GNU Linux-libre 5.10.215-gnu1
[releases.git] / drivers / staging / rtl8723bs / hal / rtl8723b_hal_init.c
1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2013 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _HAL_INIT_C_
8
9 #include <linux/firmware.h>
10 #include <linux/slab.h>
11 #include <drv_types.h>
12 #include <rtw_debug.h>
13 #include <rtl8723b_hal.h>
14 #include "hal_com_h2c.h"
15
16 static void _FWDownloadEnable(struct adapter *padapter, bool enable)
17 {
18         u8 tmp, count = 0;
19
20         if (enable) {
21                 /*  8051 enable */
22                 tmp = rtw_read8(padapter, REG_SYS_FUNC_EN+1);
23                 rtw_write8(padapter, REG_SYS_FUNC_EN+1, tmp|0x04);
24
25                 tmp = rtw_read8(padapter, REG_MCUFWDL);
26                 rtw_write8(padapter, REG_MCUFWDL, tmp|0x01);
27
28                 do {
29                         tmp = rtw_read8(padapter, REG_MCUFWDL);
30                         if (tmp & 0x01)
31                                 break;
32                         rtw_write8(padapter, REG_MCUFWDL, tmp|0x01);
33                         msleep(1);
34                 } while (count++ < 100);
35
36                 if (count > 0)
37                         DBG_871X("%s: !!!!!!!!Write 0x80 Fail!: count = %d\n", __func__, count);
38
39                 /*  8051 reset */
40                 tmp = rtw_read8(padapter, REG_MCUFWDL+2);
41                 rtw_write8(padapter, REG_MCUFWDL+2, tmp&0xf7);
42         } else {
43                 /*  MCU firmware download disable. */
44                 tmp = rtw_read8(padapter, REG_MCUFWDL);
45                 rtw_write8(padapter, REG_MCUFWDL, tmp&0xfe);
46         }
47 }
48
49 static int _BlockWrite(struct adapter *padapter, void *buffer, u32 buffSize)
50 {
51         int ret = _SUCCESS;
52
53         u32 blockSize_p1 = 4; /*  (Default) Phase #1 : PCI muse use 4-byte write to download FW */
54         u32 blockSize_p2 = 8; /*  Phase #2 : Use 8-byte, if Phase#1 use big size to write FW. */
55         u32 blockSize_p3 = 1; /*  Phase #3 : Use 1-byte, the remnant of FW image. */
56         u32 blockCount_p1 = 0, blockCount_p2 = 0, blockCount_p3 = 0;
57         u32 remainSize_p1 = 0, remainSize_p2 = 0;
58         u8 *bufferPtr = buffer;
59         u32 i = 0, offset = 0;
60
61 /*      printk("====>%s %d\n", __func__, __LINE__); */
62
63         /* 3 Phase #1 */
64         blockCount_p1 = buffSize / blockSize_p1;
65         remainSize_p1 = buffSize % blockSize_p1;
66
67         if (blockCount_p1) {
68                 RT_TRACE(
69                         _module_hal_init_c_,
70                         _drv_notice_,
71                         (
72                                 "_BlockWrite: [P1] buffSize(%d) blockSize_p1(%d) blockCount_p1(%d) remainSize_p1(%d)\n",
73                                 buffSize,
74                                 blockSize_p1,
75                                 blockCount_p1,
76                                 remainSize_p1
77                         )
78                 );
79         }
80
81         for (i = 0; i < blockCount_p1; i++) {
82                 ret = rtw_write32(padapter, (FW_8723B_START_ADDRESS + i * blockSize_p1), *((u32 *)(bufferPtr + i * blockSize_p1)));
83                 if (ret == _FAIL) {
84                         printk("====>%s %d i:%d\n", __func__, __LINE__, i);
85                         goto exit;
86                 }
87         }
88
89         /* 3 Phase #2 */
90         if (remainSize_p1) {
91                 offset = blockCount_p1 * blockSize_p1;
92
93                 blockCount_p2 = remainSize_p1/blockSize_p2;
94                 remainSize_p2 = remainSize_p1%blockSize_p2;
95
96                 if (blockCount_p2) {
97                                 RT_TRACE(
98                                         _module_hal_init_c_,
99                                         _drv_notice_,
100                                         (
101                                                 "_BlockWrite: [P2] buffSize_p2(%d) blockSize_p2(%d) blockCount_p2(%d) remainSize_p2(%d)\n",
102                                                 (buffSize-offset),
103                                                 blockSize_p2,
104                                                 blockCount_p2,
105                                                 remainSize_p2
106                                         )
107                                 );
108                 }
109
110         }
111
112         /* 3 Phase #3 */
113         if (remainSize_p2) {
114                 offset = (blockCount_p1 * blockSize_p1) + (blockCount_p2 * blockSize_p2);
115
116                 blockCount_p3 = remainSize_p2 / blockSize_p3;
117
118                 RT_TRACE(_module_hal_init_c_, _drv_notice_,
119                                 ("_BlockWrite: [P3] buffSize_p3(%d) blockSize_p3(%d) blockCount_p3(%d)\n",
120                                 (buffSize-offset), blockSize_p3, blockCount_p3));
121
122                 for (i = 0; i < blockCount_p3; i++) {
123                         ret = rtw_write8(padapter, (FW_8723B_START_ADDRESS + offset + i), *(bufferPtr + offset + i));
124
125                         if (ret == _FAIL) {
126                                 printk("====>%s %d i:%d\n", __func__, __LINE__, i);
127                                 goto exit;
128                         }
129                 }
130         }
131 exit:
132         return ret;
133 }
134
135 static int _PageWrite(
136         struct adapter *padapter,
137         u32 page,
138         void *buffer,
139         u32 size
140 )
141 {
142         u8 value8;
143         u8 u8Page = (u8) (page & 0x07);
144
145         value8 = (rtw_read8(padapter, REG_MCUFWDL+2) & 0xF8) | u8Page;
146         rtw_write8(padapter, REG_MCUFWDL+2, value8);
147
148         return _BlockWrite(padapter, buffer, size);
149 }
150
151 static int _WriteFW(struct adapter *padapter, void *buffer, u32 size)
152 {
153         /*  Since we need dynamic decide method of dwonload fw, so we call this function to get chip version. */
154         /*  We can remove _ReadChipVersion from ReadpadapterInfo8192C later. */
155         int ret = _SUCCESS;
156         u32 pageNums, remainSize;
157         u32 page, offset;
158         u8 *bufferPtr = buffer;
159
160         pageNums = size / MAX_DLFW_PAGE_SIZE;
161         /* RT_ASSERT((pageNums <= 4), ("Page numbers should not greater then 4\n")); */
162         remainSize = size % MAX_DLFW_PAGE_SIZE;
163
164         for (page = 0; page < pageNums; page++) {
165                 offset = page * MAX_DLFW_PAGE_SIZE;
166                 ret = _PageWrite(padapter, page, bufferPtr+offset, MAX_DLFW_PAGE_SIZE);
167
168                 if (ret == _FAIL) {
169                         printk("====>%s %d\n", __func__, __LINE__);
170                         goto exit;
171                 }
172         }
173
174         if (remainSize) {
175                 offset = pageNums * MAX_DLFW_PAGE_SIZE;
176                 page = pageNums;
177                 ret = _PageWrite(padapter, page, bufferPtr+offset, remainSize);
178
179                 if (ret == _FAIL) {
180                         printk("====>%s %d\n", __func__, __LINE__);
181                         goto exit;
182                 }
183         }
184         RT_TRACE(_module_hal_init_c_, _drv_info_, ("_WriteFW Done- for Normal chip.\n"));
185
186 exit:
187         return ret;
188 }
189
190 void _8051Reset8723(struct adapter *padapter)
191 {
192         u8 cpu_rst;
193         u8 io_rst;
194
195
196         /*  Reset 8051(WLMCU) IO wrapper */
197         /*  0x1c[8] = 0 */
198         /*  Suggested by Isaac@SD1 and Gimmy@SD1, coding by Lucas@20130624 */
199         io_rst = rtw_read8(padapter, REG_RSV_CTRL+1);
200         io_rst &= ~BIT(0);
201         rtw_write8(padapter, REG_RSV_CTRL+1, io_rst);
202
203         cpu_rst = rtw_read8(padapter, REG_SYS_FUNC_EN+1);
204         cpu_rst &= ~BIT(2);
205         rtw_write8(padapter, REG_SYS_FUNC_EN+1, cpu_rst);
206
207         /*  Enable 8051 IO wrapper */
208         /*  0x1c[8] = 1 */
209         io_rst = rtw_read8(padapter, REG_RSV_CTRL+1);
210         io_rst |= BIT(0);
211         rtw_write8(padapter, REG_RSV_CTRL+1, io_rst);
212
213         cpu_rst = rtw_read8(padapter, REG_SYS_FUNC_EN+1);
214         cpu_rst |= BIT(2);
215         rtw_write8(padapter, REG_SYS_FUNC_EN+1, cpu_rst);
216
217         DBG_8192C("%s: Finish\n", __func__);
218 }
219
220 u8 g_fwdl_chksum_fail;
221
222 static s32 polling_fwdl_chksum(
223         struct adapter *adapter, u32 min_cnt, u32 timeout_ms
224 )
225 {
226         s32 ret = _FAIL;
227         u32 value32;
228         unsigned long start = jiffies;
229         u32 cnt = 0;
230
231         /* polling CheckSum report */
232         do {
233                 cnt++;
234                 value32 = rtw_read32(adapter, REG_MCUFWDL);
235                 if (value32 & FWDL_ChkSum_rpt || adapter->bSurpriseRemoved || adapter->bDriverStopped)
236                         break;
237                 yield();
238         } while (jiffies_to_msecs(jiffies-start) < timeout_ms || cnt < min_cnt);
239
240         if (!(value32 & FWDL_ChkSum_rpt)) {
241                 goto exit;
242         }
243
244         if (g_fwdl_chksum_fail) {
245                 DBG_871X("%s: fwdl test case: fwdl_chksum_fail\n", __func__);
246                 g_fwdl_chksum_fail--;
247                 goto exit;
248         }
249
250         ret = _SUCCESS;
251
252 exit:
253         DBG_871X(
254                 "%s: Checksum report %s! (%u, %dms), REG_MCUFWDL:0x%08x\n",
255                 __func__,
256                 (ret == _SUCCESS) ? "OK" : "Fail",
257                 cnt,
258                 jiffies_to_msecs(jiffies-start),
259                 value32
260         );
261
262         return ret;
263 }
264
265 u8 g_fwdl_wintint_rdy_fail;
266
267 static s32 _FWFreeToGo(struct adapter *adapter, u32 min_cnt, u32 timeout_ms)
268 {
269         s32 ret = _FAIL;
270         u32 value32;
271         unsigned long start = jiffies;
272         u32 cnt = 0;
273
274         value32 = rtw_read32(adapter, REG_MCUFWDL);
275         value32 |= MCUFWDL_RDY;
276         value32 &= ~WINTINI_RDY;
277         rtw_write32(adapter, REG_MCUFWDL, value32);
278
279         _8051Reset8723(adapter);
280
281         /*  polling for FW ready */
282         do {
283                 cnt++;
284                 value32 = rtw_read32(adapter, REG_MCUFWDL);
285                 if (value32 & WINTINI_RDY || adapter->bSurpriseRemoved || adapter->bDriverStopped)
286                         break;
287                 yield();
288         } while (jiffies_to_msecs(jiffies - start) < timeout_ms || cnt < min_cnt);
289
290         if (!(value32 & WINTINI_RDY)) {
291                 goto exit;
292         }
293
294         if (g_fwdl_wintint_rdy_fail) {
295                 DBG_871X("%s: fwdl test case: wintint_rdy_fail\n", __func__);
296                 g_fwdl_wintint_rdy_fail--;
297                 goto exit;
298         }
299
300         ret = _SUCCESS;
301
302 exit:
303         DBG_871X(
304                 "%s: Polling FW ready %s! (%u, %dms), REG_MCUFWDL:0x%08x\n",
305                 __func__,
306                 (ret == _SUCCESS) ? "OK" : "Fail",
307                 cnt,
308                 jiffies_to_msecs(jiffies-start),
309                 value32
310         );
311
312         return ret;
313 }
314
315 #define IS_FW_81xxC(padapter)   (((GET_HAL_DATA(padapter))->FirmwareSignature & 0xFFF0) == 0x88C0)
316
317 void rtl8723b_FirmwareSelfReset(struct adapter *padapter)
318 {
319         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
320         u8 u1bTmp;
321         u8 Delay = 100;
322
323         if (
324                 !(IS_FW_81xxC(padapter) && ((pHalData->FirmwareVersion < 0x21) || (pHalData->FirmwareVersion == 0x21 && pHalData->FirmwareSubVersion < 0x01)))
325         ) { /*  after 88C Fw v33.1 */
326                 /* 0x1cf = 0x20. Inform 8051 to reset. 2009.12.25. tynli_test */
327                 rtw_write8(padapter, REG_HMETFR+3, 0x20);
328
329                 u1bTmp = rtw_read8(padapter, REG_SYS_FUNC_EN+1);
330                 while (u1bTmp & BIT2) {
331                         Delay--;
332                         if (Delay == 0)
333                                 break;
334                         udelay(50);
335                         u1bTmp = rtw_read8(padapter, REG_SYS_FUNC_EN+1);
336                 }
337                 RT_TRACE(_module_hal_init_c_, _drv_notice_, ("-%s: 8051 reset success (%d)\n", __func__, Delay));
338
339                 if (Delay == 0) {
340                         RT_TRACE(_module_hal_init_c_, _drv_notice_, ("%s: Force 8051 reset!!!\n", __func__));
341                         /* force firmware reset */
342                         u1bTmp = rtw_read8(padapter, REG_SYS_FUNC_EN+1);
343                         rtw_write8(padapter, REG_SYS_FUNC_EN+1, u1bTmp&(~BIT2));
344                 }
345         }
346 }
347
348 /*  */
349 /*      Description: */
350 /*              Download 8192C firmware code. */
351 /*  */
352 /*  */
353 s32 rtl8723b_FirmwareDownload(struct adapter *padapter, bool  bUsedWoWLANFw)
354 {
355         s32 rtStatus = _SUCCESS;
356         u8 write_fw = 0;
357         unsigned long fwdl_start_time;
358         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
359         struct rt_firmware *pFirmware;
360         struct rt_firmware *pBTFirmware;
361         struct rt_firmware_hdr *pFwHdr = NULL;
362         u8 *pFirmwareBuf;
363         u32 FirmwareLen;
364         const struct firmware *fw;
365         struct device *device = dvobj_to_dev(padapter->dvobj);
366         u8 *fwfilepath;
367         struct dvobj_priv *psdpriv = padapter->dvobj;
368         struct debug_priv *pdbgpriv = &psdpriv->drv_dbg;
369         u8 tmp_ps;
370
371         RT_TRACE(_module_hal_init_c_, _drv_info_, ("+%s\n", __func__));
372 #ifdef CONFIG_WOWLAN
373         RT_TRACE(_module_hal_init_c_, _drv_notice_, ("+%s, bUsedWoWLANFw:%d\n", __func__, bUsedWoWLANFw));
374 #endif
375         pFirmware = kzalloc(sizeof(struct rt_firmware), GFP_KERNEL);
376         if (!pFirmware)
377                 return _FAIL;
378         pBTFirmware = kzalloc(sizeof(struct rt_firmware), GFP_KERNEL);
379         if (!pBTFirmware) {
380                 kfree(pFirmware);
381                 return _FAIL;
382         }
383         tmp_ps = rtw_read8(padapter, 0xa3);
384         tmp_ps &= 0xf8;
385         tmp_ps |= 0x02;
386         /* 1. write 0xA3[:2:0] = 3b'010 */
387         rtw_write8(padapter, 0xa3, tmp_ps);
388         /* 2. read power_state = 0xA0[1:0] */
389         tmp_ps = rtw_read8(padapter, 0xa0);
390         tmp_ps &= 0x03;
391         if (tmp_ps != 0x01) {
392                 DBG_871X(FUNC_ADPT_FMT" tmp_ps =%x\n", FUNC_ADPT_ARG(padapter), tmp_ps);
393                 pdbgpriv->dbg_downloadfw_pwr_state_cnt++;
394         }
395
396 #ifdef CONFIG_WOWLAN
397         if (bUsedWoWLANFw)
398                 fwfilepath = "/*(DEBLOBBED)*/";
399         else
400 #endif /*  CONFIG_WOWLAN */
401                 fwfilepath = "/*(DEBLOBBED)*/";
402
403         pr_info("rtl8723bs: acquire FW from file:%s\n", fwfilepath);
404
405         rtStatus = reject_firmware(&fw, fwfilepath, device);
406         if (rtStatus) {
407                 pr_err("Request firmware failed with error 0x%x\n", rtStatus);
408                 rtStatus = _FAIL;
409                 goto exit;
410         }
411
412         if (!fw) {
413                 pr_err("Firmware %s not available\n", fwfilepath);
414                 rtStatus = _FAIL;
415                 goto exit;
416         }
417
418         if (fw->size > FW_8723B_SIZE) {
419                 rtStatus = _FAIL;
420                 RT_TRACE(
421                         _module_hal_init_c_,
422                         _drv_err_,
423                         ("Firmware size exceed 0x%X. Check it.\n", FW_8188E_SIZE)
424                 );
425                 goto exit;
426         }
427
428         pFirmware->fw_buffer_sz = kmemdup(fw->data, fw->size, GFP_KERNEL);
429         if (!pFirmware->fw_buffer_sz) {
430                 rtStatus = _FAIL;
431                 goto exit;
432         }
433
434         pFirmware->fw_length = fw->size;
435         release_firmware(fw);
436         if (pFirmware->fw_length > FW_8723B_SIZE) {
437                 rtStatus = _FAIL;
438                 DBG_871X_LEVEL(_drv_emerg_, "Firmware size:%u exceed %u\n", pFirmware->fw_length, FW_8723B_SIZE);
439                 goto release_fw1;
440         }
441
442         pFirmwareBuf = pFirmware->fw_buffer_sz;
443         FirmwareLen = pFirmware->fw_length;
444
445         /*  To Check Fw header. Added by tynli. 2009.12.04. */
446         pFwHdr = (struct rt_firmware_hdr *)pFirmwareBuf;
447
448         pHalData->FirmwareVersion =  le16_to_cpu(pFwHdr->version);
449         pHalData->FirmwareSubVersion = le16_to_cpu(pFwHdr->subversion);
450         pHalData->FirmwareSignature = le16_to_cpu(pFwHdr->signature);
451
452         DBG_871X(
453                 "%s: fw_ver =%x fw_subver =%04x sig = 0x%x, Month =%02x, Date =%02x, Hour =%02x, Minute =%02x\n",
454                 __func__,
455                 pHalData->FirmwareVersion,
456                 pHalData->FirmwareSubVersion,
457                 pHalData->FirmwareSignature,
458                 pFwHdr->month,
459                 pFwHdr->date,
460                 pFwHdr->hour,
461                 pFwHdr->minute
462         );
463
464         if (IS_FW_HEADER_EXIST_8723B(pFwHdr)) {
465                 DBG_871X("%s(): Shift for fw header!\n", __func__);
466                 /*  Shift 32 bytes for FW header */
467                 pFirmwareBuf = pFirmwareBuf + 32;
468                 FirmwareLen = FirmwareLen - 32;
469         }
470
471         /*  Suggested by Filen. If 8051 is running in RAM code, driver should inform Fw to reset by itself, */
472         /*  or it will cause download Fw fail. 2010.02.01. by tynli. */
473         if (rtw_read8(padapter, REG_MCUFWDL) & RAM_DL_SEL) { /* 8051 RAM code */
474                 rtw_write8(padapter, REG_MCUFWDL, 0x00);
475                 rtl8723b_FirmwareSelfReset(padapter);
476         }
477
478         _FWDownloadEnable(padapter, true);
479         fwdl_start_time = jiffies;
480         while (
481                 !padapter->bDriverStopped &&
482                 !padapter->bSurpriseRemoved &&
483                 (write_fw++ < 3 || jiffies_to_msecs(jiffies - fwdl_start_time) < 500)
484         ) {
485                 /* reset FWDL chksum */
486                 rtw_write8(padapter, REG_MCUFWDL, rtw_read8(padapter, REG_MCUFWDL)|FWDL_ChkSum_rpt);
487
488                 rtStatus = _WriteFW(padapter, pFirmwareBuf, FirmwareLen);
489                 if (rtStatus != _SUCCESS)
490                         continue;
491
492                 rtStatus = polling_fwdl_chksum(padapter, 5, 50);
493                 if (rtStatus == _SUCCESS)
494                         break;
495         }
496         _FWDownloadEnable(padapter, false);
497         if (_SUCCESS != rtStatus)
498                 goto fwdl_stat;
499
500         rtStatus = _FWFreeToGo(padapter, 10, 200);
501         if (_SUCCESS != rtStatus)
502                 goto fwdl_stat;
503
504 fwdl_stat:
505         DBG_871X(
506                 "FWDL %s. write_fw:%u, %dms\n",
507                 (rtStatus == _SUCCESS)?"success":"fail",
508                 write_fw,
509                 jiffies_to_msecs(jiffies - fwdl_start_time)
510         );
511
512 exit:
513         kfree(pFirmware->fw_buffer_sz);
514         kfree(pFirmware);
515 release_fw1:
516         kfree(pBTFirmware);
517         DBG_871X(" <=== rtl8723b_FirmwareDownload()\n");
518         return rtStatus;
519 }
520
521 void rtl8723b_InitializeFirmwareVars(struct adapter *padapter)
522 {
523         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
524
525         /*  Init Fw LPS related. */
526         adapter_to_pwrctl(padapter)->bFwCurrentInPSMode = false;
527
528         /* Init H2C cmd. */
529         rtw_write8(padapter, REG_HMETFR, 0x0f);
530
531         /*  Init H2C counter. by tynli. 2009.12.09. */
532         pHalData->LastHMEBoxNum = 0;
533 /* pHalData->H2CQueueHead = 0; */
534 /* pHalData->H2CQueueTail = 0; */
535 /* pHalData->H2CStopInsertQueue = false; */
536 }
537
538 #if defined(CONFIG_WOWLAN) || defined(CONFIG_AP_WOWLAN)
539 /*  */
540
541 /*  */
542 /*  Description: Prepare some information to Fw for WoWLAN. */
543 /* (1) Download wowlan Fw. */
544 /* (2) Download RSVD page packets. */
545 /* (3) Enable AP offload if needed. */
546 /*  */
547 /*  2011.04.12 by tynli. */
548 /*  */
549 void SetFwRelatedForWoWLAN8723b(
550         struct adapter *padapter, u8 bHostIsGoingtoSleep
551 )
552 {
553         int     status = _FAIL;
554         /*  */
555         /*  1. Before WoWLAN we need to re-download WoWLAN Fw. */
556         /*  */
557         status = rtl8723b_FirmwareDownload(padapter, bHostIsGoingtoSleep);
558         if (status != _SUCCESS) {
559                 DBG_871X("SetFwRelatedForWoWLAN8723b(): Re-Download Firmware failed!!\n");
560                 return;
561         } else {
562                 DBG_871X("SetFwRelatedForWoWLAN8723b(): Re-Download Firmware Success !!\n");
563         }
564         /*  */
565         /*  2. Re-Init the variables about Fw related setting. */
566         /*  */
567         rtl8723b_InitializeFirmwareVars(padapter);
568 }
569 #endif /* CONFIG_WOWLAN */
570
571 static void rtl8723b_free_hal_data(struct adapter *padapter)
572 {
573 }
574
575 /*  */
576 /*                              Efuse related code */
577 /*  */
578 static u8 hal_EfuseSwitchToBank(
579         struct adapter *padapter, u8 bank, bool bPseudoTest
580 )
581 {
582         u8 bRet = false;
583         u32 value32 = 0;
584 #ifdef HAL_EFUSE_MEMORY
585         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
586         PEFUSE_HAL pEfuseHal = &pHalData->EfuseHal;
587 #endif
588
589
590         DBG_8192C("%s: Efuse switch bank to %d\n", __func__, bank);
591         if (bPseudoTest) {
592 #ifdef HAL_EFUSE_MEMORY
593                 pEfuseHal->fakeEfuseBank = bank;
594 #else
595                 fakeEfuseBank = bank;
596 #endif
597                 bRet = true;
598         } else {
599                 value32 = rtw_read32(padapter, EFUSE_TEST);
600                 bRet = true;
601                 switch (bank) {
602                 case 0:
603                         value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_WIFI_SEL_0);
604                         break;
605                 case 1:
606                         value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_BT_SEL_0);
607                         break;
608                 case 2:
609                         value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_BT_SEL_1);
610                         break;
611                 case 3:
612                         value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_BT_SEL_2);
613                         break;
614                 default:
615                         value32 = (value32 & ~EFUSE_SEL_MASK) | EFUSE_SEL(EFUSE_WIFI_SEL_0);
616                         bRet = false;
617                         break;
618                 }
619                 rtw_write32(padapter, EFUSE_TEST, value32);
620         }
621
622         return bRet;
623 }
624
625 static void Hal_GetEfuseDefinition(
626         struct adapter *padapter,
627         u8 efuseType,
628         u8 type,
629         void *pOut,
630         bool bPseudoTest
631 )
632 {
633         switch (type) {
634         case TYPE_EFUSE_MAX_SECTION:
635                 {
636                         u8 *pMax_section;
637                         pMax_section = pOut;
638
639                         if (efuseType == EFUSE_WIFI)
640                                 *pMax_section = EFUSE_MAX_SECTION_8723B;
641                         else
642                                 *pMax_section = EFUSE_BT_MAX_SECTION;
643                 }
644                 break;
645
646         case TYPE_EFUSE_REAL_CONTENT_LEN:
647                 {
648                         u16 *pu2Tmp;
649                         pu2Tmp = pOut;
650
651                         if (efuseType == EFUSE_WIFI)
652                                 *pu2Tmp = EFUSE_REAL_CONTENT_LEN_8723B;
653                         else
654                                 *pu2Tmp = EFUSE_BT_REAL_CONTENT_LEN;
655                 }
