_gain_X[i]&0x3F)*2) - 106;

            //Get Rx snr value in DB
            tmp_rxsnr = pofdm_buf->rxsnr_X[i];
            rx_snrX = (char)(tmp_rxsnr);
            //rx_snrX >>= 1;
            rx_snrX /= 2;
            priv->stats.rxSNRdB[i] = (long)rx_snrX;

            /* Translate DBM to percentage. */
            RSSI = rtl819x_query_rxpwrpercentage(rx_pwr[i]);
            total_rssi += RSSI;

            /* Record Signal Strength for next packet */
            //if(bpacket_match_bssid)
            {
                pstats->RxMIMOSignalStrength[i] =(u8) RSSI;
                precord_stats->RxMIMOSignalStrength[i] =(u8) RSSI;
            }
        }


        //
        // (2)PWDB, Average PWDB cacluated by hardware (for rate adaptive)
        //
        //Fixed by Jacken from Bryant 2008-03-20
        //Original value is 106
        rx_pwr_all = (((pofdm_buf->pwdb_all ) >> 1 )& 0x7f) -106;
        pwdb_all = rtl819x_query_rxpwrpercentage(rx_pwr_all);

        pstats->RxPWDBAll = precord_stats->RxPWDBAll = pwdb_all;
        pstats->RxPower = precord_stats->RxPower =  rx_pwr_all;

        //
        // (3)EVM of HT rate
        //
        if(pdrvinfo->RxHT && pdrvinfo->RxRate>=DESC90_RATEMCS8 &&
            pdrvinfo->RxRate<=DESC90_RATEMCS15)
            max_spatial_stream = 2; //both spatial stream make sense
        else
            max_spatial_stream = 1; //only spatial stream 1 makes sense

        for(i=0; i<max_spatial_stream; i++)
        {
            tmp_rxevm = pofdm_buf->rxevm_X[i];
            rx_evmX = (char)(tmp_rxevm);

            // Do not use shift operation like "rx_evmX >>= 1" because the compiler of free build environment
            // will set the most significant bit to "zero" when doing shifting operation which may change a negative
            // value to positive one, then the dbm value (which is supposed to be negative)  is not correct anymore.
            rx_evmX /= 2;   //dbm

            evm = rtl819x_evm_dbtopercentage(rx_evmX);
            //if(bpacket_match_bssid)
            {
                if(i==0) // Fill value in RFD, Get the first spatial stream only
                    pstats->SignalQuality = precord_stats->SignalQuality = (u8)(evm & 0xff);
                pstats->RxMIMOSignalQuality[i] = precord_stats->RxMIMOSignalQuality[i] = (u8)(evm & 0xff);
            }
        }


        /* record rx statistics for debug */
        rxsc_sgien_exflg = pofdm_buf->rxsc_sgien_exflg;
        prxsc = (phy_ofdm_rx_status_rxsc_sgien_exintfflag *)&rxsc_sgien_exflg;
        if(pdrvinfo->BW)    //40M channel
            priv->stats.received_bwtype[1+prxsc->rxsc]++;
        else                //20M channel
            priv->stats.received_bwtype[0]++;
    }

    //UI BSS List signal strength(in percentage), make it good looking, from 0~100.
    //It is assigned to the BSS List in GetValueFromBeaconOrProbeRsp().
    if(is_cck_rate)
    {
        pstats->SignalStrength = precord_stats->SignalStrength = (u8)(rtl819x_signal_scale_mapping((long)pwdb_all));//PWDB_ALL;

    }
    else
    {
        //pRfd->Status.SignalStrength = pRecordRfd->Status.SignalStrength = (u8)(SignalScaleMapping(total_rssi/=RF90_PATH_MAX));//(u8)(total_rssi/=RF90_PATH_MAX);
        // We can judge RX path number now.
        if (rf_rx_num != 0)
            pstats->SignalStrength = precord_stats->SignalStrength = (u8)(rtl819x_signal_scale_mapping((long)(total_rssi/=rf_rx_num)));
    }
}   /* QueryRxPhyStatus8190Pci */

void
rtl8192_record_rxdesc_forlateruse(
    struct ieee80211_rx_stats * psrc_stats,
    struct ieee80211_rx_stats * ptarget_stats
)
{
    ptarget_stats->bIsAMPDU = psrc_stats->bIsAMPDU;
    ptarget_stats->bFirstMPDU = psrc_stats->bFirstMPDU;
    ptarget_stats->Seq_Num = psrc_stats->Seq_Num;
}


void TranslateRxSignalStuff819xUsb(struct sk_buff *skb,
                   struct ieee80211_rx_stats * pstats,
                   rx_drvinfo_819x_usb  *pdrvinfo)
{
    // TODO: We must only check packet for current MAC address. Not finish
    rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
    struct net_device *dev=info->dev;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    bool bpacket_match_bssid, bpacket_toself;
    bool bPacketBeacon=FALSE, bToSelfBA=FALSE;
    static struct ieee80211_rx_stats  previous_stats;
    struct ieee80211_hdr_3addr *hdr;//by amy
       u16 fc,type;

