Add the rt linux 4.1.3-rt3 as base
[kvmfornfv.git] / kernel / drivers / staging / rtl8192u / r8192U_core.c
diff --git a/kernel/drivers/staging/rtl8192u/r8192U_core.c b/kernel/drivers/staging/rtl8192u/r8192U_core.c
new file mode 100644 (file)
index 0000000..a4795af
--- /dev/null
@@ -0,0 +1,4915 @@
+/******************************************************************************
+ * Copyright(c) 2008 - 2010 Realtek Corporation. All rights reserved.
+ * Linux device driver for RTL8192U
+ *
+ * Based on the r8187 driver, which is:
+ * Copyright 2004-2005 Andrea Merello <andrea.merello@gmail.com>, et al.
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ * The full GNU General Public License is included in this distribution in the
+ * file called LICENSE.
+ *
+ * Contact Information:
+ * Jerry chuang <wlanfae@realtek.com>
+ */
+
+#ifndef CONFIG_FORCE_HARD_FLOAT
+double __floatsidf(int i)
+{
+       return i;
+}
+
+unsigned int __fixunsdfsi(double d)
+{
+       return d;
+}
+
+double __adddf3(double a, double b)
+{
+       return a+b;
+}
+
+double __addsf3(float a, float b)
+{
+       return a+b;
+}
+
+double __subdf3(double a, double b)
+{
+       return a-b;
+}
+
+double __extendsfdf2(float a)
+{
+       return a;
+}
+#endif
+
+#define CONFIG_RTL8192_IO_MAP
+
+#include <asm/uaccess.h>
+#include "r8192U_hw.h"
+#include "r8192U.h"
+#include "r8190_rtl8256.h" /* RTL8225 Radio frontend */
+#include "r8180_93cx6.h"   /* Card EEPROM */
+#include "r8192U_wx.h"
+#include "r819xU_phy.h" //added by WB 4.30.2008
+#include "r819xU_phyreg.h"
+#include "r819xU_cmdpkt.h"
+#include "r8192U_dm.h"
+#include <linux/usb.h>
+#include <linux/slab.h>
+#include <linux/proc_fs.h>
+#include <linux/seq_file.h>
+// FIXME: check if 2.6.7 is ok
+
+#include "dot11d.h"
+//set here to open your trace code. //WB
+u32 rt_global_debug_component = COMP_DOWN      |
+                               COMP_SEC        |
+                               COMP_ERR; //always open err flags on
+
+#define TOTAL_CAM_ENTRY 32
+#define CAM_CONTENT_COUNT 8
+
+static const struct usb_device_id rtl8192_usb_id_tbl[] = {
+       /* Realtek */
+       {USB_DEVICE(0x0bda, 0x8709)},
+       /* Corega */
+       {USB_DEVICE(0x07aa, 0x0043)},
+       /* Belkin */
+       {USB_DEVICE(0x050d, 0x805E)},
+       /* Sitecom */
+       {USB_DEVICE(0x0df6, 0x0031)},
+       /* EnGenius */
+       {USB_DEVICE(0x1740, 0x9201)},
+       /* Dlink */
+       {USB_DEVICE(0x2001, 0x3301)},
+       /* Zinwell */
+       {USB_DEVICE(0x5a57, 0x0290)},
+       /* LG */
+       {USB_DEVICE(0x043e, 0x7a01)},
+       {}
+};
+
+MODULE_LICENSE("GPL");
+MODULE_VERSION("V 1.1");
+MODULE_DEVICE_TABLE(usb, rtl8192_usb_id_tbl);
+MODULE_DESCRIPTION("Linux driver for Realtek RTL8192 USB WiFi cards");
+
+static char *ifname = "wlan%d";
+static int hwwep = 1;  //default use hw. set 0 to use software security
+static int channels = 0x3fff;
+
+
+
+module_param(ifname, charp, S_IRUGO|S_IWUSR);
+module_param(hwwep, int, S_IRUGO|S_IWUSR);
+module_param(channels, int, S_IRUGO|S_IWUSR);
+
+MODULE_PARM_DESC(ifname, " Net interface name, wlan%d=default");
+MODULE_PARM_DESC(hwwep, " Try to use hardware security support. ");
+MODULE_PARM_DESC(channels, " Channel bitmask for specific locales. NYI");
+
+static int rtl8192_usb_probe(struct usb_interface *intf,
+                            const struct usb_device_id *id);
+static void rtl8192_usb_disconnect(struct usb_interface *intf);
+
+
+static struct usb_driver rtl8192_usb_driver = {
+       .name           = RTL819xU_MODULE_NAME,           /* Driver name   */
+       .id_table       = rtl8192_usb_id_tbl,             /* PCI_ID table  */
+       .probe          = rtl8192_usb_probe,              /* probe fn      */
+       .disconnect     = rtl8192_usb_disconnect,         /* remove fn     */
+       .suspend        = NULL,                           /* PM suspend fn */
+       .resume         = NULL,                           /* PM resume fn  */
+};
+
+
+struct CHANNEL_LIST {
+       u8      Channel[32];
+       u8      Len;
+};
+
+static struct CHANNEL_LIST ChannelPlan[] = {
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165}, 24},             //FCC
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}, 11},                                                      //IC
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 36, 40, 44, 48, 52, 56, 60, 64}, 21},      //ETSI
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},    //Spain. Change to ETSI.
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},      //France. Change to ETSI.
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},  //MKK                                   //MKK
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},//MKK1
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13}, 13},      //Israel.
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},                  // For 11a , TELEC
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 36, 40, 44, 48, 52, 56, 60, 64}, 22},    //MIC
+       {{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14}, 14}                                   //For Global Domain. 1-11:active scan, 12-14 passive scan. //+YJ, 080626
+};
+
+static void rtl819x_set_channel_map(u8 channel_plan, struct r8192_priv *priv)
+{
+       int i, max_chan = -1, min_chan = -1;
+       struct ieee80211_device *ieee = priv->ieee80211;
+       switch (channel_plan) {
+       case COUNTRY_CODE_FCC:
+       case COUNTRY_CODE_IC:
+       case COUNTRY_CODE_ETSI:
+       case COUNTRY_CODE_SPAIN:
+       case COUNTRY_CODE_FRANCE:
+       case COUNTRY_CODE_MKK:
+       case COUNTRY_CODE_MKK1:
+       case COUNTRY_CODE_ISRAEL:
+       case COUNTRY_CODE_TELEC:
+       case COUNTRY_CODE_MIC:
+               Dot11d_Init(ieee);
+               ieee->bGlobalDomain = false;
+               //actually 8225 & 8256 rf chips only support B,G,24N mode
+               if ((priv->rf_chip == RF_8225) || (priv->rf_chip == RF_8256)) {
+                       min_chan = 1;
+                       max_chan = 14;
+               } else {
+                       RT_TRACE(COMP_ERR, "unknown rf chip, can't set channel map in function:%s()\n", __func__);
+               }
+               if (ChannelPlan[channel_plan].Len != 0) {
+                       // Clear old channel map
+                       memset(GET_DOT11D_INFO(ieee)->channel_map, 0, sizeof(GET_DOT11D_INFO(ieee)->channel_map));
+                       // Set new channel map
+                       for (i = 0; i < ChannelPlan[channel_plan].Len; i++) {
+                               if (ChannelPlan[channel_plan].Channel[i] < min_chan || ChannelPlan[channel_plan].Channel[i] > max_chan)
+                                       break;
+                               GET_DOT11D_INFO(ieee)->channel_map[ChannelPlan[channel_plan].Channel[i]] = 1;
+                       }
+               }
+               break;
+
+       case COUNTRY_CODE_GLOBAL_DOMAIN:
+               GET_DOT11D_INFO(ieee)->bEnabled = 0;//this flag enabled to follow 11d country IE setting, otherwise, it shall follow global domain settings.
+               Dot11d_Reset(ieee);
+               ieee->bGlobalDomain = true;
+               break;
+
+       default:
+               break;
+       }
+}
+
+
+
+
+static void CamResetAllEntry(struct net_device *dev)
+{
+       u32 ulcommand = 0;
+       //2004/02/11  In static WEP, OID_ADD_KEY or OID_ADD_WEP are set before STA associate to AP.
+       // However, ResetKey is called on OID_802_11_INFRASTRUCTURE_MODE and MlmeAssociateRequest
+       // In this condition, Cam can not be reset because upper layer will not set this static key again.
+       ulcommand |= BIT31|BIT30;
+       write_nic_dword(dev, RWCAM, ulcommand);
+
+}
+
+
+void write_cam(struct net_device *dev, u8 addr, u32 data)
+{
+       write_nic_dword(dev, WCAMI, data);
+       write_nic_dword(dev, RWCAM, BIT31|BIT16|(addr&0xff));
+}
+
+u32 read_cam(struct net_device *dev, u8 addr)
+{
+       u32 data;
+
+       write_nic_dword(dev, RWCAM, 0x80000000|(addr&0xff));
+       read_nic_dword(dev, 0xa8, &data);
+       return data;
+}
+
+void write_nic_byte_E(struct net_device *dev, int indx, u8 data)
+{
+       int status;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct usb_device *udev = priv->udev;
+
+       status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
+                                RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
+                                indx|0xfe00, 0, &data, 1, HZ / 2);
+
+       if (status < 0)
+               netdev_err(dev, "write_nic_byte_E TimeOut! status: %d\n", status);
+}
+
+int read_nic_byte_E(struct net_device *dev, int indx, u8 *data)
+{
+       int status;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct usb_device *udev = priv->udev;
+
+       status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
+                                RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
+                                indx|0xfe00, 0, data, 1, HZ / 2);
+
+       if (status < 0) {
+               netdev_err(dev, "%s failure status: %d\n", __func__, status);
+               return status;
+       }
+
+       return 0;
+}
+//as 92U has extend page from 4 to 16, so modify functions below.
+void write_nic_byte(struct net_device *dev, int indx, u8 data)
+{
+       int status;
+
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct usb_device *udev = priv->udev;
+
+       status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
+                                RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
+                                (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 1, HZ / 2);
+
+       if (status < 0)
+               netdev_err(dev, "write_nic_byte TimeOut! status: %d\n", status);
+
+
+}
+
+
+void write_nic_word(struct net_device *dev, int indx, u16 data)
+{
+
+       int status;
+
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct usb_device *udev = priv->udev;
+
+       status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
+                                RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
+                                (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 2, HZ / 2);
+
+       if (status < 0)
+               netdev_err(dev, "write_nic_word TimeOut! status: %d\n", status);
+
+}
+
+
+void write_nic_dword(struct net_device *dev, int indx, u32 data)
+{
+
+       int status;
+
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct usb_device *udev = priv->udev;
+
+       status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
+                                RTL8187_REQ_SET_REGS, RTL8187_REQT_WRITE,
+                                (indx&0xff)|0xff00, (indx>>8)&0x0f, &data, 4, HZ / 2);
+
+
+       if (status < 0)
+               netdev_err(dev, "write_nic_dword TimeOut! status: %d\n", status);
+
+}
+
+
+
+int read_nic_byte(struct net_device *dev, int indx, u8 *data)
+{
+       int status;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct usb_device *udev = priv->udev;
+
+       status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
+                                RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
+                                (indx&0xff)|0xff00, (indx>>8)&0x0f, data, 1, HZ / 2);
+
+       if (status < 0) {
+               netdev_err(dev, "%s failure status: %d\n", __func__, status);
+               return status;
+       }
+
+       return 0;
+}
+
+
+
+int read_nic_word(struct net_device *dev, int indx, u16 *data)
+{
+       int status;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct usb_device *udev = priv->udev;
+
+       status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
+                                RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
+                                (indx&0xff)|0xff00, (indx>>8)&0x0f,
+                                data, 2, HZ / 2);
+
+       if (status < 0) {
+               netdev_err(dev, "%s failure status: %d\n", __func__, status);
+               return status;
+       }
+
+       return 0;
+}
+
+static int read_nic_word_E(struct net_device *dev, int indx, u16 *data)
+{
+       int status;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct usb_device *udev = priv->udev;
+
+       status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
+                                RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
+                                indx|0xfe00, 0, data, 2, HZ / 2);
+
+       if (status < 0) {
+               netdev_err(dev, "%s failure status: %d\n", __func__, status);
+               return status;
+       }
+
+       return 0;
+}
+
+int read_nic_dword(struct net_device *dev, int indx, u32 *data)
+{
+       int status;
+
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct usb_device *udev = priv->udev;
+
+       status = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
+                                RTL8187_REQ_GET_REGS, RTL8187_REQT_READ,
+                                (indx&0xff)|0xff00, (indx>>8)&0x0f,
+                                data, 4, HZ / 2);
+
+       if (status < 0) {
+               netdev_err(dev, "%s failure status: %d\n", __func__, status);
+               return status;
+       }
+
+       return 0;
+}
+
+/* u8 read_phy_cck(struct net_device *dev, u8 adr); */
+/* u8 read_phy_ofdm(struct net_device *dev, u8 adr); */
+/* this might still called in what was the PHY rtl8185/rtl8192 common code
+ * plans are to possibility turn it again in one common code...
+ */
+inline void force_pci_posting(struct net_device *dev)
+{
+}
+
+static struct net_device_stats *rtl8192_stats(struct net_device *dev);
+static void rtl8192_restart(struct work_struct *work);
+static void watch_dog_timer_callback(unsigned long data);
+
+/****************************************************************************
+ *   -----------------------------PROCFS STUFF-------------------------
+*****************************************************************************
+ */
+
+static struct proc_dir_entry *rtl8192_proc;
+
+static int proc_get_stats_ap(struct seq_file *m, void *v)
+{
+       struct net_device *dev = m->private;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct ieee80211_device *ieee = priv->ieee80211;
+       struct ieee80211_network *target;
+
+       list_for_each_entry(target, &ieee->network_list, list) {
+               const char *wpa = "non_WPA";
+               if (target->wpa_ie_len > 0 || target->rsn_ie_len > 0)
+                       wpa = "WPA";
+
+               seq_printf(m, "%s %s\n", target->ssid, wpa);
+       }
+
+       return 0;
+}
+
+static int proc_get_registers(struct seq_file *m, void *v)
+{
+       struct net_device *dev = m->private;
+       int i, n, max = 0xff;
+       u8 byte_rd;
+
+       seq_puts(m, "\n####################page 0##################\n ");
+
+       for (n = 0; n <= max;) {
+               seq_printf(m, "\nD:  %2x > ", n);
+
+               for (i = 0; i < 16 && n <= max; i++, n++) {
+                       read_nic_byte(dev, 0x000|n, &byte_rd);
+                       seq_printf(m, "%2x ", byte_rd);
+               }
+       }
+
+       seq_puts(m, "\n####################page 1##################\n ");
+       for (n = 0; n <= max;) {
+               seq_printf(m, "\nD:  %2x > ", n);
+
+               for (i = 0; i < 16 && n <= max; i++, n++) {
+                       read_nic_byte(dev, 0x100|n, &byte_rd);
+                       seq_printf(m, "%2x ", byte_rd);
+               }
+       }
+
+       seq_puts(m, "\n####################page 3##################\n ");
+       for (n = 0; n <= max;) {
+               seq_printf(m, "\nD:  %2x > ", n);
+
+               for (i = 0; i < 16 && n <= max; i++, n++) {
+                       read_nic_byte(dev, 0x300|n, &byte_rd);
+                       seq_printf(m, "%2x ", byte_rd);
+               }
+       }
+
+       seq_putc(m, '\n');
+       return 0;
+}
+
+static int proc_get_stats_tx(struct seq_file *m, void *v)
+{
+       struct net_device *dev = m->private;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+
+       seq_printf(m,
+                  "TX VI priority ok int: %lu\n"
+                  "TX VI priority error int: %lu\n"
+                  "TX VO priority ok int: %lu\n"
+                  "TX VO priority error int: %lu\n"
+                  "TX BE priority ok int: %lu\n"
+                  "TX BE priority error int: %lu\n"
+                  "TX BK priority ok int: %lu\n"
+                  "TX BK priority error int: %lu\n"
+                  "TX MANAGE priority ok int: %lu\n"
+                  "TX MANAGE priority error int: %lu\n"
+                  "TX BEACON priority ok int: %lu\n"
+                  "TX BEACON priority error int: %lu\n"
+                  "TX queue resume: %lu\n"
+                  "TX queue stopped?: %d\n"
+                  "TX fifo overflow: %lu\n"
+                  "TX VI queue: %d\n"
+                  "TX VO queue: %d\n"
+                  "TX BE queue: %d\n"
+                  "TX BK queue: %d\n"
+                  "TX VI dropped: %lu\n"
+                  "TX VO dropped: %lu\n"
+                  "TX BE dropped: %lu\n"
+                  "TX BK dropped: %lu\n"
+                  "TX total data packets %lu\n",
+                  priv->stats.txviokint,
+                  priv->stats.txvierr,
+                  priv->stats.txvookint,
+                  priv->stats.txvoerr,
+                  priv->stats.txbeokint,
+                  priv->stats.txbeerr,
+                  priv->stats.txbkokint,
+                  priv->stats.txbkerr,
+                  priv->stats.txmanageokint,
+                  priv->stats.txmanageerr,
+                  priv->stats.txbeaconokint,
+                  priv->stats.txbeaconerr,
+                  priv->stats.txresumed,
+                  netif_queue_stopped(dev),
+                  priv->stats.txoverflow,
+                  atomic_read(&(priv->tx_pending[VI_PRIORITY])),
+                  atomic_read(&(priv->tx_pending[VO_PRIORITY])),
+                  atomic_read(&(priv->tx_pending[BE_PRIORITY])),
+                  atomic_read(&(priv->tx_pending[BK_PRIORITY])),
+                  priv->stats.txvidrop,
+                  priv->stats.txvodrop,
+                  priv->stats.txbedrop,
+                  priv->stats.txbkdrop,
+                  priv->stats.txdatapkt
+               );
+
+       return 0;
+}
+
+static int proc_get_stats_rx(struct seq_file *m, void *v)
+{
+       struct net_device *dev = m->private;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+
+       seq_printf(m,
+                  "RX packets: %lu\n"
+                  "RX urb status error: %lu\n"
+                  "RX invalid urb error: %lu\n",
+                  priv->stats.rxoktotal,
+                  priv->stats.rxstaterr,
+                  priv->stats.rxurberr);
+
+       return 0;
+}
+
+static void rtl8192_proc_module_init(void)
+{
+       RT_TRACE(COMP_INIT, "Initializing proc filesystem");
+       rtl8192_proc = proc_mkdir(RTL819xU_MODULE_NAME, init_net.proc_net);
+}
+
+/*
+ * seq_file wrappers for procfile show routines.
+ */
+static int rtl8192_proc_open(struct inode *inode, struct file *file)
+{
+       struct net_device *dev = proc_get_parent_data(inode);
+       int (*show)(struct seq_file *, void *) = PDE_DATA(inode);
+
+       return single_open(file, show, dev);
+}
+
+static const struct file_operations rtl8192_proc_fops = {
+       .open           = rtl8192_proc_open,
+       .read           = seq_read,
+       .llseek         = seq_lseek,
+       .release        = single_release,
+};
+
+/*
+ * Table of proc files we need to create.
+ */
+struct rtl8192_proc_file {
+       char name[12];
+       int (*show)(struct seq_file *, void *);
+};
+
+static const struct rtl8192_proc_file rtl8192_proc_files[] = {
+       { "stats-rx",   &proc_get_stats_rx },
+       { "stats-tx",   &proc_get_stats_tx },
+       { "stats-ap",   &proc_get_stats_ap },
+       { "registers",  &proc_get_registers },
+       { "" }
+};
+
+static void rtl8192_proc_init_one(struct net_device *dev)
+{
+       const struct rtl8192_proc_file *f;
+       struct proc_dir_entry *dir;
+
+       if (rtl8192_proc) {
+               dir = proc_mkdir_data(dev->name, 0, rtl8192_proc, dev);
+               if (!dir) {
+                       RT_TRACE(COMP_ERR, "Unable to initialize /proc/net/rtl8192/%s\n",
+                                dev->name);
+                       return;
+               }
+
+               for (f = rtl8192_proc_files; f->name[0]; f++) {
+                       if (!proc_create_data(f->name, S_IFREG | S_IRUGO, dir,
+                                             &rtl8192_proc_fops, f->show)) {
+                               RT_TRACE(COMP_ERR, "Unable to initialize "
+                                        "/proc/net/rtl8192/%s/%s\n",
+                                        dev->name, f->name);
+                               return;
+                       }
+               }
+       }
+}
+
+static void rtl8192_proc_remove_one(struct net_device *dev)
+{
+       remove_proc_subtree(dev->name, rtl8192_proc);
+}
+
+/****************************************************************************
+   -----------------------------MISC STUFF-------------------------
+*****************************************************************************/
+
+short check_nic_enough_desc(struct net_device *dev, int queue_index)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       int used = atomic_read(&priv->tx_pending[queue_index]);
+
+       return (used < MAX_TX_URB);
+}
+
+static void tx_timeout(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+       schedule_work(&priv->reset_wq);
+}
+
+void rtl8192_update_msr(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u8 msr;
+
+       read_nic_byte(dev, MSR, &msr);
+       msr &= ~MSR_LINK_MASK;
+
+       /* do not change in link_state != WLAN_LINK_ASSOCIATED.
+        * msr must be updated if the state is ASSOCIATING.
