Back to home page

OSCL-LXR

 
 

    


0001 /*
0002  * Copyright (c) 2006-2008 Nick Kossifidis <mickflemm@gmail.com>
0003  * Copyright (c) 2004-2008 Reyk Floeter <reyk@openbsd.org>
0004  * Copyright (c) 2007-2008 Michael Taylor <mike.taylor@apprion.com>
0005  *
0006  * Permission to use, copy, modify, and distribute this software for any
0007  * purpose with or without fee is hereby granted, provided that the above
0008  * copyright notice and this permission notice appear in all copies.
0009  *
0010  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
0011  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
0012  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
0013  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
0014  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
0015  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
0016  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
0017  *
0018  */
0019 
0020 /*
0021  * Register values for Atheros 5210/5211/5212 cards from OpenBSD's ar5k
0022  * maintained by Reyk Floeter
0023  *
0024  * I tried to document those registers by looking at ar5k code, some
0025  * 802.11 (802.11e mostly) papers and by reading various public available
0026  * Atheros presentations and papers like these:
0027  *
0028  * 5210 - http://nova.stanford.edu/~bbaas/ps/isscc2002_slides.pdf
0029  *
0030  * 5211 - http://www.hotchips.org/archives/hc14/3_Tue/16_mcfarland.pdf
0031  *
0032  * This file also contains register values found on a memory dump of
0033  * Atheros's ART program (Atheros Radio Test), on ath9k, on legacy-hal
0034  * released by Atheros and on various debug messages found on the net.
0035  */
0036 
0037 #include "../reg.h"
0038 
0039 /*====MAC DMA REGISTERS====*/
0040 
0041 /*
0042  * AR5210-Specific TXDP registers
0043  * 5210 has only 2 transmit queues so no DCU/QCU, just
0044  * 2 transmit descriptor pointers...
0045  */
0046 #define AR5K_NOQCU_TXDP0    0x0000      /* Queue 0 - data */
0047 #define AR5K_NOQCU_TXDP1    0x0004      /* Queue 1 - beacons */
0048 
0049 /*
0050  * Mac Control Register
0051  */
0052 #define AR5K_CR     0x0008          /* Register Address */
0053 #define AR5K_CR_TXE0    0x00000001  /* TX Enable for queue 0 on 5210 */
0054 #define AR5K_CR_TXE1    0x00000002  /* TX Enable for queue 1 on 5210 */
0055 #define AR5K_CR_RXE 0x00000004  /* RX Enable */
0056 #define AR5K_CR_TXD0    0x00000008  /* TX Disable for queue 0 on 5210 */
0057 #define AR5K_CR_TXD1    0x00000010  /* TX Disable for queue 1 on 5210 */
0058 #define AR5K_CR_RXD 0x00000020  /* RX Disable */
0059 #define AR5K_CR_SWI 0x00000040  /* Software Interrupt */
0060 
0061 /*
0062  * RX Descriptor Pointer register
0063  */
0064 #define AR5K_RXDP   0x000c
0065 
0066 /*
0067  * Configuration and status register
0068  */
0069 #define AR5K_CFG        0x0014          /* Register Address */
0070 #define AR5K_CFG_SWTD       0x00000001  /* Byte-swap TX descriptor (for big endian archs) */
0071 #define AR5K_CFG_SWTB       0x00000002  /* Byte-swap TX buffer */
0072 #define AR5K_CFG_SWRD       0x00000004  /* Byte-swap RX descriptor */
0073 #define AR5K_CFG_SWRB       0x00000008  /* Byte-swap RX buffer */
0074 #define AR5K_CFG_SWRG       0x00000010  /* Byte-swap Register access */
0075 #define AR5K_CFG_IBSS       0x00000020  /* 0-BSS, 1-IBSS [5211+] */
0076 #define AR5K_CFG_PHY_OK     0x00000100  /* [5211+] */
0077 #define AR5K_CFG_EEBS       0x00000200  /* EEPROM is busy */
0078 #define AR5K_CFG_CLKGD      0x00000400  /* Clock gated (Disable dynamic clock) */
0079 #define AR5K_CFG_TXCNT      0x00007800  /* Tx frame count (?) [5210] */
0080 #define AR5K_CFG_TXCNT_S    11
0081 #define AR5K_CFG_TXFSTAT    0x00008000  /* Tx frame status (?) [5210] */
0082 #define AR5K_CFG_TXFSTRT    0x00010000  /* [5210] */
0083 #define AR5K_CFG_PCI_THRES  0x00060000  /* PCI Master req q threshold [5211+] */
0084 #define AR5K_CFG_PCI_THRES_S    17
0085 
0086 /*
0087  * Interrupt enable register
0088  */
0089 #define AR5K_IER        0x0024      /* Register Address */
0090 #define AR5K_IER_DISABLE    0x00000000  /* Disable card interrupts */
0091 #define AR5K_IER_ENABLE     0x00000001  /* Enable card interrupts */
0092 
0093 
0094 /*
0095  * 0x0028 is Beacon Control Register on 5210
0096  * and first RTS duration register on 5211
0097  */
0098 
0099 /*
0100  * Beacon control register [5210]
0101  */
0102 #define AR5K_BCR        0x0028      /* Register Address */
0103 #define AR5K_BCR_AP     0x00000000  /* AP mode */
0104 #define AR5K_BCR_ADHOC      0x00000001  /* Ad-Hoc mode */
0105 #define AR5K_BCR_BDMAE      0x00000002  /* DMA enable */
0106 #define AR5K_BCR_TQ1FV      0x00000004  /* Use Queue1 for CAB traffic */
0107 #define AR5K_BCR_TQ1V       0x00000008  /* Use Queue1 for Beacon traffic */
0108 #define AR5K_BCR_BCGET      0x00000010
0109 
0110 /*
0111  * First RTS duration register [5211]
0112  */
0113 #define AR5K_RTSD0      0x0028      /* Register Address */
0114 #define AR5K_RTSD0_6        0x000000ff  /* 6Mb RTS duration mask (?) */
0115 #define AR5K_RTSD0_6_S      0       /* 6Mb RTS duration shift (?) */
0116 #define AR5K_RTSD0_9        0x0000ff00  /* 9Mb*/
0117 #define AR5K_RTSD0_9_S      8
0118 #define AR5K_RTSD0_12       0x00ff0000  /* 12Mb*/
0119 #define AR5K_RTSD0_12_S     16
0120 #define AR5K_RTSD0_18       0xff000000  /* 16Mb*/
0121 #define AR5K_RTSD0_18_S     24
0122 
0123 
0124 /*
0125  * 0x002c is Beacon Status Register on 5210
0126  * and second RTS duration register on 5211
0127  */
0128 
0129 /*
0130  * Beacon status register [5210]
0131  *
0132  * As i can see in ar5k_ar5210_tx_start Reyk uses some of the values of BCR
0133  * for this register, so i guess TQ1V,TQ1FV and BDMAE have the same meaning
0134  * here and SNP/SNAP means "snapshot" (so this register gets synced with BCR).
0135  * So SNAPPEDBCRVALID should also stand for "snapped BCR -values- valid", so i
0136  * renamed it to SNAPSHOTSVALID to make more sense. I really have no idea what
0137  * else can it be. I also renamed SNPBCMD to SNPADHOC to match BCR.
0138  */
0139 #define AR5K_BSR        0x002c          /* Register Address */
0140 #define AR5K_BSR_BDLYSW     0x00000001  /* SW Beacon delay (?) */
0141 #define AR5K_BSR_BDLYDMA    0x00000002  /* DMA Beacon delay (?) */
0142 #define AR5K_BSR_TXQ1F      0x00000004  /* Beacon queue (1) finished */
0143 #define AR5K_BSR_ATIMDLY    0x00000008  /* ATIM delay (?) */
0144 #define AR5K_BSR_SNPADHOC   0x00000100  /* Ad-hoc mode set (?) */
0145 #define AR5K_BSR_SNPBDMAE   0x00000200  /* Beacon DMA enabled (?) */
0146 #define AR5K_BSR_SNPTQ1FV   0x00000400  /* Queue1 is used for CAB traffic (?) */
0147 #define AR5K_BSR_SNPTQ1V    0x00000800  /* Queue1 is used for Beacon traffic (?) */
0148 #define AR5K_BSR_SNAPSHOTSVALID 0x00001000  /* BCR snapshots are valid (?) */
0149 #define AR5K_BSR_SWBA_CNT   0x00ff0000
0150 
0151 /*
0152  * Second RTS duration register [5211]
0153  */
0154 #define AR5K_RTSD1      0x002c          /* Register Address */
0155 #define AR5K_RTSD1_24       0x000000ff  /* 24Mb */
0156 #define AR5K_RTSD1_24_S     0
0157 #define AR5K_RTSD1_36       0x0000ff00  /* 36Mb */
0158 #define AR5K_RTSD1_36_S     8
0159 #define AR5K_RTSD1_48       0x00ff0000  /* 48Mb */
0160 #define AR5K_RTSD1_48_S     16
0161 #define AR5K_RTSD1_54       0xff000000  /* 54Mb */
0162 #define AR5K_RTSD1_54_S     24
0163 
0164 
0165 /*
0166  * Transmit configuration register
0167  */
0168 #define AR5K_TXCFG          0x0030          /* Register Address */
0169 #define AR5K_TXCFG_SDMAMR       0x00000007  /* DMA size (read) */
0170 #define AR5K_TXCFG_SDMAMR_S     0
0171 #define AR5K_TXCFG_B_MODE       0x00000008  /* Set b mode for 5111 (enable 2111) */
0172 #define AR5K_TXCFG_TXFSTP       0x00000008  /* TX DMA full Stop [5210] */
0173 #define AR5K_TXCFG_TXFULL       0x000003f0  /* TX Trigger level mask */
0174 #define AR5K_TXCFG_TXFULL_S     4
0175 #define AR5K_TXCFG_TXFULL_0B        0x00000000
0176 #define AR5K_TXCFG_TXFULL_64B       0x00000010
0177 #define AR5K_TXCFG_TXFULL_128B      0x00000020
0178 #define AR5K_TXCFG_TXFULL_192B      0x00000030
0179 #define AR5K_TXCFG_TXFULL_256B      0x00000040
0180 #define AR5K_TXCFG_TXCONT_EN        0x00000080
0181 #define AR5K_TXCFG_DMASIZE      0x00000100  /* Flag for passing DMA size [5210] */
0182 #define AR5K_TXCFG_JUMBO_DESC_EN    0x00000400  /* Enable jumbo tx descriptors [5211+] */
0183 #define AR5K_TXCFG_ADHOC_BCN_ATIM   0x00000800  /* Adhoc Beacon ATIM Policy */
0184 #define AR5K_TXCFG_ATIM_WINDOW_DEF_DIS  0x00001000  /* Disable ATIM window defer [5211+] */
0185 #define AR5K_TXCFG_RTSRND       0x00001000  /* [5211+] */
0186 #define AR5K_TXCFG_FRMPAD_DIS       0x00002000  /* [5211+] */
0187 #define AR5K_TXCFG_RDY_CBR_DIS      0x00004000  /* Ready time CBR disable [5211+] */
0188 #define AR5K_TXCFG_JUMBO_FRM_MODE   0x00008000  /* Jumbo frame mode [5211+] */
0189 #define AR5K_TXCFG_DCU_DBL_BUF_DIS  0x00008000  /* Disable double buffering on DCU */
0190 #define AR5K_TXCFG_DCU_CACHING_DIS  0x00010000  /* Disable DCU caching */
0191 
0192 /*
0193  * Receive configuration register
0194  */
0195 #define AR5K_RXCFG      0x0034          /* Register Address */
0196 #define AR5K_RXCFG_SDMAMW   0x00000007  /* DMA size (write) */
0197 #define AR5K_RXCFG_SDMAMW_S 0
0198 #define AR5K_RXCFG_ZLFDMA   0x00000008  /* Enable Zero-length frame DMA */
0199 #define AR5K_RXCFG_DEF_ANTENNA  0x00000010  /* Default antenna (?) */
0200 #define AR5K_RXCFG_JUMBO_RXE    0x00000020  /* Enable jumbo rx descriptors [5211+] */
0201 #define AR5K_RXCFG_JUMBO_WRAP   0x00000040  /* Wrap jumbo frames [5211+] */
0202 #define AR5K_RXCFG_SLE_ENTRY    0x00000080  /* Sleep entry policy */
0203 
0204 /*
0205  * Receive jumbo descriptor last address register
0206  * Only found in 5211 (?)
0207  */
0208 #define AR5K_RXJLA      0x0038
0209 
0210 /*
0211  * MIB control register
0212  */
0213 #define AR5K_MIBC       0x0040          /* Register Address */
0214 #define AR5K_MIBC_COW       0x00000001  /* Counter Overflow Warning */
0215 #define AR5K_MIBC_FMC       0x00000002  /* Freeze MIB Counters  */
0216 #define AR5K_MIBC_CMC       0x00000004  /* Clear MIB Counters  */
0217 #define AR5K_MIBC_MCS       0x00000008  /* MIB counter strobe, increment all */
0218 
0219 /*
0220  * Timeout prescale register
0221  */
0222 #define AR5K_TOPS       0x0044
0223 #define AR5K_TOPS_M     0x0000ffff
0224 
0225 /*
0226  * Receive timeout register (no frame received)
0227  */
0228 #define AR5K_RXNOFRM        0x0048
0229 #define AR5K_RXNOFRM_M      0x000003ff
0230 
0231 /*
0232  * Transmit timeout register (no frame sent)
0233  */
0234 #define AR5K_TXNOFRM        0x004c
0235 #define AR5K_TXNOFRM_M      0x000003ff
0236 #define AR5K_TXNOFRM_QCU    0x000ffc00
0237 #define AR5K_TXNOFRM_QCU_S  10
0238 
0239 /*
0240  * Receive frame gap timeout register
0241  */
0242 #define AR5K_RPGTO      0x0050
0243 #define AR5K_RPGTO_M        0x000003ff
0244 
0245 /*
0246  * Receive frame count limit register
0247  */
0248 #define AR5K_RFCNT      0x0054
0249 #define AR5K_RFCNT_M        0x0000001f  /* [5211+] (?) */
0250 #define AR5K_RFCNT_RFCL     0x0000000f  /* [5210] */
0251 
0252 /*
0253  * Misc settings register
0254  * (reserved0-3)
0255  */
0256 #define AR5K_MISC       0x0058          /* Register Address */
0257 #define AR5K_MISC_DMA_OBS_M 0x000001e0
0258 #define AR5K_MISC_DMA_OBS_S 5
0259 #define AR5K_MISC_MISC_OBS_M    0x00000e00
0260 #define AR5K_MISC_MISC_OBS_S    9
0261 #define AR5K_MISC_MAC_OBS_LSB_M 0x00007000
0262 #define AR5K_MISC_MAC_OBS_LSB_S 12
0263 #define AR5K_MISC_MAC_OBS_MSB_M 0x00038000
0264 #define AR5K_MISC_MAC_OBS_MSB_S 15
0265 #define AR5K_MISC_LED_DECAY 0x001c0000  /* [5210] */
0266 #define AR5K_MISC_LED_BLINK 0x00e00000  /* [5210] */
0267 
0268 /*
0269  * QCU/DCU clock gating register (5311)
0270  * (reserved4-5)
0271  */
0272 #define AR5K_QCUDCU_CLKGT   0x005c          /* Register Address (?) */
0273 #define AR5K_QCUDCU_CLKGT_QCU   0x0000ffff  /* Mask for QCU clock */
0274 #define AR5K_QCUDCU_CLKGT_DCU   0x07ff0000  /* Mask for DCU clock */
0275 
0276 /*
0277  * Interrupt Status Registers
0278  *
0279  * For 5210 there is only one status register but for
0280  * 5211/5212 we have one primary and 4 secondary registers.
0281  * So we have AR5K_ISR for 5210 and AR5K_PISR /SISRx for 5211/5212.
0282  * Most of these bits are common for all chipsets.
0283  *
0284  * NOTE: On 5211+ TXOK, TXDESC, TXERR, TXEOL and TXURN contain
0285  * the logical OR from per-queue interrupt bits found on SISR registers
0286  * (see below).
0287  */
0288 #define AR5K_ISR        0x001c          /* Register Address [5210] */
0289 #define AR5K_PISR       0x0080          /* Register Address [5211+] */
0290 #define AR5K_ISR_RXOK       0x00000001  /* Frame successfully received */
0291 #define AR5K_ISR_RXDESC     0x00000002  /* RX descriptor request */
0292 #define AR5K_ISR_RXERR      0x00000004  /* Receive error */
0293 #define AR5K_ISR_RXNOFRM    0x00000008  /* No frame received (receive timeout) */
0294 #define AR5K_ISR_RXEOL      0x00000010  /* Empty RX descriptor */
0295 #define AR5K_ISR_RXORN      0x00000020  /* Receive FIFO overrun */
0296 #define AR5K_ISR_TXOK       0x00000040  /* Frame successfully transmitted */
0297 #define AR5K_ISR_TXDESC     0x00000080  /* TX descriptor request */
0298 #define AR5K_ISR_TXERR      0x00000100  /* Transmit error */
0299 #define AR5K_ISR_TXNOFRM    0x00000200  /* No frame transmitted (transmit timeout)
0300                          * NOTE: We don't have per-queue info for this
0301                          * one, but we can enable it per-queue through
0302                          * TXNOFRM_QCU field on TXNOFRM register */
0303 #define AR5K_ISR_TXEOL      0x00000400  /* Empty TX descriptor */
0304 #define AR5K_ISR_TXURN      0x00000800  /* Transmit FIFO underrun */
0305 #define AR5K_ISR_MIB        0x00001000  /* Update MIB counters */
0306 #define AR5K_ISR_SWI        0x00002000  /* Software interrupt */
0307 #define AR5K_ISR_RXPHY      0x00004000  /* PHY error */
0308 #define AR5K_ISR_RXKCM      0x00008000  /* RX Key cache miss */
0309 #define AR5K_ISR_SWBA       0x00010000  /* Software beacon alert */
0310 #define AR5K_ISR_BRSSI      0x00020000  /* Beacon rssi below threshold (?) */
0311 #define AR5K_ISR_BMISS      0x00040000  /* Beacon missed */
0312 #define AR5K_ISR_HIUERR     0x00080000  /* Host Interface Unit error [5211+]
0313                          * 'or' of MCABT, SSERR, DPERR from SISR2 */
0314 #define AR5K_ISR_BNR        0x00100000  /* Beacon not ready [5211+] */
0315 #define AR5K_ISR_MCABT      0x00100000  /* Master Cycle Abort [5210] */
0316 #define AR5K_ISR_RXCHIRP    0x00200000  /* CHIRP Received [5212+] */
0317 #define AR5K_ISR_SSERR      0x00200000  /* Signaled System Error [5210] */
0318 #define AR5K_ISR_DPERR      0x00400000  /* Bus parity error [5210] */
0319 #define AR5K_ISR_RXDOPPLER  0x00400000  /* Doppler chirp received [5212+] */
0320 #define AR5K_ISR_TIM        0x00800000  /* [5211+] */
0321 #define AR5K_ISR_BCNMISC    0x00800000  /* Misc beacon related interrupt
0322                          * 'or' of TIM, CAB_END, DTIM_SYNC, BCN_TIMEOUT,
0323                          * CAB_TIMEOUT and DTIM bits from SISR2 [5212+] */
0324 #define AR5K_ISR_GPIO       0x01000000  /* GPIO (rf kill) */
0325 #define AR5K_ISR_QCBRORN    0x02000000  /* QCU CBR overrun [5211+] */
0326 #define AR5K_ISR_QCBRURN    0x04000000  /* QCU CBR underrun [5211+] */
0327 #define AR5K_ISR_QTRIG      0x08000000  /* QCU scheduling trigger [5211+] */
0328 
0329 #define AR5K_ISR_BITS_FROM_SISRS    (AR5K_ISR_TXOK | AR5K_ISR_TXDESC |\
0330                     AR5K_ISR_TXERR | AR5K_ISR_TXEOL |\
0331                     AR5K_ISR_TXURN | AR5K_ISR_HIUERR |\
0332                     AR5K_ISR_BCNMISC | AR5K_ISR_QCBRORN |\
0333                     AR5K_ISR_QCBRURN | AR5K_ISR_QTRIG)
0334 
0335 /*
0336  * Secondary status registers [5211+] (0 - 4)
0337  *
0338  * These give the status for each QCU, only QCUs 0-9 are
0339  * represented.