    // Get Signal Quality for only RX data queue (but not command queue)

    u8* tmp_buf;
    //u16 tmp_buf_len = 0;
    u8  *praddr;

    /* Get MAC frame start address. */
    tmp_buf = (u8*)skb->data;// + get_rxpacket_shiftbytes_819xusb(pstats);

    hdr = (struct ieee80211_hdr_3addr *)tmp_buf;
    fc = le16_to_cpu(hdr->frame_ctl);
    type = WLAN_FC_GET_TYPE(fc);
    praddr = hdr->addr1;

    /* Check if the received packet is acceptable. */
    bpacket_match_bssid = ((IEEE80211_FTYPE_CTL != type) &&
                            (eqMacAddr(priv->ieee80211->current_network.bssid,  (fc & IEEE80211_FCTL_TODS)? hdr->addr1 : (fc & IEEE80211_FCTL_FROMDS )? hdr->addr2 : hdr->addr3))
                                 && (!pstats->bHwError) && (!pstats->bCRC)&& (!pstats->bICV));
    bpacket_toself =  bpacket_match_bssid & (eqMacAddr(praddr, priv->ieee80211->dev->dev_addr));

        if(WLAN_FC_GET_FRAMETYPE(fc)== IEEE80211_STYPE_BEACON)
        {
            bPacketBeacon = true;
            //DbgPrint("Beacon 2, MatchBSSID = %d, ToSelf = %d \n", bPacketMatchBSSID, bPacketToSelf);
        }
        if(WLAN_FC_GET_FRAMETYPE(fc) == IEEE80211_STYPE_BLOCKACK)
        {
            if((eqMacAddr(praddr,dev->dev_addr)))
                bToSelfBA = true;
                //DbgPrint("BlockAck, MatchBSSID = %d, ToSelf = %d \n", bPacketMatchBSSID, bPacketToSelf);
        }



    if(bpacket_match_bssid)
    {
        priv->stats.numpacket_matchbssid++;
    }
    if(bpacket_toself){
        priv->stats.numpacket_toself++;
    }
    //
    // Process PHY information for previous packet (RSSI/PWDB/EVM)
    //
    // Because phy information is contained in the last packet of AMPDU only, so driver
    // should process phy information of previous packet
    rtl8192_process_phyinfo(priv, tmp_buf, &previous_stats, pstats);
    rtl8192_query_rxphystatus(priv, pstats, pdrvinfo, &previous_stats, bpacket_match_bssid,bpacket_toself,bPacketBeacon,bToSelfBA);
    rtl8192_record_rxdesc_forlateruse(pstats, &previous_stats);

}

void
UpdateReceivedRateHistogramStatistics8190(
    struct net_device *dev,
    struct ieee80211_rx_stats *stats
    )
{
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    u32 rcvType=1;   //0: Total, 1:OK, 2:CRC, 3:ICV
    u32 rateIndex;
    u32 preamble_guardinterval;  //1: short preamble/GI, 0: long preamble/GI


    if(stats->bCRC)
    rcvType = 2;
    else if(stats->bICV)
    rcvType = 3;

    if(stats->bShortPreamble)
    preamble_guardinterval = 1;// short
    else
    preamble_guardinterval = 0;// long

    switch(stats->rate)
    {
        //
        // CCK rate
        //
        case MGN_1M:    rateIndex = 0;  break;
        case MGN_2M:    rateIndex = 1;  break;
        case MGN_5_5M:  rateIndex = 2;  break;
        case MGN_11M:   rateIndex = 3;  break;
        //
        // Legacy OFDM rate
        //
        case MGN_6M:    rateIndex = 4;  break;
        case MGN_9M:    rateIndex = 5;  break;
        case MGN_12M:   rateIndex = 6;  break;
        case MGN_18M:   rateIndex = 7;  break;
        case MGN_24M:   rateIndex = 8;  break;
        case MGN_36M:   rateIndex = 9;  break;
        case MGN_48M:   rateIndex = 10; break;
        case MGN_54M:   rateIndex = 11; break;
        //
        // 11n High throughput rate
        //
        case MGN_MCS0:  rateIndex = 12; break;
        case MGN_MCS1:  rateIndex = 13; break;
        case MGN_MCS2:  rateIndex = 14; break;
        case MGN_MCS3:  rateIndex = 15; break;
        case MGN_MCS4:  rateIndex = 16; break;
        case MGN_MCS5:  rateIndex = 17; break;
        case MGN_MCS6:  rateIndex = 18; break;
        case MGN_MCS7:  rateIndex = 19; break;
        case MGN_MCS8:  rateIndex = 20; break;
        case MGN_MCS9:  rateIndex = 21; break;
        case MGN_MCS10: rateIndex = 22; break;
        case MGN_MCS11: rateIndex = 23; break;
        case MGN_MCS12: rateIndex = 24; break;
        case MGN_MCS13: rateIndex = 25; break;
        case MGN_MCS14: rateIndex = 26; break;
        case MGN_MCS15: rateIndex = 27; break;
        default:        rateIndex = 28; break;
    }
    priv->stats.received_preamble_GI[preamble_guardinterval][rateIndex]++;
    priv->stats.received_rate_histogram[0][rateIndex]++; //total
    priv->stats.received_rate_histogram[rcvType][rateIndex]++;
}