+        * this is intentional and make sense for ad-hoc and
+        * master (see the create BSS/IBSS func)
+        */
+       if (priv->ieee80211->state == IEEE80211_LINKED) {
+
+               if (priv->ieee80211->iw_mode == IW_MODE_INFRA)
+                       msr |= (MSR_LINK_MANAGED<<MSR_LINK_SHIFT);
+               else if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
+                       msr |= (MSR_LINK_ADHOC<<MSR_LINK_SHIFT);
+               else if (priv->ieee80211->iw_mode == IW_MODE_MASTER)
+                       msr |= (MSR_LINK_MASTER<<MSR_LINK_SHIFT);
+
+       } else {
+               msr |= (MSR_LINK_NONE<<MSR_LINK_SHIFT);
+       }
+
+       write_nic_byte(dev, MSR, msr);
+}
+
+void rtl8192_set_chan(struct net_device *dev, short ch)
+{
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       RT_TRACE(COMP_CH, "=====>%s()====ch:%d\n", __func__, ch);
+       priv->chan = ch;
+
+       /* this hack should avoid frame TX during channel setting*/
+
+       //need to implement rf set channel here WB
+
+       if (priv->rf_set_chan)
+               priv->rf_set_chan(dev, priv->chan);
+       mdelay(10);
+}
+
+static void rtl8192_rx_isr(struct urb *urb);
+
+static u32 get_rxpacket_shiftbytes_819xusb(struct ieee80211_rx_stats *pstats)
+{
+
+       return (sizeof(rx_desc_819x_usb) + pstats->RxDrvInfoSize
+               + pstats->RxBufShift);
+
+}
+static int rtl8192_rx_initiate(struct net_device *dev)
+{
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct urb *entry;
+       struct sk_buff *skb;
+       struct rtl8192_rx_info *info;
+
+       /* nomal packet rx procedure */
+       while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB) {
+               skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
+               if (!skb)
+                       break;
+               entry = usb_alloc_urb(0, GFP_KERNEL);
+               if (!entry) {
+                       kfree_skb(skb);
+                       break;
+               }
+               usb_fill_bulk_urb(entry, priv->udev,
+                                 usb_rcvbulkpipe(priv->udev, 3), skb_tail_pointer(skb),
+                                 RX_URB_SIZE, rtl8192_rx_isr, skb);
+               info = (struct rtl8192_rx_info *) skb->cb;
+               info->urb = entry;
+               info->dev = dev;
+               info->out_pipe = 3; //denote rx normal packet queue
+               skb_queue_tail(&priv->rx_queue, skb);
+               usb_submit_urb(entry, GFP_KERNEL);
+       }
+
+       /* command packet rx procedure */
+       while (skb_queue_len(&priv->rx_queue) < MAX_RX_URB + 3) {
+               skb = __dev_alloc_skb(RX_URB_SIZE, GFP_KERNEL);
+               if (!skb)
+                       break;
+               entry = usb_alloc_urb(0, GFP_KERNEL);
+               if (!entry) {
+                       kfree_skb(skb);
+                       break;
+               }
+               usb_fill_bulk_urb(entry, priv->udev,
+                                 usb_rcvbulkpipe(priv->udev, 9), skb_tail_pointer(skb),
+                                 RX_URB_SIZE, rtl8192_rx_isr, skb);
+               info = (struct rtl8192_rx_info *) skb->cb;
+               info->urb = entry;
+               info->dev = dev;
+               info->out_pipe = 9; //denote rx cmd packet queue
+               skb_queue_tail(&priv->rx_queue, skb);
+               usb_submit_urb(entry, GFP_KERNEL);
+       }
+
+       return 0;
+}
+
+void rtl8192_set_rxconf(struct net_device *dev)
+{
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       u32 rxconf;
+
+       read_nic_dword(dev, RCR, &rxconf);
+       rxconf = rxconf & ~MAC_FILTER_MASK;
+       rxconf = rxconf | RCR_AMF;
+       rxconf = rxconf | RCR_ADF;
+       rxconf = rxconf | RCR_AB;
+       rxconf = rxconf | RCR_AM;
+
+       if (dev->flags & IFF_PROMISC)
+               DMESG("NIC in promisc mode");
+
+       if (priv->ieee80211->iw_mode == IW_MODE_MONITOR ||
+           dev->flags & IFF_PROMISC) {
+               rxconf = rxconf | RCR_AAP;
+       } else {
+               rxconf = rxconf | RCR_APM;
+               rxconf = rxconf | RCR_CBSSID;
+       }
+
+
+       if (priv->ieee80211->iw_mode == IW_MODE_MONITOR) {
+               rxconf = rxconf | RCR_AICV;
+               rxconf = rxconf | RCR_APWRMGT;
+       }
+
+       if (priv->crcmon == 1 && priv->ieee80211->iw_mode == IW_MODE_MONITOR)
+               rxconf = rxconf | RCR_ACRC32;
+
+
+       rxconf = rxconf & ~RX_FIFO_THRESHOLD_MASK;
+       rxconf = rxconf | (RX_FIFO_THRESHOLD_NONE<<RX_FIFO_THRESHOLD_SHIFT);
+       rxconf = rxconf & ~MAX_RX_DMA_MASK;
+       rxconf = rxconf | ((u32)7<<RCR_MXDMA_OFFSET);
+
+       rxconf = rxconf | RCR_ONLYERLPKT;
+
+       write_nic_dword(dev, RCR, rxconf);
+}
+//wait to be removed
+void rtl8192_rx_enable(struct net_device *dev)
+{
+       rtl8192_rx_initiate(dev);
+}
+
+
+void rtl8192_tx_enable(struct net_device *dev)
+{
+}
+
+
+
+void rtl8192_rtx_disable(struct net_device *dev)
+{
+       u8 cmd;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       struct sk_buff *skb;
+       struct rtl8192_rx_info *info;
+
+       read_nic_byte(dev, CMDR, &cmd);
+       write_nic_byte(dev, CMDR, cmd & ~(CR_TE|CR_RE));
+       force_pci_posting(dev);
+       mdelay(10);
+
+       while ((skb = __skb_dequeue(&priv->rx_queue))) {
+               info = (struct rtl8192_rx_info *) skb->cb;
+               if (!info->urb)
+                       continue;
+
+               usb_kill_urb(info->urb);
+               kfree_skb(skb);
+       }
+
+       if (skb_queue_len(&priv->skb_queue))
+               netdev_warn(dev, "skb_queue not empty\n");
+
+       skb_queue_purge(&priv->skb_queue);
+}
+
+inline u16 ieeerate2rtlrate(int rate)
+{
+       switch (rate) {
+       case 10:
+               return 0;
+       case 20:
+               return 1;
+       case 55:
+               return 2;
+       case 110:
+               return 3;
+       case 60:
+               return 4;
+       case 90:
+               return 5;
+       case 120:
+               return 6;
+       case 180:
+               return 7;
+       case 240:
+               return 8;
+       case 360:
+               return 9;
+       case 480:
+               return 10;
+       case 540:
+               return 11;
+       default:
+               return 3;
+
+       }
+}
+static u16 rtl_rate[] = {10, 20, 55, 110, 60, 90, 120, 180, 240, 360, 480, 540};
+inline u16 rtl8192_rate2rate(short rate)
+{
+       if (rate > 11)
+               return 0;
+       return rtl_rate[rate];
+}
+
+
+/* The prototype of rx_isr has changed since one version of Linux Kernel */
+static void rtl8192_rx_isr(struct urb *urb)
+{
+       struct sk_buff *skb = (struct sk_buff *) urb->context;
+       struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
+       struct net_device *dev = info->dev;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       int out_pipe = info->out_pipe;
+       int err;
+       if (!priv->up)
+               return;
+       if (unlikely(urb->status)) {
+               info->urb = NULL;
+               priv->stats.rxstaterr++;
+               priv->ieee80211->stats.rx_errors++;
+               usb_free_urb(urb);
+               return;
+       }
+       skb_unlink(skb, &priv->rx_queue);
+       skb_put(skb, urb->actual_length);
+
+       skb_queue_tail(&priv->skb_queue, skb);
+       tasklet_schedule(&priv->irq_rx_tasklet);
+
+       skb = dev_alloc_skb(RX_URB_SIZE);
+       if (unlikely(!skb)) {
+               usb_free_urb(urb);
+               netdev_err(dev, "%s(): can't alloc skb\n", __func__);
+               /* TODO check rx queue length and refill *somewhere* */
+               return;
+       }
+
+       usb_fill_bulk_urb(urb, priv->udev,
+                         usb_rcvbulkpipe(priv->udev, out_pipe), skb_tail_pointer(skb),
+                         RX_URB_SIZE, rtl8192_rx_isr, skb);
+
+       info = (struct rtl8192_rx_info *) skb->cb;
+       info->urb = urb;
+       info->dev = dev;
+       info->out_pipe = out_pipe;
+
+       urb->transfer_buffer = skb_tail_pointer(skb);
+       urb->context = skb;
+       skb_queue_tail(&priv->rx_queue, skb);
+       err = usb_submit_urb(urb, GFP_ATOMIC);
+       if (err && err != EPERM)
+               netdev_err(dev, "can not submit rxurb, err is %x, URB status is %x\n", err, urb->status);
+}
+
+static u32 rtl819xusb_rx_command_packet(struct net_device *dev,
+                                       struct ieee80211_rx_stats *pstats)
+{
+       u32     status;
+
+       status = cmpk_message_handle_rx(dev, pstats);
+       if (status)
+               DMESG("rxcommandpackethandle819xusb: It is a command packet\n");
+
+       return status;
+}
+
+
+static void rtl8192_data_hard_stop(struct net_device *dev)
+{
+       //FIXME !!
+}
+
+
+static void rtl8192_data_hard_resume(struct net_device *dev)
+{
+       // FIXME !!
+}
+
+/* this function TX data frames when the ieee80211 stack requires this.
+ * It checks also if we need to stop the ieee tx queue, eventually do it
+ */
+static void rtl8192_hard_data_xmit(struct sk_buff *skb, struct net_device *dev, int rate)
+{
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       int ret;
+       unsigned long flags;
+       cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
+       u8 queue_index = tcb_desc->queue_index;
+
+       /* shall not be referred by command packet */
+       RTL8192U_ASSERT(queue_index != TXCMD_QUEUE);
+
+       spin_lock_irqsave(&priv->tx_lock, flags);
+
+       memcpy((unsigned char *)(skb->cb), &dev, sizeof(dev));
+       tcb_desc->bTxEnableFwCalcDur = 1;
+       skb_push(skb, priv->ieee80211->tx_headroom);
+       ret = rtl8192_tx(dev, skb);
+
+       spin_unlock_irqrestore(&priv->tx_lock, flags);
+}
+
+/* This is a rough attempt to TX a frame
+ * This is called by the ieee 80211 stack to TX management frames.
+ * If the ring is full packet are dropped (for data frame the queue
+ * is stopped before this can happen).
+ */
+static int rtl8192_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
+{
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       int ret;
+       unsigned long flags;
+       cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
+       u8 queue_index = tcb_desc->queue_index;
+
+
+       spin_lock_irqsave(&priv->tx_lock, flags);
+
+       memcpy((unsigned char *)(skb->cb), &dev, sizeof(dev));
+       if (queue_index == TXCMD_QUEUE) {
+               skb_push(skb, USB_HWDESC_HEADER_LEN);
+               rtl819xU_tx_cmd(dev, skb);
+               ret = 1;
+               spin_unlock_irqrestore(&priv->tx_lock, flags);
+               return ret;
+       } else {
+               skb_push(skb, priv->ieee80211->tx_headroom);
+               ret = rtl8192_tx(dev, skb);
+       }
+
+       spin_unlock_irqrestore(&priv->tx_lock, flags);
+
+       return ret;
+}
+
+
+void rtl8192_try_wake_queue(struct net_device *dev, int pri);
+
+static void rtl8192_tx_isr(struct urb *tx_urb)
+{
+       struct sk_buff *skb = (struct sk_buff *)tx_urb->context;
+       struct net_device *dev = (struct net_device *)(skb->cb);
+       struct r8192_priv *priv = NULL;
+       cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
+       u8  queue_index = tcb_desc->queue_index;
+
+       priv = ieee80211_priv(dev);
+
+       if (tcb_desc->queue_index != TXCMD_QUEUE) {
+               if (tx_urb->status == 0) {
+                       dev->trans_start = jiffies;
+                       priv->stats.txoktotal++;
+                       priv->ieee80211->LinkDetectInfo.NumTxOkInPeriod++;
+                       priv->stats.txbytesunicast += (skb->len - priv->ieee80211->tx_headroom);
+               } else {
+                       priv->ieee80211->stats.tx_errors++;
+                       /* TODO */
+               }
+       }
+
+       /* free skb and tx_urb */
+       if (skb != NULL) {
+               dev_kfree_skb_any(skb);
+               usb_free_urb(tx_urb);
+               atomic_dec(&priv->tx_pending[queue_index]);
+       }
+
+       //
+       // Handle HW Beacon:
+       // We had transfer our beacon frame to host controller at this moment.
+       //
+       //
+       // Caution:
+       // Handling the wait queue of command packets.
+       // For Tx command packets, we must not do TCB fragment because it is not handled right now.
+       // We must cut the packets to match the size of TX_CMD_PKT before we send it.
+       //
+
+       /* Handle MPDU in wait queue. */
+       if (queue_index != BEACON_QUEUE) {
+               /* Don't send data frame during scanning.*/
+               if ((skb_queue_len(&priv->ieee80211->skb_waitQ[queue_index]) != 0) &&
+                   (!(priv->ieee80211->queue_stop))) {
+                       skb = skb_dequeue(&(priv->ieee80211->skb_waitQ[queue_index]));
+                       if (skb)
+                               priv->ieee80211->softmac_hard_start_xmit(skb, dev);
+
+                       return; //modified by david to avoid further processing AMSDU
+               }
+       }
+
+}
+
+static void rtl8192_config_rate(struct net_device *dev, u16 *rate_config)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       struct ieee80211_network *net;
+       u8 i = 0, basic_rate = 0;
+       net = &priv->ieee80211->current_network;
+
+       for (i = 0; i < net->rates_len; i++) {
+               basic_rate = net->rates[i]&0x7f;
+               switch (basic_rate) {
+               case MGN_1M:
+                       *rate_config |= RRSR_1M;
+                       break;
+               case MGN_2M:
+                       *rate_config |= RRSR_2M;
+                       break;
+               case MGN_5_5M:
+                       *rate_config |= RRSR_5_5M;
+                       break;
+               case MGN_11M:
+                       *rate_config |= RRSR_11M;
+                       break;
+               case MGN_6M:
+                       *rate_config |= RRSR_6M;
+                       break;
+               case MGN_9M:
+                       *rate_config |= RRSR_9M;
+                       break;
+               case MGN_12M:
+                       *rate_config |= RRSR_12M;
+                       break;
+               case MGN_18M:
+                       *rate_config |= RRSR_18M;
+                       break;
+               case MGN_24M:
+                       *rate_config |= RRSR_24M;
+                       break;
+               case MGN_36M:
+                       *rate_config |= RRSR_36M;
+                       break;
+               case MGN_48M:
+                       *rate_config |= RRSR_48M;
+                       break;
+               case MGN_54M:
+                       *rate_config |= RRSR_54M;
+                       break;
+               }
+       }
+       for (i = 0; i < net->rates_ex_len; i++) {
+               basic_rate = net->rates_ex[i]&0x7f;
+               switch (basic_rate) {
+               case MGN_1M:
+                       *rate_config |= RRSR_1M;
+                       break;
+               case MGN_2M:
+                       *rate_config |= RRSR_2M;
+                       break;
+               case MGN_5_5M:
+                       *rate_config |= RRSR_5_5M;
+                       break;
+               case MGN_11M:
+                       *rate_config |= RRSR_11M;
+                       break;
+               case MGN_6M:
+                       *rate_config |= RRSR_6M;
+                       break;
+               case MGN_9M:
+                       *rate_config |= RRSR_9M;
+                       break;
+               case MGN_12M:
+                       *rate_config |= RRSR_12M;
+                       break;
+               case MGN_18M:
+                       *rate_config |= RRSR_18M;
+                       break;
+               case MGN_24M:
+                       *rate_config |= RRSR_24M;
+                       break;
+               case MGN_36M:
+                       *rate_config |= RRSR_36M;
+                       break;
+               case MGN_48M:
+                       *rate_config |= RRSR_48M;
+                       break;
+               case MGN_54M:
+                       *rate_config |= RRSR_54M;
+                       break;
+               }
+       }
+}
+
+
+#define SHORT_SLOT_TIME 9
+#define NON_SHORT_SLOT_TIME 20
+
+static void rtl8192_update_cap(struct net_device *dev, u16 cap)
+{
+       u32 tmp = 0;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       struct ieee80211_network *net = &priv->ieee80211->current_network;
+       priv->short_preamble = cap & WLAN_CAPABILITY_SHORT_PREAMBLE;
+       tmp = priv->basic_rate;
+       if (priv->short_preamble)
+               tmp |= BRSR_AckShortPmb;
+       write_nic_dword(dev, RRSR, tmp);
+
+       if (net->mode & (IEEE_G|IEEE_N_24G)) {
+               u8 slot_time = 0;
+               if ((cap & WLAN_CAPABILITY_SHORT_SLOT) && (!priv->ieee80211->pHTInfo->bCurrentRT2RTLongSlotTime)) /* short slot time */
+                       slot_time = SHORT_SLOT_TIME;
+               else //long slot time
+                       slot_time = NON_SHORT_SLOT_TIME;
+               priv->slot_time = slot_time;
+               write_nic_byte(dev, SLOT_TIME, slot_time);
+       }
+
+}
+static void rtl8192_net_update(struct net_device *dev)
+{
+
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       struct ieee80211_network *net;
+       u16 BcnTimeCfg = 0, BcnCW = 6, BcnIFS = 0xf;
+       u16 rate_config = 0;
+       net = &priv->ieee80211->current_network;
+
+       rtl8192_config_rate(dev, &rate_config);
+       priv->basic_rate = rate_config & 0x15f;
+
+       write_nic_dword(dev, BSSIDR, ((u32 *)net->bssid)[0]);
+       write_nic_word(dev, BSSIDR+4, ((u16 *)net->bssid)[2]);
+
+       rtl8192_update_msr(dev);
+       if (priv->ieee80211->iw_mode == IW_MODE_ADHOC) {
+               write_nic_word(dev, ATIMWND, 2);
+               write_nic_word(dev, BCN_DMATIME, 1023);
+               write_nic_word(dev, BCN_INTERVAL, net->beacon_interval);
+               write_nic_word(dev, BCN_DRV_EARLY_INT, 1);
+               write_nic_byte(dev, BCN_ERR_THRESH, 100);
+               BcnTimeCfg |= (BcnCW<<BCN_TCFG_CW_SHIFT);
+               // TODO: BcnIFS may required to be changed on ASIC
+               BcnTimeCfg |= BcnIFS<<BCN_TCFG_IFS;
+
+               write_nic_word(dev, BCN_TCFG, BcnTimeCfg);
+       }
+
+
+
+}
+
+//temporary hw beacon is not used any more.
+//open it when necessary
+void rtl819xusb_beacon_tx(struct net_device *dev, u16  tx_rate)
+{
+
+}
+inline u8 rtl8192_IsWirelessBMode(u16 rate)
+{
+       if (((rate <= 110) && (rate != 60) && (rate != 90)) || (rate == 220))
+               return 1;
+       else
+               return 0;
+}
+
+u16 N_DBPSOfRate(u16 DataRate);
+
+
+u16 N_DBPSOfRate(u16 DataRate)
+{
+       u16 N_DBPS = 24;
+
+       switch (DataRate) {
+       case 60:
+               N_DBPS = 24;
+               break;
+
+       case 90:
+               N_DBPS = 36;
+               break;
+
+       case 120:
+               N_DBPS = 48;
+               break;
+
+       case 180:
+               N_DBPS = 72;
+               break;
+
+       case 240:
+               N_DBPS = 96;
+               break;
+
+       case 360:
+               N_DBPS = 144;
+               break;
+
+       case 480:
+               N_DBPS = 192;
+               break;
+
+       case 540:
+               N_DBPS = 216;
+               break;
+
+       default:
+               break;
+       }
+
+       return N_DBPS;
+}
+
+short rtl819xU_tx_cmd(struct net_device *dev, struct sk_buff *skb)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       int                     status;
+       struct urb              *tx_urb;
+       unsigned int            idx_pipe;
+       tx_desc_cmd_819x_usb *pdesc = (tx_desc_cmd_819x_usb *)skb->data;
+       cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
+       u8 queue_index = tcb_desc->queue_index;
+
+       atomic_inc(&priv->tx_pending[queue_index]);
+       tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
+       if (!tx_urb) {
+               dev_kfree_skb(skb);
+               return -ENOMEM;
+       }
+
+       memset(pdesc, 0, USB_HWDESC_HEADER_LEN);
+       /* Tx descriptor ought to be set according to the skb->cb */
+       pdesc->FirstSeg = 1;//bFirstSeg;
+       pdesc->LastSeg = 1;//bLastSeg;
+       pdesc->CmdInit = tcb_desc->bCmdOrInit;
+       pdesc->TxBufferSize = tcb_desc->txbuf_size;
+       pdesc->OWN = 1;
+       pdesc->LINIP = tcb_desc->bLastIniPkt;
+
+       //----------------------------------------------------------------------------
+       // Fill up USB_OUT_CONTEXT.
+       //----------------------------------------------------------------------------
+       idx_pipe = 0x04;
+       usb_fill_bulk_urb(tx_urb, priv->udev, usb_sndbulkpipe(priv->udev, idx_pipe),
+                         skb->data, skb->len, rtl8192_tx_isr, skb);
+
+       status = usb_submit_urb(tx_urb, GFP_ATOMIC);
+
+       if (!status) {
+               return 0;
+       } else {
+               DMESGE("Error TX CMD URB, error %d", status);
+               return -1;
+       }
+}
+
+/*
+ * Mapping Software/Hardware descriptor queue id to "Queue Select Field"
+ * in TxFwInfo data structure
+ * 2006.10.30 by Emily
+ *
+ * \param QUEUEID       Software Queue
+*/
+static u8 MapHwQueueToFirmwareQueue(u8 QueueID)
+{
+       u8 QueueSelect = 0x0;       //defualt set to
+
+       switch (QueueID) {
+       case BE_QUEUE:
+               QueueSelect = QSLT_BE;
+               break;
+
+       case BK_QUEUE:
+               QueueSelect = QSLT_BK;
+               break;
+
+       case VO_QUEUE:
+               QueueSelect = QSLT_VO;
+               break;
+
+       case VI_QUEUE:
+               QueueSelect = QSLT_VI;
+               break;
+       case MGNT_QUEUE:
+               QueueSelect = QSLT_MGNT;
+               break;
+
+       case BEACON_QUEUE:
+               QueueSelect = QSLT_BEACON;
+               break;
+
+               // TODO: 2006.10.30 mark other queue selection until we verify it is OK
+               // TODO: Remove Assertions
+       case TXCMD_QUEUE:
+               QueueSelect = QSLT_CMD;
+               break;
+       case HIGH_QUEUE:
+               QueueSelect = QSLT_HIGH;
+               break;
+
+       default:
+               RT_TRACE(COMP_ERR, "TransmitTCB(): Impossible Queue Selection: %d \n", QueueID);
+               break;
+       }
+       return QueueSelect;
+}
+
+static u8 MRateToHwRate8190Pci(u8 rate)
+{
+       u8  ret = DESC90_RATE1M;
+
+       switch (rate) {
+       case MGN_1M:
+               ret = DESC90_RATE1M;
+               break;
+       case MGN_2M:
+               ret = DESC90_RATE2M;
+               break;
+       case MGN_5_5M:
+               ret = DESC90_RATE5_5M;
+               break;
+       case MGN_11M:
+               ret = DESC90_RATE11M;
+               break;
+       case MGN_6M:
+               ret = DESC90_RATE6M;
+               break;
+       case MGN_9M:
+               ret = DESC90_RATE9M;
+               break;
+       case MGN_12M:
+               ret = DESC90_RATE12M;
+               break;
+       case MGN_18M:
+               ret = DESC90_RATE18M;
+               break;
+       case MGN_24M:
+               ret = DESC90_RATE24M;
+               break;
+       case MGN_36M:
+               ret = DESC90_RATE36M;
+               break;
+       case MGN_48M:
+               ret = DESC90_RATE48M;
+               break;
+       case MGN_54M:
+               ret = DESC90_RATE54M;
+               break;
+
+       /* HT rate since here */
+       case MGN_MCS0:
+               ret = DESC90_RATEMCS0;
+               break;
+       case MGN_MCS1:
+               ret = DESC90_RATEMCS1;
+               break;
+       case MGN_MCS2:
+               ret = DESC90_RATEMCS2;
+               break;
+       case MGN_MCS3:
+               ret = DESC90_RATEMCS3;
+               break;
+       case MGN_MCS4:
+               ret = DESC90_RATEMCS4;
+               break;
+       case MGN_MCS5:
+               ret = DESC90_RATEMCS5;
+               break;
+       case MGN_MCS6:
+               ret = DESC90_RATEMCS6;
+               break;
+       case MGN_MCS7:
+               ret = DESC90_RATEMCS7;
+               break;
+       case MGN_MCS8:
+               ret = DESC90_RATEMCS8;
+               break;
+       case MGN_MCS9:
+               ret = DESC90_RATEMCS9;
+               break;
+       case MGN_MCS10:
+               ret = DESC90_RATEMCS10;
+               break;
+       case MGN_MCS11:
+               ret = DESC90_RATEMCS11;
+               break;
+       case MGN_MCS12:
+               ret = DESC90_RATEMCS12;
+               break;
+       case MGN_MCS13:
+               ret = DESC90_RATEMCS13;
+               break;
+       case MGN_MCS14:
+               ret = DESC90_RATEMCS14;
+               break;
+       case MGN_MCS15:
+               ret = DESC90_RATEMCS15;
+               break;
+       case (0x80|0x20):
+               ret = DESC90_RATEMCS32;
+               break;
+
+       default:
+               break;
+       }
+       return ret;
+}
+
+
+static u8 QueryIsShort(u8 TxHT, u8 TxRate, cb_desc *tcb_desc)
+{
+       u8   tmp_Short;
+
+       tmp_Short = (TxHT == 1) ? ((tcb_desc->bUseShortGI) ? 1 : 0) : ((tcb_desc->bUseShortPreamble) ? 1 : 0);
+
+       if (TxHT == 1 && TxRate != DESC90_RATEMCS15)
+               tmp_Short = 0;
+
+       return tmp_Short;
+}
+
+static void tx_zero_isr(struct urb *tx_urb)
+{
+       return;
+}
+
+/*
+ * The tx procedure is just as following,
+ * skb->cb will contain all the following information,
+ * priority, morefrag, rate, &dev.