656                 break;
657
658         case TYPE_AVAILABLE_EFUSE_BYTES_BANK:
659                 {
660                         u16 *pu2Tmp;
661                         pu2Tmp = pOut;
662
663                         if (efuseType == EFUSE_WIFI)
664                                 *pu2Tmp = (EFUSE_REAL_CONTENT_LEN_8723B-EFUSE_OOB_PROTECT_BYTES);
665                         else
666                                 *pu2Tmp = (EFUSE_BT_REAL_BANK_CONTENT_LEN-EFUSE_PROTECT_BYTES_BANK);
667                 }
668                 break;
669
670         case TYPE_AVAILABLE_EFUSE_BYTES_TOTAL:
671                 {
672                         u16 *pu2Tmp;
673                         pu2Tmp = pOut;
674
675                         if (efuseType == EFUSE_WIFI)
676                                 *pu2Tmp = (EFUSE_REAL_CONTENT_LEN_8723B-EFUSE_OOB_PROTECT_BYTES);
677                         else
678                                 *pu2Tmp = (EFUSE_BT_REAL_CONTENT_LEN-(EFUSE_PROTECT_BYTES_BANK*3));
679                 }
680                 break;
681
682         case TYPE_EFUSE_MAP_LEN:
683                 {
684                         u16 *pu2Tmp;
685                         pu2Tmp = pOut;
686
687                         if (efuseType == EFUSE_WIFI)
688                                 *pu2Tmp = EFUSE_MAX_MAP_LEN;
689                         else
690                                 *pu2Tmp = EFUSE_BT_MAP_LEN;
691                 }
692                 break;
693
694         case TYPE_EFUSE_PROTECT_BYTES_BANK:
695                 {
696                         u8 *pu1Tmp;
697                         pu1Tmp = pOut;
698
699                         if (efuseType == EFUSE_WIFI)
700                                 *pu1Tmp = EFUSE_OOB_PROTECT_BYTES;
701                         else
702                                 *pu1Tmp = EFUSE_PROTECT_BYTES_BANK;
703                 }
704                 break;
705
706         case TYPE_EFUSE_CONTENT_LEN_BANK:
707                 {
708                         u16 *pu2Tmp;
709                         pu2Tmp = pOut;
710
711                         if (efuseType == EFUSE_WIFI)
712                                 *pu2Tmp = EFUSE_REAL_CONTENT_LEN_8723B;
713                         else
714                                 *pu2Tmp = EFUSE_BT_REAL_BANK_CONTENT_LEN;
715                 }
716                 break;
717
718         default:
719                 {
720                         u8 *pu1Tmp;
721                         pu1Tmp = pOut;
722                         *pu1Tmp = 0;
723                 }
724                 break;
725         }
726 }
727
728 #define VOLTAGE_V25             0x03
729 #define LDOE25_SHIFT    28
730
731 /*  */
732 /*      The following is for compile ok */
733 /*      That should be merged with the original in the future */
734 /*  */
735 #define EFUSE_ACCESS_ON_8723                    0x69    /*  For RTL8723 only. */
736 #define EFUSE_ACCESS_OFF_8723                   0x00    /*  For RTL8723 only. */
737 #define REG_EFUSE_ACCESS_8723                   0x00CF  /*  Efuse access protection for RTL8723 */
738
739 /*  */
740 static void Hal_BT_EfusePowerSwitch(
741         struct adapter *padapter, u8 bWrite, u8 PwrState
742 )
743 {
744         u8 tempval;
745         if (PwrState) {
746                 /*  enable BT power cut */
747                 /*  0x6A[14] = 1 */
748                 tempval = rtw_read8(padapter, 0x6B);
749                 tempval |= BIT(6);
750                 rtw_write8(padapter, 0x6B, tempval);
751
752                 /*  Attention!! Between 0x6A[14] and 0x6A[15] setting need 100us delay */
753                 /*  So don't write 0x6A[14]= 1 and 0x6A[15]= 0 together! */
754                 msleep(1);
755                 /*  disable BT output isolation */
756                 /*  0x6A[15] = 0 */
757                 tempval = rtw_read8(padapter, 0x6B);
758                 tempval &= ~BIT(7);
759                 rtw_write8(padapter, 0x6B, tempval);
760         } else {
761                 /*  enable BT output isolation */
762                 /*  0x6A[15] = 1 */
763                 tempval = rtw_read8(padapter, 0x6B);
764                 tempval |= BIT(7);
765                 rtw_write8(padapter, 0x6B, tempval);
766
767                 /*  Attention!! Between 0x6A[14] and 0x6A[15] setting need 100us delay */
768                 /*  So don't write 0x6A[14]= 1 and 0x6A[15]= 0 together! */
769
770                 /*  disable BT power cut */
771                 /*  0x6A[14] = 1 */
772                 tempval = rtw_read8(padapter, 0x6B);
773                 tempval &= ~BIT(6);
774                 rtw_write8(padapter, 0x6B, tempval);
775         }
776
777 }
778 static void Hal_EfusePowerSwitch(
779         struct adapter *padapter, u8 bWrite, u8 PwrState
780 )
781 {
782         u8 tempval;
783         u16 tmpV16;
784
785
786         if (PwrState) {
787                 /*  To avoid cannot access efuse regsiters after disable/enable several times during DTM test. */
788                 /*  Suggested by SD1 IsaacHsu. 2013.07.08, added by tynli. */
789                 tempval = rtw_read8(padapter, SDIO_LOCAL_BASE|SDIO_REG_HSUS_CTRL);
790                 if (tempval & BIT(0)) { /*  SDIO local register is suspend */
791                         u8 count = 0;
792
793
794                         tempval &= ~BIT(0);
795                         rtw_write8(padapter, SDIO_LOCAL_BASE|SDIO_REG_HSUS_CTRL, tempval);
796
797                         /*  check 0x86[1:0]= 10'2h, wait power state to leave suspend */
798                         do {
799                                 tempval = rtw_read8(padapter, SDIO_LOCAL_BASE|SDIO_REG_HSUS_CTRL);
800                                 tempval &= 0x3;
801                                 if (tempval == 0x02)
802                                         break;
803
804                                 count++;
805                                 if (count >= 100)
806                                         break;
807
808                                 mdelay(10);
809                         } while (1);
810
811                         if (count >= 100) {
812                                 DBG_8192C(FUNC_ADPT_FMT ": Leave SDIO local register suspend fail! Local 0x86 =%#X\n",
813                                         FUNC_ADPT_ARG(padapter), tempval);
814                         } else {
815                                 DBG_8192C(FUNC_ADPT_FMT ": Leave SDIO local register suspend OK! Local 0x86 =%#X\n",
816                                         FUNC_ADPT_ARG(padapter), tempval);
817                         }
818                 }
819
820                 rtw_write8(padapter, REG_EFUSE_ACCESS_8723, EFUSE_ACCESS_ON_8723);
821
822                 /*  Reset: 0x0000h[28], default valid */
823                 tmpV16 =  rtw_read16(padapter, REG_SYS_FUNC_EN);
824                 if (!(tmpV16 & FEN_ELDR)) {
825                         tmpV16 |= FEN_ELDR;
826                         rtw_write16(padapter, REG_SYS_FUNC_EN, tmpV16);
827                 }
828
829                 /*  Clock: Gated(0x0008h[5]) 8M(0x0008h[1]) clock from ANA, default valid */
830                 tmpV16 = rtw_read16(padapter, REG_SYS_CLKR);
831                 if ((!(tmpV16 & LOADER_CLK_EN))  || (!(tmpV16 & ANA8M))) {
832                         tmpV16 |= (LOADER_CLK_EN | ANA8M);
833                         rtw_write16(padapter, REG_SYS_CLKR, tmpV16);
834                 }
835
836                 if (bWrite) {
837                         /*  Enable LDO 2.5V before read/write action */
838                         tempval = rtw_read8(padapter, EFUSE_TEST+3);
839                         tempval &= 0x0F;
840                         tempval |= (VOLTAGE_V25 << 4);
841                         rtw_write8(padapter, EFUSE_TEST+3, (tempval | 0x80));
842
843                         /* rtw_write8(padapter, REG_EFUSE_ACCESS, EFUSE_ACCESS_ON); */
844                 }
845         } else {
846                 rtw_write8(padapter, REG_EFUSE_ACCESS, EFUSE_ACCESS_OFF);
847
848                 if (bWrite) {
849                         /*  Disable LDO 2.5V after read/write action */
850                         tempval = rtw_read8(padapter, EFUSE_TEST+3);
851                         rtw_write8(padapter, EFUSE_TEST+3, (tempval & 0x7F));
852                 }
853
854         }
855 }
856
857 static void hal_ReadEFuse_WiFi(
858         struct adapter *padapter,
859         u16 _offset,
860         u16 _size_byte,
861         u8 *pbuf,
862         bool bPseudoTest
863 )
864 {
865 #ifdef HAL_EFUSE_MEMORY
866         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
867         PEFUSE_HAL pEfuseHal = &pHalData->EfuseHal;
868 #endif
869         u8 *efuseTbl = NULL;
870         u16 eFuse_Addr = 0;
871         u8 offset, wden;
872         u8 efuseHeader, efuseExtHdr, efuseData;
873         u16 i, total, used;
874         u8 efuse_usage = 0;
875
876         /* DBG_871X("YJ: ====>%s():_offset =%d _size_byte =%d bPseudoTest =%d\n", __func__, _offset, _size_byte, bPseudoTest); */
877         /*  */
878         /*  Do NOT excess total size of EFuse table. Added by Roger, 2008.11.10. */
879         /*  */
880         if ((_offset+_size_byte) > EFUSE_MAX_MAP_LEN) {
881                 DBG_8192C("%s: Invalid offset(%#x) with read bytes(%#x)!!\n", __func__, _offset, _size_byte);
882                 return;
883         }
884
885         efuseTbl = rtw_malloc(EFUSE_MAX_MAP_LEN);
886         if (!efuseTbl) {
887                 DBG_8192C("%s: alloc efuseTbl fail!\n", __func__);
888                 return;
889         }
890         /*  0xff will be efuse default value instead of 0x00. */
891         memset(efuseTbl, 0xFF, EFUSE_MAX_MAP_LEN);
892
893
894 #ifdef DEBUG
895 if (0) {
896         for (i = 0; i < 256; i++)
897                 efuse_OneByteRead(padapter, i, &efuseTbl[i], false);
898         DBG_871X("Efuse Content:\n");
899         for (i = 0; i < 256; i++) {
900                 if (i % 16 == 0)
901                         printk("\n");
902                 printk("%02X ", efuseTbl[i]);
903         }
904         printk("\n");
905 }
906 #endif
907
908
909         /*  switch bank back to bank 0 for later BT and wifi use. */
910         hal_EfuseSwitchToBank(padapter, 0, bPseudoTest);
911
912         while (AVAILABLE_EFUSE_ADDR(eFuse_Addr)) {
913                 efuse_OneByteRead(padapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
914                 if (efuseHeader == 0xFF) {
915                         DBG_8192C("%s: data end at address =%#x\n", __func__, eFuse_Addr-1);
916                         break;
917                 }
918                 /* DBG_8192C("%s: efuse[0x%X]= 0x%02X\n", __func__, eFuse_Addr-1, efuseHeader); */
919
920                 /*  Check PG header for section num. */
921                 if (EXT_HEADER(efuseHeader)) { /* extended header */
922                         offset = GET_HDR_OFFSET_2_0(efuseHeader);
923                         /* DBG_8192C("%s: extended header offset = 0x%X\n", __func__, offset); */
924
925                         efuse_OneByteRead(padapter, eFuse_Addr++, &efuseExtHdr, bPseudoTest);
926                         /* DBG_8192C("%s: efuse[0x%X]= 0x%02X\n", __func__, eFuse_Addr-1, efuseExtHdr); */
927                         if (ALL_WORDS_DISABLED(efuseExtHdr))
928                                 continue;
929
930                         offset |= ((efuseExtHdr & 0xF0) >> 1);
931                         wden = (efuseExtHdr & 0x0F);
932                 } else {
933                         offset = ((efuseHeader >> 4) & 0x0f);
934                         wden = (efuseHeader & 0x0f);
935                 }
936                 /* DBG_8192C("%s: Offset =%d Worden = 0x%X\n", __func__, offset, wden); */
937
938                 if (offset < EFUSE_MAX_SECTION_8723B) {
939                         u16 addr;
940                         /*  Get word enable value from PG header */
941 /*                      DBG_8192C("%s: Offset =%d Worden = 0x%X\n", __func__, offset, wden); */
942
943                         addr = offset * PGPKT_DATA_SIZE;
944                         for (i = 0; i < EFUSE_MAX_WORD_UNIT; i++) {
945                                 /*  Check word enable condition in the section */
946                                 if (!(wden & (0x01<<i))) {
947                                         efuse_OneByteRead(padapter, eFuse_Addr++, &efuseData, bPseudoTest);
948 /*                                      DBG_8192C("%s: efuse[%#X]= 0x%02X\n", __func__, eFuse_Addr-1, efuseData); */
949                                         efuseTbl[addr] = efuseData;
950
951                                         efuse_OneByteRead(padapter, eFuse_Addr++, &efuseData, bPseudoTest);
952 /*                                      DBG_8192C("%s: efuse[%#X]= 0x%02X\n", __func__, eFuse_Addr-1, efuseData); */
953                                         efuseTbl[addr+1] = efuseData;
954                                 }
955                                 addr += 2;
956                         }
957                 } else {
958                         DBG_8192C(KERN_ERR "%s: offset(%d) is illegal!!\n", __func__, offset);
959                         eFuse_Addr += Efuse_CalculateWordCnts(wden)*2;
960                 }
961         }
962
963         /*  Copy from Efuse map to output pointer memory!!! */
964         for (i = 0; i < _size_byte; i++)
965                 pbuf[i] = efuseTbl[_offset+i];
966
967 #ifdef DEBUG
968 if (1) {
969         DBG_871X("Efuse Realmap:\n");
970         for (i = 0; i < _size_byte; i++) {
971                 if (i % 16 == 0)
972                         printk("\n");
973                 printk("%02X ", pbuf[i]);
974         }
975         printk("\n");
976 }
977 #endif
978         /*  Calculate Efuse utilization */
979         EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, &total, bPseudoTest);
980         used = eFuse_Addr - 1;
981         efuse_usage = (u8)((used*100)/total);
982         if (bPseudoTest) {
983 #ifdef HAL_EFUSE_MEMORY
984                 pEfuseHal->fakeEfuseUsedBytes = used;
985 #else
986                 fakeEfuseUsedBytes = used;
987 #endif
988         } else {
989                 rtw_hal_set_hwreg(padapter, HW_VAR_EFUSE_BYTES, (u8 *)&used);
990                 rtw_hal_set_hwreg(padapter, HW_VAR_EFUSE_USAGE, (u8 *)&efuse_usage);
991         }
992
993         kfree(efuseTbl);
994 }
995
996 static void hal_ReadEFuse_BT(
997         struct adapter *padapter,
998         u16 _offset,
999         u16 _size_byte,
1000         u8 *pbuf,
1001         bool bPseudoTest
1002 )
1003 {
1004 #ifdef HAL_EFUSE_MEMORY
1005         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
1006         PEFUSE_HAL pEfuseHal = &pHalData->EfuseHal;
1007 #endif
1008         u8 *efuseTbl;
1009         u8 bank;
1010         u16 eFuse_Addr;
1011         u8 efuseHeader, efuseExtHdr, efuseData;
1012         u8 offset, wden;
1013         u16 i, total, used;
1014         u8 efuse_usage;
1015
1016
1017         /*  */
1018         /*  Do NOT excess total size of EFuse table. Added by Roger, 2008.11.10. */
1019         /*  */
1020         if ((_offset+_size_byte) > EFUSE_BT_MAP_LEN) {
1021                 DBG_8192C("%s: Invalid offset(%#x) with read bytes(%#x)!!\n", __func__, _offset, _size_byte);
1022                 return;
1023         }
1024
1025         efuseTbl = rtw_malloc(EFUSE_BT_MAP_LEN);
1026         if (!efuseTbl) {
1027                 DBG_8192C("%s: efuseTbl malloc fail!\n", __func__);
1028                 return;
1029         }
1030         /*  0xff will be efuse default value instead of 0x00. */
1031         memset(efuseTbl, 0xFF, EFUSE_BT_MAP_LEN);
1032
1033         EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_AVAILABLE_EFUSE_BYTES_BANK, &total, bPseudoTest);
1034
1035         for (bank = 1; bank < 3; bank++) { /*  8723b Max bake 0~2 */
1036                 if (hal_EfuseSwitchToBank(padapter, bank, bPseudoTest) == false) {
1037                         DBG_8192C("%s: hal_EfuseSwitchToBank Fail!!\n", __func__);
1038                         goto exit;
1039                 }
1040
1041                 eFuse_Addr = 0;
1042
1043                 while (AVAILABLE_EFUSE_ADDR(eFuse_Addr)) {
1044                         efuse_OneByteRead(padapter, eFuse_Addr++, &efuseHeader, bPseudoTest);
1045                         if (efuseHeader == 0xFF)
1046                                 break;
1047                         DBG_8192C("%s: efuse[%#X]= 0x%02x (header)\n", __func__, (((bank-1)*EFUSE_REAL_CONTENT_LEN_8723B)+eFuse_Addr-1), efuseHeader);
1048
1049                         /*  Check PG header for section num. */
1050                         if (EXT_HEADER(efuseHeader)) { /* extended header */
1051                                 offset = GET_HDR_OFFSET_2_0(efuseHeader);
1052                                 DBG_8192C("%s: extended header offset_2_0 = 0x%X\n", __func__, offset);
1053
1054                                 efuse_OneByteRead(padapter, eFuse_Addr++, &efuseExtHdr, bPseudoTest);
1055                                 DBG_8192C("%s: efuse[%#X]= 0x%02x (ext header)\n", __func__, (((bank-1)*EFUSE_REAL_CONTENT_LEN_8723B)+eFuse_Addr-1), efuseExtHdr);
1056                                 if (ALL_WORDS_DISABLED(efuseExtHdr))
1057                                         continue;
1058
1059
1060                                 offset |= ((efuseExtHdr & 0xF0) >> 1);
1061                                 wden = (efuseExtHdr & 0x0F);
1062                         } else {
1063                                 offset = ((efuseHeader >> 4) & 0x0f);
1064                                 wden = (efuseHeader & 0x0f);
1065                         }
1066
1067                         if (offset < EFUSE_BT_MAX_SECTION) {
1068                                 u16 addr;
1069
1070                                 /*  Get word enable value from PG header */
1071                                 DBG_8192C("%s: Offset =%d Worden =%#X\n", __func__, offset, wden);
1072
1073                                 addr = offset * PGPKT_DATA_SIZE;
1074                                 for (i = 0; i < EFUSE_MAX_WORD_UNIT; i++) {
1075                                         /*  Check word enable condition in the section */
1076                                         if (!(wden & (0x01<<i))) {
1077                                                 efuse_OneByteRead(padapter, eFuse_Addr++, &efuseData, bPseudoTest);
1078                                                 DBG_8192C("%s: efuse[%#X]= 0x%02X\n", __func__, eFuse_Addr-1, efuseData);
1079                                                 efuseTbl[addr] = efuseData;
1080
1081                                                 efuse_OneByteRead(padapter, eFuse_Addr++, &efuseData, bPseudoTest);
1082                                                 DBG_8192C("%s: efuse[%#X]= 0x%02X\n", __func__, eFuse_Addr-1, efuseData);
1083                                                 efuseTbl[addr+1] = efuseData;
1084                                         }
1085                                         addr += 2;
1086                                 }
1087                         } else {
1088                                 DBG_8192C("%s: offset(%d) is illegal!!\n", __func__, offset);
1089                                 eFuse_Addr += Efuse_CalculateWordCnts(wden)*2;
1090                         }
1091                 }
1092
1093                 if ((eFuse_Addr-1) < total) {
1094                         DBG_8192C("%s: bank(%d) data end at %#x\n", __func__, bank, eFuse_Addr-1);
1095                         break;
1096                 }
1097         }
1098
1099         /*  switch bank back to bank 0 for later BT and wifi use. */
1100         hal_EfuseSwitchToBank(padapter, 0, bPseudoTest);
1101
1102         /*  Copy from Efuse map to output pointer memory!!! */
1103         for (i = 0; i < _size_byte; i++)
1104                 pbuf[i] = efuseTbl[_offset+i];
1105
1106         /*  */
1107         /*  Calculate Efuse utilization. */
1108         /*  */
1109         EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, &total, bPseudoTest);
1110         used = (EFUSE_BT_REAL_BANK_CONTENT_LEN*(bank-1)) + eFuse_Addr - 1;
1111         DBG_8192C("%s: bank(%d) data end at %#x , used =%d\n", __func__, bank, eFuse_Addr-1, used);
1112         efuse_usage = (u8)((used*100)/total);
1113         if (bPseudoTest) {
1114 #ifdef HAL_EFUSE_MEMORY
1115                 pEfuseHal->fakeBTEfuseUsedBytes = used;
1116 #else
1117                 fakeBTEfuseUsedBytes = used;
1118 #endif
1119         } else {
1120                 rtw_hal_set_hwreg(padapter, HW_VAR_EFUSE_BT_BYTES, (u8 *)&used);
1121                 rtw_hal_set_hwreg(padapter, HW_VAR_EFUSE_BT_USAGE, (u8 *)&efuse_usage);
1122         }
1123
1124 exit:
1125         kfree(efuseTbl);
1126 }
1127
1128 static void Hal_ReadEFuse(
1129         struct adapter *padapter,
1130         u8 efuseType,
1131         u16 _offset,
1132         u16 _size_byte,
1133         u8 *pbuf,
1134         bool bPseudoTest
1135 )
1136 {
1137         if (efuseType == EFUSE_WIFI)
1138                 hal_ReadEFuse_WiFi(padapter, _offset, _size_byte, pbuf, bPseudoTest);
1139         else
1140                 hal_ReadEFuse_BT(padapter, _offset, _size_byte, pbuf, bPseudoTest);
1141 }
1142
1143 static u16 hal_EfuseGetCurrentSize_WiFi(
1144         struct adapter *padapter, bool bPseudoTest
1145 )
1146 {
1147 #ifdef HAL_EFUSE_MEMORY
1148         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
1149         PEFUSE_HAL              pEfuseHal = &pHalData->EfuseHal;
1150 #endif
1151         u16 efuse_addr = 0;
1152         u16 start_addr = 0; /*  for debug */
1153         u8 hoffset = 0, hworden = 0;
1154         u8 efuse_data, word_cnts = 0;
1155         u32 count = 0; /*  for debug */
1156
1157
1158         if (bPseudoTest) {
1159 #ifdef HAL_EFUSE_MEMORY
1160                 efuse_addr = (u16)pEfuseHal->fakeEfuseUsedBytes;
1161 #else
1162                 efuse_addr = (u16)fakeEfuseUsedBytes;
1163 #endif
1164         } else
1165                 rtw_hal_get_hwreg(padapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
1166
1167         start_addr = efuse_addr;
1168         DBG_8192C("%s: start_efuse_addr = 0x%X\n", __func__, efuse_addr);
1169
1170         /*  switch bank back to bank 0 for later BT and wifi use. */
1171         hal_EfuseSwitchToBank(padapter, 0, bPseudoTest);
1172
1173         count = 0;
1174         while (AVAILABLE_EFUSE_ADDR(efuse_addr)) {
1175                 if (efuse_OneByteRead(padapter, efuse_addr, &efuse_data, bPseudoTest) == false) {
1176                         DBG_8192C(KERN_ERR "%s: efuse_OneByteRead Fail! addr = 0x%X !!\n", __func__, efuse_addr);
1177                         goto error;
1178                 }
1179
1180                 if (efuse_data == 0xFF)
1181                         break;
1182
1183                 if ((start_addr != 0) && (efuse_addr == start_addr)) {
1184                         count++;
1185                         DBG_8192C(FUNC_ADPT_FMT ": [WARNING] efuse raw 0x%X = 0x%02X not 0xFF!!(%d times)\n",
1186                                 FUNC_ADPT_ARG(padapter), efuse_addr, efuse_data, count);
1187
1188                         efuse_data = 0xFF;
1189                         if (count < 4) {
1190                                 /*  try again! */
1191
1192                                 if (count > 2) {
1193                                         /*  try again form address 0 */
1194                                         efuse_addr = 0;
1195                                         start_addr = 0;
1196                                 }
1197
1198                                 continue;
1199                         }
1200
1201                         goto error;
1202                 }
1203
1204                 if (EXT_HEADER(efuse_data)) {
1205                         hoffset = GET_HDR_OFFSET_2_0(efuse_data);
1206                         efuse_addr++;
1207                         efuse_OneByteRead(padapter, efuse_addr, &efuse_data, bPseudoTest);
1208                         if (ALL_WORDS_DISABLED(efuse_data))
1209                                 continue;
1210
1211                         hoffset |= ((efuse_data & 0xF0) >> 1);
1212                         hworden = efuse_data & 0x0F;
1213                 } else {
1214                         hoffset = (efuse_data>>4) & 0x0F;
1215                         hworden = efuse_data & 0x0F;
1216                 }
1217