void query_rxdesc_status(struct sk_buff *skb, struct ieee80211_rx_stats *stats, bool bIsRxAggrSubframe)
{
    rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
    struct net_device *dev=info->dev;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    //rx_desc_819x_usb *desc = (rx_desc_819x_usb *)skb->data;
    rx_drvinfo_819x_usb  *driver_info = NULL;

    //
    //Get Rx Descriptor Information
    //
#ifdef USB_RX_AGGREGATION_SUPPORT
    if (bIsRxAggrSubframe)
    {
        rx_desc_819x_usb_aggr_subframe *desc = (rx_desc_819x_usb_aggr_subframe *)skb->data;
        stats->Length = desc->Length ;
        stats->RxDrvInfoSize = desc->RxDrvInfoSize;
        stats->RxBufShift = 0; //RxBufShift = 2 in RxDesc, but usb didn't shift bytes in fact.
        stats->bICV = desc->ICV;
        stats->bCRC = desc->CRC32;
        stats->bHwError = stats->bCRC|stats->bICV;
        stats->Decrypted = !desc->SWDec;//RTL8190 set this bit to indicate that Hw does not decrypt packet
    } else
#endif
    {
        rx_desc_819x_usb *desc = (rx_desc_819x_usb *)skb->data;

        stats->Length = desc->Length;
        stats->RxDrvInfoSize = desc->RxDrvInfoSize;
        stats->RxBufShift = 0;//desc->Shift&0x03;
        stats->bICV = desc->ICV;
        stats->bCRC = desc->CRC32;
        stats->bHwError = stats->bCRC|stats->bICV;
        //RTL8190 set this bit to indicate that Hw does not decrypt packet
        stats->Decrypted = !desc->SWDec;
    }

    if((priv->ieee80211->pHTInfo->bCurrentHTSupport == true) && (priv->ieee80211->pairwise_key_type == KEY_TYPE_CCMP))
    {
        stats->bHwError = false;
    }
    else
    {
        stats->bHwError = stats->bCRC|stats->bICV;
    }

    if(stats->Length < 24 || stats->Length > MAX_8192U_RX_SIZE)
        stats->bHwError |= 1;
    //
    //Get Driver Info
    //
    // TODO: Need to verify it on FGPA platform
    //Driver info are written to the RxBuffer following rx desc
    if (stats->RxDrvInfoSize != 0) {
        driver_info = (rx_drvinfo_819x_usb *)(skb->data + sizeof(rx_desc_819x_usb) + \
				stats->RxBufShift);
        /* unit: 0.5M */
        /* TODO */
        if(!stats->bHwError){
            u8  ret_rate;
            ret_rate = HwRateToMRate90(driver_info->RxHT, driver_info->RxRate);
            if(ret_rate == 0xff)
            {
                // Abnormal Case: Receive CRC OK packet with Rx descriptor indicating non supported rate.
                // Special Error Handling here, 2008.05.16, by Emily

                stats->bHwError = 1;
                stats->rate = MGN_1M;   //Set 1M rate by default
            }else
            {
                stats->rate = ret_rate;
            }
        }
        else
            stats->rate = 0x02;

        stats->bShortPreamble = driver_info->SPLCP;


        UpdateReceivedRateHistogramStatistics8190(dev, stats);

        stats->bIsAMPDU = (driver_info->PartAggr==1);
        stats->bFirstMPDU = (driver_info->PartAggr==1) && (driver_info->FirstAGGR==1);
        stats->TimeStampLow = driver_info->TSFL;
        // xiong mask it, 070514
        //pRfd->Status.TimeStampHigh = PlatformEFIORead4Byte(Adapter, TSFR+4);
        // stats->TimeStampHigh = read_nic_dword(dev,  TSFR+4);

        UpdateRxPktTimeStamp8190(dev, stats);

        //
        // Rx A-MPDU
        //
        if(driver_info->FirstAGGR==1 || driver_info->PartAggr == 1)
            RT_TRACE(COMP_RXDESC, "driver_info->FirstAGGR = %d, driver_info->PartAggr = %d\n",
                    driver_info->FirstAGGR, driver_info->PartAggr);