0340  */
0341 #define AR5K_SISR0      0x0084          /* Register Address [5211+] */
0342 #define AR5K_SISR0_QCU_TXOK 0x000003ff  /* Mask for QCU_TXOK */
0343 #define AR5K_SISR0_QCU_TXOK_S   0
0344 #define AR5K_SISR0_QCU_TXDESC   0x03ff0000  /* Mask for QCU_TXDESC */
0345 #define AR5K_SISR0_QCU_TXDESC_S 16
0346 
0347 #define AR5K_SISR1      0x0088          /* Register Address [5211+] */
0348 #define AR5K_SISR1_QCU_TXERR    0x000003ff  /* Mask for QCU_TXERR */
0349 #define AR5K_SISR1_QCU_TXERR_S  0
0350 #define AR5K_SISR1_QCU_TXEOL    0x03ff0000  /* Mask for QCU_TXEOL */
0351 #define AR5K_SISR1_QCU_TXEOL_S  16
0352 
0353 #define AR5K_SISR2      0x008c          /* Register Address [5211+] */
0354 #define AR5K_SISR2_QCU_TXURN    0x000003ff  /* Mask for QCU_TXURN */
0355 #define AR5K_SISR2_QCU_TXURN_S  0
0356 #define AR5K_SISR2_MCABT    0x00010000  /* Master Cycle Abort */
0357 #define AR5K_SISR2_SSERR    0x00020000  /* Signaled System Error */
0358 #define AR5K_SISR2_DPERR    0x00040000  /* Bus parity error */
0359 #define AR5K_SISR2_TIM      0x01000000  /* [5212+] */
0360 #define AR5K_SISR2_CAB_END  0x02000000  /* [5212+] */
0361 #define AR5K_SISR2_DTIM_SYNC    0x04000000  /* DTIM sync lost [5212+] */
0362 #define AR5K_SISR2_BCN_TIMEOUT  0x08000000  /* Beacon Timeout [5212+] */
0363 #define AR5K_SISR2_CAB_TIMEOUT  0x10000000  /* CAB Timeout [5212+] */
0364 #define AR5K_SISR2_DTIM     0x20000000  /* [5212+] */
0365 #define AR5K_SISR2_TSFOOR   0x80000000  /* TSF Out of range */
0366 
0367 #define AR5K_SISR3      0x0090          /* Register Address [5211+] */
0368 #define AR5K_SISR3_QCBRORN  0x000003ff  /* Mask for QCBRORN */
0369 #define AR5K_SISR3_QCBRORN_S    0
0370 #define AR5K_SISR3_QCBRURN  0x03ff0000  /* Mask for QCBRURN */
0371 #define AR5K_SISR3_QCBRURN_S    16
0372 
0373 #define AR5K_SISR4      0x0094          /* Register Address [5211+] */
0374 #define AR5K_SISR4_QTRIG    0x000003ff  /* Mask for QTRIG */
0375 #define AR5K_SISR4_QTRIG_S  0
0376 
0377 /*
0378  * Shadow read-and-clear interrupt status registers [5211+]
0379  */
0380 #define AR5K_RAC_PISR       0x00c0      /* Read and clear PISR */
0381 #define AR5K_RAC_SISR0      0x00c4      /* Read and clear SISR0 */
0382 #define AR5K_RAC_SISR1      0x00c8      /* Read and clear SISR1 */
0383 #define AR5K_RAC_SISR2      0x00cc      /* Read and clear SISR2 */
0384 #define AR5K_RAC_SISR3      0x00d0      /* Read and clear SISR3 */
0385 #define AR5K_RAC_SISR4      0x00d4      /* Read and clear SISR4 */
0386 
0387 /*
0388  * Interrupt Mask Registers
0389  *
0390  * As with ISRs 5210 has one IMR (AR5K_IMR) and 5211/5212 has one primary
0391  * (AR5K_PIMR) and 4 secondary IMRs (AR5K_SIMRx). Note that ISR/IMR flags match.
0392  */
0393 #define AR5K_IMR        0x0020          /* Register Address [5210] */
0394 #define AR5K_PIMR       0x00a0          /* Register Address [5211+] */
0395 #define AR5K_IMR_RXOK       0x00000001  /* Frame successfully received*/
0396 #define AR5K_IMR_RXDESC     0x00000002  /* RX descriptor request*/
0397 #define AR5K_IMR_RXERR      0x00000004  /* Receive error*/
0398 #define AR5K_IMR_RXNOFRM    0x00000008  /* No frame received (receive timeout)*/
0399 #define AR5K_IMR_RXEOL      0x00000010  /* Empty RX descriptor*/
0400 #define AR5K_IMR_RXORN      0x00000020  /* Receive FIFO overrun*/
0401 #define AR5K_IMR_TXOK       0x00000040  /* Frame successfully transmitted*/
0402 #define AR5K_IMR_TXDESC     0x00000080  /* TX descriptor request*/
0403 #define AR5K_IMR_TXERR      0x00000100  /* Transmit error*/
0404 #define AR5K_IMR_TXNOFRM    0x00000200  /* No frame transmitted (transmit timeout)*/
0405 #define AR5K_IMR_TXEOL      0x00000400  /* Empty TX descriptor*/
0406 #define AR5K_IMR_TXURN      0x00000800  /* Transmit FIFO underrun*/
0407 #define AR5K_IMR_MIB        0x00001000  /* Update MIB counters*/
0408 #define AR5K_IMR_SWI        0x00002000  /* Software interrupt */
0409 #define AR5K_IMR_RXPHY      0x00004000  /* PHY error*/
0410 #define AR5K_IMR_RXKCM      0x00008000  /* RX Key cache miss */
0411 #define AR5K_IMR_SWBA       0x00010000  /* Software beacon alert*/
0412 #define AR5K_IMR_BRSSI      0x00020000  /* Beacon rssi below threshold (?) */
0413 #define AR5K_IMR_BMISS      0x00040000  /* Beacon missed*/
0414 #define AR5K_IMR_HIUERR     0x00080000  /* Host Interface Unit error [5211+] */
0415 #define AR5K_IMR_BNR        0x00100000  /* Beacon not ready [5211+] */
0416 #define AR5K_IMR_MCABT      0x00100000  /* Master Cycle Abort [5210] */
0417 #define AR5K_IMR_RXCHIRP    0x00200000  /* CHIRP Received [5212+]*/
0418 #define AR5K_IMR_SSERR      0x00200000  /* Signaled System Error [5210] */
0419 #define AR5K_IMR_DPERR      0x00400000  /* Det par Error (?) [5210] */
0420 #define AR5K_IMR_RXDOPPLER  0x00400000  /* Doppler chirp received [5212+] */
0421 #define AR5K_IMR_TIM        0x00800000  /* [5211+] */
0422 #define AR5K_IMR_BCNMISC    0x00800000  /* 'or' of TIM, CAB_END, DTIM_SYNC, BCN_TIMEOUT,
0423                         CAB_TIMEOUT and DTIM bits from SISR2 [5212+] */
0424 #define AR5K_IMR_GPIO       0x01000000  /* GPIO (rf kill)*/
0425 #define AR5K_IMR_QCBRORN    0x02000000  /* QCU CBR overrun (?) [5211+] */
0426 #define AR5K_IMR_QCBRURN    0x04000000  /* QCU CBR underrun (?) [5211+] */
0427 #define AR5K_IMR_QTRIG      0x08000000  /* QCU scheduling trigger [5211+] */
0428 
0429 /*
0430  * Secondary interrupt mask registers [5211+] (0 - 4)
0431  */
0432 #define AR5K_SIMR0      0x00a4          /* Register Address [5211+] */
0433 #define AR5K_SIMR0_QCU_TXOK 0x000003ff  /* Mask for QCU_TXOK */
0434 #define AR5K_SIMR0_QCU_TXOK_S   0
0435 #define AR5K_SIMR0_QCU_TXDESC   0x03ff0000  /* Mask for QCU_TXDESC */
0436 #define AR5K_SIMR0_QCU_TXDESC_S 16
0437 
0438 #define AR5K_SIMR1      0x00a8          /* Register Address [5211+] */
0439 #define AR5K_SIMR1_QCU_TXERR    0x000003ff  /* Mask for QCU_TXERR */
0440 #define AR5K_SIMR1_QCU_TXERR_S  0
0441 #define AR5K_SIMR1_QCU_TXEOL    0x03ff0000  /* Mask for QCU_TXEOL */
0442 #define AR5K_SIMR1_QCU_TXEOL_S  16
0443 
0444 #define AR5K_SIMR2      0x00ac          /* Register Address [5211+] */
0445 #define AR5K_SIMR2_QCU_TXURN    0x000003ff  /* Mask for QCU_TXURN */
0446 #define AR5K_SIMR2_QCU_TXURN_S  0
0447 #define AR5K_SIMR2_MCABT    0x00010000  /* Master Cycle Abort */
0448 #define AR5K_SIMR2_SSERR    0x00020000  /* Signaled System Error */
0449 #define AR5K_SIMR2_DPERR    0x00040000  /* Bus parity error */
0450 #define AR5K_SIMR2_TIM      0x01000000  /* [5212+] */
0451 #define AR5K_SIMR2_CAB_END  0x02000000  /* [5212+] */
0452 #define AR5K_SIMR2_DTIM_SYNC    0x04000000  /* DTIM Sync lost [5212+] */
0453 #define AR5K_SIMR2_BCN_TIMEOUT  0x08000000  /* Beacon Timeout [5212+] */
0454 #define AR5K_SIMR2_CAB_TIMEOUT  0x10000000  /* CAB Timeout [5212+] */
0455 #define AR5K_SIMR2_DTIM     0x20000000  /* [5212+] */
0456 #define AR5K_SIMR2_TSFOOR   0x80000000  /* TSF OOR (?) */
0457 
0458 #define AR5K_SIMR3      0x00b0          /* Register Address [5211+] */
0459 #define AR5K_SIMR3_QCBRORN  0x000003ff  /* Mask for QCBRORN */
0460 #define AR5K_SIMR3_QCBRORN_S    0
0461 #define AR5K_SIMR3_QCBRURN  0x03ff0000  /* Mask for QCBRURN */
0462 #define AR5K_SIMR3_QCBRURN_S    16
0463 
0464 #define AR5K_SIMR4      0x00b4          /* Register Address [5211+] */
0465 #define AR5K_SIMR4_QTRIG    0x000003ff  /* Mask for QTRIG */
0466 #define AR5K_SIMR4_QTRIG_S  0
0467 
0468 /*
0469  * DMA Debug registers 0-7
0470  * 0xe0 - 0xfc
0471  */
0472 
0473 /*
0474  * Decompression mask registers [5212+]
0475  */
0476 #define AR5K_DCM_ADDR       0x0400      /*Decompression mask address (index) */
0477 #define AR5K_DCM_DATA       0x0404      /*Decompression mask data */
0478 
0479 /*
0480  * Wake On Wireless pattern control register [5212+]
0481  */
0482 #define AR5K_WOW_PCFG           0x0410          /* Register Address */
0483 #define AR5K_WOW_PCFG_PAT_MATCH_EN  0x00000001  /* Pattern match enable */
0484 #define AR5K_WOW_PCFG_LONG_FRAME_POL    0x00000002  /* Long frame policy */
0485 #define AR5K_WOW_PCFG_WOBMISS       0x00000004  /* Wake on bea(con) miss (?) */
0486 #define AR5K_WOW_PCFG_PAT_0_EN      0x00000100  /* Enable pattern 0 */
0487 #define AR5K_WOW_PCFG_PAT_1_EN      0x00000200  /* Enable pattern 1 */
0488 #define AR5K_WOW_PCFG_PAT_2_EN      0x00000400  /* Enable pattern 2 */
0489 #define AR5K_WOW_PCFG_PAT_3_EN      0x00000800  /* Enable pattern 3 */
0490 #define AR5K_WOW_PCFG_PAT_4_EN      0x00001000  /* Enable pattern 4 */
0491 #define AR5K_WOW_PCFG_PAT_5_EN      0x00002000  /* Enable pattern 5 */
0492 
0493 /*
0494  * Wake On Wireless pattern index register (?) [5212+]
0495  */
0496 #define AR5K_WOW_PAT_IDX    0x0414
0497 
0498 /*
0499  * Wake On Wireless pattern data register [5212+]
0500  */
0501 #define AR5K_WOW_PAT_DATA   0x0418          /* Register Address */
0502 #define AR5K_WOW_PAT_DATA_0_3_V 0x00000001  /* Pattern 0, 3 value */
0503 #define AR5K_WOW_PAT_DATA_1_4_V 0x00000100  /* Pattern 1, 4 value */
0504 #define AR5K_WOW_PAT_DATA_2_5_V 0x00010000  /* Pattern 2, 5 value */
0505 #define AR5K_WOW_PAT_DATA_0_3_M 0x01000000  /* Pattern 0, 3 mask */
0506 #define AR5K_WOW_PAT_DATA_1_4_M 0x04000000  /* Pattern 1, 4 mask */
0507 #define AR5K_WOW_PAT_DATA_2_5_M 0x10000000  /* Pattern 2, 5 mask */
0508 
0509 /*
0510  * Decompression configuration registers [5212+]
0511  */
0512 #define AR5K_DCCFG      0x0420          /* Register Address */
0513 #define AR5K_DCCFG_GLOBAL_EN    0x00000001  /* Enable decompression on all queues */
0514 #define AR5K_DCCFG_BYPASS_EN    0x00000002  /* Bypass decompression */
0515 #define AR5K_DCCFG_BCAST_EN 0x00000004  /* Enable decompression for bcast frames */
0516 #define AR5K_DCCFG_MCAST_EN 0x00000008  /* Enable decompression for mcast frames */
0517 
0518 /*
0519  * Compression configuration registers [5212+]
0520  */
0521 #define AR5K_CCFG       0x0600          /* Register Address */
0522 #define AR5K_CCFG_WINDOW_SIZE   0x00000007  /* Compression window size */
0523 #define AR5K_CCFG_CPC_EN    0x00000008  /* Enable performance counters */
0524 
0525 #define AR5K_CCFG_CCU       0x0604          /* Register Address */
0526 #define AR5K_CCFG_CCU_CUP_EN    0x00000001  /* CCU Catchup enable */
0527 #define AR5K_CCFG_CCU_CREDIT    0x00000002  /* CCU Credit (field) */
0528 #define AR5K_CCFG_CCU_CD_THRES  0x00000080  /* CCU Cyc(lic?) debt threshold (field) */
0529 #define AR5K_CCFG_CCU_CUP_LCNT  0x00010000  /* CCU Catchup lit(?) count */
0530 #define AR5K_CCFG_CCU_INIT  0x00100200  /* Initial value during reset */
0531 
0532 /*
0533  * Compression performance counter registers [5212+]
0534  */
0535 #define AR5K_CPC0       0x0610      /* Compression performance counter 0 */
0536 #define AR5K_CPC1       0x0614      /* Compression performance counter 1*/
0537 #define AR5K_CPC2       0x0618      /* Compression performance counter 2 */
0538 #define AR5K_CPC3       0x061c      /* Compression performance counter 3 */
0539 #define AR5K_CPCOVF     0x0620      /* Compression performance overflow */
0540 
0541 
0542 /*
0543  * Queue control unit (QCU) registers [5211+]
0544  *
0545  * Card has 12 TX Queues but i see that only 0-9 are used (?)
0546  * both in binary HAL (see ah.h) and ar5k. Each queue has it's own
0547  * TXDP at addresses 0x0800 - 0x082c, a CBR (Constant Bit Rate)
0548  * configuration register (0x08c0 - 0x08ec), a ready time configuration
0549  * register (0x0900 - 0x092c), a misc configuration register (0x09c0 -
0550  * 0x09ec) and a status register (0x0a00 - 0x0a2c). We also have some
0551  * global registers, QCU transmit enable/disable and "one shot arm (?)"
0552  * set/clear, which contain status for all queues (we shift by 1 for each
0553  * queue). To access these registers easily we define some macros here
0554  * that are used inside HAL. For more infos check out *_tx_queue functs.
0555  */
0556 
0557 /*
0558  * Generic QCU Register access macros
0559  */
0560 #define AR5K_QUEUE_REG(_r, _q)      (((_q) << 2) + _r)
0561 #define AR5K_QCU_GLOBAL_READ(_r, _q)    (AR5K_REG_READ(_r) & (1 << _q))
0562 #define AR5K_QCU_GLOBAL_WRITE(_r, _q)   AR5K_REG_WRITE(_r, (1 << _q))
0563 
0564 /*
0565  * QCU Transmit descriptor pointer registers
0566  */
0567 #define AR5K_QCU_TXDP_BASE  0x0800      /* Register Address - Queue0 TXDP */
0568 #define AR5K_QUEUE_TXDP(_q) AR5K_QUEUE_REG(AR5K_QCU_TXDP_BASE, _q)
0569 
0570 /*
0571  * QCU Transmit enable register
0572  */
0573 #define AR5K_QCU_TXE        0x0840
0574 #define AR5K_ENABLE_QUEUE(_q)   AR5K_QCU_GLOBAL_WRITE(AR5K_QCU_TXE, _q)
0575 #define AR5K_QUEUE_ENABLED(_q)  AR5K_QCU_GLOBAL_READ(AR5K_QCU_TXE, _q)
0576 
0577 /*
0578  * QCU Transmit disable register
0579  */
0580 #define AR5K_QCU_TXD        0x0880
0581 #define AR5K_DISABLE_QUEUE(_q)  AR5K_QCU_GLOBAL_WRITE(AR5K_QCU_TXD, _q)
0582 #define AR5K_QUEUE_DISABLED(_q) AR5K_QCU_GLOBAL_READ(AR5K_QCU_TXD, _q)
0583 
0584 /*
0585  * QCU Constant Bit Rate configuration registers
0586  */
0587 #define AR5K_QCU_CBRCFG_BASE        0x08c0  /* Register Address - Queue0 CBRCFG */
0588 #define AR5K_QCU_CBRCFG_INTVAL      0x00ffffff  /* CBR Interval mask */
0589 #define AR5K_QCU_CBRCFG_INTVAL_S    0
0590 #define AR5K_QCU_CBRCFG_ORN_THRES   0xff000000  /* CBR overrun threshold mask */
0591 #define AR5K_QCU_CBRCFG_ORN_THRES_S 24
0592 #define AR5K_QUEUE_CBRCFG(_q)       AR5K_QUEUE_REG(AR5K_QCU_CBRCFG_BASE, _q)
0593 
0594 /*
0595  * QCU Ready time configuration registers
0596  */
0597 #define AR5K_QCU_RDYTIMECFG_BASE    0x0900  /* Register Address - Queue0 RDYTIMECFG */
0598 #define AR5K_QCU_RDYTIMECFG_INTVAL  0x00ffffff  /* Ready time interval mask */
0599 #define AR5K_QCU_RDYTIMECFG_INTVAL_S    0
0600 #define AR5K_QCU_RDYTIMECFG_ENABLE  0x01000000  /* Ready time enable mask */
0601 #define AR5K_QUEUE_RDYTIMECFG(_q)   AR5K_QUEUE_REG(AR5K_QCU_RDYTIMECFG_BASE, _q)
0602 
0603 /*
0604  * QCU one shot arm set registers
0605  */
0606 #define AR5K_QCU_ONESHOTARM_SET     0x0940  /* Register Address -QCU "one shot arm set (?)" */
0607 #define AR5K_QCU_ONESHOTARM_SET_M   0x0000ffff
0608 
0609 /*
0610  * QCU one shot arm clear registers
0611  */
0612 #define AR5K_QCU_ONESHOTARM_CLEAR   0x0980  /* Register Address -QCU "one shot arm clear (?)" */
0613 #define AR5K_QCU_ONESHOTARM_CLEAR_M 0x0000ffff
0614 
0615 /*
0616  * QCU misc registers
0617  */
0618 #define AR5K_QCU_MISC_BASE      0x09c0          /* Register Address -Queue0 MISC */
0619 #define AR5K_QCU_MISC_FRSHED_M      0x0000000f  /* Frame scheduling mask */
0620 #define AR5K_QCU_MISC_FRSHED_ASAP       0   /* ASAP */
0621 #define AR5K_QCU_MISC_FRSHED_CBR        1   /* Constant Bit Rate */
0622 #define AR5K_QCU_MISC_FRSHED_DBA_GT     2   /* DMA Beacon alert gated */
0623 #define AR5K_QCU_MISC_FRSHED_TIM_GT     3   /* TIMT gated */
0624 #define AR5K_QCU_MISC_FRSHED_BCN_SENT_GT    4   /* Beacon sent gated */
0625 #define AR5K_QCU_MISC_ONESHOT_ENABLE    0x00000010  /* Oneshot enable */
0626 #define AR5K_QCU_MISC_CBREXP_DIS    0x00000020  /* Disable CBR expired counter (normal queue) */
0627 #define AR5K_QCU_MISC_CBREXP_BCN_DIS    0x00000040  /* Disable CBR expired counter (beacon queue) */
0628 #define AR5K_QCU_MISC_BCN_ENABLE    0x00000080  /* Enable Beacon use */
0629 #define AR5K_QCU_MISC_CBR_THRES_ENABLE  0x00000100  /* CBR expired threshold enabled */
0630 #define AR5K_QCU_MISC_RDY_VEOL_POLICY   0x00000200  /* TXE reset when RDYTIME expired or VEOL */
0631 #define AR5K_QCU_MISC_CBR_RESET_CNT 0x00000400  /* CBR threshold (counter) reset */
0632 #define AR5K_QCU_MISC_DCU_EARLY     0x00000800  /* DCU early termination */
0633 #define AR5K_QCU_MISC_DCU_CMP_EN    0x00001000  /* Enable frame compression */
0634 #define AR5K_QUEUE_MISC(_q)     AR5K_QUEUE_REG(AR5K_QCU_MISC_BASE, _q)
0635 
0636 
0637 /*
0638  * QCU status registers
0639  */
0640 #define AR5K_QCU_STS_BASE   0x0a00          /* Register Address - Queue0 STS */
0641 #define AR5K_QCU_STS_FRMPENDCNT 0x00000003  /* Frames pending counter */
0642 #define AR5K_QCU_STS_CBREXPCNT  0x0000ff00  /* CBR expired counter */
0643 #define AR5K_QUEUE_STATUS(_q)   AR5K_QUEUE_REG(AR5K_QCU_STS_BASE, _q)
0644 
0645 /*
0646  * QCU ready time shutdown register
0647  */
0648 #define AR5K_QCU_RDYTIMESHDN    0x0a40
0649 #define AR5K_QCU_RDYTIMESHDN_M  0x000003ff
0650 
0651 /*
0652  * QCU compression buffer base registers [5212+]
0653  */
0654 #define AR5K_QCU_CBB_SELECT 0x0b00
0655 #define AR5K_QCU_CBB_ADDR   0x0b04
0656 #define AR5K_QCU_CBB_ADDR_S 9
0657 
0658 /*
0659  * QCU compression buffer configuration register [5212+]
0660  * (buffer size)
0661  */
0662 #define AR5K_QCU_CBCFG      0x0b08
0663 
0664 
0665 
0666 /*
0667  * Distributed Coordination Function (DCF) control unit (DCU)
0668  * registers [5211+]
0669  *
0670  * These registers control the various characteristics of each queue
0671  * for 802.11e (WME) compatibility so they go together with
0672  * QCU registers in pairs. For each queue we have a QCU mask register,
0673  * (0x1000 - 0x102c), a local-IFS settings register (0x1040 - 0x106c),
0674  * a retry limit register (0x1080 - 0x10ac), a channel time register
0675  * (0x10c0 - 0x10ec), a misc-settings register (0x1100 - 0x112c) and
0676  * a sequence number register (0x1140 - 0x116c). It seems that "global"
0677  * registers here affect all queues (see use of DCU_GBL_IFS_SLOT in ar5k).