1218                 word_cnts = Efuse_CalculateWordCnts(hworden);
1219                 efuse_addr += (word_cnts*2)+1;
1220         }
1221
1222         if (bPseudoTest) {
1223 #ifdef HAL_EFUSE_MEMORY
1224                 pEfuseHal->fakeEfuseUsedBytes = efuse_addr;
1225 #else
1226                 fakeEfuseUsedBytes = efuse_addr;
1227 #endif
1228         } else
1229                 rtw_hal_set_hwreg(padapter, HW_VAR_EFUSE_BYTES, (u8 *)&efuse_addr);
1230
1231         goto exit;
1232
1233 error:
1234         /*  report max size to prevent write efuse */
1235         EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, &efuse_addr, bPseudoTest);
1236
1237 exit:
1238         DBG_8192C("%s: CurrentSize =%d\n", __func__, efuse_addr);
1239
1240         return efuse_addr;
1241 }
1242
1243 static u16 hal_EfuseGetCurrentSize_BT(struct adapter *padapter, u8 bPseudoTest)
1244 {
1245 #ifdef HAL_EFUSE_MEMORY
1246         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
1247         PEFUSE_HAL pEfuseHal = &pHalData->EfuseHal;
1248 #endif
1249         u16 btusedbytes;
1250         u16 efuse_addr;
1251         u8 bank, startBank;
1252         u8 hoffset = 0, hworden = 0;
1253         u8 efuse_data, word_cnts = 0;
1254         u16 retU2 = 0;
1255
1256         if (bPseudoTest) {
1257 #ifdef HAL_EFUSE_MEMORY
1258                 btusedbytes = pEfuseHal->fakeBTEfuseUsedBytes;
1259 #else
1260                 btusedbytes = fakeBTEfuseUsedBytes;
1261 #endif
1262         } else
1263                 rtw_hal_get_hwreg(padapter, HW_VAR_EFUSE_BT_BYTES, (u8 *)&btusedbytes);
1264
1265         efuse_addr = (u16)((btusedbytes%EFUSE_BT_REAL_BANK_CONTENT_LEN));
1266         startBank = (u8)(1+(btusedbytes/EFUSE_BT_REAL_BANK_CONTENT_LEN));
1267
1268         DBG_8192C("%s: start from bank =%d addr = 0x%X\n", __func__, startBank, efuse_addr);
1269
1270         EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_AVAILABLE_EFUSE_BYTES_BANK, &retU2, bPseudoTest);
1271
1272         for (bank = startBank; bank < 3; bank++) {
1273                 if (hal_EfuseSwitchToBank(padapter, bank, bPseudoTest) == false) {
1274                         DBG_8192C(KERN_ERR "%s: switch bank(%d) Fail!!\n", __func__, bank);
1275                         /* bank = EFUSE_MAX_BANK; */
1276                         break;
1277                 }
1278
1279                 /*  only when bank is switched we have to reset the efuse_addr. */
1280                 if (bank != startBank)
1281                         efuse_addr = 0;
1282 #if 1
1283
1284                 while (AVAILABLE_EFUSE_ADDR(efuse_addr)) {
1285                         if (efuse_OneByteRead(padapter, efuse_addr, &efuse_data, bPseudoTest) == false) {
1286                                 DBG_8192C(KERN_ERR "%s: efuse_OneByteRead Fail! addr = 0x%X !!\n", __func__, efuse_addr);
1287                                 /* bank = EFUSE_MAX_BANK; */
1288                                 break;
1289                         }
1290                         DBG_8192C("%s: efuse_OneByteRead ! addr = 0x%X !efuse_data = 0x%X! bank =%d\n", __func__, efuse_addr, efuse_data, bank);
1291
1292                         if (efuse_data == 0xFF)
1293                                 break;
1294
1295                         if (EXT_HEADER(efuse_data)) {
1296                                 hoffset = GET_HDR_OFFSET_2_0(efuse_data);
1297                                 efuse_addr++;
1298                                 efuse_OneByteRead(padapter, efuse_addr, &efuse_data, bPseudoTest);
1299                                 DBG_8192C("%s: efuse_OneByteRead EXT_HEADER ! addr = 0x%X !efuse_data = 0x%X! bank =%d\n", __func__, efuse_addr, efuse_data, bank);
1300
1301                                 if (ALL_WORDS_DISABLED(efuse_data)) {
1302                                         efuse_addr++;
1303                                         continue;
1304                                 }
1305
1306 /*                              hoffset = ((hoffset & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1); */
1307                                 hoffset |= ((efuse_data & 0xF0) >> 1);
1308                                 hworden = efuse_data & 0x0F;
1309                         } else {
1310                                 hoffset = (efuse_data>>4) & 0x0F;
1311                                 hworden =  efuse_data & 0x0F;
1312                         }
1313
1314                         DBG_8192C(FUNC_ADPT_FMT": Offset =%d Worden =%#X\n",
1315                                 FUNC_ADPT_ARG(padapter), hoffset, hworden);
1316
1317                         word_cnts = Efuse_CalculateWordCnts(hworden);
1318                         /* read next header */
1319                         efuse_addr += (word_cnts*2)+1;
1320                 }
1321 #else
1322         while (
1323                 bContinual &&
1324                 efuse_OneByteRead(padapter, efuse_addr, &efuse_data, bPseudoTest) &&
1325                 AVAILABLE_EFUSE_ADDR(efuse_addr)
1326         ) {
1327                         if (efuse_data != 0xFF) {
1328                                 if ((efuse_data&0x1F) == 0x0F) { /* extended header */
1329                                         hoffset = efuse_data;
1330                                         efuse_addr++;
1331                                         efuse_OneByteRead(padapter, efuse_addr, &efuse_data, bPseudoTest);
1332                                         if ((efuse_data & 0x0F) == 0x0F) {
1333                                                 efuse_addr++;
1334                                                 continue;
1335                                         } else {
1336                                                 hoffset = ((hoffset & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
1337                                                 hworden = efuse_data & 0x0F;
1338                                         }
1339                                 } else {
1340                                         hoffset = (efuse_data>>4) & 0x0F;
1341                                         hworden =  efuse_data & 0x0F;
1342                                 }
1343                                 word_cnts = Efuse_CalculateWordCnts(hworden);
1344                                 /* read next header */
1345                                 efuse_addr = efuse_addr + (word_cnts*2)+1;
1346                         } else
1347                                 bContinual = false;
1348                 }
1349 #endif
1350
1351
1352                 /*  Check if we need to check next bank efuse */
1353                 if (efuse_addr < retU2)
1354                         break; /*  don't need to check next bank. */
1355         }
1356
1357         retU2 = ((bank-1)*EFUSE_BT_REAL_BANK_CONTENT_LEN)+efuse_addr;
1358         if (bPseudoTest) {
1359                 pEfuseHal->fakeBTEfuseUsedBytes = retU2;
1360                 /* RT_DISP(FEEPROM, EFUSE_PG, ("Hal_EfuseGetCurrentSize_BT92C(), already use %u bytes\n", pEfuseHal->fakeBTEfuseUsedBytes)); */
1361         } else {
1362                 pEfuseHal->BTEfuseUsedBytes = retU2;
1363                 /* RT_DISP(FEEPROM, EFUSE_PG, ("Hal_EfuseGetCurrentSize_BT92C(), already use %u bytes\n", pEfuseHal->BTEfuseUsedBytes)); */
1364         }
1365
1366         DBG_8192C("%s: CurrentSize =%d\n", __func__, retU2);
1367         return retU2;
1368 }
1369
1370 static u16 Hal_EfuseGetCurrentSize(
1371         struct adapter *padapter, u8 efuseType, bool bPseudoTest
1372 )
1373 {
1374         u16 ret = 0;
1375
1376         if (efuseType == EFUSE_WIFI)
1377                 ret = hal_EfuseGetCurrentSize_WiFi(padapter, bPseudoTest);
1378         else
1379                 ret = hal_EfuseGetCurrentSize_BT(padapter, bPseudoTest);
1380
1381         return ret;
1382 }
1383
1384 static u8 Hal_EfuseWordEnableDataWrite(
1385         struct adapter *padapter,
1386         u16 efuse_addr,
1387         u8 word_en,
1388         u8 *data,
1389         bool bPseudoTest
1390 )
1391 {
1392         u16 tmpaddr = 0;
1393         u16 start_addr = efuse_addr;
1394         u8 badworden = 0x0F;
1395         u8 tmpdata[PGPKT_DATA_SIZE];
1396
1397
1398 /*      DBG_8192C("%s: efuse_addr =%#x word_en =%#x\n", __func__, efuse_addr, word_en); */
1399         memset(tmpdata, 0xFF, PGPKT_DATA_SIZE);
1400
1401         if (!(word_en & BIT(0))) {
1402                 tmpaddr = start_addr;
1403                 efuse_OneByteWrite(padapter, start_addr++, data[0], bPseudoTest);
1404                 efuse_OneByteWrite(padapter, start_addr++, data[1], bPseudoTest);
1405
1406                 efuse_OneByteRead(padapter, tmpaddr, &tmpdata[0], bPseudoTest);
1407                 efuse_OneByteRead(padapter, tmpaddr+1, &tmpdata[1], bPseudoTest);
1408                 if ((data[0] != tmpdata[0]) || (data[1] != tmpdata[1])) {
1409                         badworden &= (~BIT(0));
1410                 }
1411         }
1412         if (!(word_en & BIT(1))) {
1413                 tmpaddr = start_addr;
1414                 efuse_OneByteWrite(padapter, start_addr++, data[2], bPseudoTest);
1415                 efuse_OneByteWrite(padapter, start_addr++, data[3], bPseudoTest);
1416
1417                 efuse_OneByteRead(padapter, tmpaddr, &tmpdata[2], bPseudoTest);
1418                 efuse_OneByteRead(padapter, tmpaddr+1, &tmpdata[3], bPseudoTest);
1419                 if ((data[2] != tmpdata[2]) || (data[3] != tmpdata[3])) {
1420                         badworden &= (~BIT(1));
1421                 }
1422         }
1423
1424         if (!(word_en & BIT(2))) {
1425                 tmpaddr = start_addr;
1426                 efuse_OneByteWrite(padapter, start_addr++, data[4], bPseudoTest);
1427                 efuse_OneByteWrite(padapter, start_addr++, data[5], bPseudoTest);
1428
1429                 efuse_OneByteRead(padapter, tmpaddr, &tmpdata[4], bPseudoTest);
1430                 efuse_OneByteRead(padapter, tmpaddr+1, &tmpdata[5], bPseudoTest);
1431                 if ((data[4] != tmpdata[4]) || (data[5] != tmpdata[5])) {
1432                         badworden &= (~BIT(2));
1433                 }
1434         }
1435
1436         if (!(word_en & BIT(3))) {
1437                 tmpaddr = start_addr;
1438                 efuse_OneByteWrite(padapter, start_addr++, data[6], bPseudoTest);
1439                 efuse_OneByteWrite(padapter, start_addr++, data[7], bPseudoTest);
1440
1441                 efuse_OneByteRead(padapter, tmpaddr, &tmpdata[6], bPseudoTest);
1442                 efuse_OneByteRead(padapter, tmpaddr+1, &tmpdata[7], bPseudoTest);
1443                 if ((data[6] != tmpdata[6]) || (data[7] != tmpdata[7])) {
1444                         badworden &= (~BIT(3));
1445                 }
1446         }
1447
1448         return badworden;
1449 }
1450
1451 static s32 Hal_EfusePgPacketRead(
1452         struct adapter *padapter,
1453         u8 offset,
1454         u8 *data,
1455         bool bPseudoTest
1456 )
1457 {
1458         u8 efuse_data, word_cnts = 0;
1459         u16 efuse_addr = 0;
1460         u8 hoffset = 0, hworden = 0;
1461         u8 i;
1462         u8 max_section = 0;
1463         s32     ret;
1464
1465
1466         if (!data)
1467                 return false;
1468
1469         EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAX_SECTION, &max_section, bPseudoTest);
1470         if (offset > max_section) {
1471                 DBG_8192C("%s: Packet offset(%d) is illegal(>%d)!\n", __func__, offset, max_section);
1472                 return false;
1473         }
1474
1475         memset(data, 0xFF, PGPKT_DATA_SIZE);
1476         ret = true;
1477
1478         /*  */
1479         /*  <Roger_TODO> Efuse has been pre-programmed dummy 5Bytes at the end of Efuse by CP. */
1480         /*  Skip dummy parts to prevent unexpected data read from Efuse. */
1481         /*  By pass right now. 2009.02.19. */
1482         /*  */
1483         while (AVAILABLE_EFUSE_ADDR(efuse_addr)) {
1484                 if (efuse_OneByteRead(padapter, efuse_addr++, &efuse_data, bPseudoTest) == false) {
1485                         ret = false;
1486                         break;
1487                 }
1488
1489                 if (efuse_data == 0xFF)
1490                         break;
1491
1492                 if (EXT_HEADER(efuse_data)) {
1493                         hoffset = GET_HDR_OFFSET_2_0(efuse_data);
1494                         efuse_OneByteRead(padapter, efuse_addr++, &efuse_data, bPseudoTest);
1495                         if (ALL_WORDS_DISABLED(efuse_data)) {
1496                                 DBG_8192C("%s: Error!! All words disabled!\n", __func__);
1497                                 continue;
1498                         }
1499
1500                         hoffset |= ((efuse_data & 0xF0) >> 1);
1501                         hworden = efuse_data & 0x0F;
1502                 } else {
1503                         hoffset = (efuse_data>>4) & 0x0F;
1504                         hworden =  efuse_data & 0x0F;
1505                 }
1506
1507                 if (hoffset == offset) {
1508                         for (i = 0; i < EFUSE_MAX_WORD_UNIT; i++) {
1509                                 /*  Check word enable condition in the section */
1510                                 if (!(hworden & (0x01<<i))) {
1511                                         efuse_OneByteRead(padapter, efuse_addr++, &efuse_data, bPseudoTest);
1512 /*                                      DBG_8192C("%s: efuse[%#X]= 0x%02X\n", __func__, efuse_addr+tmpidx, efuse_data); */
1513                                         data[i*2] = efuse_data;
1514
1515                                         efuse_OneByteRead(padapter, efuse_addr++, &efuse_data, bPseudoTest);
1516 /*                                      DBG_8192C("%s: efuse[%#X]= 0x%02X\n", __func__, efuse_addr+tmpidx, efuse_data); */
1517                                         data[(i*2)+1] = efuse_data;
1518                                 }
1519                         }
1520                 } else {
1521                         word_cnts = Efuse_CalculateWordCnts(hworden);
1522                         efuse_addr += word_cnts*2;
1523                 }
1524         }
1525
1526         return ret;
1527 }
1528
1529 static u8 hal_EfusePgCheckAvailableAddr(
1530         struct adapter *padapter, u8 efuseType, u8 bPseudoTest
1531 )
1532 {
1533         u16 max_available = 0;
1534         u16 current_size;
1535
1536
1537         EFUSE_GetEfuseDefinition(padapter, efuseType, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, &max_available, bPseudoTest);
1538 /*      DBG_8192C("%s: max_available =%d\n", __func__, max_available); */
1539
1540         current_size = Efuse_GetCurrentSize(padapter, efuseType, bPseudoTest);
1541         if (current_size >= max_available) {
1542                 DBG_8192C("%s: Error!! current_size(%d)>max_available(%d)\n", __func__, current_size, max_available);
1543                 return false;
1544         }
1545         return true;
1546 }
1547
1548 static void hal_EfuseConstructPGPkt(
1549         u8 offset,
1550         u8 word_en,
1551         u8 *pData,
1552         PPGPKT_STRUCT pTargetPkt
1553 )
1554 {
1555         memset(pTargetPkt->data, 0xFF, PGPKT_DATA_SIZE);
1556         pTargetPkt->offset = offset;
1557         pTargetPkt->word_en = word_en;
1558         efuse_WordEnableDataRead(word_en, pData, pTargetPkt->data);
1559         pTargetPkt->word_cnts = Efuse_CalculateWordCnts(pTargetPkt->word_en);
1560 }
1561
1562 static u8 hal_EfusePartialWriteCheck(
1563         struct adapter *padapter,
1564         u8 efuseType,
1565         u16 *pAddr,
1566         PPGPKT_STRUCT pTargetPkt,
1567         u8 bPseudoTest
1568 )
1569 {
1570         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
1571         PEFUSE_HAL pEfuseHal = &pHalData->EfuseHal;
1572         u8 bRet = false;
1573         u16 startAddr = 0, efuse_max_available_len = 0, efuse_max = 0;
1574         u8 efuse_data = 0;
1575
1576         EFUSE_GetEfuseDefinition(padapter, efuseType, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, &efuse_max_available_len, bPseudoTest);
1577         EFUSE_GetEfuseDefinition(padapter, efuseType, TYPE_EFUSE_CONTENT_LEN_BANK, &efuse_max, bPseudoTest);
1578
1579         if (efuseType == EFUSE_WIFI) {
1580                 if (bPseudoTest) {
1581 #ifdef HAL_EFUSE_MEMORY
1582                         startAddr = (u16)pEfuseHal->fakeEfuseUsedBytes;
1583 #else
1584                         startAddr = (u16)fakeEfuseUsedBytes;
1585 #endif
1586                 } else
1587                         rtw_hal_get_hwreg(padapter, HW_VAR_EFUSE_BYTES, (u8 *)&startAddr);
1588         } else {
1589                 if (bPseudoTest) {
1590 #ifdef HAL_EFUSE_MEMORY
1591                         startAddr = (u16)pEfuseHal->fakeBTEfuseUsedBytes;
1592 #else
1593                         startAddr = (u16)fakeBTEfuseUsedBytes;
1594 #endif
1595                 } else
1596                         rtw_hal_get_hwreg(padapter, HW_VAR_EFUSE_BT_BYTES, (u8 *)&startAddr);
1597         }
1598         startAddr %= efuse_max;
1599         DBG_8192C("%s: startAddr =%#X\n", __func__, startAddr);
1600
1601         while (1) {
1602                 if (startAddr >= efuse_max_available_len) {
1603                         bRet = false;
1604                         DBG_8192C("%s: startAddr(%d) >= efuse_max_available_len(%d)\n", __func__, startAddr, efuse_max_available_len);
1605                         break;
1606                 }
1607
1608                 if (efuse_OneByteRead(padapter, startAddr, &efuse_data, bPseudoTest) && (efuse_data != 0xFF)) {
1609 #if 1
1610                         bRet = false;
1611                         DBG_8192C("%s: Something Wrong! last bytes(%#X = 0x%02X) is not 0xFF\n",
1612                                 __func__, startAddr, efuse_data);
1613                         break;
1614 #else
1615                         if (EXT_HEADER(efuse_data)) {
1616                                 cur_header = efuse_data;
1617                                 startAddr++;
1618                                 efuse_OneByteRead(padapter, startAddr, &efuse_data, bPseudoTest);
1619                                 if (ALL_WORDS_DISABLED(efuse_data)) {
1620                                         DBG_8192C("%s: Error condition, all words disabled!", __func__);
1621                                         bRet = false;
1622                                         break;
1623                                 } else {
1624                                         curPkt.offset = ((cur_header & 0xE0) >> 5) | ((efuse_data & 0xF0) >> 1);
1625                                         curPkt.word_en = efuse_data & 0x0F;
1626                                 }
1627                         } else {
1628                                 cur_header  =  efuse_data;
1629                                 curPkt.offset = (cur_header>>4) & 0x0F;
1630                                 curPkt.word_en = cur_header & 0x0F;
1631                         }
1632
1633                         curPkt.word_cnts = Efuse_CalculateWordCnts(curPkt.word_en);
1634                         /*  if same header is found but no data followed */
1635                         /*  write some part of data followed by the header. */
1636                         if (
1637                                 (curPkt.offset == pTargetPkt->offset) &&
1638                                 (hal_EfuseCheckIfDatafollowed(padapter, curPkt.word_cnts, startAddr+1, bPseudoTest) == false) &&
1639                                 wordEnMatched(pTargetPkt, &curPkt, &matched_wden) == true
1640                         ) {
1641                                 DBG_8192C("%s: Need to partial write data by the previous wrote header\n", __func__);
1642                                 /*  Here to write partial data */
1643                                 badworden = Efuse_WordEnableDataWrite(padapter, startAddr+1, matched_wden, pTargetPkt->data, bPseudoTest);
1644                                 if (badworden != 0x0F) {
1645                                         u32 PgWriteSuccess = 0;
1646                                         /*  if write fail on some words, write these bad words again */
1647                                         if (efuseType == EFUSE_WIFI)
1648                                                 PgWriteSuccess = Efuse_PgPacketWrite(padapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
1649                                         else
1650                                                 PgWriteSuccess = Efuse_PgPacketWrite_BT(padapter, pTargetPkt->offset, badworden, pTargetPkt->data, bPseudoTest);
1651
1652                                         if (!PgWriteSuccess) {
1653                                                 bRet = false;   /*  write fail, return */
1654                                                 break;
1655                                         }
1656                                 }
1657                                 /*  partial write ok, update the target packet for later use */
1658                                 for (i = 0; i < 4; i++) {
1659                                         if ((matched_wden & (0x1<<i)) == 0) { /*  this word has been written */
1660                                                 pTargetPkt->word_en |= (0x1<<i);        /*  disable the word */
1661                                         }
1662                                 }
1663                                 pTargetPkt->word_cnts = Efuse_CalculateWordCnts(pTargetPkt->word_en);
1664                         }
1665                         /*  read from next header */
1666                         startAddr = startAddr + (curPkt.word_cnts*2) + 1;
1667 #endif
1668                 } else {
1669                         /*  not used header, 0xff */
1670                         *pAddr = startAddr;
1671 /*                      DBG_8192C("%s: Started from unused header offset =%d\n", __func__, startAddr)); */
1672                         bRet = true;
1673                         break;
1674                 }
1675         }
1676
1677         return bRet;
1678 }
1679
1680 static u8 hal_EfusePgPacketWrite1ByteHeader(
1681         struct adapter *padapter,
1682         u8 efuseType,
1683         u16 *pAddr,
1684         PPGPKT_STRUCT pTargetPkt,
1685         u8 bPseudoTest
1686 )
1687 {
1688         u8 pg_header = 0, tmp_header = 0;
1689         u16 efuse_addr = *pAddr;
1690         u8 repeatcnt = 0;
1691
1692
1693 /*      DBG_8192C("%s\n", __func__); */
1694         pg_header = ((pTargetPkt->offset << 4) & 0xf0) | pTargetPkt->word_en;
1695
1696         do {
1697                 efuse_OneByteWrite(padapter, efuse_addr, pg_header, bPseudoTest);
1698                 efuse_OneByteRead(padapter, efuse_addr, &tmp_header, bPseudoTest);
1699                 if (tmp_header != 0xFF)
1700                         break;
1701                 if (repeatcnt++ > EFUSE_REPEAT_THRESHOLD_) {
1702                         DBG_8192C("%s: Repeat over limit for pg_header!!\n", __func__);
1703                         return false;
1704                 }
1705         } while (1);
1706
1707         if (tmp_header != pg_header) {
1708                 DBG_8192C(KERN_ERR "%s: PG Header Fail!!(pg = 0x%02X read = 0x%02X)\n", __func__, pg_header, tmp_header);
1709                 return false;
1710         }
1711
1712         *pAddr = efuse_addr;
1713
1714         return true;
1715 }
1716
1717 static u8 hal_EfusePgPacketWrite2ByteHeader(
1718         struct adapter *padapter,
1719         u8 efuseType,
1720         u16 *pAddr,
1721         PPGPKT_STRUCT pTargetPkt,
1722         u8 bPseudoTest
1723 )
1724 {
1725         u16 efuse_addr, efuse_max_available_len = 0;
1726         u8 pg_header = 0, tmp_header = 0;
1727         u8 repeatcnt = 0;
1728
1729
1730 /*      DBG_8192C("%s\n", __func__); */
1731         EFUSE_GetEfuseDefinition(padapter, efuseType, TYPE_AVAILABLE_EFUSE_BYTES_BANK, &efuse_max_available_len, bPseudoTest);
1732
1733         efuse_addr = *pAddr;
1734         if (efuse_addr >= efuse_max_available_len) {
1735                 DBG_8192C("%s: addr(%d) over available (%d)!!\n", __func__,
1736                           efuse_addr, efuse_max_available_len);
1737                 return false;
1738         }
1739
1740         pg_header = ((pTargetPkt->offset & 0x07) << 5) | 0x0F;
1741 /*      DBG_8192C("%s: pg_header = 0x%x\n", __func__, pg_header); */
1742
1743         do {
1744                 efuse_OneByteWrite(padapter, efuse_addr, pg_header, bPseudoTest);