    }

    skb_pull(skb,sizeof(rx_desc_819x_usb));
    //
    // Get Total offset of MPDU Frame Body
    //
    if((stats->RxBufShift + stats->RxDrvInfoSize) > 0) {
        stats->bShift = 1;
        skb_pull(skb,stats->RxBufShift + stats->RxDrvInfoSize);
    }

#ifdef USB_RX_AGGREGATION_SUPPORT
    /* for the rx aggregated sub frame, the redundant space truly contained in the packet */
    if(bIsRxAggrSubframe) {
        skb_pull(skb, 8);
    }
#endif
    /* for debug 2008.5.29 */

    //added by vivi, for MP, 20080108
    stats->RxIs40MHzPacket = driver_info->BW;
    if(stats->RxDrvInfoSize != 0)
        TranslateRxSignalStuff819xUsb(skb, stats, driver_info);

}

u32 GetRxPacketShiftBytes819xUsb(struct ieee80211_rx_stats  *Status, bool bIsRxAggrSubframe)
{
#ifdef USB_RX_AGGREGATION_SUPPORT
    if (bIsRxAggrSubframe)
        return (sizeof(rx_desc_819x_usb) + Status->RxDrvInfoSize
            + Status->RxBufShift + 8);
    else
#endif
        return (sizeof(rx_desc_819x_usb) + Status->RxDrvInfoSize
                + Status->RxBufShift);
}

void rtl8192_rx_nomal(struct sk_buff* skb)
{
    rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
    struct net_device *dev=info->dev;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    struct ieee80211_rx_stats stats = {
        .signal = 0,
        .noise = -98,
        .rate = 0,
        //      .mac_time = jiffies,
        .freq = IEEE80211_24GHZ_BAND,
    };
    u32 rx_pkt_len = 0;
    struct ieee80211_hdr_1addr *ieee80211_hdr = NULL;
    bool unicast_packet = false;
#ifdef USB_RX_AGGREGATION_SUPPORT
    struct sk_buff *agg_skb = NULL;
    u32  TotalLength = 0;
    u32  TempDWord = 0;
    u32  PacketLength = 0;
    u32  PacketOccupiedLendth = 0;
    u8   TempByte = 0;
    u32  PacketShiftBytes = 0;
    rx_desc_819x_usb_aggr_subframe *RxDescr = NULL;
    u8  PaddingBytes = 0;
    //add just for testing
    u8   testing;

#endif

    /* 20 is for ps-poll */
    if((skb->len >=(20 + sizeof(rx_desc_819x_usb))) && (skb->len < RX_URB_SIZE)) {
#ifdef USB_RX_AGGREGATION_SUPPORT
        TempByte = *(skb->data + sizeof(rx_desc_819x_usb));
#endif
        /* first packet should not contain Rx aggregation header */
        query_rxdesc_status(skb, &stats, false);
        /* TODO */
        /* hardware related info */
#ifdef USB_RX_AGGREGATION_SUPPORT
        if (TempByte & BIT0) {
            agg_skb = skb;
            //TotalLength = agg_skb->len - 4; /*sCrcLng*/
            TotalLength = stats.Length - 4; /*sCrcLng*/
            //RT_TRACE(COMP_RECV, "%s:first aggregated packet!Length=%d\n",__FUNCTION__,TotalLength);
            /* though the head pointer has passed this position  */
            TempDWord = *(u32 *)(agg_skb->data - 4);
            PacketLength = (u16)(TempDWord & 0x3FFF); /*sCrcLng*/
            skb = dev_alloc_skb(PacketLength);
            memcpy(skb_put(skb,PacketLength),agg_skb->data,PacketLength);
            PacketShiftBytes = GetRxPacketShiftBytes819xUsb(&stats, false);
        }
#endif
        /* Process the MPDU received */
        skb_trim(skb, skb->len - 4/*sCrcLng*/);

        rx_pkt_len = skb->len;
        ieee80211_hdr = (struct ieee80211_hdr_1addr *)skb->data;
        unicast_packet = false;
        if(is_broadcast_ether_addr(ieee80211_hdr->addr1)) {
            //TODO
        }else if(is_multicast_ether_addr(ieee80211_hdr->addr1)){
            //TODO
        }else {
            /* unicast packet */
            unicast_packet = true;
        }

        if(!ieee80211_rx(priv->ieee80211,skb, &stats)) {
            dev_kfree_skb_any(skb);
        } else {
            priv->stats.rxoktotal++;
            if(unicast_packet) {
                priv->stats.rxbytesunicast += rx_pkt_len;
            }
        }
#ifdef USB_RX_AGGREGATION_SUPPORT
        testing = 1;
        // (PipeIndex == 0) && (TempByte & BIT0) => TotalLength > 0.
        if (TotalLength > 0) {
            PacketOccupiedLendth = PacketLength + (PacketShiftBytes + 8);
            if ((PacketOccupiedLendth & 0xFF) != 0)
                PacketOccupiedLendth = (PacketOccupiedLendth & 0xFFFFFF00) + 256;
            PacketOccupiedLendth -= 8;
            TempDWord = PacketOccupiedLendth - PacketShiftBytes; /*- PacketLength */
            if (agg_skb->len > TempDWord)
                skb_pull(agg_skb, TempDWord);
            else
                agg_skb->len = 0;