0678  * We use the same macros here for easier register access.
0679  *
0680  */
0681 
0682 /*
0683  * DCU QCU mask registers
0684  */
0685 #define AR5K_DCU_QCUMASK_BASE   0x1000      /* Register Address -Queue0 DCU_QCUMASK */
0686 #define AR5K_DCU_QCUMASK_M  0x000003ff
0687 #define AR5K_QUEUE_QCUMASK(_q)  AR5K_QUEUE_REG(AR5K_DCU_QCUMASK_BASE, _q)
0688 
0689 /*
0690  * DCU local Inter Frame Space settings register
0691  */
0692 #define AR5K_DCU_LCL_IFS_BASE       0x1040          /* Register Address -Queue0 DCU_LCL_IFS */
0693 #define AR5K_DCU_LCL_IFS_CW_MIN         0x000003ff  /* Minimum Contention Window */
0694 #define AR5K_DCU_LCL_IFS_CW_MIN_S   0
0695 #define AR5K_DCU_LCL_IFS_CW_MAX         0x000ffc00  /* Maximum Contention Window */
0696 #define AR5K_DCU_LCL_IFS_CW_MAX_S   10
0697 #define AR5K_DCU_LCL_IFS_AIFS       0x0ff00000  /* Arbitrated Interframe Space */
0698 #define AR5K_DCU_LCL_IFS_AIFS_S     20
0699 #define AR5K_DCU_LCL_IFS_AIFS_MAX   0xfc        /* Anything above that can cause DCU to hang */
0700 #define AR5K_QUEUE_DFS_LOCAL_IFS(_q)    AR5K_QUEUE_REG(AR5K_DCU_LCL_IFS_BASE, _q)
0701 
0702 /*
0703  * DCU retry limit registers
0704  * all these fields don't allow zero values
0705  */
0706 #define AR5K_DCU_RETRY_LMT_BASE     0x1080          /* Register Address -Queue0 DCU_RETRY_LMT */
0707 #define AR5K_DCU_RETRY_LMT_RTS      0x0000000f  /* RTS failure limit. Transmission fails if no CTS is received for this number of times */
0708 #define AR5K_DCU_RETRY_LMT_RTS_S    0
0709 #define AR5K_DCU_RETRY_LMT_STA_RTS  0x00003f00  /* STA RTS failure limit. If exceeded CW reset */
0710 #define AR5K_DCU_RETRY_LMT_STA_RTS_S    8
0711 #define AR5K_DCU_RETRY_LMT_STA_DATA 0x000fc000  /* STA data failure limit. If exceeded CW reset. */
0712 #define AR5K_DCU_RETRY_LMT_STA_DATA_S   14
0713 #define AR5K_QUEUE_DFS_RETRY_LIMIT(_q)  AR5K_QUEUE_REG(AR5K_DCU_RETRY_LMT_BASE, _q)
0714 
0715 /*
0716  * DCU channel time registers
0717  */
0718 #define AR5K_DCU_CHAN_TIME_BASE     0x10c0          /* Register Address -Queue0 DCU_CHAN_TIME */
0719 #define AR5K_DCU_CHAN_TIME_DUR      0x000fffff  /* Channel time duration */
0720 #define AR5K_DCU_CHAN_TIME_DUR_S    0
0721 #define AR5K_DCU_CHAN_TIME_ENABLE   0x00100000  /* Enable channel time */
0722 #define AR5K_QUEUE_DFS_CHANNEL_TIME(_q) AR5K_QUEUE_REG(AR5K_DCU_CHAN_TIME_BASE, _q)
0723 
0724 /*
0725  * DCU misc registers [5211+]
0726  *
0727  * Note: Arbiter lockout control controls the
0728  * behaviour on low priority queues when we have multiple queues
0729  * with pending frames. Intra-frame lockout means we wait until
0730  * the queue's current frame transmits (with post frame backoff and bursting)
0731  * before we transmit anything else and global lockout means we
0732  * wait for the whole queue to finish before higher priority queues
0733  * can transmit (this is used on beacon and CAB queues).
0734  * No lockout means there is no special handling.
0735  */
0736 #define AR5K_DCU_MISC_BASE      0x1100          /* Register Address -Queue0 DCU_MISC */
0737 #define AR5K_DCU_MISC_BACKOFF       0x0000003f  /* Mask for backoff threshold */
0738 #define AR5K_DCU_MISC_ETS_RTS_POL   0x00000040  /* End of transmission series
0739                             station RTS/data failure count
0740                             reset policy (?) */
0741 #define AR5K_DCU_MISC_ETS_CW_POL    0x00000080  /* End of transmission series
0742                             CW reset policy */
0743 #define AR5K_DCU_MISC_FRAG_WAIT     0x00000100  /* Wait for next fragment */
0744 #define AR5K_DCU_MISC_BACKOFF_FRAG  0x00000200  /* Enable backoff while bursting */
0745 #define AR5K_DCU_MISC_HCFPOLL_ENABLE    0x00000800  /* CF - Poll enable */
0746 #define AR5K_DCU_MISC_BACKOFF_PERSIST   0x00001000  /* Persistent backoff */
0747 #define AR5K_DCU_MISC_FRMPRFTCH_ENABLE  0x00002000  /* Enable frame pre-fetch */
0748 #define AR5K_DCU_MISC_VIRTCOL       0x0000c000  /* Mask for Virtual Collision (?) */
0749 #define AR5K_DCU_MISC_VIRTCOL_NORMAL    0
0750 #define AR5K_DCU_MISC_VIRTCOL_IGNORE    1
0751 #define AR5K_DCU_MISC_BCN_ENABLE    0x00010000  /* Enable Beacon use */
0752 #define AR5K_DCU_MISC_ARBLOCK_CTL   0x00060000  /* Arbiter lockout control mask */
0753 #define AR5K_DCU_MISC_ARBLOCK_CTL_S 17
0754 #define AR5K_DCU_MISC_ARBLOCK_CTL_NONE      0   /* No arbiter lockout */
0755 #define AR5K_DCU_MISC_ARBLOCK_CTL_INTFRM    1   /* Intra-frame lockout */
0756 #define AR5K_DCU_MISC_ARBLOCK_CTL_GLOBAL    2   /* Global lockout */
0757 #define AR5K_DCU_MISC_ARBLOCK_IGNORE    0x00080000  /* Ignore Arbiter lockout */
0758 #define AR5K_DCU_MISC_SEQ_NUM_INCR_DIS  0x00100000  /* Disable sequence number increment */
0759 #define AR5K_DCU_MISC_POST_FR_BKOFF_DIS 0x00200000  /* Disable post-frame backoff */
0760 #define AR5K_DCU_MISC_VIRT_COLL_POLICY  0x00400000  /* Virtual Collision cw policy */
0761 #define AR5K_DCU_MISC_BLOWN_IFS_POLICY  0x00800000  /* Blown IFS policy (?) */
0762 #define AR5K_DCU_MISC_SEQNUM_CTL    0x01000000  /* Sequence number control (?) */
0763 #define AR5K_QUEUE_DFS_MISC(_q)     AR5K_QUEUE_REG(AR5K_DCU_MISC_BASE, _q)
0764 
0765 /*
0766  * DCU frame sequence number registers
0767  */
0768 #define AR5K_DCU_SEQNUM_BASE        0x1140
0769 #define AR5K_DCU_SEQNUM_M       0x00000fff
0770 #define AR5K_QUEUE_DCU_SEQNUM(_q)   AR5K_QUEUE_REG(AR5K_DCU_SEQNUM_BASE, _q)
0771 
0772 /*
0773  * DCU global IFS SIFS register
0774  */
0775 #define AR5K_DCU_GBL_IFS_SIFS   0x1030
0776 #define AR5K_DCU_GBL_IFS_SIFS_M 0x0000ffff
0777 
0778 /*
0779  * DCU global IFS slot interval register
0780  */
0781 #define AR5K_DCU_GBL_IFS_SLOT   0x1070
0782 #define AR5K_DCU_GBL_IFS_SLOT_M 0x0000ffff
0783 
0784 /*
0785  * DCU global IFS EIFS register
0786  */
0787 #define AR5K_DCU_GBL_IFS_EIFS   0x10b0
0788 #define AR5K_DCU_GBL_IFS_EIFS_M 0x0000ffff
0789 
0790 /*
0791  * DCU global IFS misc register
0792  *
0793  * LFSR stands for Linear Feedback Shift Register
0794  * and it's used for generating pseudo-random
0795  * number sequences.
0796  *
0797  * (If i understand correctly, random numbers are
0798  * used for idle sensing -multiplied with cwmin/max etc-)
0799  */
0800 #define AR5K_DCU_GBL_IFS_MISC           0x10f0          /* Register Address */
0801 #define AR5K_DCU_GBL_IFS_MISC_LFSR_SLICE    0x00000007  /* LFSR Slice Select */
0802 #define AR5K_DCU_GBL_IFS_MISC_TURBO_MODE    0x00000008  /* Turbo mode */
0803 #define AR5K_DCU_GBL_IFS_MISC_SIFS_DUR_USEC 0x000003f0  /* SIFS Duration mask */
0804 #define AR5K_DCU_GBL_IFS_MISC_SIFS_DUR_USEC_S   4
0805 #define AR5K_DCU_GBL_IFS_MISC_USEC_DUR      0x000ffc00  /* USEC Duration mask */
0806 #define AR5K_DCU_GBL_IFS_MISC_USEC_DUR_S    10
0807 #define AR5K_DCU_GBL_IFS_MISC_DCU_ARB_DELAY 0x00300000  /* DCU Arbiter delay mask */
0808 #define AR5K_DCU_GBL_IFS_MISC_SIFS_CNT_RST  0x00400000  /* SIFS cnt reset policy (?) */
0809 #define AR5K_DCU_GBL_IFS_MISC_AIFS_CNT_RST  0x00800000  /* AIFS cnt reset policy (?) */
0810 #define AR5K_DCU_GBL_IFS_MISC_RND_LFSR_SL_DIS   0x01000000  /* Disable random LFSR slice */
0811 
0812 /*
0813  * DCU frame prefetch control register
0814  */
0815 #define AR5K_DCU_FP         0x1230          /* Register Address */
0816 #define AR5K_DCU_FP_NOBURST_DCU_EN  0x00000001  /* Enable non-burst prefetch on DCU (?) */
0817 #define AR5K_DCU_FP_NOBURST_EN      0x00000010  /* Enable non-burst prefetch (?) */
0818 #define AR5K_DCU_FP_BURST_DCU_EN    0x00000020  /* Enable burst prefetch on DCU (?) */
0819 
0820 /*
0821  * DCU transmit pause control/status register
0822  */
0823 #define AR5K_DCU_TXP        0x1270          /* Register Address */
0824 #define AR5K_DCU_TXP_M      0x000003ff  /* Tx pause mask */
0825 #define AR5K_DCU_TXP_STATUS 0x00010000  /* Tx pause status */
0826 
0827 /*
0828  * DCU transmit filter table 0 (32 entries)
0829  * each entry contains a 32bit slice of the
0830  * 128bit tx filter for each DCU (4 slices per DCU)
0831  */
0832 #define AR5K_DCU_TX_FILTER_0_BASE   0x1038
0833 #define AR5K_DCU_TX_FILTER_0(_n)    (AR5K_DCU_TX_FILTER_0_BASE + (_n * 64))
0834 
0835 /*
0836  * DCU transmit filter table 1 (16 entries)
0837  */
0838 #define AR5K_DCU_TX_FILTER_1_BASE   0x103c
0839 #define AR5K_DCU_TX_FILTER_1(_n)    (AR5K_DCU_TX_FILTER_1_BASE + (_n * 64))
0840 
0841 /*
0842  * DCU clear transmit filter register
0843  */
0844 #define AR5K_DCU_TX_FILTER_CLR  0x143c
0845 
0846 /*
0847  * DCU set transmit filter register
0848  */
0849 #define AR5K_DCU_TX_FILTER_SET  0x147c
0850 
0851 /*
0852  * Reset control register
0853  */
0854 #define AR5K_RESET_CTL      0x4000          /* Register Address */
0855 #define AR5K_RESET_CTL_PCU  0x00000001  /* Protocol Control Unit reset */
0856 #define AR5K_RESET_CTL_DMA  0x00000002  /* DMA (Rx/Tx) reset [5210] */
0857 #define AR5K_RESET_CTL_BASEBAND 0x00000002  /* Baseband reset [5211+] */
0858 #define AR5K_RESET_CTL_MAC  0x00000004  /* MAC reset (PCU+Baseband ?) [5210] */
0859 #define AR5K_RESET_CTL_PHY  0x00000008  /* PHY reset [5210] */
0860 #define AR5K_RESET_CTL_PCI  0x00000010  /* PCI Core reset (interrupts etc) */
0861 
0862 /*
0863  * Sleep control register
0864  */
0865 #define AR5K_SLEEP_CTL          0x4004          /* Register Address */
0866 #define AR5K_SLEEP_CTL_SLDUR        0x0000ffff  /* Sleep duration mask */
0867 #define AR5K_SLEEP_CTL_SLDUR_S      0
0868 #define AR5K_SLEEP_CTL_SLE      0x00030000  /* Sleep enable mask */
0869 #define AR5K_SLEEP_CTL_SLE_S        16
0870 #define AR5K_SLEEP_CTL_SLE_WAKE     0x00000000  /* Force chip awake */
0871 #define AR5K_SLEEP_CTL_SLE_SLP      0x00010000  /* Force chip sleep */
0872 #define AR5K_SLEEP_CTL_SLE_ALLOW    0x00020000  /* Normal sleep policy */
0873 #define AR5K_SLEEP_CTL_SLE_UNITS    0x00000008  /* [5211+] */
0874 #define AR5K_SLEEP_CTL_DUR_TIM_POL  0x00040000  /* Sleep duration timing policy */
0875 #define AR5K_SLEEP_CTL_DUR_WRITE_POL    0x00080000  /* Sleep duration write policy */
0876 #define AR5K_SLEEP_CTL_SLE_POL      0x00100000  /* Sleep policy mode */
0877 
0878 /*
0879  * Interrupt pending register
0880  */
0881 #define AR5K_INTPEND    0x4008
0882 #define AR5K_INTPEND_M  0x00000001
0883 
0884 /*
0885  * Sleep force register
0886  */
0887 #define AR5K_SFR    0x400c
0888 #define AR5K_SFR_EN 0x00000001
0889 
0890 /*
0891  * PCI configuration register
0892  * TODO: Fix LED stuff
0893  */
0894 #define AR5K_PCICFG         0x4010          /* Register Address */
0895 #define AR5K_PCICFG_EEAE        0x00000001  /* Eeprom access enable [5210] */
0896 #define AR5K_PCICFG_SLEEP_CLOCK_EN  0x00000002  /* Enable sleep clock */
0897 #define AR5K_PCICFG_CLKRUNEN        0x00000004  /* CLKRUN enable [5211+] */
0898 #define AR5K_PCICFG_EESIZE      0x00000018  /* Mask for EEPROM size [5211+] */
0899 #define AR5K_PCICFG_EESIZE_S        3
0900 #define AR5K_PCICFG_EESIZE_4K       0       /* 4K */
0901 #define AR5K_PCICFG_EESIZE_8K       1       /* 8K */
0902 #define AR5K_PCICFG_EESIZE_16K      2       /* 16K */
0903 #define AR5K_PCICFG_EESIZE_FAIL     3       /* Failed to get size [5211+] */
0904 #define AR5K_PCICFG_LED         0x00000060  /* Led status [5211+] */
0905 #define AR5K_PCICFG_LED_NONE        0x00000000  /* Default [5211+] */
0906 #define AR5K_PCICFG_LED_PEND        0x00000020  /* Scan / Auth pending */
0907 #define AR5K_PCICFG_LED_ASSOC       0x00000040  /* Associated */
0908 #define AR5K_PCICFG_BUS_SEL     0x00000380  /* Mask for "bus select" [5211+] (?) */
0909 #define AR5K_PCICFG_CBEFIX_DIS      0x00000400  /* Disable CBE fix */
0910 #define AR5K_PCICFG_SL_INTEN        0x00000800  /* Enable interrupts when asleep */
0911 #define AR5K_PCICFG_LED_BCTL        0x00001000  /* Led blink (?) [5210] */
0912 #define AR5K_PCICFG_RETRY_FIX       0x00001000  /* Enable pci core retry fix */
0913 #define AR5K_PCICFG_SL_INPEN        0x00002000  /* Sleep even with pending interrupts*/
0914 #define AR5K_PCICFG_SPWR_DN     0x00010000  /* Mask for power status */
0915 #define AR5K_PCICFG_LEDMODE     0x000e0000  /* Ledmode [5211+] */
0916 #define AR5K_PCICFG_LEDMODE_PROP    0x00000000  /* Blink on standard traffic [5211+] */
0917 #define AR5K_PCICFG_LEDMODE_PROM    0x00020000  /* Default mode (blink on any traffic) [5211+] */
0918 #define AR5K_PCICFG_LEDMODE_PWR     0x00040000  /* Some other blinking mode  (?) [5211+] */
0919 #define AR5K_PCICFG_LEDMODE_RAND    0x00060000  /* Random blinking (?) [5211+] */
0920 #define AR5K_PCICFG_LEDBLINK        0x00700000  /* Led blink rate */
0921 #define AR5K_PCICFG_LEDBLINK_S      20
0922 #define AR5K_PCICFG_LEDSLOW     0x00800000  /* Slowest led blink rate [5211+] */
0923 #define AR5K_PCICFG_LEDSTATE                \
0924     (AR5K_PCICFG_LED | AR5K_PCICFG_LEDMODE |    \
0925     AR5K_PCICFG_LEDBLINK | AR5K_PCICFG_LEDSLOW)
0926 #define AR5K_PCICFG_SLEEP_CLOCK_RATE    0x03000000  /* Sleep clock rate */
0927 #define AR5K_PCICFG_SLEEP_CLOCK_RATE_S  24
0928 
0929 /*
0930  * "General Purpose Input/Output" (GPIO) control register
0931  *
0932  * I'm not sure about this but after looking at the code
0933  * for all chipsets here is what i got.