1745                 efuse_OneByteRead(padapter, efuse_addr, &tmp_header, bPseudoTest);
1746                 if (tmp_header != 0xFF)
1747                         break;
1748                 if (repeatcnt++ > EFUSE_REPEAT_THRESHOLD_) {
1749                         DBG_8192C("%s: Repeat over limit for pg_header!!\n", __func__);
1750                         return false;
1751                 }
1752         } while (1);
1753
1754         if (tmp_header != pg_header) {
1755                 DBG_8192C(KERN_ERR "%s: PG Header Fail!!(pg = 0x%02X read = 0x%02X)\n", __func__, pg_header, tmp_header);
1756                 return false;
1757         }
1758
1759         /*  to write ext_header */
1760         efuse_addr++;
1761         pg_header = ((pTargetPkt->offset & 0x78) << 1) | pTargetPkt->word_en;
1762
1763         do {
1764                 efuse_OneByteWrite(padapter, efuse_addr, pg_header, bPseudoTest);
1765                 efuse_OneByteRead(padapter, efuse_addr, &tmp_header, bPseudoTest);
1766                 if (tmp_header != 0xFF)
1767                         break;
1768                 if (repeatcnt++ > EFUSE_REPEAT_THRESHOLD_) {
1769                         DBG_8192C("%s: Repeat over limit for ext_header!!\n", __func__);
1770                         return false;
1771                 }
1772         } while (1);
1773
1774         if (tmp_header != pg_header) { /* offset PG fail */
1775                 DBG_8192C(KERN_ERR "%s: PG EXT Header Fail!!(pg = 0x%02X read = 0x%02X)\n", __func__, pg_header, tmp_header);
1776                 return false;
1777         }
1778
1779         *pAddr = efuse_addr;
1780
1781         return true;
1782 }
1783
1784 static u8 hal_EfusePgPacketWriteHeader(
1785         struct adapter *padapter,
1786         u8 efuseType,
1787         u16 *pAddr,
1788         PPGPKT_STRUCT pTargetPkt,
1789         u8 bPseudoTest
1790 )
1791 {
1792         u8 bRet = false;
1793
1794         if (pTargetPkt->offset >= EFUSE_MAX_SECTION_BASE)
1795                 bRet = hal_EfusePgPacketWrite2ByteHeader(padapter, efuseType, pAddr, pTargetPkt, bPseudoTest);
1796         else
1797                 bRet = hal_EfusePgPacketWrite1ByteHeader(padapter, efuseType, pAddr, pTargetPkt, bPseudoTest);
1798
1799         return bRet;
1800 }
1801
1802 static u8 hal_EfusePgPacketWriteData(
1803         struct adapter *padapter,
1804         u8 efuseType,
1805         u16 *pAddr,
1806         PPGPKT_STRUCT pTargetPkt,
1807         u8 bPseudoTest
1808 )
1809 {
1810         u16 efuse_addr;
1811         u8 badworden;
1812
1813
1814         efuse_addr = *pAddr;
1815         badworden = Efuse_WordEnableDataWrite(padapter, efuse_addr+1, pTargetPkt->word_en, pTargetPkt->data, bPseudoTest);
1816         if (badworden != 0x0F) {
1817                 DBG_8192C("%s: Fail!!\n", __func__);
1818                 return false;
1819         }
1820
1821 /*      DBG_8192C("%s: ok\n", __func__); */
1822         return true;
1823 }
1824
1825 static s32 Hal_EfusePgPacketWrite(
1826         struct adapter *padapter,
1827         u8 offset,
1828         u8 word_en,
1829         u8 *pData,
1830         bool bPseudoTest
1831 )
1832 {
1833         PGPKT_STRUCT targetPkt;
1834         u16 startAddr = 0;
1835         u8 efuseType = EFUSE_WIFI;
1836
1837         if (!hal_EfusePgCheckAvailableAddr(padapter, efuseType, bPseudoTest))
1838                 return false;
1839
1840         hal_EfuseConstructPGPkt(offset, word_en, pData, &targetPkt);
1841
1842         if (!hal_EfusePartialWriteCheck(padapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
1843                 return false;
1844
1845         if (!hal_EfusePgPacketWriteHeader(padapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
1846                 return false;
1847
1848         if (!hal_EfusePgPacketWriteData(padapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
1849                 return false;
1850
1851         return true;
1852 }
1853
1854 static bool Hal_EfusePgPacketWrite_BT(
1855         struct adapter *padapter,
1856         u8 offset,
1857         u8 word_en,
1858         u8 *pData,
1859         bool bPseudoTest
1860 )
1861 {
1862         PGPKT_STRUCT targetPkt;
1863         u16 startAddr = 0;
1864         u8 efuseType = EFUSE_BT;
1865
1866         if (!hal_EfusePgCheckAvailableAddr(padapter, efuseType, bPseudoTest))
1867                 return false;
1868
1869         hal_EfuseConstructPGPkt(offset, word_en, pData, &targetPkt);
1870
1871         if (!hal_EfusePartialWriteCheck(padapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
1872                 return false;
1873
1874         if (!hal_EfusePgPacketWriteHeader(padapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
1875                 return false;
1876
1877         if (!hal_EfusePgPacketWriteData(padapter, efuseType, &startAddr, &targetPkt, bPseudoTest))
1878                 return false;
1879
1880         return true;
1881 }
1882
1883 static HAL_VERSION ReadChipVersion8723B(struct adapter *padapter)
1884 {
1885         u32 value32;
1886         HAL_VERSION ChipVersion;
1887         struct hal_com_data *pHalData;
1888
1889 /* YJ, TODO, move read chip type here */
1890         pHalData = GET_HAL_DATA(padapter);
1891
1892         value32 = rtw_read32(padapter, REG_SYS_CFG);
1893         ChipVersion.ICType = CHIP_8723B;
1894         ChipVersion.ChipType = ((value32 & RTL_ID) ? TEST_CHIP : NORMAL_CHIP);
1895         ChipVersion.RFType = RF_TYPE_1T1R;
1896         ChipVersion.VendorType = ((value32 & VENDOR_ID) ? CHIP_VENDOR_UMC : CHIP_VENDOR_TSMC);
1897         ChipVersion.CUTVersion = (value32 & CHIP_VER_RTL_MASK)>>CHIP_VER_RTL_SHIFT; /*  IC version (CUT) */
1898
1899         /*  For regulator mode. by tynli. 2011.01.14 */
1900         pHalData->RegulatorMode = ((value32 & SPS_SEL) ? RT_LDO_REGULATOR : RT_SWITCHING_REGULATOR);
1901
1902         value32 = rtw_read32(padapter, REG_GPIO_OUTSTS);
1903         ChipVersion.ROMVer = ((value32 & RF_RL_ID) >> 20);      /*  ROM code version. */
1904
1905         /*  For multi-function consideration. Added by Roger, 2010.10.06. */
1906         pHalData->MultiFunc = RT_MULTI_FUNC_NONE;
1907         value32 = rtw_read32(padapter, REG_MULTI_FUNC_CTRL);
1908         pHalData->MultiFunc |= ((value32 & WL_FUNC_EN) ? RT_MULTI_FUNC_WIFI : 0);
1909         pHalData->MultiFunc |= ((value32 & BT_FUNC_EN) ? RT_MULTI_FUNC_BT : 0);
1910         pHalData->MultiFunc |= ((value32 & GPS_FUNC_EN) ? RT_MULTI_FUNC_GPS : 0);
1911         pHalData->PolarityCtl = ((value32 & WL_HWPDN_SL) ? RT_POLARITY_HIGH_ACT : RT_POLARITY_LOW_ACT);
1912 #if 1
1913         dump_chip_info(ChipVersion);
1914 #endif
1915         pHalData->VersionID = ChipVersion;
1916         if (IS_1T2R(ChipVersion))
1917                 pHalData->rf_type = RF_1T2R;
1918         else if (IS_2T2R(ChipVersion))
1919                 pHalData->rf_type = RF_2T2R;
1920         else
1921                 pHalData->rf_type = RF_1T1R;
1922
1923         MSG_8192C("RF_Type is %x!!\n", pHalData->rf_type);
1924
1925         return ChipVersion;
1926 }
1927
1928 static void rtl8723b_read_chip_version(struct adapter *padapter)
1929 {
1930         ReadChipVersion8723B(padapter);
1931 }
1932
1933 void rtl8723b_InitBeaconParameters(struct adapter *padapter)
1934 {
1935         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
1936         u16 val16;
1937         u8 val8;
1938
1939
1940         val8 = DIS_TSF_UDT;
1941         val16 = val8 | (val8 << 8); /*  port0 and port1 */
1942
1943         /*  Enable prot0 beacon function for PSTDMA */
1944         val16 |= EN_BCN_FUNCTION;
1945
1946         rtw_write16(padapter, REG_BCN_CTRL, val16);
1947
1948         /*  TODO: Remove these magic number */
1949         rtw_write16(padapter, REG_TBTT_PROHIBIT, 0x6404);/*  ms */
1950         /*  Firmware will control REG_DRVERLYINT when power saving is enable, */
1951         /*  so don't set this register on STA mode. */
1952         if (check_fwstate(&padapter->mlmepriv, WIFI_STATION_STATE) == false)
1953                 rtw_write8(padapter, REG_DRVERLYINT, DRIVER_EARLY_INT_TIME_8723B); /*  5ms */
1954         rtw_write8(padapter, REG_BCNDMATIM, BCN_DMA_ATIME_INT_TIME_8723B); /*  2ms */
1955
1956         /*  Suggested by designer timchen. Change beacon AIFS to the largest number */
1957         /*  beacause test chip does not contension before sending beacon. by tynli. 2009.11.03 */
1958         rtw_write16(padapter, REG_BCNTCFG, 0x660F);
1959
1960         pHalData->RegBcnCtrlVal = rtw_read8(padapter, REG_BCN_CTRL);
1961         pHalData->RegTxPause = rtw_read8(padapter, REG_TXPAUSE);
1962         pHalData->RegFwHwTxQCtrl = rtw_read8(padapter, REG_FWHW_TXQ_CTRL+2);
1963         pHalData->RegReg542 = rtw_read8(padapter, REG_TBTT_PROHIBIT+2);
1964         pHalData->RegCR_1 = rtw_read8(padapter, REG_CR+1);
1965 }
1966
1967 void _InitBurstPktLen_8723BS(struct adapter *Adapter)
1968 {
1969         struct hal_com_data *pHalData = GET_HAL_DATA(Adapter);
1970
1971         rtw_write8(Adapter, 0x4c7, rtw_read8(Adapter, 0x4c7)|BIT(7)); /* enable single pkt ampdu */
1972         rtw_write8(Adapter, REG_RX_PKT_LIMIT_8723B, 0x18);              /* for VHT packet length 11K */
1973         rtw_write8(Adapter, REG_MAX_AGGR_NUM_8723B, 0x1F);
1974         rtw_write8(Adapter, REG_PIFS_8723B, 0x00);
1975         rtw_write8(Adapter, REG_FWHW_TXQ_CTRL_8723B, rtw_read8(Adapter, REG_FWHW_TXQ_CTRL)&(~BIT(7)));
1976         if (pHalData->AMPDUBurstMode)
1977                 rtw_write8(Adapter, REG_AMPDU_BURST_MODE_8723B,  0x5F);
1978         rtw_write8(Adapter, REG_AMPDU_MAX_TIME_8723B, 0x70);
1979
1980         /*  ARFB table 9 for 11ac 5G 2SS */
1981         rtw_write32(Adapter, REG_ARFR0_8723B, 0x00000010);
1982         if (IS_NORMAL_CHIP(pHalData->VersionID))
1983                 rtw_write32(Adapter, REG_ARFR0_8723B+4, 0xfffff000);
1984         else
1985                 rtw_write32(Adapter, REG_ARFR0_8723B+4, 0x3e0ff000);
1986
1987         /*  ARFB table 10 for 11ac 5G 1SS */
1988         rtw_write32(Adapter, REG_ARFR1_8723B, 0x00000010);
1989         rtw_write32(Adapter, REG_ARFR1_8723B+4, 0x003ff000);
1990 }
1991
1992 static void ResumeTxBeacon(struct adapter *padapter)
1993 {
1994         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
1995
1996
1997         /*  2010.03.01. Marked by tynli. No need to call workitem beacause we record the value */
1998         /*  which should be read from register to a global variable. */
1999
2000         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("+ResumeTxBeacon\n"));
2001
2002         pHalData->RegFwHwTxQCtrl |= BIT(6);
2003         rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, pHalData->RegFwHwTxQCtrl);
2004         rtw_write8(padapter, REG_TBTT_PROHIBIT+1, 0xff);
2005         pHalData->RegReg542 |= BIT(0);
2006         rtw_write8(padapter, REG_TBTT_PROHIBIT+2, pHalData->RegReg542);
2007 }
2008
2009 static void StopTxBeacon(struct adapter *padapter)
2010 {
2011         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
2012
2013
2014         /*  2010.03.01. Marked by tynli. No need to call workitem beacause we record the value */
2015         /*  which should be read from register to a global variable. */
2016
2017         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("+StopTxBeacon\n"));
2018
2019         pHalData->RegFwHwTxQCtrl &= ~BIT(6);
2020         rtw_write8(padapter, REG_FWHW_TXQ_CTRL+2, pHalData->RegFwHwTxQCtrl);
2021         rtw_write8(padapter, REG_TBTT_PROHIBIT+1, 0x64);
2022         pHalData->RegReg542 &= ~BIT(0);
2023         rtw_write8(padapter, REG_TBTT_PROHIBIT+2, pHalData->RegReg542);
2024
2025         CheckFwRsvdPageContent(padapter);  /*  2010.06.23. Added by tynli. */
2026 }
2027
2028 static void _BeaconFunctionEnable(struct adapter *padapter, u8 Enable, u8 Linked)
2029 {
2030         rtw_write8(padapter, REG_BCN_CTRL, DIS_TSF_UDT | EN_BCN_FUNCTION | DIS_BCNQ_SUB);
2031         rtw_write8(padapter, REG_RD_CTRL+1, 0x6F);
2032 }
2033
2034 static void rtl8723b_SetBeaconRelatedRegisters(struct adapter *padapter)
2035 {
2036         u8 val8;
2037         u32 value32;
2038         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2039         struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
2040         u32 bcn_ctrl_reg;
2041
2042         /* reset TSF, enable update TSF, correcting TSF On Beacon */
2043
2044         /* REG_BCN_INTERVAL */
2045         /* REG_BCNDMATIM */
2046         /* REG_ATIMWND */
2047         /* REG_TBTT_PROHIBIT */
2048         /* REG_DRVERLYINT */
2049         /* REG_BCN_MAX_ERR */
2050         /* REG_BCNTCFG (0x510) */
2051         /* REG_DUAL_TSF_RST */
2052         /* REG_BCN_CTRL (0x550) */
2053
2054
2055         bcn_ctrl_reg = REG_BCN_CTRL;
2056
2057         /*  */
2058         /*  ATIM window */
2059         /*  */
2060         rtw_write16(padapter, REG_ATIMWND, 2);
2061
2062         /*  */
2063         /*  Beacon interval (in unit of TU). */
2064         /*  */
2065         rtw_write16(padapter, REG_BCN_INTERVAL, pmlmeinfo->bcn_interval);
2066
2067         rtl8723b_InitBeaconParameters(padapter);
2068
2069         rtw_write8(padapter, REG_SLOT, 0x09);
2070
2071         /*  */
2072         /*  Reset TSF Timer to zero, added by Roger. 2008.06.24 */
2073         /*  */
2074         value32 = rtw_read32(padapter, REG_TCR);
2075         value32 &= ~TSFRST;
2076         rtw_write32(padapter, REG_TCR, value32);
2077
2078         value32 |= TSFRST;
2079         rtw_write32(padapter, REG_TCR, value32);
2080
2081         /*  NOTE: Fix test chip's bug (about contention windows's randomness) */
2082         if (check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE) == true) {
2083                 rtw_write8(padapter, REG_RXTSF_OFFSET_CCK, 0x50);
2084                 rtw_write8(padapter, REG_RXTSF_OFFSET_OFDM, 0x50);
2085         }
2086
2087         _BeaconFunctionEnable(padapter, true, true);
2088
2089         ResumeTxBeacon(padapter);
2090         val8 = rtw_read8(padapter, bcn_ctrl_reg);
2091         val8 |= DIS_BCNQ_SUB;
2092         rtw_write8(padapter, bcn_ctrl_reg, val8);
2093 }
2094
2095 static void rtl8723b_GetHalODMVar(
2096         struct adapter *Adapter,
2097         enum HAL_ODM_VARIABLE eVariable,
2098         void *pValue1,
2099         void *pValue2
2100 )
2101 {
2102         GetHalODMVar(Adapter, eVariable, pValue1, pValue2);
2103 }
2104
2105 static void rtl8723b_SetHalODMVar(
2106         struct adapter *Adapter,
2107         enum HAL_ODM_VARIABLE eVariable,
2108         void *pValue1,
2109         bool bSet
2110 )
2111 {
2112         SetHalODMVar(Adapter, eVariable, pValue1, bSet);
2113 }
2114
2115 static void hal_notch_filter_8723b(struct adapter *adapter, bool enable)
2116 {
2117         if (enable) {
2118                 DBG_871X("Enable notch filter\n");
2119                 rtw_write8(adapter, rOFDM0_RxDSP+1, rtw_read8(adapter, rOFDM0_RxDSP+1) | BIT1);
2120         } else {
2121                 DBG_871X("Disable notch filter\n");
2122                 rtw_write8(adapter, rOFDM0_RxDSP+1, rtw_read8(adapter, rOFDM0_RxDSP+1) & ~BIT1);
2123         }
2124 }
2125
2126 static void UpdateHalRAMask8723B(struct adapter *padapter, u32 mac_id, u8 rssi_level)
2127 {
2128         u32 mask, rate_bitmap;
2129         u8 shortGIrate = false;
2130         struct sta_info *psta;
2131         struct hal_com_data     *pHalData = GET_HAL_DATA(padapter);
2132         struct dm_priv *pdmpriv = &pHalData->dmpriv;
2133         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2134         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
2135
2136         DBG_871X("%s(): mac_id =%d rssi_level =%d\n", __func__, mac_id, rssi_level);
2137
2138         if (mac_id >= NUM_STA) /* CAM_SIZE */
2139                 return;
2140
2141         psta = pmlmeinfo->FW_sta_info[mac_id].psta;
2142         if (!psta)
2143                 return;
2144
2145         shortGIrate = query_ra_short_GI(psta);
2146
2147         mask = psta->ra_mask;
2148
2149         rate_bitmap = 0xffffffff;
2150         rate_bitmap = ODM_Get_Rate_Bitmap(&pHalData->odmpriv, mac_id, mask, rssi_level);
2151         DBG_871X("%s => mac_id:%d, networkType:0x%02x, mask:0x%08x\n\t ==> rssi_level:%d, rate_bitmap:0x%08x\n",
2152                         __func__, mac_id, psta->wireless_mode, mask, rssi_level, rate_bitmap);
2153
2154         mask &= rate_bitmap;
2155
2156         rate_bitmap = hal_btcoex_GetRaMask(padapter);
2157         mask &= ~rate_bitmap;
2158
2159 #ifdef CONFIG_CMCC_TEST
2160         if (pmlmeext->cur_wireless_mode & WIRELESS_11G) {
2161                 if (mac_id == 0) {
2162                         DBG_871X("CMCC_BT update raid entry, mask = 0x%x\n", mask);
2163                         mask &= 0xffffff00; /* disable CCK & <24M OFDM rate for 11G mode for CMCC */
2164                         DBG_871X("CMCC_BT update raid entry, mask = 0x%x\n", mask);
2165                 }
2166         }
2167 #endif
2168
2169         if (pHalData->fw_ractrl) {
2170                 rtl8723b_set_FwMacIdConfig_cmd(padapter, mac_id, psta->raid, psta->bw_mode, shortGIrate, mask);
2171         }
2172
2173         /* set correct initial date rate for each mac_id */
2174         pdmpriv->INIDATA_RATE[mac_id] = psta->init_rate;
2175         DBG_871X("%s(): mac_id =%d raid = 0x%x bw =%d mask = 0x%x init_rate = 0x%x\n", __func__, mac_id, psta->raid, psta->bw_mode, mask, psta->init_rate);
2176 }
2177
2178
2179 void rtl8723b_set_hal_ops(struct hal_ops *pHalFunc)
2180 {
2181         pHalFunc->free_hal_data = &rtl8723b_free_hal_data;
2182
2183         pHalFunc->dm_init = &rtl8723b_init_dm_priv;
2184
2185         pHalFunc->read_chip_version = &rtl8723b_read_chip_version;
2186
2187         pHalFunc->UpdateRAMaskHandler = &UpdateHalRAMask8723B;
2188
2189         pHalFunc->set_bwmode_handler = &PHY_SetBWMode8723B;
2190         pHalFunc->set_channel_handler = &PHY_SwChnl8723B;
2191         pHalFunc->set_chnl_bw_handler = &PHY_SetSwChnlBWMode8723B;
2192
2193         pHalFunc->set_tx_power_level_handler = &PHY_SetTxPowerLevel8723B;
2194         pHalFunc->get_tx_power_level_handler = &PHY_GetTxPowerLevel8723B;
2195
2196         pHalFunc->hal_dm_watchdog = &rtl8723b_HalDmWatchDog;
2197         pHalFunc->hal_dm_watchdog_in_lps = &rtl8723b_HalDmWatchDog_in_LPS;
2198
2199
2200         pHalFunc->SetBeaconRelatedRegistersHandler = &rtl8723b_SetBeaconRelatedRegisters;
2201
2202         pHalFunc->Add_RateATid = &rtl8723b_Add_RateATid;
2203
2204         pHalFunc->run_thread = &rtl8723b_start_thread;
2205         pHalFunc->cancel_thread = &rtl8723b_stop_thread;
2206
2207         pHalFunc->read_bbreg = &PHY_QueryBBReg_8723B;
2208         pHalFunc->write_bbreg = &PHY_SetBBReg_8723B;
2209         pHalFunc->read_rfreg = &PHY_QueryRFReg_8723B;
2210         pHalFunc->write_rfreg = &PHY_SetRFReg_8723B;
2211
2212         /*  Efuse related function */
2213         pHalFunc->BTEfusePowerSwitch = &Hal_BT_EfusePowerSwitch;
2214         pHalFunc->EfusePowerSwitch = &Hal_EfusePowerSwitch;
2215         pHalFunc->ReadEFuse = &Hal_ReadEFuse;
2216         pHalFunc->EFUSEGetEfuseDefinition = &Hal_GetEfuseDefinition;
2217         pHalFunc->EfuseGetCurrentSize = &Hal_EfuseGetCurrentSize;
2218         pHalFunc->Efuse_PgPacketRead = &Hal_EfusePgPacketRead;
2219         pHalFunc->Efuse_PgPacketWrite = &Hal_EfusePgPacketWrite;
2220         pHalFunc->Efuse_WordEnableDataWrite = &Hal_EfuseWordEnableDataWrite;
2221         pHalFunc->Efuse_PgPacketWrite_BT = &Hal_EfusePgPacketWrite_BT;
2222
2223         pHalFunc->GetHalODMVarHandler = &rtl8723b_GetHalODMVar;
2224         pHalFunc->SetHalODMVarHandler = &rtl8723b_SetHalODMVar;
2225
2226         pHalFunc->xmit_thread_handler = &hal_xmit_handler;
2227         pHalFunc->hal_notch_filter = &hal_notch_filter_8723b;
2228
2229         pHalFunc->c2h_handler = c2h_handler_8723b;
2230         pHalFunc->c2h_id_filter_ccx = c2h_id_filter_ccx_8723b;
2231
2232         pHalFunc->fill_h2c_cmd = &FillH2CCmd8723B;
2233 }
2234
2235 void rtl8723b_InitAntenna_Selection(struct adapter *padapter)
2236 {
2237         u8 val;
2238
2239         val = rtw_read8(padapter, REG_LEDCFG2);
2240         /*  Let 8051 take control antenna setting */
2241         val |= BIT(7); /*  DPDT_SEL_EN, 0x4C[23] */
2242         rtw_write8(padapter, REG_LEDCFG2, val);
2243 }
2244
2245 void rtl8723b_init_default_value(struct adapter *padapter)
2246 {
2247         struct hal_com_data *pHalData;
2248         struct dm_priv *pdmpriv;
2249         u8 i;
2250
2251
2252         pHalData = GET_HAL_DATA(padapter);
2253         pdmpriv = &pHalData->dmpriv;
2254
2255         padapter->registrypriv.wireless_mode = WIRELESS_11BG_24N;
2256
2257         /*  init default value */
2258         pHalData->fw_ractrl = false;
2259         pHalData->bIQKInitialized = false;
2260         if (!adapter_to_pwrctl(padapter)->bkeepfwalive)
2261                 pHalData->LastHMEBoxNum = 0;
2262
2263         pHalData->bIQKInitialized = false;
2264
2265         /*  init dm default value */
2266         pdmpriv->TM_Trigger = 0;/* for IQK */
2267 /*      pdmpriv->binitialized = false; */
2268 /*      pdmpriv->prv_traffic_idx = 3; */
2269 /*      pdmpriv->initialize = 0; */
2270
2271         pdmpriv->ThermalValue_HP_index = 0;
2272         for (i = 0; i < HP_THERMAL_NUM; i++)
2273                 pdmpriv->ThermalValue_HP[i] = 0;
2274
2275         /*  init Efuse variables */
2276         pHalData->EfuseUsedBytes = 0;
2277         pHalData->EfuseUsedPercentage = 0;
2278 #ifdef HAL_EFUSE_MEMORY
2279         pHalData->EfuseHal.fakeEfuseBank = 0;
2280         pHalData->EfuseHal.fakeEfuseUsedBytes = 0;
2281         memset(pHalData->EfuseHal.fakeEfuseContent, 0xFF, EFUSE_MAX_HW_SIZE);
2282         memset(pHalData->EfuseHal.fakeEfuseInitMap, 0xFF, EFUSE_MAX_MAP_LEN);
2283         memset(pHalData->EfuseHal.fakeEfuseModifiedMap, 0xFF, EFUSE_MAX_MAP_LEN);
2284         pHalData->EfuseHal.BTEfuseUsedBytes = 0;
2285         pHalData->EfuseHal.BTEfuseUsedPercentage = 0;
2286         memset(pHalData->EfuseHal.BTEfuseContent, 0xFF, EFUSE_MAX_BT_BANK*EFUSE_MAX_HW_SIZE);
2287         memset(pHalData->EfuseHal.BTEfuseInitMap, 0xFF, EFUSE_BT_MAX_MAP_LEN);
2288         memset(pHalData->EfuseHal.BTEfuseModifiedMap, 0xFF, EFUSE_BT_MAX_MAP_LEN);
2289         pHalData->EfuseHal.fakeBTEfuseUsedBytes = 0;
2290         memset(pHalData->EfuseHal.fakeBTEfuseContent, 0xFF, EFUSE_MAX_BT_BANK*EFUSE_MAX_HW_SIZE);
2291         memset(pHalData->EfuseHal.fakeBTEfuseInitMap, 0xFF, EFUSE_BT_MAX_MAP_LEN);
2292         memset(pHalData->EfuseHal.fakeBTEfuseModifiedMap, 0xFF, EFUSE_BT_MAX_MAP_LEN);
2293 #endif
2294 }
2295
2296 u8 GetEEPROMSize8723B(struct adapter *padapter)
2297 {
2298         u8 size = 0;
2299         u32 cr;
2300
2301         cr = rtw_read16(padapter, REG_9346CR);
2302         /*  6: EEPROM used is 93C46, 4: boot from E-Fuse. */
2303         size = (cr & BOOT_FROM_EEPROM) ? 6 : 4;
2304
2305         MSG_8192C("EEPROM type is %s\n", size == 4 ? "E-FUSE" : "93C46");
2306
2307         return size;
2308 }
2309
2310 /*  */
2311 /*  */
2312 /*  LLT R/W/Init function */
2313 /*  */
2314 /*  */
2315 s32 rtl8723b_InitLLTTable(struct adapter *padapter)
2316 {
2317         unsigned long start, passing_time;
2318         u32 val32;
2319         s32 ret;
2320
2321
2322         ret = _FAIL;
2323
2324         val32 = rtw_read32(padapter, REG_AUTO_LLT);
2325         val32 |= BIT_AUTO_INIT_LLT;
2326         rtw_write32(padapter, REG_AUTO_LLT, val32);
2327
2328         start = jiffies;
2329
2330         do {
2331                 val32 = rtw_read32(padapter, REG_AUTO_LLT);
2332                 if (!(val32 & BIT_AUTO_INIT_LLT)) {
2333                         ret = _SUCCESS;
2334                         break;
2335                 }
2336
2337                 passing_time = jiffies_to_msecs(jiffies - start);
2338                 if (passing_time > 1000) {
2339                         DBG_8192C(
2340                                 "%s: FAIL!! REG_AUTO_LLT(0x%X) =%08x\n",
2341                                 __func__,
2342                                 REG_AUTO_LLT,
2343                                 val32
2344                         );
2345                         break;
2346                 }
2347
2348                 msleep(1);
2349         } while (1);
2350
2351         return ret;
2352 }
2353
2354 static bool Hal_GetChnlGroup8723B(u8 Channel, u8 *pGroup)
2355 {
2356         bool bIn24G = true;
2357
2358         if (Channel <= 14) {
2359                 bIn24G = true;