            while (agg_skb->len>=GetRxPacketShiftBytes819xUsb(&stats, true)) {
                u8 tmpCRC = 0, tmpICV = 0;
                //RT_TRACE(COMP_RECV,"%s:aggred pkt,total_len = %d\n",__FUNCTION__,agg_skb->len);
                RxDescr = (rx_desc_819x_usb_aggr_subframe *)(agg_skb->data);
                tmpCRC = RxDescr->CRC32;
                tmpICV = RxDescr->ICV;
                memcpy(agg_skb->data, &agg_skb->data[44], 2);
                RxDescr->CRC32 = tmpCRC;
                RxDescr->ICV = tmpICV;

                memset(&stats, 0, sizeof(struct ieee80211_rx_stats));
                stats.signal = 0;
                stats.noise = -98;
                stats.rate = 0;
                stats.freq = IEEE80211_24GHZ_BAND;
                query_rxdesc_status(agg_skb, &stats, true);
                PacketLength = stats.Length;

                if(PacketLength > agg_skb->len) {
                    break;
                }
                /* Process the MPDU received */
                skb = dev_alloc_skb(PacketLength);
                memcpy(skb_put(skb,PacketLength),agg_skb->data, PacketLength);
                skb_trim(skb, skb->len - 4/*sCrcLng*/);

                rx_pkt_len = skb->len;
                ieee80211_hdr = (struct ieee80211_hdr_1addr *)skb->data;
                unicast_packet = false;
                if(is_broadcast_ether_addr(ieee80211_hdr->addr1)) {
                    //TODO
                }else if(is_multicast_ether_addr(ieee80211_hdr->addr1)){
                    //TODO
                }else {
                    /* unicast packet */
                    unicast_packet = true;
                }
                if(!ieee80211_rx(priv->ieee80211,skb, &stats)) {
                    dev_kfree_skb_any(skb);
                } else {
                    priv->stats.rxoktotal++;
                    if(unicast_packet) {
                        priv->stats.rxbytesunicast += rx_pkt_len;
                    }
                }
                /* should trim the packet which has been copied to target skb */
                skb_pull(agg_skb, PacketLength);
                PacketShiftBytes = GetRxPacketShiftBytes819xUsb(&stats, true);
                PacketOccupiedLendth = PacketLength + PacketShiftBytes;
                if ((PacketOccupiedLendth & 0xFF) != 0) {
                    PaddingBytes = 256 - (PacketOccupiedLendth & 0xFF);
                    if (agg_skb->len > PaddingBytes)
                        skb_pull(agg_skb, PaddingBytes);
                    else
                        agg_skb->len = 0;
                }
            }
            dev_kfree_skb(agg_skb);
        }
#endif
    } else {
        priv->stats.rxurberr++;
        printk("actual_length:%d\n", skb->len);
        dev_kfree_skb_any(skb);
    }

}

void
rtl819xusb_process_received_packet(
    struct net_device *dev,
    struct ieee80211_rx_stats *pstats
    )
{
//  bool bfreerfd=false, bqueued=false;
    u8*     frame;
    u16     frame_len=0;
    struct r8192_priv *priv = ieee80211_priv(dev);
//  u8          index = 0;
//  u8          TID = 0;
    //u16           seqnum = 0;
    //PRX_TS_RECORD pts = NULL;

    // Get shifted bytes of Starting address of 802.11 header. 2006.09.28, by Emily
    //porting by amy 080508
    pstats->virtual_address += get_rxpacket_shiftbytes_819xusb(pstats);
    frame = pstats->virtual_address;
    frame_len = pstats->packetlength;
#ifdef TODO // by amy about HCT
    if(!Adapter->bInHctTest)
        CountRxErrStatistics(Adapter, pRfd);
#endif
    {
    #ifdef ENABLE_PS  //by amy for adding ps function in future
        RT_RF_POWER_STATE rtState;
        // When RF is off, we should not count the packet for hw/sw synchronize
        // reason, ie. there may be a duration while sw switch is changed and hw
        // switch is being changed. 2006.12.04, by shien chang.
        Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_RF_STATE, (u8* )(&rtState));
        if (rtState == eRfOff)
        {
            return;
        }
    #endif
    priv->stats.rxframgment++;

    }
#ifdef TODO
    RmMonitorSignalStrength(Adapter, pRfd);
#endif
    /* 2007/01/16 MH Add RX command packet handle here. */
    /* 2007/03/01 MH We have to release RFD and return if rx pkt is cmd pkt. */
    if (rtl819xusb_rx_command_packet(dev, pstats))
    {
        return;
    }