0934  *
0935  * We have 6 GPIOs (pins), each GPIO has 4 modes (2 bits)
0936  * Mode 0 -> always input
0937  * Mode 1 -> output when GPIODO for this GPIO is set to 0
0938  * Mode 2 -> output when GPIODO for this GPIO is set to 1
0939  * Mode 3 -> always output
0940  *
0941  * For more infos check out get_gpio/set_gpio and
0942  * set_gpio_input/set_gpio_output functs.
0943  * For more infos on gpio interrupt check out set_gpio_intr.
0944  */
0945 #define AR5K_NUM_GPIO   6
0946 
0947 #define AR5K_GPIOCR     0x4014              /* Register Address */
0948 #define AR5K_GPIOCR_INT_ENA 0x00008000      /* Enable GPIO interrupt */
0949 #define AR5K_GPIOCR_INT_SELL    0x00000000      /* Generate interrupt when pin is low */
0950 #define AR5K_GPIOCR_INT_SELH    0x00010000      /* Generate interrupt when pin is high */
0951 #define AR5K_GPIOCR_IN(n)   (0 << ((n) * 2))    /* Mode 0 for pin n */
0952 #define AR5K_GPIOCR_OUT0(n) (1 << ((n) * 2))    /* Mode 1 for pin n */
0953 #define AR5K_GPIOCR_OUT1(n) (2 << ((n) * 2))    /* Mode 2 for pin n */
0954 #define AR5K_GPIOCR_OUT(n)  (3 << ((n) * 2))    /* Mode 3 for pin n */
0955 #define AR5K_GPIOCR_INT_SEL(n)  ((n) << 12)     /* Interrupt for GPIO pin n */
0956 
0957 /*
0958  * "General Purpose Input/Output" (GPIO) data output register
0959  */
0960 #define AR5K_GPIODO 0x4018
0961 
0962 /*
0963  * "General Purpose Input/Output" (GPIO) data input register
0964  */
0965 #define AR5K_GPIODI 0x401c
0966 #define AR5K_GPIODI_M   0x0000002f
0967 
0968 /*
0969  * Silicon revision register
0970  */
0971 #define AR5K_SREV       0x4020          /* Register Address */
0972 #define AR5K_SREV_REV       0x0000000f  /* Mask for revision */
0973 #define AR5K_SREV_REV_S     0
0974 #define AR5K_SREV_VER       0x000000ff  /* Mask for version */
0975 #define AR5K_SREV_VER_S     4
0976 
0977 /*
0978  * TXE write posting register
0979  */
0980 #define AR5K_TXEPOST    0x4028
0981 
0982 /*
0983  * QCU sleep mask
0984  */
0985 #define AR5K_QCU_SLEEP_MASK 0x402c
0986 
0987 /* 0x4068 is compression buffer configuration
0988  * register on 5414 and pm configuration register
0989  * on 5424 and newer pci-e chips. */
0990 
0991 /*
0992  * Compression buffer configuration
0993  * register (enable/disable) [5414]
0994  */
0995 #define AR5K_5414_CBCFG     0x4068
0996 #define AR5K_5414_CBCFG_BUF_DIS 0x10    /* Disable buffer */
0997 
0998 /*
0999  * PCI-E Power management configuration
1000  * and status register [5424+]
1001  */
1002 #define AR5K_PCIE_PM_CTL        0x4068          /* Register address */
1003 /* Only 5424 */
1004 #define AR5K_PCIE_PM_CTL_L1_WHEN_D2 0x00000001  /* enable PCIe core enter L1
1005                             when d2_sleep_en is asserted */
1006 #define AR5K_PCIE_PM_CTL_L0_L0S_CLEAR   0x00000002  /* Clear L0 and L0S counters */
1007 #define AR5K_PCIE_PM_CTL_L0_L0S_EN  0x00000004  /* Start L0 nd L0S counters */
1008 #define AR5K_PCIE_PM_CTL_LDRESET_EN 0x00000008  /* Enable reset when link goes
1009                             down */
1010 /* Wake On Wireless */
1011 #define AR5K_PCIE_PM_CTL_PME_EN     0x00000010  /* PME Enable */
1012 #define AR5K_PCIE_PM_CTL_AUX_PWR_DET    0x00000020  /* Aux power detect */
1013 #define AR5K_PCIE_PM_CTL_PME_CLEAR  0x00000040  /* Clear PME */
1014 #define AR5K_PCIE_PM_CTL_PSM_D0     0x00000080
1015 #define AR5K_PCIE_PM_CTL_PSM_D1     0x00000100
1016 #define AR5K_PCIE_PM_CTL_PSM_D2     0x00000200
1017 #define AR5K_PCIE_PM_CTL_PSM_D3     0x00000400
1018 
1019 /*
1020  * PCI-E Workaround enable register
1021  */
1022 #define AR5K_PCIE_WAEN  0x407c
1023 
1024 /*
1025  * PCI-E Serializer/Deserializer
1026  * registers
1027  */
1028 #define AR5K_PCIE_SERDES    0x4080
1029 #define AR5K_PCIE_SERDES_RESET  0x4084
1030 
1031 /*====EEPROM REGISTERS====*/
1032 
1033 /*
1034  * EEPROM access registers
1035  *
1036  * Here we got a difference between 5210/5211-12
1037  * read data register for 5210 is at 0x6800 and
1038  * status register is at 0x6c00. There is also
1039  * no eeprom command register on 5210 and the
1040  * offsets are different.
1041  *
1042  * To read eeprom data for a specific offset:
1043  * 5210 - enable eeprom access (AR5K_PCICFG_EEAE)
1044  *        read AR5K_EEPROM_BASE +(4 * offset)
1045  *        check the eeprom status register
1046  *        and read eeprom data register.
1047  *
1048  * 5211 - write offset to AR5K_EEPROM_BASE
1049  * 5212   write AR5K_EEPROM_CMD_READ on AR5K_EEPROM_CMD
1050  *        check the eeprom status register
1051  *        and read eeprom data register.
1052  *
1053  * To write eeprom data for a specific offset:
1054  * 5210 - enable eeprom access (AR5K_PCICFG_EEAE)
1055  *        write data to AR5K_EEPROM_BASE +(4 * offset)
1056  *        check the eeprom status register
1057  * 5211 - write AR5K_EEPROM_CMD_RESET on AR5K_EEPROM_CMD
1058  * 5212   write offset to AR5K_EEPROM_BASE
1059  *        write data to data register
1060  *    write AR5K_EEPROM_CMD_WRITE on AR5K_EEPROM_CMD
1061  *        check the eeprom status register
1062  *
1063  * For more infos check eeprom_* functs and the ar5k.c
1064  * file posted in madwifi-devel mailing list.
1065  * http://sourceforge.net/mailarchive/message.php?msg_id=8966525
1066  *
1067  */
1068 #define AR5K_EEPROM_BASE    0x6000
1069 
1070 /*
1071  * EEPROM data register
1072  */
1073 #define AR5K_EEPROM_DATA_5211   0x6004
1074 #define AR5K_EEPROM_DATA_5210   0x6800
1075 #define AR5K_EEPROM_DATA    (ah->ah_version == AR5K_AR5210 ? \
1076                 AR5K_EEPROM_DATA_5210 : AR5K_EEPROM_DATA_5211)
1077 
1078 /*
1079  * EEPROM command register
1080  */
1081 #define AR5K_EEPROM_CMD     0x6008          /* Register Address */
1082 #define AR5K_EEPROM_CMD_READ    0x00000001  /* EEPROM read */
1083 #define AR5K_EEPROM_CMD_WRITE   0x00000002  /* EEPROM write */
1084 #define AR5K_EEPROM_CMD_RESET   0x00000004  /* EEPROM reset */
1085 
1086 /*
1087  * EEPROM status register
1088  */
1089 #define AR5K_EEPROM_STAT_5210   0x6c00          /* Register Address [5210] */
1090 #define AR5K_EEPROM_STAT_5211   0x600c          /* Register Address [5211+] */
1091 #define AR5K_EEPROM_STATUS  (ah->ah_version == AR5K_AR5210 ? \
1092                 AR5K_EEPROM_STAT_5210 : AR5K_EEPROM_STAT_5211)
1093 #define AR5K_EEPROM_STAT_RDERR  0x00000001  /* EEPROM read failed */
1094 #define AR5K_EEPROM_STAT_RDDONE 0x00000002  /* EEPROM read successful */
1095 #define AR5K_EEPROM_STAT_WRERR  0x00000004  /* EEPROM write failed */
1096 #define AR5K_EEPROM_STAT_WRDONE 0x00000008  /* EEPROM write successful */
1097 
1098 /*
1099  * EEPROM config register
1100  */
1101 #define AR5K_EEPROM_CFG         0x6010          /* Register Address */
1102 #define AR5K_EEPROM_CFG_SIZE        0x00000003      /* Size determination override */
1103 #define AR5K_EEPROM_CFG_SIZE_AUTO   0
1104 #define AR5K_EEPROM_CFG_SIZE_4KBIT  1
1105 #define AR5K_EEPROM_CFG_SIZE_8KBIT  2
1106 #define AR5K_EEPROM_CFG_SIZE_16KBIT 3
1107 #define AR5K_EEPROM_CFG_WR_WAIT_DIS 0x00000004  /* Disable write wait */
1108 #define AR5K_EEPROM_CFG_CLK_RATE    0x00000018  /* Clock rate */
1109 #define AR5K_EEPROM_CFG_CLK_RATE_S      3
1110 #define AR5K_EEPROM_CFG_CLK_RATE_156KHZ 0
1111 #define AR5K_EEPROM_CFG_CLK_RATE_312KHZ 1
1112 #define AR5K_EEPROM_CFG_CLK_RATE_625KHZ 2
1113 #define AR5K_EEPROM_CFG_PROT_KEY    0x00ffff00      /* Protection key */
1114 #define AR5K_EEPROM_CFG_PROT_KEY_S  8
1115 #define AR5K_EEPROM_CFG_LIND_EN     0x01000000  /* Enable length indicator (?) */
1116 
1117 
1118 /*
1119  * TODO: Wake On Wireless registers
1120  * Range 0x7000 - 0x7ce0
1121  */
1122 
1123 /*
1124  * Protocol Control Unit (PCU) registers
1125  */
1126 /*
1127  * Used for checking initial register writes
1128  * during channel reset (see reset func)
1129  */
1130 #define AR5K_PCU_MIN    0x8000
1131 #define AR5K_PCU_MAX    0x8fff
1132 
1133 /*
1134  * First station id register (Lower 32 bits of MAC address)
1135  */
1136 #define AR5K_STA_ID0        0x8000
1137 #define AR5K_STA_ID0_ARRD_L32   0xffffffff
1138 
1139 /*
1140  * Second station id register (Upper 16 bits of MAC address + PCU settings)
1141  */
1142 #define AR5K_STA_ID1            0x8004          /* Register Address */
1143 #define AR5K_STA_ID1_ADDR_U16       0x0000ffff  /* Upper 16 bits of MAC address */
1144 #define AR5K_STA_ID1_AP         0x00010000  /* Set AP mode */
1145 #define AR5K_STA_ID1_ADHOC      0x00020000  /* Set Ad-Hoc mode */
1146 #define AR5K_STA_ID1_PWR_SV     0x00040000  /* Power save reporting */
1147 #define AR5K_STA_ID1_NO_KEYSRCH     0x00080000  /* No key search */
1148 #define AR5K_STA_ID1_NO_PSPOLL      0x00100000  /* No power save polling [5210] */
1149 #define AR5K_STA_ID1_PCF_5211       0x00100000  /* Enable PCF on [5211+] */
1150 #define AR5K_STA_ID1_PCF_5210       0x00200000  /* Enable PCF on [5210]*/
1151 #define AR5K_STA_ID1_PCF        (ah->ah_version == AR5K_AR5210 ? \
1152                     AR5K_STA_ID1_PCF_5210 : AR5K_STA_ID1_PCF_5211)
1153 #define AR5K_STA_ID1_DEFAULT_ANTENNA    0x00200000  /* Use default antenna */
1154 #define AR5K_STA_ID1_DESC_ANTENNA   0x00400000  /* Update antenna from descriptor */
1155 #define AR5K_STA_ID1_RTS_DEF_ANTENNA    0x00800000  /* Use default antenna for RTS */
1156 #define AR5K_STA_ID1_ACKCTS_6MB     0x01000000  /* Rate to use for ACK/CTS. 0: highest mandatory rate <= RX rate; 1: 1Mbps in B mode */
1157 #define AR5K_STA_ID1_BASE_RATE_11B  0x02000000  /* 802.11b base rate. 0: 1, 2, 5.5 and 11Mbps; 1: 1 and 2Mbps. [5211+] */
1158 #define AR5K_STA_ID1_SELFGEN_DEF_ANT    0x04000000  /* Use def. antenna for self generated frames */
1159 #define AR5K_STA_ID1_CRYPT_MIC_EN   0x08000000  /* Enable MIC */
1160 #define AR5K_STA_ID1_KEYSRCH_MODE   0x10000000  /* Look up key when key id != 0 */
1161 #define AR5K_STA_ID1_PRESERVE_SEQ_NUM   0x20000000  /* Preserve sequence number */
1162 #define AR5K_STA_ID1_CBCIV_ENDIAN   0x40000000  /* ??? */
1163 #define AR5K_STA_ID1_KEYSRCH_MCAST  0x80000000  /* Do key cache search for mcast frames */
1164 
1165 #define AR5K_STA_ID1_ANTENNA_SETTINGS   (AR5K_STA_ID1_DEFAULT_ANTENNA | \
1166                     AR5K_STA_ID1_DESC_ANTENNA | \
1167                     AR5K_STA_ID1_RTS_DEF_ANTENNA | \
1168                     AR5K_STA_ID1_SELFGEN_DEF_ANT)
1169 
1170 /*
1171  * First BSSID register (MAC address, lower 32bits)
1172  */
1173 #define AR5K_BSS_ID0    0x8008
1174 
1175 /*
1176  * Second BSSID register (MAC address in upper 16 bits)
1177  *
1178  * AID: Association ID
1179  */
1180 #define AR5K_BSS_ID1        0x800c
1181 #define AR5K_BSS_ID1_AID    0xffff0000
1182 #define AR5K_BSS_ID1_AID_S  16
1183 
1184 /*
1185  * Backoff slot time register
1186  */
1187 #define AR5K_SLOT_TIME  0x8010
1188 
1189 /*
1190  * ACK/CTS timeout register
1191  */
1192 #define AR5K_TIME_OUT       0x8014          /* Register Address */
1193 #define AR5K_TIME_OUT_ACK   0x00001fff  /* ACK timeout mask */
1194 #define AR5K_TIME_OUT_ACK_S 0
1195 #define AR5K_TIME_OUT_CTS   0x1fff0000  /* CTS timeout mask */
1196 #define AR5K_TIME_OUT_CTS_S 16
1197 
1198 /*
1199  * RSSI threshold register
1200  */
1201 #define AR5K_RSSI_THR           0x8018      /* Register Address */
1202 #define AR5K_RSSI_THR_M         0x000000ff  /* Mask for RSSI threshold [5211+] */
1203 #define AR5K_RSSI_THR_BMISS_5210    0x00000700  /* Mask for Beacon Missed threshold [5210] */
1204 #define AR5K_RSSI_THR_BMISS_5210_S  8
1205 #define AR5K_RSSI_THR_BMISS_5211    0x0000ff00  /* Mask for Beacon Missed threshold [5211+] */
1206 #define AR5K_RSSI_THR_BMISS_5211_S  8
1207 #define AR5K_RSSI_THR_BMISS     (ah->ah_version == AR5K_AR5210 ? \
1208                     AR5K_RSSI_THR_BMISS_5210 : AR5K_RSSI_THR_BMISS_5211)
1209 #define AR5K_RSSI_THR_BMISS_S       8
1210 
1211 /*
1212  * 5210 has more PCU registers because there is no QCU/DCU
1213  * so queue parameters are set here, this way a lot common
1214  * registers have different address for 5210. To make things
1215  * easier we define a macro based on ah->ah_version for common
1216  * registers with different addresses and common flags.