+ * */
+short rtl8192_tx(struct net_device *dev, struct sk_buff *skb)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       cb_desc *tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
+       tx_desc_819x_usb *tx_desc = (tx_desc_819x_usb *)skb->data;
+       tx_fwinfo_819x_usb *tx_fwinfo = (tx_fwinfo_819x_usb *)(skb->data + USB_HWDESC_HEADER_LEN);
+       struct usb_device *udev = priv->udev;
+       int pend;
+       int status;
+       struct urb *tx_urb = NULL, *tx_urb_zero = NULL;
+       unsigned int idx_pipe;
+       pend = atomic_read(&priv->tx_pending[tcb_desc->queue_index]);
+       /* we are locked here so the two atomic_read and inc are executed
+        * without interleaves
+        * !!! For debug purpose
+        */
+       if (pend > MAX_TX_URB) {
+               netdev_dbg(dev, "To discard skb packet!\n");
+               dev_kfree_skb_any(skb);
+               return -1;
+       }
+
+       tx_urb = usb_alloc_urb(0, GFP_ATOMIC);
+       if (!tx_urb) {
+               dev_kfree_skb_any(skb);
+               return -ENOMEM;
+       }
+
+       /* Fill Tx firmware info */
+       memset(tx_fwinfo, 0, sizeof(tx_fwinfo_819x_usb));
+       /* DWORD 0 */
+       tx_fwinfo->TxHT = (tcb_desc->data_rate&0x80) ? 1 : 0;
+       tx_fwinfo->TxRate = MRateToHwRate8190Pci(tcb_desc->data_rate);
+       tx_fwinfo->EnableCPUDur = tcb_desc->bTxEnableFwCalcDur;
+       tx_fwinfo->Short = QueryIsShort(tx_fwinfo->TxHT, tx_fwinfo->TxRate, tcb_desc);
+       if (tcb_desc->bAMPDUEnable) { /* AMPDU enabled */
+               tx_fwinfo->AllowAggregation = 1;
+               /* DWORD 1 */
+               tx_fwinfo->RxMF = tcb_desc->ampdu_factor;
+               tx_fwinfo->RxAMD = tcb_desc->ampdu_density&0x07;//ampdudensity
+       } else {
+               tx_fwinfo->AllowAggregation = 0;
+               /* DWORD 1 */
+               tx_fwinfo->RxMF = 0;
+               tx_fwinfo->RxAMD = 0;
+       }
+
+       /* Protection mode related */
+       tx_fwinfo->RtsEnable = (tcb_desc->bRTSEnable) ? 1 : 0;
+       tx_fwinfo->CtsEnable = (tcb_desc->bCTSEnable) ? 1 : 0;
+       tx_fwinfo->RtsSTBC = (tcb_desc->bRTSSTBC) ? 1 : 0;
+       tx_fwinfo->RtsHT = (tcb_desc->rts_rate&0x80) ? 1 : 0;
+       tx_fwinfo->RtsRate =  MRateToHwRate8190Pci((u8)tcb_desc->rts_rate);
+       tx_fwinfo->RtsSubcarrier = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->RTSSC) : 0;
+       tx_fwinfo->RtsBandwidth = (tx_fwinfo->RtsHT == 1) ? ((tcb_desc->bRTSBW) ? 1 : 0) : 0;
+       tx_fwinfo->RtsShort = (tx_fwinfo->RtsHT == 0) ? (tcb_desc->bRTSUseShortPreamble ? 1 : 0) :
+                             (tcb_desc->bRTSUseShortGI ? 1 : 0);
+
+       /* Set Bandwidth and sub-channel settings. */
+       if (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20_40) {
+               if (tcb_desc->bPacketBW) {
+                       tx_fwinfo->TxBandwidth = 1;
+                       tx_fwinfo->TxSubCarrier = 0;    //By SD3's Jerry suggestion, use duplicated mode
+               } else {
+                       tx_fwinfo->TxBandwidth = 0;
+                       tx_fwinfo->TxSubCarrier = priv->nCur40MhzPrimeSC;
+               }
+       } else {
+               tx_fwinfo->TxBandwidth = 0;
+               tx_fwinfo->TxSubCarrier = 0;
+       }
+
+       /* Fill Tx descriptor */
+       memset(tx_desc, 0, sizeof(tx_desc_819x_usb));
+       /* DWORD 0 */
+       tx_desc->LINIP = 0;
+       tx_desc->CmdInit = 1;
+       tx_desc->Offset =  sizeof(tx_fwinfo_819x_usb) + 8;
+       tx_desc->PktSize = (skb->len - TX_PACKET_SHIFT_BYTES) & 0xffff;
+
+       /*DWORD 1*/
+       tx_desc->SecCAMID = 0;
+       tx_desc->RATid = tcb_desc->RATRIndex;
+       tx_desc->NoEnc = 1;
+       tx_desc->SecType = 0x0;
+       if (tcb_desc->bHwSec) {
+               switch (priv->ieee80211->pairwise_key_type) {
+               case KEY_TYPE_WEP40:
+               case KEY_TYPE_WEP104:
+                       tx_desc->SecType = 0x1;
+                       tx_desc->NoEnc = 0;
+                       break;
+               case KEY_TYPE_TKIP:
+                       tx_desc->SecType = 0x2;
+                       tx_desc->NoEnc = 0;
+                       break;
+               case KEY_TYPE_CCMP:
+                       tx_desc->SecType = 0x3;
+                       tx_desc->NoEnc = 0;
+                       break;
+               case KEY_TYPE_NA:
+                       tx_desc->SecType = 0x0;
+                       tx_desc->NoEnc = 1;
+                       break;
+               }
+       }
+
+       tx_desc->QueueSelect = MapHwQueueToFirmwareQueue(tcb_desc->queue_index);
+       tx_desc->TxFWInfoSize =  sizeof(tx_fwinfo_819x_usb);
+
+       tx_desc->DISFB = tcb_desc->bTxDisableRateFallBack;
+       tx_desc->USERATE = tcb_desc->bTxUseDriverAssingedRate;
+
+       /* Fill fields that are required to be initialized in all of the descriptors */
+       //DWORD 0
+       tx_desc->FirstSeg = 1;
+       tx_desc->LastSeg = 1;
+       tx_desc->OWN = 1;
+
+       /* DWORD 2 */
+       tx_desc->TxBufferSize = (u32)(skb->len - USB_HWDESC_HEADER_LEN);
+       idx_pipe = 0x5;
+
+       /* To submit bulk urb */
+       usb_fill_bulk_urb(tx_urb, udev,
+                         usb_sndbulkpipe(udev, idx_pipe), skb->data,
+                         skb->len, rtl8192_tx_isr, skb);
+
+       status = usb_submit_urb(tx_urb, GFP_ATOMIC);
+       if (!status) {
+               //we need to send 0 byte packet whenever 512N bytes/64N(HIGN SPEED/NORMAL SPEED) bytes packet has been transmitted. Otherwise, it will be halt to wait for another packet. WB. 2008.08.27
+               bool bSend0Byte = false;
+               u8 zero = 0;
+               if (udev->speed == USB_SPEED_HIGH) {
+                       if (skb->len > 0 && skb->len % 512 == 0)
+                               bSend0Byte = true;
+               } else {
+                       if (skb->len > 0 && skb->len % 64 == 0)
+                               bSend0Byte = true;
+               }
+               if (bSend0Byte) {
+                       tx_urb_zero = usb_alloc_urb(0, GFP_ATOMIC);
+                       if (!tx_urb_zero) {
+                               RT_TRACE(COMP_ERR, "can't alloc urb for zero byte\n");
+                               return -ENOMEM;
+                       }
+                       usb_fill_bulk_urb(tx_urb_zero, udev,
+                                         usb_sndbulkpipe(udev, idx_pipe), &zero,
+                                         0, tx_zero_isr, dev);
+                       status = usb_submit_urb(tx_urb_zero, GFP_ATOMIC);
+                       if (status) {
+                               RT_TRACE(COMP_ERR, "Error TX URB for zero byte %d, error %d", atomic_read(&priv->tx_pending[tcb_desc->queue_index]), status);
+                               return -1;
+                       }
+               }
+               dev->trans_start = jiffies;
+               atomic_inc(&priv->tx_pending[tcb_desc->queue_index]);
+               return 0;
+       } else {
+               RT_TRACE(COMP_ERR, "Error TX URB %d, error %d", atomic_read(&priv->tx_pending[tcb_desc->queue_index]),
+                        status);
+               return -1;
+       }
+}
+
+static short rtl8192_usb_initendpoints(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+       priv->rx_urb = kmalloc(sizeof(struct urb *) * (MAX_RX_URB+1),
+                              GFP_KERNEL);
+       if (priv->rx_urb == NULL)
+               return -ENOMEM;
+
+#ifndef JACKSON_NEW_RX
+       for (i = 0; i < (MAX_RX_URB+1); i++) {
+
+               priv->rx_urb[i] = usb_alloc_urb(0, GFP_KERNEL);
+
+               priv->rx_urb[i]->transfer_buffer = kmalloc(RX_URB_SIZE, GFP_KERNEL);
+
+               priv->rx_urb[i]->transfer_buffer_length = RX_URB_SIZE;
+       }
+#endif
+
+#ifdef THOMAS_BEACON
+       {
+               long align = 0;
+               void *oldaddr, *newaddr;
+
+               priv->rx_urb[16] = usb_alloc_urb(0, GFP_KERNEL);
+               priv->oldaddr = kmalloc(16, GFP_KERNEL);
+               oldaddr = priv->oldaddr;
+               align = ((long)oldaddr) & 3;
+               if (align) {
+                       newaddr = oldaddr + 4 - align;
+                       priv->rx_urb[16]->transfer_buffer_length = 16 - 4 + align;
+               } else {
+                       newaddr = oldaddr;
+                       priv->rx_urb[16]->transfer_buffer_length = 16;
+               }
+               priv->rx_urb[16]->transfer_buffer = newaddr;
+       }
+#endif
+
+       memset(priv->rx_urb, 0, sizeof(struct urb *) * MAX_RX_URB);
+       priv->pp_rxskb = kcalloc(MAX_RX_URB, sizeof(struct sk_buff *),
+                                GFP_KERNEL);
+       if (!priv->pp_rxskb) {
+               kfree(priv->rx_urb);
+
+               priv->pp_rxskb = NULL;
+               priv->rx_urb = NULL;
+
+               DMESGE("Endpoint Alloc Failure");
+               return -ENOMEM;
+       }
+
+       netdev_dbg(dev, "End of initendpoints\n");
+       return 0;
+
+}
+#ifdef THOMAS_BEACON
+static void rtl8192_usb_deleteendpoints(struct net_device *dev)
+{
+       int i;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+       if (priv->rx_urb) {
+               for (i = 0; i < (MAX_RX_URB+1); i++) {
+                       usb_kill_urb(priv->rx_urb[i]);
+                       usb_free_urb(priv->rx_urb[i]);
+               }
+               kfree(priv->rx_urb);
+               priv->rx_urb = NULL;
+       }
+       kfree(priv->oldaddr);
+       priv->oldaddr = NULL;
+       if (priv->pp_rxskb) {
+               kfree(priv->pp_rxskb);
+               priv->pp_rxskb = NULL;
+       }
+}
+#else
+void rtl8192_usb_deleteendpoints(struct net_device *dev)
+{
+       int i;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+#ifndef JACKSON_NEW_RX
+
+       if (priv->rx_urb) {
+               for (i = 0; i < (MAX_RX_URB+1); i++) {
+                       usb_kill_urb(priv->rx_urb[i]);
+                       kfree(priv->rx_urb[i]->transfer_buffer);
+                       usb_free_urb(priv->rx_urb[i]);
+               }
+               kfree(priv->rx_urb);
+               priv->rx_urb = NULL;
+
+       }
+#else
+       kfree(priv->rx_urb);
+       priv->rx_urb = NULL;
+       kfree(priv->oldaddr);
+       priv->oldaddr = NULL;
+       if (priv->pp_rxskb) {
+               kfree(priv->pp_rxskb);
+               priv->pp_rxskb = 0;
+
+       }
+
+#endif
+}
+#endif
+
+static void rtl8192_update_ratr_table(struct net_device *dev);
+static void rtl8192_link_change(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       struct ieee80211_device *ieee = priv->ieee80211;
+       if (ieee->state == IEEE80211_LINKED) {
+               rtl8192_net_update(dev);
+               rtl8192_update_ratr_table(dev);
+               //add this as in pure N mode, wep encryption will use software way, but there is no chance to set this as wep will not set group key in wext. WB.2008.07.08
+               if ((KEY_TYPE_WEP40 == ieee->pairwise_key_type) || (KEY_TYPE_WEP104 == ieee->pairwise_key_type))
+                       EnableHWSecurityConfig8192(dev);
+       }
+       /*update timing params*/
+       if (ieee->iw_mode == IW_MODE_INFRA || ieee->iw_mode == IW_MODE_ADHOC) {
+               u32 reg = 0;
+               read_nic_dword(dev, RCR, &reg);
+               if (priv->ieee80211->state == IEEE80211_LINKED)
+                       priv->ReceiveConfig = reg |= RCR_CBSSID;
+               else
+                       priv->ReceiveConfig = reg &= ~RCR_CBSSID;
+               write_nic_dword(dev, RCR, reg);
+       }
+}
+
+static struct ieee80211_qos_parameters def_qos_parameters = {
+       {cpu_to_le16(3), cpu_to_le16(3), cpu_to_le16(3), cpu_to_le16(3)},
+       {cpu_to_le16(7), cpu_to_le16(7), cpu_to_le16(7), cpu_to_le16(7)},
+       {2, 2, 2, 2},/* aifs */
+       {0, 0, 0, 0},/* flags */
+       {0, 0, 0, 0} /* tx_op_limit */
+};
+
+
+static void rtl8192_update_beacon(struct work_struct *work)
+{
+       struct r8192_priv *priv = container_of(work, struct r8192_priv, update_beacon_wq.work);
+       struct net_device *dev = priv->ieee80211->dev;
+       struct ieee80211_device *ieee = priv->ieee80211;
+       struct ieee80211_network *net = &ieee->current_network;
+
+       if (ieee->pHTInfo->bCurrentHTSupport)
+               HTUpdateSelfAndPeerSetting(ieee, net);
+       ieee->pHTInfo->bCurrentRT2RTLongSlotTime = net->bssht.bdRT2RTLongSlotTime;
+       rtl8192_update_cap(dev, net->capability);
+}
+/*
+* background support to run QoS activate functionality
+*/
+static int WDCAPARA_ADD[] = {EDCAPARA_BE, EDCAPARA_BK, EDCAPARA_VI, EDCAPARA_VO};
+static void rtl8192_qos_activate(struct work_struct *work)
+{
+       struct r8192_priv *priv = container_of(work, struct r8192_priv, qos_activate);
+       struct net_device *dev = priv->ieee80211->dev;
+       struct ieee80211_qos_parameters *qos_parameters = &priv->ieee80211->current_network.qos_data.parameters;
+       u8 mode = priv->ieee80211->current_network.mode;
+       u32  u1bAIFS;
+       u32 u4bAcParam;
+       u32 op_limit;
+       u32 cw_max;
+       u32 cw_min;
+       int i;
+
+       mutex_lock(&priv->mutex);
+       if (priv->ieee80211->state != IEEE80211_LINKED)
+               goto success;
+       RT_TRACE(COMP_QOS, "qos active process with associate response received\n");
+       /* It better set slot time at first */
+       /* For we just support b/g mode at present, let the slot time at 9/20 selection */
+       /* update the ac parameter to related registers */
+       for (i = 0; i <  QOS_QUEUE_NUM; i++) {
+               //Mode G/A: slotTimeTimer = 9; Mode B: 20
+               u1bAIFS = qos_parameters->aifs[i] * ((mode&(IEEE_G|IEEE_N_24G)) ? 9 : 20) + aSifsTime;
+               u1bAIFS <<= AC_PARAM_AIFS_OFFSET;
+               op_limit = (u32)le16_to_cpu(qos_parameters->tx_op_limit[i]);
+               op_limit <<= AC_PARAM_TXOP_LIMIT_OFFSET;
+               cw_max = (u32)le16_to_cpu(qos_parameters->cw_max[i]);
+               cw_max <<= AC_PARAM_ECW_MAX_OFFSET;
+               cw_min = (u32)le16_to_cpu(qos_parameters->cw_min[i]);
+               cw_min <<= AC_PARAM_ECW_MIN_OFFSET;
+               u4bAcParam = op_limit | cw_max | cw_min | u1bAIFS;
+               write_nic_dword(dev, WDCAPARA_ADD[i], u4bAcParam);
+       }
+
+success:
+       mutex_unlock(&priv->mutex);
+}
+
+static int rtl8192_qos_handle_probe_response(struct r8192_priv *priv,
+                                            int active_network,
+                                            struct ieee80211_network *network)
+{
+       int ret = 0;
+       u32 size = sizeof(struct ieee80211_qos_parameters);
+
+       if (priv->ieee80211->state != IEEE80211_LINKED)
+               return ret;
+
+       if ((priv->ieee80211->iw_mode != IW_MODE_INFRA))
+               return ret;
+
+       if (network->flags & NETWORK_HAS_QOS_MASK) {
+               if (active_network &&
+                   (network->flags & NETWORK_HAS_QOS_PARAMETERS))
+                       network->qos_data.active = network->qos_data.supported;
+
+               if ((network->qos_data.active == 1) && (active_network == 1) &&
+                   (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
+                   (network->qos_data.old_param_count !=
+                    network->qos_data.param_count)) {
+                       network->qos_data.old_param_count =
+                               network->qos_data.param_count;
+                       queue_work(priv->priv_wq, &priv->qos_activate);
+                       RT_TRACE(COMP_QOS, "QoS parameters change call "
+                                "qos_activate\n");
+               }
+       } else {
+               memcpy(&priv->ieee80211->current_network.qos_data.parameters,
+                      &def_qos_parameters, size);
+
+               if ((network->qos_data.active == 1) && (active_network == 1)) {
+                       queue_work(priv->priv_wq, &priv->qos_activate);
+                       RT_TRACE(COMP_QOS, "QoS was disabled call qos_activate \n");
+               }
+               network->qos_data.active = 0;
+               network->qos_data.supported = 0;
+       }
+
+       return 0;
+}
+
+/* handle and manage frame from beacon and probe response */
+static int rtl8192_handle_beacon(struct net_device *dev,
+                                struct ieee80211_beacon *beacon,
+                                struct ieee80211_network *network)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+       rtl8192_qos_handle_probe_response(priv, 1, network);
+       queue_delayed_work(priv->priv_wq, &priv->update_beacon_wq, 0);
+       return 0;
+
+}
+
+/*
+* handling the beaconing responses. if we get different QoS setting
+* off the network from the associated setting, adjust the QoS
+* setting
+*/
+static int rtl8192_qos_association_resp(struct r8192_priv *priv,
+                                       struct ieee80211_network *network)
+{
+       unsigned long flags;
+       u32 size = sizeof(struct ieee80211_qos_parameters);
+       int set_qos_param = 0;
+
+       if ((priv == NULL) || (network == NULL))
+               return 0;
+
+       if (priv->ieee80211->state != IEEE80211_LINKED)
+               return 0;
+
+       if ((priv->ieee80211->iw_mode != IW_MODE_INFRA))
+               return 0;
+
+       spin_lock_irqsave(&priv->ieee80211->lock, flags);
+       if (network->flags & NETWORK_HAS_QOS_PARAMETERS) {
+               memcpy(&priv->ieee80211->current_network.qos_data.parameters,
+                      &network->qos_data.parameters,
+                      sizeof(struct ieee80211_qos_parameters));
+               priv->ieee80211->current_network.qos_data.active = 1;
+               set_qos_param = 1;
+               /* update qos parameter for current network */
+               priv->ieee80211->current_network.qos_data.old_param_count =
+                       priv->ieee80211->current_network.qos_data.param_count;
+               priv->ieee80211->current_network.qos_data.param_count =
+                       network->qos_data.param_count;
+       } else {
+               memcpy(&priv->ieee80211->current_network.qos_data.parameters,
+                      &def_qos_parameters, size);
+               priv->ieee80211->current_network.qos_data.active = 0;
+               priv->ieee80211->current_network.qos_data.supported = 0;
+               set_qos_param = 1;
+       }
+
+       spin_unlock_irqrestore(&priv->ieee80211->lock, flags);
+
+       RT_TRACE(COMP_QOS, "%s: network->flags = %d,%d\n", __func__, network->flags, priv->ieee80211->current_network.qos_data.active);
+       if (set_qos_param == 1)
+               queue_work(priv->priv_wq, &priv->qos_activate);
+
+
+       return 0;
+}
+
+
+static int rtl8192_handle_assoc_response(struct net_device *dev,
+                                        struct ieee80211_assoc_response_frame *resp,
+                                        struct ieee80211_network *network)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       rtl8192_qos_association_resp(priv, network);
+       return 0;
+}
+
+
+static void rtl8192_update_ratr_table(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       struct ieee80211_device *ieee = priv->ieee80211;
+       u8 *pMcsRate = ieee->dot11HTOperationalRateSet;
+       u32 ratr_value = 0;
+       u8 rate_index = 0;
+       rtl8192_config_rate(dev, (u16 *)(&ratr_value));
+       ratr_value |= (*(u16 *)(pMcsRate)) << 12;
+       switch (ieee->mode) {
+       case IEEE_A:
+               ratr_value &= 0x00000FF0;
+               break;
+       case IEEE_B:
+               ratr_value &= 0x0000000F;
+               break;
+       case IEEE_G:
+               ratr_value &= 0x00000FF7;
+               break;
+       case IEEE_N_24G:
+       case IEEE_N_5G:
+               if (ieee->pHTInfo->PeerMimoPs == 0) { /* MIMO_PS_STATIC */
+                       ratr_value &= 0x0007F007;
+               } else {
+                       if (priv->rf_type == RF_1T2R)
+                               ratr_value &= 0x000FF007;
+                       else
+                               ratr_value &= 0x0F81F007;
+               }
+               break;
+       default:
+               break;
+       }
+       ratr_value &= 0x0FFFFFFF;
+       if (ieee->pHTInfo->bCurTxBW40MHz && ieee->pHTInfo->bCurShortGI40MHz)
+               ratr_value |= 0x80000000;
+       else if (!ieee->pHTInfo->bCurTxBW40MHz && ieee->pHTInfo->bCurShortGI20MHz)
+               ratr_value |= 0x80000000;
+       write_nic_dword(dev, RATR0+rate_index*4, ratr_value);
+       write_nic_byte(dev, UFWP, 1);
+}
+
+static u8 ccmp_ie[4] = {0x00, 0x50, 0xf2, 0x04};
+static u8 ccmp_rsn_ie[4] = {0x00, 0x0f, 0xac, 0x04};
+static bool GetNmodeSupportBySecCfg8192(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       struct ieee80211_device *ieee = priv->ieee80211;
+       struct ieee80211_network *network = &ieee->current_network;
+       int wpa_ie_len = ieee->wpa_ie_len;
+       struct ieee80211_crypt_data *crypt;
+       int encrypt;
+
+       crypt = ieee->crypt[ieee->tx_keyidx];
+       //we use connecting AP's capability instead of only security config on our driver to distinguish whether it should use N mode or G mode
+       encrypt = (network->capability & WLAN_CAPABILITY_PRIVACY) || (ieee->host_encrypt && crypt && crypt->ops && (0 == strcmp(crypt->ops->name, "WEP")));
+
+       /* simply judge  */
+       if (encrypt && (wpa_ie_len == 0)) {
+               /* wep encryption, no N mode setting */
+               return false;
+       } else if ((wpa_ie_len != 0)) {
+               /* parse pairwise key type */
+               if (((ieee->wpa_ie[0] == 0xdd) && (!memcmp(&(ieee->wpa_ie[14]), ccmp_ie, 4))) || ((ieee->wpa_ie[0] == 0x30) && (!memcmp(&ieee->wpa_ie[10], ccmp_rsn_ie, 4))))
+                       return true;
+               else
+                       return false;
+       } else {
+               return true;
+       }
+
+       return true;
+}
+
+static bool GetHalfNmodeSupportByAPs819xUsb(struct net_device *dev)
+{
+       bool                    Reval;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       struct ieee80211_device *ieee = priv->ieee80211;
+
+       if (ieee->bHalfWirelessN24GMode == true)
+               Reval = true;
+       else
+               Reval =  false;
+
+       return Reval;
+}
+
+static void rtl8192_refresh_supportrate(struct r8192_priv *priv)
+{
+       struct ieee80211_device *ieee = priv->ieee80211;
+       //we do not consider set support rate for ABG mode, only HT MCS rate is set here.