#ifdef SW_CRC_CHECK
    SwCrcCheck();
#endif


}

void query_rx_cmdpkt_desc_status(struct sk_buff *skb, struct ieee80211_rx_stats *stats)
{
//  rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
//  struct net_device *dev=info->dev;
//  struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
    rx_desc_819x_usb *desc = (rx_desc_819x_usb *)skb->data;
//  rx_drvinfo_819x_usb  *driver_info;

    //
    //Get Rx Descriptor Information
    //
    stats->virtual_address = (u8*)skb->data;
    stats->Length = desc->Length;
    stats->RxDrvInfoSize = 0;
    stats->RxBufShift = 0;
    stats->packetlength = stats->Length-scrclng;
    stats->fraglength = stats->packetlength;
    stats->fragoffset = 0;
    stats->ntotalfrag = 1;
}


void rtl8192_rx_cmd(struct sk_buff *skb)
{
    struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
    struct net_device *dev = info->dev;
    //int ret;
//  struct urb *rx_urb = info->urb;
    /* TODO */
    struct ieee80211_rx_stats stats = {
        .signal = 0,
        .noise = -98,
        .rate = 0,
        //      .mac_time = jiffies,
        .freq = IEEE80211_24GHZ_BAND,
    };

    if((skb->len >=(20 + sizeof(rx_desc_819x_usb))) && (skb->len < RX_URB_SIZE))
    {

        query_rx_cmdpkt_desc_status(skb,&stats);
        // this is to be done by amy 080508     prfd->queue_id = 1;


        //
        //  Process the command packet received.
        //

        rtl819xusb_process_received_packet(dev,&stats);

        dev_kfree_skb_any(skb);
    }
    else
        ;


}

void rtl8192_irq_rx_tasklet(struct r8192_priv *priv)
{
    struct sk_buff *skb;
    struct rtl8192_rx_info *info;

    while (NULL != (skb = skb_dequeue(&priv->skb_queue))) {
        info = (struct rtl8192_rx_info *)skb->cb;
        switch (info->out_pipe) {
        /* Nomal packet pipe */
            case 3:
                //RT_TRACE(COMP_RECV, "normal in-pipe index(%d)\n",info->out_pipe);
                priv->IrpPendingCount--;
                rtl8192_rx_nomal(skb);
                break;

                /* Command packet pipe */
            case 9:
                RT_TRACE(COMP_RECV, "command in-pipe index(%d)\n",\
                        info->out_pipe);

                rtl8192_rx_cmd(skb);
                break;

            default: /* should never get here! */
                RT_TRACE(COMP_ERR, "Unknown in-pipe index(%d)\n",\
                        info->out_pipe);
                dev_kfree_skb(skb);
                break;

        }
    }
}

static const struct net_device_ops rtl8192_netdev_ops = {
    .ndo_open               = rtl8192_open,
    .ndo_stop               = rtl8192_close,
    .ndo_get_stats          = rtl8192_stats,
    .ndo_tx_timeout         = tx_timeout,
    .ndo_do_ioctl           = rtl8192_ioctl,
    .ndo_set_rx_mode    = r8192_set_multicast,
    .ndo_set_mac_address    = r8192_set_mac_adr,
    .ndo_validate_addr      = eth_validate_addr,
    .ndo_change_mtu         = eth_change_mtu,
    .ndo_start_xmit         = ieee80211_xmit,
};


/****************************************************************************
     ---------------------------- USB_STUFF---------------------------
*****************************************************************************/

static int __devinit rtl8192_usb_probe(struct usb_interface *intf,
             const struct usb_device_id *id)
{
//  unsigned long ioaddr = 0;
    struct net_device *dev = NULL;
    struct r8192_priv *priv= NULL;
    struct usb_device *udev = interface_to_usbdev(intf);
    int ret;
    RT_TRACE(COMP_INIT, "Oops: i'm coming\n");

    dev = alloc_ieee80211(sizeof(struct r8192_priv));
    if (dev == NULL)
        return -ENOMEM;

    usb_set_intfdata(intf, dev);
    SET_NETDEV_DEV(dev, &intf->dev);
    priv = ieee80211_priv(dev);
    priv->ieee80211 = netdev_priv(dev);
    priv->udev=udev;

    dev->netdev_ops = &rtl8192_netdev_ops;

     //DMESG("Oops: i'm coming\n");
#if WIRELESS_EXT >= 12
#if WIRELESS_EXT < 17
    dev->get_wireless_stats = r8192_get_wireless_stats;
#endif
    dev->wireless_handlers = (struct iw_handler_def *) &r8192_wx_handlers_def;
#endif
    dev->type=ARPHRD_ETHER;

    dev->watchdog_timeo = HZ*3; //modified by john, 0805

    if (dev_alloc_name(dev, ifname) < 0){
        RT_TRACE(COMP_INIT, "Oops: devname already taken! Trying wlan%%d...\n");
        ifname = "wlan%d";
        dev_alloc_name(dev, ifname);
    }