1217  */
1218 
1219 /*
1220  * Retry limit register
1221  *
1222  * Retry limit register for 5210 (no QCU/DCU so it's done in PCU)
1223  */
1224 #define AR5K_NODCU_RETRY_LMT        0x801c          /* Register Address */
1225 #define AR5K_NODCU_RETRY_LMT_SH_RETRY   0x0000000f  /* Short retry limit mask */
1226 #define AR5K_NODCU_RETRY_LMT_SH_RETRY_S 0
1227 #define AR5K_NODCU_RETRY_LMT_LG_RETRY   0x000000f0  /* Long retry mask */
1228 #define AR5K_NODCU_RETRY_LMT_LG_RETRY_S 4
1229 #define AR5K_NODCU_RETRY_LMT_SSH_RETRY  0x00003f00  /* Station short retry limit mask */
1230 #define AR5K_NODCU_RETRY_LMT_SSH_RETRY_S    8
1231 #define AR5K_NODCU_RETRY_LMT_SLG_RETRY  0x000fc000  /* Station long retry limit mask */
1232 #define AR5K_NODCU_RETRY_LMT_SLG_RETRY_S    14
1233 #define AR5K_NODCU_RETRY_LMT_CW_MIN 0x3ff00000  /* Minimum contention window mask */
1234 #define AR5K_NODCU_RETRY_LMT_CW_MIN_S   20
1235 
1236 /*
1237  * Transmit latency register
1238  */
1239 #define AR5K_USEC_5210          0x8020          /* Register Address [5210] */
1240 #define AR5K_USEC_5211          0x801c          /* Register Address [5211+] */
1241 #define AR5K_USEC           (ah->ah_version == AR5K_AR5210 ? \
1242                     AR5K_USEC_5210 : AR5K_USEC_5211)
1243 #define AR5K_USEC_1         0x0000007f  /* clock cycles for 1us */
1244 #define AR5K_USEC_1_S           0
1245 #define AR5K_USEC_32            0x00003f80  /* clock cycles for 1us while on 32MHz clock */
1246 #define AR5K_USEC_32_S          7
1247 #define AR5K_USEC_TX_LATENCY_5211   0x007fc000
1248 #define AR5K_USEC_TX_LATENCY_5211_S 14
1249 #define AR5K_USEC_RX_LATENCY_5211   0x1f800000
1250 #define AR5K_USEC_RX_LATENCY_5211_S 23
1251 #define AR5K_USEC_TX_LATENCY_5210   0x000fc000  /* also for 5311 */
1252 #define AR5K_USEC_TX_LATENCY_5210_S 14
1253 #define AR5K_USEC_RX_LATENCY_5210   0x03f00000  /* also for 5311 */
1254 #define AR5K_USEC_RX_LATENCY_5210_S 20
1255 
1256 /*
1257  * PCU beacon control register
1258  */
1259 #define AR5K_BEACON_5210    0x8024          /*Register Address [5210] */
1260 #define AR5K_BEACON_5211    0x8020          /*Register Address [5211+] */
1261 #define AR5K_BEACON     (ah->ah_version == AR5K_AR5210 ? \
1262                 AR5K_BEACON_5210 : AR5K_BEACON_5211)
1263 #define AR5K_BEACON_PERIOD  0x0000ffff  /* Mask for beacon period */
1264 #define AR5K_BEACON_PERIOD_S    0
1265 #define AR5K_BEACON_TIM     0x007f0000  /* Mask for TIM offset */
1266 #define AR5K_BEACON_TIM_S   16
1267 #define AR5K_BEACON_ENABLE  0x00800000  /* Enable beacons */
1268 #define AR5K_BEACON_RESET_TSF   0x01000000  /* Force TSF reset */
1269 
1270 /*
1271  * CFP period register
1272  */
1273 #define AR5K_CFP_PERIOD_5210    0x8028
1274 #define AR5K_CFP_PERIOD_5211    0x8024
1275 #define AR5K_CFP_PERIOD     (ah->ah_version == AR5K_AR5210 ? \
1276                 AR5K_CFP_PERIOD_5210 : AR5K_CFP_PERIOD_5211)
1277 
1278 /*
1279  * Next beacon time register
1280  */
1281 #define AR5K_TIMER0_5210    0x802c
1282 #define AR5K_TIMER0_5211    0x8028
1283 #define AR5K_TIMER0     (ah->ah_version == AR5K_AR5210 ? \
1284                 AR5K_TIMER0_5210 : AR5K_TIMER0_5211)
1285 
1286 /*
1287  * Next DMA beacon alert register
1288  */
1289 #define AR5K_TIMER1_5210    0x8030
1290 #define AR5K_TIMER1_5211    0x802c
1291 #define AR5K_TIMER1     (ah->ah_version == AR5K_AR5210 ? \
1292                 AR5K_TIMER1_5210 : AR5K_TIMER1_5211)
1293 
1294 /*
1295  * Next software beacon alert register
1296  */
1297 #define AR5K_TIMER2_5210    0x8034
1298 #define AR5K_TIMER2_5211    0x8030
1299 #define AR5K_TIMER2     (ah->ah_version == AR5K_AR5210 ? \
1300                 AR5K_TIMER2_5210 : AR5K_TIMER2_5211)
1301 
1302 /*
1303  * Next ATIM window time register
1304  */
1305 #define AR5K_TIMER3_5210    0x8038
1306 #define AR5K_TIMER3_5211    0x8034
1307 #define AR5K_TIMER3     (ah->ah_version == AR5K_AR5210 ? \
1308                 AR5K_TIMER3_5210 : AR5K_TIMER3_5211)
1309 
1310 
1311 /*
1312  * 5210 First inter frame spacing register (IFS)
1313  */
1314 #define AR5K_IFS0       0x8040
1315 #define AR5K_IFS0_SIFS      0x000007ff
1316 #define AR5K_IFS0_SIFS_S    0
1317 #define AR5K_IFS0_DIFS      0x007ff800
1318 #define AR5K_IFS0_DIFS_S    11
1319 
1320 /*
1321  * 5210 Second inter frame spacing register (IFS)
1322  */
1323 #define AR5K_IFS1       0x8044
1324 #define AR5K_IFS1_PIFS      0x00000fff
1325 #define AR5K_IFS1_PIFS_S    0
1326 #define AR5K_IFS1_EIFS      0x03fff000
1327 #define AR5K_IFS1_EIFS_S    12
1328 #define AR5K_IFS1_CS_EN     0x04000000
1329 #define AR5K_IFS1_CS_EN_S   26
1330 
1331 /*
1332  * CFP duration register
1333  */
1334 #define AR5K_CFP_DUR_5210   0x8048
1335 #define AR5K_CFP_DUR_5211   0x8038
1336 #define AR5K_CFP_DUR        (ah->ah_version == AR5K_AR5210 ? \
1337                 AR5K_CFP_DUR_5210 : AR5K_CFP_DUR_5211)
1338 
1339 /*
1340  * Receive filter register
1341  */
1342 #define AR5K_RX_FILTER_5210 0x804c          /* Register Address [5210] */
1343 #define AR5K_RX_FILTER_5211 0x803c          /* Register Address [5211+] */
1344 #define AR5K_RX_FILTER      (ah->ah_version == AR5K_AR5210 ? \
1345                 AR5K_RX_FILTER_5210 : AR5K_RX_FILTER_5211)
1346 #define AR5K_RX_FILTER_UCAST    0x00000001  /* Don't filter unicast frames */
1347 #define AR5K_RX_FILTER_MCAST    0x00000002  /* Don't filter multicast frames */
1348 #define AR5K_RX_FILTER_BCAST    0x00000004  /* Don't filter broadcast frames */
1349 #define AR5K_RX_FILTER_CONTROL  0x00000008  /* Don't filter control frames */
1350 #define AR5K_RX_FILTER_BEACON   0x00000010  /* Don't filter beacon frames */
1351 #define AR5K_RX_FILTER_PROM 0x00000020  /* Set promiscuous mode */
1352 #define AR5K_RX_FILTER_XRPOLL   0x00000040  /* Don't filter XR poll frame [5212+] */
1353 #define AR5K_RX_FILTER_PROBEREQ 0x00000080  /* Don't filter probe requests [5212+] */
1354 #define AR5K_RX_FILTER_PHYERR_5212  0x00000100  /* Don't filter phy errors [5212+] */
1355 #define AR5K_RX_FILTER_RADARERR_5212    0x00000200  /* Don't filter phy radar errors [5212+] */
1356 #define AR5K_RX_FILTER_PHYERR_5211  0x00000040  /* [5211] */
1357 #define AR5K_RX_FILTER_RADARERR_5211    0x00000080  /* [5211] */
1358 #define AR5K_RX_FILTER_PHYERR  \
1359     ((ah->ah_version == AR5K_AR5211 ? \
1360     AR5K_RX_FILTER_PHYERR_5211 : AR5K_RX_FILTER_PHYERR_5212))
1361 #define        AR5K_RX_FILTER_RADARERR \
1362     ((ah->ah_version == AR5K_AR5211 ? \
1363     AR5K_RX_FILTER_RADARERR_5211 : AR5K_RX_FILTER_RADARERR_5212))
1364 
1365 /*
1366  * Multicast filter register (lower 32 bits)
1367  */
1368 #define AR5K_MCAST_FILTER0_5210 0x8050
1369 #define AR5K_MCAST_FILTER0_5211 0x8040
1370 #define AR5K_MCAST_FILTER0  (ah->ah_version == AR5K_AR5210 ? \
1371                 AR5K_MCAST_FILTER0_5210 : AR5K_MCAST_FILTER0_5211)
1372 
1373 /*
1374  * Multicast filter register (higher 16 bits)
1375  */
1376 #define AR5K_MCAST_FILTER1_5210 0x8054
1377 #define AR5K_MCAST_FILTER1_5211 0x8044
1378 #define AR5K_MCAST_FILTER1  (ah->ah_version == AR5K_AR5210 ? \
1379                 AR5K_MCAST_FILTER1_5210 : AR5K_MCAST_FILTER1_5211)
1380 
1381 
1382 /*
1383  * Transmit mask register (lower 32 bits) [5210]
1384  */
1385 #define AR5K_TX_MASK0   0x8058
1386 
1387 /*
1388  * Transmit mask register (higher 16 bits) [5210]
1389  */
1390 #define AR5K_TX_MASK1   0x805c
1391 
1392 /*
1393  * Clear transmit mask [5210]
1394  */
1395 #define AR5K_CLR_TMASK  0x8060
1396 
1397 /*
1398  * Trigger level register (before transmission) [5210]
1399  */
1400 #define AR5K_TRIG_LVL   0x8064
1401 
1402 
1403 /*
1404  * PCU Diagnostic register
1405  *
1406  * Used for tweaking/diagnostics.
1407  */
1408 #define AR5K_DIAG_SW_5210       0x8068          /* Register Address [5210] */
1409 #define AR5K_DIAG_SW_5211       0x8048          /* Register Address [5211+] */
1410 #define AR5K_DIAG_SW            (ah->ah_version == AR5K_AR5210 ? \
1411                     AR5K_DIAG_SW_5210 : AR5K_DIAG_SW_5211)
1412 #define AR5K_DIAG_SW_DIS_WEP_ACK    0x00000001  /* Disable ACKs if WEP key is invalid */
1413 #define AR5K_DIAG_SW_DIS_ACK        0x00000002  /* Disable ACKs */
1414 #define AR5K_DIAG_SW_DIS_CTS        0x00000004  /* Disable CTSs */
1415 #define AR5K_DIAG_SW_DIS_ENC        0x00000008  /* Disable HW encryption */
1416 #define AR5K_DIAG_SW_DIS_DEC        0x00000010  /* Disable HW decryption */
1417 #define AR5K_DIAG_SW_DIS_TX_5210    0x00000020  /* Disable transmit [5210] */
1418 #define AR5K_DIAG_SW_DIS_RX_5210    0x00000040  /* Disable receive */
1419 #define AR5K_DIAG_SW_DIS_RX_5211    0x00000020
1420 #define AR5K_DIAG_SW_DIS_RX     (ah->ah_version == AR5K_AR5210 ? \
1421                     AR5K_DIAG_SW_DIS_RX_5210 : AR5K_DIAG_SW_DIS_RX_5211)
1422 #define AR5K_DIAG_SW_LOOP_BACK_5210 0x00000080  /* TX Data Loopback (i guess it goes with DIS_TX) [5210] */
1423 #define AR5K_DIAG_SW_LOOP_BACK_5211 0x00000040
1424 #define AR5K_DIAG_SW_LOOP_BACK      (ah->ah_version == AR5K_AR5210 ? \
1425                     AR5K_DIAG_SW_LOOP_BACK_5210 : AR5K_DIAG_SW_LOOP_BACK_5211)
1426 #define AR5K_DIAG_SW_CORR_FCS_5210  0x00000100  /* Generate invalid TX FCS */
1427 #define AR5K_DIAG_SW_CORR_FCS_5211  0x00000080
1428 #define AR5K_DIAG_SW_CORR_FCS       (ah->ah_version == AR5K_AR5210 ? \
1429                     AR5K_DIAG_SW_CORR_FCS_5210 : AR5K_DIAG_SW_CORR_FCS_5211)
1430 #define AR5K_DIAG_SW_CHAN_INFO_5210 0x00000200  /* Add 56 bytes of channel info before the frame data in the RX buffer */
1431 #define AR5K_DIAG_SW_CHAN_INFO_5211 0x00000100
1432 #define AR5K_DIAG_SW_CHAN_INFO      (ah->ah_version == AR5K_AR5210 ? \
1433                     AR5K_DIAG_SW_CHAN_INFO_5210 : AR5K_DIAG_SW_CHAN_INFO_5211)
1434 #define AR5K_DIAG_SW_EN_SCRAM_SEED_5210 0x00000400  /* Enable fixed scrambler seed */
1435 #define AR5K_DIAG_SW_EN_SCRAM_SEED_5211 0x00000200
1436 #define AR5K_DIAG_SW_EN_SCRAM_SEED  (ah->ah_version == AR5K_AR5210 ? \
1437                     AR5K_DIAG_SW_EN_SCRAM_SEED_5210 : AR5K_DIAG_SW_EN_SCRAM_SEED_5211)
1438 #define AR5K_DIAG_SW_ECO_ENABLE     0x00000400  /* [5211+] */
1439 #define AR5K_DIAG_SW_SCVRAM_SEED    0x0003f800  /* [5210] */
1440 #define AR5K_DIAG_SW_SCRAM_SEED_M   0x0001fc00  /* Scrambler seed mask */
1441 #define AR5K_DIAG_SW_SCRAM_SEED_S   10
1442 #define AR5K_DIAG_SW_DIS_SEQ_INC_5210   0x00040000  /* Disable seqnum increment (?)[5210] */
1443 #define AR5K_DIAG_SW_FRAME_NV0_5210 0x00080000
1444 #define AR5K_DIAG_SW_FRAME_NV0_5211 0x00020000  /* Accept frames of non-zero protocol number */
1445 #define AR5K_DIAG_SW_FRAME_NV0      (ah->ah_version == AR5K_AR5210 ? \
1446                     AR5K_DIAG_SW_FRAME_NV0_5210 : AR5K_DIAG_SW_FRAME_NV0_5211)
1447 #define AR5K_DIAG_SW_OBSPT_M        0x000c0000  /* Observation point select (?) */
1448 #define AR5K_DIAG_SW_OBSPT_S        18
1449 #define AR5K_DIAG_SW_RX_CLEAR_HIGH  0x00100000  /* Ignore carrier sense */
1450 #define AR5K_DIAG_SW_IGNORE_CARR_SENSE  0x00200000  /* Ignore virtual carrier sense */
1451 #define AR5K_DIAG_SW_CHANNEL_IDLE_HIGH  0x00400000  /* Force channel idle high */
1452 #define AR5K_DIAG_SW_PHEAR_ME       0x00800000  /* ??? */
1453 
1454 /*
1455  * TSF (clock) register (lower 32 bits)
1456  */
1457 #define AR5K_TSF_L32_5210   0x806c
1458 #define AR5K_TSF_L32_5211   0x804c
1459 #define AR5K_TSF_L32        (ah->ah_version == AR5K_AR5210 ? \
1460                 AR5K_TSF_L32_5210 : AR5K_TSF_L32_5211)
1461 
1462 /*
1463  * TSF (clock) register (higher 32 bits)
1464  */
1465 #define AR5K_TSF_U32_5210   0x8070
1466 #define AR5K_TSF_U32_5211   0x8050
1467 #define AR5K_TSF_U32        (ah->ah_version == AR5K_AR5210 ? \
1468                 AR5K_TSF_U32_5210 : AR5K_TSF_U32_5211)
1469 
1470 /*
1471  * Last beacon timestamp register (Read Only)
1472  */
1473 #define AR5K_LAST_TSTP  0x8080
1474 
1475 /*
1476  * ADDAC test register [5211+]
1477  */
1478 #define AR5K_ADDAC_TEST         0x8054          /* Register Address */
1479 #define AR5K_ADDAC_TEST_TXCONT      0x00000001  /* Test continuous tx */
1480 #define AR5K_ADDAC_TEST_TST_MODE    0x00000002  /* Test mode */
1481 #define AR5K_ADDAC_TEST_LOOP_EN     0x00000004  /* Enable loop */
1482 #define AR5K_ADDAC_TEST_LOOP_LEN    0x00000008  /* Loop length (field) */
1483 #define AR5K_ADDAC_TEST_USE_U8      0x00004000  /* Use upper 8 bits */
1484 #define AR5K_ADDAC_TEST_MSB     0x00008000  /* State of MSB */
1485 #define AR5K_ADDAC_TEST_TRIG_SEL    0x00010000  /* Trigger select */
1486 #define AR5K_ADDAC_TEST_TRIG_PTY    0x00020000  /* Trigger polarity */
1487 #define AR5K_ADDAC_TEST_RXCONT      0x00040000  /* Continuous capture */
1488 #define AR5K_ADDAC_TEST_CAPTURE     0x00080000  /* Begin capture */
1489 #define AR5K_ADDAC_TEST_TST_ARM     0x00100000  /* ARM rx buffer for capture */
1490 
1491 /*
1492  * Default antenna register [5211+]
1493  */
1494 #define AR5K_DEFAULT_ANTENNA    0x8058
1495 
1496 /*
1497  * Frame control QoS mask register (?) [5211+]
1498  * (FC_QOS_MASK)
1499  */
1500 #define AR5K_FRAME_CTL_QOSM 0x805c
1501 
1502 /*
1503  * Seq mask register (?) [5211+]
1504  */
1505 #define AR5K_SEQ_MASK   0x8060
1506 
1507 /*
1508  * Retry count register [5210]
1509  */
1510 #define AR5K_RETRY_CNT      0x8084          /* Register Address [5210] */
1511 #define AR5K_RETRY_CNT_SSH  0x0000003f  /* Station short retry count (?) */
1512 #define AR5K_RETRY_CNT_SLG  0x00000fc0  /* Station long retry count (?) */
1513 
1514 /*
1515  * Back-off status register [5210]
1516  */
1517 #define AR5K_BACKOFF        0x8088          /* Register Address [5210] */
1518 #define AR5K_BACKOFF_CW     0x000003ff  /* Backoff Contention Window (?) */
1519 #define AR5K_BACKOFF_CNT    0x03ff0000  /* Backoff count (?) */
1520 
1521 
1522 
1523 /*
1524  * NAV register (current)
1525  */
1526 #define AR5K_NAV_5210       0x808c
1527 #define AR5K_NAV_5211       0x8084
1528 #define AR5K_NAV        (ah->ah_version == AR5K_AR5210 ? \
1529                 AR5K_NAV_5210 : AR5K_NAV_5211)
1530 
1531 /*
1532  * MIB counters:
1533  *
1534  * max value is 0xc000, if this is reached we get a MIB interrupt.
1535  * they can be controlled via AR5K_MIBC and are cleared on read.