2360
2361                 if (1  <= Channel && Channel <= 2)
2362                         *pGroup = 0;
2363                 else if (3  <= Channel && Channel <= 5)
2364                         *pGroup = 1;
2365                 else if (6  <= Channel && Channel <= 8)
2366                         *pGroup = 2;
2367                 else if (9  <= Channel && Channel <= 11)
2368                         *pGroup = 3;
2369                 else if (12 <= Channel && Channel <= 14)
2370                         *pGroup = 4;
2371                 else {
2372                         RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("==>Hal_GetChnlGroup8723B in 2.4 G, but Channel %d in Group not found\n", Channel));
2373                 }
2374         } else {
2375                 bIn24G = false;
2376
2377                 if (36   <= Channel && Channel <=  42)
2378                         *pGroup = 0;
2379                 else if (44   <= Channel && Channel <=  48)
2380                         *pGroup = 1;
2381                 else if (50   <= Channel && Channel <=  58)
2382                         *pGroup = 2;
2383                 else if (60   <= Channel && Channel <=  64)
2384                         *pGroup = 3;
2385                 else if (100  <= Channel && Channel <= 106)
2386                         *pGroup = 4;
2387                 else if (108  <= Channel && Channel <= 114)
2388                         *pGroup = 5;
2389                 else if (116  <= Channel && Channel <= 122)
2390                         *pGroup = 6;
2391                 else if (124  <= Channel && Channel <= 130)
2392                         *pGroup = 7;
2393                 else if (132  <= Channel && Channel <= 138)
2394                         *pGroup = 8;
2395                 else if (140  <= Channel && Channel <= 144)
2396                         *pGroup = 9;
2397                 else if (149  <= Channel && Channel <= 155)
2398                         *pGroup = 10;
2399                 else if (157  <= Channel && Channel <= 161)
2400                         *pGroup = 11;
2401                 else if (165  <= Channel && Channel <= 171)
2402                         *pGroup = 12;
2403                 else if (173  <= Channel && Channel <= 177)
2404                         *pGroup = 13;
2405                 else {
2406                         RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("==>Hal_GetChnlGroup8723B in 5G, but Channel %d in Group not found\n", Channel));
2407                 }
2408
2409         }
2410         RT_TRACE(
2411                 _module_hci_hal_init_c_,
2412                 _drv_info_,
2413                 (
2414                         "<==Hal_GetChnlGroup8723B,  (%s) Channel = %d, Group =%d,\n",
2415                         bIn24G ? "2.4G" : "5G",
2416                         Channel,
2417                         *pGroup
2418                 )
2419         );
2420         return bIn24G;
2421 }
2422
2423 void Hal_InitPGData(struct adapter *padapter, u8 *PROMContent)
2424 {
2425         struct eeprom_priv *pEEPROM = GET_EEPROM_EFUSE_PRIV(padapter);
2426
2427         if (!pEEPROM->bautoload_fail_flag) { /*  autoload OK. */
2428                 if (!pEEPROM->EepromOrEfuse) {
2429                         /*  Read EFUSE real map to shadow. */
2430                         EFUSE_ShadowMapUpdate(padapter, EFUSE_WIFI, false);
2431                         memcpy((void *)PROMContent, (void *)pEEPROM->efuse_eeprom_data, HWSET_MAX_SIZE_8723B);
2432                 }
2433         } else {/* autoload fail */
2434                 RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("AutoLoad Fail reported from CR9346!!\n"));
2435                 if (!pEEPROM->EepromOrEfuse)
2436                         EFUSE_ShadowMapUpdate(padapter, EFUSE_WIFI, false);
2437                 memcpy((void *)PROMContent, (void *)pEEPROM->efuse_eeprom_data, HWSET_MAX_SIZE_8723B);
2438         }
2439 }
2440
2441 void Hal_EfuseParseIDCode(struct adapter *padapter, u8 *hwinfo)
2442 {
2443         struct eeprom_priv *pEEPROM = GET_EEPROM_EFUSE_PRIV(padapter);
2444 /*      struct hal_com_data     *pHalData = GET_HAL_DATA(padapter); */
2445         u16 EEPROMId;
2446
2447
2448         /*  Checl 0x8129 again for making sure autoload status!! */
2449         EEPROMId = le16_to_cpu(*((__le16 *)hwinfo));
2450         if (EEPROMId != RTL_EEPROM_ID) {
2451                 DBG_8192C("EEPROM ID(%#x) is invalid!!\n", EEPROMId);
2452                 pEEPROM->bautoload_fail_flag = true;
2453         } else
2454                 pEEPROM->bautoload_fail_flag = false;
2455
2456         RT_TRACE(_module_hal_init_c_, _drv_notice_, ("EEPROM ID = 0x%04x\n", EEPROMId));
2457 }
2458
2459 static void Hal_ReadPowerValueFromPROM_8723B(
2460         struct adapter *Adapter,
2461         struct TxPowerInfo24G *pwrInfo24G,
2462         u8 *PROMContent,
2463         bool AutoLoadFail
2464 )
2465 {
2466         struct hal_com_data *pHalData = GET_HAL_DATA(Adapter);
2467         u32 rfPath, eeAddr = EEPROM_TX_PWR_INX_8723B, group, TxCount = 0;
2468
2469         memset(pwrInfo24G, 0, sizeof(struct TxPowerInfo24G));
2470
2471         if (0xFF == PROMContent[eeAddr+1])
2472                 AutoLoadFail = true;
2473
2474         if (AutoLoadFail) {
2475                 DBG_871X("%s(): Use Default value!\n", __func__);
2476                 for (rfPath = 0; rfPath < MAX_RF_PATH; rfPath++) {
2477                         /* 2.4G default value */
2478                         for (group = 0; group < MAX_CHNL_GROUP_24G; group++) {
2479                                 pwrInfo24G->IndexCCK_Base[rfPath][group] = EEPROM_DEFAULT_24G_INDEX;
2480                                 pwrInfo24G->IndexBW40_Base[rfPath][group] = EEPROM_DEFAULT_24G_INDEX;
2481                         }
2482
2483                         for (TxCount = 0; TxCount < MAX_TX_COUNT; TxCount++) {
2484                                 if (TxCount == 0) {
2485                                         pwrInfo24G->BW20_Diff[rfPath][0] = EEPROM_DEFAULT_24G_HT20_DIFF;
2486                                         pwrInfo24G->OFDM_Diff[rfPath][0] = EEPROM_DEFAULT_24G_OFDM_DIFF;
2487                                 } else {
2488                                         pwrInfo24G->BW20_Diff[rfPath][TxCount] = EEPROM_DEFAULT_DIFF;
2489                                         pwrInfo24G->BW40_Diff[rfPath][TxCount] = EEPROM_DEFAULT_DIFF;
2490                                         pwrInfo24G->CCK_Diff[rfPath][TxCount] = EEPROM_DEFAULT_DIFF;
2491                                         pwrInfo24G->OFDM_Diff[rfPath][TxCount] = EEPROM_DEFAULT_DIFF;
2492                                 }
2493                         }
2494                 }
2495
2496                 return;
2497         }
2498
2499         pHalData->bTXPowerDataReadFromEEPORM = true;            /* YJ, move, 120316 */
2500
2501         for (rfPath = 0; rfPath < MAX_RF_PATH; rfPath++) {
2502                 /* 2 2.4G default value */
2503                 for (group = 0; group < MAX_CHNL_GROUP_24G; group++) {
2504                         pwrInfo24G->IndexCCK_Base[rfPath][group] =      PROMContent[eeAddr++];
2505                         if (pwrInfo24G->IndexCCK_Base[rfPath][group] == 0xFF)
2506                                 pwrInfo24G->IndexCCK_Base[rfPath][group] = EEPROM_DEFAULT_24G_INDEX;
2507                 }
2508
2509                 for (group = 0; group < MAX_CHNL_GROUP_24G-1; group++) {
2510                         pwrInfo24G->IndexBW40_Base[rfPath][group] =     PROMContent[eeAddr++];
2511                         if (pwrInfo24G->IndexBW40_Base[rfPath][group] == 0xFF)
2512                                 pwrInfo24G->IndexBW40_Base[rfPath][group] =     EEPROM_DEFAULT_24G_INDEX;
2513                 }
2514
2515                 for (TxCount = 0; TxCount < MAX_TX_COUNT; TxCount++) {
2516                         if (TxCount == 0) {
2517                                 pwrInfo24G->BW40_Diff[rfPath][TxCount] = 0;
2518                                 if (PROMContent[eeAddr] == 0xFF)
2519                                         pwrInfo24G->BW20_Diff[rfPath][TxCount] =        EEPROM_DEFAULT_24G_HT20_DIFF;
2520                                 else {
2521                                         pwrInfo24G->BW20_Diff[rfPath][TxCount] =        (PROMContent[eeAddr]&0xf0)>>4;
2522                                         if (pwrInfo24G->BW20_Diff[rfPath][TxCount] & BIT3)              /* 4bit sign number to 8 bit sign number */
2523                                                 pwrInfo24G->BW20_Diff[rfPath][TxCount] |= 0xF0;
2524                                 }
2525
2526                                 if (PROMContent[eeAddr] == 0xFF)
2527                                         pwrInfo24G->OFDM_Diff[rfPath][TxCount] = EEPROM_DEFAULT_24G_OFDM_DIFF;
2528                                 else {
2529                                         pwrInfo24G->OFDM_Diff[rfPath][TxCount] = (PROMContent[eeAddr]&0x0f);
2530                                         if (pwrInfo24G->OFDM_Diff[rfPath][TxCount] & BIT3)              /* 4bit sign number to 8 bit sign number */
2531                                                 pwrInfo24G->OFDM_Diff[rfPath][TxCount] |= 0xF0;
2532                                 }
2533                                 pwrInfo24G->CCK_Diff[rfPath][TxCount] = 0;
2534                                 eeAddr++;
2535                         } else {
2536                                 if (PROMContent[eeAddr] == 0xFF)
2537                                         pwrInfo24G->BW40_Diff[rfPath][TxCount] = EEPROM_DEFAULT_DIFF;
2538                                 else {
2539                                         pwrInfo24G->BW40_Diff[rfPath][TxCount] = (PROMContent[eeAddr]&0xf0)>>4;
2540                                         if (pwrInfo24G->BW40_Diff[rfPath][TxCount] & BIT3)              /* 4bit sign number to 8 bit sign number */
2541                                                 pwrInfo24G->BW40_Diff[rfPath][TxCount] |= 0xF0;
2542                                 }
2543
2544                                 if (PROMContent[eeAddr] == 0xFF)
2545                                         pwrInfo24G->BW20_Diff[rfPath][TxCount] = EEPROM_DEFAULT_DIFF;
2546                                 else {
2547                                         pwrInfo24G->BW20_Diff[rfPath][TxCount] = (PROMContent[eeAddr]&0x0f);
2548                                         if (pwrInfo24G->BW20_Diff[rfPath][TxCount] & BIT3)              /* 4bit sign number to 8 bit sign number */
2549                                                 pwrInfo24G->BW20_Diff[rfPath][TxCount] |= 0xF0;
2550                                 }
2551                                 eeAddr++;
2552
2553                                 if (PROMContent[eeAddr] == 0xFF)
2554                                         pwrInfo24G->OFDM_Diff[rfPath][TxCount] = EEPROM_DEFAULT_DIFF;
2555                                 else {
2556                                         pwrInfo24G->OFDM_Diff[rfPath][TxCount] = (PROMContent[eeAddr]&0xf0)>>4;
2557                                         if (pwrInfo24G->OFDM_Diff[rfPath][TxCount] & BIT3)              /* 4bit sign number to 8 bit sign number */
2558                                                 pwrInfo24G->OFDM_Diff[rfPath][TxCount] |= 0xF0;
2559                                 }
2560
2561                                 if (PROMContent[eeAddr] == 0xFF)
2562                                         pwrInfo24G->CCK_Diff[rfPath][TxCount] = EEPROM_DEFAULT_DIFF;
2563                                 else {
2564                                         pwrInfo24G->CCK_Diff[rfPath][TxCount] = (PROMContent[eeAddr]&0x0f);
2565                                         if (pwrInfo24G->CCK_Diff[rfPath][TxCount] & BIT3)               /* 4bit sign number to 8 bit sign number */
2566                                                 pwrInfo24G->CCK_Diff[rfPath][TxCount] |= 0xF0;
2567                                 }
2568                                 eeAddr++;
2569                         }
2570                 }
2571         }
2572 }
2573
2574
2575 void Hal_EfuseParseTxPowerInfo_8723B(
2576         struct adapter *padapter, u8 *PROMContent, bool AutoLoadFail
2577 )
2578 {
2579         struct hal_com_data     *pHalData = GET_HAL_DATA(padapter);
2580         struct TxPowerInfo24G   pwrInfo24G;
2581         u8      rfPath, ch, TxCount = 1;
2582
2583         Hal_ReadPowerValueFromPROM_8723B(padapter, &pwrInfo24G, PROMContent, AutoLoadFail);
2584         for (rfPath = 0 ; rfPath < MAX_RF_PATH ; rfPath++) {
2585                 for (ch = 0 ; ch < CHANNEL_MAX_NUMBER; ch++) {
2586                         u8 group = 0;
2587
2588                         Hal_GetChnlGroup8723B(ch+1, &group);
2589
2590                         if (ch == 14-1) {
2591                                 pHalData->Index24G_CCK_Base[rfPath][ch] = pwrInfo24G.IndexCCK_Base[rfPath][5];
2592                                 pHalData->Index24G_BW40_Base[rfPath][ch] = pwrInfo24G.IndexBW40_Base[rfPath][group];
2593                         } else {
2594                                 pHalData->Index24G_CCK_Base[rfPath][ch] = pwrInfo24G.IndexCCK_Base[rfPath][group];
2595                                 pHalData->Index24G_BW40_Base[rfPath][ch] = pwrInfo24G.IndexBW40_Base[rfPath][group];
2596                         }
2597 #ifdef DEBUG
2598                         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("======= Path %d, ChannelIndex %d, Group %d =======\n", rfPath, ch, group));
2599                         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("Index24G_CCK_Base[%d][%d] = 0x%x\n", rfPath, ch, pHalData->Index24G_CCK_Base[rfPath][ch]));
2600                         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("Index24G_BW40_Base[%d][%d] = 0x%x\n", rfPath, ch, pHalData->Index24G_BW40_Base[rfPath][ch]));
2601 #endif
2602                 }
2603
2604                 for (TxCount = 0; TxCount < MAX_TX_COUNT; TxCount++) {
2605                         pHalData->CCK_24G_Diff[rfPath][TxCount] = pwrInfo24G.CCK_Diff[rfPath][TxCount];
2606                         pHalData->OFDM_24G_Diff[rfPath][TxCount] = pwrInfo24G.OFDM_Diff[rfPath][TxCount];
2607                         pHalData->BW20_24G_Diff[rfPath][TxCount] = pwrInfo24G.BW20_Diff[rfPath][TxCount];
2608                         pHalData->BW40_24G_Diff[rfPath][TxCount] = pwrInfo24G.BW40_Diff[rfPath][TxCount];
2609
2610 #ifdef DEBUG
2611                         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("--------------------------------------- 2.4G ---------------------------------------\n"));
2612                         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("CCK_24G_Diff[%d][%d]= %d\n", rfPath, TxCount, pHalData->CCK_24G_Diff[rfPath][TxCount]));
2613                         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("OFDM_24G_Diff[%d][%d]= %d\n", rfPath, TxCount, pHalData->OFDM_24G_Diff[rfPath][TxCount]));
2614                         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("BW20_24G_Diff[%d][%d]= %d\n", rfPath, TxCount, pHalData->BW20_24G_Diff[rfPath][TxCount]));
2615                         RT_TRACE(_module_hci_hal_init_c_, _drv_info_, ("BW40_24G_Diff[%d][%d]= %d\n", rfPath, TxCount, pHalData->BW40_24G_Diff[rfPath][TxCount]));
2616 #endif
2617                 }
2618         }
2619
2620         /*  2010/10/19 MH Add Regulator recognize for CU. */
2621         if (!AutoLoadFail) {
2622                 pHalData->EEPROMRegulatory = (PROMContent[EEPROM_RF_BOARD_OPTION_8723B]&0x7);   /* bit0~2 */
2623                 if (PROMContent[EEPROM_RF_BOARD_OPTION_8723B] == 0xFF)
2624                         pHalData->EEPROMRegulatory = (EEPROM_DEFAULT_BOARD_OPTION&0x7); /* bit0~2 */
2625         } else
2626                 pHalData->EEPROMRegulatory = 0;
2627
2628         RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("EEPROMRegulatory = 0x%x\n", pHalData->EEPROMRegulatory));
2629 }
2630
2631 void Hal_EfuseParseBTCoexistInfo_8723B(
2632         struct adapter *padapter, u8 *hwinfo, bool AutoLoadFail
2633 )
2634 {
2635         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
2636         u8 tempval;
2637         u32 tmpu4;
2638
2639         if (!AutoLoadFail) {
2640                 tmpu4 = rtw_read32(padapter, REG_MULTI_FUNC_CTRL);
2641                 if (tmpu4 & BT_FUNC_EN)
2642                         pHalData->EEPROMBluetoothCoexist = true;
2643                 else
2644                         pHalData->EEPROMBluetoothCoexist = false;
2645
2646                 pHalData->EEPROMBluetoothType = BT_RTL8723B;
2647
2648                 tempval = hwinfo[EEPROM_RF_BT_SETTING_8723B];
2649                 if (tempval != 0xFF) {
2650                         pHalData->EEPROMBluetoothAntNum = tempval & BIT(0);
2651                         /*  EFUSE_0xC3[6] == 0, S1(Main)-ODM_RF_PATH_A; */
2652                         /*  EFUSE_0xC3[6] == 1, S0(Aux)-ODM_RF_PATH_B */
2653                         pHalData->ant_path = (tempval & BIT(6))?ODM_RF_PATH_B:ODM_RF_PATH_A;
2654                 } else {
2655                         pHalData->EEPROMBluetoothAntNum = Ant_x1;
2656                         if (pHalData->PackageType == PACKAGE_QFN68)
2657                                 pHalData->ant_path = ODM_RF_PATH_B;
2658                         else
2659                                 pHalData->ant_path = ODM_RF_PATH_A;
2660                 }
2661         } else {
2662                 pHalData->EEPROMBluetoothCoexist = false;
2663                 pHalData->EEPROMBluetoothType = BT_RTL8723B;
2664                 pHalData->EEPROMBluetoothAntNum = Ant_x1;
2665                 pHalData->ant_path = ODM_RF_PATH_A;
2666         }
2667
2668         if (padapter->registrypriv.ant_num > 0) {
2669                 DBG_8192C(
2670                         "%s: Apply driver defined antenna number(%d) to replace origin(%d)\n",
2671                         __func__,
2672                         padapter->registrypriv.ant_num,
2673                         pHalData->EEPROMBluetoothAntNum == Ant_x2 ? 2 : 1
2674                 );
2675
2676                 switch (padapter->registrypriv.ant_num) {
2677                 case 1:
2678                         pHalData->EEPROMBluetoothAntNum = Ant_x1;
2679                         break;
2680                 case 2:
2681                         pHalData->EEPROMBluetoothAntNum = Ant_x2;
2682                         break;
2683                 default:
2684                         DBG_8192C(
2685                                 "%s: Discard invalid driver defined antenna number(%d)!\n",
2686                                 __func__,
2687                                 padapter->registrypriv.ant_num
2688                         );
2689                         break;
2690                 }
2691         }
2692
2693         hal_btcoex_SetBTCoexist(padapter, pHalData->EEPROMBluetoothCoexist);
2694         hal_btcoex_SetChipType(padapter, pHalData->EEPROMBluetoothType);
2695         hal_btcoex_SetPgAntNum(padapter, pHalData->EEPROMBluetoothAntNum == Ant_x2 ? 2 : 1);
2696         if (pHalData->EEPROMBluetoothAntNum == Ant_x1)
2697                 hal_btcoex_SetSingleAntPath(padapter, pHalData->ant_path);
2698
2699         DBG_8192C(
2700                 "%s: %s BT-coex, ant_num =%d\n",
2701                 __func__,
2702                 pHalData->EEPROMBluetoothCoexist == true ? "Enable" : "Disable",
2703                 pHalData->EEPROMBluetoothAntNum == Ant_x2 ? 2 : 1
2704         );
2705 }
2706
2707 void Hal_EfuseParseEEPROMVer_8723B(
2708         struct adapter *padapter, u8 *hwinfo, bool AutoLoadFail
2709 )
2710 {
2711         struct hal_com_data     *pHalData = GET_HAL_DATA(padapter);
2712
2713 /*      RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("%s(): AutoLoadFail = %d\n", __func__, AutoLoadFail)); */
2714         if (!AutoLoadFail)
2715                 pHalData->EEPROMVersion = hwinfo[EEPROM_VERSION_8723B];
2716         else
2717                 pHalData->EEPROMVersion = 1;
2718         RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("Hal_EfuseParseEEPROMVer(), EEVer = %d\n",
2719                 pHalData->EEPROMVersion));
2720 }
2721
2722
2723
2724 void Hal_EfuseParsePackageType_8723B(
2725         struct adapter *padapter, u8 *hwinfo, bool AutoLoadFail
2726 )
2727 {
2728         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
2729         u8 package;
2730         u8 efuseContent;
2731
2732         Efuse_PowerSwitch(padapter, false, true);
2733         efuse_OneByteRead(padapter, 0x1FB, &efuseContent, false);
2734         DBG_871X("%s phy efuse read 0x1FB =%x\n", __func__, efuseContent);
2735         Efuse_PowerSwitch(padapter, false, false);
2736
2737         package = efuseContent & 0x7;
2738         switch (package) {
2739         case 0x4:
2740                 pHalData->PackageType = PACKAGE_TFBGA79;
2741                 break;
2742         case 0x5:
2743                 pHalData->PackageType = PACKAGE_TFBGA90;
2744                 break;
2745         case 0x6:
2746                 pHalData->PackageType = PACKAGE_QFN68;
2747                 break;
2748         case 0x7:
2749                 pHalData->PackageType = PACKAGE_TFBGA80;
2750                 break;
2751
2752         default:
2753                 pHalData->PackageType = PACKAGE_DEFAULT;
2754                 break;
2755         }
2756
2757         DBG_871X("PackageType = 0x%X\n", pHalData->PackageType);
2758 }
2759
2760
2761 void Hal_EfuseParseVoltage_8723B(
2762         struct adapter *padapter, u8 *hwinfo, bool AutoLoadFail
2763 )
2764 {
2765         struct eeprom_priv *pEEPROM = GET_EEPROM_EFUSE_PRIV(padapter);
2766
2767         /* memcpy(pEEPROM->adjuseVoltageVal, &hwinfo[EEPROM_Voltage_ADDR_8723B], 1); */
2768         DBG_871X("%s hwinfo[EEPROM_Voltage_ADDR_8723B] =%02x\n", __func__, hwinfo[EEPROM_Voltage_ADDR_8723B]);
2769         pEEPROM->adjuseVoltageVal = (hwinfo[EEPROM_Voltage_ADDR_8723B] & 0xf0) >> 4;
2770         DBG_871X("%s pEEPROM->adjuseVoltageVal =%x\n", __func__, pEEPROM->adjuseVoltageVal);
2771 }
2772
2773 void Hal_EfuseParseChnlPlan_8723B(
2774         struct adapter *padapter, u8 *hwinfo, bool AutoLoadFail
2775 )
2776 {
2777         padapter->mlmepriv.ChannelPlan = hal_com_config_channel_plan(
2778                 padapter,
2779                 hwinfo ? hwinfo[EEPROM_ChannelPlan_8723B] : 0xFF,
2780                 padapter->registrypriv.channel_plan,
2781                 RT_CHANNEL_DOMAIN_WORLD_NULL,
2782                 AutoLoadFail
2783         );
2784
2785         Hal_ChannelPlanToRegulation(padapter, padapter->mlmepriv.ChannelPlan);
2786
2787         RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("EEPROM ChannelPlan = 0x%02x\n", padapter->mlmepriv.ChannelPlan));
2788 }
2789
2790 void Hal_EfuseParseCustomerID_8723B(
2791         struct adapter *padapter, u8 *hwinfo, bool AutoLoadFail
2792 )
2793 {
2794         struct hal_com_data     *pHalData = GET_HAL_DATA(padapter);
2795
2796 /*      RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("%s(): AutoLoadFail = %d\n", __func__, AutoLoadFail)); */
2797         if (!AutoLoadFail)
2798                 pHalData->EEPROMCustomerID = hwinfo[EEPROM_CustomID_8723B];
2799         else
2800                 pHalData->EEPROMCustomerID = 0;
2801
2802         RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("EEPROM Customer ID: 0x%2x\n", pHalData->EEPROMCustomerID));
2803 }
2804
2805 void Hal_EfuseParseAntennaDiversity_8723B(
2806         struct adapter *padapter,
2807         u8 *hwinfo,
2808         bool AutoLoadFail
2809 )
2810 {
2811 }
2812
2813 void Hal_EfuseParseXtal_8723B(
2814         struct adapter *padapter, u8 *hwinfo, bool AutoLoadFail
2815 )
2816 {
2817         struct hal_com_data     *pHalData = GET_HAL_DATA(padapter);
2818
2819 /*      RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("%s(): AutoLoadFail = %d\n", __func__, AutoLoadFail)); */
2820         if (!AutoLoadFail) {
2821                 pHalData->CrystalCap = hwinfo[EEPROM_XTAL_8723B];
2822                 if (pHalData->CrystalCap == 0xFF)
2823                         pHalData->CrystalCap = EEPROM_Default_CrystalCap_8723B;    /* what value should 8812 set? */
2824         } else
2825                 pHalData->CrystalCap = EEPROM_Default_CrystalCap_8723B;
2826
2827         RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("EEPROM CrystalCap: 0x%2x\n", pHalData->CrystalCap));