    RT_TRACE(COMP_INIT, "Driver probe completed1\n");
    if(rtl8192_init(dev)!=0){
        RT_TRACE(COMP_ERR, "Initialization failed");
        ret = -ENODEV;
        goto fail;
    }
    netif_carrier_off(dev);
    netif_stop_queue(dev);

    ret = register_netdev(dev);
    if (ret)
        goto fail2;

    RT_TRACE(COMP_INIT, "dev name=======> %s\n",dev->name);
    rtl8192_proc_init_one(dev);


    RT_TRACE(COMP_INIT, "Driver probe completed\n");
    return 0;

fail2:
    rtl8192_down(dev);
    kfree(priv->pFirmware);
    priv->pFirmware = NULL;
    rtl8192_usb_deleteendpoints(dev);
    destroy_workqueue(priv->priv_wq);
    mdelay(10);
fail:
    free_ieee80211(dev);

    RT_TRACE(COMP_ERR, "wlan driver load failed\n");
    return ret;
}

//detach all the work and timer structure declared or inititialize in r8192U_init function.
void rtl8192_cancel_deferred_work(struct r8192_priv* priv)
{

    cancel_work_sync(&priv->reset_wq);
    cancel_delayed_work(&priv->watch_dog_wq);
    cancel_delayed_work(&priv->update_beacon_wq);
    cancel_work_sync(&priv->qos_activate);
    //cancel_work_sync(&priv->SetBWModeWorkItem);
    //cancel_work_sync(&priv->SwChnlWorkItem);

}


static void __devexit rtl8192_usb_disconnect(struct usb_interface *intf)
{
    struct net_device *dev = usb_get_intfdata(intf);

    struct r8192_priv *priv = ieee80211_priv(dev);
    if(dev){

        unregister_netdev(dev);

        RT_TRACE(COMP_DOWN, "=============>wlan driver to be removed\n");
        rtl8192_proc_remove_one(dev);

            rtl8192_down(dev);
        kfree(priv->pFirmware);
        priv->pFirmware = NULL;
    //  priv->rf_close(dev);
//      rtl8192_SetRFPowerState(dev, eRfOff);
        rtl8192_usb_deleteendpoints(dev);
        destroy_workqueue(priv->priv_wq);
        //rtl8192_irq_disable(dev);
        //rtl8192_reset(dev);
        mdelay(10);

    }
    free_ieee80211(dev);
    RT_TRACE(COMP_DOWN, "wlan driver removed\n");
}

/* fun with the built-in ieee80211 stack... */
extern int ieee80211_debug_init(void);
extern void ieee80211_debug_exit(void);
extern int ieee80211_crypto_init(void);
extern void ieee80211_crypto_deinit(void);
extern int ieee80211_crypto_tkip_init(void);
extern void ieee80211_crypto_tkip_exit(void);
extern int ieee80211_crypto_ccmp_init(void);
extern void ieee80211_crypto_ccmp_exit(void);
extern int ieee80211_crypto_wep_init(void);
extern void ieee80211_crypto_wep_exit(void);

static int __init rtl8192_usb_module_init(void)
{
    int ret;

#ifdef CONFIG_IEEE80211_DEBUG
    ret = ieee80211_debug_init();
    if (ret) {
        printk(KERN_ERR "ieee80211_debug_init() failed %d\n", ret);
        return ret;
    }
#endif
    ret = ieee80211_crypto_init();
    if (ret) {
        printk(KERN_ERR "ieee80211_crypto_init() failed %d\n", ret);
        return ret;
    }

    ret = ieee80211_crypto_tkip_init();
    if (ret) {
        printk(KERN_ERR "ieee80211_crypto_tkip_init() failed %d\n",
            ret);
        return ret;
    }

    ret = ieee80211_crypto_ccmp_init();
    if (ret) {
        printk(KERN_ERR "ieee80211_crypto_ccmp_init() failed %d\n",
            ret);
        return ret;
    }

    ret = ieee80211_crypto_wep_init();
    if (ret) {
        printk(KERN_ERR "ieee80211_crypto_wep_init() failed %d\n", ret);
        return ret;
    }

    printk(KERN_INFO "\nLinux kernel driver for RTL8192 based WLAN cards\n");
    printk(KERN_INFO "Copyright (c) 2007-2008, Realsil Wlan\n");
    RT_TRACE(COMP_INIT, "Initializing module");
    RT_TRACE(COMP_INIT, "Wireless extensions version %d", WIRELESS_EXT);
    rtl8192_proc_module_init();
    return usb_register(&rtl8192_usb_driver);
}


static void __exit rtl8192_usb_module_exit(void)
{
    usb_deregister(&rtl8192_usb_driver);