1536  */
1537 
1538 /*
1539  * RTS success (MIB counter)
1540  */
1541 #define AR5K_RTS_OK_5210    0x8090
1542 #define AR5K_RTS_OK_5211    0x8088
1543 #define AR5K_RTS_OK     (ah->ah_version == AR5K_AR5210 ? \
1544                 AR5K_RTS_OK_5210 : AR5K_RTS_OK_5211)
1545 
1546 /*
1547  * RTS failure (MIB counter)
1548  */
1549 #define AR5K_RTS_FAIL_5210  0x8094
1550 #define AR5K_RTS_FAIL_5211  0x808c
1551 #define AR5K_RTS_FAIL       (ah->ah_version == AR5K_AR5210 ? \
1552                 AR5K_RTS_FAIL_5210 : AR5K_RTS_FAIL_5211)
1553 
1554 /*
1555  * ACK failure (MIB counter)
1556  */
1557 #define AR5K_ACK_FAIL_5210  0x8098
1558 #define AR5K_ACK_FAIL_5211  0x8090
1559 #define AR5K_ACK_FAIL       (ah->ah_version == AR5K_AR5210 ? \
1560                 AR5K_ACK_FAIL_5210 : AR5K_ACK_FAIL_5211)
1561 
1562 /*
1563  * FCS failure (MIB counter)
1564  */
1565 #define AR5K_FCS_FAIL_5210  0x809c
1566 #define AR5K_FCS_FAIL_5211  0x8094
1567 #define AR5K_FCS_FAIL       (ah->ah_version == AR5K_AR5210 ? \
1568                 AR5K_FCS_FAIL_5210 : AR5K_FCS_FAIL_5211)
1569 
1570 /*
1571  * Beacon count register
1572  */
1573 #define AR5K_BEACON_CNT_5210    0x80a0
1574 #define AR5K_BEACON_CNT_5211    0x8098
1575 #define AR5K_BEACON_CNT     (ah->ah_version == AR5K_AR5210 ? \
1576                 AR5K_BEACON_CNT_5210 : AR5K_BEACON_CNT_5211)
1577 
1578 
1579 /*===5212 Specific PCU registers===*/
1580 
1581 /*
1582  * Transmit power control register
1583  */
1584 #define AR5K_TPC            0x80e8
1585 #define AR5K_TPC_ACK            0x0000003f  /* ack frames */
1586 #define AR5K_TPC_ACK_S          0
1587 #define AR5K_TPC_CTS            0x00003f00  /* cts frames */
1588 #define AR5K_TPC_CTS_S          8
1589 #define AR5K_TPC_CHIRP          0x003f0000  /* chirp frames */
1590 #define AR5K_TPC_CHIRP_S        16
1591 #define AR5K_TPC_DOPPLER        0x0f000000  /* doppler chirp span */
1592 #define AR5K_TPC_DOPPLER_S      24
1593 
1594 /*
1595  * XR (eXtended Range) mode register
1596  */
1597 #define AR5K_XRMODE         0x80c0          /* Register Address */
1598 #define AR5K_XRMODE_POLL_TYPE_M     0x0000003f  /* Mask for Poll type (?) */
1599 #define AR5K_XRMODE_POLL_TYPE_S     0
1600 #define AR5K_XRMODE_POLL_SUBTYPE_M  0x0000003c  /* Mask for Poll subtype (?) */
1601 #define AR5K_XRMODE_POLL_SUBTYPE_S  2
1602 #define AR5K_XRMODE_POLL_WAIT_ALL   0x00000080  /* Wait for poll */
1603 #define AR5K_XRMODE_SIFS_DELAY      0x000fff00  /* Mask for SIFS delay */
1604 #define AR5K_XRMODE_FRAME_HOLD_M    0xfff00000  /* Mask for frame hold (?) */
1605 #define AR5K_XRMODE_FRAME_HOLD_S    20
1606 
1607 /*
1608  * XR delay register
1609  */
1610 #define AR5K_XRDELAY            0x80c4          /* Register Address */
1611 #define AR5K_XRDELAY_SLOT_DELAY_M   0x0000ffff  /* Mask for slot delay */
1612 #define AR5K_XRDELAY_SLOT_DELAY_S   0
1613 #define AR5K_XRDELAY_CHIRP_DELAY_M  0xffff0000  /* Mask for CHIRP data delay */
1614 #define AR5K_XRDELAY_CHIRP_DELAY_S  16
1615 
1616 /*
1617  * XR timeout register
1618  */
1619 #define AR5K_XRTIMEOUT          0x80c8          /* Register Address */
1620 #define AR5K_XRTIMEOUT_CHIRP_M      0x0000ffff  /* Mask for CHIRP timeout */
1621 #define AR5K_XRTIMEOUT_CHIRP_S      0
1622 #define AR5K_XRTIMEOUT_POLL_M       0xffff0000  /* Mask for Poll timeout */
1623 #define AR5K_XRTIMEOUT_POLL_S       16
1624 
1625 /*
1626  * XR chirp register
1627  */
1628 #define AR5K_XRCHIRP            0x80cc          /* Register Address */
1629 #define AR5K_XRCHIRP_SEND       0x00000001  /* Send CHIRP */
1630 #define AR5K_XRCHIRP_GAP        0xffff0000  /* Mask for CHIRP gap (?) */
1631 
1632 /*
1633  * XR stomp register
1634  */
1635 #define AR5K_XRSTOMP            0x80d0          /* Register Address */
1636 #define AR5K_XRSTOMP_TX         0x00000001  /* Stomp Tx (?) */
1637 #define AR5K_XRSTOMP_RX         0x00000002  /* Stomp Rx (?) */
1638 #define AR5K_XRSTOMP_TX_RSSI        0x00000004  /* Stomp Tx RSSI (?) */
1639 #define AR5K_XRSTOMP_TX_BSSID       0x00000008  /* Stomp Tx BSSID (?) */
1640 #define AR5K_XRSTOMP_DATA       0x00000010  /* Stomp data (?)*/
1641 #define AR5K_XRSTOMP_RSSI_THRES     0x0000ff00  /* Mask for XR RSSI threshold */
1642 
1643 /*
1644  * First enhanced sleep register
1645  */
1646 #define AR5K_SLEEP0         0x80d4          /* Register Address */
1647 #define AR5K_SLEEP0_NEXT_DTIM       0x0007ffff  /* Mask for next DTIM (?) */
1648 #define AR5K_SLEEP0_NEXT_DTIM_S     0
1649 #define AR5K_SLEEP0_ASSUME_DTIM     0x00080000  /* Assume DTIM */
1650 #define AR5K_SLEEP0_ENH_SLEEP_EN    0x00100000  /* Enable enhanced sleep control */
1651 #define AR5K_SLEEP0_CABTO       0xff000000  /* Mask for CAB Time Out */
1652 #define AR5K_SLEEP0_CABTO_S     24
1653 
1654 /*
1655  * Second enhanced sleep register
1656  */
1657 #define AR5K_SLEEP1         0x80d8          /* Register Address */
1658 #define AR5K_SLEEP1_NEXT_TIM        0x0007ffff  /* Mask for next TIM (?) */
1659 #define AR5K_SLEEP1_NEXT_TIM_S      0
1660 #define AR5K_SLEEP1_BEACON_TO       0xff000000  /* Mask for Beacon Time Out */
1661 #define AR5K_SLEEP1_BEACON_TO_S     24
1662 
1663 /*
1664  * Third enhanced sleep register
1665  */
1666 #define AR5K_SLEEP2         0x80dc          /* Register Address */
1667 #define AR5K_SLEEP2_TIM_PER     0x0000ffff  /* Mask for TIM period (?) */
1668 #define AR5K_SLEEP2_TIM_PER_S       0
1669 #define AR5K_SLEEP2_DTIM_PER        0xffff0000  /* Mask for DTIM period (?) */
1670 #define AR5K_SLEEP2_DTIM_PER_S      16
1671 
1672 /*
1673  * TX power control (TPC) register
1674  *
1675  * XXX: PCDAC steps (0.5dBm) or dBm ?
1676  *
1677  */
1678 #define AR5K_TXPC           0x80e8          /* Register Address */
1679 #define AR5K_TXPC_ACK_M         0x0000003f  /* ACK tx power */
1680 #define AR5K_TXPC_ACK_S         0
1681 #define AR5K_TXPC_CTS_M         0x00003f00  /* CTS tx power */
1682 #define AR5K_TXPC_CTS_S         8
1683 #define AR5K_TXPC_CHIRP_M       0x003f0000  /* CHIRP tx power */
1684 #define AR5K_TXPC_CHIRP_S       16
1685 #define AR5K_TXPC_DOPPLER       0x0f000000  /* Doppler chirp span (?) */
1686 #define AR5K_TXPC_DOPPLER_S     24
1687 
1688 /*
1689  * Profile count registers
1690  *
1691  * These registers can be cleared and frozen with ATH5K_MIBC, but they do not
1692  * generate a MIB interrupt.
1693  * Instead of overflowing, they shift by one bit to the right. All registers
1694  * shift together, i.e. when one reaches the max, all shift at the same time by
1695  * one bit to the right. This way we should always get consistent values.
1696  */
1697 #define AR5K_PROFCNT_TX         0x80ec  /* Tx count */
1698 #define AR5K_PROFCNT_RX         0x80f0  /* Rx count */
1699 #define AR5K_PROFCNT_RXCLR      0x80f4  /* Busy count */
1700 #define AR5K_PROFCNT_CYCLE      0x80f8  /* Cycle counter */
1701 
1702 /*
1703  * Quiet period control registers
1704  */
1705 #define AR5K_QUIET_CTL1         0x80fc          /* Register Address */
1706 #define AR5K_QUIET_CTL1_NEXT_QT_TSF 0x0000ffff  /* Next quiet period TSF (TU) */
1707 #define AR5K_QUIET_CTL1_NEXT_QT_TSF_S   0
1708 #define AR5K_QUIET_CTL1_QT_EN       0x00010000  /* Enable quiet period */
1709 #define AR5K_QUIET_CTL1_ACK_CTS_EN  0x00020000  /* Send ACK/CTS during quiet period */
1710 
1711 #define AR5K_QUIET_CTL2         0x8100          /* Register Address */
1712 #define AR5K_QUIET_CTL2_QT_PER      0x0000ffff  /* Mask for quiet period periodicity */
1713 #define AR5K_QUIET_CTL2_QT_PER_S    0
1714 #define AR5K_QUIET_CTL2_QT_DUR      0xffff0000  /* Mask for quiet period duration */
1715 #define AR5K_QUIET_CTL2_QT_DUR_S    16
1716 
1717 /*
1718  * TSF parameter register
1719  */
1720 #define AR5K_TSF_PARM           0x8104          /* Register Address */
1721 #define AR5K_TSF_PARM_INC       0x000000ff  /* Mask for TSF increment */
1722 #define AR5K_TSF_PARM_INC_S     0
1723 
1724 /*
1725  * QoS NOACK policy
1726  */
1727 #define AR5K_QOS_NOACK          0x8108          /* Register Address */
1728 #define AR5K_QOS_NOACK_2BIT_VALUES  0x0000000f  /* ??? */
1729 #define AR5K_QOS_NOACK_2BIT_VALUES_S    0
1730 #define AR5K_QOS_NOACK_BIT_OFFSET   0x00000070  /* ??? */
1731 #define AR5K_QOS_NOACK_BIT_OFFSET_S 4
1732 #define AR5K_QOS_NOACK_BYTE_OFFSET  0x00000180  /* ??? */
1733 #define AR5K_QOS_NOACK_BYTE_OFFSET_S    7
1734 
1735 /*
1736  * PHY error filter register
1737  */
1738 #define AR5K_PHY_ERR_FIL        0x810c
1739 #define AR5K_PHY_ERR_FIL_RADAR      0x00000020  /* Radar signal */
1740 #define AR5K_PHY_ERR_FIL_OFDM       0x00020000  /* OFDM false detect (ANI) */
1741 #define AR5K_PHY_ERR_FIL_CCK        0x02000000  /* CCK false detect (ANI) */
1742 
1743 /*
1744  * XR latency register
1745  */
1746 #define AR5K_XRLAT_TX       0x8110
1747 
1748 /*
1749  * ACK SIFS register
1750  */
1751 #define AR5K_ACKSIFS        0x8114          /* Register Address */
1752 #define AR5K_ACKSIFS_INC    0x00000000  /* ACK SIFS Increment (field) */
1753 
1754 /*
1755  * MIC QoS control register (?)
1756  */
1757 #define AR5K_MIC_QOS_CTL        0x8118          /* Register Address */
1758 #define AR5K_MIC_QOS_CTL_OFF(_n)    (1 << (_n * 2))
1759 #define AR5K_MIC_QOS_CTL_MQ_EN      0x00010000  /* Enable MIC QoS */
1760 
1761 /*
1762  * MIC QoS select register (?)
1763  */
1764 #define AR5K_MIC_QOS_SEL        0x811c
1765 #define AR5K_MIC_QOS_SEL_OFF(_n)    (1 << (_n * 4))
1766 
1767 /*
1768  * Misc mode control register (?)
1769  */
1770 #define AR5K_MISC_MODE          0x8120          /* Register Address */
1771 #define AR5K_MISC_MODE_FBSSID_MATCH 0x00000001  /* Force BSSID match */
1772 #define AR5K_MISC_MODE_ACKSIFS_MEM  0x00000002  /* ACK SIFS memory (?) */
1773 #define AR5K_MISC_MODE_COMBINED_MIC 0x00000004  /* use rx/tx MIC key */
1774 /* more bits */
1775 
1776 /*
1777  * OFDM Filter counter
1778  */
1779 #define AR5K_OFDM_FIL_CNT       0x8124
1780 
1781 /*
1782  * CCK Filter counter
1783  */
1784 #define AR5K_CCK_FIL_CNT        0x8128
1785 
1786 /*
1787  * PHY Error Counters (same masks as AR5K_PHY_ERR_FIL)
1788  */
1789 #define AR5K_PHYERR_CNT1        0x812c
1790 #define AR5K_PHYERR_CNT1_MASK       0x8130
1791 
1792 #define AR5K_PHYERR_CNT2        0x8134
1793 #define AR5K_PHYERR_CNT2_MASK       0x8138
1794 
1795 /* if the PHY Error Counters reach this maximum, we get MIB interrupts */
1796 #define ATH5K_PHYERR_CNT_MAX        0x00c00000
1797 
1798 /*
1799  * TSF Threshold register (?)
1800  */
1801 #define AR5K_TSF_THRES          0x813c
1802 
1803 /*
1804  * TODO: Wake On Wireless registers
1805  * Range: 0x8147 - 0x818c
1806  */
1807 
1808 /*
1809  * Rate -> ACK SIFS mapping table (32 entries)
1810  */
1811 #define AR5K_RATE_ACKSIFS_BASE      0x8680          /* Register Address */
1812 #define AR5K_RATE_ACKSIFS(_n)       (AR5K_RATE_ACKSIFS_BSE + ((_n) << 2))
1813 #define AR5K_RATE_ACKSIFS_NORMAL    0x00000001  /* Normal SIFS (field) */
1814 #define AR5K_RATE_ACKSIFS_TURBO     0x00000400  /* Turbo SIFS (field) */
1815 
1816 /*
1817  * Rate -> duration mapping table (32 entries)
1818  */
1819 #define AR5K_RATE_DUR_BASE      0x8700
1820 #define AR5K_RATE_DUR(_n)       (AR5K_RATE_DUR_BASE + ((_n) << 2))
1821 
1822 /*
1823  * Rate -> db mapping table
1824  * (8 entries, each one has 4 8bit fields)
1825  */
1826 #define AR5K_RATE2DB_BASE       0x87c0
1827 #define AR5K_RATE2DB(_n)        (AR5K_RATE2DB_BASE + ((_n) << 2))
1828 
1829 /*
1830  * db -> Rate mapping table
1831  * (8 entries, each one has 4 8bit fields)
1832  */
1833 #define AR5K_DB2RATE_BASE       0x87e0
1834 #define AR5K_DB2RATE(_n)        (AR5K_DB2RATE_BASE + ((_n) << 2))
1835 
1836 /*===5212 end===*/
1837 
1838 #define AR5K_KEYTABLE_SIZE_5210     64
1839 #define AR5K_KEYTABLE_SIZE_5211     128
1840 
1841 /*===PHY REGISTERS===*/
1842 
1843 /*
1844  * PHY registers start
1845  */
1846 #define AR5K_PHY_BASE           0x9800
1847 #define AR5K_PHY(_n)            (AR5K_PHY_BASE + ((_n) << 2))
1848 
1849 /*
1850  * TST_2 (Misc config parameters)
1851  */
1852 #define AR5K_PHY_TST2           0x9800          /* Register Address */
1853 #define AR5K_PHY_TST2_TRIG_SEL      0x00000007  /* Trigger select (?)*/
1854 #define AR5K_PHY_TST2_TRIG      0x00000010  /* Trigger (?) */
1855 #define AR5K_PHY_TST2_CBUS_MODE     0x00000060  /* Cardbus mode (?) */
1856 #define AR5K_PHY_TST2_CLK32     0x00000400  /* CLK_OUT is CLK32 (32kHz external) */
1857 #define AR5K_PHY_TST2_CHANCOR_DUMP_EN   0x00000800  /* Enable Chancor dump (?) */
1858 #define AR5K_PHY_TST2_EVEN_CHANCOR_DUMP 0x00001000  /* Even Chancor dump (?) */
1859 #define AR5K_PHY_TST2_RFSILENT_EN   0x00002000  /* Enable RFSILENT */
1860 #define AR5K_PHY_TST2_ALT_RFDATA    0x00004000  /* Alternate RFDATA (5-2GHz switch ?) */
1861 #define AR5K_PHY_TST2_MINI_OBS_EN   0x00008000  /* Enable mini OBS (?) */
1862 #define AR5K_PHY_TST2_RX2_IS_RX5_INV    0x00010000  /* 2GHz rx path is the 5GHz path inverted (?) */
1863 #define AR5K_PHY_TST2_SLOW_CLK160   0x00020000  /* Slow CLK160 (?) */
1864 #define AR5K_PHY_TST2_AGC_OBS_SEL_3 0x00040000  /* AGC OBS Select 3 (?) */
1865 #define AR5K_PHY_TST2_BBB_OBS_SEL   0x00080000  /* BB OBS Select (field ?) */
1866 #define AR5K_PHY_TST2_ADC_OBS_SEL   0x00800000  /* ADC OBS Select (field ?) */
1867 #define AR5K_PHY_TST2_RX_CLR_SEL    0x08000000  /* RX Clear Select (?) */
1868 #define AR5K_PHY_TST2_FORCE_AGC_CLR 0x10000000  /* Force AGC clear (?) */
1869 #define AR5K_PHY_SHIFT_2GHZ     0x00004007  /* Used to access 2GHz radios */
1870 #define AR5K_PHY_SHIFT_5GHZ     0x00000007  /* Used to access 5GHz radios (default) */
1871 
1872 /*
1873  * PHY frame control register [5110] /turbo mode register [5111+]
1874  *
1875  * There is another frame control register for [5111+]
1876  * at address 0x9944 (see below) but the 2 first flags
1877  * are common here between 5110 frame control register
1878  * and [5111+] turbo mode register, so this also works as
1879  * a "turbo mode register" for 5110. We treat this one as
1880  * a frame control register for 5110 below.