+       if (ieee->mode == WIRELESS_MODE_N_24G || ieee->mode == WIRELESS_MODE_N_5G)
+               memcpy(ieee->Regdot11HTOperationalRateSet, ieee->RegHTSuppRateSet, 16);
+       else
+               memset(ieee->Regdot11HTOperationalRateSet, 0, 16);
+}
+
+static u8 rtl8192_getSupportedWireleeMode(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u8 ret = 0;
+       switch (priv->rf_chip) {
+       case RF_8225:
+       case RF_8256:
+       case RF_PSEUDO_11N:
+               ret = WIRELESS_MODE_N_24G|WIRELESS_MODE_G|WIRELESS_MODE_B;
+               break;
+       case RF_8258:
+               ret = WIRELESS_MODE_A|WIRELESS_MODE_N_5G;
+               break;
+       default:
+               ret = WIRELESS_MODE_B;
+               break;
+       }
+       return ret;
+}
+static void rtl8192_SetWirelessMode(struct net_device *dev, u8 wireless_mode)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u8 bSupportMode = rtl8192_getSupportedWireleeMode(dev);
+
+       if ((wireless_mode == WIRELESS_MODE_AUTO) || ((wireless_mode&bSupportMode) == 0)) {
+               if (bSupportMode & WIRELESS_MODE_N_24G) {
+                       wireless_mode = WIRELESS_MODE_N_24G;
+               } else if (bSupportMode & WIRELESS_MODE_N_5G) {
+                       wireless_mode = WIRELESS_MODE_N_5G;
+               } else if ((bSupportMode & WIRELESS_MODE_A)) {
+                       wireless_mode = WIRELESS_MODE_A;
+               } else if ((bSupportMode & WIRELESS_MODE_G)) {
+                       wireless_mode = WIRELESS_MODE_G;
+               } else if ((bSupportMode & WIRELESS_MODE_B)) {
+                       wireless_mode = WIRELESS_MODE_B;
+               } else {
+                       RT_TRACE(COMP_ERR, "%s(), No valid wireless mode supported, SupportedWirelessMode(%x)!!!\n", __func__, bSupportMode);
+                       wireless_mode = WIRELESS_MODE_B;
+               }
+       }
+#ifdef TO_DO_LIST //// TODO: this function doesn't work well at this time, we should wait for FPGA
+       ActUpdateChannelAccessSetting(pAdapter, pHalData->CurrentWirelessMode, &pAdapter->MgntInfo.Info8185.ChannelAccessSetting);
+#endif
+       priv->ieee80211->mode = wireless_mode;
+
+       if ((wireless_mode == WIRELESS_MODE_N_24G) ||  (wireless_mode == WIRELESS_MODE_N_5G))
+               priv->ieee80211->pHTInfo->bEnableHT = 1;
+       else
+               priv->ieee80211->pHTInfo->bEnableHT = 0;
+       RT_TRACE(COMP_INIT, "Current Wireless Mode is %x\n", wireless_mode);
+       rtl8192_refresh_supportrate(priv);
+
+}
+//init priv variables here. only non_zero value should be initialized here.
+static void rtl8192_init_priv_variable(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u8 i;
+       priv->card_8192 = NIC_8192U;
+       priv->chan = 1; //set to channel 1
+       priv->ieee80211->mode = WIRELESS_MODE_AUTO; //SET AUTO
+       priv->ieee80211->iw_mode = IW_MODE_INFRA;
+       priv->ieee80211->ieee_up = 0;
+       priv->retry_rts = DEFAULT_RETRY_RTS;
+       priv->retry_data = DEFAULT_RETRY_DATA;
+       priv->ieee80211->rts = DEFAULT_RTS_THRESHOLD;
+       priv->ieee80211->rate = 110; //11 mbps
+       priv->ieee80211->short_slot = 1;
+       priv->promisc = (dev->flags & IFF_PROMISC) ? 1 : 0;
+       priv->CckPwEnl = 6;
+       //for silent reset
+       priv->IrpPendingCount = 1;
+       priv->ResetProgress = RESET_TYPE_NORESET;
+       priv->bForcedSilentReset = false;
+       priv->bDisableNormalResetCheck = false;
+       priv->force_reset = false;
+
+       priv->ieee80211->FwRWRF = 0;    //we don't use FW read/write RF until stable firmware is available.
+       priv->ieee80211->current_network.beacon_interval = DEFAULT_BEACONINTERVAL;
+       priv->ieee80211->softmac_features  = IEEE_SOFTMAC_SCAN |
+               IEEE_SOFTMAC_ASSOCIATE | IEEE_SOFTMAC_PROBERQ |
+               IEEE_SOFTMAC_PROBERS | IEEE_SOFTMAC_TX_QUEUE |
+               IEEE_SOFTMAC_BEACONS;//added by amy 080604
+
+       priv->ieee80211->active_scan = 1;
+       priv->ieee80211->modulation = IEEE80211_CCK_MODULATION | IEEE80211_OFDM_MODULATION;
+       priv->ieee80211->host_encrypt = 1;
+       priv->ieee80211->host_decrypt = 1;
+       priv->ieee80211->start_send_beacons = NULL; //-by amy 080604
+       priv->ieee80211->stop_send_beacons = NULL;  //-by amy 080604
+       priv->ieee80211->softmac_hard_start_xmit = rtl8192_hard_start_xmit;
+       priv->ieee80211->set_chan = rtl8192_set_chan;
+       priv->ieee80211->link_change = rtl8192_link_change;
+       priv->ieee80211->softmac_data_hard_start_xmit = rtl8192_hard_data_xmit;
+       priv->ieee80211->data_hard_stop = rtl8192_data_hard_stop;
+       priv->ieee80211->data_hard_resume = rtl8192_data_hard_resume;
+       priv->ieee80211->init_wmmparam_flag = 0;
+       priv->ieee80211->fts = DEFAULT_FRAG_THRESHOLD;
+       priv->ieee80211->check_nic_enough_desc = check_nic_enough_desc;
+       priv->ieee80211->tx_headroom = TX_PACKET_SHIFT_BYTES;
+       priv->ieee80211->qos_support = 1;
+
+       //added by WB
+       priv->ieee80211->SetBWModeHandler = rtl8192_SetBWMode;
+       priv->ieee80211->handle_assoc_response = rtl8192_handle_assoc_response;
+       priv->ieee80211->handle_beacon = rtl8192_handle_beacon;
+       //added by david
+       priv->ieee80211->GetNmodeSupportBySecCfg = GetNmodeSupportBySecCfg8192;
+       priv->ieee80211->GetHalfNmodeSupportByAPsHandler = GetHalfNmodeSupportByAPs819xUsb;
+       priv->ieee80211->SetWirelessMode = rtl8192_SetWirelessMode;
+       //added by amy
+       priv->ieee80211->InitialGainHandler = InitialGain819xUsb;
+       priv->card_type = USB;
+#ifdef TO_DO_LIST
+       if (Adapter->bInHctTest) {
+               pHalData->ShortRetryLimit = 7;
+               pHalData->LongRetryLimit = 7;
+       }
+#endif
+       priv->ShortRetryLimit = 0x30;
+       priv->LongRetryLimit = 0x30;
+       priv->EarlyRxThreshold = 7;
+       priv->enable_gpio0 = 0;
+       priv->TransmitConfig =
+               (TCR_MXDMA_2048<<TCR_MXDMA_OFFSET)|  // Max DMA Burst Size per Tx DMA Burst, 7: reserved.
+               (priv->ShortRetryLimit<<TCR_SRL_OFFSET)|        // Short retry limit
+               (priv->LongRetryLimit<<TCR_LRL_OFFSET) |        // Long retry limit
+               (false ? TCR_SAT : 0);  // FALSE: HW provides PLCP length and LENGEXT, TRUE: SW provides them
+#ifdef TO_DO_LIST
+       if (Adapter->bInHctTest)
+               pHalData->ReceiveConfig =       pHalData->CSMethod |
+                                               RCR_AMF | RCR_ADF |     //accept management/data
+                                               //guangan200710
+                                               RCR_ACF |       //accept control frame for SW AP needs PS-poll, 2005.07.07, by rcnjko.
+                                               RCR_AB | RCR_AM | RCR_APM |             //accept BC/MC/UC
+                                               RCR_AICV | RCR_ACRC32 |                 //accept ICV/CRC error packet
+                                               ((u32)7<<RCR_MXDMA_OFFSET) | // Max DMA Burst Size per Rx DMA Burst, 7: unlimited.
+                                               (pHalData->EarlyRxThreshold<<RCR_FIFO_OFFSET) | // Rx FIFO Threshold, 7: No Rx threshold.
+                                               (pHalData->EarlyRxThreshold == 7 ? RCR_OnlyErlPkt : 0);
+       else
+
+#endif
+       priv->ReceiveConfig     =
+               RCR_AMF | RCR_ADF |             //accept management/data
+               RCR_ACF |                       //accept control frame for SW AP needs PS-poll, 2005.07.07, by rcnjko.
+               RCR_AB | RCR_AM | RCR_APM |     //accept BC/MC/UC
+               ((u32)7<<RCR_MXDMA_OFFSET)| // Max DMA Burst Size per Rx DMA Burst, 7: unlimited.
+               (priv->EarlyRxThreshold<<RX_FIFO_THRESHOLD_SHIFT) | // Rx FIFO Threshold, 7: No Rx threshold.
+               (priv->EarlyRxThreshold == 7 ? RCR_ONLYERLPKT : 0);
+
+       priv->AcmControl = 0;
+       priv->pFirmware = kzalloc(sizeof(rt_firmware), GFP_KERNEL);
+
+       /* rx related queue */
+       skb_queue_head_init(&priv->rx_queue);
+       skb_queue_head_init(&priv->skb_queue);
+
+       /* Tx related queue */
+       for (i = 0; i < MAX_QUEUE_SIZE; i++)
+               skb_queue_head_init(&priv->ieee80211->skb_waitQ[i]);
+       for (i = 0; i < MAX_QUEUE_SIZE; i++)
+               skb_queue_head_init(&priv->ieee80211->skb_aggQ[i]);
+       for (i = 0; i < MAX_QUEUE_SIZE; i++)
+               skb_queue_head_init(&priv->ieee80211->skb_drv_aggQ[i]);
+       priv->rf_set_chan = rtl8192_phy_SwChnl;
+}
+
+//init lock here
+static void rtl8192_init_priv_lock(struct r8192_priv *priv)
+{
+       spin_lock_init(&priv->tx_lock);
+       spin_lock_init(&priv->irq_lock);//added by thomas
+       sema_init(&priv->wx_sem, 1);
+       sema_init(&priv->rf_sem, 1);
+       mutex_init(&priv->mutex);
+}
+
+static void rtl819x_watchdog_wqcallback(struct work_struct *work);
+
+static void rtl8192_irq_rx_tasklet(struct r8192_priv *priv);
+//init tasklet and wait_queue here. only 2.6 above kernel is considered
+#define DRV_NAME "wlan0"
+static void rtl8192_init_priv_task(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+       priv->priv_wq = create_workqueue(DRV_NAME);
+
+       INIT_WORK(&priv->reset_wq, rtl8192_restart);
+
+       INIT_DELAYED_WORK(&priv->watch_dog_wq, rtl819x_watchdog_wqcallback);
+       INIT_DELAYED_WORK(&priv->txpower_tracking_wq,  dm_txpower_trackingcallback);
+       INIT_DELAYED_WORK(&priv->rfpath_check_wq,  dm_rf_pathcheck_workitemcallback);
+       INIT_DELAYED_WORK(&priv->update_beacon_wq, rtl8192_update_beacon);
+       INIT_DELAYED_WORK(&priv->initialgain_operate_wq, InitialGainOperateWorkItemCallBack);
+       INIT_WORK(&priv->qos_activate, rtl8192_qos_activate);
+
+       tasklet_init(&priv->irq_rx_tasklet,
+                    (void(*)(unsigned long))rtl8192_irq_rx_tasklet,
+                    (unsigned long)priv);
+}
+
+static void rtl8192_get_eeprom_size(struct net_device *dev)
+{
+       u16 curCR = 0;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
+       read_nic_word_E(dev, EPROM_CMD, &curCR);
+       RT_TRACE(COMP_EPROM, "read from Reg EPROM_CMD(%x):%x\n", EPROM_CMD, curCR);
+       //whether need I consider BIT5?
+       priv->epromtype = (curCR & Cmd9346CR_9356SEL) ? EPROM_93c56 : EPROM_93c46;
+       RT_TRACE(COMP_EPROM, "<===========%s(), epromtype:%d\n", __func__, priv->epromtype);
+}
+
+//used to swap endian. as ntohl & htonl are not necessary to swap endian, so use this instead.
+static inline u16 endian_swap(u16 *data)
+{
+       u16 tmp = *data;
+       *data = (tmp >> 8) | (tmp << 8);
+       return *data;
+}
+static void rtl8192_read_eeprom_info(struct net_device *dev)
+{
+       u16 wEPROM_ID = 0;
+       u8 bMac_Tmp_Addr[6] = {0x00, 0xe0, 0x4c, 0x00, 0x00, 0x02};
+       u8 bLoad_From_EEPOM = false;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u16 tmpValue = 0;
+       int i;
+       RT_TRACE(COMP_EPROM, "===========>%s()\n", __func__);
+       wEPROM_ID = eprom_read(dev, 0); //first read EEPROM ID out;
+       RT_TRACE(COMP_EPROM, "EEPROM ID is 0x%x\n", wEPROM_ID);
+
+       if (wEPROM_ID != RTL8190_EEPROM_ID) {
+               RT_TRACE(COMP_ERR, "EEPROM ID is invalid(is 0x%x(should be 0x%x)\n", wEPROM_ID, RTL8190_EEPROM_ID);
+       } else {
+               bLoad_From_EEPOM = true;
+       }
+
+       if (bLoad_From_EEPOM) {
+               tmpValue = eprom_read(dev, EEPROM_VID>>1);
+               priv->eeprom_vid = endian_swap(&tmpValue);
+               priv->eeprom_pid = eprom_read(dev, EEPROM_PID>>1);
+               tmpValue = eprom_read(dev, EEPROM_ChannelPlan>>1);
+               priv->eeprom_ChannelPlan = (tmpValue & 0xff00)>>8;
+               priv->btxpowerdata_readfromEEPORM = true;
+               priv->eeprom_CustomerID = eprom_read(dev, (EEPROM_Customer_ID>>1)) >>8;
+       } else {
+               priv->eeprom_vid = 0;
+               priv->eeprom_pid = 0;
+               priv->card_8192_version = VERSION_819xU_B;
+               priv->eeprom_ChannelPlan = 0;
+               priv->eeprom_CustomerID = 0;
+       }
+       RT_TRACE(COMP_EPROM, "vid:0x%4x, pid:0x%4x, CustomID:0x%2x, ChanPlan:0x%x\n", priv->eeprom_vid, priv->eeprom_pid, priv->eeprom_CustomerID, priv->eeprom_ChannelPlan);
+       //set channelplan from eeprom
+       priv->ChannelPlan = priv->eeprom_ChannelPlan;
+       if (bLoad_From_EEPOM) {
+               int i;
+               for (i = 0; i < 6; i += 2) {
+                       u16 tmp = 0;
+                       tmp = eprom_read(dev, (u16)((EEPROM_NODE_ADDRESS_BYTE_0 + i)>>1));
+                       *(u16 *)(&dev->dev_addr[i]) = tmp;
+               }
+       } else {
+               memcpy(dev->dev_addr, bMac_Tmp_Addr, 6);
+               //should I set IDR0 here?
+       }
+       RT_TRACE(COMP_EPROM, "MAC addr:%pM\n", dev->dev_addr);
+       priv->rf_type = RTL819X_DEFAULT_RF_TYPE; //default 1T2R
+       priv->rf_chip = RF_8256;
+
+       if (priv->card_8192_version == (u8)VERSION_819xU_A) {
+               //read Tx power gain offset of legacy OFDM to HT rate
+               if (bLoad_From_EEPOM)
+                       priv->EEPROMTxPowerDiff = (eprom_read(dev, (EEPROM_TxPowerDiff>>1))&0xff00) >> 8;
+               else
+                       priv->EEPROMTxPowerDiff = EEPROM_Default_TxPower;
+               RT_TRACE(COMP_EPROM, "TxPowerDiff:%d\n", priv->EEPROMTxPowerDiff);
+               //read ThermalMeter from EEPROM
+               if (bLoad_From_EEPOM)
+                       priv->EEPROMThermalMeter = (u8)(eprom_read(dev, (EEPROM_ThermalMeter>>1))&0x00ff);
+               else
+                       priv->EEPROMThermalMeter = EEPROM_Default_ThermalMeter;
+               RT_TRACE(COMP_EPROM, "ThermalMeter:%d\n", priv->EEPROMThermalMeter);
+               //vivi, for tx power track
+               priv->TSSI_13dBm = priv->EEPROMThermalMeter *100;
+               //read antenna tx power offset of B/C/D to A from EEPROM
+               if (bLoad_From_EEPOM)
+                       priv->EEPROMPwDiff = (eprom_read(dev, (EEPROM_PwDiff>>1))&0x0f00)>>8;
+               else
+                       priv->EEPROMPwDiff = EEPROM_Default_PwDiff;
+               RT_TRACE(COMP_EPROM, "TxPwDiff:%d\n", priv->EEPROMPwDiff);
+               // Read CrystalCap from EEPROM
+               if (bLoad_From_EEPOM)
+                       priv->EEPROMCrystalCap = (eprom_read(dev, (EEPROM_CrystalCap>>1))&0x0f);
+               else
+                       priv->EEPROMCrystalCap = EEPROM_Default_CrystalCap;
+               RT_TRACE(COMP_EPROM, "CrystalCap = %d\n", priv->EEPROMCrystalCap);
+               //get per-channel Tx power level
+               if (bLoad_From_EEPOM)
+                       priv->EEPROM_Def_Ver = (eprom_read(dev, (EEPROM_TxPwIndex_Ver>>1))&0xff00)>>8;
+               else
+                       priv->EEPROM_Def_Ver = 1;
+               RT_TRACE(COMP_EPROM, "EEPROM_DEF_VER:%d\n", priv->EEPROM_Def_Ver);
+               if (priv->EEPROM_Def_Ver == 0) { /* old eeprom definition */
+                       int i;
+                       if (bLoad_From_EEPOM)
+                               priv->EEPROMTxPowerLevelCCK = (eprom_read(dev, (EEPROM_TxPwIndex_CCK>>1))&0xff) >> 8;
+                       else
+                               priv->EEPROMTxPowerLevelCCK = 0x10;
+                       RT_TRACE(COMP_EPROM, "CCK Tx Power Levl: 0x%02x\n", priv->EEPROMTxPowerLevelCCK);
+                       for (i = 0; i < 3; i++) {
+                               if (bLoad_From_EEPOM) {
+                                       tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G+i)>>1);
+                                       if (((EEPROM_TxPwIndex_OFDM_24G+i) % 2) == 0)
+                                               tmpValue = tmpValue & 0x00ff;
+                                       else
+                                               tmpValue = (tmpValue & 0xff00) >> 8;
+                               } else {
+                                       tmpValue = 0x10;
+                               }
+                               priv->EEPROMTxPowerLevelOFDM24G[i] = (u8) tmpValue;
+                               RT_TRACE(COMP_EPROM, "OFDM 2.4G Tx Power Level, Index %d = 0x%02x\n", i, priv->EEPROMTxPowerLevelCCK);
+                       }
+               } else if (priv->EEPROM_Def_Ver == 1) {
+                       if (bLoad_From_EEPOM) {
+                               tmpValue = eprom_read(dev,
+                                               EEPROM_TxPwIndex_CCK_V1 >> 1);
+                               tmpValue = (tmpValue & 0xff00) >> 8;
+                       } else {
+                               tmpValue = 0x10;
+                       }
+                       priv->EEPROMTxPowerLevelCCK_V1[0] = (u8)tmpValue;
+
+                       if (bLoad_From_EEPOM)
+                               tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_CCK_V1 + 2)>>1);
+                       else
+                               tmpValue = 0x1010;
+                       *((u16 *)(&priv->EEPROMTxPowerLevelCCK_V1[1])) = tmpValue;
+                       if (bLoad_From_EEPOM)
+                               tmpValue = eprom_read(dev,
+                                       EEPROM_TxPwIndex_OFDM_24G_V1 >> 1);
+                       else
+                               tmpValue = 0x1010;
+                       *((u16 *)(&priv->EEPROMTxPowerLevelOFDM24G[0])) = tmpValue;
+                       if (bLoad_From_EEPOM)
+                               tmpValue = eprom_read(dev, (EEPROM_TxPwIndex_OFDM_24G_V1+2)>>1);
+                       else
+                               tmpValue = 0x10;
+                       priv->EEPROMTxPowerLevelOFDM24G[2] = (u8)tmpValue;
+               }//endif EEPROM_Def_Ver == 1
+
+               //update HAL variables
+               //
+               for (i = 0; i < 14; i++) {
+                       if (i <= 3)
+                               priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[0];
+                       else if (i >= 4 && i <= 9)
+                               priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[1];
+                       else
+                               priv->TxPowerLevelOFDM24G[i] = priv->EEPROMTxPowerLevelOFDM24G[2];
+               }
+
+               for (i = 0; i < 14; i++) {
+                       if (priv->EEPROM_Def_Ver == 0) {
+                               if (i <= 3)
+                                       priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[0] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
+                               else if (i >= 4 && i <= 9)
+                                       priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK;
+                               else
+                                       priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelOFDM24G[2] + (priv->EEPROMTxPowerLevelCCK - priv->EEPROMTxPowerLevelOFDM24G[1]);
+                       } else if (priv->EEPROM_Def_Ver == 1) {
+                               if (i <= 3)
+                                       priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[0];
+                               else if (i >= 4 && i <= 9)
+                                       priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[1];
+                               else
+                                       priv->TxPowerLevelCCK[i] = priv->EEPROMTxPowerLevelCCK_V1[2];
+                       }
+               }
+               priv->TxPowerDiff = priv->EEPROMPwDiff;
+               // Antenna B gain offset to antenna A, bit0~3
+               priv->AntennaTxPwDiff[0] = (priv->EEPROMTxPowerDiff & 0xf);
+               // Antenna C gain offset to antenna A, bit4~7
+               priv->AntennaTxPwDiff[1] = (priv->EEPROMTxPowerDiff & 0xf0)>>4;
+               // CrystalCap, bit12~15
+               priv->CrystalCap = priv->EEPROMCrystalCap;
+               // ThermalMeter, bit0~3 for RFIC1, bit4~7 for RFIC2
+               // 92U does not enable TX power tracking.
+               priv->ThermalMeter[0] = priv->EEPROMThermalMeter;
+       }//end if VersionID == VERSION_819xU_A
+
+       //added by vivi, for dlink led, 20080416
+       switch (priv->eeprom_CustomerID) {
+       case EEPROM_CID_RUNTOP:
+               priv->CustomerID = RT_CID_819x_RUNTOP;
+               break;
+
+       case EEPROM_CID_DLINK:
+               priv->CustomerID = RT_CID_DLINK;
+               break;
+
+       default:
+               priv->CustomerID = RT_CID_DEFAULT;
+               break;
+
+       }
+
+       switch (priv->CustomerID) {
+       case RT_CID_819x_RUNTOP:
+               priv->LedStrategy = SW_LED_MODE2;
+               break;
+
+       case RT_CID_DLINK:
+               priv->LedStrategy = SW_LED_MODE4;
+               break;
+
+       default:
+               priv->LedStrategy = SW_LED_MODE0;
+               break;
+
+       }
+
+
+       if (priv->rf_type == RF_1T2R) {
+               RT_TRACE(COMP_EPROM, "\n1T2R config\n");
+       } else {
+               RT_TRACE(COMP_EPROM, "\n2T4R config\n");
+       }
+
+       // 2008/01/16 MH We can only know RF type in the function. So we have to init
+       // DIG RATR table again.
+       init_rate_adaptive(dev);
+       //we need init DIG RATR table here again.