2828 }
2829
2830
2831 void Hal_EfuseParseThermalMeter_8723B(
2832         struct adapter *padapter, u8 *PROMContent, u8 AutoLoadFail
2833 )
2834 {
2835         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
2836
2837 /*      RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("%s(): AutoLoadFail = %d\n", __func__, AutoLoadFail)); */
2838         /*  */
2839         /*  ThermalMeter from EEPROM */
2840         /*  */
2841         if (!AutoLoadFail)
2842                 pHalData->EEPROMThermalMeter = PROMContent[EEPROM_THERMAL_METER_8723B];
2843         else
2844                 pHalData->EEPROMThermalMeter = EEPROM_Default_ThermalMeter_8723B;
2845
2846         if ((pHalData->EEPROMThermalMeter == 0xff) || AutoLoadFail) {
2847                 pHalData->bAPKThermalMeterIgnore = true;
2848                 pHalData->EEPROMThermalMeter = EEPROM_Default_ThermalMeter_8723B;
2849         }
2850
2851         RT_TRACE(_module_hci_hal_init_c_, _drv_notice_, ("EEPROM ThermalMeter = 0x%x\n", pHalData->EEPROMThermalMeter));
2852 }
2853
2854
2855 void Hal_ReadRFGainOffset(
2856         struct adapter *Adapter, u8 *PROMContent, bool AutoloadFail
2857 )
2858 {
2859         /*  */
2860         /*  BB_RF Gain Offset from EEPROM */
2861         /*  */
2862
2863         if (!AutoloadFail) {
2864                 Adapter->eeprompriv.EEPROMRFGainOffset = PROMContent[EEPROM_RF_GAIN_OFFSET];
2865                 DBG_871X("AutoloadFail =%x,\n", AutoloadFail);
2866                 Adapter->eeprompriv.EEPROMRFGainVal = EFUSE_Read1Byte(Adapter, EEPROM_RF_GAIN_VAL);
2867                 DBG_871X("Adapter->eeprompriv.EEPROMRFGainVal =%x\n", Adapter->eeprompriv.EEPROMRFGainVal);
2868         } else {
2869                 Adapter->eeprompriv.EEPROMRFGainOffset = 0;
2870                 Adapter->eeprompriv.EEPROMRFGainVal = 0xFF;
2871                 DBG_871X("else AutoloadFail =%x,\n", AutoloadFail);
2872         }
2873         DBG_871X("EEPRORFGainOffset = 0x%02x\n", Adapter->eeprompriv.EEPROMRFGainOffset);
2874 }
2875
2876 u8 BWMapping_8723B(struct adapter *Adapter, struct pkt_attrib *pattrib)
2877 {
2878         u8 BWSettingOfDesc = 0;
2879         struct hal_com_data *pHalData = GET_HAL_DATA(Adapter);
2880
2881         /* DBG_871X("BWMapping pHalData->CurrentChannelBW %d, pattrib->bwmode %d\n", pHalData->CurrentChannelBW, pattrib->bwmode); */
2882
2883         if (pHalData->CurrentChannelBW == CHANNEL_WIDTH_80) {
2884                 if (pattrib->bwmode == CHANNEL_WIDTH_80)
2885                         BWSettingOfDesc = 2;
2886                 else if (pattrib->bwmode == CHANNEL_WIDTH_40)
2887                         BWSettingOfDesc = 1;
2888                 else
2889                         BWSettingOfDesc = 0;
2890         } else if (pHalData->CurrentChannelBW == CHANNEL_WIDTH_40) {
2891                 if ((pattrib->bwmode == CHANNEL_WIDTH_40) || (pattrib->bwmode == CHANNEL_WIDTH_80))
2892                         BWSettingOfDesc = 1;
2893                 else
2894                         BWSettingOfDesc = 0;
2895         } else
2896                 BWSettingOfDesc = 0;
2897
2898         /* if (pTcb->bBTTxPacket) */
2899         /*      BWSettingOfDesc = 0; */
2900
2901         return BWSettingOfDesc;
2902 }
2903
2904 u8 SCMapping_8723B(struct adapter *Adapter, struct pkt_attrib *pattrib)
2905 {
2906         u8 SCSettingOfDesc = 0;
2907         struct hal_com_data *pHalData = GET_HAL_DATA(Adapter);
2908
2909         /* DBG_871X("SCMapping: pHalData->CurrentChannelBW %d, pHalData->nCur80MhzPrimeSC %d, pHalData->nCur40MhzPrimeSC %d\n", pHalData->CurrentChannelBW, pHalData->nCur80MhzPrimeSC, pHalData->nCur40MhzPrimeSC); */
2910
2911         if (pHalData->CurrentChannelBW == CHANNEL_WIDTH_80) {
2912                 if (pattrib->bwmode == CHANNEL_WIDTH_80) {
2913                         SCSettingOfDesc = VHT_DATA_SC_DONOT_CARE;
2914                 } else if (pattrib->bwmode == CHANNEL_WIDTH_40) {
2915                         if (pHalData->nCur80MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_LOWER)
2916                                 SCSettingOfDesc = VHT_DATA_SC_40_LOWER_OF_80MHZ;
2917                         else if (pHalData->nCur80MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_UPPER)
2918                                 SCSettingOfDesc = VHT_DATA_SC_40_UPPER_OF_80MHZ;
2919                         else
2920                                 DBG_871X("SCMapping: Not Correct Primary40MHz Setting\n");
2921                 } else {
2922                         if ((pHalData->nCur40MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_LOWER) && (pHalData->nCur80MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_LOWER))
2923                                 SCSettingOfDesc = VHT_DATA_SC_20_LOWEST_OF_80MHZ;
2924                         else if ((pHalData->nCur40MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_UPPER) && (pHalData->nCur80MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_LOWER))
2925                                 SCSettingOfDesc = VHT_DATA_SC_20_LOWER_OF_80MHZ;
2926                         else if ((pHalData->nCur40MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_LOWER) && (pHalData->nCur80MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_UPPER))
2927                                 SCSettingOfDesc = VHT_DATA_SC_20_UPPER_OF_80MHZ;
2928                         else if ((pHalData->nCur40MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_UPPER) && (pHalData->nCur80MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_UPPER))
2929                                 SCSettingOfDesc = VHT_DATA_SC_20_UPPERST_OF_80MHZ;
2930                         else
2931                                 DBG_871X("SCMapping: Not Correct Primary40MHz Setting\n");
2932                 }
2933         } else if (pHalData->CurrentChannelBW == CHANNEL_WIDTH_40) {
2934                 /* DBG_871X("SCMapping: HT Case: pHalData->CurrentChannelBW %d, pHalData->nCur40MhzPrimeSC %d\n", pHalData->CurrentChannelBW, pHalData->nCur40MhzPrimeSC); */
2935
2936                 if (pattrib->bwmode == CHANNEL_WIDTH_40) {
2937                         SCSettingOfDesc = VHT_DATA_SC_DONOT_CARE;
2938                 } else if (pattrib->bwmode == CHANNEL_WIDTH_20) {
2939                         if (pHalData->nCur40MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_UPPER) {
2940                                 SCSettingOfDesc = VHT_DATA_SC_20_UPPER_OF_80MHZ;
2941                         } else if (pHalData->nCur40MhzPrimeSC == HAL_PRIME_CHNL_OFFSET_LOWER) {
2942                                 SCSettingOfDesc = VHT_DATA_SC_20_LOWER_OF_80MHZ;
2943                         } else {
2944                                 SCSettingOfDesc = VHT_DATA_SC_DONOT_CARE;
2945                         }
2946                 }
2947         } else {
2948                 SCSettingOfDesc = VHT_DATA_SC_DONOT_CARE;
2949         }
2950
2951         return SCSettingOfDesc;
2952 }
2953
2954 static void rtl8723b_cal_txdesc_chksum(struct tx_desc *ptxdesc)
2955 {
2956         u16 *usPtr = (u16 *)ptxdesc;
2957         u32 count;
2958         u32 index;
2959         u16 checksum = 0;
2960
2961
2962         /*  Clear first */
2963         ptxdesc->txdw7 &= cpu_to_le32(0xffff0000);
2964
2965         /*  checksume is always calculated by first 32 bytes, */
2966         /*  and it doesn't depend on TX DESC length. */
2967         /*  Thomas, Lucas@SD4, 20130515 */
2968         count = 16;
2969
2970         for (index = 0; index < count; index++) {
2971                 checksum |= le16_to_cpu(*(__le16 *)(usPtr + index));
2972         }
2973
2974         ptxdesc->txdw7 |= cpu_to_le32(checksum & 0x0000ffff);
2975 }
2976
2977 static u8 fill_txdesc_sectype(struct pkt_attrib *pattrib)
2978 {
2979         u8 sectype = 0;
2980         if ((pattrib->encrypt > 0) && !pattrib->bswenc) {
2981                 switch (pattrib->encrypt) {
2982                 /*  SEC_TYPE */
2983                 case _WEP40_:
2984                 case _WEP104_:
2985                 case _TKIP_:
2986                 case _TKIP_WTMIC_:
2987                         sectype = 1;
2988                         break;
2989
2990                 case _AES_:
2991                         sectype = 3;
2992                         break;
2993
2994                 case _NO_PRIVACY_:
2995                 default:
2996                         break;
2997                 }
2998         }
2999         return sectype;
3000 }
3001
3002 static void fill_txdesc_vcs_8723b(struct adapter *padapter, struct pkt_attrib *pattrib, PTXDESC_8723B ptxdesc)
3003 {
3004         /* DBG_8192C("cvs_mode =%d\n", pattrib->vcs_mode); */
3005
3006         if (pattrib->vcs_mode) {
3007                 switch (pattrib->vcs_mode) {
3008                 case RTS_CTS:
3009                         ptxdesc->rtsen = 1;
3010                         /*  ENABLE HW RTS */
3011                         ptxdesc->hw_rts_en = 1;
3012                         break;
3013
3014                 case CTS_TO_SELF:
3015                         ptxdesc->cts2self = 1;
3016                         break;
3017
3018                 case NONE_VCS:
3019                 default:
3020                         break;
3021                 }
3022
3023                 ptxdesc->rtsrate = 8; /*  RTS Rate =24M */
3024                 ptxdesc->rts_ratefb_lmt = 0xF;
3025
3026                 if (padapter->mlmeextpriv.mlmext_info.preamble_mode == PREAMBLE_SHORT)
3027                         ptxdesc->rts_short = 1;
3028
3029                 /*  Set RTS BW */
3030                 if (pattrib->ht_en)
3031                         ptxdesc->rts_sc = SCMapping_8723B(padapter, pattrib);
3032         }
3033 }
3034
3035 static void fill_txdesc_phy_8723b(struct adapter *padapter, struct pkt_attrib *pattrib, PTXDESC_8723B ptxdesc)
3036 {
3037         /* DBG_8192C("bwmode =%d, ch_off =%d\n", pattrib->bwmode, pattrib->ch_offset); */
3038
3039         if (pattrib->ht_en) {
3040                 ptxdesc->data_bw = BWMapping_8723B(padapter, pattrib);
3041
3042                 ptxdesc->data_sc = SCMapping_8723B(padapter, pattrib);
3043         }
3044 }
3045
3046 static void rtl8723b_fill_default_txdesc(
3047         struct xmit_frame *pxmitframe, u8 *pbuf
3048 )
3049 {
3050         struct adapter *padapter;
3051         struct hal_com_data *pHalData;
3052         struct mlme_ext_priv *pmlmeext;
3053         struct mlme_ext_info *pmlmeinfo;
3054         struct pkt_attrib *pattrib;
3055         PTXDESC_8723B ptxdesc;
3056         s32 bmcst;
3057
3058         memset(pbuf, 0, TXDESC_SIZE);
3059
3060         padapter = pxmitframe->padapter;
3061         pHalData = GET_HAL_DATA(padapter);
3062         pmlmeext = &padapter->mlmeextpriv;
3063         pmlmeinfo = &(pmlmeext->mlmext_info);
3064
3065         pattrib = &pxmitframe->attrib;
3066         bmcst = IS_MCAST(pattrib->ra);
3067
3068         ptxdesc = (PTXDESC_8723B)pbuf;
3069
3070         if (pxmitframe->frame_tag == DATA_FRAMETAG) {
3071                 u8 drv_userate = 0;
3072
3073                 ptxdesc->macid = pattrib->mac_id; /*  CAM_ID(MAC_ID) */
3074                 ptxdesc->rate_id = pattrib->raid;
3075                 ptxdesc->qsel = pattrib->qsel;
3076                 ptxdesc->seq = pattrib->seqnum;
3077
3078                 ptxdesc->sectype = fill_txdesc_sectype(pattrib);
3079                 fill_txdesc_vcs_8723b(padapter, pattrib, ptxdesc);
3080
3081                 if (pattrib->icmp_pkt == 1 && padapter->registrypriv.wifi_spec == 1)
3082                         drv_userate = 1;
3083
3084                 if (
3085                         (pattrib->ether_type != 0x888e) &&
3086                         (pattrib->ether_type != 0x0806) &&
3087                         (pattrib->ether_type != 0x88B4) &&
3088                         (pattrib->dhcp_pkt != 1) &&
3089                         (drv_userate != 1)
3090 #ifdef CONFIG_AUTO_AP_MODE
3091                         && (!pattrib->pctrl)
3092 #endif
3093                 ) {
3094                         /*  Non EAP & ARP & DHCP type data packet */
3095
3096                         if (pattrib->ampdu_en) {
3097                                 ptxdesc->agg_en = 1; /*  AGG EN */
3098                                 ptxdesc->max_agg_num = 0x1f;
3099                                 ptxdesc->ampdu_density = pattrib->ampdu_spacing;
3100                         } else
3101                                 ptxdesc->bk = 1; /*  AGG BK */
3102
3103                         fill_txdesc_phy_8723b(padapter, pattrib, ptxdesc);
3104
3105                         ptxdesc->data_ratefb_lmt = 0x1F;
3106
3107                         if (!pHalData->fw_ractrl) {
3108                                 ptxdesc->userate = 1;
3109
3110                                 if (pHalData->dmpriv.INIDATA_RATE[pattrib->mac_id] & BIT(7))
3111                                         ptxdesc->data_short = 1;
3112
3113                                 ptxdesc->datarate = pHalData->dmpriv.INIDATA_RATE[pattrib->mac_id] & 0x7F;
3114                         }
3115
3116                         if (padapter->fix_rate != 0xFF) { /*  modify data rate by iwpriv */
3117                                 ptxdesc->userate = 1;
3118                                 if (padapter->fix_rate & BIT(7))
3119                                         ptxdesc->data_short = 1;
3120
3121                                 ptxdesc->datarate = (padapter->fix_rate & 0x7F);
3122                                 ptxdesc->disdatafb = 1;
3123                         }
3124
3125                         if (pattrib->ldpc)
3126                                 ptxdesc->data_ldpc = 1;
3127                         if (pattrib->stbc)
3128                                 ptxdesc->data_stbc = 1;
3129
3130 #ifdef CONFIG_CMCC_TEST
3131                         ptxdesc->data_short = 1; /* use cck short premble */
3132 #endif
3133                 } else {
3134                         /*  EAP data packet and ARP packet. */
3135                         /*  Use the 1M data rate to send the EAP/ARP packet. */
3136                         /*  This will maybe make the handshake smooth. */
3137
3138                         ptxdesc->bk = 1; /*  AGG BK */
3139                         ptxdesc->userate = 1; /*  driver uses rate */
3140                         if (pmlmeinfo->preamble_mode == PREAMBLE_SHORT)
3141                                 ptxdesc->data_short = 1;/*  DATA_SHORT */
3142                         ptxdesc->datarate = MRateToHwRate(pmlmeext->tx_rate);
3143                         DBG_871X("YJ: %s(): ARP Data: userate =%d, datarate = 0x%x\n", __func__, ptxdesc->userate, ptxdesc->datarate);
3144                 }
3145
3146                 ptxdesc->usb_txagg_num = pxmitframe->agg_num;
3147         } else if (pxmitframe->frame_tag == MGNT_FRAMETAG) {
3148 /*              RT_TRACE(_module_hal_xmit_c_, _drv_notice_, ("%s: MGNT_FRAMETAG\n", __func__)); */
3149
3150                 ptxdesc->macid = pattrib->mac_id; /*  CAM_ID(MAC_ID) */
3151                 ptxdesc->qsel = pattrib->qsel;
3152                 ptxdesc->rate_id = pattrib->raid; /*  Rate ID */
3153                 ptxdesc->seq = pattrib->seqnum;
3154                 ptxdesc->userate = 1; /*  driver uses rate, 1M */
3155
3156                 ptxdesc->mbssid = pattrib->mbssid & 0xF;
3157
3158                 ptxdesc->rty_lmt_en = 1; /*  retry limit enable */
3159                 if (pattrib->retry_ctrl) {
3160                         ptxdesc->data_rt_lmt = 6;
3161                 } else {
3162                         ptxdesc->data_rt_lmt = 12;
3163                 }
3164
3165                 ptxdesc->datarate = MRateToHwRate(pmlmeext->tx_rate);
3166
3167                 /*  CCX-TXRPT ack for xmit mgmt frames. */
3168                 if (pxmitframe->ack_report) {
3169                         #ifdef DBG_CCX
3170                         DBG_8192C("%s set spe_rpt\n", __func__);
3171                         #endif
3172                         ptxdesc->spe_rpt = 1;
3173                         ptxdesc->sw_define = (u8)(GET_PRIMARY_ADAPTER(padapter)->xmitpriv.seq_no);
3174                 }
3175         } else if (pxmitframe->frame_tag == TXAGG_FRAMETAG) {
3176                 RT_TRACE(_module_hal_xmit_c_, _drv_warning_, ("%s: TXAGG_FRAMETAG\n", __func__));
3177         } else {
3178                 RT_TRACE(_module_hal_xmit_c_, _drv_warning_, ("%s: frame_tag = 0x%x\n", __func__, pxmitframe->frame_tag));
3179
3180                 ptxdesc->macid = pattrib->mac_id; /*  CAM_ID(MAC_ID) */
3181                 ptxdesc->rate_id = pattrib->raid; /*  Rate ID */
3182                 ptxdesc->qsel = pattrib->qsel;
3183                 ptxdesc->seq = pattrib->seqnum;
3184                 ptxdesc->userate = 1; /*  driver uses rate */
3185                 ptxdesc->datarate = MRateToHwRate(pmlmeext->tx_rate);
3186         }
3187
3188         ptxdesc->pktlen = pattrib->last_txcmdsz;
3189         ptxdesc->offset = TXDESC_SIZE + OFFSET_SZ;
3190
3191         if (bmcst)
3192                 ptxdesc->bmc = 1;
3193
3194         /* 2009.11.05. tynli_test. Suggested by SD4 Filen for FW LPS.
3195          * (1) The sequence number of each non-Qos frame / broadcast /
3196          * multicast / mgnt frame should be controlled by Hw because Fw
3197          * will also send null data which we cannot control when Fw LPS
3198          * enable.
3199          * --> default enable non-Qos data sequense number. 2010.06.23.
3200          * by tynli.
3201          * (2) Enable HW SEQ control for beacon packet, because we use
3202          * Hw beacon.
3203          * (3) Use HW Qos SEQ to control the seq num of Ext port non-Qos
3204          * packets.
3205          * 2010.06.23. Added by tynli.
3206          */
3207         if (!pattrib->qos_en) /*  Hw set sequence number */
3208                 ptxdesc->en_hwseq = 1; /*  HWSEQ_EN */
3209 }
3210
3211 /* Description:
3212  *
3213  * Parameters:
3214  *      pxmitframe      xmitframe
3215  *      pbuf            where to fill tx desc
3216  */
3217 void rtl8723b_update_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf)
3218 {
3219         struct tx_desc *pdesc;
3220
3221         rtl8723b_fill_default_txdesc(pxmitframe, pbuf);
3222
3223         pdesc = (struct tx_desc *)pbuf;
3224         pdesc->txdw0 = pdesc->txdw0;
3225         pdesc->txdw1 = pdesc->txdw1;
3226         pdesc->txdw2 = pdesc->txdw2;
3227         pdesc->txdw3 = pdesc->txdw3;
3228         pdesc->txdw4 = pdesc->txdw4;
3229         pdesc->txdw5 = pdesc->txdw5;
3230         pdesc->txdw6 = pdesc->txdw6;
3231         pdesc->txdw7 = pdesc->txdw7;
3232         pdesc->txdw8 = pdesc->txdw8;
3233         pdesc->txdw9 = pdesc->txdw9;
3234
3235         rtl8723b_cal_txdesc_chksum(pdesc);
3236 }
3237
3238 /*  */
3239 /*  Description: In normal chip, we should send some packet to Hw which will be used by Fw */
3240 /*                      in FW LPS mode. The function is to fill the Tx descriptor of this packets, then */
3241 /*                      Fw can tell Hw to send these packet derectly. */
3242 /*  Added by tynli. 2009.10.15. */
3243 /*  */
3244 /* type1:pspoll, type2:null */
3245 void rtl8723b_fill_fake_txdesc(
3246         struct adapter *padapter,
3247         u8 *pDesc,
3248         u32 BufferLen,
3249         u8 IsPsPoll,
3250         u8 IsBTQosNull,
3251         u8 bDataFrame
3252 )
3253 {
3254         /*  Clear all status */
3255         memset(pDesc, 0, TXDESC_SIZE);
3256
3257         SET_TX_DESC_FIRST_SEG_8723B(pDesc, 1); /* bFirstSeg; */
3258         SET_TX_DESC_LAST_SEG_8723B(pDesc, 1); /* bLastSeg; */
3259
3260         SET_TX_DESC_OFFSET_8723B(pDesc, 0x28); /*  Offset = 32 */
3261
3262         SET_TX_DESC_PKT_SIZE_8723B(pDesc, BufferLen); /*  Buffer size + command header */
3263         SET_TX_DESC_QUEUE_SEL_8723B(pDesc, QSLT_MGNT); /*  Fixed queue of Mgnt queue */
3264
3265         /*  Set NAVUSEHDR to prevent Ps-poll AId filed to be changed to error vlaue by Hw. */
3266         if (IsPsPoll) {
3267                 SET_TX_DESC_NAV_USE_HDR_8723B(pDesc, 1);
3268         } else {
3269                 SET_TX_DESC_HWSEQ_EN_8723B(pDesc, 1); /*  Hw set sequence number */
3270                 SET_TX_DESC_HWSEQ_SEL_8723B(pDesc, 0);
3271         }
3272
3273         if (IsBTQosNull) {
3274                 SET_TX_DESC_BT_INT_8723B(pDesc, 1);
3275         }
3276
3277         SET_TX_DESC_USE_RATE_8723B(pDesc, 1); /*  use data rate which is set by Sw */
3278         SET_TX_DESC_OWN_8723B((u8 *)pDesc, 1);
3279
3280         SET_TX_DESC_TX_RATE_8723B(pDesc, DESC8723B_RATE1M);
3281
3282         /*  */
3283         /*  Encrypt the data frame if under security mode excepct null data. Suggested by CCW. */
3284         /*  */
3285         if (bDataFrame) {
3286                 u32 EncAlg;
3287
3288                 EncAlg = padapter->securitypriv.dot11PrivacyAlgrthm;
3289                 switch (EncAlg) {
3290                 case _NO_PRIVACY_:
3291                         SET_TX_DESC_SEC_TYPE_8723B(pDesc, 0x0);
3292                         break;
3293                 case _WEP40_:
3294                 case _WEP104_:
3295                 case _TKIP_:
3296                         SET_TX_DESC_SEC_TYPE_8723B(pDesc, 0x1);
3297                         break;
3298                 case _SMS4_:
3299                         SET_TX_DESC_SEC_TYPE_8723B(pDesc, 0x2);
3300                         break;
3301                 case _AES_:
3302                         SET_TX_DESC_SEC_TYPE_8723B(pDesc, 0x3);
3303                         break;
3304                 default:
3305                         SET_TX_DESC_SEC_TYPE_8723B(pDesc, 0x0);
3306                         break;
3307                 }
3308         }
3309
3310         /*  USB interface drop packet if the checksum of descriptor isn't correct. */
3311         /*  Using this checksum can let hardware recovery from packet bulk out error (e.g. Cancel URC, Bulk out error.). */
3312         rtl8723b_cal_txdesc_chksum((struct tx_desc *)pDesc);
3313 }
3314
3315 static void hw_var_set_opmode(struct adapter *padapter, u8 variable, u8 *val)
3316 {
3317         u8 val8;
3318         u8 mode = *((u8 *)val);
3319
3320         {
3321                 /*  disable Port0 TSF update */
3322                 val8 = rtw_read8(padapter, REG_BCN_CTRL);
3323                 val8 |= DIS_TSF_UDT;
3324                 rtw_write8(padapter, REG_BCN_CTRL, val8);
3325
3326                 /*  set net_type */
3327                 Set_MSR(padapter, mode);
3328                 DBG_871X("#### %s() -%d iface_type(0) mode = %d ####\n", __func__, __LINE__, mode);
3329
3330                 if ((mode == _HW_STATE_STATION_) || (mode == _HW_STATE_NOLINK_)) {
3331                         {
3332                                 StopTxBeacon(padapter);
3333 #ifdef CONFIG_INTERRUPT_BASED_TXBCN
3334 #ifdef CONFIG_INTERRUPT_BASED_TXBCN_EARLY_INT
3335                                 rtw_write8(padapter, REG_DRVERLYINT, 0x05); /*  restore early int time to 5ms */
3336                                 UpdateInterruptMask8812AU(padapter, true, 0, IMR_BCNDMAINT0_8723B);
3337 #endif /*  CONFIG_INTERRUPT_BASED_TXBCN_EARLY_INT */
3338
3339 #ifdef CONFIG_INTERRUPT_BASED_TXBCN_BCN_OK_ERR
3340                                 UpdateInterruptMask8812AU(padapter, true, 0, (IMR_TXBCN0ERR_8723B|IMR_TXBCN0OK_8723B));
3341 #endif /*  CONFIG_INTERRUPT_BASED_TXBCN_BCN_OK_ERR */
3342
3343 #endif /*  CONFIG_INTERRUPT_BASED_TXBCN */
3344                         }
3345
3346                         /*  disable atim wnd */
3347                         rtw_write8(padapter, REG_BCN_CTRL, DIS_TSF_UDT|EN_BCN_FUNCTION|DIS_ATIM);
3348                         /* rtw_write8(padapter, REG_BCN_CTRL, 0x18); */
3349                 } else if (mode == _HW_STATE_ADHOC_) {
3350                         ResumeTxBeacon(padapter);
3351                         rtw_write8(padapter, REG_BCN_CTRL, DIS_TSF_UDT|EN_BCN_FUNCTION|DIS_BCNQ_SUB);
3352                 } else if (mode == _HW_STATE_AP_) {
3353 #ifdef CONFIG_INTERRUPT_BASED_TXBCN
3354 #ifdef CONFIG_INTERRUPT_BASED_TXBCN_EARLY_INT
3355                         UpdateInterruptMask8723BU(padapter, true, IMR_BCNDMAINT0_8723B, 0);
3356 #endif /*  CONFIG_INTERRUPT_BASED_TXBCN_EARLY_INT */
3357
3358 #ifdef CONFIG_INTERRUPT_BASED_TXBCN_BCN_OK_ERR
3359                         UpdateInterruptMask8723BU(padapter, true, (IMR_TXBCN0ERR_8723B|IMR_TXBCN0OK_8723B), 0);
3360 #endif /*  CONFIG_INTERRUPT_BASED_TXBCN_BCN_OK_ERR */