1881  */
1882 #define AR5K_PHY_TURBO          0x9804          /* Register Address */
1883 #define AR5K_PHY_TURBO_MODE     0x00000001  /* Enable turbo mode */
1884 #define AR5K_PHY_TURBO_SHORT        0x00000002  /* Set short symbols to turbo mode */
1885 #define AR5K_PHY_TURBO_MIMO     0x00000004  /* Set turbo for mimo */
1886 
1887 /*
1888  * PHY agility command register
1889  * (aka TST_1)
1890  */
1891 #define AR5K_PHY_AGC            0x9808          /* Register Address */
1892 #define AR5K_PHY_TST1           0x9808
1893 #define AR5K_PHY_AGC_DISABLE        0x08000000  /* Disable AGC to A2 (?)*/
1894 #define AR5K_PHY_TST1_TXHOLD        0x00003800  /* Set tx hold (?) */
1895 #define AR5K_PHY_TST1_TXSRC_SRC     0x00000002  /* Used with bit 7 (?) */
1896 #define AR5K_PHY_TST1_TXSRC_SRC_S   1
1897 #define AR5K_PHY_TST1_TXSRC_ALT     0x00000080  /* Set input to tsdac (?) */
1898 #define AR5K_PHY_TST1_TXSRC_ALT_S   7
1899 
1900 
1901 /*
1902  * PHY timing register 3 [5112+]
1903  */
1904 #define AR5K_PHY_TIMING_3       0x9814
1905 #define AR5K_PHY_TIMING_3_DSC_MAN   0xfffe0000
1906 #define AR5K_PHY_TIMING_3_DSC_MAN_S 17
1907 #define AR5K_PHY_TIMING_3_DSC_EXP   0x0001e000
1908 #define AR5K_PHY_TIMING_3_DSC_EXP_S 13
1909 
1910 /*
1911  * PHY chip revision register
1912  */
1913 #define AR5K_PHY_CHIP_ID        0x9818
1914 
1915 /*
1916  * PHY activation register
1917  */
1918 #define AR5K_PHY_ACT            0x981c          /* Register Address */
1919 #define AR5K_PHY_ACT_ENABLE     0x00000001  /* Activate PHY */
1920 #define AR5K_PHY_ACT_DISABLE        0x00000002  /* Deactivate PHY */
1921 
1922 /*
1923  * PHY RF control registers
1924  */
1925 #define AR5K_PHY_RF_CTL2        0x9824          /* Register Address */
1926 #define AR5K_PHY_RF_CTL2_TXF2TXD_START  0x0000000f  /* TX frame to TX data start */
1927 #define AR5K_PHY_RF_CTL2_TXF2TXD_START_S    0
1928 
1929 #define AR5K_PHY_RF_CTL3        0x9828          /* Register Address */
1930 #define AR5K_PHY_RF_CTL3_TXE2XLNA_ON    0x0000ff00  /* TX end to XLNA on */
1931 #define AR5K_PHY_RF_CTL3_TXE2XLNA_ON_S  8
1932 
1933 #define AR5K_PHY_ADC_CTL            0x982c
1934 #define AR5K_PHY_ADC_CTL_INBUFGAIN_OFF      0x00000003
1935 #define AR5K_PHY_ADC_CTL_INBUFGAIN_OFF_S    0
1936 #define AR5K_PHY_ADC_CTL_PWD_DAC_OFF        0x00002000
1937 #define AR5K_PHY_ADC_CTL_PWD_BAND_GAP_OFF   0x00004000
1938 #define AR5K_PHY_ADC_CTL_PWD_ADC_OFF        0x00008000
1939 #define AR5K_PHY_ADC_CTL_INBUFGAIN_ON       0x00030000
1940 #define AR5K_PHY_ADC_CTL_INBUFGAIN_ON_S     16
1941 
1942 #define AR5K_PHY_RF_CTL4        0x9834          /* Register Address */
1943 #define AR5K_PHY_RF_CTL4_TXF2XPA_A_ON   0x00000001  /* TX frame to XPA A on (field) */
1944 #define AR5K_PHY_RF_CTL4_TXF2XPA_B_ON   0x00000100  /* TX frame to XPA B on (field) */
1945 #define AR5K_PHY_RF_CTL4_TXE2XPA_A_OFF  0x00010000  /* TX end to XPA A off (field) */
1946 #define AR5K_PHY_RF_CTL4_TXE2XPA_B_OFF  0x01000000  /* TX end to XPA B off (field) */
1947 
1948 /*
1949  * Pre-Amplifier control register
1950  * (XPA -> external pre-amplifier)
1951  */
1952 #define AR5K_PHY_PA_CTL         0x9838          /* Register Address */
1953 #define AR5K_PHY_PA_CTL_XPA_A_HI    0x00000001  /* XPA A high (?) */
1954 #define AR5K_PHY_PA_CTL_XPA_B_HI    0x00000002  /* XPA B high (?) */
1955 #define AR5K_PHY_PA_CTL_XPA_A_EN    0x00000004  /* Enable XPA A */
1956 #define AR5K_PHY_PA_CTL_XPA_B_EN    0x00000008  /* Enable XPA B */
1957 
1958 /*
1959  * PHY settling register
1960  */
1961 #define AR5K_PHY_SETTLING       0x9844          /* Register Address */
1962 #define AR5K_PHY_SETTLING_AGC       0x0000007f  /* AGC settling time */
1963 #define AR5K_PHY_SETTLING_AGC_S     0
1964 #define AR5K_PHY_SETTLING_SWITCH    0x00003f80  /* Switch settling time */
1965 #define AR5K_PHY_SETTLING_SWITCH_S  7
1966 
1967 /*
1968  * PHY Gain registers
1969  */
1970 #define AR5K_PHY_GAIN           0x9848          /* Register Address */
1971 #define AR5K_PHY_GAIN_TXRX_ATTEN    0x0003f000  /* TX-RX Attenuation */
1972 #define AR5K_PHY_GAIN_TXRX_ATTEN_S  12
1973 #define AR5K_PHY_GAIN_TXRX_RF_MAX   0x007c0000
1974 #define AR5K_PHY_GAIN_TXRX_RF_MAX_S 18
1975 
1976 #define AR5K_PHY_GAIN_OFFSET        0x984c          /* Register Address */
1977 #define AR5K_PHY_GAIN_OFFSET_RXTX_FLAG  0x00020000  /* RX-TX flag (?) */
1978 
1979 /*
1980  * Desired ADC/PGA size register
1981  * (for more infos read ANI patent)
1982  */
1983 #define AR5K_PHY_DESIRED_SIZE       0x9850          /* Register Address */
1984 #define AR5K_PHY_DESIRED_SIZE_ADC   0x000000ff  /* ADC desired size */
1985 #define AR5K_PHY_DESIRED_SIZE_ADC_S 0
1986 #define AR5K_PHY_DESIRED_SIZE_PGA   0x0000ff00  /* PGA desired size */
1987 #define AR5K_PHY_DESIRED_SIZE_PGA_S 8
1988 #define AR5K_PHY_DESIRED_SIZE_TOT   0x0ff00000  /* Total desired size */
1989 #define AR5K_PHY_DESIRED_SIZE_TOT_S 20
1990 
1991 /*
1992  * PHY signal register
1993  * (for more infos read ANI patent)
1994  */
1995 #define AR5K_PHY_SIG            0x9858          /* Register Address */
1996 #define AR5K_PHY_SIG_FIRSTEP        0x0003f000  /* FIRSTEP */
1997 #define AR5K_PHY_SIG_FIRSTEP_S      12
1998 #define AR5K_PHY_SIG_FIRPWR     0x03fc0000  /* FIPWR */
1999 #define AR5K_PHY_SIG_FIRPWR_S       18
2000 
2001 /*
2002  * PHY coarse agility control register
2003  * (for more infos read ANI patent)
2004  */
2005 #define AR5K_PHY_AGCCOARSE      0x985c          /* Register Address */
2006 #define AR5K_PHY_AGCCOARSE_LO       0x00007f80  /* AGC Coarse low */
2007 #define AR5K_PHY_AGCCOARSE_LO_S     7
2008 #define AR5K_PHY_AGCCOARSE_HI       0x003f8000  /* AGC Coarse high */
2009 #define AR5K_PHY_AGCCOARSE_HI_S     15
2010 
2011 /*
2012  * PHY agility control register
2013  */
2014 #define AR5K_PHY_AGCCTL         0x9860          /* Register address */
2015 #define AR5K_PHY_AGCCTL_CAL     0x00000001  /* Enable PHY calibration */
2016 #define AR5K_PHY_AGCCTL_NF      0x00000002  /* Enable Noise Floor calibration */
2017 #define AR5K_PHY_AGCCTL_OFDM_DIV_DIS    0x00000008  /* Disable antenna diversity on OFDM modes */
2018 #define AR5K_PHY_AGCCTL_NF_EN       0x00008000  /* Enable nf calibration to happen (?) */
2019 #define AR5K_PHY_AGCTL_FLTR_CAL     0x00010000  /* Allow filter calibration (?) */
2020 #define AR5K_PHY_AGCCTL_NF_NOUPDATE 0x00020000  /* Don't update nf automatically */
2021 
2022 /*
2023  * PHY noise floor status register (CCA = Clear Channel Assessment)
2024  */
2025 #define AR5K_PHY_NF         0x9864          /* Register address */
2026 #define AR5K_PHY_NF_M           0x000001ff  /* Noise floor, written to hardware in 1/2 dBm units */
2027 #define AR5K_PHY_NF_SVAL(_n)           (((_n) & AR5K_PHY_NF_M) | (1 << 9))
2028 #define AR5K_PHY_NF_THRESH62        0x0007f000  /* Thresh62 -check ANI patent- (field) */
2029 #define AR5K_PHY_NF_THRESH62_S      12
2030 #define AR5K_PHY_NF_MINCCA_PWR      0x0ff80000  /* Minimum measured noise level, read from hardware in 1 dBm units */
2031 #define AR5K_PHY_NF_MINCCA_PWR_S    19
2032 
2033 /*
2034  * PHY ADC saturation register [5110]
2035  */
2036 #define AR5K_PHY_ADCSAT         0x9868
2037 #define AR5K_PHY_ADCSAT_ICNT        0x0001f800
2038 #define AR5K_PHY_ADCSAT_ICNT_S      11
2039 #define AR5K_PHY_ADCSAT_THR     0x000007e0
2040 #define AR5K_PHY_ADCSAT_THR_S       5
2041 
2042 /*
2043  * PHY Weak ofdm signal detection threshold registers (ANI) [5212+]
2044  */
2045 
2046 /* High thresholds */
2047 #define AR5K_PHY_WEAK_OFDM_HIGH_THR     0x9868
2048 #define AR5K_PHY_WEAK_OFDM_HIGH_THR_M2_COUNT    0x0000001f
2049 #define AR5K_PHY_WEAK_OFDM_HIGH_THR_M2_COUNT_S  0
2050 #define AR5K_PHY_WEAK_OFDM_HIGH_THR_M1      0x00fe0000
2051 #define AR5K_PHY_WEAK_OFDM_HIGH_THR_M1_S    17
2052 #define AR5K_PHY_WEAK_OFDM_HIGH_THR_M2      0x7f000000
2053 #define AR5K_PHY_WEAK_OFDM_HIGH_THR_M2_S    24
2054 
2055 /* Low thresholds */
2056 #define AR5K_PHY_WEAK_OFDM_LOW_THR      0x986c
2057 #define AR5K_PHY_WEAK_OFDM_LOW_THR_SELFCOR_EN   0x00000001
2058 #define AR5K_PHY_WEAK_OFDM_LOW_THR_M2_COUNT 0x00003f00
2059 #define AR5K_PHY_WEAK_OFDM_LOW_THR_M2_COUNT_S   8
2060 #define AR5K_PHY_WEAK_OFDM_LOW_THR_M1       0x001fc000
2061 #define AR5K_PHY_WEAK_OFDM_LOW_THR_M1_S     14
2062 #define AR5K_PHY_WEAK_OFDM_LOW_THR_M2       0x0fe00000
2063 #define AR5K_PHY_WEAK_OFDM_LOW_THR_M2_S     21
2064 
2065 
2066 /*
2067  * PHY sleep registers [5112+]
2068  */
2069 #define AR5K_PHY_SCR            0x9870
2070 
2071 #define AR5K_PHY_SLMT           0x9874
2072 #define AR5K_PHY_SLMT_32MHZ     0x0000007f
2073 
2074 #define AR5K_PHY_SCAL           0x9878
2075 #define AR5K_PHY_SCAL_32MHZ     0x0000000e
2076 #define AR5K_PHY_SCAL_32MHZ_5311    0x00000008
2077 #define AR5K_PHY_SCAL_32MHZ_2417    0x0000000a
2078 #define AR5K_PHY_SCAL_32MHZ_HB63    0x00000032
2079 
2080 /*
2081  * PHY PLL (Phase Locked Loop) control register
2082  */
2083 #define AR5K_PHY_PLL            0x987c
2084 #define AR5K_PHY_PLL_20MHZ      0x00000013  /* For half rate (?) */
2085 /* 40MHz -> 5GHz band */
2086 #define AR5K_PHY_PLL_40MHZ_5211     0x00000018
2087 #define AR5K_PHY_PLL_40MHZ_5212     0x000000aa
2088 #define AR5K_PHY_PLL_40MHZ_5413     0x00000004
2089 #define AR5K_PHY_PLL_40MHZ      (ah->ah_version == AR5K_AR5211 ? \
2090                     AR5K_PHY_PLL_40MHZ_5211 : AR5K_PHY_PLL_40MHZ_5212)
2091 /* 44MHz -> 2.4GHz band */
2092 #define AR5K_PHY_PLL_44MHZ_5211     0x00000019
2093 #define AR5K_PHY_PLL_44MHZ_5212     0x000000ab
2094 #define AR5K_PHY_PLL_44MHZ      (ah->ah_version == AR5K_AR5211 ? \
2095                     AR5K_PHY_PLL_44MHZ_5211 : AR5K_PHY_PLL_44MHZ_5212)
2096 
2097 #define AR5K_PHY_PLL_RF5111     0x00000000
2098 #define AR5K_PHY_PLL_RF5112     0x00000040
2099 #define AR5K_PHY_PLL_HALF_RATE      0x00000100
2100 #define AR5K_PHY_PLL_QUARTER_RATE   0x00000200
2101 
2102 /*
2103  * RF Buffer register
2104  *
2105  * It's obvious from the code that 0x989c is the buffer register but
2106  * for the other special registers that we write to after sending each
2107  * packet, i have no idea. So I'll name them BUFFER_CONTROL_X registers
2108  * for now. It's interesting that they are also used for some other operations.
2109  */
2110 
2111 #define AR5K_RF_BUFFER          0x989c
2112 #define AR5K_RF_BUFFER_CONTROL_0    0x98c0  /* Channel on 5110 */
2113 #define AR5K_RF_BUFFER_CONTROL_1    0x98c4  /* Bank 7 on 5112 */
2114 #define AR5K_RF_BUFFER_CONTROL_2    0x98cc  /* Bank 7 on 5111 */
2115 
2116 #define AR5K_RF_BUFFER_CONTROL_3    0x98d0  /* Bank 2 on 5112 */
2117                         /* Channel set on 5111 */
2118                         /* Used to read radio revision*/
2119 
2120 #define AR5K_RF_BUFFER_CONTROL_4    0x98d4  /* RF Stage register on 5110 */
2121                         /* Bank 0,1,2,6 on 5111 */
2122                         /* Bank 1 on 5112 */
2123                         /* Used during activation on 5111 */
2124 
2125 #define AR5K_RF_BUFFER_CONTROL_5    0x98d8  /* Bank 3 on 5111 */
2126                         /* Used during activation on 5111 */
2127                         /* Channel on 5112 */
2128                         /* Bank 6 on 5112 */
2129 
2130 #define AR5K_RF_BUFFER_CONTROL_6    0x98dc  /* Bank 3 on 5112 */
2131 
2132 /*
2133  * PHY RF stage register [5210]
2134  */
2135 #define AR5K_PHY_RFSTG          0x98d4
2136 #define AR5K_PHY_RFSTG_DISABLE      0x00000021
2137 
2138 /*
2139  * BIN masks (?)
2140  */
2141 #define AR5K_PHY_BIN_MASK_1 0x9900
2142 #define AR5K_PHY_BIN_MASK_2 0x9904
2143 #define AR5K_PHY_BIN_MASK_3 0x9908
2144 
2145 #define AR5K_PHY_BIN_MASK_CTL       0x990c
2146 #define AR5K_PHY_BIN_MASK_CTL_MASK_4    0x00003fff
2147 #define AR5K_PHY_BIN_MASK_CTL_MASK_4_S  0
2148 #define AR5K_PHY_BIN_MASK_CTL_RATE  0xff000000
2149 #define AR5K_PHY_BIN_MASK_CTL_RATE_S    24
2150 
2151 /*
2152  * PHY Antenna control register
2153  */
2154 #define AR5K_PHY_ANT_CTL        0x9910          /* Register Address */
2155 #define AR5K_PHY_ANT_CTL_TXRX_EN    0x00000001  /* Enable TX/RX (?) */
2156 #define AR5K_PHY_ANT_CTL_SECTORED_ANT   0x00000004  /* Sectored Antenna */
2157 #define AR5K_PHY_ANT_CTL_HITUNE5    0x00000008  /* Hitune5 (?) */
2158 #define AR5K_PHY_ANT_CTL_SWTABLE_IDLE   0x000003f0  /* Switch table idle (?) */
2159 #define AR5K_PHY_ANT_CTL_SWTABLE_IDLE_S 4
2160 
2161 /*
2162  * PHY receiver delay register [5111+]
2163  */
2164 #define AR5K_PHY_RX_DELAY       0x9914          /* Register Address */
2165 #define AR5K_PHY_RX_DELAY_M     0x00003fff  /* Mask for RX activate to receive delay (/100ns) */
2166 
2167 /*
2168  * PHY max rx length register (?) [5111]
2169  */
2170 #define AR5K_PHY_MAX_RX_LEN     0x991c
2171 
2172 /*
2173  * PHY timing register 4
2174  * I(nphase)/Q(adrature) calibration register [5111+]
2175  */
2176 #define AR5K_PHY_IQ         0x9920          /* Register Address */
2177 #define AR5K_PHY_IQ_CORR_Q_Q_COFF   0x0000001f  /* Mask for q correction info */
2178 #define AR5K_PHY_IQ_CORR_Q_Q_COFF_S 0
2179 #define AR5K_PHY_IQ_CORR_Q_I_COFF   0x000007e0  /* Mask for i correction info */
2180 #define AR5K_PHY_IQ_CORR_Q_I_COFF_S 5
2181 #define AR5K_PHY_IQ_CORR_ENABLE     0x00000800  /* Enable i/q correction */
2182 #define AR5K_PHY_IQ_CAL_NUM_LOG_MAX 0x0000f000  /* Mask for max number of samples in log scale */
2183 #define AR5K_PHY_IQ_CAL_NUM_LOG_MAX_S   12
2184 #define AR5K_PHY_IQ_RUN         0x00010000  /* Run i/q calibration */
2185 #define AR5K_PHY_IQ_USE_PT_DF       0x00020000  /* Use pilot track df (?) */
2186 #define AR5K_PHY_IQ_EARLY_TRIG_THR  0x00200000  /* Early trigger threshold (?) (field) */
2187 #define AR5K_PHY_IQ_PILOT_MASK_EN   0x10000000  /* Enable pilot mask (?) */
2188 #define AR5K_PHY_IQ_CHAN_MASK_EN    0x20000000  /* Enable channel mask (?) */
2189 #define AR5K_PHY_IQ_SPUR_FILT_EN    0x40000000  /* Enable spur filter */
2190 #define AR5K_PHY_IQ_SPUR_RSSI_EN    0x80000000  /* Enable spur rssi */
2191 
2192 /*
2193  * PHY timing register 5
2194  * OFDM Self-correlator Cyclic RSSI threshold params
2195  * (Check out bb_cycpwr_thr1 on ANI patent)
2196  */
2197 #define AR5K_PHY_OFDM_SELFCORR          0x9924          /* Register Address */
2198 #define AR5K_PHY_OFDM_SELFCORR_CYPWR_THR1_EN    0x00000001  /* Enable cyclic RSSI thr 1 */
2199 #define AR5K_PHY_OFDM_SELFCORR_CYPWR_THR1   0x000000fe  /* Mask for Cyclic RSSI threshold 1 */
2200 #define AR5K_PHY_OFDM_SELFCORR_CYPWR_THR1_S 1
2201 #define AR5K_PHY_OFDM_SELFCORR_CYPWR_THR3   0x00000100  /* Cyclic RSSI threshold 3 (field) (?) */
2202 #define AR5K_PHY_OFDM_SELFCORR_RSSI_1ATHR_EN    0x00008000  /* Enable 1A RSSI threshold (?) */
2203 #define AR5K_PHY_OFDM_SELFCORR_RSSI_1ATHR   0x00010000  /* 1A RSSI threshold (field) (?) */
2204 #define AR5K_PHY_OFDM_SELFCORR_LSCTHR_HIRSSI    0x00800000  /* Long sc threshold hi rssi (?) */
2205 
2206 /*
2207  * PHY-only warm reset register
2208  */
2209 #define AR5K_PHY_WARM_RESET     0x9928
2210 
2211 /*
2212  * PHY-only control register
2213  */
2214 #define AR5K_PHY_CTL            0x992c          /* Register Address */
2215 #define AR5K_PHY_CTL_RX_DRAIN_RATE  0x00000001  /* RX drain rate (?) */
2216 #define AR5K_PHY_CTL_LATE_TX_SIG_SYM    0x00000002  /* Late tx signal symbol (?) */
2217 #define AR5K_PHY_CTL_GEN_SCRAMBLER  0x00000004  /* Generate scrambler */
2218 #define AR5K_PHY_CTL_TX_ANT_SEL     0x00000008  /* TX antenna select */
2219 #define AR5K_PHY_CTL_TX_ANT_STATIC  0x00000010  /* Static TX antenna */
2220 #define AR5K_PHY_CTL_RX_ANT_SEL     0x00000020  /* RX antenna select */
2221 #define AR5K_PHY_CTL_RX_ANT_STATIC  0x00000040  /* Static RX antenna */
2222 #define AR5K_PHY_CTL_LOW_FREQ_SLE_EN    0x00000080  /* Enable low freq sleep */
2223 
2224 /*
2225  * PHY PAPD probe register [5111+]
2226  */
2227 #define AR5K_PHY_PAPD_PROBE     0x9930
2228 #define AR5K_PHY_PAPD_PROBE_SH_HI_PAR   0x00000001
2229 #define AR5K_PHY_PAPD_PROBE_PCDAC_BIAS  0x00000002
2230 #define AR5K_PHY_PAPD_PROBE_COMP_GAIN   0x00000040
2231 #define AR5K_PHY_PAPD_PROBE_TXPOWER 0x00007e00
2232 #define AR5K_PHY_PAPD_PROBE_TXPOWER_S   9
2233 #define AR5K_PHY_PAPD_PROBE_TX_NEXT 0x00008000
2234 #define AR5K_PHY_PAPD_PROBE_PREDIST_EN  0x00010000
2235 #define AR5K_PHY_PAPD_PROBE_TYPE    0x01800000  /* [5112+] */
2236 #define AR5K_PHY_PAPD_PROBE_TYPE_S  23
2237 #define AR5K_PHY_PAPD_PROBE_TYPE_OFDM   0
2238 #define AR5K_PHY_PAPD_PROBE_TYPE_XR 1
2239 #define AR5K_PHY_PAPD_PROBE_TYPE_CCK    2
2240 #define AR5K_PHY_PAPD_PROBE_GAINF   0xfe000000
2241 #define AR5K_PHY_PAPD_PROBE_GAINF_S 25
2242 #define AR5K_PHY_PAPD_PROBE_INI_5111    0x00004883  /* [5212+] */
2243 #define AR5K_PHY_PAPD_PROBE_INI_5112    0x00004882  /* [5212+] */
2244 
2245 /*
2246  * PHY TX rate power registers [5112+]
2247  */
2248 #define AR5K_PHY_TXPOWER_RATE1          0x9934
2249 #define AR5K_PHY_TXPOWER_RATE2          0x9938
2250 #define AR5K_PHY_TXPOWER_RATE_MAX       0x993c
2251 #define AR5K_PHY_TXPOWER_RATE_MAX_TPC_ENABLE    0x00000040
2252 #define AR5K_PHY_TXPOWER_RATE3          0xa234
2253 #define AR5K_PHY_TXPOWER_RATE4          0xa238
2254 
2255 /*
2256  * PHY frame control register [5111+]
2257  */
2258 #define AR5K_PHY_FRAME_CTL_5210     0x9804
2259 #define AR5K_PHY_FRAME_CTL_5211     0x9944
2260 #define AR5K_PHY_FRAME_CTL      (ah->ah_version == AR5K_AR5210 ? \
2261                     AR5K_PHY_FRAME_CTL_5210 : AR5K_PHY_FRAME_CTL_5211)
2262 /*---[5111+]---*/
2263 #define AR5K_PHY_FRAME_CTL_WIN_LEN  0x00000003  /* Force window length (?) */
2264 #define AR5K_PHY_FRAME_CTL_WIN_LEN_S    0
2265 #define AR5K_PHY_FRAME_CTL_TX_CLIP  0x00000038  /* Mask for tx clip (?) */
2266 #define AR5K_PHY_FRAME_CTL_TX_CLIP_S    3
2267 #define AR5K_PHY_FRAME_CTL_PREP_CHINFO  0x00010000  /* Prepend chan info */
2268 #define AR5K_PHY_FRAME_CTL_EMU      0x80000000
2269 #define AR5K_PHY_FRAME_CTL_EMU_S    31
2270 /*---[5110/5111]---*/
2271 #define AR5K_PHY_FRAME_CTL_TIMING_ERR   0x01000000  /* PHY timing error */
2272 #define AR5K_PHY_FRAME_CTL_PARITY_ERR   0x02000000  /* Parity error */
2273 #define AR5K_PHY_FRAME_CTL_ILLRATE_ERR  0x04000000  /* Illegal rate */
2274 #define AR5K_PHY_FRAME_CTL_ILLLEN_ERR   0x08000000  /* Illegal length */
2275 #define AR5K_PHY_FRAME_CTL_SERVICE_ERR  0x20000000
2276 #define AR5K_PHY_FRAME_CTL_TXURN_ERR    0x40000000  /* TX underrun */
2277 #define AR5K_PHY_FRAME_CTL_INI  \
2278             (AR5K_PHY_FRAME_CTL_SERVICE_ERR | \
2279              AR5K_PHY_FRAME_CTL_TXURN_ERR | \
2280              AR5K_PHY_FRAME_CTL_ILLLEN_ERR | \
2281              AR5K_PHY_FRAME_CTL_ILLRATE_ERR | \
2282              AR5K_PHY_FRAME_CTL_PARITY_ERR | \
2283              AR5K_PHY_FRAME_CTL_TIMING_ERR)
2284 
2285 /*
2286  * PHY Tx Power adjustment register [5212A+]
2287  */
2288 #define AR5K_PHY_TX_PWR_ADJ         0x994c
2289 #define AR5K_PHY_TX_PWR_ADJ_CCK_GAIN_DELTA  0x00000fc0
2290 #define AR5K_PHY_TX_PWR_ADJ_CCK_GAIN_DELTA_S    6
2291 #define AR5K_PHY_TX_PWR_ADJ_CCK_PCDAC_INDEX 0x00fc0000
2292 #define AR5K_PHY_TX_PWR_ADJ_CCK_PCDAC_INDEX_S   18
2293 
2294 /*
2295  * PHY radar detection register [5111+]
2296  */
2297 #define AR5K_PHY_RADAR          0x9954
2298 #define AR5K_PHY_RADAR_ENABLE       0x00000001
2299 #define AR5K_PHY_RADAR_DISABLE      0x00000000
2300 #define AR5K_PHY_RADAR_INBANDTHR    0x0000003e  /* Inband threshold
2301                             5-bits, units unknown {0..31}
2302                             (? MHz ?) */
2303 #define AR5K_PHY_RADAR_INBANDTHR_S  1
2304 
2305 #define AR5K_PHY_RADAR_PRSSI_THR    0x00000fc0  /* Pulse RSSI/SNR threshold
2306                             6-bits, dBm range {0..63}
2307                             in dBm units. */
2308 #define AR5K_PHY_RADAR_PRSSI_THR_S  6
2309 
2310 #define AR5K_PHY_RADAR_PHEIGHT_THR  0x0003f000  /* Pulse height threshold
2311                             6-bits, dBm range {0..63}
2312                             in dBm units. */
2313 #define AR5K_PHY_RADAR_PHEIGHT_THR_S    12
2314 
2315 #define AR5K_PHY_RADAR_RSSI_THR     0x00fc0000  /* Radar RSSI/SNR threshold.