+
+       RT_TRACE(COMP_EPROM, "<===========%s()\n", __func__);
+}
+
+static short rtl8192_get_channel_map(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       if (priv->ChannelPlan > COUNTRY_CODE_GLOBAL_DOMAIN) {
+               netdev_err(dev, "rtl8180_init: Error channel plan! Set to default.\n");
+               priv->ChannelPlan = 0;
+       }
+       RT_TRACE(COMP_INIT, "Channel plan is %d\n", priv->ChannelPlan);
+
+       rtl819x_set_channel_map(priv->ChannelPlan, priv);
+       return 0;
+}
+
+static short rtl8192_init(struct net_device *dev)
+{
+
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+       memset(&(priv->stats), 0, sizeof(struct Stats));
+       memset(priv->txqueue_to_outpipemap, 0, 9);
+#ifdef PIPE12
+       {
+               int i = 0;
+               u8 queuetopipe[] = {3, 2, 1, 0, 4, 8, 7, 6, 5};
+               memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
+       }
+#else
+       {
+               u8 queuetopipe[] = {3, 2, 1, 0, 4, 4, 0, 4, 4};
+               memcpy(priv->txqueue_to_outpipemap, queuetopipe, 9);
+       }
+#endif
+       rtl8192_init_priv_variable(dev);
+       rtl8192_init_priv_lock(priv);
+       rtl8192_init_priv_task(dev);
+       rtl8192_get_eeprom_size(dev);
+       rtl8192_read_eeprom_info(dev);
+       rtl8192_get_channel_map(dev);
+       init_hal_dm(dev);
+       setup_timer(&priv->watch_dog_timer, watch_dog_timer_callback,
+                   (unsigned long)dev);
+       if (rtl8192_usb_initendpoints(dev) != 0) {
+               DMESG("Endopoints initialization failed");
+               return -ENOMEM;
+       }
+
+       return 0;
+}
+
+/******************************************************************************
+ *function:  This function actually only set RRSR, RATR and BW_OPMODE registers
+ *          not to do all the hw config as its name says
+ *   input:  net_device dev
+ *  output:  none
+ *  return:  none
+ *  notice:  This part need to modified according to the rate set we filtered
+ * ****************************************************************************/
+static void rtl8192_hwconfig(struct net_device *dev)
+{
+       u32 regRATR = 0, regRRSR = 0;
+       u8 regBwOpMode = 0, regTmp = 0;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u32 ratr_value = 0;
+
+       // Set RRSR, RATR, and BW_OPMODE registers
+       //
+       switch (priv->ieee80211->mode) {
+       case WIRELESS_MODE_B:
+               regBwOpMode = BW_OPMODE_20MHZ;
+               regRATR = RATE_ALL_CCK;
+               regRRSR = RATE_ALL_CCK;
+               break;
+       case WIRELESS_MODE_A:
+               regBwOpMode = BW_OPMODE_5G |BW_OPMODE_20MHZ;
+               regRATR = RATE_ALL_OFDM_AG;
+               regRRSR = RATE_ALL_OFDM_AG;
+               break;
+       case WIRELESS_MODE_G:
+               regBwOpMode = BW_OPMODE_20MHZ;
+               regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+               regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+               break;
+       case WIRELESS_MODE_AUTO:
+#ifdef TO_DO_LIST
+               if (Adapter->bInHctTest) {
+                       regBwOpMode = BW_OPMODE_20MHZ;
+                       regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+                       regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+               }
+               else
+#endif
+               {
+                       regBwOpMode = BW_OPMODE_20MHZ;
+                       regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
+                       regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+               }
+               break;
+       case WIRELESS_MODE_N_24G:
+               // It support CCK rate by default.
+               // CCK rate will be filtered out only when associated AP does not support it.
+               regBwOpMode = BW_OPMODE_20MHZ;
+               regRATR = RATE_ALL_CCK | RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
+               regRRSR = RATE_ALL_CCK | RATE_ALL_OFDM_AG;
+               break;
+       case WIRELESS_MODE_N_5G:
+               regBwOpMode = BW_OPMODE_5G;
+               regRATR = RATE_ALL_OFDM_AG | RATE_ALL_OFDM_1SS | RATE_ALL_OFDM_2SS;
+               regRRSR = RATE_ALL_OFDM_AG;
+               break;
+       }
+
+       write_nic_byte(dev, BW_OPMODE, regBwOpMode);
+       ratr_value = regRATR;
+       if (priv->rf_type == RF_1T2R)
+               ratr_value &= ~(RATE_ALL_OFDM_2SS);
+       write_nic_dword(dev, RATR0, ratr_value);
+       write_nic_byte(dev, UFWP, 1);
+       read_nic_byte(dev, 0x313, &regTmp);
+       regRRSR = ((regTmp) << 24) | (regRRSR & 0x00ffffff);
+       write_nic_dword(dev, RRSR, regRRSR);
+
+       //
+       // Set Retry Limit here
+       //
+       write_nic_word(dev, RETRY_LIMIT,
+                      priv->ShortRetryLimit << RETRY_LIMIT_SHORT_SHIFT |
+                      priv->LongRetryLimit << RETRY_LIMIT_LONG_SHIFT);
+       // Set Contention Window here
+
+       // Set Tx AGC
+
+       // Set Tx Antenna including Feedback control
+
+       // Set Auto Rate fallback control
+
+
+}
+
+
+//InitializeAdapter and PhyCfg
+static bool rtl8192_adapter_start(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u32 dwRegRead = 0;
+       bool init_status = true;
+       u8 SECR_value = 0x0;
+       u8 tmp;
+       RT_TRACE(COMP_INIT, "====>%s()\n", __func__);
+       priv->Rf_Mode = RF_OP_By_SW_3wire;
+       //for ASIC power on sequence
+       write_nic_byte_E(dev, 0x5f, 0x80);
+       mdelay(50);
+       write_nic_byte_E(dev, 0x5f, 0xf0);
+       write_nic_byte_E(dev, 0x5d, 0x00);
+       write_nic_byte_E(dev, 0x5e, 0x80);
+       write_nic_byte(dev, 0x17, 0x37);
+       mdelay(10);
+       priv->pFirmware->firmware_status = FW_STATUS_0_INIT;
+       //config CPUReset Register
+       //Firmware Reset or not?
+       read_nic_dword(dev, CPU_GEN, &dwRegRead);
+       if (priv->pFirmware->firmware_status == FW_STATUS_0_INIT)
+               dwRegRead |= CPU_GEN_SYSTEM_RESET; //do nothing here?
+       else if (priv->pFirmware->firmware_status == FW_STATUS_5_READY)
+               dwRegRead |= CPU_GEN_FIRMWARE_RESET;
+       else
+               RT_TRACE(COMP_ERR, "ERROR in %s(): undefined firmware state(%d)\n", __func__,   priv->pFirmware->firmware_status);
+
+       write_nic_dword(dev, CPU_GEN, dwRegRead);
+       //config BB.
+       rtl8192_BBConfig(dev);
+
+       //Loopback mode or not
+       priv->LoopbackMode = RTL819xU_NO_LOOPBACK;
+
+       read_nic_dword(dev, CPU_GEN, &dwRegRead);
+       if (priv->LoopbackMode == RTL819xU_NO_LOOPBACK)
+               dwRegRead = (dwRegRead & CPU_GEN_NO_LOOPBACK_MSK) | CPU_GEN_NO_LOOPBACK_SET;
+       else if (priv->LoopbackMode == RTL819xU_MAC_LOOPBACK)
+               dwRegRead |= CPU_CCK_LOOPBACK;
+       else
+               RT_TRACE(COMP_ERR, "Serious error in %s(): wrong loopback mode setting(%d)\n", __func__,  priv->LoopbackMode);
+
+       write_nic_dword(dev, CPU_GEN, dwRegRead);
+
+       //after reset cpu, we need wait for a seconds to write in register.
+       udelay(500);
+
+       //xiong add for new bitfile:usb suspend reset pin set to 1. //do we need?
+       read_nic_byte_E(dev, 0x5f, &tmp);
+       write_nic_byte_E(dev, 0x5f, tmp|0x20);
+
+       //Set Hardware
+       rtl8192_hwconfig(dev);
+
+       //turn on Tx/Rx
+       write_nic_byte(dev, CMDR, CR_RE|CR_TE);
+
+       //set IDR0 here
+       write_nic_dword(dev, MAC0, ((u32 *)dev->dev_addr)[0]);
+       write_nic_word(dev, MAC4, ((u16 *)(dev->dev_addr + 4))[0]);
+
+       //set RCR
+       write_nic_dword(dev, RCR, priv->ReceiveConfig);
+
+       //Initialize Number of Reserved Pages in Firmware Queue
+       write_nic_dword(dev, RQPN1,  NUM_OF_PAGE_IN_FW_QUEUE_BK << RSVD_FW_QUEUE_PAGE_BK_SHIFT |
+                       NUM_OF_PAGE_IN_FW_QUEUE_BE << RSVD_FW_QUEUE_PAGE_BE_SHIFT |
+                       NUM_OF_PAGE_IN_FW_QUEUE_VI << RSVD_FW_QUEUE_PAGE_VI_SHIFT |
+                       NUM_OF_PAGE_IN_FW_QUEUE_VO <<RSVD_FW_QUEUE_PAGE_VO_SHIFT);
+       write_nic_dword(dev, RQPN2, NUM_OF_PAGE_IN_FW_QUEUE_MGNT << RSVD_FW_QUEUE_PAGE_MGNT_SHIFT |
+                       NUM_OF_PAGE_IN_FW_QUEUE_CMD << RSVD_FW_QUEUE_PAGE_CMD_SHIFT);
+       write_nic_dword(dev, RQPN3, APPLIED_RESERVED_QUEUE_IN_FW|
+                       NUM_OF_PAGE_IN_FW_QUEUE_BCN<<RSVD_FW_QUEUE_PAGE_BCN_SHIFT);
+       write_nic_dword(dev, RATR0+4*7, (RATE_ALL_OFDM_AG | RATE_ALL_CCK));
+
+       //Set AckTimeout
+       // TODO: (it value is only for FPGA version). need to be changed!!2006.12.18, by Emily
+       write_nic_byte(dev, ACK_TIMEOUT, 0x30);
+
+       if (priv->ResetProgress == RESET_TYPE_NORESET)
+               rtl8192_SetWirelessMode(dev, priv->ieee80211->mode);
+       if (priv->ResetProgress == RESET_TYPE_NORESET) {
+               CamResetAllEntry(dev);
+               SECR_value |= SCR_TxEncEnable;
+               SECR_value |= SCR_RxDecEnable;
+               SECR_value |= SCR_NoSKMC;
+               write_nic_byte(dev, SECR, SECR_value);
+       }
+
+       //Beacon related
+       write_nic_word(dev, ATIMWND, 2);
+       write_nic_word(dev, BCN_INTERVAL, 100);
+
+#define DEFAULT_EDCA 0x005e4332
+       {
+               int i;
+               for (i = 0; i < QOS_QUEUE_NUM; i++)
+                       write_nic_dword(dev, WDCAPARA_ADD[i], DEFAULT_EDCA);
+       }
+
+       rtl8192_phy_configmac(dev);
+
+       if (priv->card_8192_version == (u8) VERSION_819xU_A) {
+               rtl8192_phy_getTxPower(dev);
+               rtl8192_phy_setTxPower(dev, priv->chan);
+       }
+
+       //Firmware download
+       init_status = init_firmware(dev);
+       if (!init_status) {
+               RT_TRACE(COMP_ERR, "ERR!!! %s(): Firmware download is failed\n", __func__);
+               return init_status;
+       }
+       RT_TRACE(COMP_INIT, "%s():after firmware download\n", __func__);
+       //
+#ifdef TO_DO_LIST
+       if (Adapter->ResetProgress == RESET_TYPE_NORESET) {
+               if (pMgntInfo->RegRfOff == true) { /* User disable RF via registry. */
+                       RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter819xUsb(): Turn off RF for RegRfOff ----------\n"));
+                       MgntActSet_RF_State(Adapter, eRfOff, RF_CHANGE_BY_SW);
+                       // Those actions will be discard in MgntActSet_RF_State because of the same state
+                       for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++)
+                               PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
+               } else if (pMgntInfo->RfOffReason > RF_CHANGE_BY_PS) { /* H/W or S/W RF OFF before sleep. */
+                       RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter819xUsb(): Turn off RF for RfOffReason(%d) ----------\n", pMgntInfo->RfOffReason));
+                       MgntActSet_RF_State(Adapter, eRfOff, pMgntInfo->RfOffReason);
+               } else {
+                       pHalData->eRFPowerState = eRfOn;
+                       pMgntInfo->RfOffReason = 0;
+                       RT_TRACE((COMP_INIT|COMP_RF), DBG_LOUD, ("InitializeAdapter819xUsb(): RF is on ----------\n"));
+               }
+       } else {
+               if (pHalData->eRFPowerState == eRfOff) {
+                       MgntActSet_RF_State(Adapter, eRfOff, pMgntInfo->RfOffReason);
+                       // Those actions will be discard in MgntActSet_RF_State because of the same state
+                       for (eRFPath = 0; eRFPath < pHalData->NumTotalRFPath; eRFPath++)
+                               PHY_SetRFReg(Adapter, (RF90_RADIO_PATH_E)eRFPath, 0x4, 0xC00, 0x0);
+               }
+       }
+#endif
+       //config RF.
+       if (priv->ResetProgress == RESET_TYPE_NORESET) {
+               rtl8192_phy_RFConfig(dev);
+               RT_TRACE(COMP_INIT, "%s():after phy RF config\n", __func__);
+       }
+
+
+       if (priv->ieee80211->FwRWRF)
+               // We can force firmware to do RF-R/W
+               priv->Rf_Mode = RF_OP_By_FW;
+       else
+               priv->Rf_Mode = RF_OP_By_SW_3wire;
+
+
+       rtl8192_phy_updateInitGain(dev);
+       /*--set CCK and OFDM Block "ON"--*/
+       rtl8192_setBBreg(dev, rFPGA0_RFMOD, bCCKEn, 0x1);
+       rtl8192_setBBreg(dev, rFPGA0_RFMOD, bOFDMEn, 0x1);
+
+       if (priv->ResetProgress == RESET_TYPE_NORESET) {
+               //if D or C cut
+               u8 tmpvalue;
+               read_nic_byte(dev, 0x301, &tmpvalue);
+               if (tmpvalue == 0x03) {
+                       priv->bDcut = true;
+                       RT_TRACE(COMP_POWER_TRACKING, "D-cut\n");
+               } else {
+                       priv->bDcut = false;
+                       RT_TRACE(COMP_POWER_TRACKING, "C-cut\n");
+               }
+               dm_initialize_txpower_tracking(dev);
+
+               if (priv->bDcut) {
+                       u32 i, TempCCk;
+                       u32 tmpRegA = rtl8192_QueryBBReg(dev, rOFDM0_XATxIQImbalance, bMaskDWord);
+                       for (i = 0; i < TxBBGainTableLength; i++) {
+                               if (tmpRegA == priv->txbbgain_table[i].txbbgain_value) {
+                                       priv->rfa_txpowertrackingindex = (u8)i;
+                                       priv->rfa_txpowertrackingindex_real = (u8)i;
+                                       priv->rfa_txpowertracking_default = priv->rfa_txpowertrackingindex;
+                                       break;
+                               }
+                       }
+
+                       TempCCk = rtl8192_QueryBBReg(dev, rCCK0_TxFilter1, bMaskByte2);
+
+                       for (i = 0; i < CCKTxBBGainTableLength; i++) {
+
+                               if (TempCCk == priv->cck_txbbgain_table[i].ccktxbb_valuearray[0]) {
+                                       priv->cck_present_attentuation_20Mdefault = (u8) i;
+                                       break;
+                               }
+                       }
+                       priv->cck_present_attentuation_40Mdefault = 0;
+                       priv->cck_present_attentuation_difference = 0;
+                       priv->cck_present_attentuation = priv->cck_present_attentuation_20Mdefault;
+
+               }
+       }
+       write_nic_byte(dev, 0x87, 0x0);
+
+
+       return init_status;
+}
+
+/* this configures registers for beacon tx and enables it via
+ * rtl8192_beacon_tx_enable(). rtl8192_beacon_tx_disable() might
+ * be used to stop beacon transmission
+ */
+/***************************************************************************
+    -------------------------------NET STUFF---------------------------
+***************************************************************************/
+
+static struct net_device_stats *rtl8192_stats(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+       return &priv->ieee80211->stats;
+}
+
+static bool HalTxCheckStuck819xUsb(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u16             RegTxCounter;
+       bool            bStuck = false;
+       read_nic_word(dev, 0x128, &RegTxCounter);
+       RT_TRACE(COMP_RESET, "%s():RegTxCounter is %d,TxCounter is %d\n", __func__, RegTxCounter, priv->TxCounter);
+       if (priv->TxCounter == RegTxCounter)
+               bStuck = true;
+
+       priv->TxCounter = RegTxCounter;
+
+       return bStuck;
+}
+
+/*
+*      <Assumption: RT_TX_SPINLOCK is acquired.>
+*      First added: 2006.11.19 by emily
+*/
+static RESET_TYPE TxCheckStuck(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u8                      QueueID;
+       bool                    bCheckFwTxCnt = false;
+
+       //
+       // Decide such threshold according to current power save mode
+       //
+
+       for (QueueID = 0; QueueID <= BEACON_QUEUE; QueueID++) {
+               if (QueueID == TXCMD_QUEUE)
+                       continue;
+               if ((skb_queue_len(&priv->ieee80211->skb_waitQ[QueueID]) == 0)  && (skb_queue_len(&priv->ieee80211->skb_aggQ[QueueID]) == 0))
+                       continue;
+
+               bCheckFwTxCnt = true;
+       }
+       if (bCheckFwTxCnt) {
+               if (HalTxCheckStuck819xUsb(dev)) {
+                       RT_TRACE(COMP_RESET, "TxCheckStuck(): Fw indicates no Tx condition! \n");
+                       return RESET_TYPE_SILENT;
+               }
+       }
+       return RESET_TYPE_NORESET;
+}
+
+static bool HalRxCheckStuck819xUsb(struct net_device *dev)
+{
+       u16     RegRxCounter;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       bool bStuck = false;
+       static u8       rx_chk_cnt;
+       read_nic_word(dev, 0x130, &RegRxCounter);
+       RT_TRACE(COMP_RESET, "%s(): RegRxCounter is %d,RxCounter is %d\n", __func__, RegRxCounter, priv->RxCounter);
+       // If rssi is small, we should check rx for long time because of bad rx.
+       // or maybe it will continuous silent reset every 2 seconds.
+       rx_chk_cnt++;
+       if (priv->undecorated_smoothed_pwdb >= (RateAdaptiveTH_High+5)) {
+               rx_chk_cnt = 0; //high rssi, check rx stuck right now.
+       } else if (priv->undecorated_smoothed_pwdb < (RateAdaptiveTH_High+5) &&
+                  ((priv->CurrentChannelBW != HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb >= RateAdaptiveTH_Low_40M) ||
+                   (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb >= RateAdaptiveTH_Low_20M))) {
+               if (rx_chk_cnt < 2)
+                       return bStuck;
+               else
+                       rx_chk_cnt = 0;
+       } else if (((priv->CurrentChannelBW != HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb < RateAdaptiveTH_Low_40M) ||
+                   (priv->CurrentChannelBW == HT_CHANNEL_WIDTH_20 && priv->undecorated_smoothed_pwdb < RateAdaptiveTH_Low_20M)) &&
+                    priv->undecorated_smoothed_pwdb >= VeryLowRSSI) {
+               if (rx_chk_cnt < 4)
+                       return bStuck;
+               else
+                       rx_chk_cnt = 0;
+       } else {
+               if (rx_chk_cnt < 8)
+                       return bStuck;
+               else
+                       rx_chk_cnt = 0;
+       }
+
+       if (priv->RxCounter == RegRxCounter)
+               bStuck = true;
+
+       priv->RxCounter = RegRxCounter;
+
+       return bStuck;
+}
+
+static RESET_TYPE RxCheckStuck(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       bool        bRxCheck = false;
+
+       if (priv->IrpPendingCount > 1)
+               bRxCheck = true;
+
+       if (bRxCheck) {
+               if (HalRxCheckStuck819xUsb(dev)) {
+                       RT_TRACE(COMP_RESET, "RxStuck Condition\n");
+                       return RESET_TYPE_SILENT;
+               }
+       }
+       return RESET_TYPE_NORESET;
+}
+
+
+/**
+*      This function is called by Checkforhang to check whether we should ask OS to reset driver
+*
+*      \param pAdapter The adapter context for this miniport
+*
+*      Note:NIC with USB interface sholud not call this function because we cannot scan descriptor
+*      to judge whether there is tx stuck.
+*      Note: This function may be required to be rewrite for Vista OS.
+*      <<<Assumption: Tx spinlock has been acquired >>>
+*
+*      8185 and 8185b does not implement this function. This is added by Emily at 2006.11.24
+*/
+static RESET_TYPE rtl819x_ifcheck_resetornot(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       RESET_TYPE      TxResetType = RESET_TYPE_NORESET;
+       RESET_TYPE      RxResetType = RESET_TYPE_NORESET;
+       RT_RF_POWER_STATE       rfState;
+
+       rfState = priv->ieee80211->eRFPowerState;
+
+       TxResetType = TxCheckStuck(dev);
+       if (rfState != eRfOff ||
+           (priv->ieee80211->iw_mode != IW_MODE_ADHOC)) {
+               // If driver is in the status of firmware download failure , driver skips RF initialization and RF is
+               // in turned off state. Driver should check whether Rx stuck and do silent reset. And
+               // if driver is in firmware download failure status, driver should initialize RF in the following
+               // silent reset procedure Emily, 2008.01.21
+
+               // Driver should not check RX stuck in IBSS mode because it is required to
+               // set Check BSSID in order to send beacon, however, if check BSSID is
+               // set, STA cannot hear any packet at all. Emily, 2008.04.12
+               RxResetType = RxCheckStuck(dev);
+       }
+       if (TxResetType == RESET_TYPE_NORMAL || RxResetType == RESET_TYPE_NORMAL) {
+               return RESET_TYPE_NORMAL;
+       } else if (TxResetType == RESET_TYPE_SILENT || RxResetType == RESET_TYPE_SILENT) {
+               RT_TRACE(COMP_RESET, "%s():silent reset\n", __func__);
+               return RESET_TYPE_SILENT;
+       } else {
+               return RESET_TYPE_NORESET;
+       }
+
+}
+
+static void rtl8192_cancel_deferred_work(struct r8192_priv *priv);
+static int _rtl8192_up(struct net_device *dev);
+static int rtl8192_close(struct net_device *dev);
+
+
+
+static void CamRestoreAllEntry(struct net_device *dev)
+{
+       u8 EntryId = 0;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u8      *MacAddr = priv->ieee80211->current_network.bssid;
+
+       static u8       CAM_CONST_ADDR[4][6] = {
+               {0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
+               {0x00, 0x00, 0x00, 0x00, 0x00, 0x01},
+               {0x00, 0x00, 0x00, 0x00, 0x00, 0x02},
+               {0x00, 0x00, 0x00, 0x00, 0x00, 0x03} };
+       static u8       CAM_CONST_BROAD[] = {
+               0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+
+       RT_TRACE(COMP_SEC, "CamRestoreAllEntry: \n");
+
+
+       if ((priv->ieee80211->pairwise_key_type == KEY_TYPE_WEP40) ||
+           (priv->ieee80211->pairwise_key_type == KEY_TYPE_WEP104)) {
+
+               for (EntryId = 0; EntryId < 4; EntryId++) {
+                       MacAddr = CAM_CONST_ADDR[EntryId];
+                       setKey(dev, EntryId, EntryId,
+                              priv->ieee80211->pairwise_key_type,
+                              MacAddr, 0, NULL);
+               }
+
+       } else if (priv->ieee80211->pairwise_key_type == KEY_TYPE_TKIP) {
+
+               if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
+                       setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
+                              (u8 *)dev->dev_addr, 0, NULL);
+               else
+                       setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
+                              MacAddr, 0, NULL);
+       } else if (priv->ieee80211->pairwise_key_type == KEY_TYPE_CCMP) {
+
+               if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
+                       setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
+                              (u8 *)dev->dev_addr, 0, NULL);
+               else
+                       setKey(dev, 4, 0, priv->ieee80211->pairwise_key_type,
+                              MacAddr, 0, NULL);
+       }
+
+
+
+       if (priv->ieee80211->group_key_type == KEY_TYPE_TKIP) {
+               MacAddr = CAM_CONST_BROAD;
+               for (EntryId = 1; EntryId < 4; EntryId++) {
+                       setKey(dev, EntryId, EntryId,
+                              priv->ieee80211->group_key_type,
+                              MacAddr, 0, NULL);
+               }
+               if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
+                       setKey(dev, 0, 0, priv->ieee80211->group_key_type,
+                              CAM_CONST_ADDR[0], 0, NULL);
+       } else if (priv->ieee80211->group_key_type == KEY_TYPE_CCMP) {
+               MacAddr = CAM_CONST_BROAD;
+               for (EntryId = 1; EntryId < 4; EntryId++) {
+                       setKey(dev, EntryId, EntryId,
+                              priv->ieee80211->group_key_type,
+                              MacAddr, 0, NULL);
+               }
+
+               if (priv->ieee80211->iw_mode == IW_MODE_ADHOC)
+                       setKey(dev, 0, 0, priv->ieee80211->group_key_type,
+                              CAM_CONST_ADDR[0], 0, NULL);
+       }
+}
+//////////////////////////////////////////////////////////////
+// This function is used to fix Tx/Rx stop bug temporarily.