3361
3362 #endif /*  CONFIG_INTERRUPT_BASED_TXBCN */
3363
3364                         ResumeTxBeacon(padapter);
3365
3366                         rtw_write8(padapter, REG_BCN_CTRL, DIS_TSF_UDT|DIS_BCNQ_SUB);
3367
3368                         /* Set RCR */
3369                         rtw_write32(padapter, REG_RCR, 0x7000208e);/* CBSSID_DATA must set to 0, reject ICV_ERR packet */
3370                         /* enable to rx data frame */
3371                         rtw_write16(padapter, REG_RXFLTMAP2, 0xFFFF);
3372                         /* enable to rx ps-poll */
3373                         rtw_write16(padapter, REG_RXFLTMAP1, 0x0400);
3374
3375                         /* Beacon Control related register for first time */
3376                         rtw_write8(padapter, REG_BCNDMATIM, 0x02); /*  2ms */
3377
3378                         /* rtw_write8(padapter, REG_BCN_MAX_ERR, 0xFF); */
3379                         rtw_write8(padapter, REG_ATIMWND, 0x0a); /*  10ms */
3380                         rtw_write16(padapter, REG_BCNTCFG, 0x00);
3381                         rtw_write16(padapter, REG_TBTT_PROHIBIT, 0xff04);
3382                         rtw_write16(padapter, REG_TSFTR_SYN_OFFSET, 0x7fff);/*  +32767 (~32ms) */
3383
3384                         /* reset TSF */
3385                         rtw_write8(padapter, REG_DUAL_TSF_RST, BIT(0));
3386
3387                         /* enable BCN0 Function for if1 */
3388                         /* don't enable update TSF0 for if1 (due to TSF update when beacon/probe rsp are received) */
3389                         rtw_write8(padapter, REG_BCN_CTRL, (DIS_TSF_UDT|EN_BCN_FUNCTION|EN_TXBCN_RPT|DIS_BCNQ_SUB));
3390
3391                         /* SW_BCN_SEL - Port0 */
3392                         /* rtw_write8(Adapter, REG_DWBCN1_CTRL_8192E+2, rtw_read8(Adapter, REG_DWBCN1_CTRL_8192E+2) & ~BIT4); */
3393                         rtw_hal_set_hwreg(padapter, HW_VAR_DL_BCN_SEL, NULL);
3394
3395                         /*  select BCN on port 0 */
3396                         rtw_write8(
3397                                 padapter,
3398                                 REG_CCK_CHECK_8723B,
3399                                 (rtw_read8(padapter, REG_CCK_CHECK_8723B)&~BIT_BCN_PORT_SEL)
3400                         );
3401
3402                         /*  dis BCN1 ATIM  WND if if2 is station */
3403                         val8 = rtw_read8(padapter, REG_BCN_CTRL_1);
3404                         val8 |= DIS_ATIM;
3405                         rtw_write8(padapter, REG_BCN_CTRL_1, val8);
3406                 }
3407         }
3408 }
3409
3410 static void hw_var_set_macaddr(struct adapter *padapter, u8 variable, u8 *val)
3411 {
3412         u8 idx = 0;
3413         u32 reg_macid;
3414
3415         reg_macid = REG_MACID;
3416
3417         for (idx = 0 ; idx < 6; idx++)
3418                 rtw_write8(GET_PRIMARY_ADAPTER(padapter), (reg_macid+idx), val[idx]);
3419 }
3420
3421 static void hw_var_set_bssid(struct adapter *padapter, u8 variable, u8 *val)
3422 {
3423         u8 idx = 0;
3424         u32 reg_bssid;
3425
3426         reg_bssid = REG_BSSID;
3427
3428         for (idx = 0 ; idx < 6; idx++)
3429                 rtw_write8(padapter, (reg_bssid+idx), val[idx]);
3430 }
3431
3432 static void hw_var_set_bcn_func(struct adapter *padapter, u8 variable, u8 *val)
3433 {
3434         u32 bcn_ctrl_reg;
3435
3436         bcn_ctrl_reg = REG_BCN_CTRL;
3437
3438         if (*(u8 *)val)
3439                 rtw_write8(padapter, bcn_ctrl_reg, (EN_BCN_FUNCTION | EN_TXBCN_RPT));
3440         else {
3441                 u8 val8;
3442                 val8 = rtw_read8(padapter, bcn_ctrl_reg);
3443                 val8 &= ~(EN_BCN_FUNCTION | EN_TXBCN_RPT);
3444
3445                 /*  Always enable port0 beacon function for PSTDMA */
3446                 if (REG_BCN_CTRL == bcn_ctrl_reg)
3447                         val8 |= EN_BCN_FUNCTION;
3448
3449                 rtw_write8(padapter, bcn_ctrl_reg, val8);
3450         }
3451 }
3452
3453 static void hw_var_set_correct_tsf(struct adapter *padapter, u8 variable, u8 *val)
3454 {
3455         u8 val8;
3456         u64 tsf;
3457         struct mlme_ext_priv *pmlmeext;
3458         struct mlme_ext_info *pmlmeinfo;
3459
3460
3461         pmlmeext = &padapter->mlmeextpriv;
3462         pmlmeinfo = &pmlmeext->mlmext_info;
3463
3464         tsf = pmlmeext->TSFValue-do_div(pmlmeext->TSFValue, (pmlmeinfo->bcn_interval*1024))-1024; /* us */
3465
3466         if (
3467                 ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) ||
3468                 ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
3469         )
3470                 StopTxBeacon(padapter);
3471
3472         {
3473                 /*  disable related TSF function */
3474                 val8 = rtw_read8(padapter, REG_BCN_CTRL);
3475                 val8 &= ~EN_BCN_FUNCTION;
3476                 rtw_write8(padapter, REG_BCN_CTRL, val8);
3477
3478                 rtw_write32(padapter, REG_TSFTR, tsf);
3479                 rtw_write32(padapter, REG_TSFTR+4, tsf>>32);
3480
3481                 /*  enable related TSF function */
3482                 val8 = rtw_read8(padapter, REG_BCN_CTRL);
3483                 val8 |= EN_BCN_FUNCTION;
3484                 rtw_write8(padapter, REG_BCN_CTRL, val8);
3485         }
3486
3487         if (
3488                 ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) ||
3489                 ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
3490         )
3491                 ResumeTxBeacon(padapter);
3492 }
3493
3494 static void hw_var_set_mlme_disconnect(struct adapter *padapter, u8 variable, u8 *val)
3495 {
3496         u8 val8;
3497
3498         /*  Set RCR to not to receive data frame when NO LINK state */
3499         /* rtw_write32(padapter, REG_RCR, rtw_read32(padapter, REG_RCR) & ~RCR_ADF); */
3500         /*  reject all data frames */
3501         rtw_write16(padapter, REG_RXFLTMAP2, 0);
3502
3503         /*  reset TSF */
3504         rtw_write8(padapter, REG_DUAL_TSF_RST, BIT(0));
3505
3506         /*  disable update TSF */
3507         val8 = rtw_read8(padapter, REG_BCN_CTRL);
3508         val8 |= DIS_TSF_UDT;
3509         rtw_write8(padapter, REG_BCN_CTRL, val8);
3510 }
3511
3512 static void hw_var_set_mlme_sitesurvey(struct adapter *padapter, u8 variable, u8 *val)
3513 {
3514         u32 value_rcr, rcr_clear_bit, reg_bcn_ctl;
3515         u16 value_rxfltmap2;
3516         u8 val8;
3517         struct hal_com_data *pHalData;
3518         struct mlme_priv *pmlmepriv;
3519
3520
3521         pHalData = GET_HAL_DATA(padapter);
3522         pmlmepriv = &padapter->mlmepriv;
3523
3524         reg_bcn_ctl = REG_BCN_CTRL;
3525
3526         rcr_clear_bit = RCR_CBSSID_BCN;
3527
3528         /*  config RCR to receive different BSSID & not to receive data frame */
3529         value_rxfltmap2 = 0;
3530
3531         if ((check_fwstate(pmlmepriv, WIFI_AP_STATE) == true))
3532                 rcr_clear_bit = RCR_CBSSID_BCN;
3533
3534         value_rcr = rtw_read32(padapter, REG_RCR);
3535
3536         if (*((u8 *)val)) {
3537                 /*  under sitesurvey */
3538                 value_rcr &= ~(rcr_clear_bit);
3539                 rtw_write32(padapter, REG_RCR, value_rcr);
3540
3541                 rtw_write16(padapter, REG_RXFLTMAP2, value_rxfltmap2);
3542
3543                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE)) {
3544                         /*  disable update TSF */
3545                         val8 = rtw_read8(padapter, reg_bcn_ctl);
3546                         val8 |= DIS_TSF_UDT;
3547                         rtw_write8(padapter, reg_bcn_ctl, val8);
3548                 }
3549
3550                 /*  Save original RRSR setting. */
3551                 pHalData->RegRRSR = rtw_read16(padapter, REG_RRSR);
3552         } else {
3553                 /*  sitesurvey done */
3554                 if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)))
3555                         /*  enable to rx data frame */
3556                         rtw_write16(padapter, REG_RXFLTMAP2, 0xFFFF);
3557
3558                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE)) {
3559                         /*  enable update TSF */
3560                         val8 = rtw_read8(padapter, reg_bcn_ctl);
3561                         val8 &= ~DIS_TSF_UDT;
3562                         rtw_write8(padapter, reg_bcn_ctl, val8);
3563                 }
3564
3565                 value_rcr |= rcr_clear_bit;
3566                 rtw_write32(padapter, REG_RCR, value_rcr);
3567
3568                 /*  Restore original RRSR setting. */
3569                 rtw_write16(padapter, REG_RRSR, pHalData->RegRRSR);
3570         }
3571 }
3572
3573 static void hw_var_set_mlme_join(struct adapter *padapter, u8 variable, u8 *val)
3574 {
3575         u8 val8;
3576         u16 val16;
3577         u32 val32;
3578         u8 RetryLimit;
3579         u8 type;
3580         struct mlme_priv *pmlmepriv;
3581         struct eeprom_priv *pEEPROM;
3582
3583
3584         RetryLimit = 0x30;
3585         type = *(u8 *)val;
3586         pmlmepriv = &padapter->mlmepriv;
3587         pEEPROM = GET_EEPROM_EFUSE_PRIV(padapter);
3588
3589         if (type == 0) { /*  prepare to join */
3590                 /* enable to rx data frame.Accept all data frame */
3591                 /* rtw_write32(padapter, REG_RCR, rtw_read32(padapter, REG_RCR)|RCR_ADF); */
3592                 rtw_write16(padapter, REG_RXFLTMAP2, 0xFFFF);
3593
3594                 val32 = rtw_read32(padapter, REG_RCR);
3595                 if (padapter->in_cta_test)
3596                         val32 &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN);/*  RCR_ADF */
3597                 else
3598                         val32 |= RCR_CBSSID_DATA|RCR_CBSSID_BCN;
3599                 rtw_write32(padapter, REG_RCR, val32);
3600
3601                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true)
3602                         RetryLimit = (pEEPROM->CustomerID == RT_CID_CCX) ? 7 : 48;
3603                 else /*  Ad-hoc Mode */
3604                         RetryLimit = 0x7;
3605         } else if (type == 1) /* joinbss_event call back when join res < 0 */
3606                 rtw_write16(padapter, REG_RXFLTMAP2, 0x00);
3607         else if (type == 2) { /* sta add event call back */
3608                 /* enable update TSF */
3609                 val8 = rtw_read8(padapter, REG_BCN_CTRL);
3610                 val8 &= ~DIS_TSF_UDT;
3611                 rtw_write8(padapter, REG_BCN_CTRL, val8);
3612
3613                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE))
3614                         RetryLimit = 0x7;
3615         }
3616
3617         val16 = (RetryLimit << RETRY_LIMIT_SHORT_SHIFT) | (RetryLimit << RETRY_LIMIT_LONG_SHIFT);
3618         rtw_write16(padapter, REG_RL, val16);
3619 }
3620
3621 void CCX_FwC2HTxRpt_8723b(struct adapter *padapter, u8 *pdata, u8 len)
3622 {
3623         u8 seq_no;
3624
3625 #define GET_8723B_C2H_TX_RPT_LIFE_TIME_OVER(_Header)    LE_BITS_TO_1BYTE((_Header + 0), 6, 1)
3626 #define GET_8723B_C2H_TX_RPT_RETRY_OVER(_Header)        LE_BITS_TO_1BYTE((_Header + 0), 7, 1)
3627
3628         /* DBG_871X("%s, 0x%x, 0x%x, 0x%x, 0x%x, 0x%x, 0x%x, 0x%x, 0x%x\n", __func__, */
3629         /*              *pdata, *(pdata+1), *(pdata+2), *(pdata+3), *(pdata+4), *(pdata+5), *(pdata+6), *(pdata+7)); */
3630
3631         seq_no = *(pdata+6);
3632
3633         if (GET_8723B_C2H_TX_RPT_RETRY_OVER(pdata) | GET_8723B_C2H_TX_RPT_LIFE_TIME_OVER(pdata)) {
3634                 rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_CCX_PKT_FAIL);
3635         }
3636 /*
3637         else if (seq_no != padapter->xmitpriv.seq_no) {
3638                 DBG_871X("tx_seq_no =%d, rpt_seq_no =%d\n", padapter->xmitpriv.seq_no, seq_no);
3639                 rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_CCX_PKT_FAIL);
3640         }
3641 */
3642         else
3643                 rtw_ack_tx_done(&padapter->xmitpriv, RTW_SCTX_DONE_SUCCESS);
3644 }
3645
3646 s32 c2h_id_filter_ccx_8723b(u8 *buf)
3647 {
3648         struct c2h_evt_hdr_88xx *c2h_evt = (struct c2h_evt_hdr_88xx *)buf;
3649         s32 ret = false;
3650         if (c2h_evt->id == C2H_CCX_TX_RPT)
3651                 ret = true;
3652
3653         return ret;
3654 }
3655
3656
3657 s32 c2h_handler_8723b(struct adapter *padapter, u8 *buf)
3658 {
3659         struct c2h_evt_hdr_88xx *pC2hEvent = (struct c2h_evt_hdr_88xx *)buf;
3660         s32 ret = _SUCCESS;
3661         u8 index = 0;
3662
3663         if (!pC2hEvent) {
3664                 DBG_8192C("%s(): pC2hEventis NULL\n", __func__);
3665                 ret = _FAIL;
3666                 goto exit;
3667         }
3668
3669         switch (pC2hEvent->id) {
3670         case C2H_AP_RPT_RSP:
3671                 break;
3672         case C2H_DBG:
3673                 {
3674                         RT_TRACE(_module_hal_init_c_, _drv_info_, ("c2h_handler_8723b: %s\n", pC2hEvent->payload));
3675                 }
3676                 break;
3677
3678         case C2H_CCX_TX_RPT:
3679 /*                      CCX_FwC2HTxRpt(padapter, QueueID, pC2hEvent->payload); */
3680                 break;
3681
3682         case C2H_EXT_RA_RPT:
3683 /*                      C2HExtRaRptHandler(padapter, pC2hEvent->payload, C2hEvent.CmdLen); */
3684                 break;
3685
3686         case C2H_HW_INFO_EXCH:
3687                 RT_TRACE(_module_hal_init_c_, _drv_info_, ("[BT], C2H_HW_INFO_EXCH\n"));
3688                 for (index = 0; index < pC2hEvent->plen; index++) {
3689                         RT_TRACE(_module_hal_init_c_, _drv_info_, ("[BT], tmpBuf[%d]= 0x%x\n", index, pC2hEvent->payload[index]));
3690                 }
3691                 break;
3692
3693         case C2H_8723B_BT_INFO:
3694                 hal_btcoex_BtInfoNotify(padapter, pC2hEvent->plen, pC2hEvent->payload);
3695                 break;
3696
3697         default:
3698                 break;
3699         }
3700
3701         /*  Clear event to notify FW we have read the command. */
3702         /*  Note: */
3703         /*      If this field isn't clear, the FW won't update the next command message. */
3704 /*      rtw_write8(padapter, REG_C2HEVT_CLEAR, C2H_EVT_HOST_CLOSE); */
3705 exit:
3706         return ret;
3707 }
3708
3709 static void process_c2h_event(struct adapter *padapter, PC2H_EVT_HDR pC2hEvent, u8 *c2hBuf)
3710 {
3711         u8 index = 0;
3712
3713         if (!c2hBuf) {
3714                 DBG_8192C("%s c2hbuff is NULL\n", __func__);
3715                 return;
3716         }
3717
3718         switch (pC2hEvent->CmdID) {
3719         case C2H_AP_RPT_RSP:
3720                 break;
3721         case C2H_DBG:
3722                 {
3723                         RT_TRACE(_module_hal_init_c_, _drv_info_, ("C2HCommandHandler: %s\n", c2hBuf));
3724                 }
3725                 break;
3726
3727         case C2H_CCX_TX_RPT:
3728 /*                      CCX_FwC2HTxRpt(padapter, QueueID, tmpBuf); */
3729                 break;
3730
3731         case C2H_EXT_RA_RPT:
3732 /*                      C2HExtRaRptHandler(padapter, tmpBuf, C2hEvent.CmdLen); */
3733                 break;
3734
3735         case C2H_HW_INFO_EXCH:
3736                 RT_TRACE(_module_hal_init_c_, _drv_info_, ("[BT], C2H_HW_INFO_EXCH\n"));
3737                 for (index = 0; index < pC2hEvent->CmdLen; index++) {
3738                         RT_TRACE(_module_hal_init_c_, _drv_info_, ("[BT], tmpBuf[%d]= 0x%x\n", index, c2hBuf[index]));
3739                 }
3740                 break;
3741
3742         case C2H_8723B_BT_INFO:
3743                 hal_btcoex_BtInfoNotify(padapter, pC2hEvent->CmdLen, c2hBuf);
3744                 break;
3745
3746         default:
3747                 break;
3748         }
3749 }
3750
3751 void C2HPacketHandler_8723B(struct adapter *padapter, u8 *pbuffer, u16 length)
3752 {
3753         C2H_EVT_HDR     C2hEvent;
3754         u8 *tmpBuf = NULL;
3755 #ifdef CONFIG_WOWLAN
3756         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
3757
3758         if (pwrpriv->wowlan_mode) {
3759                 DBG_871X("%s(): return because wowolan_mode ==true! CMDID =%d\n", __func__, pbuffer[0]);
3760                 return;
3761         }
3762 #endif
3763         C2hEvent.CmdID = pbuffer[0];
3764         C2hEvent.CmdSeq = pbuffer[1];
3765         C2hEvent.CmdLen = length-2;
3766         tmpBuf = pbuffer+2;
3767
3768         /* DBG_871X("%s C2hEvent.CmdID:%x C2hEvent.CmdLen:%x C2hEvent.CmdSeq:%x\n", */
3769         /*              __func__, C2hEvent.CmdID, C2hEvent.CmdLen, C2hEvent.CmdSeq); */
3770         RT_PRINT_DATA(_module_hal_init_c_, _drv_notice_, "C2HPacketHandler_8723B(): Command Content:\n", tmpBuf, C2hEvent.CmdLen);
3771
3772         process_c2h_event(padapter, &C2hEvent, tmpBuf);
3773         /* c2h_handler_8723b(padapter,&C2hEvent); */
3774 }
3775
3776 void SetHwReg8723B(struct adapter *padapter, u8 variable, u8 *val)
3777 {
3778         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
3779         u8 val8;
3780         u32 val32;
3781
3782         switch (variable) {
3783         case HW_VAR_MEDIA_STATUS:
3784                 val8 = rtw_read8(padapter, MSR) & 0x0c;
3785                 val8 |= *val;
3786                 rtw_write8(padapter, MSR, val8);
3787                 break;
3788
3789         case HW_VAR_MEDIA_STATUS1:
3790                 val8 = rtw_read8(padapter, MSR) & 0x03;
3791                 val8 |= *val << 2;
3792                 rtw_write8(padapter, MSR, val8);
3793                 break;
3794
3795         case HW_VAR_SET_OPMODE:
3796                 hw_var_set_opmode(padapter, variable, val);
3797                 break;
3798
3799         case HW_VAR_MAC_ADDR:
3800                 hw_var_set_macaddr(padapter, variable, val);
3801                 break;
3802
3803         case HW_VAR_BSSID:
3804                 hw_var_set_bssid(padapter, variable, val);
3805                 break;
3806
3807         case HW_VAR_BASIC_RATE:
3808         {
3809                 struct mlme_ext_info *mlmext_info = &padapter->mlmeextpriv.mlmext_info;
3810                 u16 input_b = 0, masked = 0, ioted = 0, BrateCfg = 0;
3811                 u16 rrsr_2g_force_mask = (RRSR_11M|RRSR_5_5M|RRSR_1M);
3812                 u16 rrsr_2g_allow_mask = (RRSR_24M|RRSR_12M|RRSR_6M|RRSR_CCK_RATES);
3813
3814                 HalSetBrateCfg(padapter, val, &BrateCfg);
3815                 input_b = BrateCfg;
3816
3817                 /* apply force and allow mask */
3818                 BrateCfg |= rrsr_2g_force_mask;
3819                 BrateCfg &= rrsr_2g_allow_mask;
3820                 masked = BrateCfg;
3821
3822                 #ifdef CONFIG_CMCC_TEST
3823                 BrateCfg |= (RRSR_11M|RRSR_5_5M|RRSR_1M); /* use 11M to send ACK */
3824                 BrateCfg |= (RRSR_24M|RRSR_18M|RRSR_12M); /* CMCC_OFDM_ACK 12/18/24M */
3825                 #endif
3826
3827                 /* IOT consideration */
3828                 if (mlmext_info->assoc_AP_vendor == HT_IOT_PEER_CISCO) {
3829                         /* if peer is cisco and didn't use ofdm rate, we enable 6M ack */
3830                         if ((BrateCfg & (RRSR_24M|RRSR_12M|RRSR_6M)) == 0)
3831                                 BrateCfg |= RRSR_6M;
3832                 }
3833                 ioted = BrateCfg;
3834
3835                 pHalData->BasicRateSet = BrateCfg;
3836
3837                 DBG_8192C("HW_VAR_BASIC_RATE: %#x -> %#x -> %#x\n", input_b, masked, ioted);
3838
3839                 /*  Set RRSR rate table. */
3840                 rtw_write16(padapter, REG_RRSR, BrateCfg);
3841                 rtw_write8(padapter, REG_RRSR+2, rtw_read8(padapter, REG_RRSR+2)&0xf0);
3842         }
3843                 break;
3844
3845         case HW_VAR_TXPAUSE:
3846                 rtw_write8(padapter, REG_TXPAUSE, *val);
3847                 break;
3848
3849         case HW_VAR_BCN_FUNC:
3850                 hw_var_set_bcn_func(padapter, variable, val);
3851                 break;
3852
3853         case HW_VAR_CORRECT_TSF:
3854                 hw_var_set_correct_tsf(padapter, variable, val);
3855                 break;
3856
3857         case HW_VAR_CHECK_BSSID:
3858                 {
3859                         u32 val32;
3860                         val32 = rtw_read32(padapter, REG_RCR);
3861                         if (*val)
3862                                 val32 |= RCR_CBSSID_DATA|RCR_CBSSID_BCN;
3863                         else
3864                                 val32 &= ~(RCR_CBSSID_DATA|RCR_CBSSID_BCN);
3865                         rtw_write32(padapter, REG_RCR, val32);
3866                 }
3867                 break;
3868
3869         case HW_VAR_MLME_DISCONNECT:
3870                 hw_var_set_mlme_disconnect(padapter, variable, val);
3871                 break;
3872
3873         case HW_VAR_MLME_SITESURVEY:
3874                 hw_var_set_mlme_sitesurvey(padapter, variable,  val);
3875
3876                 hal_btcoex_ScanNotify(padapter, *val?true:false);
3877                 break;
3878
3879         case HW_VAR_MLME_JOIN:
3880                 hw_var_set_mlme_join(padapter, variable, val);
3881
3882                 switch (*val) {
3883                 case 0:
3884                         /*  prepare to join */
3885                         hal_btcoex_ConnectNotify(padapter, true);
3886                         break;
3887                 case 1:
3888                         /*  joinbss_event callback when join res < 0 */
3889                         hal_btcoex_ConnectNotify(padapter, false);
3890                         break;
3891                 case 2:
3892                         /*  sta add event callback */
3893 /*                              rtw_btcoex_MediaStatusNotify(padapter, RT_MEDIA_CONNECT); */
3894                         break;
3895                 }
3896                 break;
3897
3898         case HW_VAR_ON_RCR_AM:
3899                 val32 = rtw_read32(padapter, REG_RCR);
3900                 val32 |= RCR_AM;
3901                 rtw_write32(padapter, REG_RCR, val32);
3902                 DBG_8192C("%s, %d, RCR = %x\n", __func__, __LINE__, rtw_read32(padapter, REG_RCR));
3903                 break;
3904
3905         case HW_VAR_OFF_RCR_AM:
3906                 val32 = rtw_read32(padapter, REG_RCR);
3907                 val32 &= ~RCR_AM;
3908                 rtw_write32(padapter, REG_RCR, val32);
3909                 DBG_8192C("%s, %d, RCR = %x\n", __func__, __LINE__, rtw_read32(padapter, REG_RCR));
3910                 break;
3911
3912         case HW_VAR_BEACON_INTERVAL:
3913                 rtw_write16(padapter, REG_BCN_INTERVAL, *((u16 *)val));
3914                 break;
3915
3916         case HW_VAR_SLOT_TIME:
3917                 rtw_write8(padapter, REG_SLOT, *val);
3918                 break;
3919
3920         case HW_VAR_RESP_SIFS:
3921                 /* SIFS_Timer = 0x0a0a0808; */
3922                 /* RESP_SIFS for CCK */
3923                 rtw_write8(padapter, REG_RESP_SIFS_CCK, val[0]); /*  SIFS_T2T_CCK (0x08) */
3924                 rtw_write8(padapter, REG_RESP_SIFS_CCK+1, val[1]); /* SIFS_R2T_CCK(0x08) */
3925                 /* RESP_SIFS for OFDM */
3926                 rtw_write8(padapter, REG_RESP_SIFS_OFDM, val[2]); /* SIFS_T2T_OFDM (0x0a) */
3927                 rtw_write8(padapter, REG_RESP_SIFS_OFDM+1, val[3]); /* SIFS_R2T_OFDM(0x0a) */
3928                 break;
3929
3930         case HW_VAR_ACK_PREAMBLE:
3931                 {
3932                         u8 regTmp;
3933                         u8 bShortPreamble = *val;
3934
3935                         /*  Joseph marked out for Netgear 3500 TKIP channel 7 issue.(Temporarily) */
3936                         /* regTmp = (pHalData->nCur40MhzPrimeSC)<<5; */
3937                         regTmp = 0;
3938                         if (bShortPreamble)
3939                                 regTmp |= 0x80;
3940                         rtw_write8(padapter, REG_RRSR+2, regTmp);
3941                 }
3942                 break;
3943
3944         case HW_VAR_CAM_EMPTY_ENTRY:
3945                 {
3946                         u8 ucIndex = *val;
3947                         u8 i;
3948                         u32 ulCommand = 0;
3949                         u32 ulContent = 0;
3950                         u32 ulEncAlgo = CAM_AES;
3951
3952                         for (i = 0; i < CAM_CONTENT_COUNT; i++) {