2316                             6-bits, dBm range {0..63}
2317                             in dBm units. */
2318 #define AR5K_PHY_RADAR_RSSI_THR_S   18
2319 
2320 #define AR5K_PHY_RADAR_FIRPWR_THR   0x7f000000  /* Finite Impulse Response
2321                             filter power out threshold.
2322                             7-bits, standard power range
2323                             {0..127} in 1/2 dBm units. */
2324 #define AR5K_PHY_RADAR_FIRPWR_THRS  24
2325 
2326 /*
2327  * PHY antenna switch table registers
2328  */
2329 #define AR5K_PHY_ANT_SWITCH_TABLE_0 0x9960
2330 #define AR5K_PHY_ANT_SWITCH_TABLE_1 0x9964
2331 
2332 /*
2333  * PHY Noise floor threshold
2334  */
2335 #define AR5K_PHY_NFTHRES        0x9968
2336 
2337 /*
2338  * Sigma Delta register (?) [5213]
2339  */
2340 #define AR5K_PHY_SIGMA_DELTA        0x996C
2341 #define AR5K_PHY_SIGMA_DELTA_ADC_SEL    0x00000003
2342 #define AR5K_PHY_SIGMA_DELTA_ADC_SEL_S  0
2343 #define AR5K_PHY_SIGMA_DELTA_FILT2  0x000000f8
2344 #define AR5K_PHY_SIGMA_DELTA_FILT2_S    3
2345 #define AR5K_PHY_SIGMA_DELTA_FILT1  0x00001f00
2346 #define AR5K_PHY_SIGMA_DELTA_FILT1_S    8
2347 #define AR5K_PHY_SIGMA_DELTA_ADC_CLIP   0x01ffe000
2348 #define AR5K_PHY_SIGMA_DELTA_ADC_CLIP_S 13
2349 
2350 /*
2351  * RF restart register [5112+] (?)
2352  */
2353 #define AR5K_PHY_RESTART        0x9970      /* restart */
2354 #define AR5K_PHY_RESTART_DIV_GC     0x001c0000  /* Fast diversity gc_limit (?) */
2355 #define AR5K_PHY_RESTART_DIV_GC_S   18
2356 
2357 /*
2358  * RF Bus access request register (for synth-only channel switching)
2359  */
2360 #define AR5K_PHY_RFBUS_REQ      0x997C
2361 #define AR5K_PHY_RFBUS_REQ_REQUEST  0x00000001
2362 
2363 /*
2364  * Spur mitigation masks (?)
2365  */
2366 #define AR5K_PHY_TIMING_7       0x9980
2367 #define AR5K_PHY_TIMING_8       0x9984
2368 #define AR5K_PHY_TIMING_8_PILOT_MASK_2      0x000fffff
2369 #define AR5K_PHY_TIMING_8_PILOT_MASK_2_S    0
2370 
2371 #define AR5K_PHY_BIN_MASK2_1        0x9988
2372 #define AR5K_PHY_BIN_MASK2_2        0x998c
2373 #define AR5K_PHY_BIN_MASK2_3        0x9990
2374 
2375 #define AR5K_PHY_BIN_MASK2_4        0x9994
2376 #define AR5K_PHY_BIN_MASK2_4_MASK_4 0x00003fff
2377 #define AR5K_PHY_BIN_MASK2_4_MASK_4_S   0
2378 
2379 #define AR5K_PHY_TIMING_9           0x9998
2380 #define AR5K_PHY_TIMING_10          0x999c
2381 #define AR5K_PHY_TIMING_10_PILOT_MASK_2     0x000fffff
2382 #define AR5K_PHY_TIMING_10_PILOT_MASK_2_S   0
2383 
2384 /*
2385  * Spur mitigation control
2386  */
2387 #define AR5K_PHY_TIMING_11          0x99a0      /* Register address */
2388 #define AR5K_PHY_TIMING_11_SPUR_DELTA_PHASE 0x000fffff  /* Spur delta phase */
2389 #define AR5K_PHY_TIMING_11_SPUR_DELTA_PHASE_S   0
2390 #define AR5K_PHY_TIMING_11_SPUR_FREQ_SD     0x3ff00000  /* Freq sigma delta */
2391 #define AR5K_PHY_TIMING_11_SPUR_FREQ_SD_S   20
2392 #define AR5K_PHY_TIMING_11_USE_SPUR_IN_AGC  0x40000000  /* Spur filter in AGC detector */
2393 #define AR5K_PHY_TIMING_11_USE_SPUR_IN_SELFCOR  0x80000000  /* Spur filter in OFDM self correlator */
2394 
2395 /*
2396  * Gain tables
2397  */
2398 #define AR5K_BB_GAIN_BASE       0x9b00  /* BaseBand Amplifier Gain table base address */
2399 #define AR5K_BB_GAIN(_n)        (AR5K_BB_GAIN_BASE + ((_n) << 2))
2400 #define AR5K_RF_GAIN_BASE       0x9a00  /* RF Amplifier Gain table base address */
2401 #define AR5K_RF_GAIN(_n)        (AR5K_RF_GAIN_BASE + ((_n) << 2))
2402 
2403 /*
2404  * PHY timing IQ calibration result register [5111+]
2405  */
2406 #define AR5K_PHY_IQRES_CAL_PWR_I    0x9c10  /* I (Inphase) power value */
2407 #define AR5K_PHY_IQRES_CAL_PWR_Q    0x9c14  /* Q (Quadrature) power value */
2408 #define AR5K_PHY_IQRES_CAL_CORR     0x9c18  /* I/Q Correlation */
2409 
2410 /*
2411  * PHY current RSSI register [5111+]
2412  */
2413 #define AR5K_PHY_CURRENT_RSSI   0x9c1c
2414 
2415 /*
2416  * PHY RF Bus grant register
2417  */
2418 #define AR5K_PHY_RFBUS_GRANT    0x9c20
2419 #define AR5K_PHY_RFBUS_GRANT_OK 0x00000001
2420 
2421 /*
2422  * PHY ADC test register
2423  */
2424 #define AR5K_PHY_ADC_TEST   0x9c24
2425 #define AR5K_PHY_ADC_TEST_I 0x00000001
2426 #define AR5K_PHY_ADC_TEST_Q 0x00000200
2427 
2428 /*
2429  * PHY DAC test register
2430  */
2431 #define AR5K_PHY_DAC_TEST   0x9c28
2432 #define AR5K_PHY_DAC_TEST_I 0x00000001
2433 #define AR5K_PHY_DAC_TEST_Q 0x00000200
2434 
2435 /*
2436  * PHY PTAT register (?)
2437  */
2438 #define AR5K_PHY_PTAT       0x9c2c
2439 
2440 /*
2441  * PHY Illegal TX rate register [5112+]
2442  */
2443 #define AR5K_PHY_BAD_TX_RATE    0x9c30
2444 
2445 /*
2446  * PHY SPUR Power register [5112+]
2447  */
2448 #define AR5K_PHY_SPUR_PWR   0x9c34          /* Register Address */
2449 #define AR5K_PHY_SPUR_PWR_I 0x00000001  /* SPUR Power estimate for I (field) */
2450 #define AR5K_PHY_SPUR_PWR_Q 0x00000100  /* SPUR Power estimate for Q (field) */
2451 #define AR5K_PHY_SPUR_PWR_FILT  0x00010000  /* Power with SPUR removed (field) */
2452 
2453 /*
2454  * PHY Channel status register [5112+] (?)
2455  */
2456 #define AR5K_PHY_CHAN_STATUS        0x9c38
2457 #define AR5K_PHY_CHAN_STATUS_BT_ACT 0x00000001
2458 #define AR5K_PHY_CHAN_STATUS_RX_CLR_RAW 0x00000002
2459 #define AR5K_PHY_CHAN_STATUS_RX_CLR_MAC 0x00000004
2460 #define AR5K_PHY_CHAN_STATUS_RX_CLR_PAP 0x00000008
2461 
2462 /*
2463  * Heavy clip enable register
2464  */
2465 #define AR5K_PHY_HEAVY_CLIP_ENABLE  0x99e0
2466 
2467 /*
2468  * PHY clock sleep registers [5112+]
2469  */
2470 #define AR5K_PHY_SCLOCK         0x99f0
2471 #define AR5K_PHY_SCLOCK_32MHZ       0x0000000c
2472 #define AR5K_PHY_SDELAY         0x99f4
2473 #define AR5K_PHY_SDELAY_32MHZ       0x000000ff
2474 #define AR5K_PHY_SPENDING       0x99f8
2475 
2476 
2477 /*
2478  * PHY PAPD I (power?) table (?)
2479  * (92! entries)
2480  */
2481 #define AR5K_PHY_PAPD_I_BASE    0xa000
2482 #define AR5K_PHY_PAPD_I(_n) (AR5K_PHY_PAPD_I_BASE + ((_n) << 2))
2483 
2484 /*
2485  * PHY PCDAC TX power table
2486  */
2487 #define AR5K_PHY_PCDAC_TXPOWER_BASE 0xa180
2488 #define AR5K_PHY_PCDAC_TXPOWER(_n)  (AR5K_PHY_PCDAC_TXPOWER_BASE + ((_n) << 2))
2489 
2490 /*
2491  * PHY mode register [5111+]
2492  */
2493 #define AR5K_PHY_MODE           0x0a200         /* Register Address */
2494 #define AR5K_PHY_MODE_MOD       0x00000001  /* PHY Modulation bit */
2495 #define AR5K_PHY_MODE_MOD_OFDM      0
2496 #define AR5K_PHY_MODE_MOD_CCK       1
2497 #define AR5K_PHY_MODE_FREQ      0x00000002  /* Freq mode bit */
2498 #define AR5K_PHY_MODE_FREQ_5GHZ     0
2499 #define AR5K_PHY_MODE_FREQ_2GHZ     2
2500 #define AR5K_PHY_MODE_MOD_DYN       0x00000004  /* Enable Dynamic OFDM/CCK mode [5112+] */
2501 #define AR5K_PHY_MODE_RAD       0x00000008  /* [5212+] */
2502 #define AR5K_PHY_MODE_RAD_RF5111    0
2503 #define AR5K_PHY_MODE_RAD_RF5112    8
2504 #define AR5K_PHY_MODE_XR        0x00000010  /* Enable XR mode [5112+] */
2505 #define AR5K_PHY_MODE_HALF_RATE     0x00000020  /* Enable Half rate (test) */
2506 #define AR5K_PHY_MODE_QUARTER_RATE  0x00000040  /* Enable Quarter rat (test) */
2507 
2508 /*
2509  * PHY CCK transmit control register [5111+ (?)]
2510  */
2511 #define AR5K_PHY_CCKTXCTL       0xa204
2512 #define AR5K_PHY_CCKTXCTL_WORLD     0x00000000
2513 #define AR5K_PHY_CCKTXCTL_JAPAN     0x00000010
2514 #define AR5K_PHY_CCKTXCTL_SCRAMBLER_DIS 0x00000001
2515 #define AR5K_PHY_CCKTXCTK_DAC_SCALE 0x00000004
2516 
2517 /*
2518  * PHY CCK Cross-correlator Barker RSSI threshold register [5212+]
2519  */
2520 #define AR5K_PHY_CCK_CROSSCORR          0xa208
2521 #define AR5K_PHY_CCK_CROSSCORR_WEAK_SIG_THR 0x0000003f
2522 #define AR5K_PHY_CCK_CROSSCORR_WEAK_SIG_THR_S   0
2523 
2524 /* Same address is used for antenna diversity activation */
2525 #define AR5K_PHY_FAST_ANT_DIV       0xa208
2526 #define AR5K_PHY_FAST_ANT_DIV_EN    0x00002000
2527 
2528 /*
2529  * PHY 2GHz gain register [5111+]
2530  */
2531 #define AR5K_PHY_GAIN_2GHZ          0xa20c
2532 #define AR5K_PHY_GAIN_2GHZ_MARGIN_TXRX      0x00fc0000
2533 #define AR5K_PHY_GAIN_2GHZ_MARGIN_TXRX_S    18
2534 #define AR5K_PHY_GAIN_2GHZ_INI_5111     0x6480416c
2535 
2536 #define AR5K_PHY_CCK_RX_CTL_4           0xa21c
2537 #define AR5K_PHY_CCK_RX_CTL_4_FREQ_EST_SHORT    0x01f80000
2538 #define AR5K_PHY_CCK_RX_CTL_4_FREQ_EST_SHORT_S  19
2539 
2540 #define AR5K_PHY_DAG_CCK_CTL            0xa228
2541 #define AR5K_PHY_DAG_CCK_CTL_EN_RSSI_THR    0x00000200
2542 #define AR5K_PHY_DAG_CCK_CTL_RSSI_THR       0x0001fc00
2543 #define AR5K_PHY_DAG_CCK_CTL_RSSI_THR_S     10
2544 
2545 #define AR5K_PHY_FAST_ADC   0xa24c
2546 
2547 #define AR5K_PHY_BLUETOOTH  0xa254
2548 
2549 /*
2550  * Transmit Power Control register
2551  * [2413+]
2552  */
2553 #define AR5K_PHY_TPC_RG1        0xa258
2554 #define AR5K_PHY_TPC_RG1_NUM_PD_GAIN    0x0000c000
2555 #define AR5K_PHY_TPC_RG1_NUM_PD_GAIN_S  14
2556 #define AR5K_PHY_TPC_RG1_PDGAIN_1   0x00030000
2557 #define AR5K_PHY_TPC_RG1_PDGAIN_1_S 16
2558 #define AR5K_PHY_TPC_RG1_PDGAIN_2   0x000c0000
2559 #define AR5K_PHY_TPC_RG1_PDGAIN_2_S 18
2560 #define AR5K_PHY_TPC_RG1_PDGAIN_3   0x00300000
2561 #define AR5K_PHY_TPC_RG1_PDGAIN_3_S 20
2562 
2563 #define AR5K_PHY_TPC_RG5            0xa26C
2564 #define AR5K_PHY_TPC_RG5_PD_GAIN_OVERLAP    0x0000000F
2565 #define AR5K_PHY_TPC_RG5_PD_GAIN_OVERLAP_S  0
2566 #define AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_1 0x000003F0
2567 #define AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_1_S   4
2568 #define AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_2 0x0000FC00
2569 #define AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_2_S   10
2570 #define AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_3 0x003F0000
2571 #define AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_3_S   16
2572 #define AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_4 0x0FC00000
2573 #define AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_4_S   22
2574 
2575 /*
2576  * PHY PDADC Tx power table
2577  */
2578 #define AR5K_PHY_PDADC_TXPOWER_BASE 0xa280
2579 #define AR5K_PHY_PDADC_TXPOWER(_n)  (AR5K_PHY_PDADC_TXPOWER_BASE + ((_n) << 2))
2580 
2581 /*
2582  * Platform registers for WiSoC
2583  */
2584 #define AR5K_AR5312_RESET       0xbc003020
2585 #define AR5K_AR5312_RESET_BB0_COLD  0x00000004
2586 #define AR5K_AR5312_RESET_BB1_COLD  0x00000200
2587 #define AR5K_AR5312_RESET_WMAC0     0x00002000
2588 #define AR5K_AR5312_RESET_BB0_WARM  0x00004000
2589 #define AR5K_AR5312_RESET_WMAC1     0x00020000
2590 #define AR5K_AR5312_RESET_BB1_WARM  0x00040000
2591 
2592 #define AR5K_AR5312_ENABLE      0xbc003080
2593 #define AR5K_AR5312_ENABLE_WLAN0    0x00000001
2594 #define AR5K_AR5312_ENABLE_WLAN1    0x00000008
2595 
2596 #define AR5K_AR2315_RESET       0xb1000004
2597 #define AR5K_AR2315_RESET_WMAC      0x00000001
2598 #define AR5K_AR2315_RESET_BB_WARM   0x00000002
2599 
2600 #define AR5K_AR2315_AHB_ARB_CTL     0xb1000008
2601 #define AR5K_AR2315_AHB_ARB_CTL_WLAN    0x00000002
2602 
2603 #define AR5K_AR2315_BYTESWAP    0xb100000c
2604 #define AR5K_AR2315_BYTESWAP_WMAC   0x00000002