+// This function will do "system reset" to NIC when Tx or Rx is stuck.
+// The method checking Tx/Rx stuck of this function is supported by FW,
+// which reports Tx and Rx counter to register 0x128 and 0x130.
+//////////////////////////////////////////////////////////////
+static void rtl819x_ifsilentreset(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       u8      reset_times = 0;
+       int reset_status = 0;
+       struct ieee80211_device *ieee = priv->ieee80211;
+
+
+       // 2007.07.20. If we need to check CCK stop, please uncomment this line.
+       //bStuck = Adapter->HalFunc.CheckHWStopHandler(Adapter);
+
+       if (priv->ResetProgress == RESET_TYPE_NORESET) {
+RESET_START:
+
+               RT_TRACE(COMP_RESET, "=========>Reset progress!! \n");
+
+               // Set the variable for reset.
+               priv->ResetProgress = RESET_TYPE_SILENT;
+               down(&priv->wx_sem);
+               if (priv->up == 0) {
+                       RT_TRACE(COMP_ERR, "%s():the driver is not up! return\n", __func__);
+                       up(&priv->wx_sem);
+                       return;
+               }
+               priv->up = 0;
+               RT_TRACE(COMP_RESET, "%s():======>start to down the driver\n", __func__);
+
+               rtl8192_rtx_disable(dev);
+               rtl8192_cancel_deferred_work(priv);
+               deinit_hal_dm(dev);
+               del_timer_sync(&priv->watch_dog_timer);
+
+               ieee->sync_scan_hurryup = 1;
+               if (ieee->state == IEEE80211_LINKED) {
+                       down(&ieee->wx_sem);
+                       netdev_dbg(dev, "ieee->state is IEEE80211_LINKED\n");
+                       ieee80211_stop_send_beacons(priv->ieee80211);
+                       del_timer_sync(&ieee->associate_timer);
+                       cancel_delayed_work(&ieee->associate_retry_wq);
+                       ieee80211_stop_scan(ieee);
+                       netif_carrier_off(dev);
+                       up(&ieee->wx_sem);
+               } else {
+                       netdev_dbg(dev, "ieee->state is NOT LINKED\n");
+                       ieee80211_softmac_stop_protocol(priv->ieee80211);
+               }
+               up(&priv->wx_sem);
+               RT_TRACE(COMP_RESET, "%s():<==========down process is finished\n", __func__);
+               RT_TRACE(COMP_RESET, "%s():===========>start up the driver\n", __func__);
+               reset_status = _rtl8192_up(dev);
+
+               RT_TRACE(COMP_RESET, "%s():<===========up process is finished\n", __func__);
+               if (reset_status == -EAGAIN) {
+                       if (reset_times < 3) {
+                               reset_times++;
+                               goto RESET_START;
+                       } else {
+                               RT_TRACE(COMP_ERR, " ERR!!! %s():  Reset Failed!!\n", __func__);
+                       }
+               }
+               ieee->is_silent_reset = 1;
+               EnableHWSecurityConfig8192(dev);
+               if (ieee->state == IEEE80211_LINKED && ieee->iw_mode == IW_MODE_INFRA) {
+                       ieee->set_chan(ieee->dev, ieee->current_network.channel);
+
+                       queue_work(ieee->wq, &ieee->associate_complete_wq);
+
+               } else if (ieee->state == IEEE80211_LINKED && ieee->iw_mode == IW_MODE_ADHOC) {
+                       ieee->set_chan(ieee->dev, ieee->current_network.channel);
+                       ieee->link_change(ieee->dev);
+
+                       ieee80211_start_send_beacons(ieee);
+
+                       if (ieee->data_hard_resume)
+                               ieee->data_hard_resume(ieee->dev);
+                       netif_carrier_on(ieee->dev);
+               }
+
+               CamRestoreAllEntry(dev);
+
+               priv->ResetProgress = RESET_TYPE_NORESET;
+               priv->reset_count++;
+
+               priv->bForcedSilentReset = false;
+               priv->bResetInProgress = false;
+
+               // For test --> force write UFWP.
+               write_nic_byte(dev, UFWP, 1);
+               RT_TRACE(COMP_RESET, "Reset finished!! ====>[%d]\n", priv->reset_count);
+       }
+}
+
+static void rtl819x_update_rxcounts(struct r8192_priv *priv, u32 *TotalRxBcnNum,
+                            u32 *TotalRxDataNum)
+{
+       u16                     SlotIndex;
+       u8                      i;
+
+       *TotalRxBcnNum = 0;
+       *TotalRxDataNum = 0;
+
+       SlotIndex = (priv->ieee80211->LinkDetectInfo.SlotIndex++)%(priv->ieee80211->LinkDetectInfo.SlotNum);
+       priv->ieee80211->LinkDetectInfo.RxBcnNum[SlotIndex] = priv->ieee80211->LinkDetectInfo.NumRecvBcnInPeriod;
+       priv->ieee80211->LinkDetectInfo.RxDataNum[SlotIndex] = priv->ieee80211->LinkDetectInfo.NumRecvDataInPeriod;
+       for (i = 0; i < priv->ieee80211->LinkDetectInfo.SlotNum; i++) {
+               *TotalRxBcnNum += priv->ieee80211->LinkDetectInfo.RxBcnNum[i];
+               *TotalRxDataNum += priv->ieee80211->LinkDetectInfo.RxDataNum[i];
+       }
+}
+
+
+void rtl819x_watchdog_wqcallback(struct work_struct *work)
+{
+       struct delayed_work *dwork = container_of(work, struct delayed_work, work);
+       struct r8192_priv *priv = container_of(dwork, struct r8192_priv, watch_dog_wq);
+       struct net_device *dev = priv->ieee80211->dev;
+       struct ieee80211_device *ieee = priv->ieee80211;
+       RESET_TYPE      ResetType = RESET_TYPE_NORESET;
+       static u8       check_reset_cnt;
+       bool bBusyTraffic = false;
+       u32     TotalRxBcnNum = 0;
+       u32     TotalRxDataNum = 0;
+
+       if (!priv->up)
+               return;
+       hal_dm_watchdog(dev);
+
+       //to get busy traffic condition
+       if (ieee->state == IEEE80211_LINKED) {
+               if (ieee->LinkDetectInfo.NumRxOkInPeriod > 666 ||
+                   ieee->LinkDetectInfo.NumTxOkInPeriod > 666 ) {
+                       bBusyTraffic = true;
+               }
+               ieee->LinkDetectInfo.NumRxOkInPeriod = 0;
+               ieee->LinkDetectInfo.NumTxOkInPeriod = 0;
+               ieee->LinkDetectInfo.bBusyTraffic = bBusyTraffic;
+       }
+       //added by amy for AP roaming
+       if (priv->ieee80211->state == IEEE80211_LINKED && priv->ieee80211->iw_mode == IW_MODE_INFRA) {
+
+               rtl819x_update_rxcounts(priv, &TotalRxBcnNum, &TotalRxDataNum);
+               if ((TotalRxBcnNum+TotalRxDataNum) == 0) {
+#ifdef TODO
+                       if (rfState == eRfOff)
+                               RT_TRACE(COMP_ERR, "========>%s()\n", __func__);
+#endif
+                       netdev_dbg(dev, "===>%s(): AP is power off, connect another one\n", __func__);
+                       priv->ieee80211->state = IEEE80211_ASSOCIATING;
+                       notify_wx_assoc_event(priv->ieee80211);
+                       RemovePeerTS(priv->ieee80211, priv->ieee80211->current_network.bssid);
+                       priv->ieee80211->link_change(dev);
+                       queue_work(priv->ieee80211->wq, &priv->ieee80211->associate_procedure_wq);
+
+               }
+       }
+       priv->ieee80211->LinkDetectInfo.NumRecvBcnInPeriod = 0;
+       priv->ieee80211->LinkDetectInfo.NumRecvDataInPeriod = 0;
+       //check if reset the driver
+       if (check_reset_cnt++ >= 3) {
+               ResetType = rtl819x_ifcheck_resetornot(dev);
+               check_reset_cnt = 3;
+       }
+       if ((priv->force_reset) || (priv->ResetProgress == RESET_TYPE_NORESET &&
+           (priv->bForcedSilentReset ||
+           (!priv->bDisableNormalResetCheck && ResetType == RESET_TYPE_SILENT)))) { /* This is control by OID set in Pomelo */
+               RT_TRACE(COMP_RESET, "%s():priv->force_reset is %d,priv->ResetProgress is %d, priv->bForcedSilentReset is %d,priv->bDisableNormalResetCheck is %d,ResetType is %d\n", __func__, priv->force_reset, priv->ResetProgress, priv->bForcedSilentReset, priv->bDisableNormalResetCheck, ResetType);
+               rtl819x_ifsilentreset(dev);
+       }
+       priv->force_reset = false;
+       priv->bForcedSilentReset = false;
+       priv->bResetInProgress = false;
+       RT_TRACE(COMP_TRACE, " <==RtUsbCheckForHangWorkItemCallback()\n");
+
+}
+
+void watch_dog_timer_callback(unsigned long data)
+{
+       struct r8192_priv *priv = ieee80211_priv((struct net_device *) data);
+       queue_delayed_work(priv->priv_wq, &priv->watch_dog_wq, 0);
+       mod_timer(&priv->watch_dog_timer, jiffies + MSECS(IEEE80211_WATCH_DOG_TIME));
+}
+int _rtl8192_up(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       int init_status = 0;
+       priv->up = 1;
+       priv->ieee80211->ieee_up = 1;
+       RT_TRACE(COMP_INIT, "Bringing up iface");
+       init_status = rtl8192_adapter_start(dev);
+       if (!init_status) {
+               RT_TRACE(COMP_ERR, "ERR!!! %s(): initialization failed!\n", __func__);
+               priv->up = priv->ieee80211->ieee_up = 0;
+               return -EAGAIN;
+       }
+       RT_TRACE(COMP_INIT, "start adapter finished\n");
+       rtl8192_rx_enable(dev);
+       if (priv->ieee80211->state != IEEE80211_LINKED)
+               ieee80211_softmac_start_protocol(priv->ieee80211);
+       ieee80211_reset_queue(priv->ieee80211);
+       watch_dog_timer_callback((unsigned long) dev);
+       if (!netif_queue_stopped(dev))
+               netif_start_queue(dev);
+       else
+               netif_wake_queue(dev);
+
+       return 0;
+}
+
+
+static int rtl8192_open(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       int ret;
+       down(&priv->wx_sem);
+       ret = rtl8192_up(dev);
+       up(&priv->wx_sem);
+       return ret;
+
+}
+
+
+int rtl8192_up(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+       if (priv->up == 1)
+               return -1;
+
+       return _rtl8192_up(dev);
+}
+
+
+int rtl8192_close(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       int ret;
+
+       down(&priv->wx_sem);
+
+       ret = rtl8192_down(dev);
+
+       up(&priv->wx_sem);
+
+       return ret;
+
+}
+
+int rtl8192_down(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       int i;
+
+       if (priv->up == 0)
+               return -1;
+
+       priv->up = 0;
+       priv->ieee80211->ieee_up = 0;
+       RT_TRACE(COMP_DOWN, "==========>%s()\n", __func__);
+       /* FIXME */
+       if (!netif_queue_stopped(dev))
+               netif_stop_queue(dev);
+
+       rtl8192_rtx_disable(dev);
+
+       /* Tx related queue release */
+       for (i = 0; i < MAX_QUEUE_SIZE; i++)
+               skb_queue_purge(&priv->ieee80211->skb_waitQ[i]);
+       for (i = 0; i < MAX_QUEUE_SIZE; i++)
+               skb_queue_purge(&priv->ieee80211->skb_aggQ[i]);
+
+       for (i = 0; i < MAX_QUEUE_SIZE; i++)
+               skb_queue_purge(&priv->ieee80211->skb_drv_aggQ[i]);
+
+       //as cancel_delayed_work will del work->timer, so if work is not defined as struct delayed_work, it will corrupt
+       rtl8192_cancel_deferred_work(priv);
+       deinit_hal_dm(dev);
+       del_timer_sync(&priv->watch_dog_timer);
+
+
+       ieee80211_softmac_stop_protocol(priv->ieee80211);
+       memset(&priv->ieee80211->current_network, 0, offsetof(struct ieee80211_network, list));
+       RT_TRACE(COMP_DOWN, "<==========%s()\n", __func__);
+
+       return 0;
+}
+
+
+void rtl8192_commit(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       int reset_status = 0;
+       if (priv->up == 0)
+               return;
+       priv->up = 0;
+
+       rtl8192_cancel_deferred_work(priv);
+       del_timer_sync(&priv->watch_dog_timer);
+
+       ieee80211_softmac_stop_protocol(priv->ieee80211);
+
+       rtl8192_rtx_disable(dev);
+       reset_status = _rtl8192_up(dev);
+
+}
+
+void rtl8192_restart(struct work_struct *work)
+{
+       struct r8192_priv *priv = container_of(work, struct r8192_priv, reset_wq);
+       struct net_device *dev = priv->ieee80211->dev;
+
+       down(&priv->wx_sem);
+
+       rtl8192_commit(dev);
+
+       up(&priv->wx_sem);
+}
+
+static void r8192_set_multicast(struct net_device *dev)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       short promisc;
+
+       /* FIXME FIXME */
+
+       promisc = (dev->flags & IFF_PROMISC) ? 1 : 0;
+
+       if (promisc != priv->promisc)
+
+               priv->promisc = promisc;
+}
+
+
+static int r8192_set_mac_adr(struct net_device *dev, void *mac)
+{
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       struct sockaddr *addr = mac;
+
+       down(&priv->wx_sem);
+
+       memcpy(dev->dev_addr, addr->sa_data, ETH_ALEN);
+
+       schedule_work(&priv->reset_wq);
+       up(&priv->wx_sem);
+
+       return 0;
+}
+
+/* based on ipw2200 driver */
+static int rtl8192_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
+{
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct iwreq *wrq = (struct iwreq *)rq;
+       int ret = -1;
+       struct ieee80211_device *ieee = priv->ieee80211;
+       u32 key[4];
+       u8 broadcast_addr[6] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+       struct iw_point *p = &wrq->u.data;
+       struct ieee_param *ipw = NULL;
+
+       down(&priv->wx_sem);
+
+
+       if (p->length < sizeof(struct ieee_param) || !p->pointer) {
+               ret = -EINVAL;
+               goto out;
+       }
+
+       ipw = memdup_user(p->pointer, p->length);
+       if (IS_ERR(ipw)) {
+               ret = PTR_ERR(ipw);
+               goto out;
+       }
+
+       switch (cmd) {
+       case RTL_IOCTL_WPA_SUPPLICANT:
+               //parse here for HW security
+               if (ipw->cmd == IEEE_CMD_SET_ENCRYPTION) {
+                       if (ipw->u.crypt.set_tx) {
+                               if (strcmp(ipw->u.crypt.alg, "CCMP") == 0) {
+                                       ieee->pairwise_key_type = KEY_TYPE_CCMP;
+                               } else if (strcmp(ipw->u.crypt.alg, "TKIP") == 0) {
+                                       ieee->pairwise_key_type = KEY_TYPE_TKIP;
+                               } else if (strcmp(ipw->u.crypt.alg, "WEP") == 0) {
+                                       if (ipw->u.crypt.key_len == 13)
+                                               ieee->pairwise_key_type = KEY_TYPE_WEP104;
+                                       else if (ipw->u.crypt.key_len == 5)
+                                               ieee->pairwise_key_type = KEY_TYPE_WEP40;
+                               } else {
+                                       ieee->pairwise_key_type = KEY_TYPE_NA;
+                               }
+
+                               if (ieee->pairwise_key_type) {
+                                       memcpy((u8 *)key, ipw->u.crypt.key, 16);
+                                       EnableHWSecurityConfig8192(dev);
+                                       //we fill both index entry and 4th entry for pairwise key as in IPW interface, adhoc will only get here, so we need index entry for its default key serching!
+                                       //added by WB.
+                                       setKey(dev, 4, ipw->u.crypt.idx, ieee->pairwise_key_type, (u8 *)ieee->ap_mac_addr, 0, key);
+                                       if (ieee->auth_mode != 2)
+                                               setKey(dev, ipw->u.crypt.idx, ipw->u.crypt.idx, ieee->pairwise_key_type, (u8 *)ieee->ap_mac_addr, 0, key);
+                               }
+                       } else {
+                               memcpy((u8 *)key, ipw->u.crypt.key, 16);
+                               if (strcmp(ipw->u.crypt.alg, "CCMP") == 0) {
+                                       ieee->group_key_type = KEY_TYPE_CCMP;
+                               } else if (strcmp(ipw->u.crypt.alg, "TKIP") == 0) {
+                                       ieee->group_key_type = KEY_TYPE_TKIP;
+                               } else if (strcmp(ipw->u.crypt.alg, "WEP") == 0) {
+                                       if (ipw->u.crypt.key_len == 13)
+                                               ieee->group_key_type = KEY_TYPE_WEP104;
+                                       else if (ipw->u.crypt.key_len == 5)
+                                               ieee->group_key_type = KEY_TYPE_WEP40;
+                               } else {
+                                       ieee->group_key_type = KEY_TYPE_NA;
+                               }
+
+                               if (ieee->group_key_type) {
+                                       setKey(dev, ipw->u.crypt.idx,
+                                              ipw->u.crypt.idx,                //KeyIndex
+                                              ieee->group_key_type,    //KeyType
+                                              broadcast_addr,  //MacAddr
+                                              0,               //DefaultKey
+                                              key);            //KeyContent
+                               }
+                       }
+               }
+               ret = ieee80211_wpa_supplicant_ioctl(priv->ieee80211, &wrq->u.data);
+               break;
+
+       default:
+               ret = -EOPNOTSUPP;
+               break;
+       }
+       kfree(ipw);
+       ipw = NULL;
+out:
+       up(&priv->wx_sem);
+       return ret;
+}
+
+static u8 HwRateToMRate90(bool bIsHT, u8 rate)
+{
+       u8  ret_rate = 0xff;
+
+       if (!bIsHT) {
+               switch (rate) {
+                       case DESC90_RATE1M:
+                               ret_rate = MGN_1M;
+                               break;
+                       case DESC90_RATE2M:
+                               ret_rate = MGN_2M;
+                               break;
+                       case DESC90_RATE5_5M:
+                               ret_rate = MGN_5_5M;
+                               break;
+                       case DESC90_RATE11M:
+                               ret_rate = MGN_11M;
+                               break;
+                       case DESC90_RATE6M:
+                               ret_rate = MGN_6M;
+                               break;
+                       case DESC90_RATE9M:
+                               ret_rate = MGN_9M;
+                               break;
+                       case DESC90_RATE12M:
+                               ret_rate = MGN_12M;
+                               break;
+                       case DESC90_RATE18M:
+                               ret_rate = MGN_18M;
+                               break;
+                       case DESC90_RATE24M:
+                               ret_rate = MGN_24M;
+                               break;
+                       case DESC90_RATE36M:
+                               ret_rate = MGN_36M;
+                               break;
+                       case DESC90_RATE48M:
+                               ret_rate = MGN_48M;
+                               break;
+                       case DESC90_RATE54M:
+                               ret_rate = MGN_54M;
+                               break;
+
+                       default:
+                               ret_rate = 0xff;
+                               RT_TRACE(COMP_RECV, "HwRateToMRate90(): Non supported Rate [%x], bIsHT = %d!!!\n", rate, bIsHT);
+                               break;
+               }
+
+       } else {
+               switch (rate) {
+                       case DESC90_RATEMCS0:
+                               ret_rate = MGN_MCS0;
+                               break;
+                       case DESC90_RATEMCS1:
+                               ret_rate = MGN_MCS1;
+                               break;
+                       case DESC90_RATEMCS2:
+                               ret_rate = MGN_MCS2;
+                               break;
+                       case DESC90_RATEMCS3:
+                               ret_rate = MGN_MCS3;
+                               break;
+                       case DESC90_RATEMCS4:
+                               ret_rate = MGN_MCS4;
+                               break;
+                       case DESC90_RATEMCS5:
+                               ret_rate = MGN_MCS5;
+                               break;
+                       case DESC90_RATEMCS6:
+                               ret_rate = MGN_MCS6;
+                               break;
+                       case DESC90_RATEMCS7:
+                               ret_rate = MGN_MCS7;
+                               break;
+                       case DESC90_RATEMCS8:
+                               ret_rate = MGN_MCS8;
+                               break;
+                       case DESC90_RATEMCS9:
+                               ret_rate = MGN_MCS9;
+                               break;
+                       case DESC90_RATEMCS10:
+                               ret_rate = MGN_MCS10;
+                               break;
+                       case DESC90_RATEMCS11:
+                               ret_rate = MGN_MCS11;
+                               break;
+                       case DESC90_RATEMCS12:
+                               ret_rate = MGN_MCS12;
+                               break;
+                       case DESC90_RATEMCS13:
+                               ret_rate = MGN_MCS13;
+                               break;
+                       case DESC90_RATEMCS14:
+                               ret_rate = MGN_MCS14;
+                               break;
+                       case DESC90_RATEMCS15:
+                               ret_rate = MGN_MCS15;
+                               break;
+                       case DESC90_RATEMCS32:
+                               ret_rate = 0x80|0x20;
+                               break;
+
+                       default:
+                               ret_rate = 0xff;
+                               RT_TRACE(COMP_RECV, "HwRateToMRate90(): Non supported Rate [%x], bIsHT = %d!!!\n", rate, bIsHT);
+                               break;
+               }
+       }
+
+       return ret_rate;
+}
+
+/**
+ * Function:     UpdateRxPktTimeStamp
+ * Overview:     Record the TSF time stamp when receiving a packet
+ *
+ * Input:
+ *       PADAPTER        Adapter
+ *       PRT_RFD         pRfd,
+ *
+ * Output:
+ *       PRT_RFD         pRfd
+ *                               (pRfd->Status.TimeStampHigh is updated)
+ *                               (pRfd->Status.TimeStampLow is updated)
+ * Return:
+ *               None
+ */
+static void UpdateRxPktTimeStamp8190(struct net_device *dev,
+                                    struct ieee80211_rx_stats *stats)
+{
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+
+       if (stats->bIsAMPDU && !stats->bFirstMPDU) {
+               stats->mac_time[0] = priv->LastRxDescTSFLow;
+               stats->mac_time[1] = priv->LastRxDescTSFHigh;
+       } else {
+               priv->LastRxDescTSFLow = stats->mac_time[0];
+               priv->LastRxDescTSFHigh = stats->mac_time[1];
+       }
+}
+
+//by amy 080606
+
+static long rtl819x_translate_todbm(u8 signal_strength_index)// 0-100 index.
+{
+       long    signal_power; // in dBm.
+
+       // Translate to dBm (x=0.5y-95).