    RT_TRACE(COMP_DOWN, "Exiting");
//  rtl8192_proc_module_remove();
}


void rtl8192_try_wake_queue(struct net_device *dev, int pri)
{
    unsigned long flags;
    short enough_desc;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);

    spin_lock_irqsave(&priv->tx_lock,flags);
    enough_desc = check_nic_enough_desc(dev,pri);
    spin_unlock_irqrestore(&priv->tx_lock,flags);

    if(enough_desc)
        ieee80211_wake_queue(priv->ieee80211);
}

void EnableHWSecurityConfig8192(struct net_device *dev)
{
    u8 SECR_value = 0x0;
    struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
     struct ieee80211_device* ieee = priv->ieee80211;
    SECR_value = SCR_TxEncEnable | SCR_RxDecEnable;
    if (((KEY_TYPE_WEP40 == ieee->pairwise_key_type) || (KEY_TYPE_WEP104 == ieee->pairwise_key_type)) && (priv->ieee80211->auth_mode != 2))
    {
        SECR_value |= SCR_RxUseDK;
        SECR_value |= SCR_TxUseDK;
    }
    else if ((ieee->iw_mode == IW_MODE_ADHOC) && (ieee->pairwise_key_type & (KEY_TYPE_CCMP | KEY_TYPE_TKIP)))
    {
        SECR_value |= SCR_RxUseDK;
        SECR_value |= SCR_TxUseDK;
    }
    //add HWSec active enable here.
//default using hwsec. when peer AP is in N mode only and pairwise_key_type is none_aes(which HT_IOT_ACT_PURE_N_MODE indicates it), use software security. when peer AP is in b,g,n mode mixed and pairwise_key_type is none_aes, use g mode hw security. WB on 2008.7.4

    ieee->hwsec_active = 1;

    if ((ieee->pHTInfo->IOTAction&HT_IOT_ACT_PURE_N_MODE) || !hwwep)
    {
        ieee->hwsec_active = 0;
        SECR_value &= ~SCR_RxDecEnable;
    }
    RT_TRACE(COMP_SEC,"%s:, hwsec:%d, pairwise_key:%d, SECR_value:%x\n", __FUNCTION__, \
            ieee->hwsec_active, ieee->pairwise_key_type, SECR_value);
    {
        write_nic_byte(dev, SECR,  SECR_value);//SECR_value |  SCR_UseDK );
    }
}


void setKey(    struct net_device *dev,
        u8 EntryNo,
        u8 KeyIndex,
        u16 KeyType,
        u8 *MacAddr,
        u8 DefaultKey,
        u32 *KeyContent )
{
    u32 TargetCommand = 0;
    u32 TargetContent = 0;
    u16 usConfig = 0;
    u8 i;
    if (EntryNo >= TOTAL_CAM_ENTRY)
        RT_TRACE(COMP_ERR, "cam entry exceeds in setKey()\n");

    RT_TRACE(COMP_SEC, "====>to setKey(), dev:%p, EntryNo:%d, KeyIndex:%d, KeyType:%d, MacAddr%pM\n", dev,EntryNo, KeyIndex, KeyType, MacAddr);

    if (DefaultKey)
        usConfig |= BIT15 | (KeyType<<2);
    else
        usConfig |= BIT15 | (KeyType<<2) | KeyIndex;
//  usConfig |= BIT15 | (KeyType<<2) | (DefaultKey<<5) | KeyIndex;


    for(i=0 ; i<CAM_CONTENT_COUNT; i++){
        TargetCommand  = i+CAM_CONTENT_COUNT*EntryNo;
        TargetCommand |= BIT31|BIT16;

        if(i==0){//MAC|Config
            TargetContent = (u32)(*(MacAddr+0)) << 16|
                    (u32)(*(MacAddr+1)) << 24|
                    (u32)usConfig;

            write_nic_dword(dev, WCAMI, TargetContent);
            write_nic_dword(dev, RWCAM, TargetCommand);
    //      printk("setkey cam =%8x\n", read_cam(dev, i+6*EntryNo));
        }
        else if(i==1){//MAC
            TargetContent = (u32)(*(MacAddr+2))      |
                    (u32)(*(MacAddr+3)) <<  8|
                    (u32)(*(MacAddr+4)) << 16|
                    (u32)(*(MacAddr+5)) << 24;
            write_nic_dword(dev, WCAMI, TargetContent);
            write_nic_dword(dev, RWCAM, TargetCommand);
        }
        else {
            //Key Material
            if(KeyContent !=NULL){
            write_nic_dword(dev, WCAMI, (u32)(*(KeyContent+i-2)) );
            write_nic_dword(dev, RWCAM, TargetCommand);
        }
    }
    }

}

/***************************************************************************
     ------------------- module init / exit stubs ----------------
****************************************************************************/
module_init(rtl8192_usb_module_init);
module_exit(rtl8192_usb_module_exit);