3953                                 /*  filled id in CAM config 2 byte */
3954                                 if (i == 0) {
3955                                         ulContent |= (ucIndex & 0x03) | ((u16)(ulEncAlgo)<<2);
3956                                         /* ulContent |= CAM_VALID; */
3957                                 } else
3958                                         ulContent = 0;
3959
3960                                 /*  polling bit, and No Write enable, and address */
3961                                 ulCommand = CAM_CONTENT_COUNT*ucIndex+i;
3962                                 ulCommand = ulCommand | CAM_POLLINIG | CAM_WRITE;
3963                                 /*  write content 0 is equall to mark invalid */
3964                                 rtw_write32(padapter, WCAMI, ulContent);  /* mdelay(40); */
3965                                 /* RT_TRACE(COMP_SEC, DBG_LOUD, ("CAM_empty_entry(): WRITE A4: %lx\n", ulContent)); */
3966                                 rtw_write32(padapter, RWCAM, ulCommand);  /* mdelay(40); */
3967                                 /* RT_TRACE(COMP_SEC, DBG_LOUD, ("CAM_empty_entry(): WRITE A0: %lx\n", ulCommand)); */
3968                         }
3969                 }
3970                 break;
3971
3972         case HW_VAR_CAM_INVALID_ALL:
3973                 rtw_write32(padapter, RWCAM, BIT(31)|BIT(30));
3974                 break;
3975
3976         case HW_VAR_CAM_WRITE:
3977                 {
3978                         u32 cmd;
3979                         u32 *cam_val = (u32 *)val;
3980
3981                         rtw_write32(padapter, WCAMI, cam_val[0]);
3982
3983                         cmd = CAM_POLLINIG | CAM_WRITE | cam_val[1];
3984                         rtw_write32(padapter, RWCAM, cmd);
3985                 }
3986                 break;
3987
3988         case HW_VAR_AC_PARAM_VO:
3989                 rtw_write32(padapter, REG_EDCA_VO_PARAM, *((u32 *)val));
3990                 break;
3991
3992         case HW_VAR_AC_PARAM_VI:
3993                 rtw_write32(padapter, REG_EDCA_VI_PARAM, *((u32 *)val));
3994                 break;
3995
3996         case HW_VAR_AC_PARAM_BE:
3997                 pHalData->AcParam_BE = ((u32 *)(val))[0];
3998                 rtw_write32(padapter, REG_EDCA_BE_PARAM, *((u32 *)val));
3999                 break;
4000
4001         case HW_VAR_AC_PARAM_BK:
4002                 rtw_write32(padapter, REG_EDCA_BK_PARAM, *((u32 *)val));
4003                 break;
4004
4005         case HW_VAR_ACM_CTRL:
4006                 {
4007                         u8 ctrl = *((u8 *)val);
4008                         u8 hwctrl = 0;
4009
4010                         if (ctrl != 0) {
4011                                 hwctrl |= AcmHw_HwEn;
4012
4013                                 if (ctrl & BIT(1)) /*  BE */
4014                                         hwctrl |= AcmHw_BeqEn;
4015
4016                                 if (ctrl & BIT(2)) /*  VI */
4017                                         hwctrl |= AcmHw_ViqEn;
4018
4019                                 if (ctrl & BIT(3)) /*  VO */
4020                                         hwctrl |= AcmHw_VoqEn;
4021                         }
4022
4023                         DBG_8192C("[HW_VAR_ACM_CTRL] Write 0x%02X\n", hwctrl);
4024                         rtw_write8(padapter, REG_ACMHWCTRL, hwctrl);
4025                 }
4026                 break;
4027
4028         case HW_VAR_AMPDU_FACTOR:
4029                 {
4030                         u32 AMPDULen =  (*((u8 *)val));
4031
4032                         if (AMPDULen < HT_AGG_SIZE_32K)
4033                                 AMPDULen = (0x2000 << (*((u8 *)val)))-1;
4034                         else
4035                                 AMPDULen = 0x7fff;
4036
4037                         rtw_write32(padapter, REG_AMPDU_MAX_LENGTH_8723B, AMPDULen);
4038                 }
4039                 break;
4040
4041         case HW_VAR_H2C_FW_PWRMODE:
4042                 {
4043                         u8 psmode = *val;
4044
4045                         /*  Forece leave RF low power mode for 1T1R to prevent conficting setting in Fw power */
4046                         /*  saving sequence. 2010.06.07. Added by tynli. Suggested by SD3 yschang. */
4047                         if (psmode != PS_MODE_ACTIVE) {
4048                                 ODM_RF_Saving(&pHalData->odmpriv, true);
4049                         }
4050
4051                         /* if (psmode != PS_MODE_ACTIVE)        { */
4052                         /*      rtl8723b_set_lowpwr_lps_cmd(padapter, true); */
4053                         /*  else { */
4054                         /*      rtl8723b_set_lowpwr_lps_cmd(padapter, false); */
4055                         /*  */
4056                         rtl8723b_set_FwPwrMode_cmd(padapter, psmode);
4057                 }
4058                 break;
4059         case HW_VAR_H2C_PS_TUNE_PARAM:
4060                 rtl8723b_set_FwPsTuneParam_cmd(padapter);
4061                 break;
4062
4063         case HW_VAR_H2C_FW_JOINBSSRPT:
4064                 rtl8723b_set_FwJoinBssRpt_cmd(padapter, *val);
4065                 break;
4066
4067         case HW_VAR_INITIAL_GAIN:
4068                 {
4069                         DIG_T *pDigTable = &pHalData->odmpriv.DM_DigTable;
4070                         u32 rx_gain = *(u32 *)val;
4071
4072                         if (rx_gain == 0xff) {/* restore rx gain */
4073                                 ODM_Write_DIG(&pHalData->odmpriv, pDigTable->BackupIGValue);
4074                         } else {
4075                                 pDigTable->BackupIGValue = pDigTable->CurIGValue;
4076                                 ODM_Write_DIG(&pHalData->odmpriv, rx_gain);
4077                         }
4078                 }
4079                 break;
4080
4081         case HW_VAR_EFUSE_USAGE:
4082                 pHalData->EfuseUsedPercentage = *val;
4083                 break;
4084
4085         case HW_VAR_EFUSE_BYTES:
4086                 pHalData->EfuseUsedBytes = *((u16 *)val);
4087                 break;
4088
4089         case HW_VAR_EFUSE_BT_USAGE:
4090 #ifdef HAL_EFUSE_MEMORY
4091                 pHalData->EfuseHal.BTEfuseUsedPercentage = *val;
4092 #endif
4093                 break;
4094
4095         case HW_VAR_EFUSE_BT_BYTES:
4096 #ifdef HAL_EFUSE_MEMORY
4097                 pHalData->EfuseHal.BTEfuseUsedBytes = *((u16 *)val);
4098 #else
4099                 BTEfuseUsedBytes = *((u16 *)val);
4100 #endif
4101                 break;
4102
4103         case HW_VAR_FIFO_CLEARN_UP:
4104                 {
4105                         #define RW_RELEASE_EN           BIT(18)
4106                         #define RXDMA_IDLE                      BIT(17)
4107
4108                         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
4109                         u8 trycnt = 100;
4110
4111                         /*  pause tx */
4112                         rtw_write8(padapter, REG_TXPAUSE, 0xff);
4113
4114                         /*  keep sn */
4115                         padapter->xmitpriv.nqos_ssn = rtw_read16(padapter, REG_NQOS_SEQ);
4116
4117                         if (!pwrpriv->bkeepfwalive) {
4118                                 /* RX DMA stop */
4119                                 val32 = rtw_read32(padapter, REG_RXPKT_NUM);
4120                                 val32 |= RW_RELEASE_EN;
4121                                 rtw_write32(padapter, REG_RXPKT_NUM, val32);
4122                                 do {
4123                                         val32 = rtw_read32(padapter, REG_RXPKT_NUM);
4124                                         val32 &= RXDMA_IDLE;
4125                                         if (val32)
4126                                                 break;
4127
4128                                         DBG_871X("%s: [HW_VAR_FIFO_CLEARN_UP] val =%x times:%d\n", __func__, val32, trycnt);
4129                                 } while (--trycnt);
4130
4131                                 if (trycnt == 0) {
4132                                         DBG_8192C("[HW_VAR_FIFO_CLEARN_UP] Stop RX DMA failed......\n");
4133                                 }
4134
4135                                 /*  RQPN Load 0 */
4136                                 rtw_write16(padapter, REG_RQPN_NPQ, 0);
4137                                 rtw_write32(padapter, REG_RQPN, 0x80000000);
4138                                 mdelay(2);
4139                         }
4140                 }
4141                 break;
4142
4143         case HW_VAR_APFM_ON_MAC:
4144                 pHalData->bMacPwrCtrlOn = *val;
4145                 DBG_8192C("%s: bMacPwrCtrlOn =%d\n", __func__, pHalData->bMacPwrCtrlOn);
4146                 break;
4147
4148         case HW_VAR_NAV_UPPER:
4149                 {
4150                         u32 usNavUpper = *((u32 *)val);
4151
4152                         if (usNavUpper > HAL_NAV_UPPER_UNIT_8723B * 0xFF) {
4153                                 RT_TRACE(_module_hal_init_c_, _drv_notice_, ("The setting value (0x%08X us) of NAV_UPPER is larger than (%d * 0xFF)!!!\n", usNavUpper, HAL_NAV_UPPER_UNIT_8723B));
4154                                 break;
4155                         }
4156
4157                         usNavUpper = DIV_ROUND_UP(usNavUpper,
4158                                                   HAL_NAV_UPPER_UNIT_8723B);
4159                         rtw_write8(padapter, REG_NAV_UPPER, (u8)usNavUpper);
4160                 }
4161                 break;
4162
4163         case HW_VAR_H2C_MEDIA_STATUS_RPT:
4164                 {
4165                         u16 mstatus_rpt = (*(u16 *)val);
4166                         u8 mstatus, macId;
4167
4168                         mstatus = (u8) (mstatus_rpt & 0xFF);
4169                         macId = (u8)(mstatus_rpt >> 8);
4170                         rtl8723b_set_FwMediaStatusRpt_cmd(padapter, mstatus, macId);
4171                 }
4172                 break;
4173         case HW_VAR_BCN_VALID:
4174                 {
4175                         /*  BCN_VALID, BIT16 of REG_TDECTRL = BIT0 of REG_TDECTRL+2, write 1 to clear, Clear by sw */
4176                         val8 = rtw_read8(padapter, REG_TDECTRL+2);
4177                         val8 |= BIT(0);
4178                         rtw_write8(padapter, REG_TDECTRL+2, val8);
4179                 }
4180                 break;
4181
4182         case HW_VAR_DL_BCN_SEL:
4183                 {
4184                         /*  SW_BCN_SEL - Port0 */
4185                         val8 = rtw_read8(padapter, REG_DWBCN1_CTRL_8723B+2);
4186                         val8 &= ~BIT(4);
4187                         rtw_write8(padapter, REG_DWBCN1_CTRL_8723B+2, val8);
4188                 }
4189                 break;
4190
4191         case HW_VAR_DO_IQK:
4192                 pHalData->bNeedIQK = true;
4193                 break;
4194
4195         case HW_VAR_DL_RSVD_PAGE:
4196                 if (check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == true)
4197                         rtl8723b_download_BTCoex_AP_mode_rsvd_page(padapter);
4198                 else
4199                         rtl8723b_download_rsvd_page(padapter, RT_MEDIA_CONNECT);
4200                 break;
4201
4202         case HW_VAR_MACID_SLEEP:
4203                 /*  Input is MACID */
4204                 val32 = *(u32 *)val;
4205                 if (val32 > 31) {
4206                         DBG_8192C(FUNC_ADPT_FMT ": [HW_VAR_MACID_SLEEP] Invalid macid(%d)\n",
4207                                 FUNC_ADPT_ARG(padapter), val32);
4208                         break;
4209                 }
4210                 val8 = (u8)val32; /*  macid is between 0~31 */
4211
4212                 val32 = rtw_read32(padapter, REG_MACID_SLEEP);
4213                 DBG_8192C(FUNC_ADPT_FMT ": [HW_VAR_MACID_SLEEP] macid =%d, org MACID_SLEEP = 0x%08X\n",
4214                         FUNC_ADPT_ARG(padapter), val8, val32);
4215                 if (val32 & BIT(val8))
4216                         break;
4217                 val32 |= BIT(val8);
4218                 rtw_write32(padapter, REG_MACID_SLEEP, val32);
4219                 break;
4220
4221         case HW_VAR_MACID_WAKEUP:
4222                 /*  Input is MACID */
4223                 val32 = *(u32 *)val;
4224                 if (val32 > 31) {
4225                         DBG_8192C(FUNC_ADPT_FMT ": [HW_VAR_MACID_WAKEUP] Invalid macid(%d)\n",
4226                                 FUNC_ADPT_ARG(padapter), val32);
4227                         break;
4228                 }
4229                 val8 = (u8)val32; /*  macid is between 0~31 */
4230
4231                 val32 = rtw_read32(padapter, REG_MACID_SLEEP);
4232                 DBG_8192C(FUNC_ADPT_FMT ": [HW_VAR_MACID_WAKEUP] macid =%d, org MACID_SLEEP = 0x%08X\n",
4233                         FUNC_ADPT_ARG(padapter), val8, val32);
4234                 if (!(val32 & BIT(val8)))
4235                         break;
4236                 val32 &= ~BIT(val8);
4237                 rtw_write32(padapter, REG_MACID_SLEEP, val32);
4238                 break;
4239
4240         default:
4241                 SetHwReg(padapter, variable, val);
4242                 break;
4243         }
4244 }
4245
4246 void GetHwReg8723B(struct adapter *padapter, u8 variable, u8 *val)
4247 {
4248         struct hal_com_data *pHalData = GET_HAL_DATA(padapter);
4249         u8 val8;
4250         u16 val16;
4251
4252         switch (variable) {
4253         case HW_VAR_TXPAUSE:
4254                 *val = rtw_read8(padapter, REG_TXPAUSE);
4255                 break;
4256
4257         case HW_VAR_BCN_VALID:
4258                 {
4259                         /*  BCN_VALID, BIT16 of REG_TDECTRL = BIT0 of REG_TDECTRL+2 */
4260                         val8 = rtw_read8(padapter, REG_TDECTRL+2);
4261                         *val = (BIT(0) & val8) ? true : false;
4262                 }
4263                 break;
4264
4265         case HW_VAR_FWLPS_RF_ON:
4266                 {
4267                         /*  When we halt NIC, we should check if FW LPS is leave. */
4268                         u32 valRCR;
4269
4270                         if (
4271                                 padapter->bSurpriseRemoved  ||
4272                                 (adapter_to_pwrctl(padapter)->rf_pwrstate == rf_off)
4273                         ) {
4274                                 /*  If it is in HW/SW Radio OFF or IPS state, we do not check Fw LPS Leave, */
4275                                 /*  because Fw is unload. */
4276                                 *val = true;
4277                         } else {
4278                                 valRCR = rtw_read32(padapter, REG_RCR);
4279                                 valRCR &= 0x00070000;
4280                                 if (valRCR)
4281                                         *val = false;
4282                                 else
4283                                         *val = true;
4284                         }
4285                 }
4286                 break;
4287
4288         case HW_VAR_EFUSE_USAGE:
4289                 *val = pHalData->EfuseUsedPercentage;
4290                 break;
4291
4292         case HW_VAR_EFUSE_BYTES:
4293                 *((u16 *)val) = pHalData->EfuseUsedBytes;
4294                 break;
4295
4296         case HW_VAR_EFUSE_BT_USAGE:
4297 #ifdef HAL_EFUSE_MEMORY
4298                 *val = pHalData->EfuseHal.BTEfuseUsedPercentage;
4299 #endif
4300                 break;
4301
4302         case HW_VAR_EFUSE_BT_BYTES:
4303 #ifdef HAL_EFUSE_MEMORY
4304                 *((u16 *)val) = pHalData->EfuseHal.BTEfuseUsedBytes;
4305 #else
4306                 *((u16 *)val) = BTEfuseUsedBytes;
4307 #endif
4308                 break;
4309
4310         case HW_VAR_APFM_ON_MAC:
4311                 *val = pHalData->bMacPwrCtrlOn;
4312                 break;
4313         case HW_VAR_CHK_HI_QUEUE_EMPTY:
4314                 val16 = rtw_read16(padapter, REG_TXPKT_EMPTY);
4315                 *val = (val16 & BIT(10)) ? true:false;
4316                 break;
4317 #ifdef CONFIG_WOWLAN
4318         case HW_VAR_RPWM_TOG:
4319                 *val = rtw_read8(padapter, SDIO_LOCAL_BASE|SDIO_REG_HRPWM1) & BIT7;
4320                 break;
4321         case HW_VAR_WAKEUP_REASON:
4322                 *val = rtw_read8(padapter, REG_WOWLAN_WAKE_REASON);
4323                 if (*val == 0xEA)
4324                         *val = 0;
4325                 break;
4326         case HW_VAR_SYS_CLKR:
4327                 *val = rtw_read8(padapter, REG_SYS_CLKR);
4328                 break;
4329 #endif
4330         default:
4331                 GetHwReg(padapter, variable, val);
4332                 break;
4333         }
4334 }
4335
4336 /* Description:
4337  *      Change default setting of specified variable.
4338  */
4339 u8 SetHalDefVar8723B(struct adapter *padapter, enum HAL_DEF_VARIABLE variable, void *pval)
4340 {
4341         u8 bResult;
4342
4343         bResult = _SUCCESS;
4344
4345         switch (variable) {
4346         default:
4347                 bResult = SetHalDefVar(padapter, variable, pval);
4348                 break;
4349         }
4350
4351         return bResult;
4352 }
4353
4354 /* Description:
4355  *      Query setting of specified variable.
4356  */
4357 u8 GetHalDefVar8723B(struct adapter *padapter, enum HAL_DEF_VARIABLE variable, void *pval)
4358 {
4359         u8 bResult;
4360
4361         bResult = _SUCCESS;
4362
4363         switch (variable) {
4364         case HAL_DEF_MAX_RECVBUF_SZ:
4365                 *((u32 *)pval) = MAX_RECVBUF_SZ;
4366                 break;
4367
4368         case HAL_DEF_RX_PACKET_OFFSET:
4369                 *((u32 *)pval) = RXDESC_SIZE + DRVINFO_SZ*8;
4370                 break;
4371
4372         case HW_VAR_MAX_RX_AMPDU_FACTOR:
4373                 /*  Stanley@BB.SD3 suggests 16K can get stable performance */
4374                 /*  The experiment was done on SDIO interface */
4375                 /*  coding by Lucas@20130730 */
4376                 *(u32 *)pval = MAX_AMPDU_FACTOR_16K;
4377                 break;
4378         case HAL_DEF_TX_LDPC:
4379         case HAL_DEF_RX_LDPC:
4380                 *((u8 *)pval) = false;
4381                 break;
4382         case HAL_DEF_TX_STBC:
4383                 *((u8 *)pval) = 0;
4384                 break;
4385         case HAL_DEF_RX_STBC:
4386                 *((u8 *)pval) = 1;
4387                 break;
4388         case HAL_DEF_EXPLICIT_BEAMFORMER:
4389         case HAL_DEF_EXPLICIT_BEAMFORMEE:
4390                 *((u8 *)pval) = false;
4391                 break;
4392
4393         case HW_DEF_RA_INFO_DUMP:
4394                 {
4395                         u8 mac_id = *(u8 *)pval;
4396                         u32 cmd;
4397                         u32 ra_info1, ra_info2;
4398                         u32 rate_mask1, rate_mask2;
4399                         u8 curr_tx_rate, curr_tx_sgi, hight_rate, lowest_rate;
4400
4401                         DBG_8192C("============ RA status check  Mac_id:%d ===================\n", mac_id);
4402
4403                         cmd = 0x40000100 | mac_id;
4404                         rtw_write32(padapter, REG_HMEBOX_DBG_2_8723B, cmd);
4405                         msleep(10);
4406                         ra_info1 = rtw_read32(padapter, 0x2F0);
4407                         curr_tx_rate = ra_info1&0x7F;
4408                         curr_tx_sgi = (ra_info1>>7)&0x01;
4409                         DBG_8192C("[ ra_info1:0x%08x ] =>cur_tx_rate = %s, cur_sgi:%d, PWRSTS = 0x%02x \n",
4410                                 ra_info1,
4411                                 HDATA_RATE(curr_tx_rate),
4412                                 curr_tx_sgi,
4413                                 (ra_info1>>8)  & 0x07);
4414
4415                         cmd = 0x40000400 | mac_id;
4416                         rtw_write32(padapter, REG_HMEBOX_DBG_2_8723B, cmd);
4417                         msleep(10);
4418                         ra_info1 = rtw_read32(padapter, 0x2F0);
4419                         ra_info2 = rtw_read32(padapter, 0x2F4);
4420                         rate_mask1 = rtw_read32(padapter, 0x2F8);
4421                         rate_mask2 = rtw_read32(padapter, 0x2FC);
4422                         hight_rate = ra_info2&0xFF;
4423                         lowest_rate = (ra_info2>>8)  & 0xFF;
4424
4425                         DBG_8192C("[ ra_info1:0x%08x ] =>RSSI =%d, BW_setting = 0x%02x, DISRA = 0x%02x, VHT_EN = 0x%02x\n",
4426                                 ra_info1,
4427                                 ra_info1&0xFF,
4428                                 (ra_info1>>8)  & 0xFF,
4429                                 (ra_info1>>16) & 0xFF,
4430                                 (ra_info1>>24) & 0xFF);
4431
4432                         DBG_8192C("[ ra_info2:0x%08x ] =>hight_rate =%s, lowest_rate =%s, SGI = 0x%02x, RateID =%d\n",
4433                                 ra_info2,
4434                                 HDATA_RATE(hight_rate),
4435                                 HDATA_RATE(lowest_rate),
4436                                 (ra_info2>>16) & 0xFF,
4437                                 (ra_info2>>24) & 0xFF);
4438
4439                         DBG_8192C("rate_mask2 = 0x%08x, rate_mask1 = 0x%08x\n", rate_mask2, rate_mask1);
4440
4441                 }
4442                 break;
4443
4444         case HAL_DEF_TX_PAGE_BOUNDARY:
4445                 if (!padapter->registrypriv.wifi_spec) {
4446                         *(u8 *)pval = TX_PAGE_BOUNDARY_8723B;
4447                 } else {
4448                         *(u8 *)pval = WMM_NORMAL_TX_PAGE_BOUNDARY_8723B;
4449                 }
4450                 break;
4451
4452         case HAL_DEF_MACID_SLEEP:
4453                 *(u8 *)pval = true; /*  support macid sleep */
4454                 break;
4455
4456         default:
4457                 bResult = GetHalDefVar(padapter, variable, pval);
4458                 break;
4459         }
4460
4461         return bResult;
4462 }
4463
4464 #ifdef CONFIG_WOWLAN
4465 void Hal_DetectWoWMode(struct adapter *padapter)
4466 {
4467         adapter_to_pwrctl(padapter)->bSupportRemoteWakeup = true;
4468         DBG_871X("%s\n", __func__);
4469 }
4470 #endif /* CONFIG_WOWLAN */
4471
4472 void rtl8723b_start_thread(struct adapter *padapter)
4473 {
4474 #ifndef CONFIG_SDIO_TX_TASKLET
4475         struct xmit_priv *xmitpriv = &padapter->xmitpriv;
4476
4477         xmitpriv->SdioXmitThread = kthread_run(rtl8723bs_xmit_thread, padapter, "RTWHALXT");
4478         if (IS_ERR(xmitpriv->SdioXmitThread)) {
4479                 RT_TRACE(_module_hal_xmit_c_, _drv_err_, ("%s: start rtl8723bs_xmit_thread FAIL!!\n", __func__));
4480         }
4481 #endif
4482 }
4483
4484 void rtl8723b_stop_thread(struct adapter *padapter)
4485 {
4486 #ifndef CONFIG_SDIO_TX_TASKLET
4487         struct xmit_priv *xmitpriv = &padapter->xmitpriv;
4488
4489         /*  stop xmit_buf_thread */
4490         if (xmitpriv->SdioXmitThread) {
4491                 complete(&xmitpriv->SdioXmitStart);
4492                 wait_for_completion(&xmitpriv->SdioXmitTerminate);
4493                 xmitpriv->SdioXmitThread = NULL;
4494         }
4495 #endif
4496 }
4497
4498 #if defined(CONFIG_CHECK_BT_HANG)
4499 extern void check_bt_status_work(void *data);
4500 void rtl8723bs_init_checkbthang_workqueue(struct adapter *adapter)
4501 {
4502         adapter->priv_checkbt_wq = alloc_workqueue("sdio_wq", 0, 0);
4503         INIT_DELAYED_WORK(&adapter->checkbt_work, (void *)check_bt_status_work);
4504 }
4505
4506 void rtl8723bs_free_checkbthang_workqueue(struct adapter *adapter)
4507 {
4508         if (adapter->priv_checkbt_wq) {
4509                 cancel_delayed_work_sync(&adapter->checkbt_work);
4510                 flush_workqueue(adapter->priv_checkbt_wq);
4511                 destroy_workqueue(adapter->priv_checkbt_wq);
4512                 adapter->priv_checkbt_wq = NULL;
4513         }
4514 }
4515
4516 void rtl8723bs_cancle_checkbthang_workqueue(struct adapter *adapter)
4517 {
4518         if (adapter->priv_checkbt_wq)
4519                 cancel_delayed_work_sync(&adapter->checkbt_work);
4520 }
4521
4522 void rtl8723bs_hal_check_bt_hang(struct adapter *adapter)
4523 {
4524         if (adapter->priv_checkbt_wq)
4525                 queue_delayed_work(adapter->priv_checkbt_wq, &(adapter->checkbt_work), 0);
4526 }
4527 #endif