+       signal_power = (long)((signal_strength_index + 1) >> 1);
+       signal_power -= 95;
+
+       return signal_power;
+}
+
+
+/* 2008/01/22 MH We can not declare RSSI/EVM total value of sliding window to
+    be a local static. Otherwise, it may increase when we return from S3/S4. The
+    value will be kept in memory or disk. Declare the value in the adaptor
+    and it will be reinitialized when returned from S3/S4. */
+static void rtl8192_process_phyinfo(struct r8192_priv *priv, u8 *buffer,
+                                   struct ieee80211_rx_stats *pprevious_stats,
+                                   struct ieee80211_rx_stats *pcurrent_stats)
+{
+       bool bcheck = false;
+       u8      rfpath;
+       u32     nspatial_stream, tmp_val;
+       static u32 slide_rssi_index, slide_rssi_statistics;
+       static u32 slide_evm_index, slide_evm_statistics;
+       static u32 last_rssi, last_evm;
+
+       static u32 slide_beacon_adc_pwdb_index, slide_beacon_adc_pwdb_statistics;
+       static u32 last_beacon_adc_pwdb;
+
+       struct ieee80211_hdr_3addr *hdr;
+       u16 sc;
+       unsigned int frag, seq;
+       hdr = (struct ieee80211_hdr_3addr *)buffer;
+       sc = le16_to_cpu(hdr->seq_ctl);
+       frag = WLAN_GET_SEQ_FRAG(sc);
+       seq = WLAN_GET_SEQ_SEQ(sc);
+       //cosa add 04292008 to record the sequence number
+       pcurrent_stats->Seq_Num = seq;
+       //
+       // Check whether we should take the previous packet into accounting
+       //
+       if (!pprevious_stats->bIsAMPDU) {
+               // if previous packet is not aggregated packet
+               bcheck = true;
+       }
+
+       if (slide_rssi_statistics++ >= PHY_RSSI_SLID_WIN_MAX) {
+               slide_rssi_statistics = PHY_RSSI_SLID_WIN_MAX;
+               last_rssi = priv->stats.slide_signal_strength[slide_rssi_index];
+               priv->stats.slide_rssi_total -= last_rssi;
+       }
+       priv->stats.slide_rssi_total += pprevious_stats->SignalStrength;
+
+       priv->stats.slide_signal_strength[slide_rssi_index++] = pprevious_stats->SignalStrength;
+       if (slide_rssi_index >= PHY_RSSI_SLID_WIN_MAX)
+               slide_rssi_index = 0;
+
+       // <1> Showed on UI for user, in dbm
+       tmp_val = priv->stats.slide_rssi_total/slide_rssi_statistics;
+       priv->stats.signal_strength = rtl819x_translate_todbm((u8)tmp_val);
+       pcurrent_stats->rssi = priv->stats.signal_strength;
+       //
+       // If the previous packet does not match the criteria, neglect it
+       //
+       if (!pprevious_stats->bPacketMatchBSSID) {
+               if (!pprevious_stats->bToSelfBA)
+                       return;
+       }
+
+       if (!bcheck)
+               return;
+
+
+       //rtl8190_process_cck_rxpathsel(priv,pprevious_stats);//only rtl8190 supported
+
+       //
+       // Check RSSI
+       //
+       priv->stats.num_process_phyinfo++;
+
+       /* record the general signal strength to the sliding window. */
+
+
+       // <2> Showed on UI for engineering
+       // hardware does not provide rssi information for each rf path in CCK
+       if (!pprevious_stats->bIsCCK && (pprevious_stats->bPacketToSelf || pprevious_stats->bToSelfBA)) {
+               for (rfpath = RF90_PATH_A; rfpath < priv->NumTotalRFPath; rfpath++) {
+                       if (!rtl8192_phy_CheckIsLegalRFPath(priv->ieee80211->dev, rfpath))
+                               continue;
+
+                       //Fixed by Jacken 2008-03-20
+                       if (priv->stats.rx_rssi_percentage[rfpath] == 0)
+                               priv->stats.rx_rssi_percentage[rfpath] = pprevious_stats->RxMIMOSignalStrength[rfpath];
+                       if (pprevious_stats->RxMIMOSignalStrength[rfpath]  > priv->stats.rx_rssi_percentage[rfpath]) {
+                               priv->stats.rx_rssi_percentage[rfpath] =
+                                       ((priv->stats.rx_rssi_percentage[rfpath]*(Rx_Smooth_Factor-1)) +
+                                        (pprevious_stats->RxMIMOSignalStrength[rfpath])) /(Rx_Smooth_Factor);
+                               priv->stats.rx_rssi_percentage[rfpath] = priv->stats.rx_rssi_percentage[rfpath]  + 1;
+                       } else {
+                               priv->stats.rx_rssi_percentage[rfpath] =
+                                       ((priv->stats.rx_rssi_percentage[rfpath]*(Rx_Smooth_Factor-1)) +
+                                        (pprevious_stats->RxMIMOSignalStrength[rfpath])) /(Rx_Smooth_Factor);
+                       }
+                       RT_TRACE(COMP_DBG, "priv->stats.rx_rssi_percentage[rfPath]  = %d \n", priv->stats.rx_rssi_percentage[rfpath]);
+               }
+       }
+
+
+       //
+       // Check PWDB.
+       //
+       RT_TRACE(COMP_RXDESC, "Smooth %s PWDB = %d\n",
+                pprevious_stats->bIsCCK ? "CCK" : "OFDM",
+                pprevious_stats->RxPWDBAll);
+
+       if (pprevious_stats->bPacketBeacon) {
+               /* record the beacon pwdb to the sliding window. */
+               if (slide_beacon_adc_pwdb_statistics++ >= PHY_Beacon_RSSI_SLID_WIN_MAX) {
+                       slide_beacon_adc_pwdb_statistics = PHY_Beacon_RSSI_SLID_WIN_MAX;
+                       last_beacon_adc_pwdb = priv->stats.Slide_Beacon_pwdb[slide_beacon_adc_pwdb_index];
+                       priv->stats.Slide_Beacon_Total -= last_beacon_adc_pwdb;
+               }
+               priv->stats.Slide_Beacon_Total += pprevious_stats->RxPWDBAll;
+               priv->stats.Slide_Beacon_pwdb[slide_beacon_adc_pwdb_index] = pprevious_stats->RxPWDBAll;
+               slide_beacon_adc_pwdb_index++;
+               if (slide_beacon_adc_pwdb_index >= PHY_Beacon_RSSI_SLID_WIN_MAX)
+                       slide_beacon_adc_pwdb_index = 0;
+               pprevious_stats->RxPWDBAll = priv->stats.Slide_Beacon_Total/slide_beacon_adc_pwdb_statistics;
+               if (pprevious_stats->RxPWDBAll >= 3)
+                       pprevious_stats->RxPWDBAll -= 3;
+       }
+
+       RT_TRACE(COMP_RXDESC, "Smooth %s PWDB = %d\n",
+                pprevious_stats->bIsCCK ? "CCK" : "OFDM",
+                pprevious_stats->RxPWDBAll);
+
+
+       if (pprevious_stats->bPacketToSelf || pprevious_stats->bPacketBeacon || pprevious_stats->bToSelfBA) {
+               if (priv->undecorated_smoothed_pwdb < 0)        /* initialize */
+                       priv->undecorated_smoothed_pwdb = pprevious_stats->RxPWDBAll;
+               if (pprevious_stats->RxPWDBAll > (u32)priv->undecorated_smoothed_pwdb) {
+                       priv->undecorated_smoothed_pwdb =
+                               (((priv->undecorated_smoothed_pwdb)*(Rx_Smooth_Factor-1)) +
+                                (pprevious_stats->RxPWDBAll)) /(Rx_Smooth_Factor);
+                       priv->undecorated_smoothed_pwdb = priv->undecorated_smoothed_pwdb + 1;
+               } else {
+                       priv->undecorated_smoothed_pwdb =
+                               (((priv->undecorated_smoothed_pwdb)*(Rx_Smooth_Factor-1)) +
+                                (pprevious_stats->RxPWDBAll)) /(Rx_Smooth_Factor);
+               }
+
+       }
+
+       //
+       // Check EVM
+       //
+       /* record the general EVM to the sliding window. */
+       if (pprevious_stats->SignalQuality) {
+               if (pprevious_stats->bPacketToSelf || pprevious_stats->bPacketBeacon || pprevious_stats->bToSelfBA) {
+                       if (slide_evm_statistics++ >= PHY_RSSI_SLID_WIN_MAX) {
+                               slide_evm_statistics = PHY_RSSI_SLID_WIN_MAX;
+                               last_evm = priv->stats.slide_evm[slide_evm_index];
+                               priv->stats.slide_evm_total -= last_evm;
+                       }
+
+                       priv->stats.slide_evm_total += pprevious_stats->SignalQuality;
+
+                       priv->stats.slide_evm[slide_evm_index++] = pprevious_stats->SignalQuality;
+                       if (slide_evm_index >= PHY_RSSI_SLID_WIN_MAX)
+                               slide_evm_index = 0;
+
+                       // <1> Showed on UI for user, in percentage.
+                       tmp_val = priv->stats.slide_evm_total/slide_evm_statistics;
+                       priv->stats.signal_quality = tmp_val;
+                       //cosa add 10/11/2007, Showed on UI for user in Windows Vista, for Link quality.
+                       priv->stats.last_signal_strength_inpercent = tmp_val;
+               }
+
+               // <2> Showed on UI for engineering
+               if (pprevious_stats->bPacketToSelf || pprevious_stats->bPacketBeacon || pprevious_stats->bToSelfBA) {
+                       for (nspatial_stream = 0; nspatial_stream < 2; nspatial_stream++) { /* 2 spatial stream */
+                               if (pprevious_stats->RxMIMOSignalQuality[nspatial_stream] != -1) {
+                                       if (priv->stats.rx_evm_percentage[nspatial_stream] == 0) /* initialize */
+                                               priv->stats.rx_evm_percentage[nspatial_stream] = pprevious_stats->RxMIMOSignalQuality[nspatial_stream];
+                                       priv->stats.rx_evm_percentage[nspatial_stream] =
+                                               ((priv->stats.rx_evm_percentage[nspatial_stream]* (Rx_Smooth_Factor-1)) +
+                                                (pprevious_stats->RxMIMOSignalQuality[nspatial_stream]* 1)) / (Rx_Smooth_Factor);
+                               }
+                       }
+               }
+       }
+
+
+}
+
+/*-----------------------------------------------------------------------------
+ * Function:   rtl819x_query_rxpwrpercentage()
+ *
+ * Overview:
+ *
+ * Input:              char            antpower
+ *
+ * Output:             NONE
+ *
+ * Return:             0-100 percentage
+ *
+ * Revised History:
+ *     When            Who             Remark
+ *     05/26/2008      amy             Create Version 0 porting from windows code.
+ *
+ *---------------------------------------------------------------------------*/
+static u8 rtl819x_query_rxpwrpercentage(char antpower)
+{
+       if ((antpower <= -100) || (antpower >= 20))
+               return  0;
+       else if (antpower >= 0)
+               return  100;
+       else
+               return  100 + antpower;
+
+}      /* QueryRxPwrPercentage */
+
+static u8 rtl819x_evm_dbtopercentage(char value)
+{
+       char ret_val;
+
+       ret_val = value;
+
+       if (ret_val >= 0)
+               ret_val = 0;
+       if (ret_val <= -33)
+               ret_val = -33;
+       ret_val = 0 - ret_val;
+       ret_val *= 3;
+       if (ret_val == 99)
+               ret_val = 100;
+       return ret_val;
+}
+//
+//     Description:
+//     We want good-looking for signal strength/quality
+//     2007/7/19 01:09, by cosa.
+//
+static long rtl819x_signal_scale_mapping(long currsig)
+{
+       long retsig;
+
+       // Step 1. Scale mapping.
+       if (currsig >= 61 && currsig <= 100)
+               retsig = 90 + ((currsig - 60) / 4);
+       else if (currsig >= 41 && currsig <= 60)
+               retsig = 78 + ((currsig - 40) / 2);
+       else if (currsig >= 31 && currsig <= 40)
+               retsig = 66 + (currsig - 30);
+       else if (currsig >= 21 && currsig <= 30)
+               retsig = 54 + (currsig - 20);
+       else if (currsig >= 5 && currsig <= 20)
+               retsig = 42 + (((currsig - 5) * 2) / 3);
+       else if (currsig == 4)
+               retsig = 36;
+       else if (currsig == 3)
+               retsig = 27;
+       else if (currsig == 2)
+               retsig = 18;
+       else if (currsig == 1)
+               retsig = 9;
+       else
+               retsig = currsig;
+
+       return retsig;
+}
+
+static inline bool rx_hal_is_cck_rate(struct rx_drvinfo_819x_usb *pdrvinfo)
+{
+       if (pdrvinfo->RxHT)
+               return false;
+
+       switch (pdrvinfo->RxRate) {
+       case DESC90_RATE1M:
+       case DESC90_RATE2M:
+       case DESC90_RATE5_5M:
+       case DESC90_RATE11M:
+               return true;
+       default:
+               return false;
+       }
+}
+
+static void rtl8192_query_rxphystatus(struct r8192_priv *priv,
+                                     struct ieee80211_rx_stats *pstats,
+                                     rx_drvinfo_819x_usb  *pdrvinfo,
+                                     struct ieee80211_rx_stats *precord_stats,
+                                     bool bpacket_match_bssid,
+                                     bool bpacket_toself,
+                                     bool bPacketBeacon,
+                                     bool bToSelfBA)
+{
+       phy_sts_ofdm_819xusb_t *pofdm_buf;
+       phy_sts_cck_819xusb_t   *pcck_buf;
+       phy_ofdm_rx_status_rxsc_sgien_exintfflag *prxsc;
+       u8                              *prxpkt;
+       u8                              i, max_spatial_stream, tmp_rxsnr, tmp_rxevm, rxsc_sgien_exflg;
+       char                            rx_pwr[4], rx_pwr_all = 0;
+       char                            rx_snrX, rx_evmX;
+       u8                              evm, pwdb_all;
+       u32                             RSSI, total_rssi = 0;
+       u8                              is_cck_rate = 0;
+       u8                              rf_rx_num = 0;
+       u8                              sq;
+
+
+       priv->stats.numqry_phystatus++;
+
+       is_cck_rate = rx_hal_is_cck_rate(pdrvinfo);
+
+       // Record it for next packet processing
+       memset(precord_stats, 0, sizeof(struct ieee80211_rx_stats));
+       pstats->bPacketMatchBSSID = precord_stats->bPacketMatchBSSID = bpacket_match_bssid;
+       pstats->bPacketToSelf = precord_stats->bPacketToSelf = bpacket_toself;
+       pstats->bIsCCK = precord_stats->bIsCCK = is_cck_rate;
+       pstats->bPacketBeacon = precord_stats->bPacketBeacon = bPacketBeacon;
+       pstats->bToSelfBA = precord_stats->bToSelfBA = bToSelfBA;
+
+       prxpkt = (u8 *)pdrvinfo;
+
+       /* Move pointer to the 16th bytes. Phy status start address. */
+       prxpkt += sizeof(rx_drvinfo_819x_usb);
+
+       /* Initial the cck and ofdm buffer pointer */
+       pcck_buf = (phy_sts_cck_819xusb_t *)prxpkt;
+       pofdm_buf = (phy_sts_ofdm_819xusb_t *)prxpkt;
+
+       pstats->RxMIMOSignalQuality[0] = -1;
+       pstats->RxMIMOSignalQuality[1] = -1;
+       precord_stats->RxMIMOSignalQuality[0] = -1;
+       precord_stats->RxMIMOSignalQuality[1] = -1;
+
+       if (is_cck_rate) {
+               //
+               // (1)Hardware does not provide RSSI for CCK
+               //
+
+               //
+               // (2)PWDB, Average PWDB cacluated by hardware (for rate adaptive)
+               //
+               u8 report;
+
+               priv->stats.numqry_phystatusCCK++;
+
+               if (!priv->bCckHighPower) {
+                       report = pcck_buf->cck_agc_rpt & 0xc0;
+                       report >>= 6;
+                       switch (report) {
+                               //Fixed by Jacken from Bryant 2008-03-20
+                               //Original value is -38 , -26 , -14 , -2
+                               //Fixed value is -35 , -23 , -11 , 6
+                       case 0x3:
+                               rx_pwr_all = -35 - (pcck_buf->cck_agc_rpt & 0x3e);
+                               break;
+                       case 0x2:
+                               rx_pwr_all = -23 - (pcck_buf->cck_agc_rpt & 0x3e);
+                               break;
+                       case 0x1:
+                               rx_pwr_all = -11 - (pcck_buf->cck_agc_rpt & 0x3e);
+                               break;
+                       case 0x0:
+                               rx_pwr_all = 6 - (pcck_buf->cck_agc_rpt & 0x3e);
+                               break;
+                       }
+               } else {
+                       report = pcck_buf->cck_agc_rpt & 0x60;
+                       report >>= 5;
+                       switch (report) {
+                       case 0x3:
+                               rx_pwr_all = -35 - ((pcck_buf->cck_agc_rpt & 0x1f)<<1);
+                               break;
+                       case 0x2:
+                               rx_pwr_all = -23 - ((pcck_buf->cck_agc_rpt & 0x1f)<<1);
+                               break;
+                       case 0x1:
+                               rx_pwr_all = -11 - ((pcck_buf->cck_agc_rpt & 0x1f)<<1);
+                               break;
+                       case 0x0:
+                               rx_pwr_all = 6 - ((pcck_buf->cck_agc_rpt & 0x1f)<<1);
+                               break;
+                       }
+               }
+
+               pwdb_all = rtl819x_query_rxpwrpercentage(rx_pwr_all);
+               pstats->RxPWDBAll = precord_stats->RxPWDBAll = pwdb_all;
+               pstats->RecvSignalPower = pwdb_all;
+
+               //
+               // (3) Get Signal Quality (EVM)
+               //
+
+               if (pstats->RxPWDBAll > 40) {
+                       sq = 100;
+               } else {
+                       sq = pcck_buf->sq_rpt;
+
+                       if (pcck_buf->sq_rpt > 64)
+                               sq = 0;
+                       else if (pcck_buf->sq_rpt < 20)
+                               sq = 100;
+                       else
+                               sq = ((64-sq) * 100) / 44;
+               }
+               pstats->SignalQuality = precord_stats->SignalQuality = sq;
+               pstats->RxMIMOSignalQuality[0] = precord_stats->RxMIMOSignalQuality[0] = sq;
+               pstats->RxMIMOSignalQuality[1] = precord_stats->RxMIMOSignalQuality[1] = -1;
+
+       } else {
+               priv->stats.numqry_phystatusHT++;
+               //
+               // (1)Get RSSI for HT rate
+               //
+               for (i = RF90_PATH_A; i < priv->NumTotalRFPath; i++) {
+                       // 2008/01/30 MH we will judge RF RX path now.
+                       if (priv->brfpath_rxenable[i])
+                               rf_rx_num++;
+                       else
+                               continue;
+
+                       if (!rtl8192_phy_CheckIsLegalRFPath(priv->ieee80211->dev, i))
+                               continue;
+
+                       //Fixed by Jacken from Bryant 2008-03-20
+                       //Original value is 106
+                       rx_pwr[i] = ((pofdm_buf->trsw_gain_X[i]&0x3F)*2) - 106;
+
+                       //Get Rx snr value in DB
+                       tmp_rxsnr =     pofdm_buf->rxsnr_X[i];
+                       rx_snrX = (char)(tmp_rxsnr);
+                       rx_snrX /= 2;
+                       priv->stats.rxSNRdB[i] = (long)rx_snrX;
+
+                       /* Translate DBM to percentage. */
+                       RSSI = rtl819x_query_rxpwrpercentage(rx_pwr[i]);
+                       total_rssi += RSSI;
+
+                       /* Record Signal Strength for next packet */
+                       pstats->RxMIMOSignalStrength[i] = (u8) RSSI;
+                       precord_stats->RxMIMOSignalStrength[i] = (u8) RSSI;
+               }
+
+
+               //
+               // (2)PWDB, Average PWDB cacluated by hardware (for rate adaptive)
+               //
+               //Fixed by Jacken from Bryant 2008-03-20
+               //Original value is 106
+               rx_pwr_all = (((pofdm_buf->pwdb_all) >> 1)& 0x7f) -106;
+               pwdb_all = rtl819x_query_rxpwrpercentage(rx_pwr_all);
+
+               pstats->RxPWDBAll = precord_stats->RxPWDBAll = pwdb_all;
+               pstats->RxPower = precord_stats->RxPower =  rx_pwr_all;
+
+               //
+               // (3)EVM of HT rate
+               //
+               if (pdrvinfo->RxHT && pdrvinfo->RxRate >= DESC90_RATEMCS8 &&
+                   pdrvinfo->RxRate <= DESC90_RATEMCS15)
+                       max_spatial_stream = 2; //both spatial stream make sense
+               else
+                       max_spatial_stream = 1; //only spatial stream 1 makes sense
+
+               for (i = 0; i < max_spatial_stream; i++) {
+                       tmp_rxevm =     pofdm_buf->rxevm_X[i];
+                       rx_evmX = (char)(tmp_rxevm);
+
+                       // Do not use shift operation like "rx_evmX >>= 1" because the compiler of free build environment
+                       // will set the most significant bit to "zero" when doing shifting operation which may change a negative
+                       // value to positive one, then the dbm value (which is supposed to be negative)  is not correct anymore.
+                       rx_evmX /= 2;   //dbm
+
+                       evm = rtl819x_evm_dbtopercentage(rx_evmX);
+                       if (i == 0) /* Fill value in RFD, Get the first spatial stream only */
+                               pstats->SignalQuality = precord_stats->SignalQuality = (u8)(evm & 0xff);
+                       pstats->RxMIMOSignalQuality[i] = precord_stats->RxMIMOSignalQuality[i] = (u8)(evm & 0xff);
+               }
+
+
+               /* record rx statistics for debug */
+               rxsc_sgien_exflg = pofdm_buf->rxsc_sgien_exflg;
+               prxsc = (phy_ofdm_rx_status_rxsc_sgien_exintfflag *)&rxsc_sgien_exflg;
+               if (pdrvinfo->BW)       /* 40M channel */
+                       priv->stats.received_bwtype[1+prxsc->rxsc]++;
+               else                            //20M channel
+                       priv->stats.received_bwtype[0]++;
+       }
+
+       //UI BSS List signal strength(in percentage), make it good looking, from 0~100.
+       //It is assigned to the BSS List in GetValueFromBeaconOrProbeRsp().
+       if (is_cck_rate) {
+               pstats->SignalStrength = precord_stats->SignalStrength = (u8)(rtl819x_signal_scale_mapping((long)pwdb_all));
+       } else {
+               // We can judge RX path number now.
+               if (rf_rx_num != 0)
+                       pstats->SignalStrength = precord_stats->SignalStrength = (u8)(rtl819x_signal_scale_mapping((long)(total_rssi /= rf_rx_num)));
+       }
+}      /* QueryRxPhyStatus8190Pci */
+
+static void rtl8192_record_rxdesc_forlateruse(struct ieee80211_rx_stats *psrc_stats,
+                                             struct ieee80211_rx_stats *ptarget_stats)
+{
+       ptarget_stats->bIsAMPDU = psrc_stats->bIsAMPDU;
+       ptarget_stats->bFirstMPDU = psrc_stats->bFirstMPDU;
+       ptarget_stats->Seq_Num = psrc_stats->Seq_Num;
+}
+
+
+static void TranslateRxSignalStuff819xUsb(struct sk_buff *skb,
+                                         struct ieee80211_rx_stats *pstats,
+                                         rx_drvinfo_819x_usb  *pdrvinfo)
+{
+       // TODO: We must only check packet for current MAC address. Not finish
+       rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
+       struct net_device *dev = info->dev;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       bool bpacket_match_bssid, bpacket_toself;
+       bool bPacketBeacon = false, bToSelfBA = false;
+       static struct ieee80211_rx_stats  previous_stats;
+       struct ieee80211_hdr_3addr *hdr;//by amy
+       u16 fc, type;
+
+       // Get Signal Quality for only RX data queue (but not command queue)
+
+       u8 *tmp_buf;
+       u8  *praddr;
+
+       /* Get MAC frame start address. */
+       tmp_buf = (u8 *)skb->data;
+
+       hdr = (struct ieee80211_hdr_3addr *)tmp_buf;
+       fc = le16_to_cpu(hdr->frame_ctl);
+       type = WLAN_FC_GET_TYPE(fc);
+       praddr = hdr->addr1;
+
+       /* Check if the received packet is acceptable. */
+       bpacket_match_bssid = (IEEE80211_FTYPE_CTL != type) &&
+                              (eqMacAddr(priv->ieee80211->current_network.bssid,  (fc & IEEE80211_FCTL_TODS) ? hdr->addr1 : (fc & IEEE80211_FCTL_FROMDS) ? hdr->addr2 : hdr->addr3))
+                              && (!pstats->bHwError) && (!pstats->bCRC) && (!pstats->bICV);
+       bpacket_toself =  bpacket_match_bssid & (eqMacAddr(praddr, priv->ieee80211->dev->dev_addr));
+
+       if (WLAN_FC_GET_FRAMETYPE(fc) == IEEE80211_STYPE_BEACON)
+               bPacketBeacon = true;
+       if (WLAN_FC_GET_FRAMETYPE(fc) == IEEE80211_STYPE_BLOCKACK) {
+               if ((eqMacAddr(praddr, dev->dev_addr)))
+                       bToSelfBA = true;
+       }
+
+
+
+       if (bpacket_match_bssid)
+               priv->stats.numpacket_matchbssid++;
+       if (bpacket_toself)
+               priv->stats.numpacket_toself++;
+       //
+       // Process PHY information for previous packet (RSSI/PWDB/EVM)
+       //
+       // Because phy information is contained in the last packet of AMPDU only, so driver
+       // should process phy information of previous packet
+       rtl8192_process_phyinfo(priv, tmp_buf, &previous_stats, pstats);
+       rtl8192_query_rxphystatus(priv, pstats, pdrvinfo, &previous_stats, bpacket_match_bssid, bpacket_toself, bPacketBeacon, bToSelfBA);
+       rtl8192_record_rxdesc_forlateruse(pstats, &previous_stats);
+
+}
+
+/**
+* Function:    UpdateReceivedRateHistogramStatistics
+* Overview:    Record the received data rate
+*
+* Input:
+*      struct net_device *dev
+*      struct ieee80211_rx_stats *stats
+*
+* Output:
+*
+*                      (priv->stats.ReceivedRateHistogram[] is updated)
+* Return:
+*              None
+*/
+static void
+UpdateReceivedRateHistogramStatistics8190(struct net_device *dev,
+                                         struct ieee80211_rx_stats *stats)
+{
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       u32 rcvType = 1;   //0: Total, 1:OK, 2:CRC, 3:ICV
+       u32 rateIndex;
+       u32 preamble_guardinterval;  //1: short preamble/GI, 0: long preamble/GI
+
+
+       if (stats->bCRC)
+               rcvType = 2;
+       else if (stats->bICV)
+               rcvType = 3;
+
+       if (stats->bShortPreamble)
+               preamble_guardinterval = 1;// short
+       else
+               preamble_guardinterval = 0;// long
+
+       switch (stats->rate) {
+       /* CCK rate */
+       case MGN_1M:
+               rateIndex = 0;
+               break;
+       case MGN_2M:
+               rateIndex = 1;
+               break;
+       case MGN_5_5M:
+               rateIndex = 2;
+               break;
+       case MGN_11M:
+               rateIndex = 3;
+               break;
+       /* Legacy OFDM rate */
+       case MGN_6M:
+               rateIndex = 4;
+               break;
+       case MGN_9M:
+               rateIndex = 5;
+               break;
+       case MGN_12M:
+               rateIndex = 6;
+               break;
+       case MGN_18M:
+               rateIndex = 7;
+               break;
+       case MGN_24M:
+               rateIndex = 8;
+               break;
+       case MGN_36M:
+               rateIndex = 9;
+               break;
+       case MGN_48M:
+               rateIndex = 10;
+               break;
+       case MGN_54M:
+               rateIndex = 11;
+               break;
+       /* 11n High throughput rate */
+       case MGN_MCS0:
+               rateIndex = 12;
+               break;
+       case MGN_MCS1:
+               rateIndex = 13;
+               break;
+       case MGN_MCS2:
+               rateIndex = 14;
+               break;
+       case MGN_MCS3:
+               rateIndex = 15;
+               break;
+       case MGN_MCS4:
+               rateIndex = 16;
+               break;
+       case MGN_MCS5:
+               rateIndex = 17;
+               break;
+       case MGN_MCS6:
+               rateIndex = 18;
+               break;
+       case MGN_MCS7:
+               rateIndex = 19;
+               break;
+       case MGN_MCS8:
+               rateIndex = 20;
+               break;
+       case MGN_MCS9:
+               rateIndex = 21;
+               break;
+       case MGN_MCS10:
+               rateIndex = 22;
+               break;
+       case MGN_MCS11:
+               rateIndex = 23;
+               break;
+       case MGN_MCS12:
+               rateIndex = 24;
+               break;
+       case MGN_MCS13:
+               rateIndex = 25;
+               break;
+       case MGN_MCS14:
+               rateIndex = 26;
+               break;
+       case MGN_MCS15:
+               rateIndex = 27;
+               break;
+       default:
+               rateIndex = 28;
+               break;
+       }
+       priv->stats.received_preamble_GI[preamble_guardinterval][rateIndex]++;
+       priv->stats.received_rate_histogram[0][rateIndex]++; //total
+       priv->stats.received_rate_histogram[rcvType][rateIndex]++;
+}
+
+
+static void query_rxdesc_status(struct sk_buff *skb,
+                               struct ieee80211_rx_stats *stats,
+                               bool bIsRxAggrSubframe)
+{
+       rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
+       struct net_device *dev = info->dev;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       rx_drvinfo_819x_usb  *driver_info = NULL;
+
+       //
+       //Get Rx Descriptor Information
+       //
+       rx_desc_819x_usb *desc = (rx_desc_819x_usb *)skb->data;
+
+       stats->Length = desc->Length;
+       stats->RxDrvInfoSize = desc->RxDrvInfoSize;
+       stats->RxBufShift = 0;
+       stats->bICV = desc->ICV;
+       stats->bCRC = desc->CRC32;
+       stats->bHwError = stats->bCRC|stats->bICV;
+       /* RTL8190 set this bit to indicate that Hw does not decrypt packet */
+       stats->Decrypted = !desc->SWDec;
+
+       if ((priv->ieee80211->pHTInfo->bCurrentHTSupport == true) && (priv->ieee80211->pairwise_key_type == KEY_TYPE_CCMP))
+               stats->bHwError = false;
+       else
+               stats->bHwError = stats->bCRC|stats->bICV;
+
+       if (stats->Length < 24 || stats->Length > MAX_8192U_RX_SIZE)
+               stats->bHwError |= 1;
+       //
+       //Get Driver Info
+       //
+       // TODO: Need to verify it on FGPA platform
+       //Driver info are written to the RxBuffer following rx desc
+       if (stats->RxDrvInfoSize != 0) {
+               driver_info = (rx_drvinfo_819x_usb *)(skb->data + sizeof(rx_desc_819x_usb) +
+                                                     stats->RxBufShift);
+               /* unit: 0.5M */
+               /* TODO */
+               if (!stats->bHwError) {
+                       u8      ret_rate;
+                       ret_rate = HwRateToMRate90(driver_info->RxHT, driver_info->RxRate);
+                       if (ret_rate == 0xff) {
+                               // Abnormal Case: Receive CRC OK packet with Rx descriptor indicating non supported rate.
+                               // Special Error Handling here, 2008.05.16, by Emily
+
+                               stats->bHwError = 1;
+                               stats->rate = MGN_1M;   //Set 1M rate by default
+                       } else {
+                               stats->rate = ret_rate;
+                       }
+               } else {
+                       stats->rate = 0x02;
+               }
+
+               stats->bShortPreamble = driver_info->SPLCP;
+
+
+               UpdateReceivedRateHistogramStatistics8190(dev, stats);
+
+               stats->bIsAMPDU = (driver_info->PartAggr == 1);
+               stats->bFirstMPDU = (driver_info->PartAggr == 1) && (driver_info->FirstAGGR == 1);
+               stats->TimeStampLow = driver_info->TSFL;
+               // xiong mask it, 070514
+
+               UpdateRxPktTimeStamp8190(dev, stats);
+
+               //
+               // Rx A-MPDU
+               //
+               if (driver_info->FirstAGGR == 1 || driver_info->PartAggr == 1)
+                       RT_TRACE(COMP_RXDESC, "driver_info->FirstAGGR = %d, driver_info->PartAggr = %d\n",
+                                driver_info->FirstAGGR, driver_info->PartAggr);
+
+       }
+
+       skb_pull(skb, sizeof(rx_desc_819x_usb));
+       //
+       // Get Total offset of MPDU Frame Body
+       //
+       if ((stats->RxBufShift + stats->RxDrvInfoSize) > 0) {
+               stats->bShift = 1;
+               skb_pull(skb, stats->RxBufShift + stats->RxDrvInfoSize);
+       }
+
+       if (driver_info) {
+               stats->RxIs40MHzPacket = driver_info->BW;
+               TranslateRxSignalStuff819xUsb(skb, stats, driver_info);
+       }
+}
+
+static void rtl8192_rx_nomal(struct sk_buff *skb)
+{
+       rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
+       struct net_device *dev = info->dev;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct ieee80211_rx_stats stats = {
+               .signal = 0,
+               .noise = -98,
+               .rate = 0,
+               .freq = IEEE80211_24GHZ_BAND,
+       };
+       u32 rx_pkt_len = 0;
+       struct ieee80211_hdr_1addr *ieee80211_hdr = NULL;
+       bool unicast_packet = false;
+
+       /* 20 is for ps-poll */
+       if ((skb->len >= (20 + sizeof(rx_desc_819x_usb))) && (skb->len < RX_URB_SIZE)) {
+               /* first packet should not contain Rx aggregation header */
+               query_rxdesc_status(skb, &stats, false);
+               /* TODO */
+               /* hardware related info */
+               /* Process the MPDU received */
+               skb_trim(skb, skb->len - 4/*sCrcLng*/);
+
+               rx_pkt_len = skb->len;
+               ieee80211_hdr = (struct ieee80211_hdr_1addr *)skb->data;
+               unicast_packet = false;
+               if (is_broadcast_ether_addr(ieee80211_hdr->addr1)) {
+                       //TODO
+               } else if (is_multicast_ether_addr(ieee80211_hdr->addr1)) {
+                       //TODO
+               } else {
+                       /* unicast packet */
+                       unicast_packet = true;
+               }
+
+               if (!ieee80211_rx(priv->ieee80211, skb, &stats)) {
+                       dev_kfree_skb_any(skb);
+               } else {
+                       priv->stats.rxoktotal++;
+                       if (unicast_packet)
+                               priv->stats.rxbytesunicast += rx_pkt_len;
+               }
+       } else {
+               priv->stats.rxurberr++;
+               netdev_dbg(dev, "actual_length: %d\n", skb->len);
+               dev_kfree_skb_any(skb);
+       }
+
+}
+
+static void rtl819xusb_process_received_packet(struct net_device *dev,
+                                              struct ieee80211_rx_stats *pstats)
+{
+       u8      *frame;
+       u16     frame_len = 0;
+       struct r8192_priv *priv = ieee80211_priv(dev);
+
+       // Get shifted bytes of Starting address of 802.11 header. 2006.09.28, by Emily
+       //porting by amy 080508
+       pstats->virtual_address += get_rxpacket_shiftbytes_819xusb(pstats);
+       frame = pstats->virtual_address;
+       frame_len = pstats->packetlength;
+#ifdef TODO    // by amy about HCT
+       if (!Adapter->bInHctTest)
+               CountRxErrStatistics(Adapter, pRfd);
+#endif
+#ifdef ENABLE_PS  //by amy for adding ps function in future
+       RT_RF_POWER_STATE rtState;
+       // When RF is off, we should not count the packet for hw/sw synchronize
+       // reason, ie. there may be a duration while sw switch is changed and hw
+       // switch is being changed. 2006.12.04, by shien chang.
+       Adapter->HalFunc.GetHwRegHandler(Adapter, HW_VAR_RF_STATE, (u8 *)(&rtState));
+       if (rtState == eRfOff)
+               return;
+#endif
+       priv->stats.rxframgment++;
+
+#ifdef TODO
+       RmMonitorSignalStrength(Adapter, pRfd);
+#endif
+       /* 2007/01/16 MH Add RX command packet handle here. */
+       /* 2007/03/01 MH We have to release RFD and return if rx pkt is cmd pkt. */
+       if (rtl819xusb_rx_command_packet(dev, pstats))
+               return;
+
+#ifdef SW_CRC_CHECK
+       SwCrcCheck();
+#endif
+
+
+}
+
+static void query_rx_cmdpkt_desc_status(struct sk_buff *skb,
+                                       struct ieee80211_rx_stats *stats)
+{
+       rx_desc_819x_usb *desc = (rx_desc_819x_usb *)skb->data;
+
+       //
+       //Get Rx Descriptor Information
+       //
+       stats->virtual_address = (u8 *)skb->data;
+       stats->Length = desc->Length;
+       stats->RxDrvInfoSize = 0;
+       stats->RxBufShift = 0;
+       stats->packetlength = stats->Length-scrclng;
+       stats->fraglength = stats->packetlength;
+       stats->fragoffset = 0;
+       stats->ntotalfrag = 1;
+}
+
+
+static void rtl8192_rx_cmd(struct sk_buff *skb)
+{
+       struct rtl8192_rx_info *info = (struct rtl8192_rx_info *)skb->cb;
+       struct net_device *dev = info->dev;
+       /* TODO */
+       struct ieee80211_rx_stats stats = {
+               .signal = 0,
+               .noise = -98,
+               .rate = 0,
+               .freq = IEEE80211_24GHZ_BAND,
+       };
+
+       if ((skb->len >= (20 + sizeof(rx_desc_819x_usb))) && (skb->len < RX_URB_SIZE)) {
+
+               query_rx_cmdpkt_desc_status(skb, &stats);
+               // this is to be done by amy 080508     prfd->queue_id = 1;
+
+
+               //
+               //  Process the command packet received.
+               //
+
+               rtl819xusb_process_received_packet(dev, &stats);
+
+               dev_kfree_skb_any(skb);
+       }
+}
+
+void rtl8192_irq_rx_tasklet(struct r8192_priv *priv)
+{
+       struct sk_buff *skb;
+       struct rtl8192_rx_info *info;
+
+       while (NULL != (skb = skb_dequeue(&priv->skb_queue))) {
+               info = (struct rtl8192_rx_info *)skb->cb;
+               switch (info->out_pipe) {
+               /* Nomal packet pipe */
+               case 3:
+                       priv->IrpPendingCount--;
+                       rtl8192_rx_nomal(skb);
+                       break;
+
+               /* Command packet pipe */
+               case 9:
+                       RT_TRACE(COMP_RECV, "command in-pipe index(%d)\n",
+                                info->out_pipe);
+
+                       rtl8192_rx_cmd(skb);
+                       break;
+
+               default: /* should never get here! */
+                       RT_TRACE(COMP_ERR, "Unknown in-pipe index(%d)\n",
+                                info->out_pipe);
+                       dev_kfree_skb(skb);
+                       break;
+
+               }
+       }
+}
+
+static const struct net_device_ops rtl8192_netdev_ops = {
+       .ndo_open               = rtl8192_open,
+       .ndo_stop               = rtl8192_close,
+       .ndo_get_stats          = rtl8192_stats,
+       .ndo_tx_timeout         = tx_timeout,
+       .ndo_do_ioctl           = rtl8192_ioctl,
+       .ndo_set_rx_mode        = r8192_set_multicast,
+       .ndo_set_mac_address    = r8192_set_mac_adr,
+       .ndo_validate_addr      = eth_validate_addr,
+       .ndo_change_mtu         = eth_change_mtu,
+       .ndo_start_xmit         = ieee80211_xmit,
+};
+
+
+/****************************************************************************
+     ---------------------------- USB_STUFF---------------------------
+*****************************************************************************/
+
+static int rtl8192_usb_probe(struct usb_interface *intf,
+                            const struct usb_device_id *id)
+{
+       struct net_device *dev = NULL;
+       struct r8192_priv *priv = NULL;
+       struct usb_device *udev = interface_to_usbdev(intf);
+       int ret;
+       RT_TRACE(COMP_INIT, "Oops: i'm coming\n");
+
+       dev = alloc_ieee80211(sizeof(struct r8192_priv));
+       if (dev == NULL)
+               return -ENOMEM;
+
+       usb_set_intfdata(intf, dev);
+       SET_NETDEV_DEV(dev, &intf->dev);
+       priv = ieee80211_priv(dev);
+       priv->ieee80211 = netdev_priv(dev);
+       priv->udev = udev;
+
+       dev->netdev_ops = &rtl8192_netdev_ops;
+
+       dev->wireless_handlers = (struct iw_handler_def *) &r8192_wx_handlers_def;
+
+       dev->type = ARPHRD_ETHER;
+
+       dev->watchdog_timeo = HZ*3;     //modified by john, 0805
+
+       if (dev_alloc_name(dev, ifname) < 0) {
+               RT_TRACE(COMP_INIT, "Oops: devname already taken! Trying wlan%%d...\n");
+               ifname = "wlan%d";
+               dev_alloc_name(dev, ifname);
+       }
+
+       RT_TRACE(COMP_INIT, "Driver probe completed1\n");
+       if (rtl8192_init(dev) != 0) {
+               RT_TRACE(COMP_ERR, "Initialization failed");
+               ret = -ENODEV;
+               goto fail;
+       }
+       netif_carrier_off(dev);
+       netif_stop_queue(dev);
+
+       ret = register_netdev(dev);
+       if (ret)
+               goto fail2;
+
+       RT_TRACE(COMP_INIT, "dev name=======> %s\n", dev->name);
+       rtl8192_proc_init_one(dev);
+
+
+       RT_TRACE(COMP_INIT, "Driver probe completed\n");
+       return 0;
+
+fail2:
+       rtl8192_down(dev);
+       kfree(priv->pFirmware);
+       priv->pFirmware = NULL;
+       rtl8192_usb_deleteendpoints(dev);
+       destroy_workqueue(priv->priv_wq);
+       mdelay(10);
+fail:
+       free_ieee80211(dev);
+
+       RT_TRACE(COMP_ERR, "wlan driver load failed\n");
+       return ret;
+}
+
+//detach all the work and timer structure declared or inititialize in r8192U_init function.
+void rtl8192_cancel_deferred_work(struct r8192_priv *priv)
+{
+
+       cancel_work_sync(&priv->reset_wq);
+       cancel_delayed_work(&priv->watch_dog_wq);
+       cancel_delayed_work(&priv->update_beacon_wq);
+       cancel_work_sync(&priv->qos_activate);
+}
+
+
+static void rtl8192_usb_disconnect(struct usb_interface *intf)
+{
+       struct net_device *dev = usb_get_intfdata(intf);
+
+       struct r8192_priv *priv = ieee80211_priv(dev);
+       if (dev) {
+
+               unregister_netdev(dev);
+
+               RT_TRACE(COMP_DOWN, "=============>wlan driver to be removed\n");
+               rtl8192_proc_remove_one(dev);
+
+               rtl8192_down(dev);
+               kfree(priv->pFirmware);
+               priv->pFirmware = NULL;
+               rtl8192_usb_deleteendpoints(dev);
+               destroy_workqueue(priv->priv_wq);
+               mdelay(10);
+
+       }
+       free_ieee80211(dev);
+       RT_TRACE(COMP_DOWN, "wlan driver removed\n");
+}
+
+static int __init rtl8192_usb_module_init(void)
+{
+       int ret;
+
+#ifdef CONFIG_IEEE80211_DEBUG
+       ret = ieee80211_debug_init();
+       if (ret) {
+               pr_err("ieee80211_debug_init() failed %d\n", ret);
+               return ret;
+       }
+#endif
+       ret = ieee80211_crypto_init();
+       if (ret) {
+               pr_err("ieee80211_crypto_init() failed %d\n", ret);
+               return ret;
+       }
+
+       ret = ieee80211_crypto_tkip_init();
+       if (ret) {
+               pr_err("ieee80211_crypto_tkip_init() failed %d\n", ret);
+               return ret;
+       }
+
+       ret = ieee80211_crypto_ccmp_init();
+       if (ret) {
+               pr_err("ieee80211_crypto_ccmp_init() failed %d\n", ret);
+               return ret;
+       }
+
+       ret = ieee80211_crypto_wep_init();
+       if (ret) {
+               pr_err("ieee80211_crypto_wep_init() failed %d\n", ret);
+               return ret;
+       }
+
+       pr_info("\nLinux kernel driver for RTL8192 based WLAN cards\n");
+       pr_info("Copyright (c) 2007-2008, Realsil Wlan\n");
+       RT_TRACE(COMP_INIT, "Initializing module");
+       RT_TRACE(COMP_INIT, "Wireless extensions version %d", WIRELESS_EXT);
+       rtl8192_proc_module_init();
+       return usb_register(&rtl8192_usb_driver);
+}
+
+
+static void __exit rtl8192_usb_module_exit(void)
+{
+       usb_deregister(&rtl8192_usb_driver);
+
+       RT_TRACE(COMP_DOWN, "Exiting");
+}
+
+
+void rtl8192_try_wake_queue(struct net_device *dev, int pri)
+{
+       unsigned long flags;
+       short enough_desc;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+
+       spin_lock_irqsave(&priv->tx_lock, flags);
+       enough_desc = check_nic_enough_desc(dev, pri);
+       spin_unlock_irqrestore(&priv->tx_lock, flags);
+
+       if (enough_desc)
+               ieee80211_wake_queue(priv->ieee80211);
+}
+
+void EnableHWSecurityConfig8192(struct net_device *dev)
+{
+       u8 SECR_value = 0x0;
+       struct r8192_priv *priv = (struct r8192_priv *)ieee80211_priv(dev);
+       struct ieee80211_device *ieee = priv->ieee80211;
+       SECR_value = SCR_TxEncEnable | SCR_RxDecEnable;
+       if (((KEY_TYPE_WEP40 == ieee->pairwise_key_type) || (KEY_TYPE_WEP104 == ieee->pairwise_key_type)) && (priv->ieee80211->auth_mode != 2)) {
+               SECR_value |= SCR_RxUseDK;
+               SECR_value |= SCR_TxUseDK;
+       } else if ((ieee->iw_mode == IW_MODE_ADHOC) && (ieee->pairwise_key_type & (KEY_TYPE_CCMP | KEY_TYPE_TKIP))) {
+               SECR_value |= SCR_RxUseDK;
+               SECR_value |= SCR_TxUseDK;
+       }
+       //add HWSec active enable here.
+       //default using hwsec. when peer AP is in N mode only and pairwise_key_type is none_aes(which HT_IOT_ACT_PURE_N_MODE indicates it), use software security. when peer AP is in b,g,n mode mixed and pairwise_key_type is none_aes, use g mode hw security. WB on 2008.7.4
+
+       ieee->hwsec_active = 1;
+
+       if ((ieee->pHTInfo->IOTAction&HT_IOT_ACT_PURE_N_MODE) || !hwwep) { /* add hwsec_support flag to totol control hw_sec on/off */
+               ieee->hwsec_active = 0;
+               SECR_value &= ~SCR_RxDecEnable;
+       }
+       RT_TRACE(COMP_SEC, "%s:, hwsec:%d, pairwise_key:%d, SECR_value:%x\n", __func__,
+                ieee->hwsec_active, ieee->pairwise_key_type, SECR_value);
+       write_nic_byte(dev, SECR,  SECR_value);
+}
+
+
+void setKey(struct net_device *dev, u8 EntryNo, u8 KeyIndex, u16 KeyType,
+           u8 *MacAddr, u8 DefaultKey, u32 *KeyContent)
+{
+       u32 TargetCommand = 0;
+       u32 TargetContent = 0;
+       u16 usConfig = 0;
+       u8 i;
+       if (EntryNo >= TOTAL_CAM_ENTRY)
+               RT_TRACE(COMP_ERR, "cam entry exceeds in setKey()\n");
+
+       RT_TRACE(COMP_SEC, "====>to setKey(), dev:%p, EntryNo:%d, KeyIndex:%d, KeyType:%d, MacAddr%pM\n", dev, EntryNo, KeyIndex, KeyType, MacAddr);
+
+       if (DefaultKey)
+               usConfig |= BIT15 | (KeyType<<2);
+       else
+               usConfig |= BIT15 | (KeyType<<2) | KeyIndex;
+
+
+       for (i = 0; i < CAM_CONTENT_COUNT; i++) {
+               TargetCommand  = i+CAM_CONTENT_COUNT*EntryNo;
+               TargetCommand |= BIT31|BIT16;
+
+               if (i == 0) { /* MAC|Config */
+                       TargetContent = (u32)(*(MacAddr+0)) << 16|
+                                       (u32)(*(MacAddr+1)) << 24|
+                                       (u32)usConfig;
+
+                       write_nic_dword(dev, WCAMI, TargetContent);
+                       write_nic_dword(dev, RWCAM, TargetCommand);
+               } else if (i == 1) { /* MAC */
+                       TargetContent = (u32)(*(MacAddr+2))      |
+                                       (u32)(*(MacAddr+3)) <<  8|
+                                       (u32)(*(MacAddr+4)) << 16|
+                                       (u32)(*(MacAddr+5)) << 24;
+                       write_nic_dword(dev, WCAMI, TargetContent);
+                       write_nic_dword(dev, RWCAM, TargetCommand);
+               } else {
+                       //Key Material
+                       if (KeyContent != NULL) {
+                               write_nic_dword(dev, WCAMI, (u32)(*(KeyContent+i-2)));
+                               write_nic_dword(dev, RWCAM, TargetCommand);
+                       }
+               }
+       }
+
+}
+
+/***************************************************************************
+     ------------------- module init / exit stubs ----------------
+****************************************************************************/
+module_init(rtl8192_usb_module_init);
+module_exit(rtl8192_usb_module_exit);